Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ========================== AUTO DUMP ANALYZER ==========================
- Auto Dump Analyzer
- Version: 0.91
- Time to analyze file(s): 00 hours and 06 minutes and 12 seconds
- ================================= BIOS =================================
- VENDOR: American Megatrends Inc.
- VERSION: P1.10
- DATE: 06/19/2018
- ============================= MOTHERBOARD ==============================
- MANUFACTURER: ASRock
- PRODUCT: B450M-HDV
- ================================= RAM ==================================
- Size Speed Manufacturer Part No.
- -------------- -------------- ------------------- ----------------------
- 8192MB 3000MHz Unknown F4-3000C16-8GTZR
- 8192MB 3000MHz Unknown F4-3000C16-8GTZR
- ================================= CPU ==================================
- Processor Version: AMD Ryzen 5 2600 Six-Core Processor
- COUNT: c
- MHZ: 3394
- VENDOR: AuthenticAMD
- FAMILY: 17
- MODEL: 8
- STEPPING: 2
- ================================== OS ==================================
- Product: WinNt, suite: TerminalServer SingleUserTS
- BUILD_VERSION: 10.0.19041.928 (WinBuild.160101.0800)
- BUILD: 19041
- SERVICEPACK: 928
- PLATFORM_TYPE: x64
- NAME: Windows 10
- EDITION: Windows 10 WinNt TerminalServer SingleUserTS
- BUILD_TIMESTAMP: 1977-10-11 03:04:26
- BUILDDATESTAMP: 160101.0800
- BUILDLAB: WinBuild
- BUILDOSVER: 10.0.19041.928
- =============================== DEBUGGER ===============================
- Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- =============================== COMMENTS ===============================
- * Information gathered from different dump files may be different. If
- Windows updates between two dump files, two or more OS versions may
- be shown above.
- * If the user updates the BIOS between dump files, two or more versions
- and dates may be shown above.
- * More RAM information can be found below in a full BIOS section.
- ========================================================================
- ======================= Dump #1: ANALYZE VERBOSE =======================
- ====================== File: 042521-46812-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff804`0cc00000 PsLoadedModuleList = 0xfffff804`0d82a3d0
- Debug session time: Sun Apr 25 11:06:38.048 2021 (UTC - 4:00)
- System Uptime: 0 days 16:49:13.479
- BugCheck 1000007E, {ffffffffc0000005, fffff8040ceec55a, ffffc8832d3e93d8, ffffc8832d3e8c10}
- Probably caused by : memory_corruption
- Followup: memory_corruption
- SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
- This is a very common bugcheck. Usually the exception address pinpoints
- the driver/function that caused the problem. Always note this address
- as well as the link date of the driver/image that contains this address.
- Some common problems are exception code 0x80000003. This means a hard
- coded breakpoint or assertion was hit, but this system was booted
- /NODEBUG. This is not supposed to happen as developers should never have
- hardcoded breakpoints in retail code, but ...
- If this happens, make sure a debugger gets connected, and the
- system is booted /DEBUG. This will let us see why this breakpoint is
- happening.
- Arguments:
- Arg1: ffffffffc0000005, The exception code that was not handled
- Arg2: fffff8040ceec55a, The address that the exception occurred at
- Arg3: ffffc8832d3e93d8, Exception Record Address
- Arg4: ffffc8832d3e8c10, Context Record Address
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- FAULTING_IP:
- nt!FsRtlLookupPerFileObjectContext+8a
- fffff804`0ceec55a 48395810 cmp qword ptr [rax+10h],rbx
- EXCEPTION_RECORD: ffffc8832d3e93d8 -- (.exr 0xffffc8832d3e93d8)
- ExceptionAddress: fffff8040ceec55a (nt!FsRtlLookupPerFileObjectContext+0x000000000000008a)
- ExceptionCode: c0000005 (Access violation)
- ExceptionFlags: 00000000
- NumberParameters: 2
- Parameter[0]: 0000000000000000
- Parameter[1]: 0000000000000010
- Attempt to read from address 0000000000000010
- CONTEXT: ffffc8832d3e8c10 -- (.cxr 0xffffc8832d3e8c10)
- rax=0000000000000000 rbx=ffffb28b1d948310 rcx=ffffb28b2eb7aab8
- rdx=ffffb28b2eb7aab0 rsi=ffffb28b2eb7aab0 rdi=0000000000000000
- rip=fffff8040ceec55a rsp=ffffc8832d3e9610 rbp=0000000000000000
- r8=ffffc8832d3e9620 r9=0000000000000000 r10=fffff8040ceec4d0
- r11=ffffb28b1dd13030 r12=ffffb28b2d865e50 r13=0000000000000000
- r14=0000000000000002 r15=0000000000000000
- iopl=0 nv up ei pl nz ac po cy
- cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050217
- nt!FsRtlLookupPerFileObjectContext+0x8a:
- fffff804`0ceec55a 48395810 cmp qword ptr [rax+10h],rbx ds:002b:00000000`00000010=????????????????
- Resetting default scope
- CUSTOMER_CRASH_COUNT: 1
- PROCESS_NAME: System
- CURRENT_IRQL: 0
- ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
- EXCEPTION_CODE_STR: c0000005
- EXCEPTION_PARAMETER1: 0000000000000000
- EXCEPTION_PARAMETER2: 0000000000000010
- FOLLOWUP_IP:
- nt!FsRtlLookupPerFileObjectContext+8a
- fffff804`0ceec55a 48395810 cmp qword ptr [rax+10h],rbx
- READ_ADDRESS: fffff8040d8fb390: Unable to get MiVisibleState
- 0000000000000010
- BUGCHECK_STR: AV
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- LAST_CONTROL_TRANSFER: from fffff80409f74a83 to fffff8040ceec55a
- STACK_TEXT:
- ffffc883`2d3e9610 fffff804`09f74a83 : ffffb28b`2e9cc8c0 ffffc883`2d3e9700 00000000`00000404 00000000`74536d4d : nt!FsRtlLookupPerFileObjectContext+0x8a
- ffffc883`2d3e9640 fffff804`09f748bb : ffffb28b`31122750 00000000`00000000 00000000`00000000 00000000`00000080 : FLTMGR!FltpPassThrough+0x113
- ffffc883`2d3e96e0 fffff804`0ce52f55 : ffffb28b`2e9cc8c0 fffff804`0ce55758 ffffb28b`1dcf43b0 ffffb28b`00000000 : FLTMGR!FltpDispatch+0x8b
- ffffc883`2d3e9740 fffff804`0d200f9a : ffffb28b`2e9cc8c0 ffffdb80`09d54110 ffffb28b`1dc90d20 ffffb28b`1dc90d20 : nt!IofCallDriver+0x55
- ffffc883`2d3e9780 fffff804`0d1fb300 : ffffdb80`09d54110 00000000`00000000 ffffb28b`1b4de380 fffff804`0d5b1019 : nt!IopDeleteFile+0x13a
- ffffc883`2d3e9800 fffff804`0ce61277 : 00000000`00000000 00000000`00000000 ffffdb80`09d54110 ffffb28b`2e9cc8c0 : nt!ObpRemoveObjectRoutine+0x80
- ffffc883`2d3e9860 fffff804`0ce6119e : 00000000`00000000 ffffb28b`31122710 ffffb28b`31122710 ffffb28b`31122710 : nt!ObfDereferenceObjectWithTag+0xc7
- ffffc883`2d3e98a0 fffff804`0d23e459 : 00000000`00088281 ffffb28b`31122710 fffff804`0d850c80 00000000`00088281 : nt!HalPutDmaAdapter+0xe
- ffffc883`2d3e98d0 fffff804`0cf843bd : 00000000`00000001 00000000`00000000 ffffc883`2d3e99a0 ffffb28b`31122718 : nt!MiSegmentDelete+0x155
- ffffc883`2d3e9920 fffff804`0cfb9259 : 00000000`00000000 fffff804`00000001 00000000`00000000 00000000`00000000 : nt!MiProcessDereferenceList+0xc1
- ffffc883`2d3e99e0 fffff804`0cf17e85 : ffffb28b`1dc6f040 ffffb28b`1dc6f040 00000000`00000080 fffff804`0cfb9130 : nt!MiDereferenceSegmentThread+0x129
- ffffc883`2d3e9c10 fffff804`0cffd498 : ffff8580`1b9c0180 ffffb28b`1dc6f040 fffff804`0cf17e30 00000000`00000000 : nt!PspSystemThreadStartup+0x55
- ffffc883`2d3e9c60 00000000`00000000 : ffffc883`2d3ea000 ffffc883`2d3e4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
- fffff8040ceec846-fffff8040ceec84a 5 bytes - nt!KiIpiProcessRequests+e6
- [ ff e1 cc cc cc:e8 75 78 72 00 ]
- 5 errors : !nt (fffff8040ceec846-fffff8040ceec84a)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- MEMORY_CORRUPTOR: LARGE
- STACK_COMMAND: .cxr 0xffffc8832d3e8c10 ; kb
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
- BUCKET_ID: MEMORY_CORRUPTION_LARGE
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
- TARGET_TIME: 2021-04-25T15:06:38.000Z
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_large
- FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
- Followup: memory_corruption
- ====================== Dump #1: 3RD PARTY DRIVERS ======================
- Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
- Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
- Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
- Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
- Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
- Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
- Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
- Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
- Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
- Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
- May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Sep 20 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
- Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
- Nov 06 2020 - ssudbus2.sys - (Samsung Electronics)
- Nov 06 2020 - ssudmdm.sys - SAMSUNG Android Modem Device driver (Samsung Electronics CO., LTD.)
- Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
- Apr 12 2021 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
- Image name: AsIO.sys
- Search : https://www.google.com/search?q=AsIO.sys
- ADA Info : ASUS Input Output driver http://www.asus.com/
- Timestamp : Wed Aug 22 2012
- Image name: ambakdrv.sys
- Search : https://www.google.com/search?q=ambakdrv.sys
- ADA Info : Aomei driver (Aomei Technology Co)
- Timestamp : Tue Dec 25 2012
- Image name: ammntdrv.sys
- Search : https://www.google.com/search?q=ammntdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue Dec 25 2012
- Image name: BazisVirtualCDBus.sys
- Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
- ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Timestamp : Sat Sep 26 2015
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image name: hmatap.sys
- Search : https://www.google.com/search?q=hmatap.sys
- ADA Info : The OpenVPN Project TAP driver
- Timestamp : Fri Aug 26 2016
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Mon Jun 5 2017
- Image name: AmdTools64.sys
- Search : https://www.google.com/search?q=AmdTools64.sys
- ADA Info : AMD Special Tools driver
- Timestamp : Thu Feb 15 2018
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Mar 20 2018
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Thu Apr 12 2018
- Image name: GLCKIO2.sys
- Search : https://www.google.com/search?q=GLCKIO2.sys
- ADA Info : ASUS RGB driver
- Timestamp : Mon Apr 23 2018
- Image name: NewTek_AudioPortClass.sys
- Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
- ADA Info : NewTek Audio Port Class driver
- Timestamp : Thu Aug 9 2018
- Image name: NewTek_WDM_KS.sys
- Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
- ADA Info : NewTek WDM Kernel Streaming driver
- Timestamp : Thu Aug 9 2018
- Image name: ViGEmBus.sys
- Search : https://www.google.com/search?q=ViGEmBus.sys
- ADA Info : Oculus Virtual Gamepad Emulation Bus driver
- Timestamp : Wed Oct 17 2018
- Image name: idmwfp.sys
- Search : https://www.google.com/search?q=idmwfp.sys
- ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
- Timestamp : Wed Dec 19 2018
- Image name: HWiNFO64A.SYS
- Search : https://www.google.com/search?q=HWiNFO64A.SYS
- ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Timestamp : Thu Mar 14 2019
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Fri May 24 2019
- File version: 9.1.410.2015
- Product version: 9.1.410.2015
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek
- ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
- InternalName: rt640x64.sys
- OriginalFilename: rt640x64.sys
- ProductVersion: 9.001.0410.2015
- FileVersion: 9.001.0410.2015
- FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
- LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
- Image name: RTCore64.sys
- Search : https://www.google.com/search?q=RTCore64.sys
- ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Timestamp : Thu Sep 19 2019
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Sun Sep 29 2019
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image name: ene.sys
- Search : https://www.google.com/search?q=ene.sys
- ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Timestamp : Sat Mar 21 2020
- Image name: droidcam.sys
- Search : https://www.google.com/search?q=droidcam.sys
- ADA Info : Droidcam Virtual Device driver
- Timestamp : Fri Apr 10 2020
- Image name: amwrtdrv.sys
- Search : https://www.google.com/search?q=amwrtdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue May 26 2020
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Tue Aug 11 2020
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Sep 20 2020
- Image name: droidcamvideo.sys
- Search : https://www.google.com/search?q=droidcamvideo.sys
- ADA Info : Droidcam Virtual Device WDM Video Capture driver
- Timestamp : Sat Oct 3 2020
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Fri Oct 16 2020
- Image name: iVCam.sys
- Search : https://www.google.com/search?q=iVCam.sys
- ADA Info : e2eSoft MyCam Camera driver
- Timestamp : Mon Nov 2 2020
- Image name: ssudbus2.sys
- Search : https://www.google.com/search?q=ssudbus2.sys
- ADA Info : (Samsung Electronics)
- Timestamp : Fri Nov 6 2020
- Image name: ssudmdm.sys
- Search : https://www.google.com/search?q=ssudmdm.sys
- ADA Info : SAMSUNG Android Modem Device driver (Samsung Electronics CO., LTD.)
- Timestamp : Fri Nov 6 2020
- Image name: vgk.sys
- Search : https://www.google.com/search?q=vgk.sys
- ADA Info : Vanguard Anti-Cheat driver
- Timestamp : Thu Mar 25 2021
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Mon Apr 12 2021
- ====================== Dump #1: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- asyncmac.sys MS Remote Access serial network driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- csc.sys Windows Client Side Caching driver (Microsoft)
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- exfat.SYS Extended FAT File System driver (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate.dll Media Center Update (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- modem.sys Modem Device Driver
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- MpKslDrv.sys Microsoft Anti-malware Protection driver
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- parport.sys Parallel Port Driver (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- uaspstor.sys UASP driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbaudio.sys USB Audio Class Driver (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- WinUsb.sys Windows WinUSB Class driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
- ====================== Dump #1: UNLOADED MODULES =======================
- fffff804`516c0000 fffff804`516d1000 MSKSSRV.sys
- fffff804`516a0000 fffff804`516b1000 MSKSSRV.sys
- fffff804`51660000 fffff804`51671000 MSKSSRV.sys
- fffff804`51640000 fffff804`51651000 MSKSSRV.sys
- fffff804`51620000 fffff804`51631000 MSKSSRV.sys
- fffff804`51600000 fffff804`51611000 MSKSSRV.sys
- fffff804`525e0000 fffff804`525f1000 MSKSSRV.sys
- fffff804`13d20000 fffff804`13d31000 MSKSSRV.sys
- fffff804`11fd0000 fffff804`11fdf000 dump_storpor
- fffff804`11240000 fffff804`11273000 dump_storahc
- fffff804`112a0000 fffff804`112be000 dump_dumpfve
- fffff804`0fe80000 fffff804`0fe9d000 EhStorClass.
- fffff804`121e0000 fffff804`121fc000 dam.sys
- fffff804`0f9f0000 fffff804`0fa02000 WdBoot.sys
- fffff804`10ac0000 fffff804`10ad1000 hwpolicy.sys
- ====================== Dump #1: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.0]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 1289 bytes]
- [BIOS Information (Type 0) - Length 24 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version P1.10
- BIOS Starting Address Segment f000
- BIOS Release Date 06/19/2018
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 27: - Keyboard Services Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 13
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer ASRock
- Product B450M-HDV
- Version
- Feature Flags 09h
- 59619040: - 59619088: - 7
- ¨6ÿ
- Location
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Chassis Type Desktop
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [OEM Strings (Type 11) - Length 5 - Handle 0007h]
- Number of Strings 1
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
- [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 268435456KB
- Memory Error Inf Handle 000ah
- Number of Memory Devices 2
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 000bh
- Partition Width 02
- [Cache Information (Type 7) - Length 19 - Handle 000dh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000eh]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000fh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 0010h]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000dh
- L2 Cache Handle 000eh
- L3 Cache Handle 000fh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 40 - Handle 0012h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ch
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 40 - Handle 0015h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0014h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0015h
- Mem Array Mapped Adr Handle 000ch
- ========================== Dump #1: Extra #1 ===========================
- 11: kd> !verifier
- fffff8040d82a800: Unable to get verifier list.
- ========================== Dump #1: Extra #2 ===========================
- 11: kd> !thread
- THREAD ffffb28b1dc6f040 Cid 0004.01c8 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor b
- IRP List:
- Unable to read nt!_IRP @ ffffb28b2d865a20
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8040d8114fc
- Owning Process ffffb28b1b485040 Image: System
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 3875422
- Context Switch Count 3650 IdealProcessor: 11
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address nt!MiDereferenceSegmentThread (0xfffff8040cfb9130)
- Stack Init ffffc8832d3e9c90 Current ffffc8832d3e9600
- Base ffffc8832d3ea000 Limit ffffc8832d3e4000 Call 0000000000000000
- Priority 19 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffffc883`2d3e9610 fffff804`09f74a83 : ffffb28b`2e9cc8c0 ffffc883`2d3e9700 00000000`00000404 00000000`74536d4d : nt!FsRtlLookupPerFileObjectContext+0x8a
- ffffc883`2d3e9640 fffff804`09f748bb : ffffb28b`31122750 00000000`00000000 00000000`00000000 00000000`00000080 : FLTMGR!FltpPassThrough+0x113
- ffffc883`2d3e96e0 fffff804`0ce52f55 : ffffb28b`2e9cc8c0 fffff804`0ce55758 ffffb28b`1dcf43b0 ffffb28b`00000000 : FLTMGR!FltpDispatch+0x8b
- ffffc883`2d3e9740 fffff804`0d200f9a : ffffb28b`2e9cc8c0 ffffdb80`09d54110 ffffb28b`1dc90d20 ffffb28b`1dc90d20 : nt!IofCallDriver+0x55
- ffffc883`2d3e9780 fffff804`0d1fb300 : ffffdb80`09d54110 00000000`00000000 ffffb28b`1b4de380 fffff804`0d5b1019 : nt!IopDeleteFile+0x13a
- ffffc883`2d3e9800 fffff804`0ce61277 : 00000000`00000000 00000000`00000000 ffffdb80`09d54110 ffffb28b`2e9cc8c0 : nt!ObpRemoveObjectRoutine+0x80
- ffffc883`2d3e9860 fffff804`0ce6119e : 00000000`00000000 ffffb28b`31122710 ffffb28b`31122710 ffffb28b`31122710 : nt!ObfDereferenceObjectWithTag+0xc7
- ffffc883`2d3e98a0 fffff804`0d23e459 : 00000000`00088281 ffffb28b`31122710 fffff804`0d850c80 00000000`00088281 : nt!HalPutDmaAdapter+0xe
- ffffc883`2d3e98d0 fffff804`0cf843bd : 00000000`00000001 00000000`00000000 ffffc883`2d3e99a0 ffffb28b`31122718 : nt!MiSegmentDelete+0x155
- ffffc883`2d3e9920 fffff804`0cfb9259 : 00000000`00000000 fffff804`00000001 00000000`00000000 00000000`00000000 : nt!MiProcessDereferenceList+0xc1
- ffffc883`2d3e99e0 fffff804`0cf17e85 : ffffb28b`1dc6f040 ffffb28b`1dc6f040 00000000`00000080 fffff804`0cfb9130 : nt!MiDereferenceSegmentThread+0x129
- ffffc883`2d3e9c10 fffff804`0cffd498 : ffff8580`1b9c0180 ffffb28b`1dc6f040 fffff804`0cf17e30 00000000`00000000 : nt!PspSystemThreadStartup+0x55
- ffffc883`2d3e9c60 00000000`00000000 : ffffc883`2d3ea000 ffffc883`2d3e4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
- ========================================================================
- ======================= Dump #2: ANALYZE VERBOSE =======================
- ====================== File: 042421-43078-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff801`2c000000 PsLoadedModuleList = 0xfffff801`2cc2a3d0
- Debug session time: Sat Apr 24 18:16:50.104 2021 (UTC - 4:00)
- System Uptime: 0 days 3:27:22.735
- BugCheck 4E, {99, 0, 0, 0}
- Probably caused by : ntkrnlmp.exe ( nt!MiReduceShareCount+16f166 )
- Followup: MachineOwner
- PFN_LIST_CORRUPT (4e)
- Typically caused by drivers passing bad memory descriptor lists (ie: calling
- MmUnlockPages twice with the same list, etc). If a kernel debugger is
- available get the stack trace.
- Arguments:
- Arg1: 0000000000000099, A PTE or PFN is corrupt
- Arg2: 0000000000000000, page frame number
- Arg3: 0000000000000000, current page state
- Arg4: 0000000000000000, 0
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- BUGCHECK_STR: 0x4E_99
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- PROCESS_NAME: chrome.exe
- CURRENT_IRQL: 2
- LAST_CONTROL_TRANSFER: from fffff8012c461562 to fffff8012c3f5e40
- STACK_TEXT:
- ffffab85`caffdbd8 fffff801`2c461562 : 00000000`0000004e 00000000`00000099 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
- ffffab85`caffdbe0 fffff801`2c2940f8 : 00000000`003630b0 80000000`00000000 00000000`00000001 00000000`000000b0 : nt!MiReduceShareCount+0x16f166
- ffffab85`caffdc20 fffff801`2c21df6e : ffffab85`caffe050 ffff8687`0ad82080 00000000`00000000 ffffab85`caffe910 : nt!MiDeletePteList+0x738
- ffffab85`caffdd00 fffff801`2c62f22d : ffff8687`0abd9080 ffff8687`1127f408 ffff8687`00000000 ffff8687`00000000 : nt!MiDecommitPages+0x124e
- ffffab85`caffe8d0 fffff801`2c62e893 : ffffab85`caffea50 00000000`00000000 ffffab85`caffea50 ffff8687`1127f3e0 : nt!MiDecommitRegion+0x7d
- ffffab85`caffe950 fffff801`2c62e185 : 00000000`00000102 ffff8687`0ad919e0 00000000`00000690 fffff801`2c62cc3a : nt!MmFreeVirtualMemory+0x6d3
- ffffab85`caffeaa0 fffff801`2c4077b8 : ffff8687`0abd9080 00000000`00000001 ffffab85`caffeb18 ffffffff`fff7e9b0 : nt!NtFreeVirtualMemory+0x95
- ffffab85`caffeb00 00007ff8`5100d0e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
- 000000fd`4b3fe1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`5100d0e4
- STACK_COMMAND: kb
- THREAD_SHA1_HASH_MOD_FUNC: c13b7a49aba847cb21157a463d91631059b40e0f
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d6b45e0f66d64b27353edb50e77c7e22c63510dc
- THREAD_SHA1_HASH_MOD: cb5f414824c2521bcc505eaa03e92fa10922dad8
- FOLLOWUP_IP:
- nt!MiReduceShareCount+16f166
- fffff801`2c461562 cc int 3
- FAULT_INSTR_CODE: e8d233cc
- SYMBOL_STACK_INDEX: 1
- SYMBOL_NAME: nt!MiReduceShareCount+16f166
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: nt
- IMAGE_NAME: ntkrnlmp.exe
- DEBUG_FLR_IMAGE_TIMESTAMP: ea0877a
- IMAGE_VERSION: 10.0.19041.928
- BUCKET_ID_FUNC_OFFSET: 16f166
- FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
- BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
- PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe
- TARGET_TIME: 2021-04-24T22:16:50.000Z
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:old_image_ntkrnlmp.exe
- FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}
- Followup: MachineOwner
- ====================== Dump #2: 3RD PARTY DRIVERS ======================
- Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
- Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
- Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
- Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
- Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
- Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
- Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
- Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
- Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
- Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
- May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Sep 20 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
- Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
- Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
- Apr 12 2021 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
- Image name: AsIO.sys
- Search : https://www.google.com/search?q=AsIO.sys
- ADA Info : ASUS Input Output driver http://www.asus.com/
- Timestamp : Wed Aug 22 2012
- Image name: ambakdrv.sys
- Search : https://www.google.com/search?q=ambakdrv.sys
- ADA Info : Aomei driver (Aomei Technology Co)
- Timestamp : Tue Dec 25 2012
- Image name: ammntdrv.sys
- Search : https://www.google.com/search?q=ammntdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue Dec 25 2012
- Image name: BazisVirtualCDBus.sys
- Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
- ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Timestamp : Sat Sep 26 2015
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image name: hmatap.sys
- Search : https://www.google.com/search?q=hmatap.sys
- ADA Info : The OpenVPN Project TAP driver
- Timestamp : Fri Aug 26 2016
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Mon Jun 5 2017
- Image name: AmdTools64.sys
- Search : https://www.google.com/search?q=AmdTools64.sys
- ADA Info : AMD Special Tools driver
- Timestamp : Thu Feb 15 2018
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Mar 20 2018
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Thu Apr 12 2018
- Image name: GLCKIO2.sys
- Search : https://www.google.com/search?q=GLCKIO2.sys
- ADA Info : ASUS RGB driver
- Timestamp : Mon Apr 23 2018
- Image name: NewTek_AudioPortClass.sys
- Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
- ADA Info : NewTek Audio Port Class driver
- Timestamp : Thu Aug 9 2018
- Image name: NewTek_WDM_KS.sys
- Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
- ADA Info : NewTek WDM Kernel Streaming driver
- Timestamp : Thu Aug 9 2018
- Image name: ViGEmBus.sys
- Search : https://www.google.com/search?q=ViGEmBus.sys
- ADA Info : Oculus Virtual Gamepad Emulation Bus driver
- Timestamp : Wed Oct 17 2018
- Image name: idmwfp.sys
- Search : https://www.google.com/search?q=idmwfp.sys
- ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
- Timestamp : Wed Dec 19 2018
- Image name: HWiNFO64A.SYS
- Search : https://www.google.com/search?q=HWiNFO64A.SYS
- ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Timestamp : Thu Mar 14 2019
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Fri May 24 2019
- File version: 9.1.410.2015
- Product version: 9.1.410.2015
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek
- ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
- InternalName: rt640x64.sys
- OriginalFilename: rt640x64.sys
- ProductVersion: 9.001.0410.2015
- FileVersion: 9.001.0410.2015
- FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
- LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
- Image name: RTCore64.sys
- Search : https://www.google.com/search?q=RTCore64.sys
- ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Timestamp : Thu Sep 19 2019
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Sun Sep 29 2019
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image name: ene.sys
- Search : https://www.google.com/search?q=ene.sys
- ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Timestamp : Sat Mar 21 2020
- Image name: droidcam.sys
- Search : https://www.google.com/search?q=droidcam.sys
- ADA Info : Droidcam Virtual Device driver
- Timestamp : Fri Apr 10 2020
- Image name: amwrtdrv.sys
- Search : https://www.google.com/search?q=amwrtdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue May 26 2020
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Tue Aug 11 2020
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Sep 20 2020
- Image name: droidcamvideo.sys
- Search : https://www.google.com/search?q=droidcamvideo.sys
- ADA Info : Droidcam Virtual Device WDM Video Capture driver
- Timestamp : Sat Oct 3 2020
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Fri Oct 16 2020
- Image name: iVCam.sys
- Search : https://www.google.com/search?q=iVCam.sys
- ADA Info : e2eSoft MyCam Camera driver
- Timestamp : Mon Nov 2 2020
- Image name: vgk.sys
- Search : https://www.google.com/search?q=vgk.sys
- ADA Info : Vanguard Anti-Cheat driver
- Timestamp : Thu Mar 25 2021
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Mon Apr 12 2021
- ====================== Dump #2: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- csc.sys Windows Client Side Caching driver (Microsoft)
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- exfat.SYS Extended FAT File System driver (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate.dll Media Center Update (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- parport.sys Parallel Port Driver (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- uaspstor.sys UASP driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbaudio.sys USB Audio Class Driver (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
- ====================== Dump #2: UNLOADED MODULES =======================
- fffff801`72dc0000 fffff801`72dd1000 MSKSSRV.sys
- fffff801`72da0000 fffff801`72db1000 MSKSSRV.sys
- fffff801`72d80000 fffff801`72d91000 MSKSSRV.sys
- fffff801`72d30000 fffff801`72d41000 MSKSSRV.sys
- fffff801`33960000 fffff801`33971000 MSKSSRV.sys
- fffff801`32600000 fffff801`3260f000 dump_storpor
- fffff801`32650000 fffff801`32683000 dump_storahc
- fffff801`326b0000 fffff801`326ce000 dump_dumpfve
- fffff801`31480000 fffff801`3149d000 EhStorClass.
- fffff801`33ea0000 fffff801`33ebc000 dam.sys
- fffff801`30ff0000 fffff801`31002000 WdBoot.sys
- fffff801`320c0000 fffff801`320d1000 hwpolicy.sys
- ====================== Dump #2: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.0]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 1289 bytes]
- [BIOS Information (Type 0) - Length 24 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version P1.10
- BIOS Starting Address Segment f000
- BIOS Release Date 06/19/2018
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 27: - Keyboard Services Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 13
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer ASRock
- Product B450M-HDV
- Version
- Feature Flags 09h
- 57915104: - 57915152: - 7
- ¨6ÿ
- Location
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Chassis Type Desktop
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [OEM Strings (Type 11) - Length 5 - Handle 0007h]
- Number of Strings 1
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
- [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 268435456KB
- Memory Error Inf Handle 000ah
- Number of Memory Devices 2
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 000bh
- Partition Width 02
- [Cache Information (Type 7) - Length 19 - Handle 000dh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000eh]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000fh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 0010h]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000dh
- L2 Cache Handle 000eh
- L3 Cache Handle 000fh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 40 - Handle 0012h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ch
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 40 - Handle 0015h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0014h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0015h
- Mem Array Mapped Adr Handle 000ch
- ========================== Dump #2: Extra #1 ===========================
- 1: kd> !verifier
- fffff8012cc2a800: Unable to get verifier list.
- ========================== Dump #2: Extra #2 ===========================
- 1: kd> !thread
- THREAD ffff86870abd9080 Cid 2bdc.1c98 Teb: 000000fd4aa7a000 Win32Thread: 0000000000000000 RUNNING on processor 1
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8012cc114fc
- Owning Process ffff86870ad82080 Image: chrome.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 796331
- Context Switch Count 224143 IdealProcessor: 8
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ff70f484370
- Stack Init ffffab85caffec90 Current ffffab85caffe6a0
- Base ffffab85cafff000 Limit ffffab85caff9000 Call 0000000000000000
- Priority 4 BasePriority 4 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffffab85`caffdbd8 fffff801`2c461562 : 00000000`0000004e 00000000`00000099 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
- ffffab85`caffdbe0 fffff801`2c2940f8 : 00000000`003630b0 80000000`00000000 00000000`00000001 00000000`000000b0 : nt!MiReduceShareCount+0x16f166
- ffffab85`caffdc20 fffff801`2c21df6e : ffffab85`caffe050 ffff8687`0ad82080 00000000`00000000 ffffab85`caffe910 : nt!MiDeletePteList+0x738
- ffffab85`caffdd00 fffff801`2c62f22d : ffff8687`0abd9080 ffff8687`1127f408 ffff8687`00000000 ffff8687`00000000 : nt!MiDecommitPages+0x124e
- ffffab85`caffe8d0 fffff801`2c62e893 : ffffab85`caffea50 00000000`00000000 ffffab85`caffea50 ffff8687`1127f3e0 : nt!MiDecommitRegion+0x7d
- ffffab85`caffe950 fffff801`2c62e185 : 00000000`00000102 ffff8687`0ad919e0 00000000`00000690 fffff801`2c62cc3a : nt!MmFreeVirtualMemory+0x6d3
- ffffab85`caffeaa0 fffff801`2c4077b8 : ffff8687`0abd9080 00000000`00000001 ffffab85`caffeb18 ffffffff`fff7e9b0 : nt!NtFreeVirtualMemory+0x95
- ffffab85`caffeb00 00007ff8`5100d0e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffffab85`caffeb00)
- 000000fd`4b3fe1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`5100d0e4
- ========================================================================
- ======================= Dump #3: ANALYZE VERBOSE =======================
- ====================== File: 042321-59625-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff804`48c00000 PsLoadedModuleList = 0xfffff804`4982a3d0
- Debug session time: Fri Apr 23 08:07:34.375 2021 (UTC - 4:00)
- System Uptime: 1 days 8:11:53.725
- BugCheck 4E, {99, 5c532, 2, e0002100021584e}
- Probably caused by : ntkrnlmp.exe ( nt!MiBadShareCount+5b )
- Followup: MachineOwner
- PFN_LIST_CORRUPT (4e)
- Typically caused by drivers passing bad memory descriptor lists (ie: calling
- MmUnlockPages twice with the same list, etc). If a kernel debugger is
- available get the stack trace.
- Arguments:
- Arg1: 0000000000000099, A PTE or PFN is corrupt
- Arg2: 000000000005c532, page frame number
- Arg3: 0000000000000002, current page state
- Arg4: 0e0002100021584e, 0
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- BUGCHECK_STR: 0x4E_99
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- PROCESS_NAME: fontdrvhost.ex
- CURRENT_IRQL: 2
- LAST_CONTROL_TRANSFER: from fffff80448fed97f to fffff80448ff5e40
- STACK_TEXT:
- ffff830c`77ce1d78 fffff804`48fed97f : 00000000`0000004e 00000000`00000099 00000000`0005c532 00000000`00000002 : nt!KeBugCheckEx
- ffff830c`77ce1d80 fffff804`48e9a598 : 8a000003`00000002 00000000`00000004 05d01bae`00000000 00000000`00000000 : nt!MiBadShareCount+0x5b
- ffff830c`77ce1dc0 fffff804`48e9ad6e : ffff830c`77ce2398 ffff830c`77ce2150 00000000`00000000 ffff830c`77ce20a0 : nt!MiDeletePteRun+0x1798
- ffff830c`77ce1fd0 fffff804`48e9b94b : ffff830c`77ce2100 00000000`00000000 ffffa000`e46d6f28 00000000`00000000 : nt!MiDeleteVaTail+0x6e
- ffff830c`77ce2000 fffff804`48e6baf0 : 00000000`00000003 ffff830c`00000000 ffffba03`76fa3550 ffffba03`7764b080 : nt!MiDeletePagablePteRange+0x4ab
- ffff830c`77ce2310 fffff804`49236189 : ffffba03`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiDeleteVad+0x360
- ffff830c`77ce2420 fffff804`49235f62 : ffffba03`7fb373c0 00000000`00000000 ffffba03`76fa3080 00000000`00000000 : nt!MiUnmapVad+0x49
- ffff830c`77ce2450 fffff804`492d951f : 00000000`00000000 00000000`00000009 ffff830c`77ce25a0 00000000`00000001 : nt!MiUnmapViewOfSection+0x152
- ffff830c`77ce2530 ffffb50f`405568f1 : 00000000`00000001 ffff830c`00000000 ffffb50f`404e0000 00000000`0000000e : nt!MmUnmapViewOfSection+0xf
- ffff830c`77ce2560 ffffb50f`40558099 : ffff830c`77ce25e0 ffffb50f`404e0000 ffffb50f`4081c338 00000000`0000000e : win32kfull!UmfdHostLifeTimeManager::MmUnmapViewOfSection+0x49
- ffff830c`77ce2590 ffffb50f`405f15f5 : ffffb542`406f4ba8 ffff830c`77ce2680 ffffb50f`404e0000 ffffb50f`40216a72 : win32kfull!vUnmapFileFD+0x1d
- ffff830c`77ce25c0 ffffb50f`4063820e : ffff830c`77ce26a0 ffffb50f`404e0000 00000000`00000000 00000000`00000009 : win32kfull!EngUnmapFontFileFD+0xd5
- ffff830c`77ce2640 ffffb50f`40556d5e : 00000000`0000000e ffffb542`406f4ba8 ffffb50f`4081c330 ffffb542`00000000 : win32kfull!UmfdEscEngUnmapFontFileFD+0x4e
- ffff830c`77ce2670 ffffb50f`40556a31 : 000000a2`c09ffd30 000000a2`c09ffd30 00000000`00000030 00000000`00000009 : win32kfull!UmfdDispatchEscape+0x1ce
- ffff830c`77ce26e0 ffffb50f`4117b0dd : ffffb50f`411805e4 ffffb50f`4119293b ffffa050`007236a8 ffffa050`28003918 : win32kfull!NtGdiExtEscape+0x101
- ffff830c`77ce2a30 fffff804`490077b8 : 00000000`00000000 00000000`00000000 00000000`00000000 000000a2`c09ffa08 : win32k!NtGdiExtEscape+0x55
- ffff830c`77ce2a90 00007ff9`0e9d3164 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
- 000000a2`c09ffce8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`0e9d3164
- STACK_COMMAND: kb
- THREAD_SHA1_HASH_MOD_FUNC: ab45a6b1d0df4001159072caa2922f6cd42c4dd5
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 3c0794d92c832f39b6c040db6401448032d5da0f
- THREAD_SHA1_HASH_MOD: d44d1803e193936086845f8df48e94ff67b211d2
- FOLLOWUP_IP:
- nt!MiBadShareCount+5b
- fffff804`48fed97f cc int 3
- FAULT_INSTR_CODE: cccccccc
- SYMBOL_STACK_INDEX: 1
- SYMBOL_NAME: nt!MiBadShareCount+5b
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: nt
- IMAGE_NAME: ntkrnlmp.exe
- DEBUG_FLR_IMAGE_TIMESTAMP: ea0877a
- IMAGE_VERSION: 10.0.19041.928
- BUCKET_ID_FUNC_OFFSET: 5b
- FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
- BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
- PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe
- TARGET_TIME: 2021-04-23T12:07:34.000Z
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:old_image_ntkrnlmp.exe
- FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}
- Followup: MachineOwner
- ====================== Dump #3: 3RD PARTY DRIVERS ======================
- Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
- Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
- Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
- Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
- Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
- Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
- Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
- Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
- Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
- Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- May 14 2019 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
- May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
- Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
- Dec 03 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- Feb 25 2021 - EasyAntiCheat.sys - EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
- Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
- ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
- Image name: AsIO.sys
- Search : https://www.google.com/search?q=AsIO.sys
- ADA Info : ASUS Input Output driver http://www.asus.com/
- Timestamp : Wed Aug 22 2012
- Image name: ambakdrv.sys
- Search : https://www.google.com/search?q=ambakdrv.sys
- ADA Info : Aomei driver (Aomei Technology Co)
- Timestamp : Tue Dec 25 2012
- Image name: ammntdrv.sys
- Search : https://www.google.com/search?q=ammntdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue Dec 25 2012
- Image name: BazisVirtualCDBus.sys
- Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
- ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Timestamp : Sat Sep 26 2015
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image name: hmatap.sys
- Search : https://www.google.com/search?q=hmatap.sys
- ADA Info : The OpenVPN Project TAP driver
- Timestamp : Fri Aug 26 2016
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Mon Jun 5 2017
- Image name: AmdTools64.sys
- Search : https://www.google.com/search?q=AmdTools64.sys
- ADA Info : AMD Special Tools driver
- Timestamp : Thu Feb 15 2018
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Mar 20 2018
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Thu Apr 12 2018
- Image name: GLCKIO2.sys
- Search : https://www.google.com/search?q=GLCKIO2.sys
- ADA Info : ASUS RGB driver
- Timestamp : Mon Apr 23 2018
- Image name: NewTek_AudioPortClass.sys
- Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
- ADA Info : NewTek Audio Port Class driver
- Timestamp : Thu Aug 9 2018
- Image name: NewTek_WDM_KS.sys
- Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
- ADA Info : NewTek WDM Kernel Streaming driver
- Timestamp : Thu Aug 9 2018
- Image name: ViGEmBus.sys
- Search : https://www.google.com/search?q=ViGEmBus.sys
- ADA Info : Oculus Virtual Gamepad Emulation Bus driver
- Timestamp : Wed Oct 17 2018
- Image name: idmwfp.sys
- Search : https://www.google.com/search?q=idmwfp.sys
- ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
- Timestamp : Wed Dec 19 2018
- Image name: HWiNFO64A.SYS
- Search : https://www.google.com/search?q=HWiNFO64A.SYS
- ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Timestamp : Thu Mar 14 2019
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Tue May 14 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Fri May 24 2019
- File version: 9.1.410.2015
- Product version: 9.1.410.2015
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek
- ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
- InternalName: rt640x64.sys
- OriginalFilename: rt640x64.sys
- ProductVersion: 9.001.0410.2015
- FileVersion: 9.001.0410.2015
- FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
- LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
- Image name: RTCore64.sys
- Search : https://www.google.com/search?q=RTCore64.sys
- ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Timestamp : Thu Sep 19 2019
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Sun Sep 29 2019
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image name: ene.sys
- Search : https://www.google.com/search?q=ene.sys
- ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Timestamp : Sat Mar 21 2020
- Image name: droidcam.sys
- Search : https://www.google.com/search?q=droidcam.sys
- ADA Info : Droidcam Virtual Device driver
- Timestamp : Fri Apr 10 2020
- Image name: amwrtdrv.sys
- Search : https://www.google.com/search?q=amwrtdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue May 26 2020
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Tue Aug 11 2020
- Image name: droidcamvideo.sys
- Search : https://www.google.com/search?q=droidcamvideo.sys
- ADA Info : Droidcam Virtual Device WDM Video Capture driver
- Timestamp : Sat Oct 3 2020
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Fri Oct 16 2020
- Image name: iVCam.sys
- Search : https://www.google.com/search?q=iVCam.sys
- ADA Info : e2eSoft MyCam Camera driver
- Timestamp : Mon Nov 2 2020
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Thu Dec 3 2020
- Image name: EasyAntiCheat.sys
- Search : https://www.google.com/search?q=EasyAntiCheat.sys
- ADA Info : EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
- Timestamp : Thu Feb 25 2021
- Image name: vgk.sys
- Search : https://www.google.com/search?q=vgk.sys
- ADA Info : Vanguard Anti-Cheat driver
- Timestamp : Thu Mar 25 2021
- ====================== Dump #3: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- asyncmac.sys MS Remote Access serial network driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- csc.sys Windows Client Side Caching driver (Microsoft)
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- exfat.SYS Extended FAT File System driver (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate.dll Media Center Update (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- parport.sys Parallel Port Driver (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- uaspstor.sys UASP driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbaudio.sys USB Audio Class Driver (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
- ====================== Dump #3: UNLOADED MODULES =======================
- fffff804`513b0000 fffff804`513c1000 MSKSSRV.sys
- fffff804`4e620000 fffff804`4e647000 ssudbus2.sys
- fffff804`4e650000 fffff804`4e671000 WinUsb.sys
- fffff804`513b0000 fffff804`513c3000 modem.sys
- fffff804`4e680000 fffff804`4e6b5000 ssudmdm.sys
- fffff804`4eb00000 fffff804`4eb27000 ssudbus2.sys
- fffff804`4eb60000 fffff804`4eb81000 WinUsb.sys
- fffff804`513b0000 fffff804`513c3000 modem.sys
- fffff804`4eb90000 fffff804`4ebc5000 ssudmdm.sys
- fffff804`4ea60000 fffff804`4ea87000 ssudbus2.sys
- fffff804`513b0000 fffff804`513c3000 modem.sys
- fffff804`4eac0000 fffff804`4eaf5000 ssudmdm.sys
- fffff804`4ea90000 fffff804`4eab1000 WinUsb.sys
- fffff804`4e9c0000 fffff804`4e9e7000 ssudbus2.sys
- fffff804`513b0000 fffff804`513c3000 modem.sys
- fffff804`4ea20000 fffff804`4ea55000 ssudmdm.sys
- fffff804`4e9f0000 fffff804`4ea11000 WinUsb.sys
- fffff804`4eb10000 fffff804`4eb31000 WinUsb.sys
- fffff804`513b0000 fffff804`513cf000 MpKslDrv.sys
- fffff804`4e6d0000 fffff804`4e6e1000 MSKSSRV.sys
- fffff804`4e640000 fffff804`4e667000 ssudbus2.sys
- fffff804`4e6b0000 fffff804`4e6c3000 modem.sys
- fffff804`4e670000 fffff804`4e6a5000 ssudmdm.sys
- fffff804`4eb60000 fffff804`4eb87000 ssudbus2.sys
- fffff804`4e620000 fffff804`4e633000 modem.sys
- fffff804`4eb90000 fffff804`4ebc5000 ssudmdm.sys
- fffff804`962e0000 fffff804`96529000 EasyAntiChea
- fffff804`96530000 fffff804`96541000 MSKSSRV.sys
- fffff804`4eae0000 fffff804`4eb01000 WinUsb.sys
- fffff804`4ea00000 fffff804`4ea27000 ssudbus2.sys
- fffff804`4ea30000 fffff804`4ea51000 WinUsb.sys
- fffff804`4eaa0000 fffff804`4eab3000 modem.sys
- fffff804`4ea60000 fffff804`4ea95000 ssudmdm.sys
- fffff804`4eac0000 fffff804`4ead1000 MSKSSRV.sys
- fffff804`4e9e0000 fffff804`4e9f1000 MSKSSRV.sys
- fffff804`513b0000 fffff804`513d1000 WinUsb.sys
- fffff804`4e9c0000 fffff804`4e9d1000 MSKSSRV.sys
- fffff804`52fa0000 fffff804`52fb1000 MSKSSRV.sys
- fffff804`4e630000 fffff804`4e63f000 dump_storpor
- fffff804`4e680000 fffff804`4e6b3000 dump_storahc
- fffff804`4e6e0000 fffff804`4e6fe000 dump_dumpfve
- fffff804`4d280000 fffff804`4d29d000 EhStorClass.
- fffff804`4fd60000 fffff804`4fd7c000 dam.sys
- fffff804`4cdf0000 fffff804`4ce02000 WdBoot.sys
- fffff804`4deb0000 fffff804`4dec1000 hwpolicy.sys
- ====================== Dump #3: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.0]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 1289 bytes]
- [BIOS Information (Type 0) - Length 24 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version P1.10
- BIOS Starting Address Segment f000
- BIOS Release Date 06/19/2018
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 27: - Keyboard Services Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 13
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer ASRock
- Product B450M-HDV
- Version
- Feature Flags 09h
- 57915104: - 57915152: - 7
- ¨6ÿ
- Location
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Chassis Type Desktop
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [OEM Strings (Type 11) - Length 5 - Handle 0007h]
- Number of Strings 1
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
- [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 268435456KB
- Memory Error Inf Handle 000ah
- Number of Memory Devices 2
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 000bh
- Partition Width 02
- [Cache Information (Type 7) - Length 19 - Handle 000dh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000eh]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000fh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 0010h]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000dh
- L2 Cache Handle 000eh
- L3 Cache Handle 000fh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 40 - Handle 0012h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ch
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 40 - Handle 0015h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0014h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0015h
- Mem Array Mapped Adr Handle 000ch
- ========================== Dump #3: Extra #1 ===========================
- 3: kd> !verifier
- fffff8044982a800: Unable to get verifier list.
- ========================== Dump #3: Extra #2 ===========================
- 3: kd> !thread
- THREAD ffffba037764b080 Cid 045c.048c Teb: 000000a2c0734000 Win32Thread: ffffba0376f588e0 RUNNING on processor 3
- Not impersonating
- GetUlongFromAddress: unable to read from fffff804498114fc
- Owning Process ffffba0376fa3080 Image: fontdrvhost.ex
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 7418478
- Context Switch Count 132513 IdealProcessor: 3
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ff64637d180
- Stack Init ffff830c77ce2c90 Current ffff830c77ce2200
- Base ffff830c77ce3000 Limit ffff830c77cdd000 Call 0000000000000000
- Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffff830c`77ce1d78 fffff804`48fed97f : 00000000`0000004e 00000000`00000099 00000000`0005c532 00000000`00000002 : nt!KeBugCheckEx
- ffff830c`77ce1d80 fffff804`48e9a598 : 8a000003`00000002 00000000`00000004 05d01bae`00000000 00000000`00000000 : nt!MiBadShareCount+0x5b
- ffff830c`77ce1dc0 fffff804`48e9ad6e : ffff830c`77ce2398 ffff830c`77ce2150 00000000`00000000 ffff830c`77ce20a0 : nt!MiDeletePteRun+0x1798
- ffff830c`77ce1fd0 fffff804`48e9b94b : ffff830c`77ce2100 00000000`00000000 ffffa000`e46d6f28 00000000`00000000 : nt!MiDeleteVaTail+0x6e
- ffff830c`77ce2000 fffff804`48e6baf0 : 00000000`00000003 ffff830c`00000000 ffffba03`76fa3550 ffffba03`7764b080 : nt!MiDeletePagablePteRange+0x4ab
- ffff830c`77ce2310 fffff804`49236189 : ffffba03`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiDeleteVad+0x360
- ffff830c`77ce2420 fffff804`49235f62 : ffffba03`7fb373c0 00000000`00000000 ffffba03`76fa3080 00000000`00000000 : nt!MiUnmapVad+0x49
- ffff830c`77ce2450 fffff804`492d951f : 00000000`00000000 00000000`00000009 ffff830c`77ce25a0 00000000`00000001 : nt!MiUnmapViewOfSection+0x152
- ffff830c`77ce2530 ffffb50f`405568f1 : 00000000`00000001 ffff830c`00000000 ffffb50f`404e0000 00000000`0000000e : nt!MmUnmapViewOfSection+0xf
- ffff830c`77ce2560 ffffb50f`40558099 : ffff830c`77ce25e0 ffffb50f`404e0000 ffffb50f`4081c338 00000000`0000000e : win32kfull!UmfdHostLifeTimeManager::MmUnmapViewOfSection+0x49
- ffff830c`77ce2590 ffffb50f`405f15f5 : ffffb542`406f4ba8 ffff830c`77ce2680 ffffb50f`404e0000 ffffb50f`40216a72 : win32kfull!vUnmapFileFD+0x1d
- ffff830c`77ce25c0 ffffb50f`4063820e : ffff830c`77ce26a0 ffffb50f`404e0000 00000000`00000000 00000000`00000009 : win32kfull!EngUnmapFontFileFD+0xd5
- ffff830c`77ce2640 ffffb50f`40556d5e : 00000000`0000000e ffffb542`406f4ba8 ffffb50f`4081c330 ffffb542`00000000 : win32kfull!UmfdEscEngUnmapFontFileFD+0x4e
- ffff830c`77ce2670 ffffb50f`40556a31 : 000000a2`c09ffd30 000000a2`c09ffd30 00000000`00000030 00000000`00000009 : win32kfull!UmfdDispatchEscape+0x1ce
- ffff830c`77ce26e0 ffffb50f`4117b0dd : ffffb50f`411805e4 ffffb50f`4119293b ffffa050`007236a8 ffffa050`28003918 : win32kfull!NtGdiExtEscape+0x101
- ffff830c`77ce2a30 fffff804`490077b8 : 00000000`00000000 00000000`00000000 00000000`00000000 000000a2`c09ffa08 : win32k!NtGdiExtEscape+0x55
- ffff830c`77ce2a90 00007ff9`0e9d3164 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffff830c`77ce2b00)
- 000000a2`c09ffce8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`0e9d3164
- ========================================================================
- ======================= Dump #4: ANALYZE VERBOSE =======================
- ====================== File: 042321-52625-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff807`14000000 PsLoadedModuleList = 0xfffff807`14c2a3d0
- Debug session time: Fri Apr 23 09:10:00.731 2021 (UTC - 4:00)
- System Uptime: 0 days 1:01:56.217
- BugCheck 1A, {41790, ffffa0800a2fd3e0, d, e}
- Probably caused by : ntkrnlmp.exe ( nt!MiDeletePteRun+17da )
- Followup: MachineOwner
- MEMORY_MANAGEMENT (1a)
- # Any other values for parameter 1 must be individually examined.
- Arguments:
- Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
- contains the address of the PFN for the corrupted page table page.
- On a 32 bit OS, parameter 2 contains a pointer to the number of used
- PTEs, and parameter 3 contains the number of used PTEs.
- Arg2: ffffa0800a2fd3e0
- Arg3: 000000000000000d
- Arg4: 000000000000000e
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- BUGCHECK_STR: 0x1a_41790
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- PROCESS_NAME: chrome.exe
- CURRENT_IRQL: 2
- LAST_CONTROL_TRANSFER: from fffff8071429a5da to fffff807143f5e40
- STACK_TEXT:
- ffff878d`746ecca8 fffff807`1429a5da : 00000000`0000001a 00000000`00041790 ffffa080`0a2fd3e0 00000000`0000000d : nt!KeBugCheckEx
- ffff878d`746eccb0 fffff807`1429ad6e : 00000000`00000000 ffff878d`746ed3c0 fffffea3`40013000 ffff878d`746ed310 : nt!MiDeletePteRun+0x17da
- ffff878d`746ecec0 fffff807`1420bedd : 00000000`00000000 ffffa608`c5adf700 ffff878d`746ed310 fffffea3`40012be0 : nt!MiDeleteVaTail+0x6e
- ffff878d`746ecef0 fffff807`1420bafb : fffffeff`00000000 ffffa608`c5adf700 ffff878d`00000000 ffff878d`746ed360 : nt!MiWalkPageTablesRecursively+0xc6d
- ffff878d`746ecf90 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000001 ffff878d`746ed370 : nt!MiWalkPageTablesRecursively+0x88b
- ffff878d`746ed030 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000002 ffff878d`746ed380 : nt!MiWalkPageTablesRecursively+0x88b
- ffff878d`746ed0d0 fffff807`1425de6b : 00000000`00000000 ffffa608`c5adf700 00000000`00000003 ffff878d`746ed390 : nt!MiWalkPageTablesRecursively+0x88b
- ffff878d`746ed170 fffff807`1429b991 : ffff878d`746ed310 ffffa608`00000000 fffffe9a`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
- ffff878d`746ed270 fffff807`1426baf0 : 00000000`00000001 ffff878d`00000000 ffffa608`c5adf550 ffffa608`c0c870c0 : nt!MiDeletePagablePteRange+0x4f1
- ffff878d`746ed580 fffff807`14635833 : ffffa608`c0c870c0 00000000`00000000 ffffa608`00000000 ffffa608`00000000 : nt!MiDeleteVad+0x360
- ffff878d`746ed690 fffff807`14633aef : ffffa608`c5ec0170 ffffa608`c5ec0170 ffffa608`c5ea8a20 ffffa608`c5adf080 : nt!MiCleanVad+0x43
- ffff878d`746ed6c0 fffff807`1465dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa608`c5adf080 : nt!MmCleanProcessAddressSpace+0x137
- ffff878d`746ed740 fffff807`14706a96 : ffffa608`c5adf080 ffff8a86`874af060 ffff878d`746ed990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
- ffff878d`746ed7d0 fffff807`146d2918 : 00000000`c0000005 ffffa608`c5adf001 00000000`00000001 0000006c`775d7000 : nt!PspExitThread+0x5f6
- ffff878d`746ed8d0 fffff807`14267fb7 : 00000000`00000000 fffff807`14265b77 00000000`00000000 00000000`00000000 : nt!KiSchedulerApcTerminate+0x38
- ffff878d`746ed910 fffff807`143fa3e0 : 00000000`00000000 ffff878d`746ed9c0 ffffa608`0000000b ffffa608`00000000 : nt!KiDeliverApc+0x487
- ffff878d`746ed9c0 fffff807`1440785f : ffffa608`c0c870c0 00000000`00000000 00000000`00000000 ffffa608`00000000 : nt!KiInitiateUserApc+0x70
- ffff878d`746edb00 00007fff`c9670714 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
- 0000006c`7f5ff838 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`c9670714
- STACK_COMMAND: kb
- THREAD_SHA1_HASH_MOD_FUNC: 12362c45d4d7c42f8f190b16d3b1472a08d5d965
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 95e48e7abba7841402fde55f75b269479e1fb214
- THREAD_SHA1_HASH_MOD: 82d14546c43bd06881f781d6d197c4c7f7ceb9cb
- FOLLOWUP_IP:
- nt!MiDeletePteRun+17da
- fffff807`1429a5da cc int 3
- FAULT_INSTR_CODE: cccccccc
- SYMBOL_STACK_INDEX: 1
- SYMBOL_NAME: nt!MiDeletePteRun+17da
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: nt
- IMAGE_NAME: ntkrnlmp.exe
- DEBUG_FLR_IMAGE_TIMESTAMP: ea0877a
- IMAGE_VERSION: 10.0.19041.928
- BUCKET_ID_FUNC_OFFSET: 17da
- FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
- BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
- PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe
- TARGET_TIME: 2021-04-23T13:10:00.000Z
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:old_image_ntkrnlmp.exe
- FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}
- Followup: MachineOwner
- ====================== Dump #4: 3RD PARTY DRIVERS ======================
- Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
- Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
- Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
- Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
- Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
- Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
- Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
- Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
- Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
- Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- May 14 2019 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
- May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
- Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
- Dec 03 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- Feb 25 2021 - EasyAntiCheat.sys - EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
- Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
- ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
- Image name: AsIO.sys
- Search : https://www.google.com/search?q=AsIO.sys
- ADA Info : ASUS Input Output driver http://www.asus.com/
- Timestamp : Wed Aug 22 2012
- Image name: ambakdrv.sys
- Search : https://www.google.com/search?q=ambakdrv.sys
- ADA Info : Aomei driver (Aomei Technology Co)
- Timestamp : Tue Dec 25 2012
- Image name: ammntdrv.sys
- Search : https://www.google.com/search?q=ammntdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue Dec 25 2012
- Image name: BazisVirtualCDBus.sys
- Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
- ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Timestamp : Sat Sep 26 2015
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image name: hmatap.sys
- Search : https://www.google.com/search?q=hmatap.sys
- ADA Info : The OpenVPN Project TAP driver
- Timestamp : Fri Aug 26 2016
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Mon Jun 5 2017
- Image name: AmdTools64.sys
- Search : https://www.google.com/search?q=AmdTools64.sys
- ADA Info : AMD Special Tools driver
- Timestamp : Thu Feb 15 2018
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Mar 20 2018
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Thu Apr 12 2018
- Image name: GLCKIO2.sys
- Search : https://www.google.com/search?q=GLCKIO2.sys
- ADA Info : ASUS RGB driver
- Timestamp : Mon Apr 23 2018
- Image name: NewTek_AudioPortClass.sys
- Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
- ADA Info : NewTek Audio Port Class driver
- Timestamp : Thu Aug 9 2018
- Image name: NewTek_WDM_KS.sys
- Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
- ADA Info : NewTek WDM Kernel Streaming driver
- Timestamp : Thu Aug 9 2018
- Image name: ViGEmBus.sys
- Search : https://www.google.com/search?q=ViGEmBus.sys
- ADA Info : Oculus Virtual Gamepad Emulation Bus driver
- Timestamp : Wed Oct 17 2018
- Image name: idmwfp.sys
- Search : https://www.google.com/search?q=idmwfp.sys
- ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
- Timestamp : Wed Dec 19 2018
- Image name: HWiNFO64A.SYS
- Search : https://www.google.com/search?q=HWiNFO64A.SYS
- ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Timestamp : Thu Mar 14 2019
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Tue May 14 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Fri May 24 2019
- File version: 9.1.410.2015
- Product version: 9.1.410.2015
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek
- ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
- InternalName: rt640x64.sys
- OriginalFilename: rt640x64.sys
- ProductVersion: 9.001.0410.2015
- FileVersion: 9.001.0410.2015
- FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
- LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
- Image name: RTCore64.sys
- Search : https://www.google.com/search?q=RTCore64.sys
- ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Timestamp : Thu Sep 19 2019
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Sun Sep 29 2019
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image name: ene.sys
- Search : https://www.google.com/search?q=ene.sys
- ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Timestamp : Sat Mar 21 2020
- Image name: droidcam.sys
- Search : https://www.google.com/search?q=droidcam.sys
- ADA Info : Droidcam Virtual Device driver
- Timestamp : Fri Apr 10 2020
- Image name: amwrtdrv.sys
- Search : https://www.google.com/search?q=amwrtdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue May 26 2020
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Tue Aug 11 2020
- Image name: droidcamvideo.sys
- Search : https://www.google.com/search?q=droidcamvideo.sys
- ADA Info : Droidcam Virtual Device WDM Video Capture driver
- Timestamp : Sat Oct 3 2020
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Fri Oct 16 2020
- Image name: iVCam.sys
- Search : https://www.google.com/search?q=iVCam.sys
- ADA Info : e2eSoft MyCam Camera driver
- Timestamp : Mon Nov 2 2020
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Thu Dec 3 2020
- Image name: EasyAntiCheat.sys
- Search : https://www.google.com/search?q=EasyAntiCheat.sys
- ADA Info : EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
- Timestamp : Thu Feb 25 2021
- Image name: vgk.sys
- Search : https://www.google.com/search?q=vgk.sys
- ADA Info : Vanguard Anti-Cheat driver
- Timestamp : Thu Mar 25 2021
- ====================== Dump #4: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- csc.sys Windows Client Side Caching driver (Microsoft)
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- exfat.SYS Extended FAT File System driver (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate.dll Media Center Update (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- parport.sys Parallel Port Driver (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- uaspstor.sys UASP driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbaudio.sys USB Audio Class Driver (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
- ====================== Dump #4: UNLOADED MODULES =======================
- fffff807`5a5a0000 fffff807`5a5b1000 MSKSSRV.sys
- fffff807`5a580000 fffff807`5a591000 MSKSSRV.sys
- fffff807`5a550000 fffff807`5a561000 MSKSSRV.sys
- fffff807`198f0000 fffff807`19901000 MSKSSRV.sys
- fffff807`198e0000 fffff807`198ef000 dump_storpor
- fffff807`19930000 fffff807`19963000 dump_storahc
- fffff807`19990000 fffff807`199ae000 dump_dumpfve
- fffff807`18280000 fffff807`1829d000 EhStorClass.
- fffff807`1ae00000 fffff807`1ae1c000 dam.sys
- fffff807`17df0000 fffff807`17e02000 WdBoot.sys
- fffff807`18eb0000 fffff807`18ec1000 hwpolicy.sys
- ====================== Dump #4: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.0]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 1289 bytes]
- [BIOS Information (Type 0) - Length 24 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version P1.10
- BIOS Starting Address Segment f000
- BIOS Release Date 06/19/2018
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 27: - Keyboard Services Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 13
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer ASRock
- Product B450M-HDV
- Version
- Feature Flags 09h
- 57915104: - 57915152: - 7
- ¨6ÿ
- Location
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Chassis Type Desktop
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [OEM Strings (Type 11) - Length 5 - Handle 0007h]
- Number of Strings 1
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
- [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 268435456KB
- Memory Error Inf Handle 000ah
- Number of Memory Devices 2
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 000bh
- Partition Width 02
- [Cache Information (Type 7) - Length 19 - Handle 000dh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000eh]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000fh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 0010h]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000dh
- L2 Cache Handle 000eh
- L3 Cache Handle 000fh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 40 - Handle 0012h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ch
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 40 - Handle 0015h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0014h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0015h
- Mem Array Mapped Adr Handle 000ch
- ========================== Dump #4: Extra #1 ===========================
- 4: kd> !verifier
- fffff80714c2a800: Unable to get verifier list.
- ========================== Dump #4: Extra #2 ===========================
- 4: kd> !thread
- THREAD ffffa608c0c870c0 Cid 0c10.0c04 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 4
- Not impersonating
- GetUlongFromAddress: unable to read from fffff80714c114fc
- Owning Process ffffa608c5adf080 Image: chrome.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 237837
- Context Switch Count 41 IdealProcessor: 9
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007fff7d1bd970
- Stack Init ffff878d746edc90 Current ffff878d746ecb20
- Base ffff878d746ee000 Limit ffff878d746e8000 Call 0000000000000000
- Priority 7 BasePriority 6 PriorityDecrement 0 IoPriority 0 PagePriority 1
- Child-SP RetAddr : Args to Child : Call Site
- ffff878d`746ecca8 fffff807`1429a5da : 00000000`0000001a 00000000`00041790 ffffa080`0a2fd3e0 00000000`0000000d : nt!KeBugCheckEx
- ffff878d`746eccb0 fffff807`1429ad6e : 00000000`00000000 ffff878d`746ed3c0 fffffea3`40013000 ffff878d`746ed310 : nt!MiDeletePteRun+0x17da
- ffff878d`746ecec0 fffff807`1420bedd : 00000000`00000000 ffffa608`c5adf700 ffff878d`746ed310 fffffea3`40012be0 : nt!MiDeleteVaTail+0x6e
- ffff878d`746ecef0 fffff807`1420bafb : fffffeff`00000000 ffffa608`c5adf700 ffff878d`00000000 ffff878d`746ed360 : nt!MiWalkPageTablesRecursively+0xc6d
- ffff878d`746ecf90 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000001 ffff878d`746ed370 : nt!MiWalkPageTablesRecursively+0x88b
- ffff878d`746ed030 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000002 ffff878d`746ed380 : nt!MiWalkPageTablesRecursively+0x88b
- ffff878d`746ed0d0 fffff807`1425de6b : 00000000`00000000 ffffa608`c5adf700 00000000`00000003 ffff878d`746ed390 : nt!MiWalkPageTablesRecursively+0x88b
- ffff878d`746ed170 fffff807`1429b991 : ffff878d`746ed310 ffffa608`00000000 fffffe9a`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
- ffff878d`746ed270 fffff807`1426baf0 : 00000000`00000001 ffff878d`00000000 ffffa608`c5adf550 ffffa608`c0c870c0 : nt!MiDeletePagablePteRange+0x4f1
- ffff878d`746ed580 fffff807`14635833 : ffffa608`c0c870c0 00000000`00000000 ffffa608`00000000 ffffa608`00000000 : nt!MiDeleteVad+0x360
- ffff878d`746ed690 fffff807`14633aef : ffffa608`c5ec0170 ffffa608`c5ec0170 ffffa608`c5ea8a20 ffffa608`c5adf080 : nt!MiCleanVad+0x43
- ffff878d`746ed6c0 fffff807`1465dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa608`c5adf080 : nt!MmCleanProcessAddressSpace+0x137
- ffff878d`746ed740 fffff807`14706a96 : ffffa608`c5adf080 ffff8a86`874af060 ffff878d`746ed990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
- ffff878d`746ed7d0 fffff807`146d2918 : 00000000`c0000005 ffffa608`c5adf001 00000000`00000001 0000006c`775d7000 : nt!PspExitThread+0x5f6
- ffff878d`746ed8d0 fffff807`14267fb7 : 00000000`00000000 fffff807`14265b77 00000000`00000000 00000000`00000000 : nt!KiSchedulerApcTerminate+0x38
- ffff878d`746ed910 fffff807`143fa3e0 : 00000000`00000000 ffff878d`746ed9c0 ffffa608`0000000b ffffa608`00000000 : nt!KiDeliverApc+0x487
- ffff878d`746ed9c0 fffff807`1440785f : ffffa608`c0c870c0 00000000`00000000 00000000`00000000 ffffa608`00000000 : nt!KiInitiateUserApc+0x70
- ffff878d`746edb00 00007fff`c9670714 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f (TrapFrame @ ffff878d`746edb00)
- 0000006c`7f5ff838 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`c9670714
- ========================================================================
- ======================= Dump #5: ANALYZE VERBOSE =======================
- ====================== File: 042321-40500-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff807`6e200000 PsLoadedModuleList = 0xfffff807`6ee2a3d0
- Debug session time: Fri Apr 23 13:42:48.525 2021 (UTC - 4:00)
- System Uptime: 0 days 0:51:44.155
- BugCheck 1A, {41792, fffff63ffae5abb8, 100000, 0}
- Probably caused by : memory_corruption ( ONE_BIT )
- Followup: MachineOwner
- MEMORY_MANAGEMENT (1a)
- # Any other values for parameter 1 must be individually examined.
- Arguments:
- Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
- the PTE. Parameters 3/4 contain the low/high parts of the PTE.
- Arg2: fffff63ffae5abb8
- Arg3: 0000000000100000
- Arg4: 0000000000000000
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- MEMORY_CORRUPTOR: ONE_BIT
- BUGCHECK_STR: 0x1a_41792
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
- PROCESS_NAME: chrome.exe
- CURRENT_IRQL: 2
- STACK_TEXT:
- fffffe8b`58be1db8 fffff807`6e49d0fa : 00000000`0000001a 00000000`00041792 fffff63f`fae5abb8 00000000`00100000 : nt!KeBugCheckEx
- fffffe8b`58be1dc0 fffff807`6e40b9e6 : 00000000`00000000 00000000`00000000 00000000`00000b30 fffff63f`fae5abb8 : nt!MiDeleteVa+0x153a
- fffffe8b`58be1ec0 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000000 fffffe8b`58be2330 : nt!MiWalkPageTablesRecursively+0x776
- fffffe8b`58be1f60 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000001 fffffe8b`58be2340 : nt!MiWalkPageTablesRecursively+0x88b
- fffffe8b`58be2000 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000002 fffffe8b`58be2350 : nt!MiWalkPageTablesRecursively+0x88b
- fffffe8b`58be20a0 fffff807`6e45de6b : 00000000`00000000 ffffa70b`f4065740 00000000`00000003 fffffe8b`58be2360 : nt!MiWalkPageTablesRecursively+0x88b
- fffffe8b`58be2140 fffff807`6e49b991 : fffffe8b`58be22e0 ffffa70b`00000000 fffff63e`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
- fffffe8b`58be2240 fffff807`6e46baf0 : 00000000`00000001 fffffe8b`00000000 ffffa70b`f4065590 ffffa70b`ee8ca5c0 : nt!MiDeletePagablePteRange+0x4f1
- fffffe8b`58be2550 fffff807`6e836189 : ffffa70b`f70e2600 00000000`00000000 ffffa70b`00000000 ffffa70b`00000000 : nt!MiDeleteVad+0x360
- fffffe8b`58be2660 fffff807`6e835820 : ffffa70b`f70e2600 ffffa70b`f1d6a2d0 ffffa70b`ee8ca5c0 00000000`00000000 : nt!MiUnmapVad+0x49
- fffffe8b`58be2690 fffff807`6e833aef : ffffa70b`f70e0b20 ffffa70b`f70e0b20 ffffa70b`f70e2600 ffffa70b`f40650c0 : nt!MiCleanVad+0x30
- fffffe8b`58be26c0 fffff807`6e85dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa70b`f40650c0 : nt!MmCleanProcessAddressSpace+0x137
- fffffe8b`58be2740 fffff807`6e906a96 : ffffa70b`f40650c0 ffff850f`4a5a1410 fffffe8b`58be2990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
- fffffe8b`58be27d0 fffff807`6e8d2918 : 00000000`00000000 00000000`00000001 fffffe8b`58be29e0 0000005d`e20ad000 : nt!PspExitThread+0x5f6
- fffffe8b`58be28d0 fffff807`6e467fb7 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff807`6e40ecc6 : nt!KiSchedulerApcTerminate+0x38
- fffffe8b`58be2910 fffff807`6e5fa3e0 : 00000000`00000000 fffffe8b`58be29c0 fffffe8b`58be2b80 0000005d`00000000 : nt!KiDeliverApc+0x487
- fffffe8b`58be29c0 fffff807`6e60785f : ffffa70b`ee8ca5c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
- fffffe8b`58be2b00 00007ffc`82eccda4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
- 0000005d`e61ff768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`82eccda4
- STACK_COMMAND: kb
- THREAD_SHA1_HASH_MOD_FUNC: c091b23167a9747ad03bff889b67c15ac126f525
- THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 707cf26a6367419a86e7f2923297247db4b1819c
- THREAD_SHA1_HASH_MOD: 82d14546c43bd06881f781d6d197c4c7f7ceb9cb
- SYMBOL_NAME: ONE_BIT
- FOLLOWUP_NAME: MachineOwner
- MODULE_NAME: hardware
- IMAGE_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
- BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
- TARGET_TIME: 2021-04-23T17:42:48.000Z
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
- FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
- Followup: MachineOwner
- ====================== Dump #5: 3RD PARTY DRIVERS ======================
- Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
- Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
- Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
- Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
- Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
- Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
- Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
- Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
- Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
- Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
- May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Sep 20 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
- Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
- Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
- Apr 12 2021 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #5: 3RD PARTY DRIVERS (FULL) ===================
- Image name: AsIO.sys
- Search : https://www.google.com/search?q=AsIO.sys
- ADA Info : ASUS Input Output driver http://www.asus.com/
- Timestamp : Wed Aug 22 2012
- Image name: ambakdrv.sys
- Search : https://www.google.com/search?q=ambakdrv.sys
- ADA Info : Aomei driver (Aomei Technology Co)
- Timestamp : Tue Dec 25 2012
- Image name: ammntdrv.sys
- Search : https://www.google.com/search?q=ammntdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue Dec 25 2012
- Image name: BazisVirtualCDBus.sys
- Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
- ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
- Timestamp : Sat Sep 26 2015
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image name: hmatap.sys
- Search : https://www.google.com/search?q=hmatap.sys
- ADA Info : The OpenVPN Project TAP driver
- Timestamp : Fri Aug 26 2016
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Mon Jun 5 2017
- Image name: AmdTools64.sys
- Search : https://www.google.com/search?q=AmdTools64.sys
- ADA Info : AMD Special Tools driver
- Timestamp : Thu Feb 15 2018
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Mar 20 2018
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Thu Apr 12 2018
- Image name: GLCKIO2.sys
- Search : https://www.google.com/search?q=GLCKIO2.sys
- ADA Info : ASUS RGB driver
- Timestamp : Mon Apr 23 2018
- Image name: NewTek_AudioPortClass.sys
- Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
- ADA Info : NewTek Audio Port Class driver
- Timestamp : Thu Aug 9 2018
- Image name: NewTek_WDM_KS.sys
- Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
- ADA Info : NewTek WDM Kernel Streaming driver
- Timestamp : Thu Aug 9 2018
- Image name: ViGEmBus.sys
- Search : https://www.google.com/search?q=ViGEmBus.sys
- ADA Info : Oculus Virtual Gamepad Emulation Bus driver
- Timestamp : Wed Oct 17 2018
- Image name: idmwfp.sys
- Search : https://www.google.com/search?q=idmwfp.sys
- ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
- Timestamp : Wed Dec 19 2018
- Image name: HWiNFO64A.SYS
- Search : https://www.google.com/search?q=HWiNFO64A.SYS
- ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
- Timestamp : Thu Mar 14 2019
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Fri May 24 2019
- File version: 9.1.410.2015
- Product version: 9.1.410.2015
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek
- ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
- InternalName: rt640x64.sys
- OriginalFilename: rt640x64.sys
- ProductVersion: 9.001.0410.2015
- FileVersion: 9.001.0410.2015
- FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
- LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
- Image name: RTCore64.sys
- Search : https://www.google.com/search?q=RTCore64.sys
- ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
- Timestamp : Thu Sep 19 2019
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Sun Sep 29 2019
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image name: ene.sys
- Search : https://www.google.com/search?q=ene.sys
- ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
- Timestamp : Sat Mar 21 2020
- Image name: droidcam.sys
- Search : https://www.google.com/search?q=droidcam.sys
- ADA Info : Droidcam Virtual Device driver
- Timestamp : Fri Apr 10 2020
- Image name: amwrtdrv.sys
- Search : https://www.google.com/search?q=amwrtdrv.sys
- ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
- Timestamp : Tue May 26 2020
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Tue Aug 11 2020
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Sep 20 2020
- Image name: droidcamvideo.sys
- Search : https://www.google.com/search?q=droidcamvideo.sys
- ADA Info : Droidcam Virtual Device WDM Video Capture driver
- Timestamp : Sat Oct 3 2020
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Fri Oct 16 2020
- Image name: iVCam.sys
- Search : https://www.google.com/search?q=iVCam.sys
- ADA Info : e2eSoft MyCam Camera driver
- Timestamp : Mon Nov 2 2020
- Image name: vgk.sys
- Search : https://www.google.com/search?q=vgk.sys
- ADA Info : Vanguard Anti-Cheat driver
- Timestamp : Thu Mar 25 2021
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Mon Apr 12 2021
- ====================== Dump #5: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- csc.sys Windows Client Side Caching driver (Microsoft)
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- exfat.SYS Extended FAT File System driver (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate.dll Media Center Update (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- parport.sys Parallel Port Driver (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- uaspstor.sys UASP driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbaudio.sys USB Audio Class Driver (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
- ====================== Dump #5: UNLOADED MODULES =======================
- fffff807`b2ae0000 fffff807`b2aed000 kerneld.x64
- fffff807`b2ac0000 fffff807`b2ad1000 MSKSSRV.sys
- fffff807`74140000 fffff807`74151000 MSKSSRV.sys
- fffff807`73300000 fffff807`7330f000 dump_storpor
- fffff807`73350000 fffff807`73383000 dump_storahc
- fffff807`733b0000 fffff807`733ce000 dump_dumpfve
- fffff807`71280000 fffff807`7129d000 EhStorClass.
- fffff807`73430000 fffff807`7344c000 dam.sys
- fffff807`70df0000 fffff807`70e02000 WdBoot.sys
- fffff807`71ec0000 fffff807`71ed1000 hwpolicy.sys
- ====================== Dump #5: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.0]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 1289 bytes]
- [BIOS Information (Type 0) - Length 24 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version P1.10
- BIOS Starting Address Segment f000
- BIOS Release Date 06/19/2018
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 27: - Keyboard Services Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 13
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer ASRock
- Product B450M-HDV
- Version
- Feature Flags 09h
- 57915104: - 57915152: - 7
- ¨6ÿ
- Location
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Chassis Type Desktop
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [OEM Strings (Type 11) - Length 5 - Handle 0007h]
- Number of Strings 1
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
- [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 268435456KB
- Memory Error Inf Handle 000ah
- Number of Memory Devices 2
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 000bh
- Partition Width 02
- [Cache Information (Type 7) - Length 19 - Handle 000dh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000eh]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 19 - Handle 000fh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 0010h]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000dh
- L2 Cache Handle 000eh
- L3 Cache Handle 000fh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 40 - Handle 0012h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ch
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 40 - Handle 0015h]
- Physical Memory Array Handle 000bh
- Memory Error Info Handle 0014h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3000MHz
- Manufacturer Unknown
- Part Number F4-3000C16-8GTZR
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0015h
- Mem Array Mapped Adr Handle 000ch
- ========================== Dump #5: Extra #1 ===========================
- 1: kd> !verifier
- fffff8076ee2a800: Unable to get verifier list.
- ========================== Dump #5: Extra #2 ===========================
- 1: kd> !thread
- THREAD ffffa70bee8ca5c0 Cid 1c9c.2930 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 1
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8076ee114fc
- Owning Process ffffa70bf40650c0 Image: chrome.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 198665
- Context Switch Count 7 IdealProcessor: 10
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ffc26d7d970
- Stack Init fffffe8b58be2c90 Current fffffe8b58be1670
- Base fffffe8b58be3000 Limit fffffe8b58bdd000 Call 0000000000000000
- Priority 5 BasePriority 4 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffffe8b`58be1db8 fffff807`6e49d0fa : 00000000`0000001a 00000000`00041792 fffff63f`fae5abb8 00000000`00100000 : nt!KeBugCheckEx
- fffffe8b`58be1dc0 fffff807`6e40b9e6 : 00000000`00000000 00000000`00000000 00000000`00000b30 fffff63f`fae5abb8 : nt!MiDeleteVa+0x153a
- fffffe8b`58be1ec0 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000000 fffffe8b`58be2330 : nt!MiWalkPageTablesRecursively+0x776
- fffffe8b`58be1f60 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000001 fffffe8b`58be2340 : nt!MiWalkPageTablesRecursively+0x88b
- fffffe8b`58be2000 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000002 fffffe8b`58be2350 : nt!MiWalkPageTablesRecursively+0x88b
- fffffe8b`58be20a0 fffff807`6e45de6b : 00000000`00000000 ffffa70b`f4065740 00000000`00000003 fffffe8b`58be2360 : nt!MiWalkPageTablesRecursively+0x88b
- fffffe8b`58be2140 fffff807`6e49b991 : fffffe8b`58be22e0 ffffa70b`00000000 fffff63e`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
- fffffe8b`58be2240 fffff807`6e46baf0 : 00000000`00000001 fffffe8b`00000000 ffffa70b`f4065590 ffffa70b`ee8ca5c0 : nt!MiDeletePagablePteRange+0x4f1
- fffffe8b`58be2550 fffff807`6e836189 : ffffa70b`f70e2600 00000000`00000000 ffffa70b`00000000 ffffa70b`00000000 : nt!MiDeleteVad+0x360
- fffffe8b`58be2660 fffff807`6e835820 : ffffa70b`f70e2600 ffffa70b`f1d6a2d0 ffffa70b`ee8ca5c0 00000000`00000000 : nt!MiUnmapVad+0x49
- fffffe8b`58be2690 fffff807`6e833aef : ffffa70b`f70e0b20 ffffa70b`f70e0b20 ffffa70b`f70e2600 ffffa70b`f40650c0 : nt!MiCleanVad+0x30
- fffffe8b`58be26c0 fffff807`6e85dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa70b`f40650c0 : nt!MmCleanProcessAddressSpace+0x137
- fffffe8b`58be2740 fffff807`6e906a96 : ffffa70b`f40650c0 ffff850f`4a5a1410 fffffe8b`58be2990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
- fffffe8b`58be27d0 fffff807`6e8d2918 : 00000000`00000000 00000000`00000001 fffffe8b`58be29e0 0000005d`e20ad000 : nt!PspExitThread+0x5f6
- fffffe8b`58be28d0 fffff807`6e467fb7 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff807`6e40ecc6 : nt!KiSchedulerApcTerminate+0x38
- fffffe8b`58be2910 fffff807`6e5fa3e0 : 00000000`00000000 fffffe8b`58be29c0 fffffe8b`58be2b80 0000005d`00000000 : nt!KiDeliverApc+0x487
- fffffe8b`58be29c0 fffff807`6e60785f : ffffa70b`ee8ca5c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
- fffffe8b`58be2b00 00007ffc`82eccda4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f (TrapFrame @ fffffe8b`58be2b00)
- 0000005d`e61ff768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`82eccda4
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement