Hello,
I got results from devicetree of volatility, such as FILE_DEVICE_UNKNOWN:
DRV 0xd882e5df4e60 \Driver\SoftwareDevice
---| DEV 0xffffd882edee33f0 0000007c FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882edee7880 0000007b FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eded8e30 0000007a FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eded5aa0 00000079 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882edee0910 00000078 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882edee7ab0 00000077 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882edee62f0 00000076 FILE_DEVICE_UNKNOWN
DRV 0xd882ebe13060 \Driver\RDPDR
---| DEV 0xffffd882ebe0d040 FILE_DEVICE_NETWORK_FILE_SYSTEM
---| DEV 0xffffd882ebe0ee40 RdpDrDvMgr FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882ebe2d4d0 RdpDrPort FILE_DEVICE_NETWORK_FILE_SYSTEM
---| DEV 0xffffd882ebe2d060 FakeVid15 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe2de40 FakeVid14 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0f3a0 FakeVid13 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0f5c0 FakeVid12 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0f7e0 FakeVid11 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0fa00 FakeVid10 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0fc20 FakeVid9 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0fe40 FakeVid8 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe0f060 FakeVid7 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe103a0 FakeVid6 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe105c0 FakeVid5 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe107e0 FakeVid4 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe10a00 FakeVid3 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe10c20 FakeVid2 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe10e40 FakeVid1 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe10060 FakeVid0 FILE_DEVICE_MULTI_UNC_PROVIDER
---| DEV 0xffffd882ebe136d0 DrDynVc FILE_DEVICE_MULTI_UNC_PROVIDER
Â
and I can see some devices called "FakeVidn".
DRV 0xd882e8185990 \Driver\intelppm
---| DEV 0xffffd882e8180b70 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e8182e20 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e8185040 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eab3ac60 FILE_DEVICE_UNKNOWN
DRV 0xd882e818a060 \Driver\acpipagr
---| DEV 0xffffd882e817ac60 FILE_DEVICE_UNKNOWN
Â
Can you help me to know what is this?
Thanks for your help.
Â
DRV 0xd882eae789e0 \Driver\HidUsb
---| DEV 0xffffd882eaf16060 00000044 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaecb600 00000043 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaec9600 00000042 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882eaec9210 - \Driver\mouhid FILE_DEVICE_MOUSE
---------| ATT 0xffffd882eaee1ce0 PointerClass0 - \Driver\mouclass FILE_DEVICE_MOUSE
---| DEV 0xffffd882eaee3060 _HID00000003 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaedf060 _HID00000002 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaee9060 0000003e FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaef4060 0000003d FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaed9600 0000003c FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaef9060 0000003b FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882eae77b30 - \Driver\kbdhid FILE_DEVICE_KEYBOARD
---------| ATT 0xffffd882eaeef6d0 KeyboardClass0 - \Driver\kbdclass FILE_DEVICE_KEYBOARD
---| DEV 0xffffd882eaefb600 _HID00000001 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882eaea9600 _HID00000000 FILE_DEVICE_UNKNOWN
DRV 0xd882e65ffd50 \Driver\pci
---| DEV 0xffffd882e65d4870 NTPNP_PCI0013 FILE_DEVICE_CONTROLLER
------| ATT 0xffffd882e65d33b0 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882e65f2050 RaidPort0 - \Driver\stornvme FILE_DEVICE_CONTROLLER
---| DEV 0xffffd882e70d4040 FILE_DEVICE_BUS_EXTENDER
---| DEV 0xffffd882e659e060 NTPNP_PCI0012 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e65cd040 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882eabc5050 NDMP1 - \Driver\e1dexpress FILE_DEVICE_PHYSICAL_NETCARD
---| DEV 0xffffd882e64fd060 NTPNP_PCI0011 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e5cc3660 - \Driver\ACPI FILE_DEVICE_ACPI
---| DEV 0xffffd882e65dc060 NTPNP_PCI0010 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e65cd490 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882ea9ffe20 - \Driver\HDAudBus FILE_DEVICE_BUS_EXTENDER
---| DEV 0xffffd882e5ce4060 NTPNP_PCI0009 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e5cc3860 - \Driver\ACPI FILE_DEVICE_ACPI
---| DEV 0xffffd882e65e8060 NTPNP_PCI0008 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e5cc3a60 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882e7080430 - \Driver\msisadrv FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e65e7060 NTPNP_PCI0007 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e65cd290 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882e70d4040 - \Driver\pci FILE_DEVICE_BUS_EXTENDER
---| DEV 0xffffd882e64fc060 NTPNP_PCI0006 FILE_DEVICE_CONTROLLER
------| ATT 0xffffd882e65de040 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882e7469050 RaidPort1 - \Driver\iaStorA FILE_DEVICE_CONTROLLER
---| DEV 0xffffd882e65f9060 NTPNP_PCI0005 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882eab3b070 Serial0 - \Driver\Serial FILE_DEVICE_SERIAL_PORT
---------| ATT 0xffffd882eab3bd60 - \Driver\Serenum FILE_DEVICE_BUS_EXTENDER
---| DEV 0xffffd882e659f060 NTPNP_PCI0004 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e65de7d0 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882eab42990 - \Driver\MEIx64 FILE_DEVICE_BUS_EXTENDER
---| DEV 0xffffd882e65ca060 NTPNP_PCI0003 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e65a0060 NTPNP_PCI0002 FILE_DEVICE_UNKNOWN
------| ATT 0xffffd882e65cd690 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882eab0f060 USBFDO-0 - \Driver\USBXHCI FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e5cea870 NTPNP_PCI0001 FILE_DEVICE_VIDEO
------| ATT 0xffffd882e5cc3c60 - \Driver\ACPI FILE_DEVICE_ACPI
---------| ATT 0xffffd882e653d030 - \Driver\igfx FILE_DEVICE_VIDEO
---| DEV 0xffffd882e65e6060 NTPNP_PCI0000 FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e65f9b20 PciControl FILE_DEVICE_UNKNOWN
---| DEV 0xffffd882e65fbab0 FILE_DEVICE_BUS_EXTENDER
