BSOD 0x000000f4

Docfxit

Contributor
Joined
Feb 22, 2015
Posts
248
I can't boot into normal windows or safe mode.
I'm getting a BSOD 0xF4.
Running Win7 32bit

Please help me fix this.

Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-05-2019 01
Ran by SYSTEM on MININT-VTNFI8U (15-05-2019 22:22:38)
Running from H:\SR
Platform: Windows 7 Ultimate Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.[/b]

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Client Access Service] => C:\Programs\Client Access\cwbsvstr.exe [14848 2009-12-08] (IBM Corporation)
HKLM\...\Run: [ClipX] => C:\Programs\ClipX\clipx.exe [199168 2008-07-27] ()
HKLM\...\Run: [IconSaver] => C:\Programs\IconSaver\IconSaver.exe [110592 2004-01-12] ()
HKLM\...\Run: [PWMTRV] => C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL [4817648 2015-01-29] (LENOVO -> Lenovo Group Limited)
HKLM\...\Run: [TDSReanimator] => c:\GenRad\DiagSystem\Runtime\TDSReanimator.exe [30720 2007-10-30] (Teradyne Diagnostic Systems)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [524016 2014-12-08] (LENOVO -> Lenovo.)
HKLM\...\Run: [UnlockerAssistant] => C:\Programs\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files\Intel\Bluetooth\btmshellex.dll [7349928 2017-10-26] (Intel(R) Wireless Connectivity Solutions -> Motorola Solutions, Inc.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [438872 2019-04-05] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [RAMDiskForWorkstations] => C:\Programs\RAMDiskSoftPerfect\RAMDiskWS.exe [3041096 2016-10-02] (SOFTPERFECT PTY. LTD. -> SoftPerfect)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [QuickFinder Scheduler] => c:\Programs\WordPerfect Office X9\Programs\QFSCHD190.EXE [247512 2018-05-13] (Corel Corporation -> Corel Corporation)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2326664 2018-09-07] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [kbdsprt] => [X]
HKLM\...\Run: [localSPM] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [4511200 2019-04-21] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
HKLM\...\Policies\Explorer\Run: [localSPM] => C:\Windows\runkey.exe [469176 2018-12-07] (Clever Security Software Ltd -> )
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKU\Administrator\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516096 2010-11-20] (Microsoft Corporation)
HKU\DefaultAppPool\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516096 2010-11-20] (Microsoft Corporation)
HKU\Gary\...\Run: [DeeEnEs] => C:\Programs\DeeEnEs\DeeEnEs.exe [151552 2005-01-01] (Peas Inc.)
HKU\Gary\...\Run: [HP Officejet 6500 E710n-z (NET)] => C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\Gary\...\Run: [SandboxieControl] => C:\Programs\Sandboxie\SbieCtrl.exe [2665624 2019-04-22] (Invincea, Inc. -> Sandboxie Holdings, LLC)
HKU\Gary\...\Run: [WinSnap] => C:\Programs\WinSnap\WinSnap.exe [6138112 2018-04-23] (Avdonin Aleksandr Nikolaevich Ip -> NTWind Software)
HKU\Gary\...\Run: [DuckCapture] => C:\Programs\DuckCapture\DuckCapture.exe [436736 2011-11-03] (DuckLink Software)
HKU\SCANS\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516096 2010-11-20] (Microsoft Corporation)
HKLM\...\Drivers32: [msacm.l3codecp] => C:\Windows\system32\l3codecp.acm [220672 2009-07-13] (Fraunhofer Institut Integrierte Schaltungen IIS)
AppInit_DLLs: C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [159896 2018-03-27] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2018-11-04] ()
Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RemindMe.lnk [2018-12-15]
ShortcutTarget: RemindMe.lnk -> C:\Programs\Remind-Me\RemindMe.exe (Beiley Software, Inc. -> Beiley Software Inc.)
Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spell Catcher Plus.LNK [2018-11-17]
ShortcutTarget: Spell Catcher Plus.LNK -> C:\Programs\Spell Catcher Plus\Spell Catcher.exe (Rainmaker Research, Inc. -> Rainmaker Research, Inc.)
Startup: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StaticIPAddress.exe [2017-12-07] ()
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DF016A2-5DC3-402F-9095-205DA57E613E} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1082816 2018-03-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {101216F7-DD17-47F6-A2B0-F7E30696153E} - System32\Tasks\{D5371B94-08DA-4432-88EC-6F585452B987} => "c:\programs\firefox\firefox.exe" hxxps://ui.skype.com/ui/0/7.37.0.103/en/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {13A7ED03-E968-4AEA-B4E8-7CFFEFB2C2A0} - System32\Tasks\{20029F24-B21C-483D-B8F8-87F05C2AC2DE} => C:\Windows\system32\pcalua.exe -a "C:\Users\Gary\Desktop\QB Data\Clean Install Tool.exe" -d "C:\Users\Gary\Desktop\QB Data"
Task: {13A9B1AB-2B34-451A-A7D9-A08A9D377EB4} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\windows\system32\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe [1281024 2017-07-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {158B49BE-94CA-4AE8-B739-37E05FD1F81A} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_171_Plugin.exe [1456696 2019-04-27] (Adobe Inc. -> Adobe)
Task: {18C5A8D3-6A88-481B-97C6-640AEF048323} - System32\Tasks\{5334EBD7-85B5-4458-808C-A670245B4961} => C:\Programs\VirtualBox\VirtualBox.exe [950144 2017-01-16] (Oracle Corporation -> Oracle Corporation)
Task: {1B4D9655-6994-4939-B53D-D2A3E18B6ECA} - System32\Tasks\AdobeGCInvoker-1.0-DocfxitLT-Gary => C:\Program Files\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [315880 2018-01-05] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
Task: {27791822-E1A4-4C60-8794-6BD76DBBDC54} - System32\Tasks\beirne_radiantbeirne_radiant => C:\Users\Gary\AppData\Local\Unintimidating.exe
Task: {39391E6A-4841-4FBC-B4B6-4F822108E9F2} - System32\Tasks\{F37B05CE-1F0F-4A8C-84E5-E623552308D7} => C:\Windows\system32\pcalua.exe -a "C:\Dnload\Endicia\DAZzle 17.1.01.EXE" -d C:\Dnload\Endicia
Task: {3F6A04A3-538F-420A-BB2F-67A79C518057} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe
Task: {42241EAE-B095-4285-9DBA-131F43FECFCB} - System32\Tasks\MySQL\Installer\ManifestUpdate => C:\Program Files\MySQL\MySQL Installer for Windows\MySQLInstallerConsole.exe [56192 2018-05-23] (Oracle America, Inc. -> Oracle Corporation)
Task: {43059C2E-CF29-4C19-A34B-AA16D4E06162} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1082816 2018-03-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {472C7649-C677-47E5-884C-7E23B36F2C41} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files\Corel\CUH\v2\CUH.exe [1656568 2018-06-21] (Corel Corporation -> Corel Corporation)
Task: {479C93F5-6773-42A8-BC7B-C8DB5893989E} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [462288 2018-11-15] (Bitdefender SRL -> Bitdefender)
Task: {499B7A1E-4DD7-4F41-ACF4-7D5C47FCCB15} - System32\Tasks\PMTask => C:\Program Files\ThinkPad\Utilities\PwmIdTsv.exe [3646704 2015-01-29] (LENOVO -> Lenovo Group Limited)
Task: {516A36CE-F7C0-43A0-BA3C-5429438220B7} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-12-21] (Intel(R) Update Manager -> Intel Corporation)
Task: {543BC55F-0783-42B7-921F-BC1AF782B97D} - System32\Tasks\Tweaking.com - Registry Backup => C:\Programs\RegBackup\TweakingRegistryBackup.exe [1471384 2016-11-18] (Tweaking LLC -> Tweaking.com)
Task: {57C1B370-BE72-4C18-935B-F0617212B4DA} - System32\Tasks\{A3CA8D78-144D-4F05-9FF3-50912F20C0F9} => "c:\programs\firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.1.0.105/en/go/help.faq.installer?LastError=1638
Task: {614BC15E-0F9B-4349-9838-076DAE4945BE} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-33363916-3624155930-1669969999-1000 => C:\Users\Gary\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [122312 2018-02-07] (Lenovo -> Lenovo Group Limited)
Task: {6590732D-9DC4-429A-836A-94066E771CC1} - System32\Tasks\{2D6B7B70-E391-4119-89BC-5AE168ED4828} => "c:\programs\firefox\firefox.exe" hxxps://ui.skype.com/ui/0/7.37.0.103/en/go/help.faq.installer?LastError=1603
Task: {6C4E8A5B-41D9-4070-8E77-A6A2C823E003} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-04-27] (Adobe Inc. -> Adobe)
Task: {7080A610-04CC-4528-BC45-6253A4A635C6} - System32\Tasks\CCleanerSkipUAC => C:\Programs\CCleaner\CCleaner.exe [16509040 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {7B4543A0-761D-4BC9-A8C4-83DC86A51832} - \WiseCleaner\WPMSkipUAC -> No File <==== ATTENTION
Task: {89ACC568-0900-47B0-9AF4-259888A4ABF7} - System32\Tasks\{25EBE376-5E1D-4588-93EE-416FE78BD8E5} => "c:\programs\firefox\firefox.exe" hxxps://ui.skype.com/ui/0/7.37.0.103/en/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {92D67166-E0C3-4B8C-A07A-AFE6D5689E51} - System32\Tasks\formerly gasses backpackers => C:\Users\Gary\AppData\Local\Ignoramuses.exe
Task: {94D9ACC1-CDC7-4D33-BC2C-3C57F5A752F7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {954F3672-6496-4ECB-A76A-3E756480500F} - System32\Tasks\TVT\Lenovo QuickDisplay Agent => C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe [21960 2014-10-02] (LENOVO -> Lenovo Corporation)
Task: {99628D71-D832-4285-B9E2-F16B5557EF36} - System32\Tasks\RTFTrack => C:\Windows\RTFTrack.exe [4551104 2018-03-16] (Realtek Semiconductor Corp. -> Realtek semiconductor)
Task: {99EE8621-7156-4FE7-A937-FB0BC0268D15} - System32\Tasks\beirne_radiant => C:\Users\Gary\AppData\Local\Unintimidating.exe
Task: {A3D52D7C-1448-4530-81D0-B8DAAAD90403} - System32\Tasks\{FFCDF8FA-E92F-4B77-A639-8ABAFAF0B0EF} => C:\Windows\system32\pcalua.exe -a "F:\Adobe Acrobat XI\Setup.exe" -d "F:\Adobe Acrobat XI"
Task: {B0968DFC-ECBB-4900-9B76-2E5C4820EE37} - System32\Tasks\formerly gasses backpackersformerly gasses backpackers => C:\Users\Gary\AppData\Local\Ignoramuses.exe
Task: {B74F03B5-356C-46D1-877B-1ED31E438888} - \SidebarExecute -> No File <==== ATTENTION
Task: {C151C0B2-B933-4FF9-905A-7E82219CDEB2} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work => C:\Windows\system32\WorkFoldersSystemTray.exe [98304 2015-09-04] (Microsoft Corporation)
Task: {C8CB89BB-11B1-47CB-9E4B-49984BB1F103} - System32\Tasks\QBScheduledReport => C:\Program Files\Common Files\Intuit\QuickBooks\ScheduledReports\ScheduledReports.Scheduler.exe [390832 2017-03-07] (Intuit, Inc. -> )
Task: {D5C333B7-DCB3-4447-B489-1BEC2781197A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2017-12-31] (Google Inc -> Google Inc.)
Task: {DBB9AB86-C12C-4278-8C33-F60AB7327881} - System32\Tasks\RtsCM => C:\Windows\RtsCM.exe [201152 2018-03-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
Task: {EA6C1D2B-5722-4E44-8F94-4923D8DFBBCE} - \GlaryInitialize 5 -> No File <==== ATTENTION
Task: {EC17D5A6-2809-4089-B0AA-E91F61CAA38F} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1179648 2018-11-06] ()
Task: {F0FA00A4-67DF-421E-94B3-BB97D43A033C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2017-12-31] (Google Inc -> Google Inc.)
Task: {F25FFA2E-BC39-4D45-B5F5-93A3D771E28C} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832 2015-07-01] (LENOVO -> Lenovo)
Task: {FD591B1A-011B-4BFA-8C27-7C93FEA0866B} - System32\Tasks\CCleaner Update => C:\Programs\CCleaner\CCUpdate.exe [619416 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2319848 2018-01-05] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
S2 AnyDesk; C:\Programs\AnyDesk\AnyDesk.exe [2126120 2019-02-23] (philandro Software GmbH -> )
S2 atashost; C:\Windows\system32\atashost.exe [150584 2017-08-20] (Cisco WebEx LLC -> Cisco WebEx LLC)
S2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [709520 2019-04-05] (Bitdefender SRL -> Bitdefender)
S2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [1929280 2018-03-22] (Bitdefender SRL -> Bitdefender)
S3 becldr3Service; C:\Program Files\BCL Technologies\easyConverter SDK 3\Common\becldr.exe [225280 2013-07-03] ()
S2 Bluetooth Device Monitor; C:\Program Files\Intel\Bluetooth\devmonsrv.exe [1210088 2017-10-26] (Intel(R) Wireless Connectivity Solutions -> Motorola Solutions, Inc.)
S2 Bluetooth Media Service; C:\Program Files\Intel\Bluetooth\mediasrv.exe [1865448 2017-10-26] (Intel(R) Wireless Connectivity Solutions -> Motorola Solutions, Inc.)
S2 Bluetooth OBEX Service; C:\Program Files\Intel\Bluetooth\obexsrv.exe [1189608 2017-10-26] (Intel(R) Wireless Connectivity Solutions -> Motorola Solutions, Inc.)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [301560 2016-11-11] (Intel(R) pGFX -> Intel Corporation)
S3 Cwbrxd; C:\Windows\cwbrxd.exe [94208 2009-12-08] (IBM Corporation)
S4 Epson PMAService A; C:\Program Files\Epson Software\PMA_A\PMAService.exe [113144 2017-03-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S4 EpsonCustomerParticipation; C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe [577088 2013-05-01] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
S4 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [223560 2016-11-08] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S2 hasplms; C:\Windows\system32\hasplms.exe [2869760 2009-04-21] (Aladdin Knowledge Systems Ltd.)
S2 ibtsiva; C:\Windows\system32\ibtsiva.exe [160016 2016-07-12] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)
S3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752 2012-04-24] (Intel Corporation -> Intel Corporation)
S2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [319488 2016-11-11] (Intel(R) pGFX -> Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [526616 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [492312 2018-03-02] (Intel(R) Trust Services -> Intel(R) Corporation)
S2 iReboot; C:\Program Files\NeoSmart Technologies\iReboot\iRebootd.exe [34488 2015-05-02] (NeoSmart Technologies -> NeoSmart Technologies)
S4 iumsvc; C:\Program Files\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-12-21] (Intel(R) Update Manager -> Intel Corporation)
S2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [214672 2018-05-01] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S2 LENOVO.MICMUTE; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [111560 2015-06-04] (LENOVO -> Lenovo Group Limited)
S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [107464 2015-07-13] (LENOVO -> Lenovo Group Limited)
S2 LPlatSvc; C:\Windows\system32\LPlatSvc.exe [746912 2018-03-28] (Lenovo -> Lenovo.)
S2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [4292920 2019-04-21] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
S3 MBAMService; C:\Programs\Malwarebytes\Anti-Malware\mbamservice.exe [5247944 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S2 MNSFramework; C:\Windows\system32\MNSFramework.exe [187048 2013-03-14] (RH Computing -> )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [250504 2018-03-19] (Intel Corporation -> )
S4 omniserv; C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe [76800 2015-04-02] (Softex Inc.)
S2 PDQDeploy; C:\Program Files\Admin Arsenal\PDQ Deploy\PDQDeployService.exe [98920 2018-03-06] (PDQ.COM CORPORATION -> PDQ.com)
S4 PDQInventory; C:\Programs\PDQ Inventory\PDQInventoryService.exe [114792 2018-01-11] (PDQ.COM CORPORATION -> PDQ.com)
S2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1293936 2018-11-15] (Bitdefender SRL -> Bitdefender)
S2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] (Protexis Inc. -> )
S2 PSI_SVC_2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
S3 PwmEWSvc; C:\Program Files\ThinkPad\Utilities\PWMEWSVC.EXE [1664752 2015-01-29] (LENOVO -> Lenovo Group Limited)
S2 QBVSS; C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe [1261704 2017-03-06] (Intuit, Inc. -> Intuit Inc.)
S3 RealtekProxyLauncherTriggerService; C:\Program Files\Lenovo\QuickDisplay\RealtekProxyLauncher.exe [16384 2014-10-02] (Lenovo Corporation)
S4 Remark FTP Utility; C:\Program Files\Common Files\Gravic\RemarkFTPUtility13.exe [59488 2011-05-02] (Gravic, Inc. -> Gravic)
S2 RetroInstantScanService; C:\Program Files\Retrospect\InstantScan\retroisarun.exe [18768 2018-05-16] (Retrospect, Inc. -> )
S2 Retrospect Client; C:\Program Files\Retrospect\Retrospect Client\RemotSvc.exe [101200 2018-05-16] (Retrospect, Inc. -> Retrospect, Inc)
S2 Retrospect Helper; C:\Program Files\Retrospect\Retrospect Client\rthlpsvc.exe [171520 2018-06-07] ()
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [279488 2018-03-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S2 SbieSvc; C:\Programs\Sandboxie\SbieSvc.exe [261272 2019-04-22] (Invincea, Inc. -> Sandboxie Holdings, LLC)
S2 ss_conn_service; C:\Programs\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-15] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [236120 2018-01-15] (Synaptics Incorporated -> Synaptics Incorporated)
S4 TDSNetSetup; c:\GenRad\DiagSystem\Runtime\TDSNetSetup.exe [131072 2009-01-21] (Teradyne Diagnostic Solutions Ltd)
S2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [11795800 2019-04-15] (TeamViewer GmbH -> TeamViewer GmbH)
S2 TPHKLOAD; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [117192 2015-06-04] (LENOVO -> Lenovo Group Limited)
S2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [101208 2019-04-05] (Bitdefender SRL -> Bitdefender)
S2 uvnc_service; C:\Programs\UltraVNC\WinVNC.exe [2044720 2018-08-09] (uvnc bvba -> UltraVNC)
S2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [38288 2014-07-24] (Validity Sensors, Inc -> Synaptics Incorporated)
S2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe [837848 2019-04-05] (Bitdefender SRL -> Bitdefender)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2018-03-18] (Microsoft Corporation)
S2 WMCoreService; C:\Program Files\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB -> Ericsson AB)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3068552 2018-03-19] (Intel Corporation -> Intel® Corporation)
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 aksfridge; C:\Windows\system32\drivers\aksfridge.sys [352256 2009-01-16] (Aladdin Knowledge Systems Ltd.)
S1 atc; C:\Windows\System32\DRIVERS\atc.sys [1115744 2019-02-19] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
S2 BdDci; C:\Windows\System32\DRIVERS\bddci.sys [254880 2019-02-19] (Bitdefender SRL -> Bitdefender)
S3 bdprivmon; C:\Windows\System32\DRIVERS\bdprivmon.sys [40424 2018-09-17] (Bitdefender SRL -> © Bitdefender SRL)
S3 BDVEDISK; C:\Windows\System32\DRIVERS\bdvedisk.sys [91672 2018-04-27] (Bitdefender SRL -> BitDefender)
S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [13568 2009-07-13] (Brother Industries, Ltd.)
S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [5248 2009-07-13] (Brother Industries, Ltd.)
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [272128 2009-07-13] (Brother Industries Ltd.)
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [62336 2009-07-13] (Brother Industries Ltd.)
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [12160 2009-07-13] (Brother Industries Ltd.)
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [11904 2009-07-13] (Brother Industries Ltd.)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [133128 2017-11-20] (Intel(R) Wireless Connectivity Solutions -> Motorola Solutions, Inc.)
S3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1227272 2017-11-20] (Intel(R) Wireless Connectivity Solutions -> Motorola Solutions, Inc.)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [109456 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 e1dexpress; C:\Windows\System32\DRIVERS\e1d6232.sys [442872 2017-02-01] (Intel(R) INTELND1617 -> Intel Corporation)
S1 Gemma; C:\Windows\System32\DRIVERS\Gemma.sys [317808 2019-02-19] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
S0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [211248 2019-02-19] (Bitdefender SRL -> BitDefender LLC)
S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [587776 2009-07-09] (Aladdin Knowledge Systems Ltd.)
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [26624 2009-07-13] (Hauppauge Computer Works, Inc.)
S4 HWiNFO32; C:\windows\system32\drivers\HWiNFO32.SYS [23840 2017-06-19] (Martin Malik - REALiX -> REALiX(tm))
S0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [489832 2013-11-16] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
S0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [24424 2013-11-16] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
S3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [116160 2017-12-06] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd32.sys [7108088 2016-11-11] (Intel(R) pGFX -> Intel Corporation)
S3 Ignis; C:\Windows\System32\DRIVERS\ignis.sys [160040 2019-04-05] (Bitdefender SRL -> Bitdefender)
S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [394216 2016-05-12] (Intel(R) OWR -> Intel(R) Corporation)
S0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [28688 2017-04-11] (Intel(R) USB eXtensible Host Controller Drivers -> Intel Corporation)
S3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [411664 2017-04-11] (Intel(R) USB eXtensible Host Controller Drivers -> Intel Corporation)
S3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [839696 2017-04-11] (Intel(R) USB eXtensible Host Controller Drivers -> Intel Corporation)
S3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [55672 2018-04-13] (Logitech Inc -> Logitech, Inc.)
S3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [20216 2018-04-13] (Logitech Inc -> Logitech, Inc.)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [240440 2019-03-24] (Malwarebytes Corporation -> Malwarebytes)
S3 MEI; C:\Windows\System32\DRIVERS\TeeDriver.sys [184880 2018-05-01] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 mf; C:\Windows\System32\DRIVERS\mf.sys [114176 2009-07-13] (Microsoft Windows -> Microsoft Corporation)
S3 msloop; C:\Windows\System32\DRIVERS\loop.sys [5632 2009-07-13] (Microsoft Windows -> Microsoft Corporation)
S3 NETwNs32; C:\Windows\System32\DRIVERS\Netwsn04.sys [2824176 2018-03-21] (Intel Corporation -> Intel Corporation)
S1 npcap; C:\Windows\System32\DRIVERS\npcap.sys [68816 2018-03-13] (Insecure.Com LLC -> Insecure.Com LLC.)
S2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
S1 OMNISMI; C:\Windows\system32\drivers\omnismi.sys [13048 2014-11-12] (Softex Incorporated -> )
S0 PMDRVS; C:\Windows\System32\DRIVERS\pmdrvs.sys [37576 2018-03-28] (Lenovo -> Lenovo.)
S4 pneteth; C:\Windows\System32\DRIVERS\pneteth.sys [13440 2011-11-25] (June Fabrics Technology Inc.)
S3 pnetmdm; C:\Windows\System32\DRIVERS\pnetmdm.sys [9472 2006-09-28] (June Fabrics Technology)
S3 PSMounterEx; C:\Windows\system32\drivers\psmounterex.sys [167336 2019-02-15] (Paramount Software UK Ltd -> Windows (R) Win 7 DDK provider)
S0 pwdrvio; C:\Windows\System32\pwdrvio.sys [17160 2015-03-05] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13064 2016-11-24] (MiniTool Solution Ltd -> )
S1 RegHiveRecovery; C:\Windows\system32\drivers\RegHiveRecovery.sys [41136 2014-02-20] (Microsoft Corporation -> Microsoft Corporation)
S3 RtlvVga; C:\Windows\System32\DRIVERS\RtlvVga.sys [12432 2014-03-18] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation )
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [675776 2017-10-19] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
S3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [2039232 2018-03-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 SbieDrv; C:\Programs\Sandboxie\SbieDrv.sys [194168 2019-04-23] (Invincea, Inc. -> Sandboxie Holdings, LLC)
S4 secdrv; C:\Windows\System32\Drivers\secdrv.sys [20480 2009-07-13] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [38488 2018-01-15] (Synaptics Incorporated -> Synaptics Incorporated)
S1 SPVDPort; C:\Windows\System32\DRIVERS\spvdbus.sys [81848 2016-10-02] (SOFTPERFECT PTY. LTD. -> )
S1 SPVVEngine; C:\Windows\system32\Drivers\spvve.sys [199608 2016-10-02] (SOFTPERFECT PTY. LTD. -> )
S0 SscRdBus; C:\Windows\System32\DRIVERS\SscRdBus.sys [91336 2013-04-01] (SuperSpeed LLC -> SuperSpeed LLC)
S0 SscRdCls; C:\Windows\System32\DRIVERS\SscRdCls.sys [40984 2007-12-19] (SuperSpeed Software, Inc. -> SuperSpeed LLC)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [147072 2017-01-15] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2018-03-28] (The OpenVPN Project)
S3 tapipvanish; C:\Windows\System32\DRIVERS\tapipvanish.sys [30424 2017-09-19] (IPVANISH -> The OpenVPN Project)
S0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [522280 2019-02-19] (Bitdefender SRL -> Bitdefender)
S5 UnlockerDriver5; C:\Programs\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()
S3 vmcam325av; C:\Windows\System32\Drivers\vmcam323av.sys [232448 2007-03-27] (Vimicro Corporation)
S3 vvftav323; C:\Windows\System32\drivers\vvftav323.sys [475136 2007-03-27] (Vimicro Corporation)
S3 iswSvc; no ImagePath
S4 npcap_wifi; no ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-15 21:33 - 2019-05-15 22:22 - 000000000 ____D C:\FRST
2019-05-08 08:43 - 2019-05-08 08:43 - 000229878 _____ C:\Windows\ntbtlog.txt
2019-05-07 19:24 - 2019-05-07 19:24 - 316267723 _____ C:\Windows\MEMORY.DMP
2019-05-07 17:33 - 2019-05-07 19:15 - 000498358 _____ C:\Windows\system32dbgraw.bmp
2019-04-29 16:24 - 2019-04-29 16:24 - 000002161 _____ C:\Users\Public\Desktop\Bitvise SSH Client.lnk
2019-04-26 09:25 - 2019-04-26 09:25 - 000001630 _____ C:\Users\Gary\Desktop\MPC-HC.lnk
2019-04-26 09:15 - 2019-04-26 09:15 - 000001734 _____ C:\Users\Gary\Desktop\VideoInspector.lnk
2019-04-26 09:02 - 2010-06-02 03:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll
2019-04-26 09:02 - 2010-06-02 03:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_7.dll
2019-04-26 09:02 - 2010-06-02 03:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll
2019-04-26 09:02 - 2010-05-26 10:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll
2019-04-26 09:02 - 2010-05-26 10:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_43.dll
2019-04-26 09:02 - 2010-05-26 10:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\System32\d3dcsx_43.dll
2019-04-26 09:02 - 2010-05-26 10:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_43.dll
2019-04-26 09:02 - 2010-05-26 10:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll
2019-04-26 09:02 - 2010-02-04 09:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_6.dll
2019-04-26 09:02 - 2010-02-04 09:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_6.dll
2019-04-26 09:02 - 2010-02-04 09:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_4.dll
2019-04-26 09:02 - 2010-02-04 09:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_7.dll
2019-04-26 09:02 - 2009-09-04 16:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_5.dll
2019-04-26 09:02 - 2009-09-04 16:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_5.dll
2019-04-26 09:02 - 2009-09-04 16:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_3.dll
2019-04-26 09:02 - 2009-09-04 16:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\System32\d3dcsx_42.dll
2019-04-26 09:02 - 2009-09-04 16:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_42.dll
2019-04-26 09:02 - 2009-09-04 16:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_42.dll
2019-04-26 09:02 - 2009-09-04 16:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll
2019-04-26 09:02 - 2009-09-04 16:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_42.dll
2019-04-26 09:02 - 2009-03-16 13:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_4.dll
2019-04-26 09:02 - 2009-03-16 13:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_4.dll
2019-04-26 09:02 - 2009-03-16 13:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_6.dll
2019-04-26 09:02 - 2009-03-09 14:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_41.dll
2019-04-26 09:02 - 2009-03-09 14:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_41.dll
2019-04-26 09:02 - 2009-03-09 14:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_41.dll
2019-04-26 09:02 - 2008-10-27 09:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_3.dll
2019-04-26 09:02 - 2008-10-27 09:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_3.dll
2019-04-26 09:02 - 2008-10-27 09:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_2.dll
2019-04-26 09:02 - 2008-10-27 09:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_5.dll
2019-04-26 09:02 - 2008-10-10 03:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll
2019-04-26 09:02 - 2008-10-10 03:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll
2019-04-26 09:02 - 2008-10-10 03:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll
2019-04-26 09:02 - 2008-07-31 09:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll
2019-04-26 09:02 - 2008-07-31 09:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll
2019-04-26 09:02 - 2008-07-31 09:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll
2019-04-26 09:02 - 2008-07-10 10:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_39.dll
2019-04-26 09:02 - 2008-07-10 10:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_39.dll
2019-04-26 09:02 - 2008-07-10 10:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_39.dll
2019-04-26 09:02 - 2008-05-30 13:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_1.dll
2019-04-26 09:02 - 2008-05-30 13:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_1.dll
2019-04-26 09:02 - 2008-05-30 13:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_0.dll
2019-04-26 09:02 - 2008-05-30 13:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_4.dll
2019-04-26 09:02 - 2008-05-30 13:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_38.dll
2019-04-26 09:02 - 2008-05-30 13:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll
2019-04-26 09:02 - 2008-05-30 13:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_38.dll
2019-04-26 09:02 - 2008-03-05 15:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_0.dll
2019-04-26 09:02 - 2008-03-05 15:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_0.dll
2019-04-26 09:02 - 2008-03-05 15:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_3.dll
2019-04-26 09:02 - 2008-03-05 14:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_37.dll
2019-04-26 09:02 - 2008-03-05 14:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_37.dll
2019-04-26 09:02 - 2008-02-05 22:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_37.dll
2019-04-26 09:02 - 2007-10-22 02:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_10.dll
2019-04-26 09:02 - 2007-10-22 02:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_2.dll
2019-04-26 09:02 - 2007-10-12 14:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_36.dll
2019-04-26 09:02 - 2007-10-12 14:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_36.dll
2019-04-26 09:02 - 2007-10-02 08:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_36.dll
2019-04-26 09:02 - 2007-07-19 23:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_9.dll
2019-04-26 09:02 - 2007-07-19 17:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_35.dll
2019-04-26 09:02 - 2007-07-19 17:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_35.dll
2019-04-26 09:02 - 2007-07-19 17:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_35.dll
2019-04-26 09:02 - 2007-06-20 19:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_8.dll
2019-04-26 09:02 - 2007-05-16 15:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_34.dll
2019-04-26 09:02 - 2007-05-16 15:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_34.dll
2019-04-26 09:02 - 2007-05-16 15:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_34.dll
2019-04-26 09:02 - 2007-04-04 17:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_7.dll
2019-04-26 09:02 - 2007-04-04 17:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\System32\xinput1_3.dll
2019-04-26 09:02 - 2007-03-15 15:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_33.dll
2019-04-26 09:02 - 2007-03-12 15:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_33.dll
2019-04-26 09:02 - 2007-03-12 15:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_33.dll
2019-04-26 09:02 - 2007-03-05 11:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\System32\x3daudio1_1.dll
2019-04-26 09:02 - 2007-01-24 14:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_6.dll
2019-04-26 09:02 - 2006-12-08 11:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_5.dll
2019-04-26 09:02 - 2006-11-29 12:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll
2019-04-26 09:02 - 2006-11-29 12:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10.dll
2019-04-26 09:02 - 2006-09-28 15:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_31.dll
2019-04-26 09:02 - 2006-09-28 15:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_4.dll
2019-04-26 09:02 - 2006-07-28 08:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_3.dll
2019-04-26 09:02 - 2006-07-28 08:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\System32\xinput1_2.dll
2019-04-26 09:02 - 2006-05-31 06:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_2.dll
2019-04-26 09:02 - 2006-03-31 11:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_30.dll
2019-04-26 09:02 - 2006-03-31 11:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_1.dll
2019-04-26 09:02 - 2006-03-31 11:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\System32\xinput1_1.dll
2019-04-26 09:02 - 2006-02-03 07:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_29.dll
2019-04-26 09:02 - 2006-02-03 07:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_0.dll
2019-04-26 09:02 - 2006-02-03 07:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\System32\x3daudio1_0.dll
2019-04-26 09:02 - 2005-12-05 17:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_28.dll
2019-04-26 09:02 - 2005-07-22 18:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll
2019-04-26 09:02 - 2005-05-26 14:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_26.dll
2019-04-26 09:02 - 2005-03-18 16:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll
2019-04-26 09:02 - 2005-02-05 18:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll
2019-04-26 09:01 - 2019-04-26 09:02 - 000000000 ___HD C:\Windows\msdownld.tmp
2019-04-26 09:01 - 2019-04-26 09:02 - 000000000 ____D C:\Windows\System32\directx
2019-04-26 07:39 - 2019-04-26 07:39 - 000000000 ____D C:\Users\Gary\.net
2019-04-23 20:22 - 2019-02-15 21:30 - 000123904 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2019-04-23 20:12 - 2019-04-01 17:55 - 002406400 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2019-04-23 20:12 - 2019-03-28 17:35 - 000088064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\luafv.sys
2019-04-23 20:12 - 2019-03-27 19:35 - 000348776 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2019-04-23 20:12 - 2019-03-26 17:59 - 002746880 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2019-04-23 20:12 - 2019-03-25 21:12 - 020280832 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2019-04-23 20:12 - 2019-03-25 21:01 - 002724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2019-04-23 20:12 - 2019-03-25 21:01 - 000004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2019-04-23 20:12 - 2019-03-25 20:51 - 000498688 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2019-04-23 20:12 - 2019-03-25 20:51 - 000062464 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2019-04-23 20:12 - 2019-03-25 20:50 - 000341504 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2019-04-23 20:12 - 2019-03-25 20:50 - 000064000 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2019-04-23 20:12 - 2019-03-25 20:50 - 000047616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2019-04-23 20:12 - 2019-03-25 20:48 - 002295808 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2019-04-23 20:12 - 2019-03-25 20:46 - 000047104 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2019-04-23 20:12 - 2019-03-25 20:45 - 000030720 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2019-04-23 20:12 - 2019-03-25 20:44 - 000476160 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2019-04-23 20:12 - 2019-03-25 20:43 - 000663040 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2019-04-23 20:12 - 2019-03-25 20:43 - 000620032 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2019-04-23 20:12 - 2019-03-25 20:43 - 000115712 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2019-04-23 20:12 - 2019-03-25 20:43 - 000104960 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2019-04-23 20:12 - 2019-03-25 20:39 - 000668160 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2019-04-23 20:12 - 2019-03-25 20:36 - 000416256 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2019-04-23 20:12 - 2019-03-25 20:33 - 000073216 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2019-04-23 20:12 - 2019-03-25 20:33 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2019-04-23 20:12 - 2019-03-25 20:32 - 000091136 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2019-04-23 20:12 - 2019-03-25 20:31 - 000168960 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2019-04-23 20:12 - 2019-03-25 20:29 - 004494848 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2019-04-23 20:12 - 2019-03-25 20:29 - 000279040 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2019-04-23 20:12 - 2019-03-25 20:29 - 000076288 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2019-04-23 20:12 - 2019-03-25 20:28 - 000130048 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2019-04-23 20:12 - 2019-03-25 20:24 - 013682176 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2019-04-23 20:12 - 2019-03-25 20:23 - 000230400 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2019-04-23 20:12 - 2019-03-25 20:22 - 000696320 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2019-04-23 20:12 - 2019-03-25 20:21 - 002059776 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2019-04-23 20:12 - 2019-03-25 20:21 - 001155072 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2019-04-23 20:12 - 2019-03-25 20:21 - 000692224 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2019-04-23 20:12 - 2019-03-25 20:08 - 004386304 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2019-04-23 20:12 - 2019-03-25 20:04 - 001332224 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2019-04-23 20:12 - 2019-03-25 20:02 - 000710144 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2019-04-23 20:12 - 2019-03-20 18:03 - 003961576 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2019-04-23 20:12 - 2019-03-20 18:03 - 000189672 _____ (Microsoft Corporation) C:\Windows\System32\halmacpi.dll
2019-04-23 20:12 - 2019-03-20 18:03 - 000189672 _____ (Microsoft Corporation) C:\Windows\System32\hal.dll
2019-04-23 20:12 - 2019-03-20 18:03 - 000137960 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2019-04-23 20:12 - 2019-03-20 18:03 - 000136424 _____ (Microsoft Corporation) C:\Windows\System32\halacpi.dll
2019-04-23 20:12 - 2019-03-20 18:03 - 000067304 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2019-04-23 20:12 - 2019-03-20 18:02 - 004056296 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2019-04-23 20:12 - 2019-03-20 18:02 - 001310520 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 001072640 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000872448 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000690688 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000655360 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000644096 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000556032 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000400896 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000294400 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000261120 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000254464 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000223232 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000172032 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000171008 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000167936 _____ (Microsoft Corporation) C:\Windows\System32\srvsvc.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\System32\rpchttp.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000099840 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000082432 _____ (Microsoft Corporation) C:\Windows\System32\bcrypt.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000070144 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\System32\appidapi.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\setbcdlocale.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000043008 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000038912 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000017408 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000007168 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 18:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 17:40 - 000097792 _____ (Microsoft Corporation) C:\Windows\System32\appidpolicyconverter.exe
2019-04-23 20:12 - 2019-03-20 17:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\appid.sys
2019-04-23 20:12 - 2019-03-20 17:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2019-04-23 20:12 - 2019-03-20 17:40 - 000029696 _____ (Microsoft Corporation) C:\Windows\System32\appidsvc.dll
2019-04-23 20:12 - 2019-03-20 17:40 - 000016896 _____ (Microsoft Corporation) C:\Windows\System32\appidcertstorecheck.exe
2019-04-23 20:12 - 2019-03-20 17:40 - 000009728 _____ (Microsoft Corporation) C:\Windows\System32\sscore.dll
2019-04-23 20:12 - 2019-03-20 17:38 - 000271360 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2019-04-23 20:12 - 2019-03-20 17:38 - 000262656 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2019-04-23 20:12 - 2019-03-20 17:38 - 000107520 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\videoprt.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000317440 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000314880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000226304 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000126464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000117248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000098816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000035328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\npfs.sys
2019-04-23 20:12 - 2019-03-20 17:36 - 000025088 _____ (Microsoft Corporation) C:\Windows\System32\sxssrv.dll
2019-04-23 20:12 - 2019-03-20 17:35 - 000069632 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2019-04-23 20:12 - 2019-03-20 17:35 - 000055296 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\amdk8.sys
2019-04-23 20:12 - 2019-03-20 17:35 - 000053760 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\intelppm.sys
2019-04-23 20:12 - 2019-03-20 17:35 - 000053248 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\viac7.sys
2019-04-23 20:12 - 2019-03-20 17:35 - 000052224 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\processr.sys
2019-04-23 20:12 - 2019-03-20 17:35 - 000036352 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2019-04-23 20:12 - 2019-03-20 17:35 - 000022016 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2019-04-23 20:12 - 2019-03-20 17:35 - 000015872 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2019-04-23 20:12 - 2019-03-20 17:35 - 000006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 17:35 - 000004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 17:35 - 000003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2019-04-23 20:12 - 2019-03-20 17:35 - 000003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2019-04-23 20:12 - 2019-03-15 20:01 - 000105192 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2019-04-23 20:12 - 2019-03-15 19:58 - 002368000 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 001806848 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 001425920 _____ (Microsoft Corporation) C:\Windows\System32\ole32.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000583680 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000380928 _____ (Microsoft Corporation) C:\Windows\System32\rpcss.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000337408 _____ (Microsoft Corporation) C:\Windows\System32\msihnd.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000047104 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000046080 _____ (Microsoft Corporation) C:\Windows\System32\mf3216.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\System32\oleres.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000025600 _____ (Microsoft Corporation) C:\Windows\System32\msimsg.dll
2019-04-23 20:12 - 2019-03-15 19:58 - 000004608 _____ (Microsoft Corporation) C:\Windows\System32\msimg32.dll
2019-04-23 20:12 - 2019-03-15 19:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\System32\comcat.dll
2019-04-23 20:12 - 2019-03-15 19:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\System32\msiexec.exe
2019-04-23 20:12 - 2019-03-13 07:02 - 000307200 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2019-04-23 20:12 - 2019-03-13 06:35 - 000475648 _____ (Microsoft Corporation) C:\Windows\System32\msxbde40.dll
2019-04-23 20:12 - 2019-03-13 06:35 - 000375808 _____ (Microsoft Corporation) C:\Windows\System32\mspbde40.dll
2019-04-23 20:12 - 2019-03-12 06:34 - 001311744 _____ (Microsoft Corporation) C:\Windows\System32\msjet40.dll
2019-04-23 20:12 - 2019-03-12 06:34 - 000352768 _____ (Microsoft Corporation) C:\Windows\System32\msrd3x40.dll
2019-04-23 20:12 - 2019-03-12 06:34 - 000340992 _____ (Microsoft Corporation) C:\Windows\System32\msexcl40.dll
2019-04-23 20:12 - 2019-03-12 06:34 - 000313344 _____ (Microsoft Corporation) C:\Windows\System32\msrd2x40.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 001391616 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 001241088 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 000827904 _____ (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 000527872 _____ (Microsoft Corporation) C:\Windows\System32\termsrv.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 000107520 _____ (Microsoft Corporation) C:\Windows\System32\oleprn.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml6r.dll
2019-04-23 20:12 - 2019-03-11 13:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000918408 _____ (Microsoft Corporation) C:\Windows\System32\ucrtbase.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000066000 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-private-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000021968 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-math-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000018880 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-multibyte-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000017360 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-stdio-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000017352 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-string-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000015824 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-runtime-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000015296 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-convert-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000013768 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-time-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000013760 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-2-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000013264 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-filesystem-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000012264 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-conio-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000012240 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-process-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011728 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-heap-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011712 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-utility-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011712 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-locale-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011712 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-environment-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011712 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-2-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011712 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-1.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011216 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l2-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011216 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-timezone-l1-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011216 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l2-1-0.dll
2019-04-23 20:12 - 2019-03-05 17:04 - 000011200 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-2-0.dll
2019-04-23 20:12 - 2019-03-04 18:40 - 000056320 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys
2019-04-23 20:12 - 2019-03-04 18:40 - 000026368 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys
2019-04-23 20:12 - 2019-03-04 18:40 - 000024064 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys
2019-04-23 20:12 - 2019-02-21 07:43 - 000026624 _____ (Microsoft Corporation) C:\Windows\System32\netbtugc.exe
2019-04-23 20:12 - 2019-02-21 07:36 - 000188928 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netbt.sys
2019-04-23 20:12 - 2019-02-15 21:50 - 000781824 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2019-04-23 20:12 - 2019-02-15 21:50 - 000321536 _____ (Microsoft Corporation) C:\Windows\System32\winspool.drv
2019-04-23 20:12 - 2019-02-15 07:58 - 000382976 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2019-04-23 20:12 - 2019-02-15 07:58 - 000320512 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll
2019-04-23 20:12 - 2019-02-15 07:38 - 000360960 _____ (Microsoft Corporation) C:\Windows\System32\WerFault.exe
2019-04-23 20:12 - 2019-02-15 07:38 - 000053760 _____ (Microsoft Corporation) C:\Windows\System32\wermgr.exe
2019-04-23 20:12 - 2019-02-15 07:38 - 000028672 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe
2019-04-23 20:12 - 2019-02-15 07:38 - 000028672 _____ (Microsoft Corporation) C:\Windows\System32\werdiagcontroller.dll
2019-04-23 20:12 - 2019-02-12 07:58 - 012880896 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2019-04-23 20:12 - 2019-02-12 07:58 - 001499648 _____ (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll
2019-04-23 20:12 - 2019-02-10 08:43 - 001214176 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2019-04-23 20:12 - 2019-02-10 08:18 - 000247296 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\udfs.sys
2019-04-23 20:12 - 2019-02-10 08:18 - 000148992 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\fastfat.sys
2019-04-23 20:12 - 2019-02-10 08:18 - 000142336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\exfat.sys
2019-04-23 20:12 - 2019-02-10 08:18 - 000070656 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cdfs.sys
2019-04-23 20:12 - 2019-02-08 08:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\tzres.dll
2019-04-23 20:12 - 2019-02-08 07:59 - 000805376 _____ (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2019-04-23 20:12 - 2019-02-07 07:57 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\bridgeres.dll
2019-04-23 20:12 - 2019-02-07 07:53 - 000078336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bridge.sys
2019-04-23 20:12 - 2019-02-07 07:42 - 000024576 _____ (Microsoft Corporation) C:\Windows\System32\brdgcfg.dll
2019-04-23 20:12 - 2019-02-07 07:42 - 000015872 _____ (Microsoft Corporation) C:\Windows\System32\bridgeunattend.exe
2019-04-23 20:12 - 2019-02-03 07:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msfs.sys
2019-04-23 20:11 - 2019-02-10 08:43 - 000078560 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mountmgr.sys
2019-04-23 20:11 - 2019-02-10 08:41 - 012574208 _____ (Microsoft Corporation) C:\Windows\System32\wmploc.DLL
2019-04-23 20:11 - 2019-02-10 08:41 - 011411968 _____ (Microsoft Corporation) C:\Windows\System32\wmp.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 003207168 _____ (Microsoft Corporation) C:\Windows\System32\mf.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 001329664 _____ (Microsoft Corporation) C:\Windows\System32\quartz.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 001177088 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 001005056 _____ (Microsoft Corporation) C:\Windows\System32\cryptui.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000988160 _____ (Microsoft Corporation) C:\Windows\System32\drmv2clt.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000744960 _____ (Microsoft Corporation) C:\Windows\System32\blackbox.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000617984 _____ (Microsoft Corporation) C:\Windows\System32\wmdrmsdk.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000519680 _____ (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000504320 _____ (Microsoft Corporation) C:\Windows\System32\msscp.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000489984 _____ (Microsoft Corporation) C:\Windows\System32\evr.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000474624 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000442368 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000406016 _____ (Microsoft Corporation) C:\Windows\System32\drmmgrtn.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000373248 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000354816 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000276480 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000265216 _____ (Microsoft Corporation) C:\Windows\System32\msnetobj.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000195072 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000179712 _____ (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000157184 _____ (Microsoft Corporation) C:\Windows\System32\pcasvc.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000146432 _____ (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000106496 _____ (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000103424 _____ (Microsoft Corporation) C:\Windows\System32\mfps.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000080896 _____ (Microsoft Corporation) C:\Windows\System32\cryptsp.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000046592 _____ (Microsoft Corporation) C:\Windows\System32\mssign32.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000008704 _____ (Microsoft Corporation) C:\Windows\System32\pcaevts.dll
2019-04-23 20:11 - 2019-02-10 08:41 - 000002048 _____ (Microsoft Corporation) C:\Windows\System32\mferror.dll
2019-04-23 20:11 - 2019-02-10 08:37 - 000593920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys
2019-04-23 20:11 - 2019-02-10 08:29 - 000008192 _____ (Microsoft Corporation) C:\Windows\System32\spwmp.dll
2019-04-23 20:11 - 2019-02-10 08:29 - 000004096 _____ (Microsoft Corporation) C:\Windows\System32\msdxm.ocx
2019-04-23 20:11 - 2019-02-10 08:29 - 000004096 _____ (Microsoft Corporation) C:\Windows\System32\dxmasf.dll
2019-04-23 20:11 - 2019-02-10 08:28 - 000100352 _____ (Microsoft Corporation) C:\Windows\System32\audiodg.exe
2019-04-23 20:11 - 2019-02-10 08:28 - 000050176 _____ (Microsoft Corporation) C:\Windows\System32\rrinstaller.exe
2019-04-23 20:11 - 2019-02-10 08:28 - 000023040 _____ (Microsoft Corporation) C:\Windows\System32\mfpmp.exe
2019-04-23 20:11 - 2019-02-10 08:24 - 000010752 _____ (Microsoft Corporation) C:\Windows\System32\msmmsp.dll
2019-04-23 20:11 - 2019-02-10 08:19 - 000028160 _____ (Microsoft Corporation) C:\Windows\System32\pcadm.dll
2019-04-23 20:11 - 2019-02-10 08:19 - 000009728 _____ (Microsoft Corporation) C:\Windows\System32\pcawrk.exe
2019-04-23 20:11 - 2019-02-10 08:19 - 000008192 _____ (Microsoft Corporation) C:\Windows\System32\pcalua.exe
2019-04-23 20:08 - 2019-04-01 06:49 - 000288768 _____ (Microsoft Corporation) C:\Windows\System32\sipnotify.exe
2019-04-23 19:38 - 2019-04-23 19:38 - 000000000 ____D C:\Program Files\Dolby Advanced Audio v2
2019-04-23 19:37 - 2019-04-23 19:37 - 000000000 ____D C:\Windows\System32\RTCOM
2019-04-23 19:37 - 2018-03-29 04:56 - 003223320 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\RltkAPO.dll
2019-04-23 19:37 - 2018-03-29 04:56 - 002528600 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\RtkApoApi.dll
2019-04-23 19:37 - 2018-03-29 04:56 - 000312760 _____ (Dolby Laboratories, Inc.) C:\Windows\System32\RP3DHT32.dll
2019-04-23 19:37 - 2018-03-29 04:56 - 000312752 _____ (Dolby Laboratories, Inc.) C:\Windows\System32\RP3DAA32.dll
2019-04-23 19:37 - 2018-03-29 04:56 - 000122168 _____ (Dolby Laboratories) C:\Windows\System32\R4EEL32A.dll
2019-04-23 19:37 - 2018-03-29 04:56 - 000077232 _____ (Dolby Laboratories) C:\Windows\System32\R4EEG32A.dll
2019-04-23 19:37 - 2018-03-29 04:55 - 003707136 _____ (Fortemedia Corporation) C:\Windows\System32\FMAPO.dll
2019-04-23 19:37 - 2018-03-29 04:55 - 000369536 _____ (Dolby Laboratories) C:\Windows\System32\R4EED32A.dll
2019-04-23 19:37 - 2018-03-29 04:55 - 000107144 _____ (Dolby Laboratories) C:\Windows\System32\R4EEA32A.dll
2019-04-23 19:37 - 2018-03-29 04:54 - 004244192 _____ (Dolby Laboratories) C:\Windows\System32\DolbyDAX2APOv211.dll
2019-04-23 19:37 - 2018-03-29 04:54 - 001517832 _____ (Dolby Laboratories) C:\Windows\System32\DDPD32A.dll
2019-04-23 19:37 - 2018-03-29 04:54 - 000291144 _____ (Dolby Laboratories) C:\Windows\System32\DDPO32A.dll
2019-04-23 19:37 - 2018-03-29 04:54 - 000237944 _____ (Dolby Laboratories) C:\Windows\System32\DDPA32.dll
2019-04-23 19:37 - 2018-03-29 04:53 - 004721096 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\Drivers\RTKVHDA.sys
2019-04-23 19:37 - 2018-03-29 04:53 - 003610056 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\RTSndMgr.cpl
2019-04-23 19:37 - 2018-03-29 04:53 - 002917200 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\RtkPgExt.dll
2019-04-23 19:37 - 2018-03-29 04:52 - 007176384 _____ (Dolby Laboratories) C:\Windows\System32\R4EEP32A.dll
2019-04-23 19:37 - 2018-03-29 04:52 - 007059216 _____ (Dolby Laboratories) C:\Windows\System32\DDPP32A.dll
2019-04-23 19:37 - 2018-03-29 04:52 - 002875848 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\RtkCoInstII.dll
2019-04-23 19:37 - 2018-03-29 04:52 - 001051112 _____ (Dolby Laboratories) C:\Windows\System32\DolbyDAX2APOProp.dll
2019-04-23 19:37 - 2018-03-29 04:52 - 000322032 _____ (Dolby Laboratories) C:\Windows\System32\HiFiDAX2API.dll
2019-04-23 19:37 - 2018-03-29 04:52 - 000022120 _____ (Realtek Semiconductor Corp.) C:\Windows\System32\RtkCoLDR.dll
2019-04-23 19:37 - 2018-03-29 04:51 - 000101296 _____ (Real Sound Lab SIA) C:\Windows\System32\CONEQMSAPOGUILibrary.dll
2019-04-23 19:37 - 2018-03-29 01:18 - 016950740 _____ C:\Windows\System32\Drivers\RTAIODAT.DAT
2019-04-21 14:15 - 2019-04-21 14:15 - 000001839 _____ C:\Users\Public\Desktop\Macrium Reflect.lnk
2019-04-21 14:15 - 2019-04-21 14:15 - 000000000 ____D C:\Program Files\Macrium
2019-04-20 12:09 - 2019-04-20 12:09 - 000000000 ____D C:\Program Files\Common Files\Oracle
2019-04-20 12:08 - 2019-04-20 12:08 - 000000000 ____D C:\Program Files\Common Files\Java

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-05-15 21:04 - 2015-03-06 04:04 - 000000000 ____D C:\My Documents2
2019-05-15 19:41 - 2015-03-06 04:03 - 000000000 ___SD C:\Dnload
2019-05-13 19:55 - 2019-04-06 11:16 - 000000000 ____D C:\ProgramData\{89DF3612-BE12-A0A6-D34F-FD696F512FCB}
2019-05-13 10:49 - 2019-02-16 14:32 - 000000000 ____D C:\temp
2019-05-07 19:22 - 2018-11-20 07:32 - 2093363200 ____H C:\SsRd0001.cif
2019-05-07 19:21 - 2018-11-09 22:38 - 000111836 _____ C:\bdlog.txt
2019-05-07 19:21 - 2016-12-12 08:50 - 000000000 ____D C:\Users\Gary\AppData\LocalLow\Mozilla
2019-05-07 19:07 - 2009-07-13 20:34 - 000030192 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-05-07 19:07 - 2009-07-13 20:34 - 000030192 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-05-07 19:04 - 2010-11-20 13:01 - 000840240 _____ C:\Windows\System32\PerfStringBackup.INI
2019-05-07 19:04 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\inf
2019-05-07 19:02 - 2018-03-27 13:27 - 000002058 _____ C:\Users\Public\Desktop\PDQ Deploy.lnk
2019-05-07 19:00 - 2016-06-09 16:27 - 000000000 ____D C:\Program Files\TeamViewer
2019-05-07 19:00 - 2015-03-06 03:35 - 000000000 __SHD C:\Users\Gary\IntelGraphicsProfiles
2019-05-07 18:59 - 2018-03-18 16:12 - 000000000 ____D C:\ProgramData\Validity
2019-05-07 18:59 - 2015-11-11 11:57 - 008405015 _____ C:\Windows\hlktmp
2019-05-07 18:59 - 2015-03-05 18:19 - 000000000 ____D C:\ProgramData\RetroISA
2019-05-07 18:19 - 2019-04-13 17:42 - 000000000 ____D C:\Program Files\Anvsoft
2019-05-07 17:54 - 2017-05-18 12:04 - 000000000 ____D C:\Users\Gary\AppData\Roaming\Syncios Data Transfer
2019-05-07 17:50 - 2019-04-06 11:16 - 000000000 ____D C:\ProgramData\Spyrix Personal Monitor
2019-05-07 17:32 - 2009-07-13 20:33 - 002845728 _____ C:\Windows\System32\FNTCACHE.DAT
2019-05-07 14:12 - 2015-03-05 18:45 - 000000000 ____D C:\Users\Gary\AppData\Local\CrashDumps
2019-05-07 14:06 - 2018-11-18 13:18 - 000000000 ____D C:\Users\Gary\AppData\Local\Bitvise
2019-05-07 14:05 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\ModemLogs
2019-05-07 14:02 - 2019-04-14 17:08 - 000000000 ____D C:\Users\Gary\AppData\Roaming\Syncios
2019-05-07 14:02 - 2017-05-18 12:04 - 000000000 ____D C:\Users\Gary\Documents\Syncios
2019-05-06 20:43 - 2016-12-18 19:50 - 000000000 ____D C:\Users\Gary\AppData\Roaming\vlc
2019-05-06 17:09 - 2019-02-01 22:02 - 000000000 ____D C:\Users\Gary\AppData\LocalLow\WebEx
2019-05-06 17:09 - 2017-09-30 10:08 - 000000000 ____D C:\Users\Gary\AppData\Roaming\uTorrent
2019-05-06 14:15 - 2019-02-01 22:02 - 000000000 ____D C:\ProgramData\WebEx
2019-05-06 13:24 - 2015-04-04 20:01 - 000000029 _____ C:\Windows\ATW.INI
2019-05-06 09:49 - 2015-03-06 11:03 - 000002766 _____ C:\Windows\Sandboxie.ini
2019-05-04 19:26 - 2015-03-05 18:44 - 000000000 ____D C:\Users\Gary\AppData\Local\ClipX
2019-05-04 16:16 - 2015-03-05 18:22 - 000000000 ____D C:\Windows\System32\Macromed
2019-05-03 07:04 - 2019-01-12 09:35 - 000001269 _____ C:\Users\Public\Desktop\Skype.lnk
2019-04-29 16:24 - 2019-01-18 13:28 - 000063480 _____ (Bitvise Limited) C:\Windows\MstscTitle32.dll
2019-04-29 16:24 - 2018-11-18 13:17 - 000000000 ____D C:\Program Files\Common Files\Bitvise
2019-04-27 11:17 - 2015-03-08 17:35 - 000842296 _____ (Adobe) C:\Windows\System32\FlashPlayerApp.exe
2019-04-27 11:17 - 2015-03-08 17:35 - 000175160 _____ (Adobe) C:\Windows\System32\FlashPlayerCPLApp.cpl
2019-04-27 11:17 - 2015-03-05 18:44 - 000000000 ____D C:\Users\Gary\AppData\Local\Adobe
2019-04-26 09:01 - 2016-12-18 21:18 - 000000000 ____D C:\Program Files\K-Lite Codec Pack
2019-04-26 07:39 - 2018-03-18 16:14 - 000000000 ____D C:\users\Gary
2019-04-23 20:15 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\System32\Dism
2019-04-23 19:38 - 2019-04-05 15:46 - 000000000 ___HD C:\Program Files\Temp
2019-04-23 19:37 - 2018-10-02 11:40 - 000442965 _____ C:\Windows\System32\Drivers\rtkhdasetting.zip
2019-04-23 19:37 - 2018-03-18 16:10 - 000000000 ____D C:\Windows\System32\DAX2
2019-04-23 19:37 - 2015-03-05 18:20 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2019-04-20 12:09 - 2018-11-07 19:49 - 000000000 ____D C:\Program Files\Java
2019-04-20 12:07 - 2018-11-07 19:49 - 000097144 _____ (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2019-04-19 11:37 - 2009-07-13 18:37 - 000000000 ____D C:\Windows\System32\NDF
2019-04-19 11:32 - 2015-07-07 17:12 - 000000000 ____D C:\Users\Gary\AppData\Local\ElevatedDiagnostics
2019-04-15 16:38 - 2019-02-01 22:02 - 000000000 ____D C:\Users\Gary\AppData\Local\WebEx

==================== KnownDLLs (Whitelisted) =========================


==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\dllhost.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============


==================== Restore Points  =========================


==================== Memory info ===========================

Percentage of memory in use: 5%
Total physical RAM: 11983.8 MB
Available physical RAM: 11294.38 MB
Total Virtual: 11982.08 MB
Available Virtual: 11305.55 MB

==================== Drives ================================

Drive c: (Windows 7) (Fixed) (Total:293.58 GB) (Free:7.55 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (Backup) (Fixed) (Total:48.4 GB) (Free:2.37 GB) NTFS
Drive f: () (Fixed) (Total:0.8 GB) (Free:0.34 GB) NTFS
Drive g: (GSP1RMCULFRER_EN_DVD) (CDROM) (Total:2.39 GB) (Free:0 GB) UDF
Drive h: (MULTIBOOT) (Removable) (Total:0.95 GB) (Free:0.27 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (Windows 10) (Fixed) (Total:122.97 GB) (Free:6.89 GB) NTFS ==>[system with boot components (obtained from drive)]


==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 5BC53D8B)
Partition 1: (Active) - (Size=123 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=817 MB) - (Type=27)
Partition 3: (Not Active) - (Size=293.6 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=48.4 GB) - (Type=0F Extended)

========================================================
Disk: 1 (Size: 14.9 GB) (Disk ID: BC4AB5E2)

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 977.5 MB) (Disk ID: 06547C13)
Partition 1: (Active) - (Size=976 MB) - (Type=0C)
Partition 4: (Not Active) - (Size=21 MB) - (Type=00)

LastRegBack: 2019-05-03 08:12
==================== End of FRST.txt ============================

Thank you,
Docfxit
 

Attachments

  • BSODWin7.jpg
    BSODWin7.jpg
    365.1 KB · Views: 10
Please try the following and then retry booting:
Copy the fixlist.txt to the root of your USB drive where FRST.exe is located and boot into recovery mode again to launch FRST.

This time instead of clicking scan, click fix and the fixlist I proposed will be processed.

After that has been done, please try rebooting.
 

Attachments

Please try the following and then retry booting:
Copy the fixlist.txt to the root of your USB drive where FRST.exe is located and boot into recovery mode again to launch FRST.

This time instead of clicking scan, click fix and the fixlist I proposed will be processed.

After that has been done, please try rebooting.
Thank you for the fix...

I applied the fix.
Code:
Fix result of Farbar Recovery Scan Tool (x86) Version: 15-05-2019 01
Ran by SYSTEM (16-05-2019 10:43:14) Run:1
Running from H:\SR
Boot Mode: Recovery

==============================================

fixlist content:
*****************
S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [587776 2009-07-09] (Aladdin Knowledge Systems Ltd.)
C:\Windows\system32\drivers\hardlock.sys
*****************

HKLM\System\ControlSet001\Services\hardlock => removed successfully.
hardlock => service removed successfully.
C:\Windows\system32\drivers\hardlock.sys => moved successfully

==== End of Fixlog 10:43:15 ====

After rebooting, I'm getting the same BSOD.

Thanks,
 
I know the BSOD says it created a memory dump.
I don't have any files in C:\Windows\Minidump
The only file I do have is Memory.dmp in C:\Windows dated 5/7/2019
That could be a valid date for this issue.
I have uploaded it to this site.
MEMORY.DMP

Thanks,
 
NOTE: Use this one. NOT the above one.

I couldn't figure out how to edit the last post.
I found out if there is a Memory.DMP file in C:\Windows there is an option to not overwrite it.
Since I can't boot into Windows, I can't change the option. So I moved the Memory.DMP in the last post to a different folder.
Then I rebooted into Windows 7. I found it did create a new memory dump. Here is the new, Fresh one.
MEMORY.DMP
 
This computer that I get a BSOD Win7 has a dual boot. I can boot into the second partition Win10 which runs fine.
The attached screen shot from Speccy is from the Win10 partition on the same hardware.
I couldn't post a link with the complete Speccy because I am getting an "Error connecting to publishing server"
 

Attachments

  • SpeccyWin10.jpg
    SpeccyWin10.jpg
    156.8 KB · Views: 4
I ran SSDLife inside of Win10. The program doesn't find any problems with the hard drive.
 

Attachments

  • SSDLifeW550s2019-05-17.png
    SSDLifeW550s2019-05-17.png
    102.1 KB · Views: 2
NOTE: Use this one. NOT the above one.

I couldn't figure out how to edit the last post.
I found out if there is a Memory.DMP file in C:\Windows there is an option to not overwrite it.
Since I can't boot into Windows, I can't change the option. So I moved the Memory.DMP in the last post to a different folder.
Then I rebooted into Windows 7. I found it did create a new memory dump. Here is the new, Fresh one.
MEMORY.DMP

I can't get the link to work.
 
Code:
Microsoft (R) Windows Debugger Version 10.0.17763.132 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\michal01\Downloads\MEMORY (2).DMP]
Kernel Summary Dump File: Kernel address space is available, User address space may not be available.


************* Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*
Symbol search path is: SRV*
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.24408.x86fre.win7sp1_ldr_escrow.190320-1700
Machine Name:
Kernel base = 0x83240000 PsLoadedModuleList = 0x83396730
Debug session time: Thu May 16 19:44:30.390 2019 (UTC + 2:00)
System Uptime: 0 days 0:00:13.670
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c).  Type ".hh dbgerr001" for details
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 8c7c8d20, 8c7c8e8c, 83467030}

Probably caused by : ntkrpamp.exe ( nt!PspCatchCriticalBreak+71 )

Followup:     MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8c7c8d20, Terminating object
Arg3: 8c7c8e8c, Process image file name
Arg4: 83467030, Explanatory message (ascii)

Debugging Details:
------------------


KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 401

BUILD_VERSION_STRING:  7601.24408.x86fre.win7sp1_ldr_escrow.190320-1700

SYSTEM_MANUFACTURER:  LENOVO

SYSTEM_PRODUCT_NAME:  20E2CTO1WW

SYSTEM_SKU:  LENOVO_MT_20E2_BU_Think_FM_ThinkPad W550s

SYSTEM_VERSION:  ThinkPad W550s

BIOS_VENDOR:  LENOVO

BIOS_VERSION:  N11ET46W (1.22 )

BIOS_DATE:  06/06/2018

BASEBOARD_MANUFACTURER:  LENOVO

BASEBOARD_PRODUCT:  20E2CTO1WW

BASEBOARD_VERSION:  SDK0J40697 WIN

DUMP_TYPE:  1

BUGCHECK_P1: 3

BUGCHECK_P2: ffffffff8c7c8d20

BUGCHECK_P3: ffffffff8c7c8e8c

BUGCHECK_P4: ffffffff83467030

PROCESS_NAME:  wininit.exe

CRITICAL_PROCESS:  wininit.exe

EXCEPTION_CODE: (Win32) 0x2 (2) - The system cannot find the file specified.

ERROR_CODE: (NTSTATUS) 0x2 - STATUS_WAIT_2

CPU_COUNT: 4

CPU_MHZ: a22

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 3d

CPU_STEPPING: 4

CPU_MICROCODE: 6,3d,4,0 (F,M,S,R)  SIG: 2B'00000000 (cache) 2B'00000000 (init)

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xF4

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  MICHAL

ANALYSIS_SESSION_TIME:  05-18-2019 16:55:46.0519

ANALYSIS_VERSION: 10.0.17763.132 amd64fre

LAST_CONTROL_TRANSFER:  from 8352f415 to 83322de8

STACK_TEXT: 
949d6b9c 8352f415 000000f4 00000003 8c7c8d20 nt!KeBugCheckEx+0x1e
949d6bc0 834aad37 83467030 8c7c8e8c 8c7c8d20 nt!PspCatchCriticalBreak+0x71
949d6bf0 834aab21 8c7c8d20 8c7bcd48 00000002 nt!PspTerminateAllThreads+0x2d
949d6c24 83280a8a 00000000 00000002 0007fce0 nt!NtTerminateProcess+0xcd
949d6c24 77b36c04 00000000 00000002 0007fce0 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007fce0 00000000 00000000 00000000 00000000 0x77b36c04


THREAD_SHA1_HASH_MOD_FUNC:  d712f50ca072f1612c7a4fd1bf3073f1e303157e

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  c57df90cf8d74f01cf0eea84924e099644f4f501

THREAD_SHA1_HASH_MOD:  f08ac56120cad14894587db086f77ce277bfae84

FOLLOWUP_IP:
nt!PspCatchCriticalBreak+71
8352f415 cc              int     3

FAULT_INSTR_CODE:  c2c95bcc

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!PspCatchCriticalBreak+71

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5c92eac5

IMAGE_VERSION:  6.1.7601.24408

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  0xF4_wininit.exe_BUGCHECK_CRITICAL_PROCESS_2_nt!PspCatchCriticalBreak+71

BUCKET_ID:  0xF4_wininit.exe_BUGCHECK_CRITICAL_PROCESS_2_nt!PspCatchCriticalBreak+71

PRIMARY_PROBLEM_CLASS:  0xF4_wininit.exe_BUGCHECK_CRITICAL_PROCESS_2_nt!PspCatchCriticalBreak+71

TARGET_TIME:  2019-05-16T17:44:30.000Z

OSBUILD:  7601

OSSERVICEPACK:  1000

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x86

OSNAME:  Windows 7

OSEDITION:  Windows 7 WinNt (Service Pack 1) TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-03-21 02:37:09

BUILDDATESTAMP_STR:  190320-1700

BUILDLAB_STR:  win7sp1_ldr_escrow

BUILDOSVER_STR:  6.1.7601.24408.x86fre.win7sp1_ldr_escrow.190320-1700

ANALYSIS_SESSION_ELAPSED_TIME:  cb4

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0xf4_wininit.exe_bugcheck_critical_process_2_nt!pspcatchcriticalbreak+71

FAILURE_ID_HASH:  {dc90cda4-a9a8-f3cd-3551-02f1851f1be1}

Followup:     MachineOwner
---------

0: kd> .load pde
=========================================================================================
 PDE v11.3 - Copyright 2017 Andrew Richards
=========================================================================================
0: kd> !dpx
Start memory scan  : 0x949d6b80 ($csp)
End memory scan    : 0x949d7000 (Kernel Stack Base)

VirtualToOffset: 80b96120 not properly sign extended
VirtualToOffset: 80b96120 not properly sign extended
VirtualToOffset: 83384910 not properly sign extended
VirtualToOffset: 83384910 not properly sign extended
VirtualToOffset: 949d6b9c not properly sign extended
VirtualToOffset: 949d6b9c not properly sign extended
VirtualToOffset: 83322de8 not properly sign extended
VirtualToOffset: 83322de8 not properly sign extended
VirtualToOffset: 949d6b80 not properly sign extended
VirtualToOffset: 949d6b80 not properly sign extended
VirtualToOffset: fffe0ff0 not properly sign extended
VirtualToOffset: fffe0ff0 not properly sign extended
VirtualToOffset: 80010031 not properly sign extended
VirtualToOffset: 80010031 not properly sign extended
VirtualToOffset: 92acc056 not properly sign extended
VirtualToOffset: 92acc056 not properly sign extended
VirtualToOffset: 9d970140 not properly sign extended
VirtualToOffset: 9d970140 not properly sign extended
       cr3 : 0x9d970140 :  !du "I.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252|"
VirtualToOffset: 80b93800 not properly sign extended
VirtualToOffset: 80b93800 not properly sign extended
VirtualToOffset: 80b93000 not properly sign extended
VirtualToOffset: 80b93000 not properly sign extended
0x949d6b8c : 0x8c7c8e8c :  !da "wininit.exe"
0x949d6b90 : 0x83467030 :  !da ""Terminating critical process 0x%p (%s).""
0x949d6ba0 : 0x8352f415 : nt!PspCatchCriticalBreak+0x71
0x949d6bb0 : 0x8c7c8e8c :  !da "wininit.exe"
0x949d6bb4 : 0x83467030 :  !da ""Terminating critical process 0x%p (%s).""
0x949d6bc4 : 0x834aad37 : nt!PspTerminateAllThreads+0x2d
0x949d6bc8 : 0x83467030 :  !da ""Terminating critical process 0x%p (%s).""
0x949d6bcc : 0x8c7c8e8c :  !da "wininit.exe"
0x949d6bf4 : 0x834aab21 : nt!NtTerminateProcess+0xcd
0x949d6c10 : 0x834aaa54 : nt!NtTerminateProcess
0x949d6c28 : 0x83280a8a : nt!KiSystemServicePostCall

0: kd> !process 8c7c8d20
PROCESS 8c7c8d20  SessionId: 0  Cid: 0524    Peb: 7ffdf000  ParentCid: 0258
    DirBase: 9d970140  ObjectTable: 9aa154c8  HandleCount:  60.
    Image: wininit.exe
    VadRoot 9ad48d98 Vads 51 Clone 0 Private 182. Modified 0. Locked 0.
    DeviceMap 8ba07e38
    Token                             9ab4ed30
    ElapsedTime                       00:00:01.185
    UserTime                          00:00:00.000
    KernelTime                        00:00:00.000
    QuotaPoolUsage[PagedPool]         63500
    QuotaPoolUsage[NonPagedPool]      3212
    Working Set Sizes (now,min,max)  (771, 50, 345) (3084KB, 200KB, 1380KB)
    PeakWorkingSetSize                771
    VirtualSize                       29 Mb
    PeakVirtualSize                   45 Mb
    PageFaultCount                    957
    MemoryPriority                    BACKGROUND
    BasePriority                      13
    CommitCharge                      250

        THREAD 8c7bcd48  Cid 0524.0528  Teb: 7ffde000 Win32Thread: ffb7b908 RUNNING on processor 0
        Not impersonating
        DeviceMap                 8ba07e38
        Owning Process            8c7c8d20       Image:         wininit.exe
        Attached Process          N/A            Image:         N/A
        Wait Start TickCount      876            Ticks: 0
        Context Switch Count      527            IdealProcessor: 3             
        UserTime                  00:00:00.015
        KernelTime                00:00:00.062
        Win32 Start Address 0x005c4dc8
        Stack Init 949d6ed0 Current 949d6628 Base 949d7000 Limit 949d4000 Call 00000000
        Priority 15 BasePriority 15 PriorityDecrement 0 IoPriority 2 PagePriority 5
        ChildEBP RetAddr 
        949d6b9c 8352f415 nt!KeBugCheckEx+0x1e
        949d6bc0 834aad37 nt!PspCatchCriticalBreak+0x71
        949d6bf0 834aab21 nt!PspTerminateAllThreads+0x2d
        949d6c24 83280a8a nt!NtTerminateProcess+0xcd
        949d6c24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 949d6c34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
        0007fce0 00000000 0x77b36c04

        THREAD 8c7c6460  Cid 0524.0538  Teb: 7ffdd000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode Alertable
            9b1fd3c0  QueueObject
        Not impersonating
        DeviceMap                 8ba07e38
        Owning Process            8c7c8d20       Image:         wininit.exe
        Attached Process          N/A            Image:         N/A
        Wait Start TickCount      809            Ticks: 67 (0:00:00:01.045)
        Context Switch Count      3              IdealProcessor: 1             
        UserTime                  00:00:00.000
        KernelTime                00:00:00.000
        Win32 Start Address 0x77b20287
        Stack Init 8e36aed0 Current 8e36aa60 Base 8e36b000 Limit 8e368000 Call 00000000
        Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
        ChildEBP RetAddr 
        8e36aa78 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
        8e36aab0 832aa6cb nt!KiSwapThread+0x266
        8e36aad8 832ab3bd nt!KiCommitThreadWait+0x1df
        8e36ab38 83477281 nt!KeRemoveQueueEx+0x4f8
        8e36ab90 832c0c77 nt!IoRemoveIoCompletion+0x2e
        8e36ac24 83280a8a nt!NtWaitForWorkViaWorkerFactory+0x1a1
        8e36ac24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 8e36ac34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
        0055fb24 00000000 0x77b36c04

        THREAD 8c7dbad8  Cid 0524.053c  Teb: 7ffdc000 Win32Thread: 00000000 WAIT: (DelayExecution) UserMode Non-Alertable
            9b1fd3c0  QueueObject
        Not impersonating
        DeviceMap                 8ba07e38
        Owning Process            8c7c8d20       Image:         wininit.exe
        Attached Process          N/A            Image:         N/A
        Wait Start TickCount      808            Ticks: 68 (0:00:00:01.060)
        Context Switch Count      4              IdealProcessor: 3             
        UserTime                  00:00:00.000
        KernelTime                00:00:00.000
        Win32 Start Address 0x77b20287
        Stack Init 9103ced0 Current 9103cb08 Base 9103d000 Limit 9103a000 Call 00000000
        Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
        ChildEBP RetAddr 
        9103cb20 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
        9103cb58 832aa6cb nt!KiSwapThread+0x266
        9103cb80 832aa3a9 nt!KiCommitThreadWait+0x1df
        9103cbd8 83477f53 nt!KeDelayExecutionThread+0x2aa
        9103cc24 83280a8a nt!NtDelayExecution+0x8d
        9103cc24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 9103cc34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
        004ef7d8 00000000 0x77b36c04

        THREAD 8c7bdd48  Cid 0524.0550  Teb: 7ffdb000 Win32Thread: 00000000 WAIT: (WrLpcReceive) UserMode Non-Alertable
            8c7bdf7c  Semaphore Limit 0x1
        Not impersonating
        DeviceMap                 8ba07e38
        Owning Process            8c7c8d20       Image:         wininit.exe
        Attached Process          N/A            Image:         N/A
        Wait Start TickCount      808            Ticks: 68 (0:00:00:01.060)
        Context Switch Count      3              IdealProcessor: 1             
        UserTime                  00:00:00.000
        KernelTime                00:00:00.000
        Win32 Start Address 0x005c30a6
        Stack Init 949eded0 Current 949eda00 Base 949ee000 Limit 949eb000 Call 00000000
        Priority 14 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
        ChildEBP RetAddr 
        949eda18 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
        949eda50 832aa6cb nt!KiSwapThread+0x266
        949eda78 832a3e4f nt!KiCommitThreadWait+0x1df
        949edaf4 834856f2 nt!KeWaitForSingleObject+0x393
        949edb28 83487eaa nt!AlpcpReceiveMessagePort+0x421
        949edb94 83487ccc nt!AlpcpReceiveLegacyMessage+0x197
        949edc00 8348805d nt!NtReplyWaitReceivePortEx+0x10e
        949edc1c 83280a8a nt!NtReplyWaitReceivePort+0x18
        949edc1c 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 949edc34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
        0062fb04 00000000 0x77b36c04

        THREAD 86e3e618  Cid 0524.0554  Teb: 7ffda000 Win32Thread: 00000000 WAIT: (UserRequest) UserMode Alertable
            8c7c7ca0  SynchronizationTimer
            8742a220  SynchronizationTimer
            8c7bdc80  SynchronizationTimer
            8c7e7ce8  ProcessObject
        Not impersonating
        DeviceMap                 8ba07e38
        Owning Process            8c7c8d20       Image:         wininit.exe
        Attached Process          N/A            Image:         N/A
        Wait Start TickCount      811            Ticks: 65 (0:00:00:01.014)
        Context Switch Count      4              IdealProcessor: 3             
        UserTime                  00:00:00.000
        KernelTime                00:00:00.000
        Win32 Start Address 0x77b1fbbf
        Stack Init 949f5ed0 Current 949f5648 Base 949f6000 Limit 949f3000 Call 00000000
        Priority 15 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
        ChildEBP RetAddr 
        949f5660 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
        949f5698 832aa6cb nt!KiSwapThread+0x266
        949f56c0 832a64b4 nt!KiCommitThreadWait+0x1df
        949f583c 83477cec nt!KeWaitForMultipleObjects+0x535
        949f5ac8 83477a59 nt!ObpWaitForMultipleObjects+0x262
        949f5c18 83280a8a nt!NtWaitForMultipleObjects+0xcd
        949f5c18 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 949f5c34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
        0083fc30 00000000 0x77b36c04

        THREAD 86e3a030  Cid 0524.0560  Teb: 7ffd9000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode Alertable
            9b1fd3c0  QueueObject
        Not impersonating
        DeviceMap                 8ba07e38
        Owning Process            8c7c8d20       Image:         wininit.exe
        Attached Process          N/A            Image:         N/A
        Wait Start TickCount      809            Ticks: 67 (0:00:00:01.045)
        Context Switch Count      1              IdealProcessor: 1             
        UserTime                  00:00:00.000
        KernelTime                00:00:00.000
        Win32 Start Address 0x77b20287
        Stack Init 94bb5ed0 Current 94bb5a60 Base 94bb6000 Limit 94bb3000 Call 00000000
        Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
        ChildEBP RetAddr 
        94bb5a78 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
        94bb5ab0 832aa6cb nt!KiSwapThread+0x266
        94bb5ad8 832ab3bd nt!KiCommitThreadWait+0x1df
        94bb5b38 83477281 nt!KeRemoveQueueEx+0x4f8
        94bb5b90 832c0c77 nt!IoRemoveIoCompletion+0x2e
        94bb5c24 83280a8a nt!NtWaitForWorkViaWorkerFactory+0x1a1
        94bb5c24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 94bb5c34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
        0066fe44 00000000 0x77b36c04


0: kd> !process 8c7c8e8c
TYPE mismatch for process object at 8c7c8e8c
0: kd> !vm
Page File: \??\C:\pagefile.sys
  Current:   2604844 Kb  Free Space:   2604840 Kb
  Minimum:   2604844 Kb  Maximum:      7814532 Kb

Physical Memory:           651211 (    2604844 Kb)
Available Pages:           342456 (    1369824 Kb)
ResAvail Pages:            377464 (    1509856 Kb)
Locked IO Pages:                0 (          0 Kb)
Free System PTEs:          307754 (    1231016 Kb)
Modified Pages:              1584 (       6336 Kb)
Modified PF Pages:           1570 (       6280 Kb)
Modified No Write Pages:        0 (          0 Kb)
NonPagedPool Usage:         18089 (      72356 Kb)
NonPagedPool Max:          478360 (    1913440 Kb)
PagedPool  0:               29501 (     118004 Kb)
PagedPool  1:                1244 (       4976 Kb)
PagedPool  2:                   0 (          0 Kb)
PagedPool  3:                   0 (          0 Kb)
PagedPool  4:                  20 (         80 Kb)
PagedPool Usage:            30765 (     123060 Kb)
PagedPool Maximum:         523264 (    2093056 Kb)
Processor Commit:             618 (       2472 Kb)
Session Commit:              2364 (       9456 Kb)
Syspart SharedCommit 0
Shared Commit:               3580 (      14320 Kb)
Special Pool:                   0 (          0 Kb)
Kernel Stacks:                741 (       2964 Kb)
Pages For MDLs:            228357 (     913428 Kb)
Pages For AWE:                  0 (          0 Kb)
NonPagedPool Commit:            0 (          0 Kb)
PagedPool Commit:           30802 (     123208 Kb)
Driver Commit:               7739 (      30956 Kb)
Boot Commit:                    0 (          0 Kb)
System PageTables:              0 (          0 Kb)
VAD/PageTable Bitmaps:         17 (         68 Kb)
ProcessLockedFilePages:         0 (          0 Kb)
Pagefile Hash Pages:            0 (          0 Kb)
Sum System Commit:         274218 (    1096872 Kb)
Total Private:               5669 (      22676 Kb)
Misc/Transient Commit:      32392 (     129568 Kb)
Committed pages:           312279 (    1249116 Kb)
Commit limit:             1302005 (    5208020 Kb)

  Pid ImageName                        Commit   SharedCommit        Debt

  52c csrss.exe                      18616 Kb           0 Kb        0 Kb
  558 services.exe                    1360 Kb           0 Kb        0 Kb
  2d0 csrss.exe                       1148 Kb           0 Kb        0 Kb
  524 wininit.exe                     1000 Kb           0 Kb        0 Kb
  1cc smss.exe                         376 Kb           0 Kb        0 Kb
  51c smss.exe                         124 Kb           0 Kb        0 Kb
    4 System                            52 Kb           0 Kb        0 Kb
0: kd> !poolused 2
....
 Sorting by NonPaged Pool Consumed

               NonPaged                  Paged
 Tag     Allocs         Used     Allocs         Used

 btmh       126     15313112          8          576    UNKNOWN pooltag 'btmh', please update pooltag.txt
 EtwB       109     13490200          4       262144    Etw Buffer , Binary: nt!etw
 smNp      2053      8409088          0            0    ReadyBoost store node pool allocations , Binary: nt!store or rdyboost.sys
 IWA1         2      4268032          0            0    UNKNOWN pooltag 'IWA1', please update pooltag.txt
 SynT       474      3836888        184        14960    UNKNOWN pooltag 'SynT', please update pooltag.txt
 smBt       837      3428352          0            0    ReadyBoost various B+Tree allocations , Binary: nt!store or rdyboost.sys
 Pool         5      2197064          0            0    Pool tables, etc.
 Mdl        186      2081576          0            0    Io, Mdls
 Cont       243      1253520          0            0    Contiguous physical memory allocations for device drivers
 Mmdi      6804      1185432          0            0    MDLs for physical memory allocations , Binary: nt!mm
 IWBy         1      1048576          0            0    UNKNOWN pooltag 'IWBy', please update pooltag.txt
 KCNw        38      1040448          0            0    UNKNOWN pooltag 'KCNw', please update pooltag.txt
 Ixxx        19      1028128          0            0    UNKNOWN pooltag 'Ixxx', please update pooltag.txt
 IWBX         3       910472          0            0    UNKNOWN pooltag 'IWBX', please update pooltag.txt
 @MP        165       835144          6       270496    (Intel video driver) Miniport related memory
 IWCp        31       562424          0            0    UNKNOWN pooltag 'IWCp', please update pooltag.txt
 RTLG         1       524288          0            0    UNKNOWN pooltag 'RTLG', please update pooltag.txt
 AmlH         8       524288          0            0    ACPI AMLI Pooltags
 IU3C         1       483328          2           48    IIS Utility Driver
 IWCo        31       437496          0            0    UNKNOWN pooltag 'IWCo', please update pooltag.txt
 Devi       496       419480          0            0    Device objects
 Mm           9       333568          3           88    general Mm Allocations , Binary: nt!mm
 @GMM        57       323064          0            0    (Intel video driver) Memory manager
 smPr         1       315392          0            0    ReadyBoot population ranges , Binary: rdyboost.sys
 CDmp        13       289272          0            0    Crashdump driver , Binary: crashdmp.sys
 HTab       275       282816          0            0    Hash Table pool
 VHAL        14       271704          0            0    UNKNOWN pooltag 'VHAL', please update pooltag.txt
 :PRQ         1       241664          0            0    UNKNOWN pooltag ':PRQ', please update pooltag.txt
 smMR         1       221184          0            0    ReadyBoot multi-read ranges , Binary: rdyboost.sys
 @SB        674       211344          0            0    (Intel video driver) Soft BIOS
 NtFs         9       207144        879        88448    StrucSup.c , Binary: ntfs.sys
 IWBG         1       204800          0            0    UNKNOWN pooltag 'IWBG', please update pooltag.txt
 CcPB         6       196608          0            0    Prefetcher trace buffer , Binary: nt!ccpf
 IPRT       522       172104          0            0    UNKNOWN pooltag 'IPRT', please update pooltag.txt
 EtwG       425       163200          0            0    Etw Guid , Binary: nt!etw
 smPi         1       159744          0            0    ReadyBoot population ranges index , Binary: rdyboost.sys
 smPl         1       159744          0            0    ReadyBoot pended IRP lists , Binary: rdyboost.sys
 Ntfx       846       146016          0            0    General Allocation , Binary: ntfs.sys
 btma        27       140384          4          288    UNKNOWN pooltag 'btma', please update pooltag.txt
 ViMm        55       139560         60       146528    Video memory manager , Binary: dxgkrnl.sys
 IW3i         1       135168          0            0    UNKNOWN pooltag 'IW3i', please update pooltag.txt
 Thre       184       134416          0            0    Thread objects , Binary: nt!ps
 CcVa         2       131088          0            0    Cache Manager Initial array of Vacbs , Binary: nt!cc
 IWBp         1       131072          0            0    UNKNOWN pooltag 'IWBp', please update pooltag.txt
 Tcpt        33       130472          0            0    TCP Timers , Binary: tcpip.sys
 AWO0         4       114240          0            0    UNKNOWN pooltag 'AWO0', please update pooltag.txt
 IU3B       185       113328          0            0    IIS Utility Driver
 File       640       112000          0            0    File objects
 IWA3         1       110592          0            0    UNKNOWN pooltag 'IWA3', please update pooltag.txt
 IWBH         2       104480          0            0    UNKNOWN pooltag 'IWBH', please update pooltag.txt
 :HAT         4        98528          0            0    UNKNOWN pooltag ':HAT', please update pooltag.txt
 Irp        255        91816          0            0    Io, IRP packets
 ViSh       120        91248          0            0    Video scheduler , Binary: dxgkrnl.sys
 FxLg        21        86016          0            0    KMDF IFR log tag , Binary: wdf01000.sys
 DMM@        21        84880          1           16    UNKNOWN pooltag 'DMM@', please update pooltag.txt
 smSt         3        83928          0            0    ReadyBoost various store allocations , Binary: nt!store or rdyboost.sys
 AmlC        10        81920          0            0    ACPI AMLI Pooltags
 IWGw         1        81920          0            0    UNKNOWN pooltag 'IWGw', please update pooltag.txt
 Lfsr         5        81920          0            0    UNKNOWN pooltag 'Lfsr', please update pooltag.txt
 smRg         1        81920          0            0    ReadyBoost in-memory store region array , Binary: nt!store or rdyboost.sys
 MmIo        60        80896          0            0    IO space mapping trackers , Binary: nt!mm
 Dnod       196        78400          0            0    Device node structure
 IPrq        13        76376          0            0    IP Request Control data , Binary: tcpip.sys
 Ntfi       240        71040          0            0    IRP_CONTEXT , Binary: ntfs.sys
 niJr         1        69632          0            0    UNKNOWN pooltag 'niJr', please update pooltag.txt
 CcSc       183        65880          0            0    Cache Manager Shared Cache Map , Binary: nt!cc
 VoSb         4        65536          0            0    Buffer allocations , Binary: volsnap.sys
 IWJc         1        65536          0            0    UNKNOWN pooltag 'IWJc', please update pooltag.txt
 AzAd        67        62576          0            0    HD Audio Class Driver (AzPcAudDev) , Binary: HDAudio.sys
 DFsK         1        60008          0            0    UNKNOWN pooltag 'DFsK', please update pooltag.txt
 NDif        51        59120          0            0    NDIS_TAG_IF , Binary: ndis.sys
 Cngb       666        58632          0            0    CNG kmode crypto pool tag , Binary: ksecdd.sys
 FMsl       557        57928          0            0    STREAM_LIST_CTRL structure , Binary: fltmgr.sys
 SbM.        73        57088          0            0    UNKNOWN pooltag ' SbM', please update pooltag.txt
 MmCa       374        55632          0            0    Mm control areas for mapped files , Binary: nt!mm
 WfpS         2        53824          0            0    WFP startup , Binary: netio.sys
 usbp        61        53360          1           48    UNKNOWN pooltag 'usbp', please update pooltag.txt
 MmCi       163        51336          0            0    Mm control areas for images , Binary: nt!mm
 WPLg        24        49824          0            0    UNKNOWN pooltag 'WPLg', please update pooltag.txt
 AcpD       125        47216          0            0    ACPI device data , Binary: acpi.sys
 Hal         57        44152          1          136    Hardware Abstraction Layer , Binary: hal.dll
 Driv       189        42768          0            0    Driver objects
 IWkR        31        42160          0            0    UNKNOWN pooltag 'IWkR', please update pooltag.txt
 WfpC         2        41008          0            0    WFP callouts , Binary: netio.sys
 IrbL        52        39520          0            0    UNKNOWN pooltag 'IrbL', please update pooltag.txt
 GZrl       229        37088         94        20200    UNKNOWN pooltag 'GZrl', please update pooltag.txt
 IdeP        26        36296          0            0    atapi IDE
 UsbC        24        34808          0            0    UNKNOWN pooltag 'UsbC', please update pooltag.txt
 CPnp       129        34056          0            0    ClassPnP transfer packets , Binary: classpnp.sys
 IWJQ        16        32896          0            0    UNKNOWN pooltag 'IWJQ', please update pooltag.txt
 Tdx          4        32840          0            0    TDX Generic Buffers (Address, Entity information, Interface change allocations) , Binary: tdx.sys
 VmBu         1        32768          0            0    I/O buffers , Binary: volmgrx.sys
 AzBD        40        31616          0            0    UNKNOWN pooltag 'AzBD', please update pooltag.txt
 IWAm         2        31536          0            0    UNKNOWN pooltag 'IWAm', please update pooltag.txt
 CcVl        30        30688          0            0    Cache Manager Vacb Level structures (large streams) , Binary: nt!cc
 ClfC         6        30384          0            0    CLFS Log physical FCB lookaside list , Binary: clfs.sys
 UHUB        39        30160          3          272    Universal Serial Bus Hub
 AzMD         9        29880          0            0    UNKNOWN pooltag 'AzMD', please update pooltag.txt
 inte       141        28216          5          328    UNKNOWN pooltag 'inte', please update pooltag.txt
 ClfB         6        26592          0            0    CLFS Log base file lookaside list , Binary: clfs.sys
 Io         682        25944          5          224    general IO allocations , Binary: nt!io
 NDam        33        25800          0            0    NdisAllocateMemory , Binary: ndis.sys
 AzWd        69        25616          0            0    HD Audio Class Driver (AzWidget) , Binary: HDAudio.sys
 #EVL       533        25584          0            0    UNKNOWN pooltag '#EVL', please update pooltag.txt
 IU3X        18        25056          0            0    IIS Utility Driver
 IWGg         1        24416          0            0    UNKNOWN pooltag 'IWGg', please update pooltag.txt
 IWGa         1        23904          0            0    UNKNOWN pooltag 'IWGa', please update pooltag.txt
 smVr       142        23856          0            0    ReadyBoost allocations , Binary: nt!store or rdyboost.sys
 @GMf        16        23424          0            0    UNKNOWN pooltag '@GMf', please update pooltag.txt
 NDmo        16        23168          0            0    NDIS_TAG_M_OPEN_BLK , Binary: ndis.sys
 TcHT        32        22784          0            0    TCP Hash Tables , Binary: tcpip.sys
 IWDM         1        22752          0            0    UNKNOWN pooltag 'IWDM', please update pooltag.txt
 NDw1        10        22368          0            0    NDIS_TAG_WMI_GUID_TO_OID , Binary: ndis.sys
 DxgK        23        22168         28       456384    Vista display driver support , Binary: dxgkrnl.sys
 MmLd       172        22096          0            0    Mm load module database , Binary: nt!mm
 @PC         31        21456          0            0    UNKNOWN pooltag '@PC ', please update pooltag.txt
 EtwR       203        21368          0            0    Etw KM RegEntry , Binary: nt!etw
 SMBi        16        20912          1          128    UNKNOWN pooltag 'SMBi', please update pooltag.txt
 RhHi         1        20496          0            0    Reference History Pool , Binary: tcpip.sys
 InPP         2        20176          0            0    Inet Port pool , Binary: tcpip.sys
 GZul       110        20128        170        27032    UNKNOWN pooltag 'GZul', please update pooltag.txt
 fbDm       191        19720          0            0    UNKNOWN pooltag 'fbDm', please update pooltag.txt
 LEqd        90        19632          9         1944    UNKNOWN pooltag 'LEqd', please update pooltag.txt
 FMic        27        19152          0            0    IRP_CTRL structure , Binary: fltmgr.sys
 IWCJ         1        18800          0            0    UNKNOWN pooltag 'IWCJ', please update pooltag.txt
 IWGq         1        18096          0            0    UNKNOWN pooltag 'IWGq', please update pooltag.txt
 IU3P        53        18032          3          368    IIS Utility Driver
 PciB        31        17184         16         1632    PnP pci bus enumerator , Binary: pci.sys
 Fsb         44        16896          0            0    Fixed-Size Block pool , Binary: netio.sys
 MmHt         2        16656          0            0    session space PTE data , Binary: nt!mm
 PnpI       196        16552          0            0    PNPMGR instance path , Binary: nt!pnp
 InPa         2        16416          0            0    Inet Port Assignments , Binary: tcpip.sys
 InPA       512        16384          0            0    Inet Port Assignment Arrays , Binary: tcpip.sys
 #HAT         1        16384          0            0    UNKNOWN pooltag '#HAT', please update pooltag.txt
 ^HAT         1        16384          0            0    UNKNOWN pooltag '^HAT', please update pooltag.txt
 KeIn         4        16384          0            0    UNKNOWN pooltag 'KeIn', please update pooltag.txt
 dFVE         1        16384          0            0    Full Volume Encryption crash dump filter (Bitlocker Drive Encryption) , Binary: dumpfve.sys
 :MDL         1        16352          0            0    UNKNOWN pooltag ':MDL', please update pooltag.txt
 @GMo        11        16104          0            0    UNKNOWN pooltag '@GMo', please update pooltag.txt
 smRW         1        15544          0            0    ReadyBoot read-after-write ranges , Binary: rdyboost.sys
 MEI.        87        15488          5          416    UNKNOWN pooltag ' MEI', please update pooltag.txt
 VWFF         6        14992          0            0    Virtual Wi-Fi Filter Driver (object allocation) , Binary: vwififlt.sys
 Ntft        40        14720          0            0    SCB (Prerestart) , Binary: ntfs.sys
 Uwrp        14        14608          0            0    UNKNOWN pooltag 'Uwrp', please update pooltag.txt
 IWJJ        15        14496          0            0    UNKNOWN pooltag 'IWJJ', please update pooltag.txt
 #HFI         1        14464          0            0    UNKNOWN pooltag '#HFI', please update pooltag.txt
 Whea         8        14384          0            0    UNKNOWN pooltag 'Whea', please update pooltag.txt
 IWBz         1        14232          0            0    UNKNOWN pooltag 'IWBz', please update pooltag.txt
 HDAu        85        13928         23         4680    UNKNOWN pooltag 'HDAu', please update pooltag.txt
 IWCn        31        13640          0            0    UNKNOWN pooltag 'IWCn', please update pooltag.txt
 Gsem       168        13376          0            0    Gdi Semaphores
 LHid        45        13008          6          632    UNKNOWN pooltag 'LHid', please update pooltag.txt
 FMis        28        12832          0            0    FLT_INSTANCE structure , Binary: fltmgr.sys
  IBM         7        12816          1          128    UNKNOWN pooltag ' IBM', please update pooltag.txt
 MiSc        64        12800          0            0    UNKNOWN pooltag 'MiSc', please update pooltag.txt
 Scbf        17        12648          0            0    Mass storage driver tags
 MuoC         6        12168          0            0    UNKNOWN pooltag 'MuoC', please update pooltag.txt
 CcBc        84        12096          0            0    Cache Manager Bcb from pool , Binary: nt!cc
 ObCi       209        11704          0            0    captured information for ObCreateObject , Binary: nt!ob
 NDqu        10        11600          0            0    NDIS_TAG_QUEUE , Binary: ndis.sys
 IWD8         1        11320          0            0    UNKNOWN pooltag 'IWD8', please update pooltag.txt
 IWDc         1        10952          0            0    UNKNOWN pooltag 'IWDc', please update pooltag.txt
 IntO        91        10920          0            0    UNKNOWN pooltag 'IntO', please update pooltag.txt
 IWFH         1        10880          0            0    UNKNOWN pooltag 'IWFH', please update pooltag.txt
 #KTP       455        10864          0            0    UNKNOWN pooltag '#KTP', please update pooltag.txt
 Wmip       270        10800        412        43336    Wmi General purpose allocation
 AzDH         9        10800          0            0    UNKNOWN pooltag 'AzDH', please update pooltag.txt
 IWxa        18        10656          0            0    UNKNOWN pooltag 'IWxa', please update pooltag.txt
 Wdog        11        10456          2           48    Watchdog object/context allocation , Binary: watchdog.sys
 IWEC         1        10368          0            0    UNKNOWN pooltag 'IWEC', please update pooltag.txt
 IWC9         1        10272          0            0    UNKNOWN pooltag 'IWC9', please update pooltag.txt
 IWBo         1        10248          0            0    UNKNOWN pooltag 'IWBo', please update pooltag.txt
 IWBn         1        10248          0            0    UNKNOWN pooltag 'IWBn', please update pooltag.txt
 IWBb         1        10240          0            0    UNKNOWN pooltag 'IWBb', please update pooltag.txt
 IWBx         1        10240          0            0    UNKNOWN pooltag 'IWBx', please update pooltag.txt
 DtrV        34        10232          0            0    UNKNOWN pooltag 'DtrV', please update pooltag.txt
 tvEm         9        10192          0            0    UNKNOWN pooltag 'tvEm', please update pooltag.txt
 ibtu        45        10104          1          128    UNKNOWN pooltag 'ibtu', please update pooltag.txt
 #HTM       140        10080          0            0    UNKNOWN pooltag '#HTM', please update pooltag.txt
 HidC        75         9984         10          880    HID Class driver , Binary: hidclass.sys
 AZ16         9         9936          0            0    UNKNOWN pooltag 'AZ16', please update pooltag.txt
 IWBF         1         9888          0            0    UNKNOWN pooltag 'IWBF', please update pooltag.txt
 Dcdd        25         9808          0            0    Canonical display driver , Binary: cdd.dll
 iusb        95         9720          3          264    UNKNOWN pooltag 'iusb', please update pooltag.txt
 FMct        28         9632          0            0    TRACK_COMPLETION_NODES structure , Binary: fltmgr.sys
 IWfs         1         9616          0            0    UNKNOWN pooltag 'IWfs', please update pooltag.txt
 FMrr        56         9600          0            0    Per-processor Cache-aware rundown ref structure , Binary: fltmgr.sys
 WfTi        22         9592          0            0    WFP timer
 RxIr         9         9576          0            0    RDBSS RxContext , Binary: rdbss.sys
 LMou        42         9480          6          648    UNKNOWN pooltag 'LMou', please update pooltag.txt
 smVR         1         9400          0            0    ReadyBoost allocations , Binary: nt!store or rdyboost.sys
 AfdE        15         9384          0            0    Afd endpoint structure , Binary: afd.sys
 IWEO         1         9352          0            0    UNKNOWN pooltag 'IWEO', please update pooltag.txt
 EtwL        13         9344          0            0    Etw LoggerContext , Binary: nt!etw
 FSrt        60         9296         12         8736    File System Run Time allocations (DO NOT USE!) , Binary: nt!fsrtl
 Mmdl         3         9240          0            0    Mm Mdls for flushes , Binary: nt!mm
 IW2P        18         9072          0            0    UNKNOWN pooltag 'IW2P', please update pooltag.txt
 CcVp        25         9024          0            0    Cache Manager Array of Vacb pointers for a cached stream , Binary: nt!cc
 IWA8         1         8968          0            0    UNKNOWN pooltag 'IWA8', please update pooltag.txt
 IWBA         1         8824          0            0    UNKNOWN pooltag 'IWBA', please update pooltag.txt
 @GMa         6         8784          0            0    UNKNOWN pooltag '@GMa', please update pooltag.txt
 IWEN         1         8768          0            0    UNKNOWN pooltag 'IWEN', please update pooltag.txt
 IWEe        91         8736          0            0    UNKNOWN pooltag 'IWEe', please update pooltag.txt
 Vad        121         8712          0            0    Mm virtual address descriptors , Binary: nt!mm
 IWGQ         1         8504          0            0    UNKNOWN pooltag 'IWGQ', please update pooltag.txt
 ObjT        42         8400          0            0    object type objects , Binary: nt!ob
 NDpp         4         8352          0            0    packet pool , Binary: ndis.sys
 VfAT       172         8280          0            0    Verifier AVL trees , Binary: nt!Vf
 EtwQ         1         8192          0            0    UNKNOWN pooltag 'EtwQ', please update pooltag.txt
 Ipur         2         8192          0            0    IP Unicast Routes , Binary: tcpip.sys
 PPMi         8         8192          0            0    Kernel Processor Power Management Idle States. , Binary: nt!po
 #ELC         1         8192          0            0    UNKNOWN pooltag '#ELC', please update pooltag.txt
 moni        43         8096          3          224    UNKNOWN pooltag 'moni', please update pooltag.txt
 FxDr        24         8048          1          128    KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable. , Binary: wdf01000.sys
 MmDb        47         7968          0            0    NtMapViewOfSection service , Binary: nt!mm
 FMvo         6         7952          0            0    FLT_VOLUME structure , Binary: fltmgr.sys
 IWCI         1         7936          0            0    UNKNOWN pooltag 'IWCI', please update pooltag.txt
 WmiR       123         7872          0            0    Wmi Registration info blocks
 SmbD        52         7728          4          296    SMB miniredirector allocations , Binary: mrxsmb.sys
 TTEC         1         7688          0            0    UNKNOWN pooltag 'TTEC', please update pooltag.txt
 AleE        20         7528          0            0    ALE endpoint context , Binary: tcpip.sys
 AleP        23         7464          0            0    ALE process image path , Binary: tcpip.sys
 HCIT        14         7392          1          128    Bluetooth port driver (HCI) , Binary: bthport.sys
 @GMe         5         7320          0            0    UNKNOWN pooltag '@GMe', please update pooltag.txt
 IWDK         1         7304          0            0    UNKNOWN pooltag 'IWDK', please update pooltag.txt
 ALPC        23         7240          0            0    ALPC port objects , Binary: nt!alpc
 TcpI        10         7104          0            0    TCP ISN buffers , Binary: tcpip.sys
 Clfs       109         7048         34       225872    CLFS General buffer, or owner page lookaside list , Binary: clfs.sys
 MmSc        97         6984          0            0    subsections used to map data files , Binary: nt!mm
 Etwp         4         6944          0            0    Etw TracingBlock , Binary: nt!etw
 IWXa       143         6864          0            0    UNKNOWN pooltag 'IWXa', please update pooltag.txt
 IWqD        18         6768          0            0    UNKNOWN pooltag 'IWqD', please update pooltag.txt
 IW0k        18         6768          0            0    UNKNOWN pooltag 'IW0k', please update pooltag.txt
 IWv6         1         6760          0            0    UNKNOWN pooltag 'IWv6', please update pooltag.txt
 ReTa       203         6656          0            0    Resource Extended Table
 TPM.        31         6496          4          272    UNKNOWN pooltag ' TPM', please update pooltag.txt
 IWIt        90         6480          0            0    UNKNOWN pooltag 'IWIt', please update pooltag.txt
 IWTv         1         6424          0            0    UNKNOWN pooltag 'IWTv', please update pooltag.txt
 IWHk         1         6376          0            0    UNKNOWN pooltag 'IWHk', please update pooltag.txt
 Ntfn        75         6336          0            0    SCB_NONPAGED , Binary: ntfs.sys
 PmPE         8         6336          0            0    Partition Manager partition entry , Binary: partmgr.sys
 IWDE         1         6336          0            0    UNKNOWN pooltag 'IWDE', please update pooltag.txt
 FIcv        10         6320          0            0    FileInfo FS-filter Volume Context , Binary: fileinfo.sys
 IWCz         1         6152          0            0    UNKNOWN pooltag 'IWCz', please update pooltag.txt
 IWC1         1         6152          0            0    UNKNOWN pooltag 'IWC1', please update pooltag.txt
 IWOm         1         6128          0            0    UNKNOWN pooltag 'IWOm', please update pooltag.txt
 Prcr        28         5984          4         4128    Processr driver allocations , Binary: processr.sys
 Pcsb         4         5952          0            0    PACER Send Buffers , Binary: pacer.sys
 4321         4         5952          0            0    UNKNOWN pooltag '4321', please update pooltag.txt
 NDco        28         5872          0            0    NDIS_TAG_CO , Binary: ndis.sys
 Iptt        18         5856          0            0    IP Timer Tables , Binary: tcpip.sys
 IWzQ         1         5840          0            0    UNKNOWN pooltag 'IWzQ', please update pooltag.txt
 Even        96         5808          0            0    Event objects
 IWGU         1         5784          0            0    UNKNOWN pooltag 'IWGU', please update pooltag.txt
 FMfc        51         5712          0            0    FLTMGR_FILE_OBJECT_CONTEXT structure , Binary: fltmgr.sys
 NDan        48         5504          0            0    adapter name , Binary: ndis.sys
 Proc         7         5456          0            0    Process objects , Binary: nt!ps
 Ntff        22         5456        511       457856    FCB_DATA , Binary: ntfs.sys
 TmRm        14         5376          0            0    Tm KRESOURCEMANAGER object , Binary: nt!tm
 #TLQ       224         5376          0            0    UNKNOWN pooltag '#TLQ', please update pooltag.txt
 ClfE        28         5376          0            0    CLFS Log CCB lookaside list , Binary: clfs.sys
 IU3M       167         5344          0            0    IIS Utility Driver
 HidP        20         5216          0            0    HID Parser , Binary: hidparse.sys
 vwif        33         5104          2          192    UNKNOWN pooltag 'vwif', please update pooltag.txt
 ND          40         5064          1          128    general NDIS allocations , Binary: ndis.sys
 TPOP         2         5008          0            0    UNKNOWN pooltag 'TPOP', please update pooltag.txt
 KbdC         5         4960          0            0    Keyboard Class Driver , Binary: kbdclass.sys
 ETOF        28         4952          0            0    UNKNOWN pooltag 'ETOF', please update pooltag.txt
 NDfb         9         4752          0            0    NDIS_TAG_LWFILTER_BLOCK , Binary: ndis.sys
 IWBS         9         4752          0            0    UNKNOWN pooltag 'IWBS', please update pooltag.txt
 NDoa         9         4680          0            0    NDIS_TAG_OID_ARRAY , Binary: ndis.sys
 Nhfs         2         4664          0            0    NetIO Hash Function State Data , Binary: tcpip.sys
 HdCl        10         4608          2          240    HID Client Sample Driver
 IU3H        27         4576          2         4224    IIS Utility Driver
 Ioin        25         4520          0            0    Io interrupts
 IWAl         2         4512          0            0    UNKNOWN pooltag 'IWAl', please update pooltag.txt
 ClfD        10         4480          0            0    CLFS Log virtual FCB lookaside list , Binary: clfs.sys
 TDIk         2         4480          0            0    TDI resource
 umbu        21         4456          4          280    UNKNOWN pooltag 'umbu', please update pooltag.txt
 IWXb        91         4368          0            0    UNKNOWN pooltag 'IWXb', please update pooltag.txt
 vdrv        20         4328          3          272    UNKNOWN pooltag 'vdrv', please update pooltag.txt
 ScPC         2         4304          0            0    reset bus code
 IWLA         1         4264          0            0    UNKNOWN pooltag 'IWLA', please update pooltag.txt
 TmTm         7         4200          0            0    Tm KTRANSACTIONMANAGER object , Binary: nt!tm
 Txrn         5         4200          0            0    TXF_NONPAGED_RMCB , Binary: ntfs.sys
 GZci        10         4160          0            0    UNKNOWN pooltag 'GZci', please update pooltag.txt
 MmSi       173         4152          0            0    Control area security image stubs , Binary: nt!mm
 CCsw         4         4128          0            0    UNKNOWN pooltag 'CCsw', please update pooltag.txt
 I6ua         1         4096          0            0    IPv6 Local Unicast Addresses , Binary: tcpip.sys
 I6ai         1         4096          0            0    IPv6 Local Address Identifiers , Binary: tcpip.sys
 InF2         1         4096          0            0    Inet Generic Fixed Size Block pool 2 , Binary: tcpip.sys
 I4ua         1         4096          0            0    IPv4 Local Unicast Addresses , Binary: tcpip.sys
 Plcl         1         4096          0            0    Cache aware pushlock entry. One per processor
 AWP0         1         4096          0            0    UNKNOWN pooltag 'AWP0', please update pooltag.txt
 I4ba         1         4096          0            0    IPv4 Local Broadcast Addresses , Binary: tcpip.sys
 I4ai         1         4096          0            0    IPv4 Local Address Identifiers , Binary: tcpip.sys
 CcZe         1         4096          0            0    Cache Manager Buffer of Zeros , Binary: nt!cc
 IWC0         7         4088          0            0    UNKNOWN pooltag 'IWC0', please update pooltag.txt
 NtFL        12         4072         25         1000    LogSup.c , Binary: ntfs.sys
 :PRT         1         4000          0            0    UNKNOWN pooltag ':PRT', please update pooltag.txt
 msis        20         3960          3          240    UNKNOWN pooltag 'msis', please update pooltag.txt
 8042         4         3944          0            0    PS/2 keyboard and mouse , Binary: i8042prt.sys
 Comp        20         3936          1          144    UNKNOWN pooltag 'Comp', please update pooltag.txt
 IWD5         1         3928          0            0    UNKNOWN pooltag 'IWD5', please update pooltag.txt
 AleS         8         3744          0            0    ALE token info , Binary: tcpip.sys
 NMRb        52         3744          0            0    Network Module Registrar Bindings , Binary: tcpip.sys
 Flng         4         3696          0            0    Framing Layer Generic Buffers (Tunnel/Port change notifications, ACLs) , Binary: tcpip.sys
 #HRL       142         3664          0            0    UNKNOWN pooltag '#HRL', please update pooltag.txt
 NMRm        57         3648          0            0    Network Module Registrar Modules , Binary: tcpip.sys
 Gemm        17         3624          3          240    UNKNOWN pooltag 'Gemm', please update pooltag.txt
 AcpS        86         3592          1           32    ACPI string data , Binary: acpi.sys
 MmIn        16         3584          0            0    Mm inpaged io structures , Binary: nt!mm
 IWAy         2         3376          0            0    UNKNOWN pooltag 'IWAy', please update pooltag.txt
 IWkw         1         3336          0            0    UNKNOWN pooltag 'IWkw', please update pooltag.txt
 ReSe       104         3328          0            0    Resource Semaphore
 PnpV        52         3328          0            0    PNPMGR notify entry loc , Binary: nt!pnp
 GZdp         1         3280          0            0    UNKNOWN pooltag 'GZdp', please update pooltag.txt
 TcWS         1         3272          0            0    TCP Window Scaling Diagnostics , Binary: tcpip.sys
 IWEG         1         3208          0            0    UNKNOWN pooltag 'IWEG', please update pooltag.txt
 Fwpp        18         3200          3        12424    Windows Filtering Platform export driver. , Binary: fwpkclnt.sys
 AlPi        14         3200          0            0    ALE peer info , Binary: tcpip.sys
 #STX        30         3120          0            0    UNKNOWN pooltag '#STX', please update pooltag.txt
 Hcac         5         3080          2          688    UNKNOWN pooltag 'Hcac', please update pooltag.txt
 IWI6         1         3064          0            0    UNKNOWN pooltag 'IWI6', please update pooltag.txt
 PXb.         5         3040          0            0    UNKNOWN pooltag ' PXb', please update pooltag.txt
 PX3.         5         3000          0            0    UNKNOWN pooltag ' PX3', please update pooltag.txt
 StBn         3         3000          0            0    UNKNOWN pooltag 'StBn', please update pooltag.txt
 NDpb         7         3000          0            0    protocol block , Binary: ndis.sys
 NDnd         2         2976          0            0    NDIS_TAG_POOL_NDIS , Binary: ndis.sys
 TRWp         2         2976          0            0    UNKNOWN pooltag 'TRWp', please update pooltag.txt
 IWl0        12         2976          0            0    UNKNOWN pooltag 'IWl0', please update pooltag.txt
 NSIr        40         2952          0            0    NSI Generic Buffers , Binary: nsi.dll
 IWJt         8         2920          0            0    UNKNOWN pooltag 'IWJt', please update pooltag.txt
 VfIT       154         2920          0            0    Verifier Import Address Table information , Binary: nt!Vf
 cppD       121         2904          0            0    UNKNOWN pooltag 'cppD', please update pooltag.txt
 IWA7         6         2864          0            0    UNKNOWN pooltag 'IWA7', please update pooltag.txt
 NDst        18         2856          0            0    NDIS_TAG_STRING , Binary: ndis.sys
 IWHI         1         2832          0            0    UNKNOWN pooltag 'IWHI', please update pooltag.txt
 IWBC        21         2816          0            0    UNKNOWN pooltag 'IWBC', please update pooltag.txt
 IWBY         3         2808          0            0    UNKNOWN pooltag 'IWBY', please update pooltag.txt
 IWEn         1         2608          0            0    UNKNOWN pooltag 'IWEn', please update pooltag.txt
 Io..         4         2592          0            0    UNKNOWN pooltag '  Io', please update pooltag.txt
 NDpf        11         2552          0            0    NDIS_TAG_FILTER , Binary: ndis.sys
 FMfl         5         2512          0            0    FLT_FILTER structure , Binary: fltmgr.sys
 IWAq        62         2480          0            0    UNKNOWN pooltag 'IWAq', please update pooltag.txt
 FstB         3         2472          0            0    ntos\fstub
 MT02         1         2432          0            0    UNKNOWN pooltag 'MT02', please update pooltag.txt
 IWBB         2         2416          0            0    UNKNOWN pooltag 'IWBB', please update pooltag.txt
 AWP3        20         2352          0            0    UNKNOWN pooltag 'AWP3', please update pooltag.txt
 FOCX        49         2352          0            0    File System Run Time File Object Context structure , Binary: nt!fsrtl
 TcPt         1         2312          0            0    TCP Partitions , Binary: tcpip.sys
 KeSc        41         2304          0            0    UNKNOWN pooltag 'KeSc', please update pooltag.txt
 IWBU         6         2296          0            0    UNKNOWN pooltag 'IWBU', please update pooltag.txt
 ReEv        95         2280          0            0    Resource Event
 NBSf         2         2280          0            0    FCB
 Dprt        19         2272         16         1472    Video port for Vista display drivers , Binary: dxgkrnl.sys
 Vadl        28         2240          0            0    Mm virtual address descriptors (long) , Binary: nt!mm
 IWBE         1         2232          0            0    UNKNOWN pooltag 'IWBE', please update pooltag.txt
 TdxT        12         2216          0            0    TDX Transport Provider Contexts , Binary: tdx.sys
 Pcle         4         2216          0            0    PACER Lines , Binary: pacer.sys
 Nb01         2         2208          0            0    NetBT hash table , Binary: netbt.sys
 NLcp         2         2192          0            0    Network Layer Compartments , Binary: tcpip.sys
 Alep        16         2176          0            0    ALE process info , Binary: tcpip.sys
 ONEL         1         2144          0            0    UNKNOWN pooltag 'ONEL', please update pooltag.txt
 CcPc        22         2112          0            0    Cache Manager Private Cache Map , Binary: nt!cc
 PcCr         4         2112          1           40    WDM audio stuff
 FlpI        12         2112          0            0    Framing Layer Interfaces , Binary: tcpip.sys
 ACPN         4         2080          0            0    UNKNOWN pooltag 'ACPN', please update pooltag.txt
 IPdc         2         2064          0            0    IP Destination Cache , Binary: tcpip.sys
 WanO         1         2064          0            0    NdisWan Tags (PPP Framing module for Remote Access)
 IWCy         1         2056          0            0    UNKNOWN pooltag 'IWCy', please update pooltag.txt
 Frag       257         2056        120          960    UNKNOWN pooltag 'Frag', please update pooltag.txt
 FMcr         4         2032          0            0    Context registration structures , Binary: fltmgr.sys
 #EVR         1         2024          0            0    UNKNOWN pooltag '#EVR', please update pooltag.txt
 PX2.         1         2008          0            0    UNKNOWN pooltag ' PX2', please update pooltag.txt
 PXl.         1         2008          0            0    UNKNOWN pooltag ' PXl', please update pooltag.txt
 IW2h         1         1984          0            0    UNKNOWN pooltag 'IW2h', please update pooltag.txt
 ClMl         6         1968          0            0    UNKNOWN pooltag 'ClMl', please update pooltag.txt
 IWIu        27         1944          0            0    UNKNOWN pooltag 'IWIu', please update pooltag.txt
 ClMc        11         1936          0            0    UNKNOWN pooltag 'ClMc', please update pooltag.txt
 IWGb         1         1936          0            0    UNKNOWN pooltag 'IWGb', please update pooltag.txt
 Ipng         6         1920          0            0    IP Generic buffers (Address, Interface, Packetize, Route allocations) , Binary: tcpip.sys
 AzD8         3         1896          0            0    UNKNOWN pooltag 'AzD8', please update pooltag.txt
 IWGc         1         1856          0            0    UNKNOWN pooltag 'IWGc', please update pooltag.txt
 IWNG         1         1840          0            0    UNKNOWN pooltag 'IWNG', please update pooltag.txt
 IWJs         1         1832          0            0    UNKNOWN pooltag 'IWJs', please update pooltag.txt
 WSKs         9         1824          0            0    WSK socket , Binary: afd.sys
 Xlal        12         1824          0            0    UNKNOWN pooltag 'Xlal', please update pooltag.txt
 UQCa         2         1808          0            0    UNKNOWN pooltag 'UQCa', please update pooltag.txt
 NeWQ        45         1800          0            0    NetIO WorkQueue Data , Binary: tcpip.sys
 AcpR         1         1792          9         2608    ACPI resource data , Binary: acpi.sys
 IPif        10         1792          0            0    IP Interfaces , Binary: tcpip.sys
 IWGu         1         1784          0            0    UNKNOWN pooltag 'IWGu', please update pooltag.txt
 Xsu         17         1784          0            0    UNKNOWN pooltag 'Xsu ', please update pooltag.txt
 #FXS        31         1776          0            0    UNKNOWN pooltag '#FXS', please update pooltag.txt
 PXd.         5         1720          0            0    UNKNOWN pooltag ' PXd', please update pooltag.txt
 CcPT         5         1720          0            0    Prefetcher trace , Binary: nt!ccpf
 #UCH         7         1688          2          160    UNKNOWN pooltag '#UCH', please update pooltag.txt
 WanJ         5         1680          0            0    LineUpInfo
 CBRe        42         1680          0            0    CallbackRegistration
 IWBc        35         1680          0            0    UNKNOWN pooltag 'IWBc', please update pooltag.txt
 NDfv         4         1672          0            0    NDIS_TAG_LWFILTER_DRIVER , Binary: ndis.sys
 IWLm        41         1640          0            0    UNKNOWN pooltag 'IWLm', please update pooltag.txt
 Ala6         7         1600          0            0    ALE remote endpoint IPv6 address , Binary: tcpip.sys
 TcST         7         1600          0            0    TCP Syn TCBs , Binary: tcpip.sys
 AlLl         7         1600          0            0    ALE remote endpoint LRU , Binary: tcpip.sys
 AleU         7         1600          0            0    ALE pend context , Binary: tcpip.sys
 AfdC         7         1600          0            0    Afd connection structure , Binary: afd.sys
 TcpB         7         1600          0            0    TCP Offload Blocks , Binary: tcpip.sys
 ReED         7         1600          0            0    UNKNOWN pooltag 'ReED', please update pooltag.txt
 Alei         7         1600          0            0    ALE arrival/nexthop interface cache , Binary: tcpip.sys
 VadS        40         1600          0            0    Mm virtual address descriptors (short) , Binary: nt!mm
 AfdR         7         1600          0            0    Afd remote address buffer , Binary: afd.sys
 ClfG         8         1600          0            0    CLFS Log I/O Request lookaside list , Binary: clfs.sys
 AlP4         7         1600          0            0    ALE peer IPv4 address , Binary: tcpip.sys
 StDa         7         1600          0            0    WFP stream inspection data , Binary: netio.sys
 AlCi         7         1600          0            0    ALE credential info , Binary: tcpip.sys
 AlPU         7         1600          0            0    ALE secure socket policy update , Binary: tcpip.sys
 TcDM         7         1600          0            0    TCP Delayed Delivery Memory Descriptor Lists , Binary: tcpip.sys
 AlUI         7         1600          0            0    UNKNOWN pooltag 'AlUI', please update pooltag.txt
 TcRH         7         1600          0            0    TCP Reassembly Headers , Binary: tcpip.sys
 AleD         7         1600          0            0    ALE remote endpoint , Binary: tcpip.sys
 AlSP         7         1600          0            0    ALE secure socket policy , Binary: tcpip.sys
 AlP6         7         1600          0            0    ALE peer IPv6 address , Binary: tcpip.sys
 Ala4         7         1600          0            0    ALE remote endpoint IPv4 address , Binary: tcpip.sys
 StCc         7         1600          0            0    WFP stream inspection call context , Binary: netio.sys
 TcpE         7         1600          0            0    TCP Endpoints , Binary: tcpip.sys
 SeSd        11         1584         17         1968    Security Descriptor , Binary: nt!se
 NSIk        28         1568          0            0    NSI RPC Tansactions , Binary: nsi.dll
 IWET         1         1568          0            0    UNKNOWN pooltag 'IWET', please update pooltag.txt
 IWJo         1         1544          0            0    UNKNOWN pooltag 'IWJo', please update pooltag.txt
 GZdt         1         1528          0            0    UNKNOWN pooltag 'GZdt', please update pooltag.txt
 IWaX        17         1496          0            0    UNKNOWN pooltag 'IWaX', please update pooltag.txt
 NMhf        16         1496          0            0    Handle Factory pool , Binary: netio.sys
 Nnbf         1         1488          0            0    NetIO NetBuffers , Binary: netio.sys
 NDch        18         1488          0            0    NDIS_TAG_CONFIG_HANDLE , Binary: ndis.sys
 W3Rx         1         1488          0            0    UNKNOWN pooltag 'W3Rx', please update pooltag.txt
 _pPF         1         1488          0            0    UNKNOWN pooltag '_pPF', please update pooltag.txt
 AVpc         1         1488          0            0    UNKNOWN pooltag 'AVpc', please update pooltag.txt
 Nnnn         1         1488          0            0    NetIO NetBuffers And NetBufferLists , Binary: netio.sys
 NDrt         1         1488          0            0    NDIS_TAG_RST_NBL , Binary: ndis.sys
 Nnbl         1         1488          0            0    NetIO NetBufferLists , Binary: netio.sys
 TNbl         1         1488          0            0    TCP Send NetBufferLists , Binary: tcpip.sys
 TcDN         1         1488          0            0    TCP Delayed Delivery Network Buffer Lists , Binary: tcpip.sys
 W3Tx         1         1488          0            0    UNKNOWN pooltag 'W3Tx', please update pooltag.txt
 UDNb         1         1488          0            0    UDP NetBuffers , Binary: tcpip.sys
 UNbl         1         1488          0            0    UDP NetBufferLists , Binary: tcpip.sys
 TSNb         1         1488          0            0    TCP Send NetBuffers , Binary: tcpip.sys
 WMTx         1         1488          0            0    UNKNOWN pooltag 'WMTx', please update pooltag.txt
 MmDT         9         1488        283        18888    Mm debug , Binary: nt!mm
 @GM8         1         1464          0            0    UNKNOWN pooltag '@GM8', please update pooltag.txt
 @GMm         1         1464          0            0    UNKNOWN pooltag '@GMm', please update pooltag.txt
 @GM7         1         1464          0            0    UNKNOWN pooltag '@GM7', please update pooltag.txt
 @GMg         1         1464          0            0    UNKNOWN pooltag '@GMg', please update pooltag.txt
 @GM!         1         1464          0            0    UNKNOWN pooltag '@GM!', please update pooltag.txt
 Vadm        18         1440          0            0    UNKNOWN pooltag 'Vadm', please update pooltag.txt
 CxIc         5         1360          0            0    UNKNOWN pooltag 'CxIc', please update pooltag.txt
 Call        18         1344          0            0    kernel callback object signature , Binary: nt!ex
 ObLl         4         1280          0            0    UNKNOWN pooltag 'ObLl', please update pooltag.txt
 FSmg         6         1248          0            0    File System Run Time , Binary: nt!fsrtl
 BatC         2         1248          0            0    Composite battery driver
 NDrd        21         1248          0            0    NDIS_TAG_REG_READ_DATA_BUFFER , Binary: ndis.sys
 FxLa        22         1232          0            0    KMDF Loader Pool allocation , Binary: wdfldr.sys
 GZnc         1         1232          0            0    UNKNOWN pooltag 'GZnc', please update pooltag.txt
 NMpc        11         1232          0            0    UNKNOWN pooltag 'NMpc', please update pooltag.txt
 AzVP         9         1224          0            0    UNKNOWN pooltag 'AzVP', please update pooltag.txt
 :UCH        14         1216          0            0    UNKNOWN pooltag ':UCH', please update pooltag.txt
 IWCK         1         1208          0            0    UNKNOWN pooltag 'IWCK', please update pooltag.txt
 :TRF         1         1208          0            0    UNKNOWN pooltag ':TRF', please update pooltag.txt
 IWGf         1         1168          0            0    UNKNOWN pooltag 'IWGf', please update pooltag.txt
 VoSc         8         1168          0            0    Snapshot context allocations , Binary: volsnap.sys
 USBB         4         1160          0            0    Bluetooth USB minidriver , Binary: bthusb.sys
 Vpb         12         1152          0            0    Io, vpb's
 WfpH        22         1152          0            0    WFP hash , Binary: netio.sys
 FMfn         4         1152        773       185608    NAME_CACHE_NODE structure , Binary: fltmgr.sys
 IWEb         1         1152          0            0    UNKNOWN pooltag 'IWEb', please update pooltag.txt
 :LST        11         1144          0            0    UNKNOWN pooltag ':LST', please update pooltag.txt
 IWHF         1         1120          0            0    UNKNOWN pooltag 'IWHF', please update pooltag.txt
 stfr         3         1120          0            0    UNKNOWN pooltag 'stfr', please update pooltag.txt
 IWJb         1         1112          0            0    UNKNOWN pooltag 'IWJb', please update pooltag.txt
 IWC_         1         1112          0            0    UNKNOWN pooltag 'IWC_', please update pooltag.txt
 IWDm         1         1112          0            0    UNKNOWN pooltag 'IWDm', please update pooltag.txt
 IWB7         1         1096          0            0    UNKNOWN pooltag 'IWB7', please update pooltag.txt
 FMla         1         1096          0            0    Per-processor IRPCTRL lookaside lists , Binary: fltmgr.sys
 GZpe         7         1096          0            0    UNKNOWN pooltag 'GZpe', please update pooltag.txt
 BTHP        12         1088          0            0    Bluetooth port driver (generic) , Binary: bthport.sys
 DOPE        15         1080          0            0    Device Object Power Extension (po component)
 DU12         1         1072          0            0    UNKNOWN pooltag 'DU12', please update pooltag.txt
 MmIm         1         1064          0            0    IO space MDL trackers , Binary: nt!mm
 NDwi        22         1064          0            0    NDIS_TAG_WORK_ITEM , Binary: ndis.sys
 PmAT         2         1040          0            0    Partition Manager attributes table cache , Binary: partmgr.sys
 IWiP         1         1040          0            0    UNKNOWN pooltag 'IWiP', please update pooltag.txt
 TcRL         1         1032          0            0    TCP Create And Connect Tcb Rate Limit Pool , Binary: tcpip.sys
 IWCh         1         1032          0            0    UNKNOWN pooltag 'IWCh', please update pooltag.txt
 IWCg         1         1032          0            0    UNKNOWN pooltag 'IWCg', please update pooltag.txt
 TdxM         1         1032          0            0    TDX Message Indication Buffers , Binary: tdx.sys
 AleL         4         1032          0            0    ALE LRU , Binary: tcpip.sys
 TcDQ         1         1032          0            0    TCP Delay Queues , Binary: tcpip.sys
 PcCi         2         1024          0            0    WDM audio port class adapter device object stuff
 WfpI        28         1008          0            0    WFP index , Binary: netio.sys
 IW9h        18         1008          0            0    UNKNOWN pooltag 'IW9h', please update pooltag.txt
 #PCI         2          992          0            0    UNKNOWN pooltag '#PCI', please update pooltag.txt
 DxgM         3          984         16         1464    UNKNOWN pooltag 'DxgM', please update pooltag.txt
 IWAv         2          976          0            0    UNKNOWN pooltag 'IWAv', please update pooltag.txt
 L2T1         1          968          0            0    ndis\l2tp / MTAG_ADAPTERCB
 IoEr         5          960          0            0    Io error log packets , Binary: nt!io
 CM48         6          960          0            0    Internal Configuration manager allocations , Binary: nt!cm
 IWEr         1          952          0            0    UNKNOWN pooltag 'IWEr', please update pooltag.txt
 Adap         7          952          0            0    Adapter objects
 InNl         6          944          0            0    UNKNOWN pooltag 'InNl', please update pooltag.txt
 CM44        13          936          0            0    Internal Configuration manager allocations , Binary: nt!cm
 IWFg         1          928          0            0    UNKNOWN pooltag 'IWFg', please update pooltag.txt
 NDrw        23          920          0            0    NDIS_TAG_RWLOCK , Binary: ndis.sys
 AcpP        16          920          0            0    ACPI power data , Binary: acpi.sys
 #TFC         1          912          0            0    UNKNOWN pooltag '#TFC', please update pooltag.txt
 Jxxx        19          912          0            0    UNKNOWN pooltag 'Jxxx', please update pooltag.txt
 Ntfp        16          896          0            0    Unkown allocation , Binary: ntfs.sys
 Ksec         1          880          2        10248    Security device driver , Binary: ksecdd.sys
 IWWd         1          872          0            0    UNKNOWN pooltag 'IWWd', please update pooltag.txt
 AzE9         9          864          0            0    UNKNOWN pooltag 'AzE9', please update pooltag.txt
 IW0G        18          864          0            0    UNKNOWN pooltag 'IW0G', please update pooltag.txt
 FMng         6          864          0            0    NAME_GENERATION_CONTEXT structure , Binary: fltmgr.sys
 PoIr        12          864          0            0    UNKNOWN pooltag 'PoIr', please update pooltag.txt
 IWIp         4          864          0            0    UNKNOWN pooltag 'IWIp', please update pooltag.txt
 IWDQ         1          864          0            0    UNKNOWN pooltag 'IWDQ', please update pooltag.txt
 Sema        12          864          0            0    Semaphore objects
 VoSs        14          856          1          128    Short term allocations , Binary: volsnap.sys
 IWEu         1          848          0            0    UNKNOWN pooltag 'IWEu', please update pooltag.txt
 IWA9         1          848          0            0    UNKNOWN pooltag 'IWA9', please update pooltag.txt
 HidB         5          848          0            0    UNKNOWN pooltag 'HidB', please update pooltag.txt
 IWEv         1          840          0            0    UNKNOWN pooltag 'IWEv', please update pooltag.txt
 FMfr         1          840          0            0    FLT_FRAME structure , Binary: fltmgr.sys
 Desk         4          832          0            0    UNKNOWN pooltag 'Desk', please update pooltag.txt
 SeTl        13          832          0            0    Security Token Lock , Binary: nt!se
 FxLc        22          808          0            0    KMDF Loader Pool allocation , Binary: wdfldr.sys
 IWrV         1          808          0            0    UNKNOWN pooltag 'IWrV', please update pooltag.txt
 IW2o         1          808          0            0    UNKNOWN pooltag 'IW2o', please update pooltag.txt
 #PCX         2          800          0            0    UNKNOWN pooltag '#PCX', please update pooltag.txt
 IWGM         1          800          0            0    UNKNOWN pooltag 'IWGM', please update pooltag.txt
 FSfm        20          800          0            0    File System Run Time Fast Mutex Lookaside List , Binary: nt!fsrtl
 IWj0         5          800          0            0    UNKNOWN pooltag 'IWj0', please update pooltag.txt
 IWBI         1          800          0            0    UNKNOWN pooltag 'IWBI', please update pooltag.txt
 IWDA         1          800          0            0    UNKNOWN pooltag 'IWDA', please update pooltag.txt
 Filt         9          792          0            0    UNKNOWN pooltag 'Filt', please update pooltag.txt
 ^PIT         1          784          0            0    UNKNOWN pooltag '^PIT', please update pooltag.txt
 IWAG         1          784          0            0    UNKNOWN pooltag 'IWAG', please update pooltag.txt
 Batt         3          768          5          768    Battery class driver
 IPsi        10          768          0            0    IP SubInterfaces , Binary: tcpip.sys
 IWXc        16          768          0            0    UNKNOWN pooltag 'IWXc', please update pooltag.txt
 Mdp          2          768          0            0    Memory Descriptor Lists , Binary: netio.sys
 IWAB         1          760          0            0    UNKNOWN pooltag 'IWAB', please update pooltag.txt
 SeOn         6          736          0            0    Security Captured Object Name information , Binary: nt!se
 IW60        17          736          0            0    UNKNOWN pooltag 'IW60', please update pooltag.txt
 IWDa         1          736          0            0    UNKNOWN pooltag 'IWDa', please update pooltag.txt
 PTPa         1          736          0            0    UNKNOWN pooltag 'PTPa', please update pooltag.txt
 tIkW         7          728          0            0    UNKNOWN pooltag 'tIkW', please update pooltag.txt
 IW41        18          720          0            0    UNKNOWN pooltag 'IW41', please update pooltag.txt
 AzD5         9          720          0            0    UNKNOWN pooltag 'AzD5', please update pooltag.txt
 #INX        10          720          0            0    UNKNOWN pooltag '#INX', please update pooltag.txt
 ArbM        30          720          0            0    ARBITER_MISC_TAG , Binary: nt!arb
 NDrc         2          704          0            0    NDIS_TAG_RWL_REFCOUNT , Binary: ndis.sys
 IWYL         1          696          0            0    UNKNOWN pooltag 'IWYL', please update pooltag.txt
 NDwh         5          688          0            0    NDIS_TAG_WRAPPER_HANDLE , Binary: ndis.sys
 AcpE         1          680          0            0    ACPI embedded controller data , Binary: acpi.sys
 WanN         1          680          0            0    NdisPacketPool Desc
 Afdr         3          680          0            0    Afd ERESOURCE buffer , Binary: afd.sys
 Txts         5          680          0            0    TXF_TRANS_SYNC , Binary: ntfs.sys
 IW3f         1          680          0            0    UNKNOWN pooltag 'IW3f', please update pooltag.txt
 NLcc        14          672          0            0    Network Layer Client Contexts , Binary: tcpip.sys
 Usla         6          672          0            0    USERTAG_LOOKASIDE , Binary: win32k!InitLockRecordLookaside
 NMRn        12          672          0            0    Network Module Registrar Network Protocol Identifiers , Binary: tcpip.sys
 Ussy        20          672          0            0    USERTAG_SYSTEM , Binary: win32k!xxxDesktopThread
 MmWe         4          672          0            0    Work entries for writing out modified filesystem pages. , Binary: nt!mm
 IoUs        28          672          0            0    I/O SubSystem completion Context Allocation , Binary: nt!io
 WanM         8          664          0            0    Connection Table
 FIXE         5          664          0            0    UNKNOWN pooltag 'FIXE', please update pooltag.txt
 PoEa         1          664          0            0    MTAG_ADAPTER , Binary: raspppoe.sys
 KSde         1          656          0            0    UNKNOWN pooltag 'KSde', please update pooltag.txt
 fnoC         1          656          0            0    UNKNOWN pooltag 'fnoC', please update pooltag.txt
 CRYP         2          648          0            0    UNKNOWN pooltag 'CRYP', please update pooltag.txt
 KSdh         3          648          0            0    device header
 Pcfc         4          640          0            0    PACER Filter Contexts , Binary: pacer.sys
 PXh.         5          640          0            0    UNKNOWN pooltag ' PXh', please update pooltag.txt
 NtfI        20          640          0            0    IO_CONTEXT , Binary: ntfs.sys
 MmDp         6          640         11         1504    Lost delayed write context , Binary: nt!mm
 IWG8         1          640          0            0    UNKNOWN pooltag 'IWG8', please update pooltag.txt
 NLap         2          640          0            0    Network Layer Netio Helper Function allocations , Binary: tcpip.sys
 IWBa         2          624          0            0    UNKNOWN pooltag 'IWBa', please update pooltag.txt
 Nb07         2          624          0            0    NetBT datagram request tracker , Binary: netbt.sys
 DNME         3          624          0            0    UNKNOWN pooltag 'DNME', please update pooltag.txt
 @KCH         3          624          0            0    (Intel video driver) Chipset specific service
 IWCd         1          616          0            0    UNKNOWN pooltag 'IWCd', please update pooltag.txt
 IWGi         1          616          0            0    UNKNOWN pooltag 'IWGi', please update pooltag.txt
 IWAA         1          616          0            0    UNKNOWN pooltag 'IWAA', please update pooltag.txt
 Time         3          600          0            0    Timer objects , Binary: nt!ke
 IWAk         2          592          0            0    UNKNOWN pooltag 'IWAk', please update pooltag.txt
 TcpN         2          592          0            0    TCP Name Service Interfaces , Binary: tcpip.sys
 OlmI         1          584          0            0    Offload Manager Interfaces , Binary: tcpip.sys
 IWFL         1          584          0            0    UNKNOWN pooltag 'IWFL', please update pooltag.txt
 IWXH        18          576          0            0    UNKNOWN pooltag 'IWXH', please update pooltag.txt
 FMwi         9          576          0            0    Work item structures , Binary: fltmgr.sys
 HidU         8          576          0            0    UNKNOWN pooltag 'HidU', please update pooltag.txt
 TuPI         1          576          0            0    UNKNOWN pooltag 'TuPI', please update pooltag.txt
 IWKR         1          568          0            0    UNKNOWN pooltag 'IWKR', please update pooltag.txt
 IWKT         1          568          0            0    UNKNOWN pooltag 'IWKT', please update pooltag.txt
 IWKP         1          568          0            0    UNKNOWN pooltag 'IWKP', please update pooltag.txt
 IWQH         1          568          0            0    UNKNOWN pooltag 'IWQH', please update pooltag.txt
 IWKM         1          568          0            0    UNKNOWN pooltag 'IWKM', please update pooltag.txt
 XSav         1          568          0            0    UNKNOWN pooltag 'XSav', please update pooltag.txt
 IWjb         1          568          0            0    UNKNOWN pooltag 'IWjb', please update pooltag.txt
 IWKK         1          568          0            0    UNKNOWN pooltag 'IWKK', please update pooltag.txt
 IWF_         1          568          0            0    UNKNOWN pooltag 'IWF_', please update pooltag.txt
 NDfm         5          560          0            0    NDIS_TAG_FAKE_MAC , Binary: ndis.sys
 WfpF        14          560          0            0    WFP filters , Binary: netio.sys
 LfsS         5          560          7       132872    UNKNOWN pooltag 'LfsS', please update pooltag.txt
 PX9.         5          560          0            0    UNKNOWN pooltag ' PX9', please update pooltag.txt
 ObCI         4          544          0            0    object creation lookaside list , Binary: nt!ob
 IWAw         2          544          0            0    UNKNOWN pooltag 'IWAw', please update pooltag.txt
 CcWK         4          544          0            0    Kernel Cache Manager lookaside list , Binary: nt!cc
 ExIC         4          544          0            0    UNKNOWN pooltag 'ExIC', please update pooltag.txt
 ObNM         4          544          0            0    name buffer per processor lookaside pointers , Binary: nt!ob
 IW1j         1          536          0            0    UNKNOWN pooltag 'IW1j', please update pooltag.txt
 TpmP        10          536          0            0    UNKNOWN pooltag 'TpmP', please update pooltag.txt
 Ntfc         6          528         78         6864    CCB_DATA , Binary: ntfs.sys
 RNVL         3          528          0            0    UNKNOWN pooltag 'RNVL', please update pooltag.txt
 CTSP         8          512          0            0    UNKNOWN pooltag 'CTSP', please update pooltag.txt
 NBqh        16          512          0            0    Non-blocking queue entries used to carry the real data in the queue.
 :PWQ         4          512          0            0    UNKNOWN pooltag ':PWQ', please update pooltag.txt
 RCDJ         1          512          0            0    UNKNOWN pooltag 'RCDJ', please update pooltag.txt
 User         8          512          0            0    USERTAG_ERESOURCE , Binary: win32k!InitCreateUserCrit
 IWAC         1          504          0            0    UNKNOWN pooltag 'IWAC', please update pooltag.txt
 RNDR         6          480          0            0    UNKNOWN pooltag 'RNDR', please update pooltag.txt
 NtfV         5          480          0            0    VPB , Binary: ntfs.sys
 PlWl         2          480          1          240    UNKNOWN pooltag 'PlWl', please update pooltag.txt
 #KTC        12          480          0            0    UNKNOWN pooltag '#KTC', please update pooltag.txt
 ScLW         2          464          0            0    Power , Binary: classpnp.sys
 IoCo         3          456          0            0    UNKNOWN pooltag 'IoCo', please update pooltag.txt
 stor         3          448          1          136    UNKNOWN pooltag 'stor', please update pooltag.txt
 IWB0         1          448          0            0    UNKNOWN pooltag 'IWB0', please update pooltag.txt
 AcpF        11          440          0            0    ACPI interface data , Binary: acpi.sys
 L2CA         8          440          0            0    Bluetooth port driver (L2CAP) , Binary: bthport.sys
 Ke           2          440          1         2056    Kernel data structures
 MmSd         6          432          0            0    extended subsections used to map data files , Binary: nt!mm
 AzIA         9          432          0            0    UNKNOWN pooltag 'AzIA', please update pooltag.txt
 ScB4         4          432          0            0    Storage descriptor header , Binary: classpnp.sys
 IWCT         1          432          0            0    UNKNOWN pooltag 'IWCT', please update pooltag.txt
 AzI1         9          432          0            0    UNKNOWN pooltag 'AzI1', please update pooltag.txt
 AzIc         9          432          0            0    UNKNOWN pooltag 'AzIc', please update pooltag.txt
 AzI2         9          432          0            0    UNKNOWN pooltag 'AzI2', please update pooltag.txt
 CcMb         3          432          0            0    Cache Manager Mbcb , Binary: nt!cc
 IW2H         1          416          0            0    UNKNOWN pooltag 'IW2H', please update pooltag.txt
 FVE0         8          416          0            0    General allocations , Binary: fvevol.sys
 SeSi        17          408         18          424    Security SID , Binary: nt!se
 SDgi         1          408          0            0    UNKNOWN pooltag 'SDgi', please update pooltag.txt
 IoSh        17          408          0            0    Io shutdown packet , Binary: nt!io
 TDIc         5          400          0            0    TDI resource
 Acpg         3          400          0            0    ACPI GPE data , Binary: acpi.sys
 AzCI         1          400          0            0    UNKNOWN pooltag 'AzCI', please update pooltag.txt
 IWlk         1          392          0            0    UNKNOWN pooltag 'IWlk', please update pooltag.txt
 Ntfr         6          392          0            0    ERESOURCE , Binary: ntfs.sys
 AmlI         2          392          0            0    ACPI AMLI Pooltags
 IWDk         1          392          0            0    UNKNOWN pooltag 'IWDk', please update pooltag.txt
 ClfN         6          384          0            0    CLFS Log base file lock , Binary: clfs.sys
 NDpn        14          384          0            0    NDIS_TAG_PARAMETER_NODE , Binary: ndis.sys
 PPMp         3          384          0            0    Kernel Processor Power Management Perf States. , Binary: nt!po
 ScLq         2          384          0            0    Release queue , Binary: classpnp.sys
 GZrw         4          384          0            0    UNKNOWN pooltag 'GZrw', please update pooltag.txt
 NtfT         4          384          0            0    SCB_SNAPSHOT , Binary: ntfs.sys
 WmiA         3          376          4          360    Wmi ACPI mapper
 IWLV         1          376          0            0    UNKNOWN pooltag 'IWLV', please update pooltag.txt
 IW8O         1          376          0            0    UNKNOWN pooltag 'IW8O', please update pooltag.txt
 IWLG         1          376          0            0    UNKNOWN pooltag 'IWLG', please update pooltag.txt
 IWB9         1          376          0            0    UNKNOWN pooltag 'IWB9', please update pooltag.txt
 NMpt         9          376          0            0    Generic AVL Tree allocations
 IWEc         1          368          0            0    UNKNOWN pooltag 'IWEc', please update pooltag.txt
  MAS         1          368          0            0    UNKNOWN pooltag ' MAS', please update pooltag.txt
 PX5.         5          360          0            0    UNKNOWN pooltag ' PX5', please update pooltag.txt
 WanS         5          360          0            0    AfCB/SapCB/VcCB
 PmSD         3          360          0            0    Partition Manager snapshot data cache , Binary: partmgr.sys
 PXg.         5          360          0            0    UNKNOWN pooltag ' PXg', please update pooltag.txt
 FlSB         4          352          0            0    Framing Layer Stack Block , Binary: tcpip.sys
 PcSl         2          352          0            0    WDM audio stuff
 Thrm         1          344          0            0    Thermal zone structure
 TSic         6          344          0            0    Terminal Services - ICA_POOL_TAG , Binary: termdd.sys
 IWVe         7          336          0            0    UNKNOWN pooltag 'IWVe', please update pooltag.txt
 TEE6         2          336          0            0    UNKNOWN pooltag 'TEE6', please update pooltag.txt
 IWeP         1          336          0            0    UNKNOWN pooltag 'IWeP', please update pooltag.txt
 TpWo         2          336          0            0    Threadpool worker factory objects , Binary: nt!ex
 VdPN         2          328        962        77008    Video display mode management , Binary: dxgkrnl.sys
 GZsv         1          328          0            0    UNKNOWN pooltag 'GZsv', please update pooltag.txt
 APS2         3          328          0            0    UNKNOWN pooltag 'APS2', please update pooltag.txt
 IWQW         1          320          0            0    UNKNOWN pooltag 'IWQW', please update pooltag.txt
 Muta         4          320          0            0    Mutant objects
 Wind         2          320          0            0    UNKNOWN pooltag 'Wind', please update pooltag.txt
 PnpB         2          320          0            0    UNKNOWN pooltag 'PnpB', please update pooltag.txt
 Z-Bs         2          320          0            0    UNKNOWN pooltag 'Z-Bs', please update pooltag.txt
 DfCg         2          320          0            0    DFS Client PREFIXCACHE , Binary: dfsc.sys
 IWAz         1          320          0            0    UNKNOWN pooltag 'IWAz', please update pooltag.txt
 IWJ9         1          312          0            0    UNKNOWN pooltag 'IWJ9', please update pooltag.txt
 IW7m         1          312          0            0    UNKNOWN pooltag 'IW7m', please update pooltag.txt
 WanI         3          312          0            0    IoPacket
 IWBK         1          312          0            0    UNKNOWN pooltag 'IWBK', please update pooltag.txt
 IWpT         1          312          0            0    UNKNOWN pooltag 'IWpT', please update pooltag.txt
 IWW1         1          312          0            0    UNKNOWN pooltag 'IWW1', please update pooltag.txt
 AzFg         2          312          0            0    HD Audio Class Driver (Audio Function Group) , Binary: HDAudio.sys
 IWdE         1          312          0            0    UNKNOWN pooltag 'IWdE', please update pooltag.txt
 NLmc         2          304          0            0    UNKNOWN pooltag 'NLmc', please update pooltag.txt
 IWDs         1          296          0            0    UNKNOWN pooltag 'IWDs', please update pooltag.txt
 TWTa         2          288          0            0    Echo Request Timer Table , Binary: tcpip.sys
 RawE         2          288          0            0    Raw Socket Endpoints , Binary: tcpip.sys
 Acpt        12          288          0            0    ACPI table data , Binary: acpi.sys
 InTl         6          288          0            0    UNKNOWN pooltag 'InTl', please update pooltag.txt
 IWum        18          288          0            0    UNKNOWN pooltag 'IWum', please update pooltag.txt
 X            2          288          0            0    UNKNOWN pooltag 'X   ', please update pooltag.txt
 MT05         1          288          0            0    UNKNOWN pooltag 'MT05', please update pooltag.txt
 FlmC         3          288          0            0    Framing Layer Client Contexts , Binary: tcpip.sys
 IWGN         1          288          0            0    UNKNOWN pooltag 'IWGN', please update pooltag.txt
 FLpc         6          288          0            0    UNKNOWN pooltag 'FLpc', please update pooltag.txt
 ^KTC         7          280          0            0    UNKNOWN pooltag '^KTC', please update pooltag.txt
 Z-SD         1          280          0            0    UNKNOWN pooltag 'Z-SD', please update pooltag.txt
 ZzDb         1          280          0            0    UNKNOWN pooltag 'ZzDb', please update pooltag.txt
 Icp          6          280          0            0    I/O completion packets queue on a completion ports
 UdpN         2          272          0            0    UDP Name Service Interfaces , Binary: tcpip.sys
 DPAE         2          272          0            0    UNKNOWN pooltag 'DPAE', please update pooltag.txt
 RawN         2          272          0            0    Raw Socket Nsi , Binary: tcpip.sys
 IWDr         1          272          0            0    UNKNOWN pooltag 'IWDr', please update pooltag.txt
 :GLK         3          264          0            0    UNKNOWN pooltag ':GLK', please update pooltag.txt
 AzDC         3          264          0            0    UNKNOWN pooltag 'AzDC', please update pooltag.txt
 TcCC         1          264          0            0    TCP Create And Connect Tcb Pool , Binary: tcpip.sys
 IWCx         1          264          0            0    UNKNOWN pooltag 'IWCx', please update pooltag.txt
 :PWT         3          264          0            0    UNKNOWN pooltag ':PWT', please update pooltag.txt
 MmPh         3          264          0            0    Physical memory nodes for querying memory ranges , Binary: nt!mm
 FMpr         1          264          0            0    FLT_PRCB structure , Binary: fltmgr.sys
 IWBJ         3          264          0            0    UNKNOWN pooltag 'IWBJ', please update pooltag.txt
 CcWk        11          264          0            0    Kernel Cache Manager lookaside list , Binary: nt!cc
 IW9S         1          256          0            0    UNKNOWN pooltag 'IW9S', please update pooltag.txt
 ScDs         2          256          0            0    start device paths
 IoTi         8          256          0            0    Io timers , Binary: nt!io
 IWCf         1          248          0            0    UNKNOWN pooltag 'IWCf', please update pooltag.txt
 CM           3          248         13         3232    Configuration Manager (registry) , Binary: nt!cm
 NAcc         6          240          0            0    UNKNOWN pooltag 'NAcc', please update pooltag.txt
 NDfa        14          240          0            0    NDIS_TAG_FILTER_ADDR , Binary: ndis.sys
 FSrN         5          240          0            0    File System Run Time , Binary: nt!fsrtl
 IWBT         6          240          0            0    UNKNOWN pooltag 'IWBT', please update pooltag.txt
 CcVm         6          240          0            0    UNKNOWN pooltag 'CcVm', please update pooltag.txt
 IWBZ         3          240          0            0    UNKNOWN pooltag 'IWBZ', please update pooltag.txt
 IWDq         1          240          0            0    UNKNOWN pooltag 'IWDq', please update pooltag.txt
 IdeX         1          240          0            0    PCI IDE
 Npfs         1          240          0            0    Npfs Allocations , Binary: npfs.sys
 IWBR         4          232          0            0    UNKNOWN pooltag 'IWBR', please update pooltag.txt
 Gla;         2          224          0            0    GDITAG_HMGR_LOOKASIDE_RFONT_TYPE , Binary: win32k.sys
 Gla1         2          224          0            0    GDITAG_HMGR_LOOKASIDE_DC_TYPE , Binary: win32k.sys
 Gla5         2          224          0            0    GDITAG_HMGR_LOOKASIDE_SURF_TYPE , Binary: win32k.sys
 Xdll         2          224          0            0    UNKNOWN pooltag 'Xdll', please update pooltag.txt
 Gla8         2          224          0            0    GDITAG_HMGR_LOOKASIDE_PAL_TYPE , Binary: win32k.sys
 #PII         1          224          0            0    UNKNOWN pooltag '#PII', please update pooltag.txt
 :TRD         4          224          0            0    UNKNOWN pooltag ':TRD', please update pooltag.txt
 Gla4         2          224          0            0    GDITAG_HMGR_LOOKASIDE_RGN_TYPE , Binary: win32k.sys
 Gla:         2          224          0            0    GDITAG_HMGR_LOOKASIDE_LFONT_TYPE , Binary: win32k.sys
 Gla@         2          224          0            0    GDITAG_HMGR_LOOKASIDE_BRUSH_TYPE , Binary: win32k.sys
 GZad         1          224          0            0    UNKNOWN pooltag 'GZad', please update pooltag.txt
 smAr         3          216          0            0    ReadyBoost generic array allocation , Binary: nt!store or rdyboost.sys
 IWL1         1          216          0            0    UNKNOWN pooltag 'IWL1', please update pooltag.txt
 SWfd         1          216          0            0    POOLTAG_DEVICE_FDOEXTENSION
 IWLh         1          216          0            0    UNKNOWN pooltag 'IWLh', please update pooltag.txt
 aFDC         3          216          0            0    UNKNOWN pooltag 'aFDC', please update pooltag.txt
 KSff         1          216          0            0    UNKNOWN pooltag 'KSff', please update pooltag.txt
 IWCl         1          208          0            0    UNKNOWN pooltag 'IWCl', please update pooltag.txt
 IWA2         2          208          0            0    UNKNOWN pooltag 'IWA2', please update pooltag.txt
 CIsc         2          208        101        13856    Code Integrity core dll , Binary: ci.dll
 USBL         2          208          0            0    UNKNOWN pooltag 'USBL', please update pooltag.txt
 alPm         1          200          0            0    UNKNOWN pooltag 'alPm', please update pooltag.txt
 Gfsm         5          200          0            0    Gdi Fast mutex
 NDdb         2          200          0            0    DMA block , Binary: ndis.sys
 PSwt         4          192         14          336    PDC_PSWT_TAG , Binary: pdc.sys
 AlIn         4          192          0            0    ALPC Internal allocation , Binary: nt!alpc
 FlpC         6          192          0            0    Framing Layer Client Contexts , Binary: tcpip.sys
 MsFD         1          192          1           16    Mailslot root DCB and its name buffer
 rsob         4          192          0            0    UNKNOWN pooltag 'rsob', please update pooltag.txt
 GZtd         1          192          0            0    UNKNOWN pooltag 'GZtd', please update pooltag.txt
 ClfP        12          192          0            0    CLFS Log request state , Binary: clfs.sys
 NtfJ         4          192          3          376    Unkown allocation , Binary: ntfs.sys
 aFDT         3          192          0            0    UNKNOWN pooltag 'aFDT', please update pooltag.txt
 IWF8         8          192          0            0    UNKNOWN pooltag 'IWF8', please update pooltag.txt
 FIPc         3          192          0            0    FileInfo FS-filter Prefetch Context , Binary: fileinfo.sys
 IWA6         6          192          0            0    UNKNOWN pooltag 'IWA6', please update pooltag.txt
 MV16         1          184          0            0    UNKNOWN pooltag 'MV16', please update pooltag.txt
 AzCm         2          184          0            0    HD Audio Class Driver (AzCommon) , Binary: HDAudio.sys
 Vm           1          184          1           40    General allocations , Binary: volmgrx.sys
 Powe         2          176          0            0    UNKNOWN pooltag 'Powe', please update pooltag.txt
 AcpT         1          176          1           40    ACPI thermal data , Binary: acpi.sys
 Sess         2          176          0            0    UNKNOWN pooltag 'Sess', please update pooltag.txt
 IWCP         1          176          0            0    UNKNOWN pooltag 'IWCP', please update pooltag.txt
 IWJS         1          176          0            0    UNKNOWN pooltag 'IWJS', please update pooltag.txt
 TSrp         2          176          0            0    Terminal Services - RP_ALLOC_TAG , Binary: termdd.sys
 TDId         5          176          0            0    TDI resource
 IWBl         1          176          0            0    UNKNOWN pooltag 'IWBl', please update pooltag.txt
 MmLp         1          168          0            0    UNKNOWN pooltag 'MmLp', please update pooltag.txt
 FxL7         1          168          0            0    KMDF Loader Pool allocation , Binary: wdfldr.sys
 PLIT         1          168          0            0    UNKNOWN pooltag 'PLIT', please update pooltag.txt
 GOPM         4          160          2           64    GDITAG_OPM , Binary: win32k.sys
 TDIa         2          160          0            0    UNKNOWN pooltag 'TDIa', please update pooltag.txt
 IWIv         4          160          0            0    UNKNOWN pooltag 'IWIv', please update pooltag.txt
 DPwr         5          160          0            0    PnP power management , Binary: nt!pnp
 GZmm        10          160         67        13032    UNKNOWN pooltag 'GZmm', please update pooltag.txt
 Xlhd         5          160          0            0    UNKNOWN pooltag 'Xlhd', please update pooltag.txt
 MmHi         4          160          0            0    Mm image entry - allocated per session , Binary: nt!mm
 Xqlh         5          160          0            0    UNKNOWN pooltag 'Xqlh', please update pooltag.txt
 FMnc         4          160          0            0    NAME_CACHE_CREATE_CTRL structure , Binary: fltmgr.sys
 AzMx         2          160          0            0    HD Audio Class Driver (AzMixerport) , Binary: HDAudio.sys
 IWdj         1          160          0            0    UNKNOWN pooltag 'IWdj', please update pooltag.txt
 IWDZ         1          160          0            0    UNKNOWN pooltag 'IWDZ', please update pooltag.txt
 IW4p         1          160          0            0    UNKNOWN pooltag 'IW4p', please update pooltag.txt
 QoSc         4          160          0            0    UNKNOWN pooltag 'QoSc', please update pooltag.txt
 PmVE         1          160          0            0    Partition Manager volume entry , Binary: partmgr.sys
 IWDB         1          152          0            0    UNKNOWN pooltag 'IWDB', please update pooltag.txt
 smKG         1          152          0            0    ReadyBoost encryption key registry path buffer , Binary: nt!store
 IWL0         1          152          0            0    UNKNOWN pooltag 'IWL0', please update pooltag.txt
 MuFc         1          152          0            0    File Context , Binary: mup.sys
 IWFM         1          152          0            0    UNKNOWN pooltag 'IWFM', please update pooltag.txt
 IWEt         1          152          0            0    UNKNOWN pooltag 'IWEt', please update pooltag.txt
 SCO          1          152          0            0    Smart card driver tags
 Mup          1          144          0            0    Multiple UNC provider allocations, generic , Binary: mup.sys
 RtsC         3          144          0            0    UNKNOWN pooltag 'RtsC', please update pooltag.txt
 VM           1          144         11          928    General allocations , Binary: volmgr.sys
 TDIf         2          144          0            0    TDI resource
 IWh_         1          144          0            0    UNKNOWN pooltag 'IWh_', please update pooltag.txt
 Itht         6          144          0            0    IPsec hashtable , Binary: tcpip.sys
 IWIc         1          144          0            0    UNKNOWN pooltag 'IWIc', please update pooltag.txt
 ItoM         1          144          0            0    IPsec task offload interface , Binary: tcpip.sys
 RaHI         1          144          0            0    RaSaveDriverInitData storport!_HW_INITIALIZATION_DATA , Binary: storport.sys
 NDar         1          144          0            0    NDIS_TAG_ALLOCATED_RESOURCES , Binary: ndis.sys
 Plcp         1          136          0            0    Cache aware pushlock list (array of puchlock addresses)
 @CP          2          136          0            0    UNKNOWN pooltag '@CP ', please update pooltag.txt
 Wrps         2          136          0            0    WAN_STRING_TAG
 VoSt         1          136          0            0    Temp table allocations , Binary: volsnap.sys
 TcpM         1          136          0            0    TCP Offload Miscellaneous buffers , Binary: tcpip.sys
 AHID         1          136          0            0    UNKNOWN pooltag 'AHID', please update pooltag.txt
 IWHh         1          128          0            0    UNKNOWN pooltag 'IWHh', please update pooltag.txt
 RaDS         1          128          0            0    StorCreateAnsiString storport!_STRING.Buffer , Binary: storport.sys
 Pium         2          128          0            0    UNKNOWN pooltag 'Pium', please update pooltag.txt
 DfCB         2          128          0            0    DFS Client allocations , Binary: dfsc.sys
 IWsN         2          128          0            0    UNKNOWN pooltag 'IWsN', please update pooltag.txt
 Wnln         4          128          0            0    UNKNOWN pooltag 'Wnln', please update pooltag.txt
 AmlR         4          128          0            0    ACPI AMLI Pooltags
 IWHG         1          128          0            0    UNKNOWN pooltag 'IWHG', please update pooltag.txt
 #PXM         2          128          0            0    UNKNOWN pooltag '#PXM', please update pooltag.txt
 EMTB         4          128          6          672    UNKNOWN pooltag 'EMTB', please update pooltag.txt
 GZrf         1          128          0            0    UNKNOWN pooltag 'GZrf', please update pooltag.txt
 Nb17         1          120          0            0    NetBT registry path , Binary: netbt.sys
 DfCC         1          120          0            0    DFS Client allocations , Binary: dfsc.sys
 IWJl         1          120          0            0    UNKNOWN pooltag 'IWJl', please update pooltag.txt
 IWbp         1          120          0            0    UNKNOWN pooltag 'IWbp', please update pooltag.txt
 PLST         1          120          0            0    UNKNOWN pooltag 'PLST', please update pooltag.txt
 ^TLQ         5          120          0            0    UNKNOWN pooltag '^TLQ', please update pooltag.txt
 NDcs         5          120          0            0    NDIS_TAG_NET_CFG_OPS_ID , Binary: ndis.sys
 Drmk         3          120          3          104    UNKNOWN pooltag 'Drmk', please update pooltag.txt
 MmSa         3          120          0            0    Subsection AVL tree allocations , Binary: nt!mm
 IWEw         1          120          0            0    UNKNOWN pooltag 'IWEw', please update pooltag.txt
 Pcge         1          120          0            0    PACER Generic Buffers (DACL, SID allocations) , Binary: pacer.sys
 FMfi         1          120          0            0    Fast IO dispatch table , Binary: fltmgr.sys
 BTMO         1          120          0            0    Bluetooth modem , Binary: bthmodem.sys
 NDpc         1          120          0            0    NDIS_TAG_PROTOCOL_CONFIGURATION , Binary: ndis.sys
 GZwc         2          112          0            0    UNKNOWN pooltag 'GZwc', please update pooltag.txt
 TEE7         1          112          0            0    UNKNOWN pooltag 'TEE7', please update pooltag.txt
 fecm         1          112          0            0    UNKNOWN pooltag 'fecm', please update pooltag.txt
 IWnZ         1          112          0            0    UNKNOWN pooltag 'IWnZ', please update pooltag.txt
 Vprt         2          112         18         2104    Video port for legacy (pre-Vista) display drivers , Binary: videoprt.sys
 PcDe         2          112          0            0    UNKNOWN pooltag 'PcDe', please update pooltag.txt
 PcWC         2          112          0            0    UNKNOWN pooltag 'PcWC', please update pooltag.txt
 IWBL         2          112          0            0    UNKNOWN pooltag 'IWBL', please update pooltag.txt
 RpcM         1          112         19         6552    all msrpc.sys allocations not covered elsewhere , Binary: msrpc.sys
 IWGI         1          112          0            0    UNKNOWN pooltag 'IWGI', please update pooltag.txt
 Nbtw         1          112          0            0    NetBT device linkage names , Binary: netbt.sys
 rtCA         1          104          0            0    UNKNOWN pooltag 'rtCA', please update pooltag.txt
 TcRD         1          104          0            0    TCP Receive DPC Data , Binary: tcpip.sys
 SdpD         1          104          4          336    Bluetooth SDP database , Binary: bthport.sys
 IWIs         1          104          0            0    UNKNOWN pooltag 'IWIs', please update pooltag.txt
 RaDA         1          104          0            0    Raw Socket Discretionary ACLs , Binary: tcpip.sys
 Wait         1          104          0            0    WaitCompletion Packets , Binary: nt!io
 #VIO         1           96          0            0    UNKNOWN pooltag '#VIO', please update pooltag.txt
 IWOZ         4           96          0            0    UNKNOWN pooltag 'IWOZ', please update pooltag.txt
 IWuk         1           96          0            0    UNKNOWN pooltag 'IWuk', please update pooltag.txt
 IWJZ         2           96          0            0    UNKNOWN pooltag 'IWJZ', please update pooltag.txt
 #FXH         1           96          0            0    UNKNOWN pooltag '#FXH', please update pooltag.txt
 InNP         3           96          0            0    Inet Nsi Providers , Binary: tcpip.sys
 CcWq         4           96          0            0    Cache Manager Work Queue Item , Binary: nt!cc
 AcpO         4           96          0            0    ACPI object data , Binary: acpi.sys
 xefb         5           96          0            0    UNKNOWN pooltag 'xefb', please update pooltag.txt
 #FXO         1           96          0            0    UNKNOWN pooltag '#FXO', please update pooltag.txt
 tSyB         1           96          0            0    UNKNOWN pooltag 'tSyB', please update pooltag.txt
 MmNo         4           96          0            0    Inernal physical memory nodes , Binary: nt!mm
 ^PRI         1           96          0            0    UNKNOWN pooltag '^PRI', please update pooltag.txt
 AzF1         1           96          0            0    UNKNOWN pooltag 'AzF1', please update pooltag.txt
 MT09         1           96          0            0    UNKNOWN pooltag 'MT09', please update pooltag.txt
 AzE          1           96          0            0    UNKNOWN pooltag 'AzE ', please update pooltag.txt
 WSKL         1           96          0            0    UNKNOWN pooltag 'WSKL', please update pooltag.txt
 IWGP         1           96          0            0    UNKNOWN pooltag 'IWGP', please update pooltag.txt
 CcPf         1           96          0            0    Prefetcher , Binary: nt!ccpf
 ArbN         2           96          0            0    UNKNOWN pooltag 'ArbN', please update pooltag.txt
 InSB         1           88          0            0    Inet stack block , Binary: tcpip.sys
 PnpJ         1           88          0            0    PNPMGR device event list , Binary: nt!pnp
 PYRC         2           88          0            0    UNKNOWN pooltag 'PYRC', please update pooltag.txt
 IWa4         1           88          0            0    UNKNOWN pooltag 'IWa4', please update pooltag.txt
 NLSB         1           88          0            0    UNKNOWN pooltag 'NLSB', please update pooltag.txt
 IWF0         1           88          0            0    UNKNOWN pooltag 'IWF0', please update pooltag.txt
 TuSB         1           88          0            0    Tunnel stack block , Binary: tunnel.sys
 IWJY         1           88          0            0    UNKNOWN pooltag 'IWJY', please update pooltag.txt
 IWD6         1           88          0            0    UNKNOWN pooltag 'IWD6', please update pooltag.txt
 INTC         2           88          0            0    Intel video driver
 IW6p         1           88          0            0    UNKNOWN pooltag 'IW6p', please update pooltag.txt
 L2Ti         2           88          0            0    ndis\l2tp / MTAG_UTIL
 IPmf         2           80          0            0    IP Multicast Forwarding Entry pool , Binary: tcpip.sys
 CSlo         1           80          0            0    UNKNOWN pooltag 'CSlo', please update pooltag.txt
 Uspp         2           80          0            0    USERTAG_PNP , Binary: win32k!AllocateAndLinkHidTLCInf
 IW1O         1           80          0            0    UNKNOWN pooltag 'IW1O', please update pooltag.txt
 2920         1           80          0            0    UNKNOWN pooltag '2920', please update pooltag.txt
 ^KTP         5           80          0            0    UNKNOWN pooltag '^KTP', please update pooltag.txt
 Uspo         2           80          0            0    USERTAG_POWER , Binary: win32k!QueuePowerRequest
 smIt         2           80          0            0    ReadyBoost store ETA timers , Binary: nt!store or rdyboost.sys
 ScLf         2           80          0            0    Fault prediction , Binary: classpnp.sys
 #HTB         2           80          2           80    UNKNOWN pooltag '#HTB', please update pooltag.txt
 Mmpr         2           80          0            0    Mm physical VAD roots , Binary: nt!mm
 HdWM         2           80          0            0    UNKNOWN pooltag 'HdWM', please update pooltag.txt
 NEtd         2           80          0            0    UNKNOWN pooltag 'NEtd', please update pooltag.txt
 IWHH         1           80          0            0    UNKNOWN pooltag 'IWHH', please update pooltag.txt
 TpWc         2           80          0            0    Threadpool minipacket context , Binary: nt!ex
 ClMC         1           80          0            0    UNKNOWN pooltag 'ClMC', please update pooltag.txt
 AcpA         2           80          0            0    ACPI arbiter data , Binary: acpi.sys
 IWQO         2           80          0            0    UNKNOWN pooltag 'IWQO', please update pooltag.txt
 GZob         1           80          5          520    UNKNOWN pooltag 'GZob', please update pooltag.txt
 6116         1           80          0            0    UNKNOWN pooltag '6116', please update pooltag.txt
 Wrpc         1           72          0            0    WAN_CONN_TAG
 IWv3         1           72          0            0    UNKNOWN pooltag 'IWv3', please update pooltag.txt
 IWD1         1           72          0            0    UNKNOWN pooltag 'IWD1', please update pooltag.txt
 IWFN         1           72          0            0    UNKNOWN pooltag 'IWFN', please update pooltag.txt
 KSlw         1           72          0            0    UNKNOWN pooltag 'KSlw', please update pooltag.txt
 IWA_         1           72          0            0    UNKNOWN pooltag 'IWA_', please update pooltag.txt
 IWmm         3           72          0            0    UNKNOWN pooltag 'IWmm', please update pooltag.txt
 IWLz         1           72          0            0    UNKNOWN pooltag 'IWLz', please update pooltag.txt
 #RUS         3           72          3           72    UNKNOWN pooltag '#RUS', please update pooltag.txt
 IWPG         1           72          0            0    UNKNOWN pooltag 'IWPG', please update pooltag.txt
 #MEC         1           72          0            0    UNKNOWN pooltag '#MEC', please update pooltag.txt
 Scs$         1           72          0            0    Tag for pnp class driver's SRB lookaside list
 Fssf         1           64          0            0    UNKNOWN pooltag 'Fssf', please update pooltag.txt
 IWOU         1           64          0            0    UNKNOWN pooltag 'IWOU', please update pooltag.txt
 ExEH         1           64          2          128    UNKNOWN pooltag 'ExEH', please update pooltag.txt
 GZcp         1           64          0            0    UNKNOWN pooltag 'GZcp', please update pooltag.txt
 PcLR         2           64          0            0    UNKNOWN pooltag 'PcLR', please update pooltag.txt
 ^UCH         1           64          0            0    UNKNOWN pooltag '^UCH', please update pooltag.txt
 IWHg         1           64          0            0    UNKNOWN pooltag 'IWHg', please update pooltag.txt
 AzD          1           64          0            0    UNKNOWN pooltag 'AzD ', please update pooltag.txt
 IWCj         1           64          0            0    UNKNOWN pooltag 'IWCj', please update pooltag.txt
 IW9Z         1           64          0            0    UNKNOWN pooltag 'IW9Z', please update pooltag.txt
 EtwT         1           64          0            0    Etw provider traits , Binary: nt!etw
 IWJU         4           64          0            0    UNKNOWN pooltag 'IWJU', please update pooltag.txt
 TQoS         2           64          0            0    TL QoS Client Data , Binary: tcpip.sys
 PcEi         2           64          0            0    UNKNOWN pooltag 'PcEi', please update pooltag.txt
 Gtff         1           64          0            0    GDITAG_TRUSTED_FONT_FILE_TABLE , Binary: win32k.sys
 IWBQ         4           64          0            0    UNKNOWN pooltag 'IWBQ', please update pooltag.txt
 Gzee         1           64          0            0    UNKNOWN pooltag 'Gzee', please update pooltag.txt
 ClfK         1           64          0            0    CLFS Log read completion element , Binary: clfs.sys
 SslC         1           64          0            0    SSL kernel mode client allocations , Binary: ksecdd.sys
 TWpV         1           64          0            0    UNKNOWN pooltag 'TWpV', please update pooltag.txt
 IWLn         1           56          0            0    UNKNOWN pooltag 'IWLn', please update pooltag.txt
 Nb37         1           56          0            0    NetBT lmhosts path , Binary: netbt.sys
 IWJX         1           56          0            0    UNKNOWN pooltag 'IWJX', please update pooltag.txt
 AzP          1           56          0            0    UNKNOWN pooltag 'AzP ', please update pooltag.txt
 IWvL         1           56          0            0    UNKNOWN pooltag 'IWvL', please update pooltag.txt
 hibr         1           56          0            0    UNKNOWN pooltag 'hibr', please update pooltag.txt
 EirD         1           56          0            0    UNKNOWN pooltag 'EirD', please update pooltag.txt
 IWRp         1           56          0            0    UNKNOWN pooltag 'IWRp', please update pooltag.txt
 IWLN         1           56          0            0    UNKNOWN pooltag 'IWLN', please update pooltag.txt
 IWBP         1           56          0            0    UNKNOWN pooltag 'IWBP', please update pooltag.txt
 mnip         1           56          0            0    UNKNOWN pooltag 'mnip', please update pooltag.txt
 IWcY         1           48          0            0    UNKNOWN pooltag 'IWcY', please update pooltag.txt
 IWBN         1           48          0            0    UNKNOWN pooltag 'IWBN', please update pooltag.txt
 #LRU         3           48          3           48    UNKNOWN pooltag '#LRU', please update pooltag.txt
 IWBM         1           48          0            0    UNKNOWN pooltag 'IWBM', please update pooltag.txt
 TDIg         2           48          0            0    TDI resource
 IWBO         1           48          0            0    UNKNOWN pooltag 'IWBO', please update pooltag.txt
 TcCM         1           48          0            0    TCP Congestion Control Manager Contexts , Binary: tcpip.sys
 PcEt         2           48          0            0    UNKNOWN pooltag 'PcEt', please update pooltag.txt
 RxTl         1           48          0            0    RDBSS toplevel IRP , Binary: rdbss.sys
 IoCc         3           48          0            0    Io completion context , Binary: nt!io
 noff         1           48          0            0    UNKNOWN pooltag 'noff', please update pooltag.txt
 Pnim         1           48          0            0    UNKNOWN pooltag 'Pnim', please update pooltag.txt
 AzC          1           48          0            0    UNKNOWN pooltag 'AzC ', please update pooltag.txt
 IWKw         1           48          0            0    UNKNOWN pooltag 'IWKw', please update pooltag.txt
 IWJO         1           48          0            0    UNKNOWN pooltag 'IWJO', please update pooltag.txt
 #PGX         1           48          0            0    UNKNOWN pooltag '#PGX', please update pooltag.txt
 IWAx         2           48          0            0    UNKNOWN pooltag 'IWAx', please update pooltag.txt
 MmMl         1           48          0            0    physical memory range information , Binary: nt!mm
 RMcc         1           48          0            0    UNKNOWN pooltag 'RMcc', please update pooltag.txt
 #FCX         2           48          0            0    UNKNOWN pooltag '#FCX', please update pooltag.txt
 Mmpv         1           48          0            0    Physical view VAD info , Binary: nt!mm
 RASw         2           48          0            0    UNKNOWN pooltag 'RASw', please update pooltag.txt
 IWJq         1           48          0            0    UNKNOWN pooltag 'IWJq', please update pooltag.txt
 IWI7         1           40          0            0    UNKNOWN pooltag 'IWI7', please update pooltag.txt
 IWfV         1           40          0            0    UNKNOWN pooltag 'IWfV', please update pooltag.txt
 IWdk         1           40          0            0    UNKNOWN pooltag 'IWdk', please update pooltag.txt
 IWFZ         1           40          0            0    UNKNOWN pooltag 'IWFZ', please update pooltag.txt
 IWPV         1           40          0            0    UNKNOWN pooltag 'IWPV', please update pooltag.txt
 AzF2         1           40          0            0    UNKNOWN pooltag 'AzF2', please update pooltag.txt
 PRTF         1           40          0            0    UNKNOWN pooltag 'PRTF', please update pooltag.txt
 SdpI         1           40          0            0    Bluetooth port driver (SDP) , Binary: bthport.sys
 IWyl         1           40          0            0    UNKNOWN pooltag 'IWyl', please update pooltag.txt
 FxL2         1           40          0            0    KMDF Loader Pool allocation , Binary: wdfldr.sys
 IWKJ         1           40          0            0    UNKNOWN pooltag 'IWKJ', please update pooltag.txt
 IWOi         1           40          0            0    UNKNOWN pooltag 'IWOi', please update pooltag.txt
 IWCO         1           40          0            0    UNKNOWN pooltag 'IWCO', please update pooltag.txt
 IWIy         1           40          0            0    UNKNOWN pooltag 'IWIy', please update pooltag.txt
 #GMP         1           40          0            0    UNKNOWN pooltag '#GMP', please update pooltag.txt
 IWIx         1           40          0            0    UNKNOWN pooltag 'IWIx', please update pooltag.txt
 :WCH         1           40          0            0    UNKNOWN pooltag ':WCH', please update pooltag.txt
 NpFn         1           40          0            0    Name block , Binary: npfs.sys
 IWGO         1           40          0            0    UNKNOWN pooltag 'IWGO', please update pooltag.txt
 MTXO         2           40          0            0    UNKNOWN pooltag 'MTXO', please update pooltag.txt
 #FOF         1           40          0            0    UNKNOWN pooltag '#FOF', please update pooltag.txt
 IWTA         1           40          0            0    UNKNOWN pooltag 'IWTA', please update pooltag.txt
 IWre         1           40          0            0    UNKNOWN pooltag 'IWre', please update pooltag.txt
 IWFX         1           32          0            0    UNKNOWN pooltag 'IWFX', please update pooltag.txt
 RaPD         1           32          0            0    RaidGetPortData storport!RaidpPortData , Binary: storport.sys
 #CLP         1           32          0            0    UNKNOWN pooltag '#CLP', please update pooltag.txt
 IWCk         1           32          0            0    UNKNOWN pooltag 'IWCk', please update pooltag.txt
 OIGd         1           32          0            0    UNKNOWN pooltag 'OIGd', please update pooltag.txt
 Nsic         1           32          0            0    UNKNOWN pooltag 'Nsic', please update pooltag.txt
 NQoS         1           32          0            0    UNKNOWN pooltag 'NQoS', please update pooltag.txt
 IWJm         1           32          0            0    UNKNOWN pooltag 'IWJm', please update pooltag.txt
 IWsq         1           32          0            0    UNKNOWN pooltag 'IWsq', please update pooltag.txt
 @KMD         1           32          0            0    UNKNOWN pooltag '@KMD', please update pooltag.txt
 Ccmp         1           32          0            0    UNKNOWN pooltag 'Ccmp', please update pooltag.txt
 IWIm         1           32          0            0    UNKNOWN pooltag 'IWIm', please update pooltag.txt
 IWs3         1           32          0            0    UNKNOWN pooltag 'IWs3', please update pooltag.txt
 IW7W         1           32          0            0    UNKNOWN pooltag 'IW7W', please update pooltag.txt
 IWJu         1           32          0            0    UNKNOWN pooltag 'IWJu', please update pooltag.txt
 IWLj         1           32          0            0    UNKNOWN pooltag 'IWLj', please update pooltag.txt
 IWux         1           32          0            0    UNKNOWN pooltag 'IWux', please update pooltag.txt
 Nb36         1           32          0            0    NetBT string , Binary: netbt.sys
 IWl6         1           32          0            0    UNKNOWN pooltag 'IWl6', please update pooltag.txt
 L2T4         1           32          0            0    ndis\l2tp / MTAG_VCTABLE
 IoCb         1           32          0            0    UNKNOWN pooltag 'IoCb', please update pooltag.txt
 IWD4         1           32          0            0    UNKNOWN pooltag 'IWD4', please update pooltag.txt
 ER12         1           32          0            0    UNKNOWN pooltag 'ER12', please update pooltag.txt
 IWkk         1           32          0            0    UNKNOWN pooltag 'IWkk', please update pooltag.txt
 IWye         1           32          0            0    UNKNOWN pooltag 'IWye', please update pooltag.txt
 IWD3         1           32          0            0    UNKNOWN pooltag 'IWD3', please update pooltag.txt
 BthS         1           32          0            0    Bluetooth port driver (security) , Binary: bthport.sys
 Nbtg         2           32          0            0    NetBT MDL buffer , Binary: netbt.sys
 IWJ8         1           32          0            0    UNKNOWN pooltag 'IWJ8', please update pooltag.txt
 IWIl         1           32          0            0    UNKNOWN pooltag 'IWIl', please update pooltag.txt
 EQSc         1           32          0            0    EQoS pacer client , Binary: tcpip.sys
 AzC6         1           32          0            0    UNKNOWN pooltag 'AzC6', please update pooltag.txt
 #QXP         1           32          0            0    UNKNOWN pooltag '#QXP', please update pooltag.txt
 IWJ1         1           24          0            0    UNKNOWN pooltag 'IWJ1', please update pooltag.txt
 Wnds         1           24          0            0    UNKNOWN pooltag 'Wnds', please update pooltag.txt
 PoEi         1           24          0            0    MTAG_HANDLETABLE , Binary: raspppoe.sys
 WanW         1           24          0            0    SHA Encryption
 IWGC         1           24          0            0    UNKNOWN pooltag 'IWGC', please update pooltag.txt
 IWJT         1           24          0            0    UNKNOWN pooltag 'IWJT', please update pooltag.txt
 IWKL         1           24          0            0    UNKNOWN pooltag 'IWKL', please update pooltag.txt
 Nbuf         1           24          0            0    NetIO Memory Descriptor List allocations , Binary: netio.sys
 IWLU         1           24          0            0    UNKNOWN pooltag 'IWLU', please update pooltag.txt
 idle         1           24          0            0    Power Manager idle handler
 IWGA         1           24          0            0    UNKNOWN pooltag 'IWGA', please update pooltag.txt
 PTPc         1           24          0            0    UNKNOWN pooltag 'PTPc', please update pooltag.txt
 IPpv         1           24          0            0    UNKNOWN pooltag 'IPpv', please update pooltag.txt
 IWJK         1           24          0            0    UNKNOWN pooltag 'IWJK', please update pooltag.txt
 IW_T         1           24          0            0    UNKNOWN pooltag 'IW_T', please update pooltag.txt
 IWKO         1           24          0            0    UNKNOWN pooltag 'IWKO', please update pooltag.txt
 IWIw         1           24          0            0    UNKNOWN pooltag 'IWIw', please update pooltag.txt
 AVns         1           24          0            0    UNKNOWN pooltag 'AVns', please update pooltag.txt
 L2Ts         1           24          0            0    UNKNOWN pooltag 'L2Ts', please update pooltag.txt
 IWKU         1           24          0            0    UNKNOWN pooltag 'IWKU', please update pooltag.txt
 edfw         1           24          0            0    UNKNOWN pooltag 'edfw', please update pooltag.txt
 PTPn         1           24          0            0    UNKNOWN pooltag 'PTPn', please update pooltag.txt
 Fsrc         1           24          0            0    Filesystem recognizer (fsrec.sys) , Binary: fsrec.sys
 IWit         1           24          0            0    UNKNOWN pooltag 'IWit', please update pooltag.txt
 IWKS         1           24          0            0    UNKNOWN pooltag 'IWKS', please update pooltag.txt
 AcpM         1           24          2          152    ACPI miscellaneous data , Binary: acpi.sys
 IWKQ         1           24          0            0    UNKNOWN pooltag 'IWKQ', please update pooltag.txt
 IWJn         1           24          0            0    UNKNOWN pooltag 'IWJn', please update pooltag.txt
 PoEj         1           24          0            0    MTAG_HANDLECB , Binary: raspppoe.sys
 AzC2         1           16          0            0    UNKNOWN pooltag 'AzC2', please update pooltag.txt
 smFp         1           16          0            0    ReadyBoost virtual forward progress entry , Binary: nt!store
 IWd2         1           16          0            0    UNKNOWN pooltag 'IWd2', please update pooltag.txt
 IWFW         1           16          0            0    UNKNOWN pooltag 'IWFW', please update pooltag.txt
 Nb03         1           16          0            0    NetBT remote name address cache , Binary: netbt.sys
 BMnS         1           16          0            0    UNKNOWN pooltag 'BMnS', please update pooltag.txt
 IWMh         1           16          0            0    UNKNOWN pooltag 'IWMh', please update pooltag.txt
 TEE4         1           16          0            0    UNKNOWN pooltag 'TEE4', please update pooltag.txt
 RI12         1           16          0            0    UNKNOWN pooltag 'RI12', please update pooltag.txt
 :SRW         1           16          0            0    UNKNOWN pooltag ':SRW', please update pooltag.txt
 UMB.         1           16          0            0    UNKNOWN pooltag ' UMB', please update pooltag.txt
 IWOq         1           16          0            0    UNKNOWN pooltag 'IWOq', please update pooltag.txt
 smms         1           16          0            0    ReadyBoost virtual store memory monitor context , Binary: nt!store
 IWAs         1           16          0            0    UNKNOWN pooltag 'IWAs', please update pooltag.txt
 IWXy         1           16          0            0    UNKNOWN pooltag 'IWXy', please update pooltag.txt
 IWYt         1           16          0            0    UNKNOWN pooltag 'IWYt', please update pooltag.txt
 CM31         0            0      17239     81080320    Internal Configuration manager allocations , Binary: nt!cm
 CM25         0            0       4574     21381120    Internal Configuration manager allocations , Binary: nt!cm
 CM19         0            0          1         5224    Internal Configuration manager allocations , Binary: nt!cm
 RRle         0            0        717        34416    RTL_RANGE_LIST_ENTRY_TAG
 Ntfo         0            0        168        12400    SCB_INDEX normalized named buffer , Binary: ntfs.sys
 HD01         0            0          1          120    UNKNOWN pooltag 'HD01', please update pooltag.txt
 GZcr         0            0          5          120    UNKNOWN pooltag 'GZcr', please update pooltag.txt
 WDIs         0            0          4        16384    UNKNOWN pooltag 'WDIs', please update pooltag.txt
 AlRe         0            0          2          160    ALPC section region , Binary: nt!alpc
 NpfF         0            0          1          144    Npfs Allocations , Binary: npfs.sys
 TmRr         0            0          6          144    Tm KTM_RESTART_RECORD , Binary: nt!tm
 TCSC         0            0         18          768    TCP/IP network protocol , Binary: TCP
 CM20         0            0          1         8192    Internal Configuration manager allocations , Binary: nt!cm
 CMVI         0            0         75         7640    value index cache tag , Binary: nt!cm
 ClfO         0            0          1         4096    CLFS Log zero page , Binary: clfs.sys
 None         0            0          1           56    call to ExAllocatePool
 PnpD         0            0         20         1440    UNKNOWN pooltag 'PnpD', please update pooltag.txt
 NpFc         0            0          3          552    CCB, client control block , Binary: npfs.sys
 CcPh         0            0          5        11304    Prefetcher header preallocation , Binary: nt!ccpf
 GZbm         0            0          5       164528    UNKNOWN pooltag 'GZbm', please update pooltag.txt
 CMNb         0            0        175         8192    Configuration Manager Name Tag , Binary: nt!cm
 CMpb         0            0         13          624    registry post blocks , Binary: nt!cm
 ObDi         0            0        997        23928    object directory , Binary: nt!ob
 AlVi         0            0          4          352    ALPC view , Binary: nt!alpc
 Txrm         0            0          5        43880    TXF_RMCB , Binary: ntfs.sys
 NtfM         0            0         12          480    NTFS_MCB_ENTRY , Binary: ntfs.sys
 AcpI         0            0         44         9840    ACPI irp data , Binary: acpi.sys
 NtFS         0            0        191        43912    SecurSup.c , Binary: ntfs.sys
 GZbc         0            0          1          112    UNKNOWN pooltag 'GZbc', please update pooltag.txt
 Symb         0            0        287        20984    Symbolic link objects
 CM13         0            0          1         4096    Internal Configuration manager allocations , Binary: nt!cm
 BatM         0            0          1          120    Control method battery driver
 PsSl         0            0          1          136    UNKNOWN pooltag 'PsSl', please update pooltag.txt
 KSau         0            0          3         3872    UNKNOWN pooltag 'KSau', please update pooltag.txt
 Pp           0            0        574        63544    UNKNOWN pooltag 'Pp  ', please update pooltag.txt
 CMca         0            0          2           48    Internal Configuration manager allocations , Binary: nt!cm
 CM26         0            0          2        16384    Internal Configuration manager allocations , Binary: nt!cm
 CM32         0            0          3        12288    Internal Configuration manager allocations , Binary: nt!cm
 SeFS         0            0          1           16    Security File System Notify Context , Binary: nt!se
 EMst         0            0         89         4112    UNKNOWN pooltag 'EMst', please update pooltag.txt
 PcSi         0            0         78        33424    UNKNOWN pooltag 'PcSi', please update pooltag.txt
 CMVa         0            0       1167        78512    value cache value tag , Binary: nt!cm
 AlCI         0            0         16         1152    ALPC communication info , Binary: nt!alpc
 Rx??         0            0          1           88    RDBSS allocations , Binary: rdbss.sys
 ClfI         0            0         17      2166784    CLFS Log marshal buffer lookaside list , Binary: clfs.sys
 EMpr         0            0         12          384    UNKNOWN pooltag 'EMpr', please update pooltag.txt
 CMPe         0            0         18          720    Internal Configuration manager allocations , Binary: nt!cm
 Ntfm         0            0          1          272    NTFS_MCB_ARRAY , Binary: ntfs.sys
 TxTb         0            0         15          600    UNKNOWN pooltag 'TxTb', please update pooltag.txt
 CMRm         0            0          1           96    Configuration Manager Resource Manager Tag , Binary: nt!cm
 #FLG         0            0          1           40    UNKNOWN pooltag '#FLG', please update pooltag.txt
 MmFr         0            0         12          384    ASLR fixup records , Binary: nt!mm
 Lfs          0            0         60        27120    Lfs allocations
 KLRG         0            0          3          264    UNKNOWN pooltag 'KLRG', please update pooltag.txt
 SeLs         0            0          2          128    Security Logon Session , Binary: nt!se
 AlHa         0            0         16         1152    ALPC port handle table , Binary: nt!alpc
 PcUs         0            0          2          152    WDM audio stuff
 CMAl         0            0         24        98304    internal registry memory allocator pool tag , Binary: nt!cm
 #ACT         0            0          1           72    UNKNOWN pooltag '#ACT', please update pooltag.txt
 NtFf         0            0         33       132520    FsCtrl.c , Binary: ntfs.sys
 ClfA         0            0         18         1584    CLFS Log container lookaside list , Binary: clfs.sys
 NtFC         0            0         43         3296    Create.c , Binary: ntfs.sys
 Txtr         0            0          5         1680    TXF_TRANS (Txf transaction context) , Binary: ntfs.sys
 PRCx         0            0          2          128    UNKNOWN pooltag 'PRCx', please update pooltag.txt
 FSel         0            0          5          120    File System Run Time Extra Create Parameter List , Binary: nt!fsrtl
 AlSe         0            0          1          112    ALPC client security , Binary: nt!alpc
 VmRb         0            0          1        16384    Raw record buffers , Binary: volmgrx.sys
 Z-Lm         0            0          1          152    UNKNOWN pooltag 'Z-Lm', please update pooltag.txt
 StSD         0            0          1           96    UNKNOWN pooltag 'StSD', please update pooltag.txt
 Toke         0            0         13         8120    Token objects , Binary: nt!se
 IoNm         0            0        332        41352    Io parsing names , Binary: nt!io
 PmRP         0            0          1          128    Partition Manager registry path , Binary: partmgr.sys
 PcDi         0            0         10          480    WDM audio stuff
 Cbrb         0            0         12          288    UNKNOWN pooltag 'Cbrb', please update pooltag.txt
 Ntfl         0            0         14         2352    LCB , Binary: ntfs.sys
 GZvn         0            0         21         1456    UNKNOWN pooltag 'GZvn', please update pooltag.txt
 ClMn         0            0          6          896    UNKNOWN pooltag 'ClMn', please update pooltag.txt
 CM49         0            0          1         1552    Internal Configuration manager allocations , Binary: nt!cm
 Citm         0            0          1          168    UNKNOWN pooltag 'Citm', please update pooltag.txt
 MDTR         0            0          1       446464    UNKNOWN pooltag 'MDTR', please update pooltag.txt
 ^LRU         0            0          2           32    UNKNOWN pooltag '^LRU', please update pooltag.txt
 #ERC         0            0          1          272    UNKNOWN pooltag '#ERC', please update pooltag.txt
 ^HFE         0            0          1        23608    UNKNOWN pooltag '^HFE', please update pooltag.txt
 Txte         0            0          5          200    TXF_RMCB_TABLE_ENTRY , Binary: ntfs.sys
 ArbA         0            0         15        69728    ARBITER_ALLOCATION_STATE_TAG , Binary: nt!arb
 WmDS         0            0          2         8752    Wmi DataSource chunks
 FIcs         0            0        515        53560    FileInfo FS-filter Stream Context , Binary: fileinfo.sys
 CM27         0            0          3        20016    Internal Configuration manager allocations , Binary: nt!cm
 Dire         0            0         33         7648    Directory objects
 MuUn         0            0          4          424    UNC provider , Binary: mup.sys
 CM11         0            0          2         8192    Internal Configuration manager allocations , Binary: nt!cm
 CM39         0            0        264       168960    Internal Configuration manager allocations , Binary: nt!cm
 CMPt         0            0          1          144    Internal Configuration manager allocations , Binary: nt!cm
 WmGE         0            0          1        57368    Wmi GuidEntry chunks
 Obtb         0            0         26        54184    object tables via EX handle.c , Binary: nt!ob
 PoSL         0            0          1           16    Power shutdown event list
 IoFs         0            0          1           24    Io shutdown packet , Binary: nt!io
 WmIS         0            0          1       118784    Wmi InstanceSet chunks
 SWbr         0            0          7         1112    bus reference
 PcwR         0            0         11         1880    PCW provider Registration , Binary: nt!pcw
 SWda         0            0          7          280    POOLTAG_DEVICE_ASSOCIATION
 CMSb         0            0          1         4096    internal stash buffer pool tag , Binary: nt!cm
 #ICT         0            0          1          104    UNKNOWN pooltag '#ICT', please update pooltag.txt
 ScDg         0            0          1           72    update disk geometry paths
 Gzrg         0            0          6          592    UNKNOWN pooltag 'Gzrg', please update pooltag.txt
 FSim         0            0        449        57472    File System Run Time Mcb Initial Mapping Lookaside List , Binary: nt!fsrtl
 MmRe         0            0         88       797400    ASLR relocation blocks , Binary: nt!mm
 PcPc         0            0          2           80    WDM audio stuff
 IoSi         0            0          1          336    Io Symbolic Links , Binary: nt!io
 CMIn         0            0         13          496    Configuration Manager  Index Hint Tag , Binary: nt!cm
 PsQt         0            0          1          392    UNKNOWN pooltag 'PsQt', please update pooltag.txt
 CM10         0            0          6         9600    Internal Configuration manager allocations , Binary: nt!cm
 Gi2c         0            0          2           64    GDITAG_DDCCI , Binary: win32k.sys
 SWdr         0            0          8         1376    device reference
 NtFB         0            0         25       414536    BitmpSup.c , Binary: ntfs.sys
 NtFU         0            0         20         2592    usnsup.c , Binary: ntfs.sys
 Vga          0            0          1         1800    UNKNOWN pooltag 'Vga ', please update pooltag.txt
 ObNm         0            0       1013        52792    object names , Binary: nt!ob
 DfCo         0            0          1          136    DFS Client allocations , Binary: dfsc.sys
 CreS         0            0          1           56    UNKNOWN pooltag 'CreS', please update pooltag.txt
 NtfS         0            0         15         6360    SCB_INDEX , Binary: ntfs.sys
 Ntfs         0            0          5         1760    SCB_DATA , Binary: ntfs.sys
 EtwP         0            0         10         1440    Etw Pool , Binary: nt!etw
 Ppin         0            0          7         2208    plug-and-play initialization , Binary: nt!pnp
 AlMs         0            0          3         1272    ALPC message , Binary: nt!alpc
 WmMR         0            0          1          544    Wmi MofResouce chunks
 SWid         0            0          7          616    device ID
 Keye         0            0          3         2448    UNKNOWN pooltag 'Keye', please update pooltag.txt
 NpFD         0            0          1          136    DCB, directory block , Binary: npfs.sys
 FMus         0            0          2           40    Unicode string , Binary: fltmgr.sys
 CMSc         0            0        775       224832    security cache pooltag , Binary: nt!cm
 GZsc         0            0        307        66312    UNKNOWN pooltag 'GZsc', please update pooltag.txt
 ARFT         0            0          3           96    UNKNOWN pooltag 'ARFT', please update pooltag.txt
 Pnp9         0            0          5          280    PNPMGR HW profile notify , Binary: nt!pnp
 PfFK         0            0        504        12096    Pf RpContext FileKeyHashEntry , Binary: nt!pf
 NpAt         0            0          4          192    UNKNOWN pooltag 'NpAt', please update pooltag.txt
 NtfF         0            0        284       286272    FCB_INDEX , Binary: ntfs.sys
 Txfl         0            0          4          192    TXF_FCB_CLEANUP , Binary: ntfs.sys
 CM17         0            0          7        57344    Internal Configuration manager allocations , Binary: nt!cm
 ClMp         0            0         29         1152    UNKNOWN pooltag 'ClMp', please update pooltag.txt
 ObSq         0            0         16         4320    object security descriptors (query) , Binary: nt!ob
 MmSt         0            0        602      7390568    Mm section object prototype ptes , Binary: nt!mm
 KSat         0            0          2           48    UNKNOWN pooltag 'KSat', please update pooltag.txt
 #RSN         0            0          1           32    UNKNOWN pooltag '#RSN', please update pooltag.txt
 SeAk         0            0        118         4352    Security Account Name , Binary: nt!se
 #HFE         0            0          1        23608    UNKNOWN pooltag '#HFE', please update pooltag.txt
 EMit         0            0        460        39024    UNKNOWN pooltag 'EMit', please update pooltag.txt
 SeAc         0            0          7          664    Security ACL , Binary: nt!se
 Txsa         0            0          5         1960    Txf sorted array item , Binary: ntfs.sys
 KSbe         0            0         17         1184    UNKNOWN pooltag 'KSbe', please update pooltag.txt
 ObSc         0            0        134        25328    Object security descriptor cache block , Binary: nt!ob
 PnpH         0            0          5          160    PNPMGR service name , Binary: nt!pnp
 Sect         0            0        273        22528    Section objects
 ObFl         0            0          2          232    UNKNOWN pooltag 'ObFl', please update pooltag.txt
 GZic         0            0          1           24    UNKNOWN pooltag 'GZic', please update pooltag.txt
 AtmA         0            0        180        10016    Atoms
 ArbR         0            0         30          960    ARBITER_RANGE_LIST_TAG , Binary: nt!arb
 #SMD         0            0          1        18496    UNKNOWN pooltag '#SMD', please update pooltag.txt
 Symt         0            0        287        16688    Symbolic link target strings
 MuSp         0            0          2          216    UNKNOWN pooltag 'MuSp', please update pooltag.txt
 KSdi         0            0          4          128    UNKNOWN pooltag 'KSdi', please update pooltag.txt
 MmSg         0            0          1           64    Mm segments , Binary: nt!mm
 cbuf         0            0          3           72    UNKNOWN pooltag 'cbuf', please update pooltag.txt
 GZif         0            0          1         2056    UNKNOWN pooltag 'GZif', please update pooltag.txt
 CcPD         0            0          4      2315288    Prefetcher trace dump , Binary: nt!ccpf
 Dacl         0            0          1           96    Temp allocations for object DACLs
 NtfE         0            0         22         4224    INDEX_CONTEXT , Binary: ntfs.sys
 rtPi         0            0          1         1288    UNKNOWN pooltag 'rtPi', please update pooltag.txt
 FIcp         0            0          4          288    FileInfo FS-filter Extra Create Parameter , Binary: fileinfo.sys
 PEAU         0            0        173        24888    UNKNOWN pooltag 'PEAU', please update pooltag.txt
 CM16         0            0         63       409600    Internal Configuration manager allocations , Binary: nt!cm
 VCdc         0            0          3         1744    UNKNOWN pooltag 'VCdc', please update pooltag.txt
 CMcc         0            0         22         1056    Internal Configuration manager allocations , Binary: nt!cm
 PcwC         0            0         11          968    PCW Counter set , Binary: nt!pcw
 MmSm         0            0        336        13440    segments used to map data files , Binary: nt!mm
 MsPp         0            0          4         1016    UNKNOWN pooltag 'MsPp', please update pooltag.txt
 RngS         0            0          2          216    UNKNOWN pooltag 'RngS', please update pooltag.txt
 MntA         0            0         39         3304    UNKNOWN pooltag 'MntA', please update pooltag.txt
 CM7          0            0         23          736    Internal Configuration manager allocations , Binary: nt!cm
 Ntrs         0            0          1           96    UNKNOWN pooltag 'Ntrs', please update pooltag.txt
 PcSb         0            0         16          304    UNKNOWN pooltag 'PcSb', please update pooltag.txt
 CMcb         0            0          2          112    Internal Configuration manager allocations , Binary: nt!cm
 D2d          0            0          8          288    Device Object to DosName rtns (ntos\rtl\dev2dos.c)
 PnpC         0            0         27         1728    PNPMGR target device notify , Binary: nt!pnp
 IMW.         0            0          1          120    UNKNOWN pooltag ' IMW', please update pooltag.txt
 Z-Cl         0            0          1           56    UNKNOWN pooltag 'Z-Cl', please update pooltag.txt
 ^RUS         0            0          2           48    UNKNOWN pooltag '^RUS', please update pooltag.txt
 #USX         0            0          1           48    UNKNOWN pooltag '#USX', please update pooltag.txt
 Key          0            0        184        15160    Key objects
 UMDM         0            0          1          120    UMDF pool allocation , Binary: WUDFRd.sys
 PSet         0            0         97         5832    UNKNOWN pooltag 'PSet', please update pooltag.txt
 GZcc         0            0         18         8344    UNKNOWN pooltag 'GZcc', please update pooltag.txt
 mltr         0            0          1          872    UNKNOWN pooltag 'mltr', please update pooltag.txt
 Sdba         0            0       2313       307712    Application compatibility Sdb* allocations
 CMnb         0            0         13          728    registry notify blocks , Binary: nt!cm
 SeTd         0            0         13         1040    Security Token dynamic part , Binary: nt!se
 FIcn         0            0          5         1240    FileInfo FS-filter Create Retry Path , Binary: fileinfo.sys
 CM29         0            0         49       401408    Internal Configuration manager allocations , Binary: nt!cm
 Ntfu         0            0          1         1032    NTFS_MARK_UNUSED_CONTEXT , Binary: ntfs.sys
 FIvn         0            0          5          280    FileInfo FS-filter Volume Name , Binary: fileinfo.sys
 CMpi         0            0        201         8664    Internal Configuration manager allocations , Binary: nt!cm
 PcFp         0            0          4         1664    WDM audio stuff
 CMDa         0            0        156        32120    value data cache pool tag , Binary: nt!cm
 Ntf0         0            0        647        56384    General pool allocation , Binary: ntfs.sys
 GZhc         0            0          4          288    UNKNOWN pooltag 'GZhc', please update pooltag.txt
 Strg         0            0         90         8408    Dynamic Translated strings
 AtmT         0            0          4         4512    Atom tables
 KSce         0            0         43         1416    create item entry
 HD20         0            0          1           16    UNKNOWN pooltag 'HD20', please update pooltag.txt
 SeLS         0            0          1           72    Security Logon Session tracking array , Binary: nt!se
 GzTe         0            0         16         1152    UNKNOWN pooltag 'GzTe', please update pooltag.txt
 PmTE         0            0          3          168    Partition Manager table entry , Binary: partmgr.sys
 ObHd         0            0          5          192    object handle count data base , Binary: nt!ob
 FxL5         0            0          1          128    KMDF Loader Pool allocation , Binary: wdfldr.sys
 ArbL         0            0         30         8176    ARBITER_ORDERING_LIST_TAG , Binary: nt!arb
 PfFH         0            0          1         2056    Pf RpContext FileKeyHash buckets , Binary: nt!pf
 Ppsu         0            0        346        16200    plug-and-play subroutines for the I/O system , Binary: nt!pnp
 NDse         0            0          5          928    NDIS_TAG_SECURITY , Binary: ndis.sys
 AlSc         0            0          2          144    ALPC section , Binary: nt!alpc
 NtfC         0            0          6          768    CCB , Binary: ntfs.sys
 ScC1         0            0          1          120    Registry path buffer , Binary: classpnp.sys
 CM28         0            0          2         8192    Internal Configuration manager allocations , Binary: nt!cm
 SePa         0            0          1           16    Process audit image names and captured policy structures , Binary: nt!se
 ObDm         0            0          1           64    object device map , Binary: nt!ob
 GZrc         0            0         22          528    UNKNOWN pooltag 'GZrc', please update pooltag.txt
 CMCa         0            0          7        60960    Configuration Manager Cache (registry) , Binary: nt!cm
 NpPp         0            0          4          792    UNKNOWN pooltag 'NpPp', please update pooltag.txt
 PcwI         0            0          3          144    PCW counter set Instance , Binary: nt!pcw
 CIcr         0            0        178      2174384    Code Integrity allocations for image integrity checking , Binary: ci.dll
 SeAt         0            0         13          416    Security Attributes , Binary: nt!se
 Se           0            0          1          784    General security allocations , Binary: nt!se
 PfNL         0            0          1       360448    Pf Name logging buffers , Binary: nt!pf
 ClfH         0            0         17         2312    CLFS Log I/O control block lookaside list , Binary: clfs.sys
 PcSt         0            0         14         1960    WDM audio stuff

TOTAL     33275     74102688      44383    125051472
0: kd> !verifier

Verify Flags Level 0x00000000

  STANDARD FLAGS:
    [ ] (0x00000000) Automatic Checks
    [ ] (0x00000001) Special pool
    [ ] (0x00000002) Force IRQL checking
    [ ] (0x00000008) Pool tracking
    [ ] (0x00000010) I/O verification
    [ ] (0x00000020) Deadlock detection
    [ ] (0x00000080) DMA checking
    [ ] (0x00000100) Security checks
    [ ] (0x00000800) Miscellaneous checks

  ADDITIONAL FLAGS:
    [ ] (0x00000004) Randomized low resources simulation
    [ ] (0x00000200) Force pending I/O requests
    [ ] (0x00000400) IRP logging

    [X] Indicates flag is enabled


Summary of All Verifier Statistics

  RaiseIrqls           0x0
  AcquireSpinLocks     0x0
  Synch Executions     0x0
  Trims                0x0

  Pool Allocations Attempted             0x0
  Pool Allocations Succeeded             0x0
  Pool Allocations Succeeded SpecialPool 0x0
  Pool Allocations With NO TAG           0x0
  Pool Allocations Failed                0x0

  Current paged pool allocations         0x0 for 00000000 bytes
  Peak paged pool allocations            0x0 for 00000000 bytes
  Current nonpaged pool allocations      0x0 for 00000000 bytes
  Peak nonpaged pool allocations         0x0 for 00000000 bytes

0: kd> !irpfind

Scanning large pool allocation table for tag 0x3f707249 (Irp?) (9e200000 : 9e400000)

unable to get nt!ExpHeapBackedPoolEnabledState
  Irp    [ Thread ] irpStack: (Mj,Mn)   DevObj  [Driver]         MDL Process
8625ac08 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
9ad45e28 [00000000] irpStack: (16, 0)  874fc778 [*** ERROR: Module load completed but symbols could not be loaded for LHidEqd.Sys
 \Driver\LHidEqd]
8581bcd8 [00000000] irpStack: ( f, 0)  861f5228 [ \Driver\ACPI]
877ba578 [00000000] irpStack: ( f, 0)  87013960 [*** ERROR: Module load completed but symbols could not be loaded for TeeDriver.sys
 \Driver\MEI]

Searching nonpaged pool (80000000 : ffc00000) for tag 0x3f707249 (Irp?)

857a9360 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
857ee1c0 [00000000] irpStack: ( e, 0)  86291b58 [ \Driver\ACPI]
857ef1c0 [00000000] irpStack: ( e, 0)  8624c578 [ \Driver\ACPI]
857f4168 [00000000] irpStack: (16, 0)  862918f0 [ \Driver\ACPI]
85844008 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
85848008 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
858486a8 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
85848b58 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
8585c320 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
8587c138 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
861f41e8 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
86202ec0 [00000000] irpStack: ( f, 0)  00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
862131a8 [00000000] irpStack: ( f, 0)  86f99c50 [*** ERROR: Module load completed but symbols could not be loaded for iusb3xhc.sys
 \Driver\iusb3xhc]
8623c1c8 [00000000] irpStack: ( f, 0)  00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
862917c0 [00000000] irpStack: ( e, 0)  862918f0 [ \Driver\ACPI]
869afd00 [00000000] Irp is complete (CurrentLocation 10 > StackCount 9)
869b0bf8 [00000000] Irp is complete (CurrentLocation 11 > StackCount 10) 0x00000000
869b6e00 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
869b7458 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
869b8e00 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
869bb008 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
869bbae8 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
86a31d18 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
86a35188 [00000000] irpStack: ( f, 0)  9b07aee8 [*** ERROR: Module load completed but symbols could not be loaded for btmhsf.sys
 \Driver\btmhsf]
86a35368 [00000000] irpStack: ( f, 0)  9b07aee8 [ \Driver\btmhsf]
86a35548 [00000000] irpStack: ( f, 0)  9b07aee8 [ \Driver\btmhsf]
86a358e0 [00000000] irpStack: ( f, 0)  9b07aee8 [ \Driver\btmhsf]
86a35ac0 [00000000] irpStack: ( f, 0)  9b07aee8 [ \Driver\btmhsf]
86a36008 [00000000] irpStack: ( 0, 0)  00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
86a36248 [00000000] irpStack: (16, 0)  9ae0e030 [*** ERROR: Module load completed but symbols could not be loaded for iusb3hub.sys
 \Driver\iusb3hub]
86a36648 [00000000] Irp is complete (CurrentLocation 10 > StackCount 9)
86a3c8c0 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
86a3e6d0 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
86a4b4b0 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
86af2008 [00000000] irpStack: ( f, 0)  87d95138 [ \Driver\HidBth]
86b2b008 [00000000] Irp is complete (CurrentLocation 13 > StackCount 12)
86b2bde0 [00000000] Irp is complete (CurrentLocation 13 > StackCount 12)
86b2c008 [00000000] irpStack: (16, 0)  86dee030 [ \Driver\HidBth]
86b2c5d0 [00000000] irpStack: (16, 0)  86b29030 [ \Driver\HidBth]
86b8c4a8 [00000000] irpStack: ( e, 0)  870d99a8 [ \Driver\CmBatt]
86f24008 [00000000] irpStack: ( f, 0)  00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
86f26008 [00000000] Irp is complete (CurrentLocation 6 > StackCount 5)
86f26220 [00000000] Irp is complete (CurrentLocation 11 > StackCount 10) 0x00000000
86f292d0 [00000000] Irp is complete (CurrentLocation 3 > StackCount 2)
86f29830 [00000000] Irp is complete (CurrentLocation 10 > StackCount 9)
86f77008 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
86f999d8 [00000000] irpStack: ( e, 0)  8579c760 [ \Driver\Compbatt]
87756cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3)
8779b6d8 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
877a71a8 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
87d48318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d485d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d48888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d48b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d48df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000003
87d49318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d495d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a7e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4aa98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4ad50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4b210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4b4c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4b780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4ba38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4bcf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4bf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c6d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4cc48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4cf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4d318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4d5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4db40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4ddf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4eb40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x9d8d5574
87d4edf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4f270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4f528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4f7e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4fa98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4fd50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d504c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50a38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d51168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d51420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d516d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d51f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d52b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d52df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d60320 [00000000] irpStack: ( e, 0)  870449a8 [ \Driver\CmBatt]
87d8a588 [00000000] irpStack: ( f, 0)  87d95138 [ \Driver\HidBth]
87d8abe8 [00000000] Irp is complete (CurrentLocation 15 > StackCount 14)
87d8d1a8 [00000000] Irp is complete (CurrentLocation 16 > StackCount 15) 0x00000000
87d8d698 [00000000] Irp is complete (CurrentLocation 16 > StackCount 15) 0x00000000
87d8e210 [00000000] irpStack: (16, 0)  9b0772b8 [*** ERROR: Module load completed but symbols could not be loaded for LEqdUsb.Sys
 \Driver\LEqdUsb]
87d8e360 [00000000] irpStack: ( f, 0)  8719e028 [ \Driver\usbehci]
87d933b0 [00000000] Irp is complete (CurrentLocation 14 > StackCount 13)
87d993b0 [00000000] Irp is complete (CurrentLocation 14 > StackCount 13)
87d9dcf0 [00000000] irpStack: ( f, 0)  9b0772b8 [ \Driver\LEqdUsb]
87d9e420 [00000000] irpStack: ( f, 0)  9b0772b8 [ \Driver\LEqdUsb]
87d9ea98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3)
87da3bc0 [00000000] irpStack: (16, 0)  87d99628 [ \Driver\BthEnum]
87dea5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deb270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deb528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deb7e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deba98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87debd50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dec210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dec4c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dec780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deca38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deccf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87decf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87ded168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87ded420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87ded6d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87ded990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dedc48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dedf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dee318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87dee5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87dee888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87deeb40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87deedf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87defb40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87defdf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df0008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df0270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df0528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df07e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df0a98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df0d50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df1210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df14c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1a38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df26d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2c48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df3318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df35d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x8a8a8989
87df3888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df3b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df3df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df4008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df45d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df57e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5d50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df6210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df6cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df6f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df7168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df76d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7c48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x86f6c9f0
9ad51418 [00000000] irpStack: ( f, 0)  9b065e10 [ \Driver\LEqdUsb]
9b03fd80 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b049ac8 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b054c48 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b054e28 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b058358 [00000000] irpStack: ( f, 0)  9b07aee8 [ \Driver\btmhsf]
9b065398 [8c7c6460] irpStack: ( d, 0)  86bd36a8 [ \FileSystem\Npfs]
9b0655d0 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b06e790 [00000000] Irp is complete (CurrentLocation 6 > StackCount 5)
9b06ed58 [00000000] irpStack: ( e, 0)  9b06b030 [ \Driver\HidUsb]
9b072400 [00000000] irpStack: (16, 0)  874f0198 [ \Driver\iusb3hub]
9b0725e0 [00000000] irpStack: (16, 0)  9b037798 [ \Driver\usbccgp]
9b0727c0 [00000000] irpStack: (16, 0)  9b0515e0 [ \Driver\HidUsb]
9b073bd8 [00000000] irpStack: (16, 0)  9b045030 [ \Driver\usbccgp]
9b073db8 [00000000] irpStack: (16, 0)  9b069030 [ \Driver\HidUsb]
9b076008 [00000000] irpStack: ( f, 0)  9b065e10 [ \Driver\LEqdUsb]
9b07ac70 [00000000] Irp is complete (CurrentLocation 7 > StackCount 6) 0x00000000
9b089240 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b1bd3d8 [00000000] irpStack: ( f, 0)  8719e028 [ \Driver\usbehci]
9b1bdb68 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b1bee28 [00000000] irpStack: ( f, 0)  86f99c50 [ \Driver\iusb3xhc]
9b1c0008 [00000000] irpStack: ( f, 0)  86a3c030 [ \Driver\usbccgp]
0: kd> !stacks
Proc.Thread  .Thread  Ticks   ThreadState Blocker
                            [83380fc0 Idle]
   0.000000  83380d00 0000001 RUNNING    nt!KiIdleLoop+0xce
   0.000000  807c5000 000036c RUNNING    nt!KiIdleLoop+0x1a
   0.000000  8cd05000 000036c RUNNING    nt!KiIdleLoop+0x1a
   0.000000  8cd3d000 000036c RUNNING    nt!KiIdleLoop+0xce
                            [857f4d20 System]
   4.00008c  8586aa70 000033b Blocked    nt!MiModifiedPageWriter+0x39
   4.0000ac  858674e8 000006b Blocked    nt!CcQueueLazyWriteScanThread+0x4a
   4.0000b8  85870410 0000335 Blocked    nt!AlpcpReceiveMessagePort+0x421
   4.0000bc  858818c8 0000333 Blocked    nt!EtwpLogger+0xd0
   4.0000c0  85907788 000002a Blocked    nt!EtwpLogger+0xd0
   4.0000c4  859071f0 000006b Blocked    nt!EtwpLogger+0xd0
   4.0000c8  8591ea48 000006b Blocked    nt!EtwpLogger+0xd0
   4.0000cc  8591e4b0 000006b Blocked    nt!EtwpLogger+0xd0
   4.0000d0  8595f020 000006b Blocked    nt!EtwpLogger+0xd0
   4.0000d4  8596f4c8 00000b2 Blocked    nt!EtwpLogger+0xd0
   4.0000d8  86172540 000006b Blocked    nt!EtwpLogger+0xd0
   4.0000dc  86174a88 000004b Blocked    nt!EtwpLogger+0xd0
   4.0000e0  86199a48 0000332 Blocked    nt!WdipSemCheckTimeout+0x21d
   4.0000e4  857bd960 000003e Blocked    ACPI!ACPIWorkerThread+0x47
   4.0000e8  86202c00 000032f Blocked    ACPI!PciRootBusBiosMethodDispatcherOnResume+0x30
   4.0000ec  861fbcf8 000032f Blocked    Wdf01000!FxSystemThread::Thread+0xef
   4.0000f0  86204750 000004b Blocked    nt!EtwpLogger+0xd0
*** ERROR: Module load completed but symbols could not be loaded for trufos.sys
   4.0000f4  86229348 0000089 Blocked    trufos+0x5c633
   4.0000f8  8622c020 0000089 Blocked    trufos+0x5c633
   4.0000fc  8622cd48 0000089 Blocked    trufos+0x5c633
   4.000100  8622ca70 0000089 Blocked    trufos+0x567ae
   4.000104  8622c3b0 00000a5 Blocked    trufos+0x6905
   4.000108  8579ca28 00000a5 Blocked    trufos+0x1fc27
*** ERROR: Module load completed but symbols could not be loaded for SscRdBus.sys
   4.00010c  8628d920 0000325 Blocked    SscRdBus+0xb158
   4.000110  8628dd48 0000000 Blocked    SscRdBus+0x4fdc
*** ERROR: Module load completed but symbols could not be loaded for gzflt.sys
   4.000118  86874d48 0000325 Blocked    gzflt+0x1a379
   4.00011c  868b1020 0000003 Blocked    ndis!ndisThreadPoolTimerHandler+0xd9
   4.000124  868b5c28 0000324 Blocked    ndis!ndisCmWaitThread+0x2c
   4.000128  8699ad48 0000000 Blocked    rdyboost!SMKM_STORE<SMD_TRAITS>::SmStWorker+0x64
   4.00012c  858570b8 0000002 Blocked    rdyboost!SmdRBMemoryWatchdogThread+0xc0
*** ERROR: Module load completed but symbols could not be loaded for ApsHM86.sys
   4.000130  869a7890 00000a1 Blocked    ApsHM86+0x167e
   4.000134  869a75b8 00000a1 Blocked    ApsHM86+0x1829
*** ERROR: Module load completed but symbols could not be loaded for Apsx86.sys
   4.000138  869a8020 00000a1 Blocked    Apsx86+0x158fc
   4.00013c  869af5c8 0000322 Blocked    Apsx86+0x1132b
   4.000140  869af2f0 0000322 Blocked    Apsx86+0x11191
   4.000144  869b07d0 0000001 Blocked    Apsx86+0x1032a
   4.000148  869b04f8 00000a0 Blocked    Apsx86+0x10804
*** ERROR: Module load completed but symbols could not be loaded for DozeHDD.sys
   4.00014c  8621dd48 0000322 Blocked    DozeHDD+0x1d10
   4.000150  869b4d48 0000322 Blocked    DozeHDD+0x2572
   4.000154  869b4a70 0000322 Blocked    DozeHDD+0x1a02
   4.000158  8621fd48 0000322 Blocked    DozeHDD+0x2202
*** ERROR: Module load completed but symbols could not be loaded for spvve.sys
   4.000164  86ba4ca0 00002ea Blocked    spvve+0x9f76
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for atc.sys -
   4.000168  86b9d9c0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.00016c  86b9d6c0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000170  86b9eab0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000174  86b9e7b0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000178  86ba3ba0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.00017c  86ba38a0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000180  86ba9c90 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000184  86ba9090 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000188  86baad00 00002e9 Blocked    atc!RestoreX87State+0x9c9e4
   4.00018c  86baf798 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000190  86baf498 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000194  86bbc9c0 00002e9 Blocked    atc!RestoreX87State+0xd152a
   4.000198  86bbd020 00002e9 Blocked    atc!RestoreX87State+0xd152a
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for Gemma.sys -
   4.00019c  86b9bbc0 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001a0  86b9b8e8 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001a4  86b9b610 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001a8  86b9b310 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001ac  86bc5020 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001b0  86bc5d48 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001b4  86bc5a48 00002e8 Blocked    Gemma!SfdCheckDigitalSignature+0xe38
   4.0001b8  86bd3d48 00002d5 Blocked    watchdog!SMgrGdiCalloutThread+0x35
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxDrv.sys -
   4.0001bc  86b91d48 0000182 Blocked    VBoxDrv!RTSemEventMultiReset+0x1b6
   4.0001c4  86f60100 0000181 Blocked    blbdrive!BlbIoWorkerThread+0x1e
   4.0001c8  86f53d48 0000181 Blocked    nt!AlpcpReceiveMessagePort+0x421
   4.0001e0  86f854d8 000017a Blocked    dxgkrnl!DpiPdoPollingThread+0x39
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for igdkmd32.sys -
   4.0001e4  86fd1d48 000017a Blocked    igdkmd32!hybDriverEntry+0x78b6b
   4.0001e8  86fa9d48 000017a Blocked    dxgkrnl!DpiPowerArbiterThread+0x41
*** ERROR: Module load completed but symbols could not be loaded for ibmpmdrv.sys
   4.0001ec  870dc020 0000173 Blocked    ibmpmdrv+0xa384
   4.0001f0  870dcd48 00000f2 Blocked    ibmpmdrv+0x137e
   4.0001f4  870dca70 0000030 Blocked    ibmpmdrv+0x17f4
   4.000200  87c00568 000016a Blocked    iusb3xhc+0x2cb5
   4.000204  87d1f958 0000169 Blocked    iusb3xhc+0x4a478
   4.000208  87cedd48 0000051 Blocked    iusb3xhc+0x276c2
   4.00020c  877bc980 0000169 Blocked    iusb3xhc+0x3b40b
   4.00021c  87794a60 0000168 Blocked    nt!CmpLoadHiveThread+0x58
   4.00022c  87d01868 0000168 Blocked    nt!CmpLoadHiveThread+0x58
   4.000230  87d01580 00000f9 Blocked    nt!CmpFinishSystemHivesLoad+0x140
   4.000234  86f95d48 000001d Blocked    iusb3xhc+0x97d48
*** ERROR: Module load completed but symbols could not be loaded for RtsPer.sys
   4.000238  87d63020 0000008 Blocked    RtsPer+0x7389b
   4.00023c  87d64020 0000008 Blocked    RtsPer+0x73d92
   4.000240  87d65020 0000163 Blocked    RtsPer+0x7378c
   4.000244  87d02d48 0000148 Blocked    tpm!TpmWaitForMultipleObjects+0x1c
*** ERROR: Module load completed but symbols could not be loaded for Smb_driver_Intel.sys
   4.000248  86f72020 0000157 Blocked    Smb_driver_Intel+0x35f7
   4.000260  87490340 0000009 Blocked    iusb3hub+0x4c8ae
*** ERROR: Module load completed but symbols could not be loaded for RTKVHDA.sys
   4.000264  86f40a50 000002c Blocked    RTKVHDA+0x28b1f
   4.000268  874b7d48 000010d Blocked    RTKVHDA+0x28b1f
   4.00026c  870e0d48 000010d Blocked    RTKVHDA+0x28b1f
   4.000270  870e0a70 000002b Blocked    RTKVHDA+0x28b1f
   4.000274  874f3d48 000010d Blocked    RTKVHDA+0x28b1f
   4.000278  874f3a70 000010d Blocked    RTKVHDA+0x28b1f
   4.00027c  874f3798 000010d Blocked    RTKVHDA+0x28b1f
   4.000284  9ad47628 000000a Blocked    RTKVHDA+0x239577
   4.000294  9ad3dd48 00000eb Blocked    iusb3hub+0x6495
   4.00029c  8748a518 000008a Blocked    btmhsf+0x9a1db
   4.0002a0  8748b928 000008a Blocked    btmhsf+0x9a1db
   4.0002a4  8748b650 000008a Blocked    btmhsf+0x9a1db
   4.0002a8  8748b378 000008a Blocked    btmhsf+0x9a1db
   4.0002ac  8748c020 000008a Blocked    btmhsf+0x9a1db
   4.0002b0  874f4020 000008a Blocked    btmhsf+0x9a1db
   4.0002b4  874f6020 000008a Blocked    btmhsf+0x9a1db
   4.0002b8  874f5218 00000c1 Blocked    btmhsf+0x9a1db
   4.0002bc  874f7768 00000c1 Blocked    btmhsf+0x9a1db
   4.0002c0  9b088d48 00000c0 Blocked    iusb3hub+0x6495
   4.0002c4  9b0be020 000008a Blocked    bthport!HCI_ThreadFunction+0xa8
   4.0002c8  869ba7c0 00000ae Blocked    iusb3hub+0x6495
   4.0002cc  9b1c0630 0000089 Blocked    Ntfs!EfspCheckEfsPolicy+0x95
   4.00045c  8c623d48 000003e Blocked    igdkmd32!hybDriverEntry+0x12ab14
   4.0004e0  8c788510 0000054 Blocked    dxgmms1!VidSchiWaitForSchedulerEvents+0x176
   4.000540  8c7e7390 000004a Blocked    nt!IoRemoveIoCompletion+0x2e

                            [86f6ed20 smss.exe]
 1cc.0001d0  86f6d020 000004c Blocked    nt!ObpWaitForMultipleObjects+0x262
 1cc.0001d4  86f6ea48 000004b Blocked    nt!IoRemoveIoCompletion+0x2e
 1cc.000250  89045920 000004b Blocked    nt!IoRemoveIoCompletion+0x2e
 1cc.000254  890477f0 0000148 Blocked    nt!IoRemoveIoCompletion+0x2e

                            [9cdb97f8 csrss.exe]
 2d0.00050c  8c7b9868 000004c Blocked    nt!KiSystemServicePostCall
 2d0.000510  8c7b3af8 000004c Blocked    nt!ObpWaitForMultipleObjects+0x262
 2d0.000514  86232b58 0000040 Blocked    nt!AlpcpReceiveMessagePort+0x421
 2d0.000518  86e60030 000004c Blocked    nt!AlpcpReceiveMessagePort+0x421
 2d0.000534  8c7da098 0000040 Blocked    nt!AlpcpReceiveMessagePort+0x421
 2d0.000548  8c7bd030 0000044 Blocked    win32k!xxxMsgWaitForMultipleObjects+0xe9
 2d0.000564  86e5d628 0000040 Blocked    nt!AlpcpReceiveMessagePort+0x421
 2d0.000568  8d6098a0 0000040 Blocked    win32k!xxxMsgWaitForMultipleObjects+0xe9

                            [86e60ab0 smss.exe]
 51c.000520  86e60378 000004b Blocked    nt!ObpWaitForMultipleObjects+0x262

                            [8c7c8d20 wininit.exe]
 524.000528  8c7bcd48 0000000 RUNNING    nt!KeBugCheckEx+0x1e
 524.000538  8c7c6460 0000043 Blocked    nt!IoRemoveIoCompletion+0x2e
 524.00053c  8c7dbad8 0000044 Blocked    nt!KiSystemServicePostCall
 524.000550  8c7bdd48 0000044 Blocked    nt!AlpcpReceiveMessagePort+0x421
 524.000554  86e3e618 0000041 Blocked    nt!ObpWaitForMultipleObjects+0x262
 524.000560  86e3a030 0000043 Blocked    nt!IoRemoveIoCompletion+0x2e

                            [8c7ae948 csrss.exe]
 52c.000530  86e483a8 000003f Blocked    cdd!CddIssueCommand+0x9c
 52c.00056c  8d61b6c8 000003f Blocked    cdd!CddSqmThread+0x9a
 52c.000570  8d688030 000000c RUNNING    hal!HalpTscStallExecutionProcessor+0xce

                            [8c7e7ce8 services.exe]
 558.00055c  86e44688 000003b Blocked    nt!KiSystemServicePostCall


Threads Processed: 188
Note the exception code line:
Code:
EXCEPTION_CODE: (Win32) 0x2 (2) - The system cannot find the file specified.
Probably either a disk failure or virus activity. Was the problem from the beginning or for some time?
 
Looking at the dump file it appears that a file is missing during the boot phase when Wininit is running.

Code:
PROCESS_NAME:  wininit.exe

CRITICAL_PROCESS: wininit.exe

EXCEPTION_CODE: (Win32) 0x2 (2) - The system cannot find the file specified.

ERROR_CODE: (NTSTATUS) 0x2 - STATUS_WAIT_2

All I can suggest is to try and boot from a recovery disk and attempt a repair but I suspect that is what you have been trying to do.


Edit: I see Mr Pepka just posted a similar finding.
 
Last edited:

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top