Advertisement
Guest User

Untitled

a guest
Apr 27th, 2021
100
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 186.97 KB | None | 0 0
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 06 minutes and 12 seconds
  5.  
  6. ================================= BIOS =================================
  7. VENDOR: American Megatrends Inc.
  8. VERSION: P1.10
  9. DATE: 06/19/2018
  10.  
  11. ============================= MOTHERBOARD ==============================
  12. MANUFACTURER: ASRock
  13. PRODUCT: B450M-HDV
  14.  
  15. ================================= RAM ==================================
  16. Size Speed Manufacturer Part No.
  17. -------------- -------------- ------------------- ----------------------
  18. 8192MB 3000MHz Unknown F4-3000C16-8GTZR
  19. 8192MB 3000MHz Unknown F4-3000C16-8GTZR
  20.  
  21. ================================= CPU ==================================
  22. Processor Version: AMD Ryzen 5 2600 Six-Core Processor
  23. COUNT: c
  24. MHZ: 3394
  25. VENDOR: AuthenticAMD
  26. FAMILY: 17
  27. MODEL: 8
  28. STEPPING: 2
  29.  
  30. ================================== OS ==================================
  31. Product: WinNt, suite: TerminalServer SingleUserTS
  32. BUILD_VERSION: 10.0.19041.928 (WinBuild.160101.0800)
  33. BUILD: 19041
  34. SERVICEPACK: 928
  35. PLATFORM_TYPE: x64
  36. NAME: Windows 10
  37. EDITION: Windows 10 WinNt TerminalServer SingleUserTS
  38. BUILD_TIMESTAMP: 1977-10-11 03:04:26
  39. BUILDDATESTAMP: 160101.0800
  40. BUILDLAB: WinBuild
  41. BUILDOSVER: 10.0.19041.928
  42.  
  43. =============================== DEBUGGER ===============================
  44. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  45. Copyright (c) Microsoft Corporation. All rights reserved.
  46.  
  47. =============================== COMMENTS ===============================
  48. * Information gathered from different dump files may be different. If
  49. Windows updates between two dump files, two or more OS versions may
  50. be shown above.
  51. * If the user updates the BIOS between dump files, two or more versions
  52. and dates may be shown above.
  53. * More RAM information can be found below in a full BIOS section.
  54.  
  55. ========================================================================
  56. ======================= Dump #1: ANALYZE VERBOSE =======================
  57. ====================== File: 042521-46812-01.dmp =======================
  58. ========================================================================
  59.  
  60. Mini Kernel Dump File: Only registers and stack trace are available
  61. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  62. Kernel base = 0xfffff804`0cc00000 PsLoadedModuleList = 0xfffff804`0d82a3d0
  63. Debug session time: Sun Apr 25 11:06:38.048 2021 (UTC - 4:00)
  64. System Uptime: 0 days 16:49:13.479
  65.  
  66. BugCheck 1000007E, {ffffffffc0000005, fffff8040ceec55a, ffffc8832d3e93d8, ffffc8832d3e8c10}
  67. Probably caused by : memory_corruption
  68. Followup: memory_corruption
  69.  
  70. SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
  71. This is a very common bugcheck. Usually the exception address pinpoints
  72. the driver/function that caused the problem. Always note this address
  73. as well as the link date of the driver/image that contains this address.
  74. Some common problems are exception code 0x80000003. This means a hard
  75. coded breakpoint or assertion was hit, but this system was booted
  76. /NODEBUG. This is not supposed to happen as developers should never have
  77. hardcoded breakpoints in retail code, but ...
  78. If this happens, make sure a debugger gets connected, and the
  79. system is booted /DEBUG. This will let us see why this breakpoint is
  80. happening.
  81.  
  82. Arguments:
  83. Arg1: ffffffffc0000005, The exception code that was not handled
  84. Arg2: fffff8040ceec55a, The address that the exception occurred at
  85. Arg3: ffffc8832d3e93d8, Exception Record Address
  86. Arg4: ffffc8832d3e8c10, Context Record Address
  87.  
  88. Debugging Details:
  89. DUMP_CLASS: 1
  90. DUMP_QUALIFIER: 400
  91. DUMP_TYPE: 2
  92. DUMP_FILE_ATTRIBUTES: 0x8
  93. Kernel Generated Triage Dump
  94. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  95. FAULTING_IP:
  96. nt!FsRtlLookupPerFileObjectContext+8a
  97. fffff804`0ceec55a 48395810 cmp qword ptr [rax+10h],rbx
  98. EXCEPTION_RECORD: ffffc8832d3e93d8 -- (.exr 0xffffc8832d3e93d8)
  99. ExceptionAddress: fffff8040ceec55a (nt!FsRtlLookupPerFileObjectContext+0x000000000000008a)
  100. ExceptionCode: c0000005 (Access violation)
  101. ExceptionFlags: 00000000
  102. NumberParameters: 2
  103. Parameter[0]: 0000000000000000
  104. Parameter[1]: 0000000000000010
  105. Attempt to read from address 0000000000000010
  106. CONTEXT: ffffc8832d3e8c10 -- (.cxr 0xffffc8832d3e8c10)
  107. rax=0000000000000000 rbx=ffffb28b1d948310 rcx=ffffb28b2eb7aab8
  108. rdx=ffffb28b2eb7aab0 rsi=ffffb28b2eb7aab0 rdi=0000000000000000
  109. rip=fffff8040ceec55a rsp=ffffc8832d3e9610 rbp=0000000000000000
  110. r8=ffffc8832d3e9620 r9=0000000000000000 r10=fffff8040ceec4d0
  111. r11=ffffb28b1dd13030 r12=ffffb28b2d865e50 r13=0000000000000000
  112. r14=0000000000000002 r15=0000000000000000
  113. iopl=0 nv up ei pl nz ac po cy
  114. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050217
  115. nt!FsRtlLookupPerFileObjectContext+0x8a:
  116. fffff804`0ceec55a 48395810 cmp qword ptr [rax+10h],rbx ds:002b:00000000`00000010=????????????????
  117. Resetting default scope
  118. CUSTOMER_CRASH_COUNT: 1
  119.  
  120. PROCESS_NAME: System
  121.  
  122. CURRENT_IRQL: 0
  123. ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  124. EXCEPTION_CODE_STR: c0000005
  125. EXCEPTION_PARAMETER1: 0000000000000000
  126. EXCEPTION_PARAMETER2: 0000000000000010
  127. FOLLOWUP_IP:
  128. nt!FsRtlLookupPerFileObjectContext+8a
  129. fffff804`0ceec55a 48395810 cmp qword ptr [rax+10h],rbx
  130. READ_ADDRESS: fffff8040d8fb390: Unable to get MiVisibleState
  131. 0000000000000010
  132. BUGCHECK_STR: AV
  133. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  134. LAST_CONTROL_TRANSFER: from fffff80409f74a83 to fffff8040ceec55a
  135. STACK_TEXT:
  136. ffffc883`2d3e9610 fffff804`09f74a83 : ffffb28b`2e9cc8c0 ffffc883`2d3e9700 00000000`00000404 00000000`74536d4d : nt!FsRtlLookupPerFileObjectContext+0x8a
  137. ffffc883`2d3e9640 fffff804`09f748bb : ffffb28b`31122750 00000000`00000000 00000000`00000000 00000000`00000080 : FLTMGR!FltpPassThrough+0x113
  138. ffffc883`2d3e96e0 fffff804`0ce52f55 : ffffb28b`2e9cc8c0 fffff804`0ce55758 ffffb28b`1dcf43b0 ffffb28b`00000000 : FLTMGR!FltpDispatch+0x8b
  139. ffffc883`2d3e9740 fffff804`0d200f9a : ffffb28b`2e9cc8c0 ffffdb80`09d54110 ffffb28b`1dc90d20 ffffb28b`1dc90d20 : nt!IofCallDriver+0x55
  140. ffffc883`2d3e9780 fffff804`0d1fb300 : ffffdb80`09d54110 00000000`00000000 ffffb28b`1b4de380 fffff804`0d5b1019 : nt!IopDeleteFile+0x13a
  141. ffffc883`2d3e9800 fffff804`0ce61277 : 00000000`00000000 00000000`00000000 ffffdb80`09d54110 ffffb28b`2e9cc8c0 : nt!ObpRemoveObjectRoutine+0x80
  142. ffffc883`2d3e9860 fffff804`0ce6119e : 00000000`00000000 ffffb28b`31122710 ffffb28b`31122710 ffffb28b`31122710 : nt!ObfDereferenceObjectWithTag+0xc7
  143. ffffc883`2d3e98a0 fffff804`0d23e459 : 00000000`00088281 ffffb28b`31122710 fffff804`0d850c80 00000000`00088281 : nt!HalPutDmaAdapter+0xe
  144. ffffc883`2d3e98d0 fffff804`0cf843bd : 00000000`00000001 00000000`00000000 ffffc883`2d3e99a0 ffffb28b`31122718 : nt!MiSegmentDelete+0x155
  145. ffffc883`2d3e9920 fffff804`0cfb9259 : 00000000`00000000 fffff804`00000001 00000000`00000000 00000000`00000000 : nt!MiProcessDereferenceList+0xc1
  146. ffffc883`2d3e99e0 fffff804`0cf17e85 : ffffb28b`1dc6f040 ffffb28b`1dc6f040 00000000`00000080 fffff804`0cfb9130 : nt!MiDereferenceSegmentThread+0x129
  147. ffffc883`2d3e9c10 fffff804`0cffd498 : ffff8580`1b9c0180 ffffb28b`1dc6f040 fffff804`0cf17e30 00000000`00000000 : nt!PspSystemThreadStartup+0x55
  148. ffffc883`2d3e9c60 00000000`00000000 : ffffc883`2d3ea000 ffffc883`2d3e4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  149. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  150. fffff8040ceec846-fffff8040ceec84a 5 bytes - nt!KiIpiProcessRequests+e6
  151. [ ff e1 cc cc cc:e8 75 78 72 00 ]
  152. 5 errors : !nt (fffff8040ceec846-fffff8040ceec84a)
  153. MODULE_NAME: memory_corruption
  154.  
  155. IMAGE_NAME: memory_corruption
  156.  
  157. FOLLOWUP_NAME: memory_corruption
  158. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  159. MEMORY_CORRUPTOR: LARGE
  160. STACK_COMMAND: .cxr 0xffffc8832d3e8c10 ; kb
  161. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  162. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  163. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  164. TARGET_TIME: 2021-04-25T15:06:38.000Z
  165. SUITE_MASK: 272
  166. PRODUCT_TYPE: 1
  167. USER_LCID: 0
  168. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  169. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  170. Followup: memory_corruption
  171.  
  172. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  173.  
  174. Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
  175. Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
  176. Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  177. Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  178. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  179. Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
  180. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  181. Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
  182. Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  183. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  184. Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
  185. Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
  186. Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
  187. Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
  188. Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
  189. Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  190. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  191. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  192. Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  193. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  194. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  195. Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  196. Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
  197. May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  198. Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  199. Sep 20 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  200. Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
  201. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  202. Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
  203. Nov 06 2020 - ssudbus2.sys - (Samsung Electronics)
  204. Nov 06 2020 - ssudmdm.sys - SAMSUNG Android Modem Device driver (Samsung Electronics CO., LTD.)
  205. Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
  206. Apr 12 2021 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  207.  
  208. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  209.  
  210. Image name: AsIO.sys
  211. Search : https://www.google.com/search?q=AsIO.sys
  212. ADA Info : ASUS Input Output driver http://www.asus.com/
  213. Timestamp : Wed Aug 22 2012
  214.  
  215. Image name: ambakdrv.sys
  216. Search : https://www.google.com/search?q=ambakdrv.sys
  217. ADA Info : Aomei driver (Aomei Technology Co)
  218. Timestamp : Tue Dec 25 2012
  219.  
  220. Image name: ammntdrv.sys
  221. Search : https://www.google.com/search?q=ammntdrv.sys
  222. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  223. Timestamp : Tue Dec 25 2012
  224.  
  225. Image name: BazisVirtualCDBus.sys
  226. Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
  227. ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  228. Timestamp : Sat Sep 26 2015
  229.  
  230. Image name: amdgpio3.sys
  231. Search : https://www.google.com/search?q=amdgpio3.sys
  232. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  233. Timestamp : Mon Mar 14 2016
  234.  
  235. Image name: hmatap.sys
  236. Search : https://www.google.com/search?q=hmatap.sys
  237. ADA Info : The OpenVPN Project TAP driver
  238. Timestamp : Fri Aug 26 2016
  239.  
  240. Image name: amdpsp.sys
  241. Search : https://www.google.com/search?q=amdpsp.sys
  242. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  243. Timestamp : Mon Jun 5 2017
  244.  
  245. Image name: AmdTools64.sys
  246. Search : https://www.google.com/search?q=AmdTools64.sys
  247. ADA Info : AMD Special Tools driver
  248. Timestamp : Thu Feb 15 2018
  249.  
  250. Image name: RTKVHD64.sys
  251. Search : https://www.google.com/search?q=RTKVHD64.sys
  252. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  253. Timestamp : Tue Mar 20 2018
  254.  
  255. Image name: AMDPCIDev.sys
  256. Search : https://www.google.com/search?q=AMDPCIDev.sys
  257. ADA Info : Advanced Micro Devices PCI Device driver
  258. Timestamp : Thu Apr 12 2018
  259.  
  260. Image name: GLCKIO2.sys
  261. Search : https://www.google.com/search?q=GLCKIO2.sys
  262. ADA Info : ASUS RGB driver
  263. Timestamp : Mon Apr 23 2018
  264.  
  265. Image name: NewTek_AudioPortClass.sys
  266. Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
  267. ADA Info : NewTek Audio Port Class driver
  268. Timestamp : Thu Aug 9 2018
  269.  
  270. Image name: NewTek_WDM_KS.sys
  271. Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
  272. ADA Info : NewTek WDM Kernel Streaming driver
  273. Timestamp : Thu Aug 9 2018
  274.  
  275. Image name: ViGEmBus.sys
  276. Search : https://www.google.com/search?q=ViGEmBus.sys
  277. ADA Info : Oculus Virtual Gamepad Emulation Bus driver
  278. Timestamp : Wed Oct 17 2018
  279.  
  280. Image name: idmwfp.sys
  281. Search : https://www.google.com/search?q=idmwfp.sys
  282. ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
  283. Timestamp : Wed Dec 19 2018
  284.  
  285. Image name: HWiNFO64A.SYS
  286. Search : https://www.google.com/search?q=HWiNFO64A.SYS
  287. ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  288. Timestamp : Thu Mar 14 2019
  289.  
  290. Image name: nvvad64v.sys
  291. Search : https://www.google.com/search?q=nvvad64v.sys
  292. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  293. Timestamp : Thu Mar 14 2019
  294.  
  295. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  296. Image name: rt640x64.sys
  297. Search : https://www.google.com/search?q=rt640x64.sys
  298. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  299. Timestamp : Fri May 24 2019
  300. File version: 9.1.410.2015
  301. Product version: 9.1.410.2015
  302. File flags: 8 (Mask 3F) Private
  303. File OS: 40004 NT Win32
  304. File type: 3.6 Driver
  305. File date: 00000000.00000000
  306. CompanyName: Realtek
  307. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  308. InternalName: rt640x64.sys
  309. OriginalFilename: rt640x64.sys
  310. ProductVersion: 9.001.0410.2015
  311. FileVersion: 9.001.0410.2015
  312. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  313. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  314.  
  315. Image name: RTCore64.sys
  316. Search : https://www.google.com/search?q=RTCore64.sys
  317. ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  318. Timestamp : Thu Sep 19 2019
  319.  
  320. Image name: amdgpio2.sys
  321. Search : https://www.google.com/search?q=amdgpio2.sys
  322. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  323. Timestamp : Sun Sep 29 2019
  324.  
  325. Image name: nvvhci.sys
  326. Search : https://www.google.com/search?q=nvvhci.sys
  327. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  328. Timestamp : Fri Jan 10 2020
  329.  
  330. Image name: ene.sys
  331. Search : https://www.google.com/search?q=ene.sys
  332. ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  333. Timestamp : Sat Mar 21 2020
  334.  
  335. Image name: droidcam.sys
  336. Search : https://www.google.com/search?q=droidcam.sys
  337. ADA Info : Droidcam Virtual Device driver
  338. Timestamp : Fri Apr 10 2020
  339.  
  340. Image name: amwrtdrv.sys
  341. Search : https://www.google.com/search?q=amwrtdrv.sys
  342. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  343. Timestamp : Tue May 26 2020
  344.  
  345. Image name: NvModuleTracker.sys
  346. Search : https://www.google.com/search?q=NvModuleTracker.sys
  347. ADA Info : NVIDIA Module Tracker driver
  348. Timestamp : Tue Aug 11 2020
  349.  
  350. Image name: UcmCxUcsiNvppc.sys
  351. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  352. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  353. Timestamp : Sun Sep 20 2020
  354.  
  355. Image name: droidcamvideo.sys
  356. Search : https://www.google.com/search?q=droidcamvideo.sys
  357. ADA Info : Droidcam Virtual Device WDM Video Capture driver
  358. Timestamp : Sat Oct 3 2020
  359.  
  360. Image name: nvhda64v.sys
  361. Search : https://www.google.com/search?q=nvhda64v.sys
  362. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  363. Timestamp : Fri Oct 16 2020
  364.  
  365. Image name: iVCam.sys
  366. Search : https://www.google.com/search?q=iVCam.sys
  367. ADA Info : e2eSoft MyCam Camera driver
  368. Timestamp : Mon Nov 2 2020
  369.  
  370. Image name: ssudbus2.sys
  371. Search : https://www.google.com/search?q=ssudbus2.sys
  372. ADA Info : (Samsung Electronics)
  373. Timestamp : Fri Nov 6 2020
  374.  
  375. Image name: ssudmdm.sys
  376. Search : https://www.google.com/search?q=ssudmdm.sys
  377. ADA Info : SAMSUNG Android Modem Device driver (Samsung Electronics CO., LTD.)
  378. Timestamp : Fri Nov 6 2020
  379.  
  380. Image name: vgk.sys
  381. Search : https://www.google.com/search?q=vgk.sys
  382. ADA Info : Vanguard Anti-Cheat driver
  383. Timestamp : Thu Mar 25 2021
  384.  
  385. Image name: nvlddmkm.sys
  386. Search : https://www.google.com/search?q=nvlddmkm.sys
  387. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  388. Timestamp : Mon Apr 12 2021
  389.  
  390. ====================== Dump #1: MICROSOFT DRIVERS ======================
  391.  
  392. ACPI.sys ACPI Driver for NT (Microsoft)
  393. acpiex.sys ACPIEx Driver (Microsoft)
  394. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  395. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  396. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  397. ahcache.sys Application Compatibility Cache (Microsoft)
  398. amdppm.sys Processor Device Driver
  399. asyncmac.sys MS Remote Access serial network driver
  400. bam.sys BAM Kernal driver (Microsoft)
  401. BasicDisplay.sys Basic Display driver (Microsoft)
  402. BasicRender.sys Basic Render driver (Microsoft)
  403. Beep.SYS BEEP driver (Microsoft)
  404. bindflt.sys Windows Bind Filter driver (Microsoft)
  405. BOOTVID.dll VGA Boot Driver (Microsoft)
  406. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  407. cdd.dll Canonical Display Driver (Microsoft)
  408. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  409. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  410. CI.dll Code Integrity Module (Microsoft)
  411. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  412. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  413. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  414. CLFS.SYS Common Log File System Driver (Microsoft)
  415. clipsp.sys CLIP Service (Microsoft)
  416. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  417. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  418. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  419. condrv.sys Console Driver (Microsoft)
  420. crashdmp.sys Crash Dump driver (Microsoft)
  421. csc.sys Windows Client Side Caching driver (Microsoft)
  422. dfsc.sys DFS Namespace Client Driver (Microsoft)
  423. disk.sys PnP Disk Driver (Microsoft)
  424. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  425. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  426. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  427. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  428. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  429. dxgmms2.sys DirectX Graphics MMS
  430. exfat.SYS Extended FAT File System driver (Microsoft)
  431. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  432. fileinfo.sys FileInfo Filter Driver (Microsoft)
  433. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  434. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  435. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  436. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  437. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  438. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  439. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  440. HIDCLASS.SYS Hid Class Library (Microsoft)
  441. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  442. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  443. HTTP.sys HTTP Protocol Stack (Microsoft)
  444. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  445. intelpep.sys Intel Power Engine Plugin (Microsoft)
  446. IntelTA.sys Intel Telemetry Driver
  447. iorate.sys I/O rate control Filter (Microsoft)
  448. kbdclass.sys Keyboard Class Driver (Microsoft)
  449. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  450. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  451. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  452. ks.sys Kernal CSA Library (Microsoft)
  453. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  454. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  455. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  456. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  457. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  458. mcupdate.dll Media Center Update (Microsoft)
  459. mmcss.sys MMCSS Driver (Microsoft)
  460. modem.sys Modem Device Driver
  461. monitor.sys Monitor Driver (Microsoft)
  462. mouclass.sys Mouse Class Driver (Microsoft)
  463. mouhid.sys HID Mouse Filter Driver (Microsoft)
  464. mountmgr.sys Mount Point Manager (Microsoft)
  465. MpKslDrv.sys Microsoft Anti-malware Protection driver
  466. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  467. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  468. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  469. Msfs.SYS Mailslot driver (Microsoft)
  470. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  471. msisadrv.sys ISA Driver (Microsoft)
  472. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  473. msquic.sys Windows QUIC Driver
  474. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  475. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  476. mssmbios.sys System Management BIOS driver (Microsoft)
  477. mup.sys Multiple UNC Provider driver (Microsoft)
  478. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  479. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  480. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  481. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  482. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  483. NDProxy.sys NDIS Proxy driver (Microsoft)
  484. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  485. netbios.sys NetBIOS Interface driver (Microsoft)
  486. netbt.sys MBT Transport driver (Microsoft)
  487. NETIO.SYS Network I/O Subsystem (Microsoft)
  488. Npfs.SYS NPFS driver (Microsoft)
  489. npsvctrig.sys Named pipe service triggers (Microsoft)
  490. nsiproxy.sys NSI Proxy driver (Microsoft)
  491. Ntfs.sys NT File System Driver (Microsoft)
  492. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  493. ntosext.sys NTOS Extension Host driver (Microsoft)
  494. Null.SYS NULL Driver (Microsoft)
  495. pacer.sys QoS Packet Scheduler (Microsoft)
  496. parport.sys Parallel Port Driver (Microsoft)
  497. partmgr.sys Partition driver (Microsoft)
  498. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  499. pcw.sys Performance Counter Driver (Microsoft)
  500. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  501. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  502. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  503. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  504. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  505. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  506. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  507. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  508. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  509. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  510. rdyboost.sys ReadyBoost Driver (Microsoft)
  511. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  512. serenum.sys Serial Port Enumerator (Microsoft)
  513. serial.sys Serial Device Driver
  514. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  515. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  516. spaceport.sys Storage Spaces driver (Microsoft)
  517. srv2.sys Smb 2.0 Server driver (Microsoft)
  518. srvnet.sys Server Network driver (Microsoft)
  519. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  520. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  521. storqosflt.sys Storage QoS Filter driver (Microsoft)
  522. STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
  523. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  524. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  525. tcpip.sys TCP/IP Protocol driver (Microsoft)
  526. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  527. TDI.SYS TDI Wrapper driver (Microsoft)
  528. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  529. tm.sys Kernel Transaction Manager driver (Microsoft)
  530. uaspstor.sys UASP driver (Microsoft)
  531. UcmCx.sys USB Connector Manager KMDF Class Extension
  532. ucx01000.sys USB Controller Extension (Microsoft)
  533. umbus.sys User-Mode Bus Enumerator (Microsoft)
  534. usbaudio.sys USB Audio Class Driver (Microsoft)
  535. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  536. USBD.SYS Universal Serial Bus Driver (Microsoft)
  537. UsbHub3.sys USB3 HUB driver (Microsoft)
  538. USBXHCI.SYS USB XHCI driver (Microsoft)
  539. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  540. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  541. volmgr.sys Volume Manager Driver (Microsoft)
  542. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  543. volsnap.sys Volume Shadow Copy driver (Microsoft)
  544. volume.sys Volume driver (Microsoft)
  545. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  546. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  547. watchdog.sys Watchdog driver (Microsoft)
  548. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  549. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  550. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  551. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  552. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  553. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  554. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  555. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  556. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  557. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  558. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  559. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  560. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  561. WinUsb.sys Windows WinUSB Class driver (Microsoft)
  562. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  563. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  564. Wof.sys Windows Overlay Filter (Microsoft)
  565. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  566. WppRecorder.sys WPP Trace Recorder (Microsoft)
  567. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  568.  
  569. ====================== Dump #1: UNLOADED MODULES =======================
  570.  
  571. fffff804`516c0000 fffff804`516d1000 MSKSSRV.sys
  572. fffff804`516a0000 fffff804`516b1000 MSKSSRV.sys
  573. fffff804`51660000 fffff804`51671000 MSKSSRV.sys
  574. fffff804`51640000 fffff804`51651000 MSKSSRV.sys
  575. fffff804`51620000 fffff804`51631000 MSKSSRV.sys
  576. fffff804`51600000 fffff804`51611000 MSKSSRV.sys
  577. fffff804`525e0000 fffff804`525f1000 MSKSSRV.sys
  578. fffff804`13d20000 fffff804`13d31000 MSKSSRV.sys
  579. fffff804`11fd0000 fffff804`11fdf000 dump_storpor
  580. fffff804`11240000 fffff804`11273000 dump_storahc
  581. fffff804`112a0000 fffff804`112be000 dump_dumpfve
  582. fffff804`0fe80000 fffff804`0fe9d000 EhStorClass.
  583. fffff804`121e0000 fffff804`121fc000 dam.sys
  584. fffff804`0f9f0000 fffff804`0fa02000 WdBoot.sys
  585. fffff804`10ac0000 fffff804`10ad1000 hwpolicy.sys
  586.  
  587. ====================== Dump #1: BIOS INFORMATION =======================
  588.  
  589. [SMBIOS Data Tables v3.0]
  590. [DMI Version - 0]
  591. [2.0 Calling Convention - No]
  592. [Table Size - 1289 bytes]
  593. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  594. Vendor American Megatrends Inc.
  595. BIOS Version P1.10
  596. BIOS Starting Address Segment f000
  597. BIOS Release Date 06/19/2018
  598. BIOS ROM Size 1000000
  599. BIOS Characteristics
  600. 07: - PCI Supported
  601. 11: - Upgradeable FLASH BIOS
  602. 12: - BIOS Shadowing Supported
  603. 15: - CD-Boot Supported
  604. 16: - Selectable Boot Supported
  605. 17: - BIOS ROM Socketed
  606. 19: - EDD Supported
  607. 23: - 1.2MB Floppy Supported
  608. 24: - 720KB Floppy Supported
  609. 25: - 2.88MB Floppy Supported
  610. 26: - Print Screen Device Supported
  611. 27: - Keyboard Services Supported
  612. 28: - Serial Services Supported
  613. 29: - Printer Services Supported
  614. 32: - BIOS Vendor Reserved
  615. BIOS Characteristic Extensions
  616. 00: - ACPI Supported
  617. 01: - USB Legacy Supported
  618. 08: - BIOS Boot Specification Supported
  619. 10: - Specification Reserved
  620. 11: - Specification Reserved
  621. BIOS Major Revision 5
  622. BIOS Minor Revision 13
  623. EC Firmware Major Revision 255
  624. EC Firmware Minor Revision 255
  625. [System Information (Type 1) - Length 27 - Handle 0001h]
  626. UUID 00000000-0000-0000-0000-000000000000
  627. Wakeup Type Power Switch
  628. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  629. Manufacturer ASRock
  630. Product B450M-HDV
  631. Version
  632. Feature Flags 09h
  633. 59619040: - 59619088: - 7
  634. ¨6ÿ
  635. Location
  636. Chassis Handle 0003h
  637. Board Type 0ah - Processor/Memory Module
  638. Number of Child Handles 0
  639. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  640. Chassis Type Desktop
  641. Bootup State Safe
  642. Power Supply State Safe
  643. Thermal State Safe
  644. Security Status None
  645. OEM Defined 0
  646. Height 0U
  647. Number of Power Cords 1
  648. Number of Contained Elements 0
  649. Contained Element Size 3
  650. [OEM Strings (Type 11) - Length 5 - Handle 0007h]
  651. Number of Strings 1
  652. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
  653. [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
  654. Location 03h - SystemBoard/Motherboard
  655. Use 03h - System Memory
  656. Memory Error Correction 03h - None
  657. Maximum Capacity 268435456KB
  658. Memory Error Inf Handle 000ah
  659. Number of Memory Devices 2
  660. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
  661. Starting Address 00000000h
  662. Ending Address 00ffffffh
  663. Memory Array Handle 000bh
  664. Partition Width 02
  665. [Cache Information (Type 7) - Length 19 - Handle 000dh]
  666. Socket Designation L1 - Cache
  667. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  668. Maximum Cache Size 0240h - 576K
  669. Installed Size 0240h - 576K
  670. Supported SRAM Type 0010h - Pipeline-Burst
  671. Current SRAM Type 0010h - Pipeline-Burst
  672. Cache Speed 1ns
  673. Error Correction Type Specification Reserved
  674. System Cache Type Unified
  675. Associativity 8-way Set-Associative
  676. [Cache Information (Type 7) - Length 19 - Handle 000eh]
  677. Socket Designation L2 - Cache
  678. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  679. Maximum Cache Size 0c00h - 3072K
  680. Installed Size 0c00h - 3072K
  681. Supported SRAM Type 0010h - Pipeline-Burst
  682. Current SRAM Type 0010h - Pipeline-Burst
  683. Cache Speed 1ns
  684. Error Correction Type Specification Reserved
  685. System Cache Type Unified
  686. Associativity 8-way Set-Associative
  687. [Cache Information (Type 7) - Length 19 - Handle 000fh]
  688. Socket Designation L3 - Cache
  689. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  690. Maximum Cache Size 4000h - 16384K
  691. Installed Size 4000h - 16384K
  692. Supported SRAM Type 0010h - Pipeline-Burst
  693. Current SRAM Type 0010h - Pipeline-Burst
  694. Cache Speed 1ns
  695. Error Correction Type Specification Reserved
  696. System Cache Type Unified
  697. Associativity 16-way Set-Associative
  698. [Processor Information (Type 4) - Length 48 - Handle 0010h]
  699. Socket Designation AM4
  700. Processor Type Central Processor
  701. Processor Family 6bh - Specification Reserved
  702. Processor Manufacturer Advanced Micro Devices, Inc.
  703. Processor ID 820f8000fffb8b17
  704. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  705. Processor Voltage 8bh - 1.1V
  706. External Clock 100MHz
  707. Max Speed 3900MHz
  708. Current Speed 3400MHz
  709. Status Enabled Populated
  710. Processor Upgrade Specification Reserved
  711. L1 Cache Handle 000dh
  712. L2 Cache Handle 000eh
  713. L3 Cache Handle 000fh
  714. Part Number Unknown
  715. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
  716. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  717. Physical Memory Array Handle 000bh
  718. Memory Error Info Handle 0011h
  719. Total Width 64 bits
  720. Data Width 64 bits
  721. Size 8192MB
  722. Form Factor 09h - DIMM
  723. Device Locator DIMM 0
  724. Bank Locator P0 CHANNEL A
  725. Memory Type 1ah - Specification Reserved
  726. Type Detail 4080h - Synchronous
  727. Speed 3000MHz
  728. Manufacturer Unknown
  729. Part Number F4-3000C16-8GTZR
  730. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
  731. Starting Address 00000000h
  732. Ending Address 00ffffffh
  733. Memory Device Handle 0012h
  734. Mem Array Mapped Adr Handle 000ch
  735. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  736. [Memory Device (Type 17) - Length 40 - Handle 0015h]
  737. Physical Memory Array Handle 000bh
  738. Memory Error Info Handle 0014h
  739. Total Width 64 bits
  740. Data Width 64 bits
  741. Size 8192MB
  742. Form Factor 09h - DIMM
  743. Device Locator DIMM 0
  744. Bank Locator P0 CHANNEL B
  745. Memory Type 1ah - Specification Reserved
  746. Type Detail 4080h - Synchronous
  747. Speed 3000MHz
  748. Manufacturer Unknown
  749. Part Number F4-3000C16-8GTZR
  750. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  751. Starting Address 00000000h
  752. Ending Address 00ffffffh
  753. Memory Device Handle 0015h
  754. Mem Array Mapped Adr Handle 000ch
  755.  
  756. ========================== Dump #1: Extra #1 ===========================
  757.  
  758. 11: kd> !verifier
  759. fffff8040d82a800: Unable to get verifier list.
  760.  
  761. ========================== Dump #1: Extra #2 ===========================
  762.  
  763. 11: kd> !thread
  764. THREAD ffffb28b1dc6f040 Cid 0004.01c8 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor b
  765. IRP List:
  766. Unable to read nt!_IRP @ ffffb28b2d865a20
  767. Not impersonating
  768. GetUlongFromAddress: unable to read from fffff8040d8114fc
  769. Owning Process ffffb28b1b485040 Image: System
  770. Attached Process N/A Image: N/A
  771. fffff78000000000: Unable to get shared data
  772. Wait Start TickCount 3875422
  773. Context Switch Count 3650 IdealProcessor: 11
  774. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  775. UserTime 00:00:00.000
  776. KernelTime 00:00:00.000
  777. Win32 Start Address nt!MiDereferenceSegmentThread (0xfffff8040cfb9130)
  778. Stack Init ffffc8832d3e9c90 Current ffffc8832d3e9600
  779. Base ffffc8832d3ea000 Limit ffffc8832d3e4000 Call 0000000000000000
  780. Priority 19 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  781. Child-SP RetAddr : Args to Child : Call Site
  782. ffffc883`2d3e9610 fffff804`09f74a83 : ffffb28b`2e9cc8c0 ffffc883`2d3e9700 00000000`00000404 00000000`74536d4d : nt!FsRtlLookupPerFileObjectContext+0x8a
  783. ffffc883`2d3e9640 fffff804`09f748bb : ffffb28b`31122750 00000000`00000000 00000000`00000000 00000000`00000080 : FLTMGR!FltpPassThrough+0x113
  784. ffffc883`2d3e96e0 fffff804`0ce52f55 : ffffb28b`2e9cc8c0 fffff804`0ce55758 ffffb28b`1dcf43b0 ffffb28b`00000000 : FLTMGR!FltpDispatch+0x8b
  785. ffffc883`2d3e9740 fffff804`0d200f9a : ffffb28b`2e9cc8c0 ffffdb80`09d54110 ffffb28b`1dc90d20 ffffb28b`1dc90d20 : nt!IofCallDriver+0x55
  786. ffffc883`2d3e9780 fffff804`0d1fb300 : ffffdb80`09d54110 00000000`00000000 ffffb28b`1b4de380 fffff804`0d5b1019 : nt!IopDeleteFile+0x13a
  787. ffffc883`2d3e9800 fffff804`0ce61277 : 00000000`00000000 00000000`00000000 ffffdb80`09d54110 ffffb28b`2e9cc8c0 : nt!ObpRemoveObjectRoutine+0x80
  788. ffffc883`2d3e9860 fffff804`0ce6119e : 00000000`00000000 ffffb28b`31122710 ffffb28b`31122710 ffffb28b`31122710 : nt!ObfDereferenceObjectWithTag+0xc7
  789. ffffc883`2d3e98a0 fffff804`0d23e459 : 00000000`00088281 ffffb28b`31122710 fffff804`0d850c80 00000000`00088281 : nt!HalPutDmaAdapter+0xe
  790. ffffc883`2d3e98d0 fffff804`0cf843bd : 00000000`00000001 00000000`00000000 ffffc883`2d3e99a0 ffffb28b`31122718 : nt!MiSegmentDelete+0x155
  791. ffffc883`2d3e9920 fffff804`0cfb9259 : 00000000`00000000 fffff804`00000001 00000000`00000000 00000000`00000000 : nt!MiProcessDereferenceList+0xc1
  792. ffffc883`2d3e99e0 fffff804`0cf17e85 : ffffb28b`1dc6f040 ffffb28b`1dc6f040 00000000`00000080 fffff804`0cfb9130 : nt!MiDereferenceSegmentThread+0x129
  793. ffffc883`2d3e9c10 fffff804`0cffd498 : ffff8580`1b9c0180 ffffb28b`1dc6f040 fffff804`0cf17e30 00000000`00000000 : nt!PspSystemThreadStartup+0x55
  794. ffffc883`2d3e9c60 00000000`00000000 : ffffc883`2d3ea000 ffffc883`2d3e4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  795.  
  796.  
  797. ========================================================================
  798. ======================= Dump #2: ANALYZE VERBOSE =======================
  799. ====================== File: 042421-43078-01.dmp =======================
  800. ========================================================================
  801.  
  802. Mini Kernel Dump File: Only registers and stack trace are available
  803. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  804. Kernel base = 0xfffff801`2c000000 PsLoadedModuleList = 0xfffff801`2cc2a3d0
  805. Debug session time: Sat Apr 24 18:16:50.104 2021 (UTC - 4:00)
  806. System Uptime: 0 days 3:27:22.735
  807.  
  808. BugCheck 4E, {99, 0, 0, 0}
  809. Probably caused by : ntkrnlmp.exe ( nt!MiReduceShareCount+16f166 )
  810. Followup: MachineOwner
  811.  
  812. PFN_LIST_CORRUPT (4e)
  813. Typically caused by drivers passing bad memory descriptor lists (ie: calling
  814. MmUnlockPages twice with the same list, etc). If a kernel debugger is
  815. available get the stack trace.
  816.  
  817. Arguments:
  818. Arg1: 0000000000000099, A PTE or PFN is corrupt
  819. Arg2: 0000000000000000, page frame number
  820. Arg3: 0000000000000000, current page state
  821. Arg4: 0000000000000000, 0
  822.  
  823. Debugging Details:
  824. DUMP_CLASS: 1
  825. DUMP_QUALIFIER: 400
  826. DUMP_TYPE: 2
  827. DUMP_FILE_ATTRIBUTES: 0x8
  828. Kernel Generated Triage Dump
  829. BUGCHECK_STR: 0x4E_99
  830. CUSTOMER_CRASH_COUNT: 1
  831. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  832.  
  833. PROCESS_NAME: chrome.exe
  834.  
  835. CURRENT_IRQL: 2
  836. LAST_CONTROL_TRANSFER: from fffff8012c461562 to fffff8012c3f5e40
  837. STACK_TEXT:
  838. ffffab85`caffdbd8 fffff801`2c461562 : 00000000`0000004e 00000000`00000099 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
  839. ffffab85`caffdbe0 fffff801`2c2940f8 : 00000000`003630b0 80000000`00000000 00000000`00000001 00000000`000000b0 : nt!MiReduceShareCount+0x16f166
  840. ffffab85`caffdc20 fffff801`2c21df6e : ffffab85`caffe050 ffff8687`0ad82080 00000000`00000000 ffffab85`caffe910 : nt!MiDeletePteList+0x738
  841. ffffab85`caffdd00 fffff801`2c62f22d : ffff8687`0abd9080 ffff8687`1127f408 ffff8687`00000000 ffff8687`00000000 : nt!MiDecommitPages+0x124e
  842. ffffab85`caffe8d0 fffff801`2c62e893 : ffffab85`caffea50 00000000`00000000 ffffab85`caffea50 ffff8687`1127f3e0 : nt!MiDecommitRegion+0x7d
  843. ffffab85`caffe950 fffff801`2c62e185 : 00000000`00000102 ffff8687`0ad919e0 00000000`00000690 fffff801`2c62cc3a : nt!MmFreeVirtualMemory+0x6d3
  844. ffffab85`caffeaa0 fffff801`2c4077b8 : ffff8687`0abd9080 00000000`00000001 ffffab85`caffeb18 ffffffff`fff7e9b0 : nt!NtFreeVirtualMemory+0x95
  845. ffffab85`caffeb00 00007ff8`5100d0e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  846. 000000fd`4b3fe1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`5100d0e4
  847. STACK_COMMAND: kb
  848. THREAD_SHA1_HASH_MOD_FUNC: c13b7a49aba847cb21157a463d91631059b40e0f
  849. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d6b45e0f66d64b27353edb50e77c7e22c63510dc
  850. THREAD_SHA1_HASH_MOD: cb5f414824c2521bcc505eaa03e92fa10922dad8
  851. FOLLOWUP_IP:
  852. nt!MiReduceShareCount+16f166
  853. fffff801`2c461562 cc int 3
  854. FAULT_INSTR_CODE: e8d233cc
  855. SYMBOL_STACK_INDEX: 1
  856. SYMBOL_NAME: nt!MiReduceShareCount+16f166
  857. FOLLOWUP_NAME: MachineOwner
  858. MODULE_NAME: nt
  859.  
  860. IMAGE_NAME: ntkrnlmp.exe
  861.  
  862. DEBUG_FLR_IMAGE_TIMESTAMP: ea0877a
  863. IMAGE_VERSION: 10.0.19041.928
  864. BUCKET_ID_FUNC_OFFSET: 16f166
  865. FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
  866. BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
  867. PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe
  868. TARGET_TIME: 2021-04-24T22:16:50.000Z
  869. SUITE_MASK: 272
  870. PRODUCT_TYPE: 1
  871. USER_LCID: 0
  872. FAILURE_ID_HASH_STRING: km:old_image_ntkrnlmp.exe
  873. FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}
  874. Followup: MachineOwner
  875.  
  876. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  877.  
  878. Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
  879. Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
  880. Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  881. Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  882. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  883. Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
  884. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  885. Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
  886. Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  887. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  888. Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
  889. Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
  890. Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
  891. Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
  892. Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
  893. Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  894. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  895. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  896. Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  897. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  898. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  899. Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  900. Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
  901. May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  902. Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  903. Sep 20 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  904. Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
  905. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  906. Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
  907. Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
  908. Apr 12 2021 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  909.  
  910. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  911.  
  912. Image name: AsIO.sys
  913. Search : https://www.google.com/search?q=AsIO.sys
  914. ADA Info : ASUS Input Output driver http://www.asus.com/
  915. Timestamp : Wed Aug 22 2012
  916.  
  917. Image name: ambakdrv.sys
  918. Search : https://www.google.com/search?q=ambakdrv.sys
  919. ADA Info : Aomei driver (Aomei Technology Co)
  920. Timestamp : Tue Dec 25 2012
  921.  
  922. Image name: ammntdrv.sys
  923. Search : https://www.google.com/search?q=ammntdrv.sys
  924. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  925. Timestamp : Tue Dec 25 2012
  926.  
  927. Image name: BazisVirtualCDBus.sys
  928. Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
  929. ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  930. Timestamp : Sat Sep 26 2015
  931.  
  932. Image name: amdgpio3.sys
  933. Search : https://www.google.com/search?q=amdgpio3.sys
  934. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  935. Timestamp : Mon Mar 14 2016
  936.  
  937. Image name: hmatap.sys
  938. Search : https://www.google.com/search?q=hmatap.sys
  939. ADA Info : The OpenVPN Project TAP driver
  940. Timestamp : Fri Aug 26 2016
  941.  
  942. Image name: amdpsp.sys
  943. Search : https://www.google.com/search?q=amdpsp.sys
  944. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  945. Timestamp : Mon Jun 5 2017
  946.  
  947. Image name: AmdTools64.sys
  948. Search : https://www.google.com/search?q=AmdTools64.sys
  949. ADA Info : AMD Special Tools driver
  950. Timestamp : Thu Feb 15 2018
  951.  
  952. Image name: RTKVHD64.sys
  953. Search : https://www.google.com/search?q=RTKVHD64.sys
  954. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  955. Timestamp : Tue Mar 20 2018
  956.  
  957. Image name: AMDPCIDev.sys
  958. Search : https://www.google.com/search?q=AMDPCIDev.sys
  959. ADA Info : Advanced Micro Devices PCI Device driver
  960. Timestamp : Thu Apr 12 2018
  961.  
  962. Image name: GLCKIO2.sys
  963. Search : https://www.google.com/search?q=GLCKIO2.sys
  964. ADA Info : ASUS RGB driver
  965. Timestamp : Mon Apr 23 2018
  966.  
  967. Image name: NewTek_AudioPortClass.sys
  968. Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
  969. ADA Info : NewTek Audio Port Class driver
  970. Timestamp : Thu Aug 9 2018
  971.  
  972. Image name: NewTek_WDM_KS.sys
  973. Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
  974. ADA Info : NewTek WDM Kernel Streaming driver
  975. Timestamp : Thu Aug 9 2018
  976.  
  977. Image name: ViGEmBus.sys
  978. Search : https://www.google.com/search?q=ViGEmBus.sys
  979. ADA Info : Oculus Virtual Gamepad Emulation Bus driver
  980. Timestamp : Wed Oct 17 2018
  981.  
  982. Image name: idmwfp.sys
  983. Search : https://www.google.com/search?q=idmwfp.sys
  984. ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
  985. Timestamp : Wed Dec 19 2018
  986.  
  987. Image name: HWiNFO64A.SYS
  988. Search : https://www.google.com/search?q=HWiNFO64A.SYS
  989. ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  990. Timestamp : Thu Mar 14 2019
  991.  
  992. Image name: nvvad64v.sys
  993. Search : https://www.google.com/search?q=nvvad64v.sys
  994. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  995. Timestamp : Thu Mar 14 2019
  996.  
  997. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  998. Image name: rt640x64.sys
  999. Search : https://www.google.com/search?q=rt640x64.sys
  1000. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1001. Timestamp : Fri May 24 2019
  1002. File version: 9.1.410.2015
  1003. Product version: 9.1.410.2015
  1004. File flags: 8 (Mask 3F) Private
  1005. File OS: 40004 NT Win32
  1006. File type: 3.6 Driver
  1007. File date: 00000000.00000000
  1008. CompanyName: Realtek
  1009. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  1010. InternalName: rt640x64.sys
  1011. OriginalFilename: rt640x64.sys
  1012. ProductVersion: 9.001.0410.2015
  1013. FileVersion: 9.001.0410.2015
  1014. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  1015. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  1016.  
  1017. Image name: RTCore64.sys
  1018. Search : https://www.google.com/search?q=RTCore64.sys
  1019. ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  1020. Timestamp : Thu Sep 19 2019
  1021.  
  1022. Image name: amdgpio2.sys
  1023. Search : https://www.google.com/search?q=amdgpio2.sys
  1024. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1025. Timestamp : Sun Sep 29 2019
  1026.  
  1027. Image name: nvvhci.sys
  1028. Search : https://www.google.com/search?q=nvvhci.sys
  1029. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1030. Timestamp : Fri Jan 10 2020
  1031.  
  1032. Image name: ene.sys
  1033. Search : https://www.google.com/search?q=ene.sys
  1034. ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  1035. Timestamp : Sat Mar 21 2020
  1036.  
  1037. Image name: droidcam.sys
  1038. Search : https://www.google.com/search?q=droidcam.sys
  1039. ADA Info : Droidcam Virtual Device driver
  1040. Timestamp : Fri Apr 10 2020
  1041.  
  1042. Image name: amwrtdrv.sys
  1043. Search : https://www.google.com/search?q=amwrtdrv.sys
  1044. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  1045. Timestamp : Tue May 26 2020
  1046.  
  1047. Image name: NvModuleTracker.sys
  1048. Search : https://www.google.com/search?q=NvModuleTracker.sys
  1049. ADA Info : NVIDIA Module Tracker driver
  1050. Timestamp : Tue Aug 11 2020
  1051.  
  1052. Image name: UcmCxUcsiNvppc.sys
  1053. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  1054. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  1055. Timestamp : Sun Sep 20 2020
  1056.  
  1057. Image name: droidcamvideo.sys
  1058. Search : https://www.google.com/search?q=droidcamvideo.sys
  1059. ADA Info : Droidcam Virtual Device WDM Video Capture driver
  1060. Timestamp : Sat Oct 3 2020
  1061.  
  1062. Image name: nvhda64v.sys
  1063. Search : https://www.google.com/search?q=nvhda64v.sys
  1064. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1065. Timestamp : Fri Oct 16 2020
  1066.  
  1067. Image name: iVCam.sys
  1068. Search : https://www.google.com/search?q=iVCam.sys
  1069. ADA Info : e2eSoft MyCam Camera driver
  1070. Timestamp : Mon Nov 2 2020
  1071.  
  1072. Image name: vgk.sys
  1073. Search : https://www.google.com/search?q=vgk.sys
  1074. ADA Info : Vanguard Anti-Cheat driver
  1075. Timestamp : Thu Mar 25 2021
  1076.  
  1077. Image name: nvlddmkm.sys
  1078. Search : https://www.google.com/search?q=nvlddmkm.sys
  1079. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1080. Timestamp : Mon Apr 12 2021
  1081.  
  1082. ====================== Dump #2: MICROSOFT DRIVERS ======================
  1083.  
  1084. ACPI.sys ACPI Driver for NT (Microsoft)
  1085. acpiex.sys ACPIEx Driver (Microsoft)
  1086. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1087. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1088. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1089. ahcache.sys Application Compatibility Cache (Microsoft)
  1090. amdppm.sys Processor Device Driver
  1091. bam.sys BAM Kernal driver (Microsoft)
  1092. BasicDisplay.sys Basic Display driver (Microsoft)
  1093. BasicRender.sys Basic Render driver (Microsoft)
  1094. Beep.SYS BEEP driver (Microsoft)
  1095. bindflt.sys Windows Bind Filter driver (Microsoft)
  1096. BOOTVID.dll VGA Boot Driver (Microsoft)
  1097. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1098. cdd.dll Canonical Display Driver (Microsoft)
  1099. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1100. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1101. CI.dll Code Integrity Module (Microsoft)
  1102. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1103. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1104. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1105. CLFS.SYS Common Log File System Driver (Microsoft)
  1106. clipsp.sys CLIP Service (Microsoft)
  1107. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1108. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1109. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1110. condrv.sys Console Driver (Microsoft)
  1111. crashdmp.sys Crash Dump driver (Microsoft)
  1112. csc.sys Windows Client Side Caching driver (Microsoft)
  1113. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1114. disk.sys PnP Disk Driver (Microsoft)
  1115. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1116. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1117. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1118. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  1119. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1120. dxgmms2.sys DirectX Graphics MMS
  1121. exfat.SYS Extended FAT File System driver (Microsoft)
  1122. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1123. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1124. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1125. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1126. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1127. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1128. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1129. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1130. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1131. HIDCLASS.SYS Hid Class Library (Microsoft)
  1132. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1133. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1134. HTTP.sys HTTP Protocol Stack (Microsoft)
  1135. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  1136. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1137. IntelTA.sys Intel Telemetry Driver
  1138. iorate.sys I/O rate control Filter (Microsoft)
  1139. kbdclass.sys Keyboard Class Driver (Microsoft)
  1140. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1141. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  1142. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1143. ks.sys Kernal CSA Library (Microsoft)
  1144. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1145. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1146. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1147. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1148. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1149. mcupdate.dll Media Center Update (Microsoft)
  1150. mmcss.sys MMCSS Driver (Microsoft)
  1151. monitor.sys Monitor Driver (Microsoft)
  1152. mouclass.sys Mouse Class Driver (Microsoft)
  1153. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1154. mountmgr.sys Mount Point Manager (Microsoft)
  1155. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1156. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1157. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1158. Msfs.SYS Mailslot driver (Microsoft)
  1159. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1160. msisadrv.sys ISA Driver (Microsoft)
  1161. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1162. msquic.sys Windows QUIC Driver
  1163. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1164. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1165. mssmbios.sys System Management BIOS driver (Microsoft)
  1166. mup.sys Multiple UNC Provider driver (Microsoft)
  1167. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1168. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1169. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1170. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1171. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1172. NDProxy.sys NDIS Proxy driver (Microsoft)
  1173. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1174. netbios.sys NetBIOS Interface driver (Microsoft)
  1175. netbt.sys MBT Transport driver (Microsoft)
  1176. NETIO.SYS Network I/O Subsystem (Microsoft)
  1177. Npfs.SYS NPFS driver (Microsoft)
  1178. npsvctrig.sys Named pipe service triggers (Microsoft)
  1179. nsiproxy.sys NSI Proxy driver (Microsoft)
  1180. Ntfs.sys NT File System Driver (Microsoft)
  1181. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1182. ntosext.sys NTOS Extension Host driver (Microsoft)
  1183. Null.SYS NULL Driver (Microsoft)
  1184. pacer.sys QoS Packet Scheduler (Microsoft)
  1185. parport.sys Parallel Port Driver (Microsoft)
  1186. partmgr.sys Partition driver (Microsoft)
  1187. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1188. pcw.sys Performance Counter Driver (Microsoft)
  1189. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1190. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1191. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1192. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1193. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1194. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1195. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1196. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1197. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1198. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1199. rdyboost.sys ReadyBoost Driver (Microsoft)
  1200. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1201. serenum.sys Serial Port Enumerator (Microsoft)
  1202. serial.sys Serial Device Driver
  1203. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1204. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1205. spaceport.sys Storage Spaces driver (Microsoft)
  1206. srv2.sys Smb 2.0 Server driver (Microsoft)
  1207. srvnet.sys Server Network driver (Microsoft)
  1208. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1209. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1210. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1211. STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
  1212. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1213. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1214. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1215. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1216. TDI.SYS TDI Wrapper driver (Microsoft)
  1217. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1218. tm.sys Kernel Transaction Manager driver (Microsoft)
  1219. uaspstor.sys UASP driver (Microsoft)
  1220. UcmCx.sys USB Connector Manager KMDF Class Extension
  1221. ucx01000.sys USB Controller Extension (Microsoft)
  1222. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1223. usbaudio.sys USB Audio Class Driver (Microsoft)
  1224. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1225. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1226. UsbHub3.sys USB3 HUB driver (Microsoft)
  1227. USBXHCI.SYS USB XHCI driver (Microsoft)
  1228. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1229. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1230. volmgr.sys Volume Manager Driver (Microsoft)
  1231. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1232. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1233. volume.sys Volume driver (Microsoft)
  1234. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1235. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1236. watchdog.sys Watchdog driver (Microsoft)
  1237. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1238. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1239. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1240. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1241. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1242. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1243. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1244. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1245. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1246. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1247. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1248. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1249. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1250. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1251. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1252. Wof.sys Windows Overlay Filter (Microsoft)
  1253. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  1254. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1255. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1256.  
  1257. ====================== Dump #2: UNLOADED MODULES =======================
  1258.  
  1259. fffff801`72dc0000 fffff801`72dd1000 MSKSSRV.sys
  1260. fffff801`72da0000 fffff801`72db1000 MSKSSRV.sys
  1261. fffff801`72d80000 fffff801`72d91000 MSKSSRV.sys
  1262. fffff801`72d30000 fffff801`72d41000 MSKSSRV.sys
  1263. fffff801`33960000 fffff801`33971000 MSKSSRV.sys
  1264. fffff801`32600000 fffff801`3260f000 dump_storpor
  1265. fffff801`32650000 fffff801`32683000 dump_storahc
  1266. fffff801`326b0000 fffff801`326ce000 dump_dumpfve
  1267. fffff801`31480000 fffff801`3149d000 EhStorClass.
  1268. fffff801`33ea0000 fffff801`33ebc000 dam.sys
  1269. fffff801`30ff0000 fffff801`31002000 WdBoot.sys
  1270. fffff801`320c0000 fffff801`320d1000 hwpolicy.sys
  1271.  
  1272. ====================== Dump #2: BIOS INFORMATION =======================
  1273.  
  1274. [SMBIOS Data Tables v3.0]
  1275. [DMI Version - 0]
  1276. [2.0 Calling Convention - No]
  1277. [Table Size - 1289 bytes]
  1278. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  1279. Vendor American Megatrends Inc.
  1280. BIOS Version P1.10
  1281. BIOS Starting Address Segment f000
  1282. BIOS Release Date 06/19/2018
  1283. BIOS ROM Size 1000000
  1284. BIOS Characteristics
  1285. 07: - PCI Supported
  1286. 11: - Upgradeable FLASH BIOS
  1287. 12: - BIOS Shadowing Supported
  1288. 15: - CD-Boot Supported
  1289. 16: - Selectable Boot Supported
  1290. 17: - BIOS ROM Socketed
  1291. 19: - EDD Supported
  1292. 23: - 1.2MB Floppy Supported
  1293. 24: - 720KB Floppy Supported
  1294. 25: - 2.88MB Floppy Supported
  1295. 26: - Print Screen Device Supported
  1296. 27: - Keyboard Services Supported
  1297. 28: - Serial Services Supported
  1298. 29: - Printer Services Supported
  1299. 32: - BIOS Vendor Reserved
  1300. BIOS Characteristic Extensions
  1301. 00: - ACPI Supported
  1302. 01: - USB Legacy Supported
  1303. 08: - BIOS Boot Specification Supported
  1304. 10: - Specification Reserved
  1305. 11: - Specification Reserved
  1306. BIOS Major Revision 5
  1307. BIOS Minor Revision 13
  1308. EC Firmware Major Revision 255
  1309. EC Firmware Minor Revision 255
  1310. [System Information (Type 1) - Length 27 - Handle 0001h]
  1311. UUID 00000000-0000-0000-0000-000000000000
  1312. Wakeup Type Power Switch
  1313. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1314. Manufacturer ASRock
  1315. Product B450M-HDV
  1316. Version
  1317. Feature Flags 09h
  1318. 57915104: - 57915152: - 7
  1319. ¨6ÿ
  1320. Location
  1321. Chassis Handle 0003h
  1322. Board Type 0ah - Processor/Memory Module
  1323. Number of Child Handles 0
  1324. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1325. Chassis Type Desktop
  1326. Bootup State Safe
  1327. Power Supply State Safe
  1328. Thermal State Safe
  1329. Security Status None
  1330. OEM Defined 0
  1331. Height 0U
  1332. Number of Power Cords 1
  1333. Number of Contained Elements 0
  1334. Contained Element Size 3
  1335. [OEM Strings (Type 11) - Length 5 - Handle 0007h]
  1336. Number of Strings 1
  1337. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
  1338. [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
  1339. Location 03h - SystemBoard/Motherboard
  1340. Use 03h - System Memory
  1341. Memory Error Correction 03h - None
  1342. Maximum Capacity 268435456KB
  1343. Memory Error Inf Handle 000ah
  1344. Number of Memory Devices 2
  1345. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
  1346. Starting Address 00000000h
  1347. Ending Address 00ffffffh
  1348. Memory Array Handle 000bh
  1349. Partition Width 02
  1350. [Cache Information (Type 7) - Length 19 - Handle 000dh]
  1351. Socket Designation L1 - Cache
  1352. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1353. Maximum Cache Size 0240h - 576K
  1354. Installed Size 0240h - 576K
  1355. Supported SRAM Type 0010h - Pipeline-Burst
  1356. Current SRAM Type 0010h - Pipeline-Burst
  1357. Cache Speed 1ns
  1358. Error Correction Type Specification Reserved
  1359. System Cache Type Unified
  1360. Associativity 8-way Set-Associative
  1361. [Cache Information (Type 7) - Length 19 - Handle 000eh]
  1362. Socket Designation L2 - Cache
  1363. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1364. Maximum Cache Size 0c00h - 3072K
  1365. Installed Size 0c00h - 3072K
  1366. Supported SRAM Type 0010h - Pipeline-Burst
  1367. Current SRAM Type 0010h - Pipeline-Burst
  1368. Cache Speed 1ns
  1369. Error Correction Type Specification Reserved
  1370. System Cache Type Unified
  1371. Associativity 8-way Set-Associative
  1372. [Cache Information (Type 7) - Length 19 - Handle 000fh]
  1373. Socket Designation L3 - Cache
  1374. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1375. Maximum Cache Size 4000h - 16384K
  1376. Installed Size 4000h - 16384K
  1377. Supported SRAM Type 0010h - Pipeline-Burst
  1378. Current SRAM Type 0010h - Pipeline-Burst
  1379. Cache Speed 1ns
  1380. Error Correction Type Specification Reserved
  1381. System Cache Type Unified
  1382. Associativity 16-way Set-Associative
  1383. [Processor Information (Type 4) - Length 48 - Handle 0010h]
  1384. Socket Designation AM4
  1385. Processor Type Central Processor
  1386. Processor Family 6bh - Specification Reserved
  1387. Processor Manufacturer Advanced Micro Devices, Inc.
  1388. Processor ID 820f8000fffb8b17
  1389. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  1390. Processor Voltage 8bh - 1.1V
  1391. External Clock 100MHz
  1392. Max Speed 3900MHz
  1393. Current Speed 3400MHz
  1394. Status Enabled Populated
  1395. Processor Upgrade Specification Reserved
  1396. L1 Cache Handle 000dh
  1397. L2 Cache Handle 000eh
  1398. L3 Cache Handle 000fh
  1399. Part Number Unknown
  1400. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
  1401. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  1402. Physical Memory Array Handle 000bh
  1403. Memory Error Info Handle 0011h
  1404. Total Width 64 bits
  1405. Data Width 64 bits
  1406. Size 8192MB
  1407. Form Factor 09h - DIMM
  1408. Device Locator DIMM 0
  1409. Bank Locator P0 CHANNEL A
  1410. Memory Type 1ah - Specification Reserved
  1411. Type Detail 4080h - Synchronous
  1412. Speed 3000MHz
  1413. Manufacturer Unknown
  1414. Part Number F4-3000C16-8GTZR
  1415. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
  1416. Starting Address 00000000h
  1417. Ending Address 00ffffffh
  1418. Memory Device Handle 0012h
  1419. Mem Array Mapped Adr Handle 000ch
  1420. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  1421. [Memory Device (Type 17) - Length 40 - Handle 0015h]
  1422. Physical Memory Array Handle 000bh
  1423. Memory Error Info Handle 0014h
  1424. Total Width 64 bits
  1425. Data Width 64 bits
  1426. Size 8192MB
  1427. Form Factor 09h - DIMM
  1428. Device Locator DIMM 0
  1429. Bank Locator P0 CHANNEL B
  1430. Memory Type 1ah - Specification Reserved
  1431. Type Detail 4080h - Synchronous
  1432. Speed 3000MHz
  1433. Manufacturer Unknown
  1434. Part Number F4-3000C16-8GTZR
  1435. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  1436. Starting Address 00000000h
  1437. Ending Address 00ffffffh
  1438. Memory Device Handle 0015h
  1439. Mem Array Mapped Adr Handle 000ch
  1440.  
  1441. ========================== Dump #2: Extra #1 ===========================
  1442.  
  1443. 1: kd> !verifier
  1444. fffff8012cc2a800: Unable to get verifier list.
  1445.  
  1446. ========================== Dump #2: Extra #2 ===========================
  1447.  
  1448. 1: kd> !thread
  1449. THREAD ffff86870abd9080 Cid 2bdc.1c98 Teb: 000000fd4aa7a000 Win32Thread: 0000000000000000 RUNNING on processor 1
  1450. Not impersonating
  1451. GetUlongFromAddress: unable to read from fffff8012cc114fc
  1452. Owning Process ffff86870ad82080 Image: chrome.exe
  1453. Attached Process N/A Image: N/A
  1454. fffff78000000000: Unable to get shared data
  1455. Wait Start TickCount 796331
  1456. Context Switch Count 224143 IdealProcessor: 8
  1457. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1458. UserTime 00:00:00.000
  1459. KernelTime 00:00:00.000
  1460. Win32 Start Address 0x00007ff70f484370
  1461. Stack Init ffffab85caffec90 Current ffffab85caffe6a0
  1462. Base ffffab85cafff000 Limit ffffab85caff9000 Call 0000000000000000
  1463. Priority 4 BasePriority 4 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1464. Child-SP RetAddr : Args to Child : Call Site
  1465. ffffab85`caffdbd8 fffff801`2c461562 : 00000000`0000004e 00000000`00000099 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
  1466. ffffab85`caffdbe0 fffff801`2c2940f8 : 00000000`003630b0 80000000`00000000 00000000`00000001 00000000`000000b0 : nt!MiReduceShareCount+0x16f166
  1467. ffffab85`caffdc20 fffff801`2c21df6e : ffffab85`caffe050 ffff8687`0ad82080 00000000`00000000 ffffab85`caffe910 : nt!MiDeletePteList+0x738
  1468. ffffab85`caffdd00 fffff801`2c62f22d : ffff8687`0abd9080 ffff8687`1127f408 ffff8687`00000000 ffff8687`00000000 : nt!MiDecommitPages+0x124e
  1469. ffffab85`caffe8d0 fffff801`2c62e893 : ffffab85`caffea50 00000000`00000000 ffffab85`caffea50 ffff8687`1127f3e0 : nt!MiDecommitRegion+0x7d
  1470. ffffab85`caffe950 fffff801`2c62e185 : 00000000`00000102 ffff8687`0ad919e0 00000000`00000690 fffff801`2c62cc3a : nt!MmFreeVirtualMemory+0x6d3
  1471. ffffab85`caffeaa0 fffff801`2c4077b8 : ffff8687`0abd9080 00000000`00000001 ffffab85`caffeb18 ffffffff`fff7e9b0 : nt!NtFreeVirtualMemory+0x95
  1472. ffffab85`caffeb00 00007ff8`5100d0e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffffab85`caffeb00)
  1473. 000000fd`4b3fe1e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`5100d0e4
  1474.  
  1475.  
  1476. ========================================================================
  1477. ======================= Dump #3: ANALYZE VERBOSE =======================
  1478. ====================== File: 042321-59625-01.dmp =======================
  1479. ========================================================================
  1480.  
  1481. Mini Kernel Dump File: Only registers and stack trace are available
  1482. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  1483. Kernel base = 0xfffff804`48c00000 PsLoadedModuleList = 0xfffff804`4982a3d0
  1484. Debug session time: Fri Apr 23 08:07:34.375 2021 (UTC - 4:00)
  1485. System Uptime: 1 days 8:11:53.725
  1486.  
  1487. BugCheck 4E, {99, 5c532, 2, e0002100021584e}
  1488. Probably caused by : ntkrnlmp.exe ( nt!MiBadShareCount+5b )
  1489. Followup: MachineOwner
  1490.  
  1491. PFN_LIST_CORRUPT (4e)
  1492. Typically caused by drivers passing bad memory descriptor lists (ie: calling
  1493. MmUnlockPages twice with the same list, etc). If a kernel debugger is
  1494. available get the stack trace.
  1495.  
  1496. Arguments:
  1497. Arg1: 0000000000000099, A PTE or PFN is corrupt
  1498. Arg2: 000000000005c532, page frame number
  1499. Arg3: 0000000000000002, current page state
  1500. Arg4: 0e0002100021584e, 0
  1501.  
  1502. Debugging Details:
  1503. DUMP_CLASS: 1
  1504. DUMP_QUALIFIER: 400
  1505. DUMP_TYPE: 2
  1506. DUMP_FILE_ATTRIBUTES: 0x8
  1507. Kernel Generated Triage Dump
  1508. BUGCHECK_STR: 0x4E_99
  1509. CUSTOMER_CRASH_COUNT: 1
  1510. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  1511.  
  1512. PROCESS_NAME: fontdrvhost.ex
  1513.  
  1514. CURRENT_IRQL: 2
  1515. LAST_CONTROL_TRANSFER: from fffff80448fed97f to fffff80448ff5e40
  1516. STACK_TEXT:
  1517. ffff830c`77ce1d78 fffff804`48fed97f : 00000000`0000004e 00000000`00000099 00000000`0005c532 00000000`00000002 : nt!KeBugCheckEx
  1518. ffff830c`77ce1d80 fffff804`48e9a598 : 8a000003`00000002 00000000`00000004 05d01bae`00000000 00000000`00000000 : nt!MiBadShareCount+0x5b
  1519. ffff830c`77ce1dc0 fffff804`48e9ad6e : ffff830c`77ce2398 ffff830c`77ce2150 00000000`00000000 ffff830c`77ce20a0 : nt!MiDeletePteRun+0x1798
  1520. ffff830c`77ce1fd0 fffff804`48e9b94b : ffff830c`77ce2100 00000000`00000000 ffffa000`e46d6f28 00000000`00000000 : nt!MiDeleteVaTail+0x6e
  1521. ffff830c`77ce2000 fffff804`48e6baf0 : 00000000`00000003 ffff830c`00000000 ffffba03`76fa3550 ffffba03`7764b080 : nt!MiDeletePagablePteRange+0x4ab
  1522. ffff830c`77ce2310 fffff804`49236189 : ffffba03`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiDeleteVad+0x360
  1523. ffff830c`77ce2420 fffff804`49235f62 : ffffba03`7fb373c0 00000000`00000000 ffffba03`76fa3080 00000000`00000000 : nt!MiUnmapVad+0x49
  1524. ffff830c`77ce2450 fffff804`492d951f : 00000000`00000000 00000000`00000009 ffff830c`77ce25a0 00000000`00000001 : nt!MiUnmapViewOfSection+0x152
  1525. ffff830c`77ce2530 ffffb50f`405568f1 : 00000000`00000001 ffff830c`00000000 ffffb50f`404e0000 00000000`0000000e : nt!MmUnmapViewOfSection+0xf
  1526. ffff830c`77ce2560 ffffb50f`40558099 : ffff830c`77ce25e0 ffffb50f`404e0000 ffffb50f`4081c338 00000000`0000000e : win32kfull!UmfdHostLifeTimeManager::MmUnmapViewOfSection+0x49
  1527. ffff830c`77ce2590 ffffb50f`405f15f5 : ffffb542`406f4ba8 ffff830c`77ce2680 ffffb50f`404e0000 ffffb50f`40216a72 : win32kfull!vUnmapFileFD+0x1d
  1528. ffff830c`77ce25c0 ffffb50f`4063820e : ffff830c`77ce26a0 ffffb50f`404e0000 00000000`00000000 00000000`00000009 : win32kfull!EngUnmapFontFileFD+0xd5
  1529. ffff830c`77ce2640 ffffb50f`40556d5e : 00000000`0000000e ffffb542`406f4ba8 ffffb50f`4081c330 ffffb542`00000000 : win32kfull!UmfdEscEngUnmapFontFileFD+0x4e
  1530. ffff830c`77ce2670 ffffb50f`40556a31 : 000000a2`c09ffd30 000000a2`c09ffd30 00000000`00000030 00000000`00000009 : win32kfull!UmfdDispatchEscape+0x1ce
  1531. ffff830c`77ce26e0 ffffb50f`4117b0dd : ffffb50f`411805e4 ffffb50f`4119293b ffffa050`007236a8 ffffa050`28003918 : win32kfull!NtGdiExtEscape+0x101
  1532. ffff830c`77ce2a30 fffff804`490077b8 : 00000000`00000000 00000000`00000000 00000000`00000000 000000a2`c09ffa08 : win32k!NtGdiExtEscape+0x55
  1533. ffff830c`77ce2a90 00007ff9`0e9d3164 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  1534. 000000a2`c09ffce8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`0e9d3164
  1535. STACK_COMMAND: kb
  1536. THREAD_SHA1_HASH_MOD_FUNC: ab45a6b1d0df4001159072caa2922f6cd42c4dd5
  1537. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 3c0794d92c832f39b6c040db6401448032d5da0f
  1538. THREAD_SHA1_HASH_MOD: d44d1803e193936086845f8df48e94ff67b211d2
  1539. FOLLOWUP_IP:
  1540. nt!MiBadShareCount+5b
  1541. fffff804`48fed97f cc int 3
  1542. FAULT_INSTR_CODE: cccccccc
  1543. SYMBOL_STACK_INDEX: 1
  1544. SYMBOL_NAME: nt!MiBadShareCount+5b
  1545. FOLLOWUP_NAME: MachineOwner
  1546. MODULE_NAME: nt
  1547.  
  1548. IMAGE_NAME: ntkrnlmp.exe
  1549.  
  1550. DEBUG_FLR_IMAGE_TIMESTAMP: ea0877a
  1551. IMAGE_VERSION: 10.0.19041.928
  1552. BUCKET_ID_FUNC_OFFSET: 5b
  1553. FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
  1554. BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
  1555. PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe
  1556. TARGET_TIME: 2021-04-23T12:07:34.000Z
  1557. SUITE_MASK: 272
  1558. PRODUCT_TYPE: 1
  1559. USER_LCID: 0
  1560. FAILURE_ID_HASH_STRING: km:old_image_ntkrnlmp.exe
  1561. FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}
  1562. Followup: MachineOwner
  1563.  
  1564. ====================== Dump #3: 3RD PARTY DRIVERS ======================
  1565.  
  1566. Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
  1567. Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
  1568. Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  1569. Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  1570. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1571. Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
  1572. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  1573. Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
  1574. Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  1575. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  1576. Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
  1577. Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
  1578. Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
  1579. Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
  1580. Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
  1581. Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  1582. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1583. May 14 2019 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  1584. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1585. Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  1586. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1587. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1588. Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  1589. Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
  1590. May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  1591. Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  1592. Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
  1593. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1594. Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
  1595. Dec 03 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1596. Feb 25 2021 - EasyAntiCheat.sys - EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
  1597. Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
  1598.  
  1599. ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
  1600.  
  1601. Image name: AsIO.sys
  1602. Search : https://www.google.com/search?q=AsIO.sys
  1603. ADA Info : ASUS Input Output driver http://www.asus.com/
  1604. Timestamp : Wed Aug 22 2012
  1605.  
  1606. Image name: ambakdrv.sys
  1607. Search : https://www.google.com/search?q=ambakdrv.sys
  1608. ADA Info : Aomei driver (Aomei Technology Co)
  1609. Timestamp : Tue Dec 25 2012
  1610.  
  1611. Image name: ammntdrv.sys
  1612. Search : https://www.google.com/search?q=ammntdrv.sys
  1613. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  1614. Timestamp : Tue Dec 25 2012
  1615.  
  1616. Image name: BazisVirtualCDBus.sys
  1617. Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
  1618. ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  1619. Timestamp : Sat Sep 26 2015
  1620.  
  1621. Image name: amdgpio3.sys
  1622. Search : https://www.google.com/search?q=amdgpio3.sys
  1623. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1624. Timestamp : Mon Mar 14 2016
  1625.  
  1626. Image name: hmatap.sys
  1627. Search : https://www.google.com/search?q=hmatap.sys
  1628. ADA Info : The OpenVPN Project TAP driver
  1629. Timestamp : Fri Aug 26 2016
  1630.  
  1631. Image name: amdpsp.sys
  1632. Search : https://www.google.com/search?q=amdpsp.sys
  1633. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  1634. Timestamp : Mon Jun 5 2017
  1635.  
  1636. Image name: AmdTools64.sys
  1637. Search : https://www.google.com/search?q=AmdTools64.sys
  1638. ADA Info : AMD Special Tools driver
  1639. Timestamp : Thu Feb 15 2018
  1640.  
  1641. Image name: RTKVHD64.sys
  1642. Search : https://www.google.com/search?q=RTKVHD64.sys
  1643. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  1644. Timestamp : Tue Mar 20 2018
  1645.  
  1646. Image name: AMDPCIDev.sys
  1647. Search : https://www.google.com/search?q=AMDPCIDev.sys
  1648. ADA Info : Advanced Micro Devices PCI Device driver
  1649. Timestamp : Thu Apr 12 2018
  1650.  
  1651. Image name: GLCKIO2.sys
  1652. Search : https://www.google.com/search?q=GLCKIO2.sys
  1653. ADA Info : ASUS RGB driver
  1654. Timestamp : Mon Apr 23 2018
  1655.  
  1656. Image name: NewTek_AudioPortClass.sys
  1657. Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
  1658. ADA Info : NewTek Audio Port Class driver
  1659. Timestamp : Thu Aug 9 2018
  1660.  
  1661. Image name: NewTek_WDM_KS.sys
  1662. Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
  1663. ADA Info : NewTek WDM Kernel Streaming driver
  1664. Timestamp : Thu Aug 9 2018
  1665.  
  1666. Image name: ViGEmBus.sys
  1667. Search : https://www.google.com/search?q=ViGEmBus.sys
  1668. ADA Info : Oculus Virtual Gamepad Emulation Bus driver
  1669. Timestamp : Wed Oct 17 2018
  1670.  
  1671. Image name: idmwfp.sys
  1672. Search : https://www.google.com/search?q=idmwfp.sys
  1673. ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
  1674. Timestamp : Wed Dec 19 2018
  1675.  
  1676. Image name: HWiNFO64A.SYS
  1677. Search : https://www.google.com/search?q=HWiNFO64A.SYS
  1678. ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  1679. Timestamp : Thu Mar 14 2019
  1680.  
  1681. Image name: nvvad64v.sys
  1682. Search : https://www.google.com/search?q=nvvad64v.sys
  1683. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1684. Timestamp : Thu Mar 14 2019
  1685.  
  1686. Image name: UcmCxUcsiNvppc.sys
  1687. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  1688. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  1689. Timestamp : Tue May 14 2019
  1690.  
  1691. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  1692. Image name: rt640x64.sys
  1693. Search : https://www.google.com/search?q=rt640x64.sys
  1694. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1695. Timestamp : Fri May 24 2019
  1696. File version: 9.1.410.2015
  1697. Product version: 9.1.410.2015
  1698. File flags: 8 (Mask 3F) Private
  1699. File OS: 40004 NT Win32
  1700. File type: 3.6 Driver
  1701. File date: 00000000.00000000
  1702. CompanyName: Realtek
  1703. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  1704. InternalName: rt640x64.sys
  1705. OriginalFilename: rt640x64.sys
  1706. ProductVersion: 9.001.0410.2015
  1707. FileVersion: 9.001.0410.2015
  1708. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  1709. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  1710.  
  1711. Image name: RTCore64.sys
  1712. Search : https://www.google.com/search?q=RTCore64.sys
  1713. ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  1714. Timestamp : Thu Sep 19 2019
  1715.  
  1716. Image name: amdgpio2.sys
  1717. Search : https://www.google.com/search?q=amdgpio2.sys
  1718. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1719. Timestamp : Sun Sep 29 2019
  1720.  
  1721. Image name: nvvhci.sys
  1722. Search : https://www.google.com/search?q=nvvhci.sys
  1723. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1724. Timestamp : Fri Jan 10 2020
  1725.  
  1726. Image name: ene.sys
  1727. Search : https://www.google.com/search?q=ene.sys
  1728. ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  1729. Timestamp : Sat Mar 21 2020
  1730.  
  1731. Image name: droidcam.sys
  1732. Search : https://www.google.com/search?q=droidcam.sys
  1733. ADA Info : Droidcam Virtual Device driver
  1734. Timestamp : Fri Apr 10 2020
  1735.  
  1736. Image name: amwrtdrv.sys
  1737. Search : https://www.google.com/search?q=amwrtdrv.sys
  1738. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  1739. Timestamp : Tue May 26 2020
  1740.  
  1741. Image name: NvModuleTracker.sys
  1742. Search : https://www.google.com/search?q=NvModuleTracker.sys
  1743. ADA Info : NVIDIA Module Tracker driver
  1744. Timestamp : Tue Aug 11 2020
  1745.  
  1746. Image name: droidcamvideo.sys
  1747. Search : https://www.google.com/search?q=droidcamvideo.sys
  1748. ADA Info : Droidcam Virtual Device WDM Video Capture driver
  1749. Timestamp : Sat Oct 3 2020
  1750.  
  1751. Image name: nvhda64v.sys
  1752. Search : https://www.google.com/search?q=nvhda64v.sys
  1753. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1754. Timestamp : Fri Oct 16 2020
  1755.  
  1756. Image name: iVCam.sys
  1757. Search : https://www.google.com/search?q=iVCam.sys
  1758. ADA Info : e2eSoft MyCam Camera driver
  1759. Timestamp : Mon Nov 2 2020
  1760.  
  1761. Image name: nvlddmkm.sys
  1762. Search : https://www.google.com/search?q=nvlddmkm.sys
  1763. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1764. Timestamp : Thu Dec 3 2020
  1765.  
  1766. Image name: EasyAntiCheat.sys
  1767. Search : https://www.google.com/search?q=EasyAntiCheat.sys
  1768. ADA Info : EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
  1769. Timestamp : Thu Feb 25 2021
  1770.  
  1771. Image name: vgk.sys
  1772. Search : https://www.google.com/search?q=vgk.sys
  1773. ADA Info : Vanguard Anti-Cheat driver
  1774. Timestamp : Thu Mar 25 2021
  1775.  
  1776. ====================== Dump #3: MICROSOFT DRIVERS ======================
  1777.  
  1778. ACPI.sys ACPI Driver for NT (Microsoft)
  1779. acpiex.sys ACPIEx Driver (Microsoft)
  1780. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1781. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1782. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1783. ahcache.sys Application Compatibility Cache (Microsoft)
  1784. amdppm.sys Processor Device Driver
  1785. asyncmac.sys MS Remote Access serial network driver
  1786. bam.sys BAM Kernal driver (Microsoft)
  1787. BasicDisplay.sys Basic Display driver (Microsoft)
  1788. BasicRender.sys Basic Render driver (Microsoft)
  1789. Beep.SYS BEEP driver (Microsoft)
  1790. bindflt.sys Windows Bind Filter driver (Microsoft)
  1791. BOOTVID.dll VGA Boot Driver (Microsoft)
  1792. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1793. cdd.dll Canonical Display Driver (Microsoft)
  1794. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1795. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1796. CI.dll Code Integrity Module (Microsoft)
  1797. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1798. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1799. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1800. CLFS.SYS Common Log File System Driver (Microsoft)
  1801. clipsp.sys CLIP Service (Microsoft)
  1802. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1803. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1804. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1805. condrv.sys Console Driver (Microsoft)
  1806. crashdmp.sys Crash Dump driver (Microsoft)
  1807. csc.sys Windows Client Side Caching driver (Microsoft)
  1808. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1809. disk.sys PnP Disk Driver (Microsoft)
  1810. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1811. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1812. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1813. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  1814. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1815. dxgmms2.sys DirectX Graphics MMS
  1816. exfat.SYS Extended FAT File System driver (Microsoft)
  1817. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1818. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1819. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1820. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1821. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1822. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1823. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1824. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1825. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1826. HIDCLASS.SYS Hid Class Library (Microsoft)
  1827. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1828. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1829. HTTP.sys HTTP Protocol Stack (Microsoft)
  1830. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  1831. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1832. IntelTA.sys Intel Telemetry Driver
  1833. iorate.sys I/O rate control Filter (Microsoft)
  1834. kbdclass.sys Keyboard Class Driver (Microsoft)
  1835. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1836. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  1837. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1838. ks.sys Kernal CSA Library (Microsoft)
  1839. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1840. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1841. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1842. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1843. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1844. mcupdate.dll Media Center Update (Microsoft)
  1845. mmcss.sys MMCSS Driver (Microsoft)
  1846. monitor.sys Monitor Driver (Microsoft)
  1847. mouclass.sys Mouse Class Driver (Microsoft)
  1848. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1849. mountmgr.sys Mount Point Manager (Microsoft)
  1850. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1851. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1852. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1853. Msfs.SYS Mailslot driver (Microsoft)
  1854. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1855. msisadrv.sys ISA Driver (Microsoft)
  1856. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1857. msquic.sys Windows QUIC Driver
  1858. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1859. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1860. mssmbios.sys System Management BIOS driver (Microsoft)
  1861. mup.sys Multiple UNC Provider driver (Microsoft)
  1862. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1863. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1864. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1865. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1866. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1867. NDProxy.sys NDIS Proxy driver (Microsoft)
  1868. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1869. netbios.sys NetBIOS Interface driver (Microsoft)
  1870. netbt.sys MBT Transport driver (Microsoft)
  1871. NETIO.SYS Network I/O Subsystem (Microsoft)
  1872. Npfs.SYS NPFS driver (Microsoft)
  1873. npsvctrig.sys Named pipe service triggers (Microsoft)
  1874. nsiproxy.sys NSI Proxy driver (Microsoft)
  1875. Ntfs.sys NT File System Driver (Microsoft)
  1876. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1877. ntosext.sys NTOS Extension Host driver (Microsoft)
  1878. Null.SYS NULL Driver (Microsoft)
  1879. pacer.sys QoS Packet Scheduler (Microsoft)
  1880. parport.sys Parallel Port Driver (Microsoft)
  1881. partmgr.sys Partition driver (Microsoft)
  1882. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1883. pcw.sys Performance Counter Driver (Microsoft)
  1884. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1885. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1886. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1887. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1888. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  1889. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1890. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1891. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1892. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1893. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1894. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1895. rdyboost.sys ReadyBoost Driver (Microsoft)
  1896. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1897. serenum.sys Serial Port Enumerator (Microsoft)
  1898. serial.sys Serial Device Driver
  1899. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1900. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1901. spaceport.sys Storage Spaces driver (Microsoft)
  1902. srv2.sys Smb 2.0 Server driver (Microsoft)
  1903. srvnet.sys Server Network driver (Microsoft)
  1904. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1905. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1906. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1907. STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
  1908. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1909. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1910. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1911. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1912. TDI.SYS TDI Wrapper driver (Microsoft)
  1913. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1914. tm.sys Kernel Transaction Manager driver (Microsoft)
  1915. uaspstor.sys UASP driver (Microsoft)
  1916. UcmCx.sys USB Connector Manager KMDF Class Extension
  1917. ucx01000.sys USB Controller Extension (Microsoft)
  1918. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1919. usbaudio.sys USB Audio Class Driver (Microsoft)
  1920. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1921. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1922. UsbHub3.sys USB3 HUB driver (Microsoft)
  1923. USBXHCI.SYS USB XHCI driver (Microsoft)
  1924. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1925. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1926. volmgr.sys Volume Manager Driver (Microsoft)
  1927. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1928. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1929. volume.sys Volume driver (Microsoft)
  1930. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1931. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1932. watchdog.sys Watchdog driver (Microsoft)
  1933. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1934. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1935. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1936. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1937. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1938. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1939. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1940. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1941. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1942. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1943. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1944. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1945. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1946. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1947. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1948. Wof.sys Windows Overlay Filter (Microsoft)
  1949. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  1950. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1951. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1952.  
  1953. ====================== Dump #3: UNLOADED MODULES =======================
  1954.  
  1955. fffff804`513b0000 fffff804`513c1000 MSKSSRV.sys
  1956. fffff804`4e620000 fffff804`4e647000 ssudbus2.sys
  1957. fffff804`4e650000 fffff804`4e671000 WinUsb.sys
  1958. fffff804`513b0000 fffff804`513c3000 modem.sys
  1959. fffff804`4e680000 fffff804`4e6b5000 ssudmdm.sys
  1960. fffff804`4eb00000 fffff804`4eb27000 ssudbus2.sys
  1961. fffff804`4eb60000 fffff804`4eb81000 WinUsb.sys
  1962. fffff804`513b0000 fffff804`513c3000 modem.sys
  1963. fffff804`4eb90000 fffff804`4ebc5000 ssudmdm.sys
  1964. fffff804`4ea60000 fffff804`4ea87000 ssudbus2.sys
  1965. fffff804`513b0000 fffff804`513c3000 modem.sys
  1966. fffff804`4eac0000 fffff804`4eaf5000 ssudmdm.sys
  1967. fffff804`4ea90000 fffff804`4eab1000 WinUsb.sys
  1968. fffff804`4e9c0000 fffff804`4e9e7000 ssudbus2.sys
  1969. fffff804`513b0000 fffff804`513c3000 modem.sys
  1970. fffff804`4ea20000 fffff804`4ea55000 ssudmdm.sys
  1971. fffff804`4e9f0000 fffff804`4ea11000 WinUsb.sys
  1972. fffff804`4eb10000 fffff804`4eb31000 WinUsb.sys
  1973. fffff804`513b0000 fffff804`513cf000 MpKslDrv.sys
  1974. fffff804`4e6d0000 fffff804`4e6e1000 MSKSSRV.sys
  1975. fffff804`4e640000 fffff804`4e667000 ssudbus2.sys
  1976. fffff804`4e6b0000 fffff804`4e6c3000 modem.sys
  1977. fffff804`4e670000 fffff804`4e6a5000 ssudmdm.sys
  1978. fffff804`4eb60000 fffff804`4eb87000 ssudbus2.sys
  1979. fffff804`4e620000 fffff804`4e633000 modem.sys
  1980. fffff804`4eb90000 fffff804`4ebc5000 ssudmdm.sys
  1981. fffff804`962e0000 fffff804`96529000 EasyAntiChea
  1982. fffff804`96530000 fffff804`96541000 MSKSSRV.sys
  1983. fffff804`4eae0000 fffff804`4eb01000 WinUsb.sys
  1984. fffff804`4ea00000 fffff804`4ea27000 ssudbus2.sys
  1985. fffff804`4ea30000 fffff804`4ea51000 WinUsb.sys
  1986. fffff804`4eaa0000 fffff804`4eab3000 modem.sys
  1987. fffff804`4ea60000 fffff804`4ea95000 ssudmdm.sys
  1988. fffff804`4eac0000 fffff804`4ead1000 MSKSSRV.sys
  1989. fffff804`4e9e0000 fffff804`4e9f1000 MSKSSRV.sys
  1990. fffff804`513b0000 fffff804`513d1000 WinUsb.sys
  1991. fffff804`4e9c0000 fffff804`4e9d1000 MSKSSRV.sys
  1992. fffff804`52fa0000 fffff804`52fb1000 MSKSSRV.sys
  1993. fffff804`4e630000 fffff804`4e63f000 dump_storpor
  1994. fffff804`4e680000 fffff804`4e6b3000 dump_storahc
  1995. fffff804`4e6e0000 fffff804`4e6fe000 dump_dumpfve
  1996. fffff804`4d280000 fffff804`4d29d000 EhStorClass.
  1997. fffff804`4fd60000 fffff804`4fd7c000 dam.sys
  1998. fffff804`4cdf0000 fffff804`4ce02000 WdBoot.sys
  1999. fffff804`4deb0000 fffff804`4dec1000 hwpolicy.sys
  2000.  
  2001. ====================== Dump #3: BIOS INFORMATION =======================
  2002.  
  2003. [SMBIOS Data Tables v3.0]
  2004. [DMI Version - 0]
  2005. [2.0 Calling Convention - No]
  2006. [Table Size - 1289 bytes]
  2007. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  2008. Vendor American Megatrends Inc.
  2009. BIOS Version P1.10
  2010. BIOS Starting Address Segment f000
  2011. BIOS Release Date 06/19/2018
  2012. BIOS ROM Size 1000000
  2013. BIOS Characteristics
  2014. 07: - PCI Supported
  2015. 11: - Upgradeable FLASH BIOS
  2016. 12: - BIOS Shadowing Supported
  2017. 15: - CD-Boot Supported
  2018. 16: - Selectable Boot Supported
  2019. 17: - BIOS ROM Socketed
  2020. 19: - EDD Supported
  2021. 23: - 1.2MB Floppy Supported
  2022. 24: - 720KB Floppy Supported
  2023. 25: - 2.88MB Floppy Supported
  2024. 26: - Print Screen Device Supported
  2025. 27: - Keyboard Services Supported
  2026. 28: - Serial Services Supported
  2027. 29: - Printer Services Supported
  2028. 32: - BIOS Vendor Reserved
  2029. BIOS Characteristic Extensions
  2030. 00: - ACPI Supported
  2031. 01: - USB Legacy Supported
  2032. 08: - BIOS Boot Specification Supported
  2033. 10: - Specification Reserved
  2034. 11: - Specification Reserved
  2035. BIOS Major Revision 5
  2036. BIOS Minor Revision 13
  2037. EC Firmware Major Revision 255
  2038. EC Firmware Minor Revision 255
  2039. [System Information (Type 1) - Length 27 - Handle 0001h]
  2040. UUID 00000000-0000-0000-0000-000000000000
  2041. Wakeup Type Power Switch
  2042. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2043. Manufacturer ASRock
  2044. Product B450M-HDV
  2045. Version
  2046. Feature Flags 09h
  2047. 57915104: - 57915152: - 7
  2048. ¨6ÿ
  2049. Location
  2050. Chassis Handle 0003h
  2051. Board Type 0ah - Processor/Memory Module
  2052. Number of Child Handles 0
  2053. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2054. Chassis Type Desktop
  2055. Bootup State Safe
  2056. Power Supply State Safe
  2057. Thermal State Safe
  2058. Security Status None
  2059. OEM Defined 0
  2060. Height 0U
  2061. Number of Power Cords 1
  2062. Number of Contained Elements 0
  2063. Contained Element Size 3
  2064. [OEM Strings (Type 11) - Length 5 - Handle 0007h]
  2065. Number of Strings 1
  2066. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
  2067. [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
  2068. Location 03h - SystemBoard/Motherboard
  2069. Use 03h - System Memory
  2070. Memory Error Correction 03h - None
  2071. Maximum Capacity 268435456KB
  2072. Memory Error Inf Handle 000ah
  2073. Number of Memory Devices 2
  2074. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
  2075. Starting Address 00000000h
  2076. Ending Address 00ffffffh
  2077. Memory Array Handle 000bh
  2078. Partition Width 02
  2079. [Cache Information (Type 7) - Length 19 - Handle 000dh]
  2080. Socket Designation L1 - Cache
  2081. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2082. Maximum Cache Size 0240h - 576K
  2083. Installed Size 0240h - 576K
  2084. Supported SRAM Type 0010h - Pipeline-Burst
  2085. Current SRAM Type 0010h - Pipeline-Burst
  2086. Cache Speed 1ns
  2087. Error Correction Type Specification Reserved
  2088. System Cache Type Unified
  2089. Associativity 8-way Set-Associative
  2090. [Cache Information (Type 7) - Length 19 - Handle 000eh]
  2091. Socket Designation L2 - Cache
  2092. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2093. Maximum Cache Size 0c00h - 3072K
  2094. Installed Size 0c00h - 3072K
  2095. Supported SRAM Type 0010h - Pipeline-Burst
  2096. Current SRAM Type 0010h - Pipeline-Burst
  2097. Cache Speed 1ns
  2098. Error Correction Type Specification Reserved
  2099. System Cache Type Unified
  2100. Associativity 8-way Set-Associative
  2101. [Cache Information (Type 7) - Length 19 - Handle 000fh]
  2102. Socket Designation L3 - Cache
  2103. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2104. Maximum Cache Size 4000h - 16384K
  2105. Installed Size 4000h - 16384K
  2106. Supported SRAM Type 0010h - Pipeline-Burst
  2107. Current SRAM Type 0010h - Pipeline-Burst
  2108. Cache Speed 1ns
  2109. Error Correction Type Specification Reserved
  2110. System Cache Type Unified
  2111. Associativity 16-way Set-Associative
  2112. [Processor Information (Type 4) - Length 48 - Handle 0010h]
  2113. Socket Designation AM4
  2114. Processor Type Central Processor
  2115. Processor Family 6bh - Specification Reserved
  2116. Processor Manufacturer Advanced Micro Devices, Inc.
  2117. Processor ID 820f8000fffb8b17
  2118. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  2119. Processor Voltage 8bh - 1.1V
  2120. External Clock 100MHz
  2121. Max Speed 3900MHz
  2122. Current Speed 3400MHz
  2123. Status Enabled Populated
  2124. Processor Upgrade Specification Reserved
  2125. L1 Cache Handle 000dh
  2126. L2 Cache Handle 000eh
  2127. L3 Cache Handle 000fh
  2128. Part Number Unknown
  2129. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
  2130. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  2131. Physical Memory Array Handle 000bh
  2132. Memory Error Info Handle 0011h
  2133. Total Width 64 bits
  2134. Data Width 64 bits
  2135. Size 8192MB
  2136. Form Factor 09h - DIMM
  2137. Device Locator DIMM 0
  2138. Bank Locator P0 CHANNEL A
  2139. Memory Type 1ah - Specification Reserved
  2140. Type Detail 4080h - Synchronous
  2141. Speed 3000MHz
  2142. Manufacturer Unknown
  2143. Part Number F4-3000C16-8GTZR
  2144. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
  2145. Starting Address 00000000h
  2146. Ending Address 00ffffffh
  2147. Memory Device Handle 0012h
  2148. Mem Array Mapped Adr Handle 000ch
  2149. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  2150. [Memory Device (Type 17) - Length 40 - Handle 0015h]
  2151. Physical Memory Array Handle 000bh
  2152. Memory Error Info Handle 0014h
  2153. Total Width 64 bits
  2154. Data Width 64 bits
  2155. Size 8192MB
  2156. Form Factor 09h - DIMM
  2157. Device Locator DIMM 0
  2158. Bank Locator P0 CHANNEL B
  2159. Memory Type 1ah - Specification Reserved
  2160. Type Detail 4080h - Synchronous
  2161. Speed 3000MHz
  2162. Manufacturer Unknown
  2163. Part Number F4-3000C16-8GTZR
  2164. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  2165. Starting Address 00000000h
  2166. Ending Address 00ffffffh
  2167. Memory Device Handle 0015h
  2168. Mem Array Mapped Adr Handle 000ch
  2169.  
  2170. ========================== Dump #3: Extra #1 ===========================
  2171.  
  2172. 3: kd> !verifier
  2173. fffff8044982a800: Unable to get verifier list.
  2174.  
  2175. ========================== Dump #3: Extra #2 ===========================
  2176.  
  2177. 3: kd> !thread
  2178. THREAD ffffba037764b080 Cid 045c.048c Teb: 000000a2c0734000 Win32Thread: ffffba0376f588e0 RUNNING on processor 3
  2179. Not impersonating
  2180. GetUlongFromAddress: unable to read from fffff804498114fc
  2181. Owning Process ffffba0376fa3080 Image: fontdrvhost.ex
  2182. Attached Process N/A Image: N/A
  2183. fffff78000000000: Unable to get shared data
  2184. Wait Start TickCount 7418478
  2185. Context Switch Count 132513 IdealProcessor: 3
  2186. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2187. UserTime 00:00:00.000
  2188. KernelTime 00:00:00.000
  2189. Win32 Start Address 0x00007ff64637d180
  2190. Stack Init ffff830c77ce2c90 Current ffff830c77ce2200
  2191. Base ffff830c77ce3000 Limit ffff830c77cdd000 Call 0000000000000000
  2192. Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2193. Child-SP RetAddr : Args to Child : Call Site
  2194. ffff830c`77ce1d78 fffff804`48fed97f : 00000000`0000004e 00000000`00000099 00000000`0005c532 00000000`00000002 : nt!KeBugCheckEx
  2195. ffff830c`77ce1d80 fffff804`48e9a598 : 8a000003`00000002 00000000`00000004 05d01bae`00000000 00000000`00000000 : nt!MiBadShareCount+0x5b
  2196. ffff830c`77ce1dc0 fffff804`48e9ad6e : ffff830c`77ce2398 ffff830c`77ce2150 00000000`00000000 ffff830c`77ce20a0 : nt!MiDeletePteRun+0x1798
  2197. ffff830c`77ce1fd0 fffff804`48e9b94b : ffff830c`77ce2100 00000000`00000000 ffffa000`e46d6f28 00000000`00000000 : nt!MiDeleteVaTail+0x6e
  2198. ffff830c`77ce2000 fffff804`48e6baf0 : 00000000`00000003 ffff830c`00000000 ffffba03`76fa3550 ffffba03`7764b080 : nt!MiDeletePagablePteRange+0x4ab
  2199. ffff830c`77ce2310 fffff804`49236189 : ffffba03`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiDeleteVad+0x360
  2200. ffff830c`77ce2420 fffff804`49235f62 : ffffba03`7fb373c0 00000000`00000000 ffffba03`76fa3080 00000000`00000000 : nt!MiUnmapVad+0x49
  2201. ffff830c`77ce2450 fffff804`492d951f : 00000000`00000000 00000000`00000009 ffff830c`77ce25a0 00000000`00000001 : nt!MiUnmapViewOfSection+0x152
  2202. ffff830c`77ce2530 ffffb50f`405568f1 : 00000000`00000001 ffff830c`00000000 ffffb50f`404e0000 00000000`0000000e : nt!MmUnmapViewOfSection+0xf
  2203. ffff830c`77ce2560 ffffb50f`40558099 : ffff830c`77ce25e0 ffffb50f`404e0000 ffffb50f`4081c338 00000000`0000000e : win32kfull!UmfdHostLifeTimeManager::MmUnmapViewOfSection+0x49
  2204. ffff830c`77ce2590 ffffb50f`405f15f5 : ffffb542`406f4ba8 ffff830c`77ce2680 ffffb50f`404e0000 ffffb50f`40216a72 : win32kfull!vUnmapFileFD+0x1d
  2205. ffff830c`77ce25c0 ffffb50f`4063820e : ffff830c`77ce26a0 ffffb50f`404e0000 00000000`00000000 00000000`00000009 : win32kfull!EngUnmapFontFileFD+0xd5
  2206. ffff830c`77ce2640 ffffb50f`40556d5e : 00000000`0000000e ffffb542`406f4ba8 ffffb50f`4081c330 ffffb542`00000000 : win32kfull!UmfdEscEngUnmapFontFileFD+0x4e
  2207. ffff830c`77ce2670 ffffb50f`40556a31 : 000000a2`c09ffd30 000000a2`c09ffd30 00000000`00000030 00000000`00000009 : win32kfull!UmfdDispatchEscape+0x1ce
  2208. ffff830c`77ce26e0 ffffb50f`4117b0dd : ffffb50f`411805e4 ffffb50f`4119293b ffffa050`007236a8 ffffa050`28003918 : win32kfull!NtGdiExtEscape+0x101
  2209. ffff830c`77ce2a30 fffff804`490077b8 : 00000000`00000000 00000000`00000000 00000000`00000000 000000a2`c09ffa08 : win32k!NtGdiExtEscape+0x55
  2210. ffff830c`77ce2a90 00007ff9`0e9d3164 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffff830c`77ce2b00)
  2211. 000000a2`c09ffce8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`0e9d3164
  2212.  
  2213.  
  2214. ========================================================================
  2215. ======================= Dump #4: ANALYZE VERBOSE =======================
  2216. ====================== File: 042321-52625-01.dmp =======================
  2217. ========================================================================
  2218.  
  2219. Mini Kernel Dump File: Only registers and stack trace are available
  2220. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  2221. Kernel base = 0xfffff807`14000000 PsLoadedModuleList = 0xfffff807`14c2a3d0
  2222. Debug session time: Fri Apr 23 09:10:00.731 2021 (UTC - 4:00)
  2223. System Uptime: 0 days 1:01:56.217
  2224.  
  2225. BugCheck 1A, {41790, ffffa0800a2fd3e0, d, e}
  2226. Probably caused by : ntkrnlmp.exe ( nt!MiDeletePteRun+17da )
  2227. Followup: MachineOwner
  2228.  
  2229. MEMORY_MANAGEMENT (1a)
  2230. # Any other values for parameter 1 must be individually examined.
  2231.  
  2232. Arguments:
  2233. Arg1: 0000000000041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
  2234. contains the address of the PFN for the corrupted page table page.
  2235. On a 32 bit OS, parameter 2 contains a pointer to the number of used
  2236. PTEs, and parameter 3 contains the number of used PTEs.
  2237. Arg2: ffffa0800a2fd3e0
  2238. Arg3: 000000000000000d
  2239. Arg4: 000000000000000e
  2240.  
  2241. Debugging Details:
  2242. DUMP_CLASS: 1
  2243. DUMP_QUALIFIER: 400
  2244. DUMP_TYPE: 2
  2245. DUMP_FILE_ATTRIBUTES: 0x8
  2246. Kernel Generated Triage Dump
  2247. BUGCHECK_STR: 0x1a_41790
  2248. CUSTOMER_CRASH_COUNT: 1
  2249. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  2250.  
  2251. PROCESS_NAME: chrome.exe
  2252.  
  2253. CURRENT_IRQL: 2
  2254. LAST_CONTROL_TRANSFER: from fffff8071429a5da to fffff807143f5e40
  2255. STACK_TEXT:
  2256. ffff878d`746ecca8 fffff807`1429a5da : 00000000`0000001a 00000000`00041790 ffffa080`0a2fd3e0 00000000`0000000d : nt!KeBugCheckEx
  2257. ffff878d`746eccb0 fffff807`1429ad6e : 00000000`00000000 ffff878d`746ed3c0 fffffea3`40013000 ffff878d`746ed310 : nt!MiDeletePteRun+0x17da
  2258. ffff878d`746ecec0 fffff807`1420bedd : 00000000`00000000 ffffa608`c5adf700 ffff878d`746ed310 fffffea3`40012be0 : nt!MiDeleteVaTail+0x6e
  2259. ffff878d`746ecef0 fffff807`1420bafb : fffffeff`00000000 ffffa608`c5adf700 ffff878d`00000000 ffff878d`746ed360 : nt!MiWalkPageTablesRecursively+0xc6d
  2260. ffff878d`746ecf90 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000001 ffff878d`746ed370 : nt!MiWalkPageTablesRecursively+0x88b
  2261. ffff878d`746ed030 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000002 ffff878d`746ed380 : nt!MiWalkPageTablesRecursively+0x88b
  2262. ffff878d`746ed0d0 fffff807`1425de6b : 00000000`00000000 ffffa608`c5adf700 00000000`00000003 ffff878d`746ed390 : nt!MiWalkPageTablesRecursively+0x88b
  2263. ffff878d`746ed170 fffff807`1429b991 : ffff878d`746ed310 ffffa608`00000000 fffffe9a`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
  2264. ffff878d`746ed270 fffff807`1426baf0 : 00000000`00000001 ffff878d`00000000 ffffa608`c5adf550 ffffa608`c0c870c0 : nt!MiDeletePagablePteRange+0x4f1
  2265. ffff878d`746ed580 fffff807`14635833 : ffffa608`c0c870c0 00000000`00000000 ffffa608`00000000 ffffa608`00000000 : nt!MiDeleteVad+0x360
  2266. ffff878d`746ed690 fffff807`14633aef : ffffa608`c5ec0170 ffffa608`c5ec0170 ffffa608`c5ea8a20 ffffa608`c5adf080 : nt!MiCleanVad+0x43
  2267. ffff878d`746ed6c0 fffff807`1465dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa608`c5adf080 : nt!MmCleanProcessAddressSpace+0x137
  2268. ffff878d`746ed740 fffff807`14706a96 : ffffa608`c5adf080 ffff8a86`874af060 ffff878d`746ed990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
  2269. ffff878d`746ed7d0 fffff807`146d2918 : 00000000`c0000005 ffffa608`c5adf001 00000000`00000001 0000006c`775d7000 : nt!PspExitThread+0x5f6
  2270. ffff878d`746ed8d0 fffff807`14267fb7 : 00000000`00000000 fffff807`14265b77 00000000`00000000 00000000`00000000 : nt!KiSchedulerApcTerminate+0x38
  2271. ffff878d`746ed910 fffff807`143fa3e0 : 00000000`00000000 ffff878d`746ed9c0 ffffa608`0000000b ffffa608`00000000 : nt!KiDeliverApc+0x487
  2272. ffff878d`746ed9c0 fffff807`1440785f : ffffa608`c0c870c0 00000000`00000000 00000000`00000000 ffffa608`00000000 : nt!KiInitiateUserApc+0x70
  2273. ffff878d`746edb00 00007fff`c9670714 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
  2274. 0000006c`7f5ff838 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`c9670714
  2275. STACK_COMMAND: kb
  2276. THREAD_SHA1_HASH_MOD_FUNC: 12362c45d4d7c42f8f190b16d3b1472a08d5d965
  2277. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 95e48e7abba7841402fde55f75b269479e1fb214
  2278. THREAD_SHA1_HASH_MOD: 82d14546c43bd06881f781d6d197c4c7f7ceb9cb
  2279. FOLLOWUP_IP:
  2280. nt!MiDeletePteRun+17da
  2281. fffff807`1429a5da cc int 3
  2282. FAULT_INSTR_CODE: cccccccc
  2283. SYMBOL_STACK_INDEX: 1
  2284. SYMBOL_NAME: nt!MiDeletePteRun+17da
  2285. FOLLOWUP_NAME: MachineOwner
  2286. MODULE_NAME: nt
  2287.  
  2288. IMAGE_NAME: ntkrnlmp.exe
  2289.  
  2290. DEBUG_FLR_IMAGE_TIMESTAMP: ea0877a
  2291. IMAGE_VERSION: 10.0.19041.928
  2292. BUCKET_ID_FUNC_OFFSET: 17da
  2293. FAILURE_BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
  2294. BUCKET_ID: OLD_IMAGE_ntkrnlmp.exe
  2295. PRIMARY_PROBLEM_CLASS: OLD_IMAGE_ntkrnlmp.exe
  2296. TARGET_TIME: 2021-04-23T13:10:00.000Z
  2297. SUITE_MASK: 272
  2298. PRODUCT_TYPE: 1
  2299. USER_LCID: 0
  2300. FAILURE_ID_HASH_STRING: km:old_image_ntkrnlmp.exe
  2301. FAILURE_ID_HASH: {9c0c4046-5b69-0146-b800-16bdd4721e0b}
  2302. Followup: MachineOwner
  2303.  
  2304. ====================== Dump #4: 3RD PARTY DRIVERS ======================
  2305.  
  2306. Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
  2307. Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
  2308. Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  2309. Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  2310. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2311. Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
  2312. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  2313. Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
  2314. Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  2315. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  2316. Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
  2317. Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
  2318. Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
  2319. Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
  2320. Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
  2321. Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  2322. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  2323. May 14 2019 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  2324. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  2325. Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  2326. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2327. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2328. Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  2329. Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
  2330. May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  2331. Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  2332. Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
  2333. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  2334. Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
  2335. Dec 03 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  2336. Feb 25 2021 - EasyAntiCheat.sys - EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
  2337. Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
  2338.  
  2339. ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
  2340.  
  2341. Image name: AsIO.sys
  2342. Search : https://www.google.com/search?q=AsIO.sys
  2343. ADA Info : ASUS Input Output driver http://www.asus.com/
  2344. Timestamp : Wed Aug 22 2012
  2345.  
  2346. Image name: ambakdrv.sys
  2347. Search : https://www.google.com/search?q=ambakdrv.sys
  2348. ADA Info : Aomei driver (Aomei Technology Co)
  2349. Timestamp : Tue Dec 25 2012
  2350.  
  2351. Image name: ammntdrv.sys
  2352. Search : https://www.google.com/search?q=ammntdrv.sys
  2353. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  2354. Timestamp : Tue Dec 25 2012
  2355.  
  2356. Image name: BazisVirtualCDBus.sys
  2357. Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
  2358. ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  2359. Timestamp : Sat Sep 26 2015
  2360.  
  2361. Image name: amdgpio3.sys
  2362. Search : https://www.google.com/search?q=amdgpio3.sys
  2363. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2364. Timestamp : Mon Mar 14 2016
  2365.  
  2366. Image name: hmatap.sys
  2367. Search : https://www.google.com/search?q=hmatap.sys
  2368. ADA Info : The OpenVPN Project TAP driver
  2369. Timestamp : Fri Aug 26 2016
  2370.  
  2371. Image name: amdpsp.sys
  2372. Search : https://www.google.com/search?q=amdpsp.sys
  2373. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  2374. Timestamp : Mon Jun 5 2017
  2375.  
  2376. Image name: AmdTools64.sys
  2377. Search : https://www.google.com/search?q=AmdTools64.sys
  2378. ADA Info : AMD Special Tools driver
  2379. Timestamp : Thu Feb 15 2018
  2380.  
  2381. Image name: RTKVHD64.sys
  2382. Search : https://www.google.com/search?q=RTKVHD64.sys
  2383. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  2384. Timestamp : Tue Mar 20 2018
  2385.  
  2386. Image name: AMDPCIDev.sys
  2387. Search : https://www.google.com/search?q=AMDPCIDev.sys
  2388. ADA Info : Advanced Micro Devices PCI Device driver
  2389. Timestamp : Thu Apr 12 2018
  2390.  
  2391. Image name: GLCKIO2.sys
  2392. Search : https://www.google.com/search?q=GLCKIO2.sys
  2393. ADA Info : ASUS RGB driver
  2394. Timestamp : Mon Apr 23 2018
  2395.  
  2396. Image name: NewTek_AudioPortClass.sys
  2397. Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
  2398. ADA Info : NewTek Audio Port Class driver
  2399. Timestamp : Thu Aug 9 2018
  2400.  
  2401. Image name: NewTek_WDM_KS.sys
  2402. Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
  2403. ADA Info : NewTek WDM Kernel Streaming driver
  2404. Timestamp : Thu Aug 9 2018
  2405.  
  2406. Image name: ViGEmBus.sys
  2407. Search : https://www.google.com/search?q=ViGEmBus.sys
  2408. ADA Info : Oculus Virtual Gamepad Emulation Bus driver
  2409. Timestamp : Wed Oct 17 2018
  2410.  
  2411. Image name: idmwfp.sys
  2412. Search : https://www.google.com/search?q=idmwfp.sys
  2413. ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
  2414. Timestamp : Wed Dec 19 2018
  2415.  
  2416. Image name: HWiNFO64A.SYS
  2417. Search : https://www.google.com/search?q=HWiNFO64A.SYS
  2418. ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  2419. Timestamp : Thu Mar 14 2019
  2420.  
  2421. Image name: nvvad64v.sys
  2422. Search : https://www.google.com/search?q=nvvad64v.sys
  2423. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  2424. Timestamp : Thu Mar 14 2019
  2425.  
  2426. Image name: UcmCxUcsiNvppc.sys
  2427. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  2428. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  2429. Timestamp : Tue May 14 2019
  2430.  
  2431. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  2432. Image name: rt640x64.sys
  2433. Search : https://www.google.com/search?q=rt640x64.sys
  2434. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  2435. Timestamp : Fri May 24 2019
  2436. File version: 9.1.410.2015
  2437. Product version: 9.1.410.2015
  2438. File flags: 8 (Mask 3F) Private
  2439. File OS: 40004 NT Win32
  2440. File type: 3.6 Driver
  2441. File date: 00000000.00000000
  2442. CompanyName: Realtek
  2443. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  2444. InternalName: rt640x64.sys
  2445. OriginalFilename: rt640x64.sys
  2446. ProductVersion: 9.001.0410.2015
  2447. FileVersion: 9.001.0410.2015
  2448. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  2449. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  2450.  
  2451. Image name: RTCore64.sys
  2452. Search : https://www.google.com/search?q=RTCore64.sys
  2453. ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  2454. Timestamp : Thu Sep 19 2019
  2455.  
  2456. Image name: amdgpio2.sys
  2457. Search : https://www.google.com/search?q=amdgpio2.sys
  2458. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2459. Timestamp : Sun Sep 29 2019
  2460.  
  2461. Image name: nvvhci.sys
  2462. Search : https://www.google.com/search?q=nvvhci.sys
  2463. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2464. Timestamp : Fri Jan 10 2020
  2465.  
  2466. Image name: ene.sys
  2467. Search : https://www.google.com/search?q=ene.sys
  2468. ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  2469. Timestamp : Sat Mar 21 2020
  2470.  
  2471. Image name: droidcam.sys
  2472. Search : https://www.google.com/search?q=droidcam.sys
  2473. ADA Info : Droidcam Virtual Device driver
  2474. Timestamp : Fri Apr 10 2020
  2475.  
  2476. Image name: amwrtdrv.sys
  2477. Search : https://www.google.com/search?q=amwrtdrv.sys
  2478. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  2479. Timestamp : Tue May 26 2020
  2480.  
  2481. Image name: NvModuleTracker.sys
  2482. Search : https://www.google.com/search?q=NvModuleTracker.sys
  2483. ADA Info : NVIDIA Module Tracker driver
  2484. Timestamp : Tue Aug 11 2020
  2485.  
  2486. Image name: droidcamvideo.sys
  2487. Search : https://www.google.com/search?q=droidcamvideo.sys
  2488. ADA Info : Droidcam Virtual Device WDM Video Capture driver
  2489. Timestamp : Sat Oct 3 2020
  2490.  
  2491. Image name: nvhda64v.sys
  2492. Search : https://www.google.com/search?q=nvhda64v.sys
  2493. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  2494. Timestamp : Fri Oct 16 2020
  2495.  
  2496. Image name: iVCam.sys
  2497. Search : https://www.google.com/search?q=iVCam.sys
  2498. ADA Info : e2eSoft MyCam Camera driver
  2499. Timestamp : Mon Nov 2 2020
  2500.  
  2501. Image name: nvlddmkm.sys
  2502. Search : https://www.google.com/search?q=nvlddmkm.sys
  2503. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  2504. Timestamp : Thu Dec 3 2020
  2505.  
  2506. Image name: EasyAntiCheat.sys
  2507. Search : https://www.google.com/search?q=EasyAntiCheat.sys
  2508. ADA Info : EasyAntiCheat is a anti-cheat driver (EasyAntiCheat Oy.) https://support.easyanticheat.net/
  2509. Timestamp : Thu Feb 25 2021
  2510.  
  2511. Image name: vgk.sys
  2512. Search : https://www.google.com/search?q=vgk.sys
  2513. ADA Info : Vanguard Anti-Cheat driver
  2514. Timestamp : Thu Mar 25 2021
  2515.  
  2516. ====================== Dump #4: MICROSOFT DRIVERS ======================
  2517.  
  2518. ACPI.sys ACPI Driver for NT (Microsoft)
  2519. acpiex.sys ACPIEx Driver (Microsoft)
  2520. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  2521. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  2522. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  2523. ahcache.sys Application Compatibility Cache (Microsoft)
  2524. amdppm.sys Processor Device Driver
  2525. bam.sys BAM Kernal driver (Microsoft)
  2526. BasicDisplay.sys Basic Display driver (Microsoft)
  2527. BasicRender.sys Basic Render driver (Microsoft)
  2528. Beep.SYS BEEP driver (Microsoft)
  2529. bindflt.sys Windows Bind Filter driver (Microsoft)
  2530. BOOTVID.dll VGA Boot Driver (Microsoft)
  2531. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  2532. cdd.dll Canonical Display Driver (Microsoft)
  2533. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  2534. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  2535. CI.dll Code Integrity Module (Microsoft)
  2536. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  2537. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  2538. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  2539. CLFS.SYS Common Log File System Driver (Microsoft)
  2540. clipsp.sys CLIP Service (Microsoft)
  2541. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  2542. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  2543. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  2544. condrv.sys Console Driver (Microsoft)
  2545. crashdmp.sys Crash Dump driver (Microsoft)
  2546. csc.sys Windows Client Side Caching driver (Microsoft)
  2547. dfsc.sys DFS Namespace Client Driver (Microsoft)
  2548. disk.sys PnP Disk Driver (Microsoft)
  2549. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  2550. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2551. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2552. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  2553. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  2554. dxgmms2.sys DirectX Graphics MMS
  2555. exfat.SYS Extended FAT File System driver (Microsoft)
  2556. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  2557. fileinfo.sys FileInfo Filter Driver (Microsoft)
  2558. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  2559. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  2560. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  2561. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  2562. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  2563. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  2564. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  2565. HIDCLASS.SYS Hid Class Library (Microsoft)
  2566. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  2567. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  2568. HTTP.sys HTTP Protocol Stack (Microsoft)
  2569. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  2570. intelpep.sys Intel Power Engine Plugin (Microsoft)
  2571. IntelTA.sys Intel Telemetry Driver
  2572. iorate.sys I/O rate control Filter (Microsoft)
  2573. kbdclass.sys Keyboard Class Driver (Microsoft)
  2574. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  2575. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  2576. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  2577. ks.sys Kernal CSA Library (Microsoft)
  2578. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  2579. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  2580. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  2581. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  2582. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  2583. mcupdate.dll Media Center Update (Microsoft)
  2584. mmcss.sys MMCSS Driver (Microsoft)
  2585. monitor.sys Monitor Driver (Microsoft)
  2586. mouclass.sys Mouse Class Driver (Microsoft)
  2587. mouhid.sys HID Mouse Filter Driver (Microsoft)
  2588. mountmgr.sys Mount Point Manager (Microsoft)
  2589. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  2590. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  2591. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  2592. Msfs.SYS Mailslot driver (Microsoft)
  2593. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  2594. msisadrv.sys ISA Driver (Microsoft)
  2595. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  2596. msquic.sys Windows QUIC Driver
  2597. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  2598. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  2599. mssmbios.sys System Management BIOS driver (Microsoft)
  2600. mup.sys Multiple UNC Provider driver (Microsoft)
  2601. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  2602. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  2603. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  2604. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  2605. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  2606. NDProxy.sys NDIS Proxy driver (Microsoft)
  2607. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  2608. netbios.sys NetBIOS Interface driver (Microsoft)
  2609. netbt.sys MBT Transport driver (Microsoft)
  2610. NETIO.SYS Network I/O Subsystem (Microsoft)
  2611. Npfs.SYS NPFS driver (Microsoft)
  2612. npsvctrig.sys Named pipe service triggers (Microsoft)
  2613. nsiproxy.sys NSI Proxy driver (Microsoft)
  2614. Ntfs.sys NT File System Driver (Microsoft)
  2615. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  2616. ntosext.sys NTOS Extension Host driver (Microsoft)
  2617. Null.SYS NULL Driver (Microsoft)
  2618. pacer.sys QoS Packet Scheduler (Microsoft)
  2619. parport.sys Parallel Port Driver (Microsoft)
  2620. partmgr.sys Partition driver (Microsoft)
  2621. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  2622. pcw.sys Performance Counter Driver (Microsoft)
  2623. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  2624. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  2625. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  2626. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2627. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  2628. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  2629. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  2630. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  2631. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2632. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2633. rdyboost.sys ReadyBoost Driver (Microsoft)
  2634. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2635. serenum.sys Serial Port Enumerator (Microsoft)
  2636. serial.sys Serial Device Driver
  2637. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2638. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2639. spaceport.sys Storage Spaces driver (Microsoft)
  2640. srv2.sys Smb 2.0 Server driver (Microsoft)
  2641. srvnet.sys Server Network driver (Microsoft)
  2642. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  2643. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2644. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2645. STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
  2646. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2647. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2648. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2649. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2650. TDI.SYS TDI Wrapper driver (Microsoft)
  2651. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2652. tm.sys Kernel Transaction Manager driver (Microsoft)
  2653. uaspstor.sys UASP driver (Microsoft)
  2654. UcmCx.sys USB Connector Manager KMDF Class Extension
  2655. ucx01000.sys USB Controller Extension (Microsoft)
  2656. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2657. usbaudio.sys USB Audio Class Driver (Microsoft)
  2658. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2659. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2660. UsbHub3.sys USB3 HUB driver (Microsoft)
  2661. USBXHCI.SYS USB XHCI driver (Microsoft)
  2662. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2663. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2664. volmgr.sys Volume Manager Driver (Microsoft)
  2665. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2666. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2667. volume.sys Volume driver (Microsoft)
  2668. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2669. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  2670. watchdog.sys Watchdog driver (Microsoft)
  2671. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2672. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2673. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2674. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2675. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2676. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2677. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2678. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2679. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2680. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2681. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2682. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2683. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2684. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2685. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2686. Wof.sys Windows Overlay Filter (Microsoft)
  2687. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  2688. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2689. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  2690.  
  2691. ====================== Dump #4: UNLOADED MODULES =======================
  2692.  
  2693. fffff807`5a5a0000 fffff807`5a5b1000 MSKSSRV.sys
  2694. fffff807`5a580000 fffff807`5a591000 MSKSSRV.sys
  2695. fffff807`5a550000 fffff807`5a561000 MSKSSRV.sys
  2696. fffff807`198f0000 fffff807`19901000 MSKSSRV.sys
  2697. fffff807`198e0000 fffff807`198ef000 dump_storpor
  2698. fffff807`19930000 fffff807`19963000 dump_storahc
  2699. fffff807`19990000 fffff807`199ae000 dump_dumpfve
  2700. fffff807`18280000 fffff807`1829d000 EhStorClass.
  2701. fffff807`1ae00000 fffff807`1ae1c000 dam.sys
  2702. fffff807`17df0000 fffff807`17e02000 WdBoot.sys
  2703. fffff807`18eb0000 fffff807`18ec1000 hwpolicy.sys
  2704.  
  2705. ====================== Dump #4: BIOS INFORMATION =======================
  2706.  
  2707. [SMBIOS Data Tables v3.0]
  2708. [DMI Version - 0]
  2709. [2.0 Calling Convention - No]
  2710. [Table Size - 1289 bytes]
  2711. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  2712. Vendor American Megatrends Inc.
  2713. BIOS Version P1.10
  2714. BIOS Starting Address Segment f000
  2715. BIOS Release Date 06/19/2018
  2716. BIOS ROM Size 1000000
  2717. BIOS Characteristics
  2718. 07: - PCI Supported
  2719. 11: - Upgradeable FLASH BIOS
  2720. 12: - BIOS Shadowing Supported
  2721. 15: - CD-Boot Supported
  2722. 16: - Selectable Boot Supported
  2723. 17: - BIOS ROM Socketed
  2724. 19: - EDD Supported
  2725. 23: - 1.2MB Floppy Supported
  2726. 24: - 720KB Floppy Supported
  2727. 25: - 2.88MB Floppy Supported
  2728. 26: - Print Screen Device Supported
  2729. 27: - Keyboard Services Supported
  2730. 28: - Serial Services Supported
  2731. 29: - Printer Services Supported
  2732. 32: - BIOS Vendor Reserved
  2733. BIOS Characteristic Extensions
  2734. 00: - ACPI Supported
  2735. 01: - USB Legacy Supported
  2736. 08: - BIOS Boot Specification Supported
  2737. 10: - Specification Reserved
  2738. 11: - Specification Reserved
  2739. BIOS Major Revision 5
  2740. BIOS Minor Revision 13
  2741. EC Firmware Major Revision 255
  2742. EC Firmware Minor Revision 255
  2743. [System Information (Type 1) - Length 27 - Handle 0001h]
  2744. UUID 00000000-0000-0000-0000-000000000000
  2745. Wakeup Type Power Switch
  2746. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2747. Manufacturer ASRock
  2748. Product B450M-HDV
  2749. Version
  2750. Feature Flags 09h
  2751. 57915104: - 57915152: - 7
  2752. ¨6ÿ
  2753. Location
  2754. Chassis Handle 0003h
  2755. Board Type 0ah - Processor/Memory Module
  2756. Number of Child Handles 0
  2757. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2758. Chassis Type Desktop
  2759. Bootup State Safe
  2760. Power Supply State Safe
  2761. Thermal State Safe
  2762. Security Status None
  2763. OEM Defined 0
  2764. Height 0U
  2765. Number of Power Cords 1
  2766. Number of Contained Elements 0
  2767. Contained Element Size 3
  2768. [OEM Strings (Type 11) - Length 5 - Handle 0007h]
  2769. Number of Strings 1
  2770. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
  2771. [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
  2772. Location 03h - SystemBoard/Motherboard
  2773. Use 03h - System Memory
  2774. Memory Error Correction 03h - None
  2775. Maximum Capacity 268435456KB
  2776. Memory Error Inf Handle 000ah
  2777. Number of Memory Devices 2
  2778. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
  2779. Starting Address 00000000h
  2780. Ending Address 00ffffffh
  2781. Memory Array Handle 000bh
  2782. Partition Width 02
  2783. [Cache Information (Type 7) - Length 19 - Handle 000dh]
  2784. Socket Designation L1 - Cache
  2785. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2786. Maximum Cache Size 0240h - 576K
  2787. Installed Size 0240h - 576K
  2788. Supported SRAM Type 0010h - Pipeline-Burst
  2789. Current SRAM Type 0010h - Pipeline-Burst
  2790. Cache Speed 1ns
  2791. Error Correction Type Specification Reserved
  2792. System Cache Type Unified
  2793. Associativity 8-way Set-Associative
  2794. [Cache Information (Type 7) - Length 19 - Handle 000eh]
  2795. Socket Designation L2 - Cache
  2796. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2797. Maximum Cache Size 0c00h - 3072K
  2798. Installed Size 0c00h - 3072K
  2799. Supported SRAM Type 0010h - Pipeline-Burst
  2800. Current SRAM Type 0010h - Pipeline-Burst
  2801. Cache Speed 1ns
  2802. Error Correction Type Specification Reserved
  2803. System Cache Type Unified
  2804. Associativity 8-way Set-Associative
  2805. [Cache Information (Type 7) - Length 19 - Handle 000fh]
  2806. Socket Designation L3 - Cache
  2807. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2808. Maximum Cache Size 4000h - 16384K
  2809. Installed Size 4000h - 16384K
  2810. Supported SRAM Type 0010h - Pipeline-Burst
  2811. Current SRAM Type 0010h - Pipeline-Burst
  2812. Cache Speed 1ns
  2813. Error Correction Type Specification Reserved
  2814. System Cache Type Unified
  2815. Associativity 16-way Set-Associative
  2816. [Processor Information (Type 4) - Length 48 - Handle 0010h]
  2817. Socket Designation AM4
  2818. Processor Type Central Processor
  2819. Processor Family 6bh - Specification Reserved
  2820. Processor Manufacturer Advanced Micro Devices, Inc.
  2821. Processor ID 820f8000fffb8b17
  2822. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  2823. Processor Voltage 8bh - 1.1V
  2824. External Clock 100MHz
  2825. Max Speed 3900MHz
  2826. Current Speed 3400MHz
  2827. Status Enabled Populated
  2828. Processor Upgrade Specification Reserved
  2829. L1 Cache Handle 000dh
  2830. L2 Cache Handle 000eh
  2831. L3 Cache Handle 000fh
  2832. Part Number Unknown
  2833. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
  2834. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  2835. Physical Memory Array Handle 000bh
  2836. Memory Error Info Handle 0011h
  2837. Total Width 64 bits
  2838. Data Width 64 bits
  2839. Size 8192MB
  2840. Form Factor 09h - DIMM
  2841. Device Locator DIMM 0
  2842. Bank Locator P0 CHANNEL A
  2843. Memory Type 1ah - Specification Reserved
  2844. Type Detail 4080h - Synchronous
  2845. Speed 3000MHz
  2846. Manufacturer Unknown
  2847. Part Number F4-3000C16-8GTZR
  2848. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
  2849. Starting Address 00000000h
  2850. Ending Address 00ffffffh
  2851. Memory Device Handle 0012h
  2852. Mem Array Mapped Adr Handle 000ch
  2853. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  2854. [Memory Device (Type 17) - Length 40 - Handle 0015h]
  2855. Physical Memory Array Handle 000bh
  2856. Memory Error Info Handle 0014h
  2857. Total Width 64 bits
  2858. Data Width 64 bits
  2859. Size 8192MB
  2860. Form Factor 09h - DIMM
  2861. Device Locator DIMM 0
  2862. Bank Locator P0 CHANNEL B
  2863. Memory Type 1ah - Specification Reserved
  2864. Type Detail 4080h - Synchronous
  2865. Speed 3000MHz
  2866. Manufacturer Unknown
  2867. Part Number F4-3000C16-8GTZR
  2868. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  2869. Starting Address 00000000h
  2870. Ending Address 00ffffffh
  2871. Memory Device Handle 0015h
  2872. Mem Array Mapped Adr Handle 000ch
  2873.  
  2874. ========================== Dump #4: Extra #1 ===========================
  2875.  
  2876. 4: kd> !verifier
  2877. fffff80714c2a800: Unable to get verifier list.
  2878.  
  2879. ========================== Dump #4: Extra #2 ===========================
  2880.  
  2881. 4: kd> !thread
  2882. THREAD ffffa608c0c870c0 Cid 0c10.0c04 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 4
  2883. Not impersonating
  2884. GetUlongFromAddress: unable to read from fffff80714c114fc
  2885. Owning Process ffffa608c5adf080 Image: chrome.exe
  2886. Attached Process N/A Image: N/A
  2887. fffff78000000000: Unable to get shared data
  2888. Wait Start TickCount 237837
  2889. Context Switch Count 41 IdealProcessor: 9
  2890. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2891. UserTime 00:00:00.000
  2892. KernelTime 00:00:00.000
  2893. Win32 Start Address 0x00007fff7d1bd970
  2894. Stack Init ffff878d746edc90 Current ffff878d746ecb20
  2895. Base ffff878d746ee000 Limit ffff878d746e8000 Call 0000000000000000
  2896. Priority 7 BasePriority 6 PriorityDecrement 0 IoPriority 0 PagePriority 1
  2897. Child-SP RetAddr : Args to Child : Call Site
  2898. ffff878d`746ecca8 fffff807`1429a5da : 00000000`0000001a 00000000`00041790 ffffa080`0a2fd3e0 00000000`0000000d : nt!KeBugCheckEx
  2899. ffff878d`746eccb0 fffff807`1429ad6e : 00000000`00000000 ffff878d`746ed3c0 fffffea3`40013000 ffff878d`746ed310 : nt!MiDeletePteRun+0x17da
  2900. ffff878d`746ecec0 fffff807`1420bedd : 00000000`00000000 ffffa608`c5adf700 ffff878d`746ed310 fffffea3`40012be0 : nt!MiDeleteVaTail+0x6e
  2901. ffff878d`746ecef0 fffff807`1420bafb : fffffeff`00000000 ffffa608`c5adf700 ffff878d`00000000 ffff878d`746ed360 : nt!MiWalkPageTablesRecursively+0xc6d
  2902. ffff878d`746ecf90 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000001 ffff878d`746ed370 : nt!MiWalkPageTablesRecursively+0x88b
  2903. ffff878d`746ed030 fffff807`1420bafb : fffffeff`7fa8d000 ffffa608`c5adf700 ffff878d`00000002 ffff878d`746ed380 : nt!MiWalkPageTablesRecursively+0x88b
  2904. ffff878d`746ed0d0 fffff807`1425de6b : 00000000`00000000 ffffa608`c5adf700 00000000`00000003 ffff878d`746ed390 : nt!MiWalkPageTablesRecursively+0x88b
  2905. ffff878d`746ed170 fffff807`1429b991 : ffff878d`746ed310 ffffa608`00000000 fffffe9a`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
  2906. ffff878d`746ed270 fffff807`1426baf0 : 00000000`00000001 ffff878d`00000000 ffffa608`c5adf550 ffffa608`c0c870c0 : nt!MiDeletePagablePteRange+0x4f1
  2907. ffff878d`746ed580 fffff807`14635833 : ffffa608`c0c870c0 00000000`00000000 ffffa608`00000000 ffffa608`00000000 : nt!MiDeleteVad+0x360
  2908. ffff878d`746ed690 fffff807`14633aef : ffffa608`c5ec0170 ffffa608`c5ec0170 ffffa608`c5ea8a20 ffffa608`c5adf080 : nt!MiCleanVad+0x43
  2909. ffff878d`746ed6c0 fffff807`1465dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa608`c5adf080 : nt!MmCleanProcessAddressSpace+0x137
  2910. ffff878d`746ed740 fffff807`14706a96 : ffffa608`c5adf080 ffff8a86`874af060 ffff878d`746ed990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
  2911. ffff878d`746ed7d0 fffff807`146d2918 : 00000000`c0000005 ffffa608`c5adf001 00000000`00000001 0000006c`775d7000 : nt!PspExitThread+0x5f6
  2912. ffff878d`746ed8d0 fffff807`14267fb7 : 00000000`00000000 fffff807`14265b77 00000000`00000000 00000000`00000000 : nt!KiSchedulerApcTerminate+0x38
  2913. ffff878d`746ed910 fffff807`143fa3e0 : 00000000`00000000 ffff878d`746ed9c0 ffffa608`0000000b ffffa608`00000000 : nt!KiDeliverApc+0x487
  2914. ffff878d`746ed9c0 fffff807`1440785f : ffffa608`c0c870c0 00000000`00000000 00000000`00000000 ffffa608`00000000 : nt!KiInitiateUserApc+0x70
  2915. ffff878d`746edb00 00007fff`c9670714 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f (TrapFrame @ ffff878d`746edb00)
  2916. 0000006c`7f5ff838 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`c9670714
  2917.  
  2918.  
  2919. ========================================================================
  2920. ======================= Dump #5: ANALYZE VERBOSE =======================
  2921. ====================== File: 042321-40500-01.dmp =======================
  2922. ========================================================================
  2923.  
  2924. Mini Kernel Dump File: Only registers and stack trace are available
  2925. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  2926. Kernel base = 0xfffff807`6e200000 PsLoadedModuleList = 0xfffff807`6ee2a3d0
  2927. Debug session time: Fri Apr 23 13:42:48.525 2021 (UTC - 4:00)
  2928. System Uptime: 0 days 0:51:44.155
  2929.  
  2930. BugCheck 1A, {41792, fffff63ffae5abb8, 100000, 0}
  2931. Probably caused by : memory_corruption ( ONE_BIT )
  2932. Followup: MachineOwner
  2933.  
  2934. MEMORY_MANAGEMENT (1a)
  2935. # Any other values for parameter 1 must be individually examined.
  2936.  
  2937. Arguments:
  2938. Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
  2939. the PTE. Parameters 3/4 contain the low/high parts of the PTE.
  2940. Arg2: fffff63ffae5abb8
  2941. Arg3: 0000000000100000
  2942. Arg4: 0000000000000000
  2943.  
  2944. Debugging Details:
  2945. DUMP_CLASS: 1
  2946. DUMP_QUALIFIER: 400
  2947. DUMP_TYPE: 2
  2948. DUMP_FILE_ATTRIBUTES: 0x8
  2949. Kernel Generated Triage Dump
  2950. MEMORY_CORRUPTOR: ONE_BIT
  2951. BUGCHECK_STR: 0x1a_41792
  2952. CUSTOMER_CRASH_COUNT: 1
  2953. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  2954.  
  2955. PROCESS_NAME: chrome.exe
  2956.  
  2957. CURRENT_IRQL: 2
  2958. STACK_TEXT:
  2959. fffffe8b`58be1db8 fffff807`6e49d0fa : 00000000`0000001a 00000000`00041792 fffff63f`fae5abb8 00000000`00100000 : nt!KeBugCheckEx
  2960. fffffe8b`58be1dc0 fffff807`6e40b9e6 : 00000000`00000000 00000000`00000000 00000000`00000b30 fffff63f`fae5abb8 : nt!MiDeleteVa+0x153a
  2961. fffffe8b`58be1ec0 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000000 fffffe8b`58be2330 : nt!MiWalkPageTablesRecursively+0x776
  2962. fffffe8b`58be1f60 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000001 fffffe8b`58be2340 : nt!MiWalkPageTablesRecursively+0x88b
  2963. fffffe8b`58be2000 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000002 fffffe8b`58be2350 : nt!MiWalkPageTablesRecursively+0x88b
  2964. fffffe8b`58be20a0 fffff807`6e45de6b : 00000000`00000000 ffffa70b`f4065740 00000000`00000003 fffffe8b`58be2360 : nt!MiWalkPageTablesRecursively+0x88b
  2965. fffffe8b`58be2140 fffff807`6e49b991 : fffffe8b`58be22e0 ffffa70b`00000000 fffff63e`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
  2966. fffffe8b`58be2240 fffff807`6e46baf0 : 00000000`00000001 fffffe8b`00000000 ffffa70b`f4065590 ffffa70b`ee8ca5c0 : nt!MiDeletePagablePteRange+0x4f1
  2967. fffffe8b`58be2550 fffff807`6e836189 : ffffa70b`f70e2600 00000000`00000000 ffffa70b`00000000 ffffa70b`00000000 : nt!MiDeleteVad+0x360
  2968. fffffe8b`58be2660 fffff807`6e835820 : ffffa70b`f70e2600 ffffa70b`f1d6a2d0 ffffa70b`ee8ca5c0 00000000`00000000 : nt!MiUnmapVad+0x49
  2969. fffffe8b`58be2690 fffff807`6e833aef : ffffa70b`f70e0b20 ffffa70b`f70e0b20 ffffa70b`f70e2600 ffffa70b`f40650c0 : nt!MiCleanVad+0x30
  2970. fffffe8b`58be26c0 fffff807`6e85dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa70b`f40650c0 : nt!MmCleanProcessAddressSpace+0x137
  2971. fffffe8b`58be2740 fffff807`6e906a96 : ffffa70b`f40650c0 ffff850f`4a5a1410 fffffe8b`58be2990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
  2972. fffffe8b`58be27d0 fffff807`6e8d2918 : 00000000`00000000 00000000`00000001 fffffe8b`58be29e0 0000005d`e20ad000 : nt!PspExitThread+0x5f6
  2973. fffffe8b`58be28d0 fffff807`6e467fb7 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff807`6e40ecc6 : nt!KiSchedulerApcTerminate+0x38
  2974. fffffe8b`58be2910 fffff807`6e5fa3e0 : 00000000`00000000 fffffe8b`58be29c0 fffffe8b`58be2b80 0000005d`00000000 : nt!KiDeliverApc+0x487
  2975. fffffe8b`58be29c0 fffff807`6e60785f : ffffa70b`ee8ca5c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
  2976. fffffe8b`58be2b00 00007ffc`82eccda4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
  2977. 0000005d`e61ff768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`82eccda4
  2978. STACK_COMMAND: kb
  2979. THREAD_SHA1_HASH_MOD_FUNC: c091b23167a9747ad03bff889b67c15ac126f525
  2980. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 707cf26a6367419a86e7f2923297247db4b1819c
  2981. THREAD_SHA1_HASH_MOD: 82d14546c43bd06881f781d6d197c4c7f7ceb9cb
  2982. SYMBOL_NAME: ONE_BIT
  2983. FOLLOWUP_NAME: MachineOwner
  2984. MODULE_NAME: hardware
  2985.  
  2986. IMAGE_NAME: memory_corruption
  2987.  
  2988. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2989. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  2990. BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  2991. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
  2992. TARGET_TIME: 2021-04-23T17:42:48.000Z
  2993. SUITE_MASK: 272
  2994. PRODUCT_TYPE: 1
  2995. USER_LCID: 0
  2996. FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
  2997. FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
  2998. Followup: MachineOwner
  2999.  
  3000. ====================== Dump #5: 3RD PARTY DRIVERS ======================
  3001.  
  3002. Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
  3003. Dec 25 2012 - ambakdrv.sys - Aomei driver (Aomei Technology Co)
  3004. Dec 25 2012 - ammntdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  3005. Sep 26 2015 - BazisVirtualCDBus.sys - WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  3006. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  3007. Aug 26 2016 - hmatap.sys - The OpenVPN Project TAP driver
  3008. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  3009. Feb 15 2018 - AmdTools64.sys - AMD Special Tools driver
  3010. Mar 20 2018 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  3011. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  3012. Apr 23 2018 - GLCKIO2.sys - ASUS RGB driver
  3013. Aug 09 2018 - NewTek_AudioPortClass.sys - NewTek Audio Port Class driver
  3014. Aug 09 2018 - NewTek_WDM_KS.sys - NewTek WDM Kernel Streaming driver
  3015. Oct 17 2018 - ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
  3016. Dec 19 2018 - idmwfp.sys - Internet Download Manager WFP driver (Tonec Inc.)
  3017. Mar 14 2019 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  3018. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  3019. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  3020. Sep 19 2019 - RTCore64.sys - !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  3021. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  3022. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  3023. Mar 21 2020 - ene.sys - RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  3024. Apr 10 2020 - droidcam.sys - Droidcam Virtual Device driver
  3025. May 26 2020 - amwrtdrv.sys - AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  3026. Aug 11 2020 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  3027. Sep 20 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  3028. Oct 03 2020 - droidcamvideo.sys - Droidcam Virtual Device WDM Video Capture driver
  3029. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  3030. Nov 02 2020 - iVCam.sys - e2eSoft MyCam Camera driver
  3031. Mar 25 2021 - vgk.sys - Vanguard Anti-Cheat driver
  3032. Apr 12 2021 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  3033.  
  3034. ================== Dump #5: 3RD PARTY DRIVERS (FULL) ===================
  3035.  
  3036. Image name: AsIO.sys
  3037. Search : https://www.google.com/search?q=AsIO.sys
  3038. ADA Info : ASUS Input Output driver http://www.asus.com/
  3039. Timestamp : Wed Aug 22 2012
  3040.  
  3041. Image name: ambakdrv.sys
  3042. Search : https://www.google.com/search?q=ambakdrv.sys
  3043. ADA Info : Aomei driver (Aomei Technology Co)
  3044. Timestamp : Tue Dec 25 2012
  3045.  
  3046. Image name: ammntdrv.sys
  3047. Search : https://www.google.com/search?q=ammntdrv.sys
  3048. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  3049. Timestamp : Tue Dec 25 2012
  3050.  
  3051. Image name: BazisVirtualCDBus.sys
  3052. Search : https://www.google.com/search?q=BazisVirtualCDBus.sys
  3053. ADA Info : WinCDEmu Virtual CD-ROM driver (Bazis Inc) http://wincdemu.sysprogs.org/
  3054. Timestamp : Sat Sep 26 2015
  3055.  
  3056. Image name: amdgpio3.sys
  3057. Search : https://www.google.com/search?q=amdgpio3.sys
  3058. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  3059. Timestamp : Mon Mar 14 2016
  3060.  
  3061. Image name: hmatap.sys
  3062. Search : https://www.google.com/search?q=hmatap.sys
  3063. ADA Info : The OpenVPN Project TAP driver
  3064. Timestamp : Fri Aug 26 2016
  3065.  
  3066. Image name: amdpsp.sys
  3067. Search : https://www.google.com/search?q=amdpsp.sys
  3068. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  3069. Timestamp : Mon Jun 5 2017
  3070.  
  3071. Image name: AmdTools64.sys
  3072. Search : https://www.google.com/search?q=AmdTools64.sys
  3073. ADA Info : AMD Special Tools driver
  3074. Timestamp : Thu Feb 15 2018
  3075.  
  3076. Image name: RTKVHD64.sys
  3077. Search : https://www.google.com/search?q=RTKVHD64.sys
  3078. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  3079. Timestamp : Tue Mar 20 2018
  3080.  
  3081. Image name: AMDPCIDev.sys
  3082. Search : https://www.google.com/search?q=AMDPCIDev.sys
  3083. ADA Info : Advanced Micro Devices PCI Device driver
  3084. Timestamp : Thu Apr 12 2018
  3085.  
  3086. Image name: GLCKIO2.sys
  3087. Search : https://www.google.com/search?q=GLCKIO2.sys
  3088. ADA Info : ASUS RGB driver
  3089. Timestamp : Mon Apr 23 2018
  3090.  
  3091. Image name: NewTek_AudioPortClass.sys
  3092. Search : https://www.google.com/search?q=NewTek_AudioPortClass.sys
  3093. ADA Info : NewTek Audio Port Class driver
  3094. Timestamp : Thu Aug 9 2018
  3095.  
  3096. Image name: NewTek_WDM_KS.sys
  3097. Search : https://www.google.com/search?q=NewTek_WDM_KS.sys
  3098. ADA Info : NewTek WDM Kernel Streaming driver
  3099. Timestamp : Thu Aug 9 2018
  3100.  
  3101. Image name: ViGEmBus.sys
  3102. Search : https://www.google.com/search?q=ViGEmBus.sys
  3103. ADA Info : Oculus Virtual Gamepad Emulation Bus driver
  3104. Timestamp : Wed Oct 17 2018
  3105.  
  3106. Image name: idmwfp.sys
  3107. Search : https://www.google.com/search?q=idmwfp.sys
  3108. ADA Info : Internet Download Manager WFP driver (Tonec Inc.)
  3109. Timestamp : Wed Dec 19 2018
  3110.  
  3111. Image name: HWiNFO64A.SYS
  3112. Search : https://www.google.com/search?q=HWiNFO64A.SYS
  3113. ADA Info : HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
  3114. Timestamp : Thu Mar 14 2019
  3115.  
  3116. Image name: nvvad64v.sys
  3117. Search : https://www.google.com/search?q=nvvad64v.sys
  3118. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  3119. Timestamp : Thu Mar 14 2019
  3120.  
  3121. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  3122. Image name: rt640x64.sys
  3123. Search : https://www.google.com/search?q=rt640x64.sys
  3124. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  3125. Timestamp : Fri May 24 2019
  3126. File version: 9.1.410.2015
  3127. Product version: 9.1.410.2015
  3128. File flags: 8 (Mask 3F) Private
  3129. File OS: 40004 NT Win32
  3130. File type: 3.6 Driver
  3131. File date: 00000000.00000000
  3132. CompanyName: Realtek
  3133. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  3134. InternalName: rt640x64.sys
  3135. OriginalFilename: rt640x64.sys
  3136. ProductVersion: 9.001.0410.2015
  3137. FileVersion: 9.001.0410.2015
  3138. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  3139. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  3140.  
  3141. Image name: RTCore64.sys
  3142. Search : https://www.google.com/search?q=RTCore64.sys
  3143. ADA Info : !!! Overclocking Software - RivaTuner - MSI Afterburner http://www.msi.com/ or EVGA Precision X http://www.evga.com/
  3144. Timestamp : Thu Sep 19 2019
  3145.  
  3146. Image name: amdgpio2.sys
  3147. Search : https://www.google.com/search?q=amdgpio2.sys
  3148. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  3149. Timestamp : Sun Sep 29 2019
  3150.  
  3151. Image name: nvvhci.sys
  3152. Search : https://www.google.com/search?q=nvvhci.sys
  3153. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  3154. Timestamp : Fri Jan 10 2020
  3155.  
  3156. Image name: ene.sys
  3157. Search : https://www.google.com/search?q=ene.sys
  3158. ADA Info : RGB driver used by Ptolemy Tech Co., ASUS, Gigabyte, MSI, and others
  3159. Timestamp : Sat Mar 21 2020
  3160.  
  3161. Image name: droidcam.sys
  3162. Search : https://www.google.com/search?q=droidcam.sys
  3163. ADA Info : Droidcam Virtual Device driver
  3164. Timestamp : Fri Apr 10 2020
  3165.  
  3166. Image name: amwrtdrv.sys
  3167. Search : https://www.google.com/search?q=amwrtdrv.sys
  3168. ADA Info : AOMEI Backupper driver (Aomei Technology Co.) http://www.aomeitech.com/
  3169. Timestamp : Tue May 26 2020
  3170.  
  3171. Image name: NvModuleTracker.sys
  3172. Search : https://www.google.com/search?q=NvModuleTracker.sys
  3173. ADA Info : NVIDIA Module Tracker driver
  3174. Timestamp : Tue Aug 11 2020
  3175.  
  3176. Image name: UcmCxUcsiNvppc.sys
  3177. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  3178. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  3179. Timestamp : Sun Sep 20 2020
  3180.  
  3181. Image name: droidcamvideo.sys
  3182. Search : https://www.google.com/search?q=droidcamvideo.sys
  3183. ADA Info : Droidcam Virtual Device WDM Video Capture driver
  3184. Timestamp : Sat Oct 3 2020
  3185.  
  3186. Image name: nvhda64v.sys
  3187. Search : https://www.google.com/search?q=nvhda64v.sys
  3188. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  3189. Timestamp : Fri Oct 16 2020
  3190.  
  3191. Image name: iVCam.sys
  3192. Search : https://www.google.com/search?q=iVCam.sys
  3193. ADA Info : e2eSoft MyCam Camera driver
  3194. Timestamp : Mon Nov 2 2020
  3195.  
  3196. Image name: vgk.sys
  3197. Search : https://www.google.com/search?q=vgk.sys
  3198. ADA Info : Vanguard Anti-Cheat driver
  3199. Timestamp : Thu Mar 25 2021
  3200.  
  3201. Image name: nvlddmkm.sys
  3202. Search : https://www.google.com/search?q=nvlddmkm.sys
  3203. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  3204. Timestamp : Mon Apr 12 2021
  3205.  
  3206. ====================== Dump #5: MICROSOFT DRIVERS ======================
  3207.  
  3208. ACPI.sys ACPI Driver for NT (Microsoft)
  3209. acpiex.sys ACPIEx Driver (Microsoft)
  3210. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  3211. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  3212. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  3213. ahcache.sys Application Compatibility Cache (Microsoft)
  3214. amdppm.sys Processor Device Driver
  3215. bam.sys BAM Kernal driver (Microsoft)
  3216. BasicDisplay.sys Basic Display driver (Microsoft)
  3217. BasicRender.sys Basic Render driver (Microsoft)
  3218. Beep.SYS BEEP driver (Microsoft)
  3219. bindflt.sys Windows Bind Filter driver (Microsoft)
  3220. BOOTVID.dll VGA Boot Driver (Microsoft)
  3221. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  3222. cdd.dll Canonical Display Driver (Microsoft)
  3223. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  3224. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  3225. CI.dll Code Integrity Module (Microsoft)
  3226. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  3227. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  3228. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  3229. CLFS.SYS Common Log File System Driver (Microsoft)
  3230. clipsp.sys CLIP Service (Microsoft)
  3231. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  3232. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  3233. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  3234. condrv.sys Console Driver (Microsoft)
  3235. crashdmp.sys Crash Dump driver (Microsoft)
  3236. csc.sys Windows Client Side Caching driver (Microsoft)
  3237. dfsc.sys DFS Namespace Client Driver (Microsoft)
  3238. disk.sys PnP Disk Driver (Microsoft)
  3239. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  3240. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  3241. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  3242. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  3243. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  3244. dxgmms2.sys DirectX Graphics MMS
  3245. exfat.SYS Extended FAT File System driver (Microsoft)
  3246. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  3247. fileinfo.sys FileInfo Filter Driver (Microsoft)
  3248. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  3249. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  3250. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  3251. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  3252. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  3253. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  3254. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  3255. HIDCLASS.SYS Hid Class Library (Microsoft)
  3256. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  3257. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  3258. HTTP.sys HTTP Protocol Stack (Microsoft)
  3259. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  3260. intelpep.sys Intel Power Engine Plugin (Microsoft)
  3261. IntelTA.sys Intel Telemetry Driver
  3262. iorate.sys I/O rate control Filter (Microsoft)
  3263. kbdclass.sys Keyboard Class Driver (Microsoft)
  3264. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  3265. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  3266. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  3267. ks.sys Kernal CSA Library (Microsoft)
  3268. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  3269. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  3270. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  3271. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  3272. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  3273. mcupdate.dll Media Center Update (Microsoft)
  3274. mmcss.sys MMCSS Driver (Microsoft)
  3275. monitor.sys Monitor Driver (Microsoft)
  3276. mouclass.sys Mouse Class Driver (Microsoft)
  3277. mouhid.sys HID Mouse Filter Driver (Microsoft)
  3278. mountmgr.sys Mount Point Manager (Microsoft)
  3279. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  3280. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  3281. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  3282. Msfs.SYS Mailslot driver (Microsoft)
  3283. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  3284. msisadrv.sys ISA Driver (Microsoft)
  3285. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  3286. msquic.sys Windows QUIC Driver
  3287. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  3288. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  3289. mssmbios.sys System Management BIOS driver (Microsoft)
  3290. mup.sys Multiple UNC Provider driver (Microsoft)
  3291. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  3292. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  3293. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  3294. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  3295. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  3296. NDProxy.sys NDIS Proxy driver (Microsoft)
  3297. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  3298. netbios.sys NetBIOS Interface driver (Microsoft)
  3299. netbt.sys MBT Transport driver (Microsoft)
  3300. NETIO.SYS Network I/O Subsystem (Microsoft)
  3301. Npfs.SYS NPFS driver (Microsoft)
  3302. npsvctrig.sys Named pipe service triggers (Microsoft)
  3303. nsiproxy.sys NSI Proxy driver (Microsoft)
  3304. Ntfs.sys NT File System Driver (Microsoft)
  3305. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  3306. ntosext.sys NTOS Extension Host driver (Microsoft)
  3307. Null.SYS NULL Driver (Microsoft)
  3308. pacer.sys QoS Packet Scheduler (Microsoft)
  3309. parport.sys Parallel Port Driver (Microsoft)
  3310. partmgr.sys Partition driver (Microsoft)
  3311. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  3312. pcw.sys Performance Counter Driver (Microsoft)
  3313. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  3314. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  3315. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  3316. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  3317. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  3318. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  3319. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  3320. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  3321. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  3322. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  3323. rdyboost.sys ReadyBoost Driver (Microsoft)
  3324. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  3325. serenum.sys Serial Port Enumerator (Microsoft)
  3326. serial.sys Serial Device Driver
  3327. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  3328. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  3329. spaceport.sys Storage Spaces driver (Microsoft)
  3330. srv2.sys Smb 2.0 Server driver (Microsoft)
  3331. srvnet.sys Server Network driver (Microsoft)
  3332. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  3333. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  3334. storqosflt.sys Storage QoS Filter driver (Microsoft)
  3335. STREAM.SYS WDM CODEC Class Device Driver 2.0 (Microsoft)
  3336. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  3337. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  3338. tcpip.sys TCP/IP Protocol driver (Microsoft)
  3339. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  3340. TDI.SYS TDI Wrapper driver (Microsoft)
  3341. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  3342. tm.sys Kernel Transaction Manager driver (Microsoft)
  3343. uaspstor.sys UASP driver (Microsoft)
  3344. UcmCx.sys USB Connector Manager KMDF Class Extension
  3345. ucx01000.sys USB Controller Extension (Microsoft)
  3346. umbus.sys User-Mode Bus Enumerator (Microsoft)
  3347. usbaudio.sys USB Audio Class Driver (Microsoft)
  3348. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  3349. USBD.SYS Universal Serial Bus Driver (Microsoft)
  3350. UsbHub3.sys USB3 HUB driver (Microsoft)
  3351. USBXHCI.SYS USB XHCI driver (Microsoft)
  3352. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  3353. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  3354. volmgr.sys Volume Manager Driver (Microsoft)
  3355. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  3356. volsnap.sys Volume Shadow Copy driver (Microsoft)
  3357. volume.sys Volume driver (Microsoft)
  3358. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  3359. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  3360. watchdog.sys Watchdog driver (Microsoft)
  3361. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  3362. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  3363. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  3364. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  3365. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  3366. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  3367. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  3368. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  3369. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  3370. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  3371. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  3372. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  3373. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  3374. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  3375. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  3376. Wof.sys Windows Overlay Filter (Microsoft)
  3377. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  3378. WppRecorder.sys WPP Trace Recorder (Microsoft)
  3379. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  3380.  
  3381. ====================== Dump #5: UNLOADED MODULES =======================
  3382.  
  3383. fffff807`b2ae0000 fffff807`b2aed000 kerneld.x64
  3384. fffff807`b2ac0000 fffff807`b2ad1000 MSKSSRV.sys
  3385. fffff807`74140000 fffff807`74151000 MSKSSRV.sys
  3386. fffff807`73300000 fffff807`7330f000 dump_storpor
  3387. fffff807`73350000 fffff807`73383000 dump_storahc
  3388. fffff807`733b0000 fffff807`733ce000 dump_dumpfve
  3389. fffff807`71280000 fffff807`7129d000 EhStorClass.
  3390. fffff807`73430000 fffff807`7344c000 dam.sys
  3391. fffff807`70df0000 fffff807`70e02000 WdBoot.sys
  3392. fffff807`71ec0000 fffff807`71ed1000 hwpolicy.sys
  3393.  
  3394. ====================== Dump #5: BIOS INFORMATION =======================
  3395.  
  3396. [SMBIOS Data Tables v3.0]
  3397. [DMI Version - 0]
  3398. [2.0 Calling Convention - No]
  3399. [Table Size - 1289 bytes]
  3400. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  3401. Vendor American Megatrends Inc.
  3402. BIOS Version P1.10
  3403. BIOS Starting Address Segment f000
  3404. BIOS Release Date 06/19/2018
  3405. BIOS ROM Size 1000000
  3406. BIOS Characteristics
  3407. 07: - PCI Supported
  3408. 11: - Upgradeable FLASH BIOS
  3409. 12: - BIOS Shadowing Supported
  3410. 15: - CD-Boot Supported
  3411. 16: - Selectable Boot Supported
  3412. 17: - BIOS ROM Socketed
  3413. 19: - EDD Supported
  3414. 23: - 1.2MB Floppy Supported
  3415. 24: - 720KB Floppy Supported
  3416. 25: - 2.88MB Floppy Supported
  3417. 26: - Print Screen Device Supported
  3418. 27: - Keyboard Services Supported
  3419. 28: - Serial Services Supported
  3420. 29: - Printer Services Supported
  3421. 32: - BIOS Vendor Reserved
  3422. BIOS Characteristic Extensions
  3423. 00: - ACPI Supported
  3424. 01: - USB Legacy Supported
  3425. 08: - BIOS Boot Specification Supported
  3426. 10: - Specification Reserved
  3427. 11: - Specification Reserved
  3428. BIOS Major Revision 5
  3429. BIOS Minor Revision 13
  3430. EC Firmware Major Revision 255
  3431. EC Firmware Minor Revision 255
  3432. [System Information (Type 1) - Length 27 - Handle 0001h]
  3433. UUID 00000000-0000-0000-0000-000000000000
  3434. Wakeup Type Power Switch
  3435. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  3436. Manufacturer ASRock
  3437. Product B450M-HDV
  3438. Version
  3439. Feature Flags 09h
  3440. 57915104: - 57915152: - 7
  3441. ¨6ÿ
  3442. Location
  3443. Chassis Handle 0003h
  3444. Board Type 0ah - Processor/Memory Module
  3445. Number of Child Handles 0
  3446. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  3447. Chassis Type Desktop
  3448. Bootup State Safe
  3449. Power Supply State Safe
  3450. Thermal State Safe
  3451. Security Status None
  3452. OEM Defined 0
  3453. Height 0U
  3454. Number of Power Cords 1
  3455. Number of Contained Elements 0
  3456. Contained Element Size 3
  3457. [OEM Strings (Type 11) - Length 5 - Handle 0007h]
  3458. Number of Strings 1
  3459. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000ah]
  3460. [Physical Memory Array (Type 16) - Length 23 - Handle 000bh]
  3461. Location 03h - SystemBoard/Motherboard
  3462. Use 03h - System Memory
  3463. Memory Error Correction 03h - None
  3464. Maximum Capacity 268435456KB
  3465. Memory Error Inf Handle 000ah
  3466. Number of Memory Devices 2
  3467. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ch]
  3468. Starting Address 00000000h
  3469. Ending Address 00ffffffh
  3470. Memory Array Handle 000bh
  3471. Partition Width 02
  3472. [Cache Information (Type 7) - Length 19 - Handle 000dh]
  3473. Socket Designation L1 - Cache
  3474. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  3475. Maximum Cache Size 0240h - 576K
  3476. Installed Size 0240h - 576K
  3477. Supported SRAM Type 0010h - Pipeline-Burst
  3478. Current SRAM Type 0010h - Pipeline-Burst
  3479. Cache Speed 1ns
  3480. Error Correction Type Specification Reserved
  3481. System Cache Type Unified
  3482. Associativity 8-way Set-Associative
  3483. [Cache Information (Type 7) - Length 19 - Handle 000eh]
  3484. Socket Designation L2 - Cache
  3485. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  3486. Maximum Cache Size 0c00h - 3072K
  3487. Installed Size 0c00h - 3072K
  3488. Supported SRAM Type 0010h - Pipeline-Burst
  3489. Current SRAM Type 0010h - Pipeline-Burst
  3490. Cache Speed 1ns
  3491. Error Correction Type Specification Reserved
  3492. System Cache Type Unified
  3493. Associativity 8-way Set-Associative
  3494. [Cache Information (Type 7) - Length 19 - Handle 000fh]
  3495. Socket Designation L3 - Cache
  3496. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  3497. Maximum Cache Size 4000h - 16384K
  3498. Installed Size 4000h - 16384K
  3499. Supported SRAM Type 0010h - Pipeline-Burst
  3500. Current SRAM Type 0010h - Pipeline-Burst
  3501. Cache Speed 1ns
  3502. Error Correction Type Specification Reserved
  3503. System Cache Type Unified
  3504. Associativity 16-way Set-Associative
  3505. [Processor Information (Type 4) - Length 48 - Handle 0010h]
  3506. Socket Designation AM4
  3507. Processor Type Central Processor
  3508. Processor Family 6bh - Specification Reserved
  3509. Processor Manufacturer Advanced Micro Devices, Inc.
  3510. Processor ID 820f8000fffb8b17
  3511. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  3512. Processor Voltage 8bh - 1.1V
  3513. External Clock 100MHz
  3514. Max Speed 3900MHz
  3515. Current Speed 3400MHz
  3516. Status Enabled Populated
  3517. Processor Upgrade Specification Reserved
  3518. L1 Cache Handle 000dh
  3519. L2 Cache Handle 000eh
  3520. L3 Cache Handle 000fh
  3521. Part Number Unknown
  3522. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
  3523. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  3524. Physical Memory Array Handle 000bh
  3525. Memory Error Info Handle 0011h
  3526. Total Width 64 bits
  3527. Data Width 64 bits
  3528. Size 8192MB
  3529. Form Factor 09h - DIMM
  3530. Device Locator DIMM 0
  3531. Bank Locator P0 CHANNEL A
  3532. Memory Type 1ah - Specification Reserved
  3533. Type Detail 4080h - Synchronous
  3534. Speed 3000MHz
  3535. Manufacturer Unknown
  3536. Part Number F4-3000C16-8GTZR
  3537. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
  3538. Starting Address 00000000h
  3539. Ending Address 00ffffffh
  3540. Memory Device Handle 0012h
  3541. Mem Array Mapped Adr Handle 000ch
  3542. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  3543. [Memory Device (Type 17) - Length 40 - Handle 0015h]
  3544. Physical Memory Array Handle 000bh
  3545. Memory Error Info Handle 0014h
  3546. Total Width 64 bits
  3547. Data Width 64 bits
  3548. Size 8192MB
  3549. Form Factor 09h - DIMM
  3550. Device Locator DIMM 0
  3551. Bank Locator P0 CHANNEL B
  3552. Memory Type 1ah - Specification Reserved
  3553. Type Detail 4080h - Synchronous
  3554. Speed 3000MHz
  3555. Manufacturer Unknown
  3556. Part Number F4-3000C16-8GTZR
  3557. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  3558. Starting Address 00000000h
  3559. Ending Address 00ffffffh
  3560. Memory Device Handle 0015h
  3561. Mem Array Mapped Adr Handle 000ch
  3562.  
  3563. ========================== Dump #5: Extra #1 ===========================
  3564.  
  3565. 1: kd> !verifier
  3566. fffff8076ee2a800: Unable to get verifier list.
  3567.  
  3568. ========================== Dump #5: Extra #2 ===========================
  3569.  
  3570. 1: kd> !thread
  3571. THREAD ffffa70bee8ca5c0 Cid 1c9c.2930 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 1
  3572. Not impersonating
  3573. GetUlongFromAddress: unable to read from fffff8076ee114fc
  3574. Owning Process ffffa70bf40650c0 Image: chrome.exe
  3575. Attached Process N/A Image: N/A
  3576. fffff78000000000: Unable to get shared data
  3577. Wait Start TickCount 198665
  3578. Context Switch Count 7 IdealProcessor: 10
  3579. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  3580. UserTime 00:00:00.000
  3581. KernelTime 00:00:00.000
  3582. Win32 Start Address 0x00007ffc26d7d970
  3583. Stack Init fffffe8b58be2c90 Current fffffe8b58be1670
  3584. Base fffffe8b58be3000 Limit fffffe8b58bdd000 Call 0000000000000000
  3585. Priority 5 BasePriority 4 PriorityDecrement 0 IoPriority 2 PagePriority 5
  3586. Child-SP RetAddr : Args to Child : Call Site
  3587. fffffe8b`58be1db8 fffff807`6e49d0fa : 00000000`0000001a 00000000`00041792 fffff63f`fae5abb8 00000000`00100000 : nt!KeBugCheckEx
  3588. fffffe8b`58be1dc0 fffff807`6e40b9e6 : 00000000`00000000 00000000`00000000 00000000`00000b30 fffff63f`fae5abb8 : nt!MiDeleteVa+0x153a
  3589. fffffe8b`58be1ec0 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000000 fffffe8b`58be2330 : nt!MiWalkPageTablesRecursively+0x776
  3590. fffffe8b`58be1f60 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000001 fffffe8b`58be2340 : nt!MiWalkPageTablesRecursively+0x88b
  3591. fffffe8b`58be2000 fffff807`6e40bafb : fffff67b`00000000 ffffa70b`f4065740 fffffe8b`00000002 fffffe8b`58be2350 : nt!MiWalkPageTablesRecursively+0x88b
  3592. fffffe8b`58be20a0 fffff807`6e45de6b : 00000000`00000000 ffffa70b`f4065740 00000000`00000003 fffffe8b`58be2360 : nt!MiWalkPageTablesRecursively+0x88b
  3593. fffffe8b`58be2140 fffff807`6e49b991 : fffffe8b`58be22e0 ffffa70b`00000000 fffff63e`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
  3594. fffffe8b`58be2240 fffff807`6e46baf0 : 00000000`00000001 fffffe8b`00000000 ffffa70b`f4065590 ffffa70b`ee8ca5c0 : nt!MiDeletePagablePteRange+0x4f1
  3595. fffffe8b`58be2550 fffff807`6e836189 : ffffa70b`f70e2600 00000000`00000000 ffffa70b`00000000 ffffa70b`00000000 : nt!MiDeleteVad+0x360
  3596. fffffe8b`58be2660 fffff807`6e835820 : ffffa70b`f70e2600 ffffa70b`f1d6a2d0 ffffa70b`ee8ca5c0 00000000`00000000 : nt!MiUnmapVad+0x49
  3597. fffffe8b`58be2690 fffff807`6e833aef : ffffa70b`f70e0b20 ffffa70b`f70e0b20 ffffa70b`f70e2600 ffffa70b`f40650c0 : nt!MiCleanVad+0x30
  3598. fffffe8b`58be26c0 fffff807`6e85dbd4 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffa70b`f40650c0 : nt!MmCleanProcessAddressSpace+0x137
  3599. fffffe8b`58be2740 fffff807`6e906a96 : ffffa70b`f40650c0 ffff850f`4a5a1410 fffffe8b`58be2990 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
  3600. fffffe8b`58be27d0 fffff807`6e8d2918 : 00000000`00000000 00000000`00000001 fffffe8b`58be29e0 0000005d`e20ad000 : nt!PspExitThread+0x5f6
  3601. fffffe8b`58be28d0 fffff807`6e467fb7 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff807`6e40ecc6 : nt!KiSchedulerApcTerminate+0x38
  3602. fffffe8b`58be2910 fffff807`6e5fa3e0 : 00000000`00000000 fffffe8b`58be29c0 fffffe8b`58be2b80 0000005d`00000000 : nt!KiDeliverApc+0x487
  3603. fffffe8b`58be29c0 fffff807`6e60785f : ffffa70b`ee8ca5c0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
  3604. fffffe8b`58be2b00 00007ffc`82eccda4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f (TrapFrame @ fffffe8b`58be2b00)
  3605. 0000005d`e61ff768 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`82eccda4
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement