1401 Probe 2.2.0

What changed in this version

The whole machine, from every side: the stick, Windows, and macOS.

• New: scan from Windows. In the app, click "Scan this PC from Windows (about 3 minutes)". It records the
  processor, graphics, displays, firmware tables, Wi-Fi, Bluetooth, network, sound, battery and every device with its
  IDs and driver, and puts one .zip on your Desktop to send. It only reads and never goes online.
• New: scan a Mac. bash 1401-probe-mac.sh --scan scans a Mac or Nullintosh (no password, about a minute).
• Wi-Fi and Bluetooth chips in depth. Each chip's firmware version and what it can do, and the Bluetooth
  controller's version and features. This step is now included by default: press N at the question to skip it.
• Processors: the chip's family name (Tiger Lake, Vermeer, Granite Ridge and so on), power and turbo limits,
  frequency and sleep-state tables, and the timer speed measured.
• Intel integrated graphics: what Linux's driver reports about the GPU and a snapshot of its display registers.
• Older NVIDIA cards (Kepler: GTX 600/700, Quadro K, Tesla K): NVIDIA's own 470 driver is back on the stick, patched
  to run on the new kernel, so the trace records NVIDIA's own start-up on these cards too, not only the open-source one.
• The Mac and Linux tools are attached to the GitHub release (the site's links to them were broken).
• Never saved, on any of the three: serial numbers, UUIDs, network and Bluetooth addresses, Wi-Fi network names,
  the names of paired devices, and the computer's and your user's names.

Every earlier version stays up, with its hashes, on the releases page and at https://nullmothsystems.com/probe

About 1401 Probe

Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	9c16843b634b0a778aa5b379a202570eb4aa2a0885d6e06298b92a37fa7f681b
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	35edfb7500a86a6a7052454ce64be5a0b9b94731f1390073847c23232187eb15
1401-probe-mac.sh	On a Mac: makes the stick (bash 1401-probe-mac.sh) and scans the Mac itself (bash 1401-probe-mac.sh --scan)	d709f2491c842a529350a09191c9f2c5e44442feb27a911e8990d05d9cf93abc
1401-probe-linux.py	On Linux: makes the stick (python3 1401-probe-linux.py)	68bdf61650ec70ce4b4adc8d82ce9826ddba3079dc203d465114f2ab81fef706
SHA256SUMS.txt	The installer and stick-image hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick the normal scan: it skips the step that froze and finishes the rest. If it
   freezes a second time, pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.

1401 Probe 2.1.0

What changed in this version

Every graphics card and integrated GPU now counts, old and new, whatever the brand. This is how NullMoth learns the
GPUs macOS has never supported: Intel Iris Xe and Arc, Radeon RX 7000 and 9000, Ryzen AI, and older cards too.

• New last step: a GPU test. Linux's own graphics drivers (Mesa: Intel, AMD and NVIDIA) run a short compute test
  and an off-screen drawing test on each GPU and check every result. Nothing is shown on the screen. The report gets
  what each driver told the GPU to do, which is what a macOS driver for that GPU has to do the same way.
• Every GPU is scanned and traced, not only NVIDIA, AMD and Intel ones we already support.
• Same safety as before: your drives stay locked read-only, nothing leaves the computer, and if a test hangs the PC
  turns itself off and the next start skips that test.
• The stick is about 80 MB larger (the graphics drivers for the test ride on it).

Every earlier version stays up, with its hashes, on the releases page and at https://nullmothsystems.com/probe

About 1401 Probe

Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	4a323cda564e382c22a7536183611b7294e9ffc14bf0b36bd6fe1d373929d87f
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	a68b2ff4943d72fc3de2432af21195b66b8a78402526aeafca7dbbe7ac7d041b
SHA256SUMS.txt	Both hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick the normal scan: it skips the step that froze and finishes the rest. If it
   freezes a second time, pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.

1401 Probe 2.0.2

What changed in this version

• No more freezes in the last step on laptops. Every driver test in the last step now runs under the same
  automatic power-off as the graphics test: if one hangs, the PC turns itself off and the next start skips it.
  The HDMI audio of an NVIDIA card that is not driving the screen is no longer tested; it hung RTX 4050 laptops.
• A freeze while listing PCI devices no longer loses the graphics card. Before, every later scan skipped all of
  PCI and the report had no GPU in it.

Every earlier version stays up, with its hashes, on the releases page and at https://nullmothsystems.com/probe

About 1401 Probe

Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	88999308fc5213e923d9e5c9c6c1843e0cfb752284c70fca92c55af0f03b3034
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	f3af812b123f3ea3bebfc867ccbff96378b77cb578db5d4bd4e6e33de4e93b4c
SHA256SUMS.txt	Both hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick the normal scan: it skips the step that froze and finishes the rest. If it
   freezes a second time, pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.

1401 Probe 2.0.1

What changed in this version

Fixes the errors some of you saw on 2.0.0. If you made a 2.0.0 stick, make it again with 2.0.1.

• Driver trace errors fixed. On 2.0.0 the last step printed "Bad file descriptor" / "write to closed file"
  errors and stalled for about a minute per device. The trace reader now stops cleanly.
• NVIDIA's own driver now actually loads in the trace. 2.0.0 tried to unload nouveau while it was driving the
  screen, which fails, so the NVIDIA trace recorded nothing. The card is now handed over directly.
• Instructions everywhere (site, stick, Windows app) match what the scan does: the Wi-Fi/Bluetooth question at the
  start, about 5 to 20 minutes, a black screen of up to 10 minutes near the end.
• New: 1401-probe-linux.py makes the stick from Linux and finds your report afterwards.

Every earlier version stays up, with its hashes, on the releases page and at https://nullmothsystems.com/probe

About 1401 Probe

Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	eaf420397d432195571c2b9fcf90a73712a5908156f573a18ba4fa01dbdc402d
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	dd054d8c40f34ad97efb1594cea4bc3fed1e8b2f8660236bb3c3ba73d9b6a468
SHA256SUMS.txt	Both hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick the normal scan: it skips the step that froze and finishes the rest. If it
   freezes a second time, pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.

1401 Probe 2.0.0

What changed in this version

The probe now maps the whole machine, down to how each driver talks to its hardware, so the installer can build the
right setup for your exact PC.

• Full system map. Which GPU drives each screen and the laptop panel, switchable-graphics hints, GPU features
  (architecture, CUDA level, RT and tensor cores), PCIe slots, memory modules (no serials), storage ports and modes
  (AHCI/RAID/VMD), fans and sensors, USB roles (Bluetooth, camera, RGB, fingerprint), touchpad and keyboard bus,
  CPU core layout, IOMMU and the firmware memory map.
• Build report. The stick also writes a Report.json in the format the EFI builder reads (collector from
  Hardware-Sniffer, BSD-3).
• Driver trace. At the end, each graphics and audio driver is restarted while the kernel records every register
  read and write it makes. NVIDIA cards get NVIDIA's own driver for their generation, carried on the stick:
  open 610 for Turing and newer, 580 for Maxwell/Pascal/Volta (Kepler and older: nouveau for now).
  The screen may go black for a few minutes during this step.
• Wi-Fi, Bluetooth and Ethernet: your choice. The stick still has no network drivers in it. At the start it asks
  (default: no). If you press Y, it loads only the drivers for your own chips, records them starting, switches each
  radio off the moment it appears, and removes the drivers again. Nothing is configured or sent.
• Traces are redacted like the rest of the report (including a network chip's address as it appears in its
  registers) and capped at 40 MB.

Every earlier version stays up, with its hashes, on the releases page and at https://nullmothsystems.com/probe

About 1401 Probe

Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	655f616cfe439ebc24c4939193dc9374a19944cea2744d28dfabe9628e4e8ba0
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	5fa27706e95f03da47851be9c4f00fb368ca9c36eee2de73b8ae94ad291fa59d
1401-probe-linux.py	For Linux: makes the stick and finds your report afterwards (python3 1401-probe-linux.py, then --report)	6a77d850f4e7b5d20575d8ce0008be10ef324d6a479ede95edf5cac3ca46ea98
SHA256SUMS.txt	Both hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

From Linux

Download 1401-probe-linux.py (and 1401-probe-img.zip next to it, or let it download the image). Run
python3 1401-probe-linux.py: it checks the image against this release's SHA-256, lists USB sticks only (never
internal disks or the disk Linux runs from), asks you to type the stick's name and ERASE, writes it and reads it back
to verify. After the scan, plug the stick back in and run python3 1401-probe-linux.py --report.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick the normal scan: it skips the step that froze and finishes the rest. If it
   freezes a second time, pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.

1401 Probe 1.0.1

What changed in this version

Fixes from the first round of test reports. Thanks to everyone who ran 1.0.0.

• A freeze no longer loses the rest of the scan. Before it touches a piece of hardware, the probe now writes the
  name of that step to the stick. If the PC locks up, start the stick again and pick the normal scan: it skips the
  one step that froze and finishes everything else. The report says which step was skipped and why.
• The PCI scan runs one device at a time. In 1.0.0 one desktop froze inside the PCI stage, and its report kept
  only the three stages before it. Now every device's IDs and addresses are saved first, and each device's full
  decode runs on its own afterwards, so a freeze points at one device instead of taking the whole stage.
• Laptop graphics BIOS. On laptops with a second GPU, the firmware often leaves the card's memory decoding off,
  so 1.0.0 could not read the VBIOS or the chip ID. The probe now turns decoding on for that one read and puts the
  original setting back right after.
• Graphics driver data. Each GPU's debugfs folder is read once instead of three times. The report now lists what
  the driver actually exposed, and every file it could not read is recorded with the reason.
• Reports are sealed. Each report has a seal.json: the SHA-256 of every file, plus a keyed check over that
  list. It tells us whether a report came straight off the stick or was changed afterwards. Nothing is sent
  anywhere and nothing in the report changes. Builds from source use their own key or none ("sealed": false).
• The PCI stage gets 3 minutes instead of 2.

Every earlier version stays up, with its hashes, on the releases page and at https://nullmothsystems.com/probe

About 1401 Probe

Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	99e9be8c84f20df90db314a912bd9abd20cc91da333288c28492396cc0c605d8
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	2ec5fa8262ecc3361987e89b4528789f6fcd7973d1250ff493f9bbdd1f656f19
SHA256SUMS.txt	Both hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick the normal scan: it skips the step that froze and finishes the rest. If it
   freezes a second time, pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.

1401 Probe 1.0.0

First public release. Free, offline, and open source.

1401 Probe turns a USB stick into a small scanner for your PC. You start the PC from the stick, it reads what
hardware the machine has, saves one report to the stick, and turns the PC off. Nothing leaves your computer unless
you upload the report yourself. Every report shows us what 1401 needs to support, so if you run it: thank you.

The same how-to, with the rest of the details, is on the site: https://nullmothsystems.com/probe

Downloads

File	What it is	SHA-256
1401-Probe-Setup.exe	The Windows app. It makes the stick for you. Start here.	bd9450093f3c78d0ac6d8183d5a75781937102c877f05d2f912774907b900c26
1401-probe-img.zip	The raw stick image, if you don't have Windows or want to flash it yourself	98477679a8a6ba4d14b7b10ee7af58fde35d48f0f1c47dae514c3187e6c53d2a
SHA256SUMS.txt	Both hashes in one file

Check the installer before you run it

The installer isn't code-signed yet, so Windows SmartScreen will warn you about it. Before you click past that,
make sure the file is really ours. Its fingerprint is published in DNS, signed with DNSSEC, on a different system
from this download:

dig +short TXT _probe-sha256.nullmothsystems.com

Or on Windows, in PowerShell:

(Resolve-DnsName -Type TXT _probe-sha256.nullmothsystems.com).Strings

Then hash the file you downloaded, from the folder you saved it in:

Get-FileHash .\1401-Probe-Setup.exe

The two SHA-256 values should match exactly. If they don't, don't run it.

What you need

• The Windows PC you want to scan
• A USB stick, 1 GB or bigger. It gets erased, so copy anything you want off it first.
• About 15 minutes
• Secure Boot turned off for the scan. You turn it back on afterwards, and the app walks you through it.

How to use it

1. Install. Run 1401-Probe-Setup.exe. When SmartScreen says "Windows protected your PC", click More info,
   then Run anyway.

2. Make the stick. Open 1401 Probe and click Make the scanner USB stick. If BitLocker is on, click Pause
   BitLocker for 3 restarts first. Pick your stick, tick the box, and click Erase and make the stick. Only USB
   drives show up in the list, so you can't wipe your main drive by accident.

3. Turn off Secure Boot and start from the stick. Click Restart into BIOS setup. Find Secure Boot (it's
   usually under Boot or Security), set it to Disabled, then save and exit. As the PC starts, press your boot menu
   key and pick the USB stick marked UEFI. Boot menu keys: ASUS F8, MSI F11, Gigabyte F12, ASRock F11, Dell F12,
   HP F9, Lenovo F12, Acer F12. You can also click Restart now and pick the USB stick in the app and choose
   "Use a device". On the stick's menu, pick 1401 Probe - scan this computer. It starts by itself after 5
   seconds.

4. Let it scan. It takes 2 to 8 minutes. The last step is a graphics test, and the screen can flicker or go
   black for up to 3 minutes. That's normal. When it says DONE, the report is saved and the PC turns itself off.
   If nothing happens for 5 minutes, hold the power button. Everything up to that point is already saved. Start
   from the stick again and pick safe scan, which skips the graphics test.

5. Put your settings back. Go into the BIOS again (usually Del or F2) and set Secure Boot back to Enabled. Back
   in Windows, open 1401 Probe and click I already scanned - find my report. It checks Secure Boot and BitLocker
   for you and offers to turn BitLocker back on. Your boot order was never changed.

6. Send the report. Optional, but it's the whole point. Click Show both files. The stick's REPORTS folder
   has a .zip and a .txt with the same name, something like Z790-AORUS_i7-13700K_RTX4070_2026-09-25_a3f1.zip.
   You can open both and read them first. Then go to https://nullmothsystems.com/#send, drag both files onto the
   1402 Card Reader, and click Send. Keep the report ID it gives you (NM-XXXXXXXX).

What it does and doesn't do

• It reads your hardware and writes one report, to its own stick. That's it.
• It has no network, Wi-Fi or Bluetooth drivers, so it can't connect to anything.
• Before it scans, it marks every drive except its own stick read-only. It never mounts your internal drives.
• It never changes BIOS/UEFI settings. Secure Boot is the one setting you change, yourself.
• Serial numbers, UUIDs, MAC addresses and your Windows product key are removed from the report before it's saved.
• Nothing is uploaded automatically. Sending the report is up to you.

No Windows?

Download 1401-probe-img.zip, unzip it, and write 1401-probe.img to a USB stick with balenaEtcher, or Rufus in
DD mode. Then do steps 3 and 4, turn Secure Boot back on in your BIOS yourself, and send the two files from the
stick's REPORTS folder like in step 6.

Done with the stick?

Open 1401 Probe, click I already scanned - find my report, then Make it an ordinary USB drive again.

Build it yourself

Everything builds in Docker containers pinned by digest, and nothing gets installed on your machine. From a clone
of this repo:

NM_ALLOW_NO_PRIVATE=1 ./build.sh all

The README has the details and the QEMU test that boots the real stick image.

License

GPL-3.0-or-later. The parts it's built from (Linux, GRUB, BusyBox, Python, Alpine packages, firmware files) keep
their own licenses, listed in THIRD-PARTY-NOTICES.txt on every stick. The NullMoth name and moth logo aren't
covered by the GPL (section 7(e)), so a modified version has to drop them.

Found a bug, or a machine it chokes on? Open an issue.