Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ========================== AUTO DUMP ANALYZER ==========================
- Auto Dump Analyzer
- Version: 0.91
- Time to analyze file(s): 00 hours and 04 minutes and 30 seconds
- ================================ SYSTEM ================================
- MANUFACTURER: Gigabyte Technology Co., Ltd.
- PRODUCT_NAME: B450M DS3H
- ================================= BIOS =================================
- VENDOR: American Megatrends Inc.
- VERSION: F50
- DATE: 11/27/2019
- ============================= MOTHERBOARD ==============================
- MANUFACTURER: Gigabyte Technology Co., Ltd.
- PRODUCT: B450M DS3H-CF
- VERSION: x.x
- ================================= RAM ==================================
- Size Speed Manufacturer Part No.
- -------------- -------------- ------------------- ----------------------
- 0MHz Unknown Unknown
- 8192MB 3200MHz Unknown CMK16GX4M2B3200C16
- 0MHz Unknown Unknown
- 8192MB 3200MHz Unknown CMK16GX4M2B3200C16
- ================================= CPU ==================================
- Processor Version: AMD Ryzen 5 2600 Six-Core Processor
- COUNT: c
- MHZ: 3394
- VENDOR: AuthenticAMD
- FAMILY: 17
- MODEL: 8
- STEPPING: 2
- ================================== OS ==================================
- Product: WinNt, suite: TerminalServer SingleUserTS Personal
- Built by: 19041.1.amd64fre.vb_release.191206-1406
- BUILD_VERSION: 10.0.19041.388 (WinBuild.160101.0800)
- BUILD: 19041
- SERVICEPACK: 388
- PLATFORM_TYPE: x64
- NAME: Windows 10
- EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
- BUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP: 160101.0800
- BUILDLAB: WinBuild
- BUILDOSVER: 10.0.19041.388
- =============================== DEBUGGER ===============================
- Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- =============================== COMMENTS ===============================
- * Information gathered from different dump files may be different. If
- Windows updates between two dump files, two or more OS versions may
- be shown above.
- * If the user updates the BIOS between dump files, two or more versions
- and dates may be shown above.
- * More RAM information can be found below in a full BIOS section.
- ========================================================================
- ======================= Dump #1: ANALYZE VERBOSE =======================
- ======================= File: 080520-8625-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff804`55400000 PsLoadedModuleList = 0xfffff804`5602a310
- Debug session time: Wed Aug 5 07:59:00.979 2020 (UTC - 4:00)
- System Uptime: 0 days 1:34:11.611
- BugCheck BE, {fffff80460a263f9, 9000003c4d38121, ffff800603c3d6e0, a}
- Probably caused by : memory_corruption
- Followup: memory_corruption
- ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
- An attempt was made to write to readonly memory. The guilty driver is on the
- stack trace (and is typically the current instruction pointer).
- When possible, the guilty driver's name (Unicode string) is printed on
- the bugcheck screen and saved in KiBugCheckDriver.
- Arguments:
- Arg1: fffff80460a263f9, Virtual address for the attempted write.
- Arg2: 09000003c4d38121, PTE contents.
- Arg3: ffff800603c3d6e0, (reserved)
- Arg4: 000000000000000a, (reserved)
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- BUGCHECK_STR: 0xBE
- PROCESS_NAME: Basecamp 3.exe
- CURRENT_IRQL: 2
- DPC_STACK_BASE: FFFF800603C3EFB0
- TRAP_FRAME: ffff800603c3d6e0 -- (.trap 0xffff800603c3d6e0)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=000000000000000a rbx=0000000000000000 rcx=000000000000000a
- rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
- rip=fffff80460a163f1 rsp=ffff800603c3d870 rbp=0000000000000000
- r8=0000000000000000 r9=0000000000000000 r10=fffff8046127a400
- r11=fffff80460e50000 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei pl nz na po nc
- rtwlanu!WDI_TLV::GENERATOR::GenerateAggregate+0x161:
- fffff804`60a163f1 003d02000100 add byte ptr [rtwlanu!P2PPsTimeout+0x51d (fffff804`60a263f9)],bh ds:fffff804`60a263f9=bf
- Resetting default scope
- MISALIGNED_IP:
- rtwlanu!WDI_TLV::GENERATOR::GenerateAggregate+161
- fffff804`60a163f1 003d02000100 add byte ptr [rtwlanu!P2PPsTimeout+0x51d (fffff804`60a263f9)],bh
- LAST_CONTROL_TRANSFER: from fffff80455887438 to fffff804557ddb60
- STACK_TEXT:
- ffff8006`03c3d4e8 fffff804`55887438 : 00000000`000000be fffff804`60a263f9 09000003`c4d38121 ffff8006`03c3d6e0 : nt!KeBugCheckEx
- ffff8006`03c3d4f0 fffff804`55612def : 09000003`c4d38121 00000000`00000003 ffff8006`03c3d760 00000000`00000000 : nt!MiRaisedIrqlFault+0x14bbc4
- ffff8006`03c3d540 fffff804`557ebc1e : ffff8d09`453df1a0 fffff804`5c553dec 00000000`00000000 fffff804`59c42820 : nt!MmAccessFault+0x4ef
- ffff8006`03c3d6e0 fffff804`60a163f1 : 00000000`0000000a 00000000`00000006 00000000`00010001 ffff8d09`34fd4250 : nt!KiPageFault+0x35e
- ffff8006`03c3d870 fffff804`60a172a3 : 00000000`00000090 ffff8006`03c3dbf0 fffff804`60de6520 ffff8d09`34fd4250 : rtwlanu!WDI_TLV::GENERATOR::GenerateAggregate+0x161
- ffff8006`03c3d900 fffff804`60a16c8e : 00000000`00000090 ffff8006`00000000 fffff804`60de5990 00000000`00000003 : rtwlanu!WDI_TLV::GENERATOR::GenerateSingleContainer+0x4a3
- ffff8006`03c3d9a0 fffff804`60a1646c : 00741300`00430000 00000000`00000090 00000000`00000000 ffff8d09`34fd4250 : rtwlanu!WDI_TLV::GENERATOR::GenerateMultiContainer+0x26e
- ffff8006`03c3da20 fffff804`60a1686a : 344c9000`01f20020 ffff8006`03c3dbd0 fffff804`60de5ae0 ffff8d09`34fd4250 : rtwlanu!WDI_TLV::GENERATOR::GenerateAggregate+0x1dc
- ffff8006`03c3dab0 fffff804`60a14b92 : 00000000`00000020 ffff8006`03c3dbd0 ffff8d09`3bc00000 fffff804`60de5ae0 : rtwlanu!WDI_TLV::GENERATOR::GenerateMessage+0x16a
- ffff8006`03c3db30 fffff804`609ee6ec : 00000000`07060504 ffff8d09`3bc00000 ffff8d09`32f42a30 fffff804`60a546b8 : rtwlanu!GenerateWdiIndicationBssEntryListFromIhv+0x3a
- ffff8006`03c3db80 fffff804`609ea5b6 : 00000000`00000011 ffff8006`03c3dd50 00000000`00000011 fffff804`60a483f8 : rtwlanu!wdiext_IndicateP2PDeviceFound+0xb0
- ffff8006`03c3dcb0 fffff804`609a3a74 : 00000000`00000011 ffff8006`03c3dd50 ffff8d09`32f429a8 00000000`00000004 : rtwlanu!WDI_IndicateP2PEvent+0x42
- ffff8006`03c3dce0 fffff804`60a2a675 : 00000000`00000010 ffff8006`03c3dd80 ffff8d09`3bc00000 ffff8d09`47bc7048 : rtwlanu!N63CIndicateP2PEvent+0x38
- ffff8006`03c3dd20 fffff804`60add6e4 : ffff8d09`3bc00000 ffff8d09`37139bf0 ffff8d09`3bc00000 ffff8d09`32f42a30 : rtwlanu!P2P_OnBeacon+0x1e9
- ffff8006`03c3ddc0 fffff804`60adc0f7 : ffff8d09`37139bf0 ffff8d09`37139b00 ffff8d09`3bc00000 ffff8d09`37139bf0 : rtwlanu!OnBeacon+0x184
- ffff8006`03c3de10 fffff804`60a50c56 : ffff8d09`3bc00000 ffff8d09`37139b00 00000000`00000000 00000000`00000000 : rtwlanu!Mgnt_Indicate+0x17b
- ffff8006`03c3de60 fffff804`60a8d8ac : 00000000`00000001 ffff8006`03c3e000 ffff8d09`00000000 ffff8d09`00000003 : rtwlanu!MgntFilterReceivedPacket+0x2d2
- ffff8006`03c3df50 fffff804`60a492f7 : ffff8d09`370a41c0 ffff8d09`36600000 fffff804`60c4c6b0 00000000`0000002b : rtwlanu!ProcessReceivedPacketForEachPortSpecific+0x32c
- ffff8006`03c3e250 fffff804`60a8d511 : ffff8d09`36600000 fffff804`60a8e87a fffff804`60c4c6b0 ffff8d09`36600000 : rtwlanu!MultiPortFeedPacketToMultipleAdapter+0x47f
- ffff8006`03c3e350 fffff804`60bd725a : ffff8d09`36600000 ffff8006`03c3e401 ffff8d09`36600000 ffff8d09`37e69163 : rtwlanu!ProcessReceivedPacket+0x7d
- ffff8006`03c3e390 fffff804`60bd7751 : ffff8d09`36654780 ffff8006`03c3e410 ffff8d09`37e69168 fffff804`59c1d291 : rtwlanu!ProcessSegregatedPackets_8821A+0x132
- ffff8006`03c3e3d0 fffff804`60bd70f9 : ffff8d09`36600000 ffff8d09`35010000 ffff8d09`35cf70e8 ffff8d09`00000163 : rtwlanu!SegregateDmaAggPackets_8821A+0x189
- ffff8006`03c3e440 fffff804`60bd6b63 : ffff8d09`35cf70e8 00000000`00000002 ffff8d09`37070bf0 ffff8d09`36600000 : rtwlanu!ParsingRxAggregation_8821A+0x75
- ffff8006`03c3e480 fffff804`609e6eac : ffff8d09`34a58300 fffff804`60bd67b0 00000000`00000000 ffff8d09`34fcb240 : rtwlanu!HalUsbInMpduComplete8821AUsb+0xcb
- ffff8006`03c3e4d0 fffff804`59bb9248 : 000072f6`c8f74198 ffff8d09`3708be60 00000000`00000000 00000000`00000000 : rtwlanu!WdfUsb_InComplete+0x15c
- ffff8006`03c3e560 fffff804`59bbc7a4 : 000072f6`c8f74198 ffff8d09`3708be60 ffff8d09`3708be60 00000000`00000000 : Wdf01000!FxRequestBase::CompleteSubmitted+0xe8
- ffff8006`03c3e5f0 fffff804`55745d66 : ffff8d09`34fbd050 ffff8d09`38f79a02 ffff8d09`38f79a60 ffff8006`03c3e6e0 : Wdf01000!FxIoTarget::_RequestCompletionRoutine+0xe4
- ffff8006`03c3e660 fffff804`5563c7ee : ffff8d09`38f79a60 ffff8006`03c3e719 00000000`00000000 ffff8d09`38f79e93 : nt!IopUnloadSafeCompletion+0x56
- ffff8006`03c3e690 fffff804`5563c6b7 : 00000000`00000001 00000000`00000000 ffff8d09`34fe1970 00000000`00000002 : nt!IopfCompleteRequest+0x11e
- ffff8006`03c3e780 fffff804`59bb811a : 00000000`00000000 ffff8d09`340bd260 ffff8d09`38f79a60 ffff8006`03c3e860 : nt!IofCompleteRequest+0x17
- ffff8006`03c3e7b0 fffff804`59bb5bbf : ffff8d09`45804c02 fffff804`55720444 ffff8d09`38f79a60 00000000`00000000 : Wdf01000!FxRequest::CompleteInternal+0x23a
- ffff8006`03c3e840 fffff804`5bd80eec : 00000000`ffffff02 ffff8d09`45804b30 ffff8d09`34fe1d50 ffff8d09`34fe1d50 : Wdf01000!imp_WdfRequestComplete+0x8f
- ffff8006`03c3e8a0 fffff804`5bd80db1 : ffff8d09`45804cd0 00000000`00000163 ffff8d09`45804d60 ffff8006`03c3eab8 : USBXHCI!Bulk_Transfer_CompleteCancelable+0xc8
- ffff8006`03c3e900 fffff804`5bd80ba0 : 00000000`00000004 ffff8006`03c3ea70 00000000`00000000 ffff8d09`34fefa60 : USBXHCI!Bulk_ProcessTransferEventWithED1+0x1fd
- ffff8006`03c3e9b0 fffff804`5bd788c0 : 00000000`00000004 ffff8006`03c3ea88 00000000`00000008 ffff8006`03c3ea90 : USBXHCI!Bulk_EP_TransferEventHandler+0x10
- ffff8006`03c3e9e0 fffff804`5bd783f5 : 00000000`00000780 000072f6`cbd3bd00 ffff8d09`34bedce0 ffff8d09`34f91c80 : USBXHCI!Endpoint_TransferEventHandler+0xb0
- ffff8006`03c3ea40 fffff804`5bd780cc : ffff8d09`2f0e2248 ffff8d09`2dd6e6c0 000072f6`cb52bb08 ffff8d09`2f0e2000 : USBXHCI!Interrupter_DeferredWorkProcessor+0x315
- ffff8006`03c3eb40 fffff804`59bb38f5 : 00000000`00000f44 00000000`00400a02 00000000`00000000 0000117b`1de81284 : USBXHCI!Interrupter_WdfEvtInterruptDpc+0xc
- ffff8006`03c3eb70 fffff804`5563a6be : ffff9f01`f7743240 ffff8d09`2de0f000 ffff8006`03c3ee70 ffff9f01`00000002 : Wdf01000!FxInterrupt::_InterruptDpcThunk+0xa5
- ffff8006`03c3ebb0 fffff804`556399a4 : ffff9f01`f7740180 cccccccc`00000000 00000000`00000008 00000000`00034a3e : nt!KiExecuteAllDpcs+0x30e
- ffff8006`03c3ed20 fffff804`557e4ba5 : 8d48ff90`e7bee800 ffff9f01`f7740180 ffff9f01`f89f8dc0 00000000`00000000 : nt!KiRetireDpcList+0x1f4
- ffff8006`03c3efb0 fffff804`557e4990 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxRetireDpcList+0x5
- ffff8006`05821ac0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchInterruptContinue
- STACK_COMMAND: kb
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !FLTMGR
- fffff804542fcd05-fffff804542fcd06 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+35
- [ 48 ff:4c 8b ]
- fffff804542fcd0c - FLTMGR!DeleteStreamListCtrlCallback+3c (+0x07)
- [ 0f:e8 ]
- fffff804542fcd0e-fffff804542fcd10 3 bytes - FLTMGR!DeleteStreamListCtrlCallback+3e (+0x02)
- [ 44 00 00:5b 41 01 ]
- fffff804542fcd1a-fffff804542fcd1b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+4a (+0x0c)
- [ 48 ff:4c 8b ]
- fffff804542fcd21-fffff804542fcd25 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+51 (+0x07)
- [ 0f 1f 44 00 00:e8 fa 63 32 01 ]
- fffff804542fcd6a-fffff804542fcd6b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+9a (+0x49)
- [ 48 ff:4c 8b ]
- fffff804542fcd71-fffff804542fcd77 7 bytes - FLTMGR!DeleteStreamListCtrlCallback+a1 (+0x07)
- [ 0f 1f 44 00 00 48 ff:e8 fa 5b 32 01 4c 8b ]
- fffff804542fcd7d-fffff804542fcd81 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+ad (+0x0c)
- [ 0f 1f 44 00 00:e8 5e eb 3f 01 ]
- 27 errors : !FLTMGR (fffff804542fcd05-fffff804542fcd81)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- MEMORY_CORRUPTOR: LARGE
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
- BUCKET_ID: MEMORY_CORRUPTION_LARGE
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
- TARGET_TIME: 2020-08-05T11:59:00.000Z
- SUITE_MASK: 784
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_large
- FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
- Followup: memory_corruption
- ====================== Dump #1: 3RD PARTY DRIVERS ======================
- Mar 23 2015 - bcbtums.sys - Broadcom Bluetooth Firmware Download Filter driver
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
- Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Jul 29 2019 - rtwlanu.sys - Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Nov 18 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Dec 05 2019 - cpuz149_x64.sys - CPUID driver
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 14 2020 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Jan 14 2020 - tap-pia-0901.sys - OpenVPN Private Internet Access driver
- Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
- Mar 03 2020 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Jun 30 2020 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jun 30 2020 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
- Image path: \SystemRoot\system32\drivers\bcbtums.sys
- Image name: bcbtums.sys
- Search : https://www.google.com/search?q=bcbtums.sys
- ADA Info : Broadcom Bluetooth Firmware Download Filter driver
- Timestamp : Mon Mar 23 2015
- Image path: \SystemRoot\System32\drivers\amdgpio3.sys
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image path: \SystemRoot\system32\drivers\SteamStreamingSpeakers.sys
- Image name: SteamStreamingSpeakers.sys
- Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
- ADA Info : Steam Streaming Speakers driver (Valve Corporation)
- Timestamp : Thu Jul 20 2017
- Image path: \SystemRoot\system32\drivers\SteamStreamingMicrophone.sys
- Image name: SteamStreamingMicrophone.sys
- Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
- ADA Info : Steam Streaming Microphone driver (Valve Corporation)
- Timestamp : Fri Jul 28 2017
- Image path: \SystemRoot\system32\drivers\nvvad64v.sys
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image path: \SystemRoot\System32\drivers\amdpsp.sys
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Wed Jun 19 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rtwlanu.sys\5D3EB1CD98f000\rtwlanu.sys
- Image path: \SystemRoot\System32\drivers\rtwlanu.sys
- Image name: rtwlanu.sys
- Search : https://www.google.com/search?q=rtwlanu.sys
- ADA Info : Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Timestamp : Mon Jul 29 2019
- File version: 1030.38.712.2019
- Product version: 1030.38.712.2019
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek Semiconductor Corporation
- ProductName: Realtek WLAN Wireless USB 2.0 Adapter
- InternalName: rtwlanu.sys
- OriginalFilename: rtwlanu.sys
- ProductVersion: 1030.38.0712.2019
- FileVersion: 1030.38.0712.2019
- FileDescription: Realtek WLAN USB NDIS Driver 80816
- LegalCopyright: Copyright (C) 2014 Realtek Semiconductor Corporation
- Image path: \SystemRoot\System32\drivers\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Mon Nov 18 2019
- Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
- Image name: mbamswissarmy.sys
- Search : https://www.google.com/search?q=mbamswissarmy.sys
- ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Timestamp : Wed Nov 20 2019
- Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Fri Nov 29 2019
- Image path: \??\C:\Windows\temp\cpuz149\cpuz149_x64.sys
- Image name: cpuz149_x64.sys
- Search : https://www.google.com/search?q=cpuz149_x64.sys
- ADA Info : CPUID driver
- Timestamp : Thu Dec 5 2019
- Image path: \SystemRoot\System32\drivers\nvvhci.sys
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image path: \SystemRoot\System32\drivers\amdgpio2.sys
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\drivers\tap-pia-0901.sys
- Image name: tap-pia-0901.sys
- Search : https://www.google.com/search?q=tap-pia-0901.sys
- ADA Info : OpenVPN Private Internet Access driver
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Jan 26 2020
- Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
- Image name: CorsairLLAccess64.sys
- Search : https://www.google.com/search?q=CorsairLLAccess64.sys
- ADA Info : CORSAIR iCUE Software driver
- Timestamp : Fri Feb 14 2020
- Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Tue Mar 3 2020
- Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
- Image name: MbamChameleon.sys
- Search : https://www.google.com/search?q=MbamChameleon.sys
- ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Timestamp : Thu Jun 4 2020
- Image path: \SystemRoot\system32\drivers\nvhda64v.sys
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Tue Jun 9 2020
- Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
- Image name: CorsairVBusDriver.sys
- Search : https://www.google.com/search?q=CorsairVBusDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
- Image name: CorsairVHidDriver.sys
- Search : https://www.google.com/search?q=CorsairVHidDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvmdi.inf_amd64_268f71ee4c2dc42b\nvlddmkm.sys
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Sun Jul 5 2020
- ====================== Dump #1: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- BthEnum.sys Bluetooth Bus Extender
- bthpan.sys Bluetooth Personal Area Networking
- BTHport.sys Bluetooth Bus driver (Microsoft)
- BTHUSB.sys Bluetooth Miniport driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- dc1-controller.sys KMDF driver for DC1 Controller
- DevAuthE.sys Xbox Device Authentication Driver
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gameflt.sys Gaming Install Filter driver (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- hidbth.sys Bluetooth Miniport Driver for HID Devices
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kd.dll Local Kernal Debugger (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
- Microsoft.Bluetooth.Legacy.LEEnumerator.sys Microsoft Bluetooth Legacy LE Enumerator driver (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- ndisuio.sys NDIS User mode I/O driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- nwifi.sys NativeWiFi Miniport Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rfcomm.sys Bluetooth RFCOMM driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- stornvme.sys NVM Express Storport Miniport driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwifibus.sys Virtual Wireless Bus driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- wdiwifi.sys WDI Driver Framework driver (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- xboxgip.sys Game Input Protocol Driver
- xinputhid.sys XINPUT filter driver for HID
- xvdd.sys XVD Disk driver (Microsoft)
- ====================== Dump #1: UNLOADED MODULES =======================
- fffff804`5c7e0000 fffff804`5c7ea000 CorsairVHidD
- fffff804`5b860000 fffff804`5b86f000 dump_storpor
- fffff804`5b8a0000 fffff804`5b8cc000 dump_stornvm
- fffff804`5b8f0000 fffff804`5b90e000 dump_dumpfve
- fffff804`5bc80000 fffff804`5bc9c000 dam.sys
- fffff804`59db0000 fffff804`59dc2000 WdBoot.sys
- fffff804`59da0000 fffff804`59da9000 MbamElam.sys
- fffff804`5ae90000 fffff804`5aea0000 hwpolicy.sys
- ====================== Dump #1: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.2]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 2383 bytes]
- [BIOS Information (Type 0) - Length 26 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version F50
- BIOS Starting Address Segment f000
- BIOS Release Date 11/27/2019
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 14
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product Name B450M DS3H
- Version Default string
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- SKUNumber Default string
- Family Default string
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product B450M DS3H-CF
- Version x.x
- Feature Flags 09h
- -1580943648: - -1580943600: - «ûÚú
- Location Default string
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Manufacturer Default string
- Chassis Type Desktop
- Version Default string
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [Onboard Devices Information (Type 10) - Length 6 - Handle 0004h]
- Number of Devices 1
- 01: Type Video [enabled]
- [OEM Strings (Type 11) - Length 5 - Handle 0005h]
- Number of Strings 1
- 1 Default string
- [System Configuration Options (Type 12) - Length 5 - Handle 0006h]
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0008h]
- [Physical Memory Array (Type 16) - Length 23 - Handle 0009h]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 134217728KB
- Memory Error Inf Handle 0008h
- Number of Memory Devices 4
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ah]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 0009h
- Partition Width 02
- [Cache Information (Type 7) - Length 27 - Handle 000bh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000ch]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000dh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 000eh]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000bh
- L2 Cache Handle 000ch
- L3 Cache Handle 000dh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000fh]
- [Memory Device (Type 17) - Length 84 - Handle 0010h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 000fh
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 84 - Handle 0012h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ah
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 84 - Handle 0015h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0014h
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
- [Memory Device (Type 17) - Length 84 - Handle 0017h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0016h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0018h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0017h
- Mem Array Mapped Adr Handle 000ah
- ========================== Dump #1: Extra #1 ===========================
- 2: kd> !verifier
- Verify Flags Level 0x00000000
- STANDARD FLAGS:
- [X] (0x00000000) Automatic Checks
- [ ] (0x00000001) Special pool
- [ ] (0x00000002) Force IRQL checking
- [ ] (0x00000008) Pool tracking
- [ ] (0x00000010) I/O verification
- [ ] (0x00000020) Deadlock detection
- [ ] (0x00000080) DMA checking
- [ ] (0x00000100) Security checks
- [ ] (0x00000800) Miscellaneous checks
- [ ] (0x00020000) DDI compliance checking
- ADDITIONAL FLAGS:
- [ ] (0x00000004) Randomized low resources simulation
- [ ] (0x00000200) Force pending I/O requests
- [ ] (0x00000400) IRP logging
- [ ] (0x00002000) Invariant MDL checking for stack
- [ ] (0x00004000) Invariant MDL checking for driver
- [ ] (0x00008000) Power framework delay fuzzing
- [ ] (0x00010000) Port/miniport interface checking
- [ ] (0x00040000) Systematic low resources simulation
- [ ] (0x00080000) DDI compliance checking (additional)
- [ ] (0x00200000) NDIS/WIFI verification
- [ ] (0x00800000) Kernel synchronization delay fuzzing
- [ ] (0x01000000) VM switch verification
- [ ] (0x02000000) Code integrity checks
- [X] Indicates flag is enabled
- Summary of All Verifier Statistics
- RaiseIrqls 0x0
- AcquireSpinLocks 0x0
- Synch Executions 0x0
- Trims 0x0
- Pool Allocations Attempted 0x0
- Pool Allocations Succeeded 0x0
- Pool Allocations Succeeded SpecialPool 0x0
- Pool Allocations With NO TAG 0x0
- Pool Allocations Failed 0x0
- Current paged pool allocations 0x0 for 00000000 bytes
- Peak paged pool allocations 0x0 for 00000000 bytes
- Current nonpaged pool allocations 0x0 for 00000000 bytes
- Peak nonpaged pool allocations 0x0 for 00000000 bytes
- ========================== Dump #1: Extra #2 ===========================
- 2: kd> !thread
- THREAD ffff8d09459ba040 Cid 1260.08a4 Teb: 000000e6b126a000 Win32Thread: 0000000000000000 RUNNING on processor 2
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8045601143c
- Owning Process ffff8d0943352080 Image: Basecamp 3.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 361702
- Context Switch Count 301 IdealProcessor: 2
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ff8bb7e20e0
- Stack Init ffff800605821c90 Current ffff8006058205c0
- Base ffff800605822000 Limit ffff80060581c000 Call 0000000000000000
- Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffff8006`03c3d4e8 fffff804`55887438 : 00000000`000000be fffff804`60a263f9 09000003`c4d38121 ffff8006`03c3d6e0 : nt!KeBugCheckEx
- ffff8006`03c3d4f0 fffff804`55612def : 09000003`c4d38121 00000000`00000003 ffff8006`03c3d760 00000000`00000000 : nt!MiRaisedIrqlFault+0x14bbc4
- ffff8006`03c3d540 fffff804`557ebc1e : ffff8d09`453df1a0 fffff804`5c553dec 00000000`00000000 fffff804`59c42820 : nt!MmAccessFault+0x4ef
- ffff8006`03c3d6e0 fffff804`60a163f1 : 00000000`0000000a 00000000`00000006 00000000`00010001 ffff8d09`34fd4250 : nt!KiPageFault+0x35e (TrapFrame @ ffff8006`03c3d6e0)
- ffff8006`03c3d870 fffff804`60a172a3 : 00000000`00000090 ffff8006`03c3dbf0 fffff804`60de6520 ffff8d09`34fd4250 : rtwlanu!WDI_TLV::GENERATOR::GenerateAggregate+0x161
- ffff8006`03c3d900 fffff804`60a16c8e : 00000000`00000090 ffff8006`00000000 fffff804`60de5990 00000000`00000003 : rtwlanu!WDI_TLV::GENERATOR::GenerateSingleContainer+0x4a3
- ffff8006`03c3d9a0 fffff804`60a1646c : 00741300`00430000 00000000`00000090 00000000`00000000 ffff8d09`34fd4250 : rtwlanu!WDI_TLV::GENERATOR::GenerateMultiContainer+0x26e
- ffff8006`03c3da20 fffff804`60a1686a : 344c9000`01f20020 ffff8006`03c3dbd0 fffff804`60de5ae0 ffff8d09`34fd4250 : rtwlanu!WDI_TLV::GENERATOR::GenerateAggregate+0x1dc
- ffff8006`03c3dab0 fffff804`60a14b92 : 00000000`00000020 ffff8006`03c3dbd0 ffff8d09`3bc00000 fffff804`60de5ae0 : rtwlanu!WDI_TLV::GENERATOR::GenerateMessage+0x16a
- ffff8006`03c3db30 fffff804`609ee6ec : 00000000`07060504 ffff8d09`3bc00000 ffff8d09`32f42a30 fffff804`60a546b8 : rtwlanu!GenerateWdiIndicationBssEntryListFromIhv+0x3a
- ffff8006`03c3db80 fffff804`609ea5b6 : 00000000`00000011 ffff8006`03c3dd50 00000000`00000011 fffff804`60a483f8 : rtwlanu!wdiext_IndicateP2PDeviceFound+0xb0
- ffff8006`03c3dcb0 fffff804`609a3a74 : 00000000`00000011 ffff8006`03c3dd50 ffff8d09`32f429a8 00000000`00000004 : rtwlanu!WDI_IndicateP2PEvent+0x42
- ffff8006`03c3dce0 fffff804`60a2a675 : 00000000`00000010 ffff8006`03c3dd80 ffff8d09`3bc00000 ffff8d09`47bc7048 : rtwlanu!N63CIndicateP2PEvent+0x38
- ffff8006`03c3dd20 fffff804`60add6e4 : ffff8d09`3bc00000 ffff8d09`37139bf0 ffff8d09`3bc00000 ffff8d09`32f42a30 : rtwlanu!P2P_OnBeacon+0x1e9
- ffff8006`03c3ddc0 fffff804`60adc0f7 : ffff8d09`37139bf0 ffff8d09`37139b00 ffff8d09`3bc00000 ffff8d09`37139bf0 : rtwlanu!OnBeacon+0x184
- ffff8006`03c3de10 fffff804`60a50c56 : ffff8d09`3bc00000 ffff8d09`37139b00 00000000`00000000 00000000`00000000 : rtwlanu!Mgnt_Indicate+0x17b
- ffff8006`03c3de60 fffff804`60a8d8ac : 00000000`00000001 ffff8006`03c3e000 ffff8d09`00000000 ffff8d09`00000003 : rtwlanu!MgntFilterReceivedPacket+0x2d2
- ffff8006`03c3df50 fffff804`60a492f7 : ffff8d09`370a41c0 ffff8d09`36600000 fffff804`60c4c6b0 00000000`0000002b : rtwlanu!ProcessReceivedPacketForEachPortSpecific+0x32c
- ffff8006`03c3e250 fffff804`60a8d511 : ffff8d09`36600000 fffff804`60a8e87a fffff804`60c4c6b0 ffff8d09`36600000 : rtwlanu!MultiPortFeedPacketToMultipleAdapter+0x47f
- ffff8006`03c3e350 fffff804`60bd725a : ffff8d09`36600000 ffff8006`03c3e401 ffff8d09`36600000 ffff8d09`37e69163 : rtwlanu!ProcessReceivedPacket+0x7d
- ffff8006`03c3e390 fffff804`60bd7751 : ffff8d09`36654780 ffff8006`03c3e410 ffff8d09`37e69168 fffff804`59c1d291 : rtwlanu!ProcessSegregatedPackets_8821A+0x132
- ffff8006`03c3e3d0 fffff804`60bd70f9 : ffff8d09`36600000 ffff8d09`35010000 ffff8d09`35cf70e8 ffff8d09`00000163 : rtwlanu!SegregateDmaAggPackets_8821A+0x189
- ffff8006`03c3e440 fffff804`60bd6b63 : ffff8d09`35cf70e8 00000000`00000002 ffff8d09`37070bf0 ffff8d09`36600000 : rtwlanu!ParsingRxAggregation_8821A+0x75
- ffff8006`03c3e480 fffff804`609e6eac : ffff8d09`34a58300 fffff804`60bd67b0 00000000`00000000 ffff8d09`34fcb240 : rtwlanu!HalUsbInMpduComplete8821AUsb+0xcb
- ffff8006`03c3e4d0 fffff804`59bb9248 : 000072f6`c8f74198 ffff8d09`3708be60 00000000`00000000 00000000`00000000 : rtwlanu!WdfUsb_InComplete+0x15c
- ffff8006`03c3e560 fffff804`59bbc7a4 : 000072f6`c8f74198 ffff8d09`3708be60 ffff8d09`3708be60 00000000`00000000 : Wdf01000!FxRequestBase::CompleteSubmitted+0xe8
- (Inline Function) --------`-------- : --------`-------- --------`-------- --------`-------- --------`-------- : Wdf01000!FxIoTarget::CompleteRequest+0x8 (Inline Function @ fffff804`59bbc7a4)
- (Inline Function) --------`-------- : --------`-------- --------`-------- --------`-------- --------`-------- : Wdf01000!FxIoTarget::RequestCompletionRoutine+0xab (Inline Function @ fffff804`59bbc7a4)
- ffff8006`03c3e5f0 fffff804`55745d66 : ffff8d09`34fbd050 ffff8d09`38f79a02 ffff8d09`38f79a60 ffff8006`03c3e6e0 : Wdf01000!FxIoTarget::_RequestCompletionRoutine+0xe4
- ffff8006`03c3e660 fffff804`5563c7ee : ffff8d09`38f79a60 ffff8006`03c3e719 00000000`00000000 ffff8d09`38f79e93 : nt!IopUnloadSafeCompletion+0x56
- ffff8006`03c3e690 fffff804`5563c6b7 : 00000000`00000001 00000000`00000000 ffff8d09`34fe1970 00000000`00000002 : nt!IopfCompleteRequest+0x11e
- ffff8006`03c3e780 fffff804`59bb811a : 00000000`00000000 ffff8d09`340bd260 ffff8d09`38f79a60 ffff8006`03c3e860 : nt!IofCompleteRequest+0x17
- (Inline Function) --------`-------- : --------`-------- --------`-------- --------`-------- --------`-------- : Wdf01000!FxIrp::CompleteRequest+0x13 (Inline Function @ fffff804`59bb811a)
- ffff8006`03c3e7b0 fffff804`59bb5bbf : ffff8d09`45804c02 fffff804`55720444 ffff8d09`38f79a60 00000000`00000000 : Wdf01000!FxRequest::CompleteInternal+0x23a
- (Inline Function) --------`-------- : --------`-------- --------`-------- --------`-------- --------`-------- : Wdf01000!FxRequest::Complete+0x31 (Inline Function @ fffff804`59bb5bbf)
- ffff8006`03c3e840 fffff804`5bd80eec : 00000000`ffffff02 ffff8d09`45804b30 ffff8d09`34fe1d50 ffff8d09`34fe1d50 : Wdf01000!imp_WdfRequestComplete+0x8f
- ffff8006`03c3e8a0 fffff804`5bd80db1 : ffff8d09`45804cd0 00000000`00000163 ffff8d09`45804d60 ffff8006`03c3eab8 : USBXHCI!Bulk_Transfer_CompleteCancelable+0xc8
- ffff8006`03c3e900 fffff804`5bd80ba0 : 00000000`00000004 ffff8006`03c3ea70 00000000`00000000 ffff8d09`34fefa60 : USBXHCI!Bulk_ProcessTransferEventWithED1+0x1fd
- ffff8006`03c3e9b0 fffff804`5bd788c0 : 00000000`00000004 ffff8006`03c3ea88 00000000`00000008 ffff8006`03c3ea90 : USBXHCI!Bulk_EP_TransferEventHandler+0x10
- ffff8006`03c3e9e0 fffff804`5bd783f5 : 00000000`00000780 000072f6`cbd3bd00 ffff8d09`34bedce0 ffff8d09`34f91c80 : USBXHCI!Endpoint_TransferEventHandler+0xb0
- ========================================================================
- ======================= Dump #2: ANALYZE VERBOSE =======================
- ======================= File: 080320-9125-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff803`42e00000 PsLoadedModuleList = 0xfffff803`43a2a310
- Debug session time: Mon Aug 3 11:54:32.113 2020 (UTC - 4:00)
- System Uptime: 0 days 5:29:11.747
- BugCheck 1A, {61941, 7df5633700e6, d, ffff8c8d2ad56b00}
- Probably caused by : memory_corruption
- Followup: memory_corruption
- MEMORY_MANAGEMENT (1a)
- # Any other values for parameter 1 must be individually examined.
- Arguments:
- Arg1: 0000000000061941, The subtype of the bugcheck.
- Arg2: 00007df5633700e6
- Arg3: 000000000000000d
- Arg4: ffff8c8d2ad56b00
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- BUGCHECK_STR: 0x1a_61941
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- PROCESS_NAME: dwm.exe
- CURRENT_IRQL: 0
- LAST_CONTROL_TRANSFER: from fffff803432020a6 to fffff803431ddb60
- STACK_TEXT:
- ffff8c8d`2ad56958 fffff803`432020a6 : 00000000`0000001a 00000000`00061941 00007df5`633700e6 00000000`0000000d : nt!KeBugCheckEx
- ffff8c8d`2ad56960 fffff803`431ebc1e : ffffa304`bb7570c0 00000000`14580000 0000029f`56885480 00000000`00000000 : nt!MmAccessFault+0x1ef7a6
- ffff8c8d`2ad56b00 00007ff8`835877a6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
- 000000d9`b611ba50 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`835877a6
- STACK_COMMAND: kb
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
- fffff80343184f3e-fffff80343184f41 4 bytes - nt!MiFreeUltraMapping+32
- [ a0 7d fb f6:80 3b 77 ee ]
- 4 errors : !nt (fffff80343184f3e-fffff80343184f41)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- MEMORY_CORRUPTOR: LARGE
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
- BUCKET_ID: MEMORY_CORRUPTION_LARGE
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
- TARGET_TIME: 2020-08-03T15:54:32.000Z
- SUITE_MASK: 784
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_large
- FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
- Followup: memory_corruption
- ====================== Dump #2: 3RD PARTY DRIVERS ======================
- Mar 23 2015 - bcbtums.sys - Broadcom Bluetooth Firmware Download Filter driver
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
- Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Jul 29 2019 - rtwlanu.sys - Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Nov 18 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Dec 05 2019 - cpuz149_x64.sys - CPUID driver
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 14 2020 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Jan 14 2020 - tap-pia-0901.sys - OpenVPN Private Internet Access driver
- Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
- Mar 03 2020 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Jun 30 2020 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jun 30 2020 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
- Image path: \SystemRoot\system32\drivers\bcbtums.sys
- Image name: bcbtums.sys
- Search : https://www.google.com/search?q=bcbtums.sys
- ADA Info : Broadcom Bluetooth Firmware Download Filter driver
- Timestamp : Mon Mar 23 2015
- Image path: \SystemRoot\System32\drivers\amdgpio3.sys
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image path: \SystemRoot\system32\drivers\SteamStreamingSpeakers.sys
- Image name: SteamStreamingSpeakers.sys
- Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
- ADA Info : Steam Streaming Speakers driver (Valve Corporation)
- Timestamp : Thu Jul 20 2017
- Image path: \SystemRoot\system32\drivers\SteamStreamingMicrophone.sys
- Image name: SteamStreamingMicrophone.sys
- Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
- ADA Info : Steam Streaming Microphone driver (Valve Corporation)
- Timestamp : Fri Jul 28 2017
- Image path: \SystemRoot\system32\drivers\nvvad64v.sys
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image path: \SystemRoot\System32\drivers\amdpsp.sys
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Wed Jun 19 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rtwlanu.sys\5D3EB1CD98f000\rtwlanu.sys
- Image path: \SystemRoot\System32\drivers\rtwlanu.sys
- Image name: rtwlanu.sys
- Search : https://www.google.com/search?q=rtwlanu.sys
- ADA Info : Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Timestamp : Mon Jul 29 2019
- File version: 1030.38.712.2019
- Product version: 1030.38.712.2019
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek Semiconductor Corporation
- ProductName: Realtek WLAN Wireless USB 2.0 Adapter
- InternalName: rtwlanu.sys
- OriginalFilename: rtwlanu.sys
- ProductVersion: 1030.38.0712.2019
- FileVersion: 1030.38.0712.2019
- FileDescription: Realtek WLAN USB NDIS Driver 80816
- LegalCopyright: Copyright (C) 2014 Realtek Semiconductor Corporation
- Image path: \SystemRoot\System32\drivers\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Mon Nov 18 2019
- Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
- Image name: mbamswissarmy.sys
- Search : https://www.google.com/search?q=mbamswissarmy.sys
- ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Timestamp : Wed Nov 20 2019
- Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Fri Nov 29 2019
- Image path: \??\C:\Windows\temp\cpuz149\cpuz149_x64.sys
- Image name: cpuz149_x64.sys
- Search : https://www.google.com/search?q=cpuz149_x64.sys
- ADA Info : CPUID driver
- Timestamp : Thu Dec 5 2019
- Image path: \SystemRoot\System32\drivers\nvvhci.sys
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image path: \SystemRoot\System32\drivers\amdgpio2.sys
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\drivers\tap-pia-0901.sys
- Image name: tap-pia-0901.sys
- Search : https://www.google.com/search?q=tap-pia-0901.sys
- ADA Info : OpenVPN Private Internet Access driver
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Jan 26 2020
- Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
- Image name: CorsairLLAccess64.sys
- Search : https://www.google.com/search?q=CorsairLLAccess64.sys
- ADA Info : CORSAIR iCUE Software driver
- Timestamp : Fri Feb 14 2020
- Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Tue Mar 3 2020
- Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
- Image name: MbamChameleon.sys
- Search : https://www.google.com/search?q=MbamChameleon.sys
- ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Timestamp : Thu Jun 4 2020
- Image path: \SystemRoot\system32\drivers\nvhda64v.sys
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Tue Jun 9 2020
- Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
- Image name: CorsairVBusDriver.sys
- Search : https://www.google.com/search?q=CorsairVBusDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
- Image name: CorsairVHidDriver.sys
- Search : https://www.google.com/search?q=CorsairVHidDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvmdi.inf_amd64_268f71ee4c2dc42b\nvlddmkm.sys
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Sun Jul 5 2020
- ====================== Dump #2: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- BthEnum.sys Bluetooth Bus Extender
- bthpan.sys Bluetooth Personal Area Networking
- BTHport.sys Bluetooth Bus driver (Microsoft)
- BTHUSB.sys Bluetooth Miniport driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- dc1-controller.sys KMDF driver for DC1 Controller
- DevAuthE.sys Xbox Device Authentication Driver
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gameflt.sys Gaming Install Filter driver (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- hidbth.sys Bluetooth Miniport Driver for HID Devices
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kd.dll Local Kernal Debugger (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
- Microsoft.Bluetooth.Legacy.LEEnumerator.sys Microsoft Bluetooth Legacy LE Enumerator driver (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- ndisuio.sys NDIS User mode I/O driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- nwifi.sys NativeWiFi Miniport Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rfcomm.sys Bluetooth RFCOMM driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- stornvme.sys NVM Express Storport Miniport driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwifibus.sys Virtual Wireless Bus driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- wdiwifi.sys WDI Driver Framework driver (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- xboxgip.sys Game Input Protocol Driver
- xinputhid.sys XINPUT filter driver for HID
- xvdd.sys XVD Disk driver (Microsoft)
- ====================== Dump #2: UNLOADED MODULES =======================
- fffff803`4cdb0000 fffff803`4cdbc000 cpuz149_x64.
- fffff803`4a330000 fffff803`4a33a000 CorsairVHidD
- fffff803`47890000 fffff803`4789f000 dump_storpor
- fffff803`478d0000 fffff803`478fc000 dump_stornvm
- fffff803`47920000 fffff803`4793e000 dump_dumpfve
- fffff803`48560000 fffff803`4857c000 dam.sys
- fffff803`459b0000 fffff803`459c2000 WdBoot.sys
- fffff803`459a0000 fffff803`459a9000 MbamElam.sys
- fffff803`46a90000 fffff803`46aa0000 hwpolicy.sys
- ====================== Dump #2: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.2]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 2383 bytes]
- [BIOS Information (Type 0) - Length 26 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version F50
- BIOS Starting Address Segment f000
- BIOS Release Date 11/27/2019
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 14
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product Name B450M DS3H
- Version Default string
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- SKUNumber Default string
- Family Default string
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product B450M DS3H-CF
- Version x.x
- Feature Flags 09h
- -1575110944: - -1575110896: - «ûÚú
- Location Default string
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Manufacturer Default string
- Chassis Type Desktop
- Version Default string
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [Onboard Devices Information (Type 10) - Length 6 - Handle 0004h]
- Number of Devices 1
- 01: Type Video [enabled]
- [OEM Strings (Type 11) - Length 5 - Handle 0005h]
- Number of Strings 1
- 1 Default string
- [System Configuration Options (Type 12) - Length 5 - Handle 0006h]
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0008h]
- [Physical Memory Array (Type 16) - Length 23 - Handle 0009h]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 134217728KB
- Memory Error Inf Handle 0008h
- Number of Memory Devices 4
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ah]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 0009h
- Partition Width 02
- [Cache Information (Type 7) - Length 27 - Handle 000bh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000ch]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000dh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 000eh]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000bh
- L2 Cache Handle 000ch
- L3 Cache Handle 000dh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000fh]
- [Memory Device (Type 17) - Length 84 - Handle 0010h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 000fh
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 84 - Handle 0012h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ah
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 84 - Handle 0015h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0014h
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
- [Memory Device (Type 17) - Length 84 - Handle 0017h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0016h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0018h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0017h
- Mem Array Mapped Adr Handle 000ah
- ========================== Dump #2: Extra #1 ===========================
- 2: kd> !verifier
- Verify Flags Level 0x00000000
- STANDARD FLAGS:
- [X] (0x00000000) Automatic Checks
- [ ] (0x00000001) Special pool
- [ ] (0x00000002) Force IRQL checking
- [ ] (0x00000008) Pool tracking
- [ ] (0x00000010) I/O verification
- [ ] (0x00000020) Deadlock detection
- [ ] (0x00000080) DMA checking
- [ ] (0x00000100) Security checks
- [ ] (0x00000800) Miscellaneous checks
- [ ] (0x00020000) DDI compliance checking
- ADDITIONAL FLAGS:
- [ ] (0x00000004) Randomized low resources simulation
- [ ] (0x00000200) Force pending I/O requests
- [ ] (0x00000400) IRP logging
- [ ] (0x00002000) Invariant MDL checking for stack
- [ ] (0x00004000) Invariant MDL checking for driver
- [ ] (0x00008000) Power framework delay fuzzing
- [ ] (0x00010000) Port/miniport interface checking
- [ ] (0x00040000) Systematic low resources simulation
- [ ] (0x00080000) DDI compliance checking (additional)
- [ ] (0x00200000) NDIS/WIFI verification
- [ ] (0x00800000) Kernel synchronization delay fuzzing
- [ ] (0x01000000) VM switch verification
- [ ] (0x02000000) Code integrity checks
- [X] Indicates flag is enabled
- Summary of All Verifier Statistics
- RaiseIrqls 0x0
- AcquireSpinLocks 0x0
- Synch Executions 0x0
- Trims 0x0
- Pool Allocations Attempted 0x0
- Pool Allocations Succeeded 0x0
- Pool Allocations Succeeded SpecialPool 0x0
- Pool Allocations With NO TAG 0x0
- Pool Allocations Failed 0x0
- Current paged pool allocations 0x0 for 00000000 bytes
- Peak paged pool allocations 0x0 for 00000000 bytes
- Current nonpaged pool allocations 0x0 for 00000000 bytes
- Peak nonpaged pool allocations 0x0 for 00000000 bytes
- ========================== Dump #2: Extra #2 ===========================
- 2: kd> !thread
- THREAD ffffa304bb7570c0 Cid 0548.0668 Teb: 000000d9b5dbb000 Win32Thread: ffffa304bd6a6170 RUNNING on processor 2
- Not impersonating
- GetUlongFromAddress: unable to read from fffff80343a1143c
- Owning Process ffffa304bb0ce0c0 Image: dwm.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 1264111
- Context Switch Count 1010851 IdealProcessor: 2
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ff87df753f0
- Stack Init ffff8c8d2ad56c90 Current ffff8c8d2ad55f20
- Base ffff8c8d2ad57000 Limit ffff8c8d2ad51000 Call 0000000000000000
- Priority 15 BasePriority 15 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffff8c8d`2ad56958 fffff803`432020a6 : 00000000`0000001a 00000000`00061941 00007df5`633700e6 00000000`0000000d : nt!KeBugCheckEx
- ffff8c8d`2ad56960 fffff803`431ebc1e : ffffa304`bb7570c0 00000000`14580000 0000029f`56885480 00000000`00000000 : nt!MmAccessFault+0x1ef7a6
- ffff8c8d`2ad56b00 00007ff8`835877a6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e (TrapFrame @ ffff8c8d`2ad56b00)
- 000000d9`b611ba50 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`835877a6
- ========================================================================
- ======================= Dump #3: ANALYZE VERBOSE =======================
- ======================= File: 080320-7109-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff804`33400000 PsLoadedModuleList = 0xfffff804`3402a310
- Debug session time: Mon Aug 3 04:41:09.335 2020 (UTC - 4:00)
- System Uptime: 0 days 9:07:33.968
- BugCheck 7F, {8, fffff80436eaae70, 20, fffff8043b58c114}
- *** WARNING: Unable to verify timestamp for nvlddmkm.sys
- *** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
- Probably caused by : memory_corruption
- Followup: memory_corruption
- UNEXPECTED_KERNEL_MODE_TRAP (7f)
- This means a trap occurred in kernel mode, and it's a trap of a kind
- that the kernel isn't allowed to have/catch (bound trap) or that
- is always instant death (double fault). The first number in the
- bugcheck params is the number of the trap (8 = double fault, etc)
- Consult an Intel x86 family manual to learn more about what these
- traps are. Here is a *portion* of those codes:
- If kv shows a taskGate
- use .tss on the part before the colon, then kv.
- Else if kv shows a trapframe
- use .trap on that value
- Else
- .trap on the appropriate frame will show where the trap was taken
- (on x86, this will be the ebp that goes with the procedure KiTrap)
- Endif
- kb will then show the corrected stack.
- Arguments:
- Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
- Arg2: fffff80436eaae70
- Arg3: 0000000000000020
- Arg4: fffff8043b58c114
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- BUGCHECK_STR: 0x7f_8
- TRAP_FRAME: fffff80436eaae70 -- (.trap 0xfffff80436eaae70)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=fffff8043b6301c8 rbx=0000000000000000 rcx=ffffa384e45b6000
- rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
- rip=fffff8043b58c114 rsp=0000000000000020 rbp=0000000000000000
- r8=0000000000000000 r9=0000000000000000 r10=fffff8043b6301c8
- r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei pl nz na pe nc
- nvlddmkm+0x7ac114:
- fffff804`3b58c114 ff90200b0000 call qword ptr [rax+0B20h] ds:fffff804`3b630ce8=????????????????
- Resetting default scope
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- PROCESS_NAME: chrome.exe
- CURRENT_IRQL: 5
- LAST_CONTROL_TRANSFER: from fffff804337efa29 to fffff804337ddb60
- STACK_TEXT:
- fffff804`36eaad28 fffff804`337efa29 : 00000000`0000007f 00000000`00000008 fffff804`36eaae70 00000000`00000020 : nt!KeBugCheckEx
- fffff804`36eaad30 fffff804`337ea843 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
- fffff804`36eaae70 fffff804`3b58c114 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0x2c3
- 00000000`00000020 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nvlddmkm+0x7ac114
- STACK_COMMAND: kb
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
- fffff804336156f9-fffff804336156fd 5 bytes - nt!MiResolvePrivateZeroFault+1f9
- [ d0 be 7d fb f6:90 30 61 c2 84 ]
- fffff80433615771-fffff80433615775 5 bytes - nt!MiResolvePrivateZeroFault+271 (+0x78)
- [ d7 be 7d fb f6:97 30 61 c2 84 ]
- fffff80433616175 - nt!MiCompletePrivateZeroFault+6f5 (+0xa04)
- [ f6:84 ]
- fffff8043361617b-fffff8043361617f 5 bytes - nt!MiCompletePrivateZeroFault+6fb (+0x06)
- [ d0 be 7d fb f6:90 30 61 c2 84 ]
- fffff80433616188-fffff80433616189 2 bytes - nt!MiCompletePrivateZeroFault+708 (+0x0d)
- [ 80 fa:00 9e ]
- fffff80433616324 - nt!MiCompletePrivateZeroFault+8a4 (+0x19c)
- [ f6:84 ]
- fffff8043361734a - nt!MiAddWorkingSetEntries+47a (+0x1026)
- [ f6:84 ]
- fffff804336183e6-fffff804336183e7 2 bytes - nt!MiGetPage+156 (+0x109c)
- [ 80 fa:00 9e ]
- fffff804336a020f-fffff804336a0210 2 bytes - nt!MiUnlinkNodeLargePageHelper+af (+0x87e29)
- [ 80 fa:00 9e ]
- fffff804336a02a4-fffff804336a02a5 2 bytes - nt!MiUnlinkNodeLargePageHelper+144 (+0x95)
- [ 80 fa:00 9e ]
- fffff804336ab92a-fffff804336ab92b 2 bytes - nt!MiDeletePteRun+b2a (+0xb686)
- [ 80 fa:00 9e ]
- fffff804336ac1d6-fffff804336ac1d7 2 bytes - nt!MiDeleteBatch+2b6 (+0x8ac)
- [ 80 fa:00 9e ]
- fffff804336ad1a2-fffff804336ad1a3 2 bytes - nt!MiInsertPageInFreeOrZeroedList+732 (+0xfcc)
- [ 80 fa:00 9e ]
- fffff804337467b5-fffff804337467b6 2 bytes - nt!MiDeleteNonPagedPoolTail+45 (+0x99613)
- [ 80 fa:00 9e ]
- fffff8043375fd1b-fffff8043375fd1c 2 bytes - nt!MiAllocateMdlPagesByLists+c7 (+0x19566)
- [ 80 fa:00 9e ]
- fffff80433784f3e-fffff80433784f41 4 bytes - nt!MiFreeUltraMapping+32 (+0x25223)
- [ a0 7d fb f6:20 61 c2 84 ]
- fffff804337df6d8-fffff804337df6d9 2 bytes - nt!KiInterruptDispatch+b8 (+0x5a79a)
- [ 48 ff:4c 8b ]
- fffff804337df6df-fffff804337df6e2 4 bytes - nt!KiInterruptDispatch+bf (+0x07)
- [ 0f 1f 44 00:e8 3c 5d 64 ]
- 46 errors : !nt (fffff804336156f9-fffff804337df6e2)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- MEMORY_CORRUPTOR: LARGE
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
- BUCKET_ID: MEMORY_CORRUPTION_LARGE
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
- TARGET_TIME: 2020-08-03T08:41:09.000Z
- SUITE_MASK: 784
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_large
- FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
- Followup: memory_corruption
- ====================== Dump #3: 3RD PARTY DRIVERS ======================
- Mar 23 2015 - bcbtums.sys - Broadcom Bluetooth Firmware Download Filter driver
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
- Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Jul 29 2019 - rtwlanu.sys - Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Nov 18 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Dec 05 2019 - cpuz149_x64.sys - CPUID driver
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 14 2020 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Jan 14 2020 - tap-pia-0901.sys - OpenVPN Private Internet Access driver
- Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
- Mar 03 2020 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Jun 30 2020 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jun 30 2020 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
- Image path: \SystemRoot\system32\drivers\bcbtums.sys
- Image name: bcbtums.sys
- Search : https://www.google.com/search?q=bcbtums.sys
- ADA Info : Broadcom Bluetooth Firmware Download Filter driver
- Timestamp : Mon Mar 23 2015
- Image path: \SystemRoot\System32\drivers\amdgpio3.sys
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image path: \SystemRoot\system32\drivers\SteamStreamingSpeakers.sys
- Image name: SteamStreamingSpeakers.sys
- Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
- ADA Info : Steam Streaming Speakers driver (Valve Corporation)
- Timestamp : Thu Jul 20 2017
- Image path: \SystemRoot\system32\drivers\SteamStreamingMicrophone.sys
- Image name: SteamStreamingMicrophone.sys
- Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
- ADA Info : Steam Streaming Microphone driver (Valve Corporation)
- Timestamp : Fri Jul 28 2017
- Image path: \SystemRoot\system32\drivers\nvvad64v.sys
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image path: \SystemRoot\System32\drivers\amdpsp.sys
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Wed Jun 19 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rtwlanu.sys\5D3EB1CD98f000\rtwlanu.sys
- Image path: \SystemRoot\System32\drivers\rtwlanu.sys
- Image name: rtwlanu.sys
- Search : https://www.google.com/search?q=rtwlanu.sys
- ADA Info : Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Timestamp : Mon Jul 29 2019
- File version: 1030.38.712.2019
- Product version: 1030.38.712.2019
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek Semiconductor Corporation
- ProductName: Realtek WLAN Wireless USB 2.0 Adapter
- InternalName: rtwlanu.sys
- OriginalFilename: rtwlanu.sys
- ProductVersion: 1030.38.0712.2019
- FileVersion: 1030.38.0712.2019
- FileDescription: Realtek WLAN USB NDIS Driver 80816
- LegalCopyright: Copyright (C) 2014 Realtek Semiconductor Corporation
- Image path: \SystemRoot\System32\drivers\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Mon Nov 18 2019
- Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
- Image name: mbamswissarmy.sys
- Search : https://www.google.com/search?q=mbamswissarmy.sys
- ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Timestamp : Wed Nov 20 2019
- Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Fri Nov 29 2019
- Image path: \??\C:\Windows\temp\cpuz149\cpuz149_x64.sys
- Image name: cpuz149_x64.sys
- Search : https://www.google.com/search?q=cpuz149_x64.sys
- ADA Info : CPUID driver
- Timestamp : Thu Dec 5 2019
- Image path: \SystemRoot\System32\drivers\nvvhci.sys
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image path: \SystemRoot\System32\drivers\amdgpio2.sys
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\drivers\tap-pia-0901.sys
- Image name: tap-pia-0901.sys
- Search : https://www.google.com/search?q=tap-pia-0901.sys
- ADA Info : OpenVPN Private Internet Access driver
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Jan 26 2020
- Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
- Image name: CorsairLLAccess64.sys
- Search : https://www.google.com/search?q=CorsairLLAccess64.sys
- ADA Info : CORSAIR iCUE Software driver
- Timestamp : Fri Feb 14 2020
- Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Tue Mar 3 2020
- Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
- Image name: MbamChameleon.sys
- Search : https://www.google.com/search?q=MbamChameleon.sys
- ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Timestamp : Thu Jun 4 2020
- Image path: \SystemRoot\system32\drivers\nvhda64v.sys
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Tue Jun 9 2020
- Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
- Image name: CorsairVBusDriver.sys
- Search : https://www.google.com/search?q=CorsairVBusDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
- Image name: CorsairVHidDriver.sys
- Search : https://www.google.com/search?q=CorsairVHidDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvmdi.inf_amd64_268f71ee4c2dc42b\nvlddmkm.sys
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Sun Jul 5 2020
- ====================== Dump #3: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- BthEnum.sys Bluetooth Bus Extender
- bthpan.sys Bluetooth Personal Area Networking
- BTHport.sys Bluetooth Bus driver (Microsoft)
- BTHUSB.sys Bluetooth Miniport driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- dc1-controller.sys KMDF driver for DC1 Controller
- DevAuthE.sys Xbox Device Authentication Driver
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gameflt.sys Gaming Install Filter driver (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- hidbth.sys Bluetooth Miniport Driver for HID Devices
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kd.dll Local Kernal Debugger (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
- Microsoft.Bluetooth.Legacy.LEEnumerator.sys Microsoft Bluetooth Legacy LE Enumerator driver (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- ndisuio.sys NDIS User mode I/O driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- nwifi.sys NativeWiFi Miniport Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rfcomm.sys Bluetooth RFCOMM driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- stornvme.sys NVM Express Storport Miniport driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwifibus.sys Virtual Wireless Bus driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- wdiwifi.sys WDI Driver Framework driver (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- xboxgip.sys Game Input Protocol Driver
- xinputhid.sys XINPUT filter driver for HID
- xvdd.sys XVD Disk driver (Microsoft)
- ====================== Dump #3: UNLOADED MODULES =======================
- fffff804`3a200000 fffff804`3a20a000 CorsairVHidD
- fffff804`37a70000 fffff804`37a7f000 dump_storpor
- fffff804`37ab0000 fffff804`37adc000 dump_stornvm
- fffff804`37b00000 fffff804`37b1e000 dump_dumpfve
- fffff804`37870000 fffff804`3788c000 dam.sys
- fffff804`359b0000 fffff804`359c2000 WdBoot.sys
- fffff804`359a0000 fffff804`359a9000 MbamElam.sys
- fffff804`36a90000 fffff804`36aa0000 hwpolicy.sys
- ====================== Dump #3: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.2]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 2383 bytes]
- [BIOS Information (Type 0) - Length 26 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version F50
- BIOS Starting Address Segment f000
- BIOS Release Date 11/27/2019
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 14
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product Name B450M DS3H
- Version Default string
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- SKUNumber Default string
- Family Default string
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product B450M DS3H-CF
- Version x.x
- Feature Flags 09h
- -1575110944: - -1575110896: - «ûÚú
- Location Default string
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Manufacturer Default string
- Chassis Type Desktop
- Version Default string
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [Onboard Devices Information (Type 10) - Length 6 - Handle 0004h]
- Number of Devices 1
- 01: Type Video [enabled]
- [OEM Strings (Type 11) - Length 5 - Handle 0005h]
- Number of Strings 1
- 1 Default string
- [System Configuration Options (Type 12) - Length 5 - Handle 0006h]
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0008h]
- [Physical Memory Array (Type 16) - Length 23 - Handle 0009h]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 134217728KB
- Memory Error Inf Handle 0008h
- Number of Memory Devices 4
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ah]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 0009h
- Partition Width 02
- [Cache Information (Type 7) - Length 27 - Handle 000bh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000ch]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000dh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 000eh]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000bh
- L2 Cache Handle 000ch
- L3 Cache Handle 000dh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000fh]
- [Memory Device (Type 17) - Length 84 - Handle 0010h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 000fh
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 84 - Handle 0012h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ah
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 84 - Handle 0015h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0014h
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
- [Memory Device (Type 17) - Length 84 - Handle 0017h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0016h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0018h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0017h
- Mem Array Mapped Adr Handle 000ah
- ========================== Dump #3: Extra #1 ===========================
- 0: kd> !verifier
- Verify Flags Level 0x00000000
- STANDARD FLAGS:
- [X] (0x00000000) Automatic Checks
- [ ] (0x00000001) Special pool
- [ ] (0x00000002) Force IRQL checking
- [ ] (0x00000008) Pool tracking
- [ ] (0x00000010) I/O verification
- [ ] (0x00000020) Deadlock detection
- [ ] (0x00000080) DMA checking
- [ ] (0x00000100) Security checks
- [ ] (0x00000800) Miscellaneous checks
- [ ] (0x00020000) DDI compliance checking
- ADDITIONAL FLAGS:
- [ ] (0x00000004) Randomized low resources simulation
- [ ] (0x00000200) Force pending I/O requests
- [ ] (0x00000400) IRP logging
- [ ] (0x00002000) Invariant MDL checking for stack
- [ ] (0x00004000) Invariant MDL checking for driver
- [ ] (0x00008000) Power framework delay fuzzing
- [ ] (0x00010000) Port/miniport interface checking
- [ ] (0x00040000) Systematic low resources simulation
- [ ] (0x00080000) DDI compliance checking (additional)
- [ ] (0x00200000) NDIS/WIFI verification
- [ ] (0x00800000) Kernel synchronization delay fuzzing
- [ ] (0x01000000) VM switch verification
- [ ] (0x02000000) Code integrity checks
- [X] Indicates flag is enabled
- Summary of All Verifier Statistics
- RaiseIrqls 0x0
- AcquireSpinLocks 0x0
- Synch Executions 0x0
- Trims 0x0
- Pool Allocations Attempted 0x0
- Pool Allocations Succeeded 0x0
- Pool Allocations Succeeded SpecialPool 0x0
- Pool Allocations With NO TAG 0x0
- Pool Allocations Failed 0x0
- Current paged pool allocations 0x0 for 00000000 bytes
- Peak paged pool allocations 0x0 for 00000000 bytes
- Current nonpaged pool allocations 0x0 for 00000000 bytes
- Peak nonpaged pool allocations 0x0 for 00000000 bytes
- ========================== Dump #3: Extra #2 ===========================
- 0: kd> !thread
- THREAD ffffa384e9671080 Cid 0774.0d1c Teb: 000000cb6729d000 Win32Thread: 0000000000000000 RUNNING on processor 0
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8043401143c
- Owning Process ffffa384ea8a2080 Image: chrome.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 2102653
- Context Switch Count 6526 IdealProcessor: 8
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ff7bc0ca310
- Stack Init ffff970c8ac22c90 Current ffff970c8ac226a0
- Base ffff970c8ac23000 Limit ffff970c8ac1d000 Call 0000000000000000
- Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff804`36eaad28 fffff804`337efa29 : 00000000`0000007f 00000000`00000008 fffff804`36eaae70 00000000`00000020 : nt!KeBugCheckEx
- fffff804`36eaad30 fffff804`337ea843 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
- fffff804`36eaae70 fffff804`3b58c114 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0x2c3 (TrapFrame @ fffff804`36eaae70)
- 00000000`00000020 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nvlddmkm+0x7ac114
- ========================================================================
- ======================= Dump #4: ANALYZE VERBOSE =======================
- ======================= File: 080320-7015-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff801`7ee12000 PsLoadedModuleList = 0xfffff801`7fa3c310
- Debug session time: Mon Aug 3 12:41:17.328 2020 (UTC - 4:00)
- System Uptime: 0 days 0:00:06.027
- BugCheck C4, {2000, fffff8000cbf8506, 0, 72436350}
- *** WARNING: Unable to verify timestamp for SteamStreamingMicrophone.sys
- *** ERROR: Module load completed but symbols could not be loaded for SteamStreamingMicrophone.sys
- Probably caused by : memory_corruption
- Followup: memory_corruption
- DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
- A device driver attempting to corrupt the system has been caught. This is
- because the driver was specified in the registry as being suspect (by the
- administrator) and the kernel has enabled substantial checking of this driver.
- If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
- be among the most commonly seen crashes.
- Arguments:
- Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
- Arg2: fffff8000cbf8506, The address in the driver's code where the error was detected.
- Arg3: 0000000000000000, Pool Type.
- Arg4: 0000000072436350, Pool Tag (if provided).
- Debugging Details:
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- BUGCHECK_STR: 0xc4_2000
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- PROCESS_NAME: System
- CURRENT_IRQL: 0
- LAST_CONTROL_TRANSFER: from fffff8017f7f0e34 to fffff8017f1efb60
- STACK_TEXT:
- ffff8a02`e04e9868 fffff801`7f7f0e34 : 00000000`000000c4 00000000`00002000 fffff800`0cbf8506 00000000`00000000 : nt!KeBugCheckEx
- ffff8a02`e04e9870 fffff801`7f3bca95 : fffff801`7fa24b68 00000000`00002000 fffff800`0cbf8506 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0xe0
- ffff8a02`e04e98b0 fffff801`7f7e7df4 : 00000000`72436350 fffff801`7fa24b68 fffff800`0cbf8506 ffffac8f`906a1050 : nt!VfReportIssueWithOptions+0x101
- ffff8a02`e04e9900 fffff801`7f7f4ff2 : 00000000`00000000 00000000`00000000 00000000`00000050 0067006e`0069006d : nt!VfCheckPoolType+0x90
- ffff8a02`e04e9940 fffff800`0cbf8506 : 00000000`00000001 ffff8a02`e04e9a30 ffffac8f`90a89c60 00000000`00000000 : nt!VerifierExAllocatePoolWithTag+0x62
- ffff8a02`e04e9990 00000000`00000001 : ffff8a02`e04e9a30 ffffac8f`90a89c60 00000000`00000000 ffffac8f`90a1a640 : SteamStreamingMicrophone+0x8506
- ffff8a02`e04e9998 ffff8a02`e04e9a30 : ffffac8f`90a89c60 00000000`00000000 ffffac8f`90a1a640 fffff800`0cbf8166 : 0x1
- ffff8a02`e04e99a0 ffffac8f`90a89c60 : 00000000`00000000 ffffac8f`90a1a640 fffff800`0cbf8166 00000000`00000001 : 0xffff8a02`e04e9a30
- ffff8a02`e04e99a8 00000000`00000000 : ffffac8f`90a1a640 fffff800`0cbf8166 00000000`00000001 ffff8a02`e04e9a40 : 0xffffac8f`90a89c60
- STACK_COMMAND: kb
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !msgpioclx
- fffff800095d3a65-fffff800095d3a68 4 bytes - msgpioclx!GpioClxBankActiveConditionCallback+35
- [ ff 15 8d b8:e8 36 e8 01 ]
- fffff800095d3a6a - msgpioclx!GpioClxBankActiveConditionCallback+3a (+0x05)
- [ 00:90 ]
- fffff800095d3ab4-fffff800095d3ab7 4 bytes - msgpioclx!GpioClxBankActiveConditionCallback+84 (+0x4a)
- [ ff 15 3e b8:e8 e7 e7 01 ]
- fffff800095d3ab9 - msgpioclx!GpioClxBankActiveConditionCallback+89 (+0x05)
- [ 00:90 ]
- fffff800095d3ae4-fffff800095d3ae7 4 bytes - msgpioclx!GpioClxBankActiveConditionCallback+b4 (+0x2b)
- [ ff 15 0e b8:e8 b7 e7 01 ]
- fffff800095d3ae9 - msgpioclx!GpioClxBankActiveConditionCallback+b9 (+0x05)
- [ 00:90 ]
- fffff800095d3b06-fffff800095d3b09 4 bytes - msgpioclx!GpioClxBankActiveConditionCallback+d6 (+0x1d)
- [ ff 15 ec b7:e8 95 e7 01 ]
- fffff800095d3b0b - msgpioclx!GpioClxBankActiveConditionCallback+db (+0x05)
- [ 00:90 ]
- fffff800095d3bb5-fffff800095d3bb8 4 bytes - msgpioclx!GpioClxBankIdleConditionCallback+35 (+0xaa)
- [ ff 15 3d b7:e8 e6 e6 01 ]
- fffff800095d3bba - msgpioclx!GpioClxBankIdleConditionCallback+3a (+0x05)
- [ 00:90 ]
- fffff800095d3c03-fffff800095d3c06 4 bytes - msgpioclx!GpioClxBankIdleConditionCallback+83 (+0x49)
- [ ff 15 ef b6:e8 98 e6 01 ]
- fffff800095d3c08 - msgpioclx!GpioClxBankIdleConditionCallback+88 (+0x05)
- [ 00:90 ]
- fffff800095d3c31-fffff800095d3c34 4 bytes - msgpioclx!GpioClxBankIdleConditionCallback+b1 (+0x29)
- [ ff 15 c1 b6:e8 6a e6 01 ]
- fffff800095d3c36 - msgpioclx!GpioClxBankIdleConditionCallback+b6 (+0x05)
- [ 00:90 ]
- fffff800095d3c53-fffff800095d3c56 4 bytes - msgpioclx!GpioClxBankIdleConditionCallback+d3 (+0x1d)
- [ ff 15 9f b6:e8 48 e6 01 ]
- fffff800095d3c58 - msgpioclx!GpioClxBankIdleConditionCallback+d8 (+0x05)
- [ 00:90 ]
- fffff800095d3d53-fffff800095d3d56 4 bytes - msgpioclx!GpioClxBankIdleStateCallback+33 (+0xfb)
- [ ff 15 9f b5:e8 48 e5 01 ]
- fffff800095d3d58 - msgpioclx!GpioClxBankIdleStateCallback+38 (+0x05)
- [ 00:90 ]
- fffff800095d3d8d-fffff800095d3d8e 2 bytes - msgpioclx!GpioClxBankIdleStateCallback+6d (+0x35)
- [ 48 ff:4c 8b ]
- fffff800095d3d94-fffff800095d3d97 4 bytes - msgpioclx!GpioClxBankIdleStateCallback+74 (+0x07)
- [ 0f 1f 44 00:e8 87 e6 01 ]
- fffff800095d3de4-fffff800095d3de7 4 bytes - msgpioclx!GpiopDevicePowerD0TransitionWorker+34 (+0x50)
- [ ff 15 0e b5:e8 b7 e4 01 ]
- fffff800095d3de9 - msgpioclx!GpiopDevicePowerD0TransitionWorker+39 (+0x05)
- [ 00:90 ]
- fffff800095d3f13-fffff800095d3f16 4 bytes - msgpioclx!GpioClxDevicePowerRequiredCallback+23 (+0x12a)
- [ ff 15 df b3:e8 88 e3 01 ]
- fffff800095d3f18 - msgpioclx!GpioClxDevicePowerRequiredCallback+28 (+0x05)
- [ 00:90 ]
- fffff800095d3f38-fffff800095d3f3b 4 bytes - msgpioclx!GpioClxDevicePowerRequiredCallback+48 (+0x20)
- [ ff 15 ba b3:e8 63 e3 01 ]
- fffff800095d3f3d - msgpioclx!GpioClxDevicePowerRequiredCallback+4d (+0x05)
- [ 00:90 ]
- fffff800095d3f7c-fffff800095d3f7f 4 bytes - msgpioclx!GpioClxDevicePowerNotRequiredCallback+2c (+0x3f)
- [ ff 15 76 b3:e8 1f e3 01 ]
- fffff800095d3f81 - msgpioclx!GpioClxDevicePowerNotRequiredCallback+31 (+0x05)
- [ 00:90 ]
- fffff800095d3fc2-fffff800095d3fc5 4 bytes - msgpioclx!GpioClxDevicePowerNotRequiredCallback+72 (+0x41)
- [ ff 15 30 b3:e8 d9 e2 01 ]
- fffff800095d3fc7 - msgpioclx!GpioClxDevicePowerNotRequiredCallback+77 (+0x05)
- [ 00:90 ]
- fffff800095d4014-fffff800095d4015 2 bytes - msgpioclx!GpioClxDevicePowerNotRequiredCallback+c4 (+0x4d)
- [ 48 ff:4c 8b ]
- fffff800095d401b-fffff800095d401e 4 bytes - msgpioclx!GpioClxDevicePowerNotRequiredCallback+cb (+0x07)
- [ 0f 1f 44 00:e8 00 e4 01 ]
- fffff800095d406e-fffff800095d4071 4 bytes - msgpioclx!GpioClxCriticalTransitionCallback+2e (+0x53)
- [ ff 15 84 b2:e8 2d e2 01 ]
- fffff800095d4073 - msgpioclx!GpioClxCriticalTransitionCallback+33 (+0x05)
- [ 00:90 ]
- 87 errors : !msgpioclx (fffff800095d3a65-fffff800095d4073)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- MEMORY_CORRUPTOR: LARGE
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
- BUCKET_ID: MEMORY_CORRUPTION_LARGE
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
- TARGET_TIME: 2020-08-03T16:41:17.000Z
- SUITE_MASK: 784
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_large
- FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
- Followup: memory_corruption
- ====================== Dump #4: 3RD PARTY DRIVERS ======================
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
- Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Nov 18 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 14 2020 - tap-pia-0901.sys - OpenVPN Private Internet Access driver
- Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Mar 03 2020 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Jun 30 2020 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
- Image path: \SystemRoot\System32\drivers\amdgpio3.sys
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image path: \SystemRoot\system32\drivers\SteamStreamingSpeakers.sys
- Image name: SteamStreamingSpeakers.sys
- Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
- ADA Info : Steam Streaming Speakers driver (Valve Corporation)
- Timestamp : Thu Jul 20 2017
- Image path: \SystemRoot\system32\drivers\SteamStreamingMicrophone.sys
- Image name: SteamStreamingMicrophone.sys
- Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
- ADA Info : Steam Streaming Microphone driver (Valve Corporation)
- Timestamp : Fri Jul 28 2017
- Image path: \SystemRoot\system32\drivers\nvvad64v.sys
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image path: \SystemRoot\System32\drivers\amdpsp.sys
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Wed Jun 19 2019
- Image path: \SystemRoot\System32\drivers\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Mon Nov 18 2019
- Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Fri Nov 29 2019
- Image path: \SystemRoot\System32\drivers\nvvhci.sys
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image path: \SystemRoot\System32\drivers\amdgpio2.sys
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\drivers\tap-pia-0901.sys
- Image name: tap-pia-0901.sys
- Search : https://www.google.com/search?q=tap-pia-0901.sys
- ADA Info : OpenVPN Private Internet Access driver
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Jan 26 2020
- Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Tue Mar 3 2020
- Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
- Image name: CorsairVBusDriver.sys
- Search : https://www.google.com/search?q=CorsairVBusDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvmdi.inf_amd64_268f71ee4c2dc42b\nvlddmkm.sys
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Sun Jul 5 2020
- ====================== Dump #4: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kd.dll Local Kernal Debugger (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- stornvme.sys NVM Express Storport Miniport driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- VerifierExt.sys Driver Verifier Extension
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- ====================== Dump #4: UNLOADED MODULES =======================
- fffff800`091f0000 fffff800`0920c000 dam.sys
- fffff801`80390000 fffff801`803a2000 WdBoot.sys
- fffff801`80380000 fffff801`80389000 MbamElam.sys
- fffff801`80bf0000 fffff801`80c00000 hwpolicy.sys
- ====================== Dump #4: BIOS INFORMATION =======================
- sysinfo: could not find necessary interfaces.
- sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
- ========================== Dump #4: Extra #1 ===========================
- 11: kd> !verifier
- Verify Flags Level 0x03b5efbb
- STANDARD FLAGS:
- [X] (0x00000000) Automatic Checks
- [X] (0x00000001) Special pool
- [X] (0x00000002) Force IRQL checking
- [X] (0x00000008) Pool tracking
- [X] (0x00000010) I/O verification
- [X] (0x00000020) Deadlock detection
- [X] (0x00000080) DMA checking
- [X] (0x00000100) Security checks
- [X] (0x00000800) Miscellaneous checks
- [ ] (0x00020000) DDI compliance checking
- ADDITIONAL FLAGS:
- [ ] (0x00000004) Randomized low resources simulation
- [X] (0x00000200) Force pending I/O requests
- [X] (0x00000400) IRP logging
- [X] (0x00002000) Invariant MDL checking for stack
- [X] (0x00004000) Invariant MDL checking for driver
- [X] (0x00008000) Power framework delay fuzzing
- [X] (0x00010000) Port/miniport interface checking
- [X] (0x00040000) Systematic low resources simulation
- [ ] (0x00080000) DDI compliance checking (additional)
- [X] (0x00200000) NDIS/WIFI verification
- [X] (0x00800000) Kernel synchronization delay fuzzing
- [X] (0x01000000) VM switch verification
- [X] (0x02000000) Code integrity checks
- RESERVED FLAGS (use of these flags is unsupported):
- [X] (0x00100000) Unused or reserved flag
- [X] Indicates flag is enabled
- Summary of All Verifier Statistics
- RaiseIrqls 0x37
- AcquireSpinLocks 0x12
- Synch Executions 0x0
- Trims 0x95
- Pool Allocations Attempted 0x4205
- Pool Allocations Succeeded 0x4205
- Pool Allocations Succeeded SpecialPool 0x4205
- Pool Allocations With NO TAG 0x0
- Pool Allocations Failed 0x0
- Current paged pool allocations 0x42 for 0000319F bytes
- Peak paged pool allocations 0x45 for 000049CA bytes
- Current nonpaged pool allocations 0x69f for 0042D509 bytes
- Peak nonpaged pool allocations 0x69f for 0042D509 bytes
- Execute pool type count 0x0
- Execute page protection count 0x0
- Execute page mapping count 0x0
- Execute-Write section count 0x0
- Section alignment failures 0x0
- Unsupported reloc failures 0x0
- IAT Executable Section failures: 0x0
- ========================== Dump #4: Extra #2 ===========================
- 11: kd> !thread
- THREAD ffffac8f8c502080 Cid 0004.0140 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor b
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8017fa2343c
- Owning Process ffffac8f88682040 Image: System
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 385
- Context Switch Count 189 IdealProcessor: 11
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address nt!ExpWorkerThread (0xfffff8017f045e40)
- Stack Init ffff8a02e04e9c90 Current ffff8a02e04e9820
- Base ffff8a02e04ea000 Limit ffff8a02e04e4000 Call 0000000000000000
- Priority 12 BasePriority 12 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- ffff8a02`e04e9868 fffff801`7f7f0e34 : 00000000`000000c4 00000000`00002000 fffff800`0cbf8506 00000000`00000000 : nt!KeBugCheckEx
- ffff8a02`e04e9870 fffff801`7f3bca95 : fffff801`7fa24b68 00000000`00002000 fffff800`0cbf8506 00000000`00000000 : nt!VerifierBugCheckIfAppropriate+0xe0
- ffff8a02`e04e98b0 fffff801`7f7e7df4 : 00000000`72436350 fffff801`7fa24b68 fffff800`0cbf8506 ffffac8f`906a1050 : nt!VfReportIssueWithOptions+0x101
- ffff8a02`e04e9900 fffff801`7f7f4ff2 : 00000000`00000000 00000000`00000000 00000000`00000050 0067006e`0069006d : nt!VfCheckPoolType+0x90
- ffff8a02`e04e9940 fffff800`0cbf8506 : 00000000`00000001 ffff8a02`e04e9a30 ffffac8f`90a89c60 00000000`00000000 : nt!VerifierExAllocatePoolWithTag+0x62
- ffff8a02`e04e9990 00000000`00000001 : ffff8a02`e04e9a30 ffffac8f`90a89c60 00000000`00000000 ffffac8f`90a1a640 : SteamStreamingMicrophone+0x8506
- ffff8a02`e04e9998 ffff8a02`e04e9a30 : ffffac8f`90a89c60 00000000`00000000 ffffac8f`90a1a640 fffff800`0cbf8166 : 0x1
- ffff8a02`e04e99a0 ffffac8f`90a89c60 : 00000000`00000000 ffffac8f`90a1a640 fffff800`0cbf8166 00000000`00000001 : 0xffff8a02`e04e9a30
- ffff8a02`e04e99a8 00000000`00000000 : ffffac8f`90a1a640 fffff800`0cbf8166 00000000`00000001 ffff8a02`e04e9a40 : 0xffffac8f`90a89c60
- ========================================================================
- ======================= Dump #5: ANALYZE VERBOSE =======================
- ====================== File: 080220-10359-01.dmp =======================
- ========================================================================
- Mini Kernel Dump File: Only registers and stack trace are available
- Windows 10 Kernel Version 19041 MP (12 procs) Free x64
- Kernel base = 0xfffff801`43400000 PsLoadedModuleList = 0xfffff801`4402a310
- Debug session time: Sun Aug 2 09:06:09.987 2020 (UTC - 4:00)
- System Uptime: 0 days 0:49:27.623
- BugCheck 50, {fffffa1238ce5420, 10, fffffa1238ce5420, 2}
- Could not read faulting driver name
- Probably caused by : memory_corruption
- Followup: memory_corruption
- PAGE_FAULT_IN_NONPAGED_AREA (50)
- Invalid system memory was referenced. This cannot be protected by try-except.
- Typically the address is just plain bad or it is pointing at freed memory.
- Arguments:
- Arg1: fffffa1238ce5420, memory referenced.
- Arg2: 0000000000000010, value 0 = read operation, 1 = write operation.
- Arg3: fffffa1238ce5420, If non-zero, the instruction address which referenced the bad memory
- address.
- Arg4: 0000000000000002, (reserved)
- Debugging Details:
- Could not read faulting driver name
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- DUMP_TYPE: 2
- READ_ADDRESS: fffff801440fa388: Unable to get MiVisibleState
- fffffa1238ce5420
- FAULTING_IP:
- +0
- fffffa12`38ce5420 ?? ???
- MM_INTERNAL_CODE: 2
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- BUGCHECK_STR: AV
- PROCESS_NAME: chrome.exe
- CURRENT_IRQL: 0
- TRAP_FRAME: fffff507a9ed87b0 -- (.trap 0xfffff507a9ed87b0)
- NOTE: The trap frame does not contain all registers.
- Some register values may be zeroed or incorrect.
- rax=0000000000000000 rbx=0000000000000000 rcx=ffffd08f80417080
- rdx=fffffa520647eaa0 rsi=0000000000000000 rdi=0000000000000000
- rip=fffffa1238ce5420 rsp=fffff507a9ed8948 rbp=fffffa52009f3700
- r8=fffff507a9ed8960 r9=0000000000000001 r10=fffff80143622930
- r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
- r14=0000000000000000 r15=0000000000000000
- iopl=0 nv up ei ng nz na po nc
- fffffa12`38ce5420 ?? ???
- Resetting default scope
- LAST_CONTROL_TRANSFER: from fffff80143835d15 to fffff801437ddb60
- FAILED_INSTRUCTION_ADDRESS:
- +0
- fffffa12`38ce5420 ?? ???
- STACK_TEXT:
- fffff507`a9ed8508 fffff801`43835d15 : 00000000`00000050 fffffa12`38ce5420 00000000`00000010 fffff507`a9ed87b0 : nt!KeBugCheckEx
- fffff507`a9ed8510 fffff801`43612d00 : 00000000`00000000 00000000`00000010 fffff507`a9ed8830 00000000`00000000 : nt!MiSystemFault+0x1ad5c5
- fffff507`a9ed8610 fffff801`437ebc1e : 00000000`00000000 ffffd08f`80417080 ffffe401`20fc0180 ffffffff`00000000 : nt!MmAccessFault+0x400
- fffff507`a9ed87b0 fffffa12`38ce5420 : fffffa12`30a32a87 fffffa52`00602a20 fffff801`00000000 fffffa52`00000000 : nt!KiPageFault+0x35e
- fffff507`a9ed8948 fffffa12`30a32a87 : fffffa52`00602a20 fffff801`00000000 fffffa52`00000000 00000000`11040caa : 0xfffffa12`38ce5420
- fffff507`a9ed8950 fffffa12`30a29a81 : fffffa52`0647eaa0 00000026`a69fef04 00000000`11040caa 00000000`00003948 : win32kbase!HmgLockEx+0x3f7
- fffff507`a9ed89e0 fffffa12`30aad16c : 00000000`00000000 00000000`00000000 00000000`49040be2 000001f8`9ded2250 : win32kbase!RGNOBJAPI::RGNOBJAPI+0x41
- fffff507`a9ed8a70 fffffa12`3191df51 : 00000026`a69fd9d0 00000026`a69fe2e8 fffffa12`319216cc ffffd3fa`dae00000 : win32kbase!GreEqualRgn+0x1c
- fffff507`a9ed8ad0 fffff801`437ef478 : 000001f8`98e084f8 00000000`04000000 fffff507`a9ed8b18 ffffffff`fee4f310 : win32k!NtGdiEqualRgn+0x15
- fffff507`a9ed8b00 00007ffb`497a30c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
- 00000026`a69fd108 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`497a30c4
- STACK_COMMAND: kb
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !FLTMGR
- fffff8014218cd05-fffff8014218cd06 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+35
- [ 48 ff:4c 8b ]
- fffff8014218cd0c - FLTMGR!DeleteStreamListCtrlCallback+3c (+0x07)
- [ 0f:e8 ]
- fffff8014218cd0e-fffff8014218cd10 3 bytes - FLTMGR!DeleteStreamListCtrlCallback+3e (+0x02)
- [ 44 00 00:5b 58 01 ]
- fffff8014218cd1a-fffff8014218cd1b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+4a (+0x0c)
- [ 48 ff:4c 8b ]
- fffff8014218cd21-fffff8014218cd25 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+51 (+0x07)
- [ 0f 1f 44 00 00:e8 fa 63 49 01 ]
- fffff8014218cd6a-fffff8014218cd6b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+9a (+0x49)
- [ 48 ff:4c 8b ]
- fffff8014218cd71-fffff8014218cd77 7 bytes - FLTMGR!DeleteStreamListCtrlCallback+a1 (+0x07)
- [ 0f 1f 44 00 00 48 ff:e8 fa 5b 49 01 4c 8b ]
- fffff8014218cd7d-fffff8014218cd81 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+ad (+0x0c)
- [ 0f 1f 44 00 00:e8 5e eb 56 01 ]
- 27 errors : !FLTMGR (fffff8014218cd05-fffff8014218cd81)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- MEMORY_CORRUPTOR: LARGE
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
- BUCKET_ID: MEMORY_CORRUPTION_LARGE
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
- TARGET_TIME: 2020-08-02T13:06:09.000Z
- SUITE_MASK: 784
- PRODUCT_TYPE: 1
- USER_LCID: 0
- FAILURE_ID_HASH_STRING: km:memory_corruption_large
- FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
- Followup: memory_corruption
- ====================== Dump #5: 3RD PARTY DRIVERS ======================
- Mar 23 2015 - bcbtums.sys - Broadcom Bluetooth Firmware Download Filter driver
- Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
- Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
- Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
- Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
- Jul 29 2019 - rtwlanu.sys - Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Nov 18 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
- Dec 05 2019 - cpuz149_x64.sys - CPUID driver
- Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Jan 14 2020 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
- Jan 14 2020 - tap-pia-0901.sys - OpenVPN Private Internet Access driver
- Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
- Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
- Mar 03 2020 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
- Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
- Jun 30 2020 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jun 30 2020 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
- ================== Dump #5: 3RD PARTY DRIVERS (FULL) ===================
- Image path: \SystemRoot\system32\drivers\bcbtums.sys
- Image name: bcbtums.sys
- Search : https://www.google.com/search?q=bcbtums.sys
- ADA Info : Broadcom Bluetooth Firmware Download Filter driver
- Timestamp : Mon Mar 23 2015
- Image path: \SystemRoot\System32\drivers\amdgpio3.sys
- Image name: amdgpio3.sys
- Search : https://www.google.com/search?q=amdgpio3.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Mon Mar 14 2016
- Image path: \SystemRoot\system32\drivers\SteamStreamingSpeakers.sys
- Image name: SteamStreamingSpeakers.sys
- Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
- ADA Info : Steam Streaming Speakers driver (Valve Corporation)
- Timestamp : Thu Jul 20 2017
- Image path: \SystemRoot\system32\drivers\SteamStreamingMicrophone.sys
- Image name: SteamStreamingMicrophone.sys
- Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
- ADA Info : Steam Streaming Microphone driver (Valve Corporation)
- Timestamp : Fri Jul 28 2017
- Image path: \SystemRoot\system32\drivers\nvvad64v.sys
- Image name: nvvad64v.sys
- Search : https://www.google.com/search?q=nvvad64v.sys
- ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
- Timestamp : Thu Mar 14 2019
- Image path: \SystemRoot\System32\drivers\amdpsp.sys
- Image name: amdpsp.sys
- Search : https://www.google.com/search?q=amdpsp.sys
- ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
- Timestamp : Wed Jun 19 2019
- Mapped memory image file: C:\ProgramData\dbg\sym\rtwlanu.sys\5D3EB1CD98f000\rtwlanu.sys
- Image path: \SystemRoot\System32\drivers\rtwlanu.sys
- Image name: rtwlanu.sys
- Search : https://www.google.com/search?q=rtwlanu.sys
- ADA Info : Realtek WLAN USB NDIS Driver https://www.realtek.com/en/
- Timestamp : Mon Jul 29 2019
- File version: 1030.38.712.2019
- Product version: 1030.38.712.2019
- File flags: 8 (Mask 3F) Private
- File OS: 40004 NT Win32
- File type: 3.6 Driver
- File date: 00000000.00000000
- CompanyName: Realtek Semiconductor Corporation
- ProductName: Realtek WLAN Wireless USB 2.0 Adapter
- InternalName: rtwlanu.sys
- OriginalFilename: rtwlanu.sys
- ProductVersion: 1030.38.0712.2019
- FileVersion: 1030.38.0712.2019
- FileDescription: Realtek WLAN USB NDIS Driver 80816
- LegalCopyright: Copyright (C) 2014 Realtek Semiconductor Corporation
- Image path: \SystemRoot\System32\drivers\rt640x64.sys
- Image name: rt640x64.sys
- Search : https://www.google.com/search?q=rt640x64.sys
- ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
- Timestamp : Mon Nov 18 2019
- Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
- Image name: mbamswissarmy.sys
- Search : https://www.google.com/search?q=mbamswissarmy.sys
- ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
- Timestamp : Wed Nov 20 2019
- Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
- Image name: NvModuleTracker.sys
- Search : https://www.google.com/search?q=NvModuleTracker.sys
- ADA Info : NVIDIA Module Tracker driver
- Timestamp : Fri Nov 29 2019
- Image path: \??\C:\Windows\temp\cpuz149\cpuz149_x64.sys
- Image name: cpuz149_x64.sys
- Search : https://www.google.com/search?q=cpuz149_x64.sys
- ADA Info : CPUID driver
- Timestamp : Thu Dec 5 2019
- Image path: \SystemRoot\System32\drivers\nvvhci.sys
- Image name: nvvhci.sys
- Search : https://www.google.com/search?q=nvvhci.sys
- ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
- Timestamp : Fri Jan 10 2020
- Image path: \SystemRoot\System32\drivers\amdgpio2.sys
- Image name: amdgpio2.sys
- Search : https://www.google.com/search?q=amdgpio2.sys
- ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
- Image name: RTKVHD64.sys
- Search : https://www.google.com/search?q=RTKVHD64.sys
- ADA Info : Realtek Audio System driver https://www.realtek.com/en/
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\drivers\tap-pia-0901.sys
- Image name: tap-pia-0901.sys
- Search : https://www.google.com/search?q=tap-pia-0901.sys
- ADA Info : OpenVPN Private Internet Access driver
- Timestamp : Tue Jan 14 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
- Image name: UcmCxUcsiNvppc.sys
- Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
- ADA Info : NVIDIA USB Type-C Port Policy Controller driver
- Timestamp : Sun Jan 26 2020
- Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
- Image name: CorsairLLAccess64.sys
- Search : https://www.google.com/search?q=CorsairLLAccess64.sys
- ADA Info : CORSAIR iCUE Software driver
- Timestamp : Fri Feb 14 2020
- Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
- Image name: AMDPCIDev.sys
- Search : https://www.google.com/search?q=AMDPCIDev.sys
- ADA Info : Advanced Micro Devices PCI Device driver
- Timestamp : Tue Mar 3 2020
- Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
- Image name: MbamChameleon.sys
- Search : https://www.google.com/search?q=MbamChameleon.sys
- ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
- Timestamp : Thu Jun 4 2020
- Image path: \SystemRoot\system32\drivers\nvhda64v.sys
- Image name: nvhda64v.sys
- Search : https://www.google.com/search?q=nvhda64v.sys
- ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
- Timestamp : Tue Jun 9 2020
- Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
- Image name: CorsairVBusDriver.sys
- Search : https://www.google.com/search?q=CorsairVBusDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
- Image name: CorsairVHidDriver.sys
- Search : https://www.google.com/search?q=CorsairVHidDriver.sys
- ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
- Timestamp : Tue Jun 30 2020
- Image path: \SystemRoot\System32\DriverStore\FileRepository\nvmdi.inf_amd64_268f71ee4c2dc42b\nvlddmkm.sys
- Image name: nvlddmkm.sys
- Search : https://www.google.com/search?q=nvlddmkm.sys
- ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
- Timestamp : Sun Jul 5 2020
- ====================== Dump #5: MICROSOFT DRIVERS ======================
- ACPI.sys ACPI Driver for NT (Microsoft)
- acpiex.sys ACPIEx Driver (Microsoft)
- afd.sys Ancillary Function Driver for WinSock (Microsoft)
- afunix.sys AF_UNIX Socket Provider driver (Microsoft)
- AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
- ahcache.sys Application Compatibility Cache (Microsoft)
- amdppm.sys Processor Device Driver
- bam.sys BAM Kernal driver (Microsoft)
- BasicDisplay.sys Basic Display driver (Microsoft)
- BasicRender.sys Basic Render driver (Microsoft)
- Beep.SYS BEEP driver (Microsoft)
- bindflt.sys Windows Bind Filter driver (Microsoft)
- BOOTVID.dll VGA Boot Driver (Microsoft)
- bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
- BthEnum.sys Bluetooth Bus Extender
- bthpan.sys Bluetooth Personal Area Networking
- BTHport.sys Bluetooth Bus driver (Microsoft)
- BTHUSB.sys Bluetooth Miniport driver (Microsoft)
- cdd.dll Canonical Display Driver (Microsoft)
- cdrom.sys SCSI CD-ROM Driver (Microsoft)
- CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
- CI.dll Code Integrity Module (Microsoft)
- CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
- CLASSPNP.SYS SCSI Class System Dll (Microsoft)
- cldflt.sys Cloud Files Mini Filter driver (Microsoft)
- CLFS.SYS Common Log File System Driver (Microsoft)
- clipsp.sys CLIP Service (Microsoft)
- cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
- cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
- CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
- condrv.sys Console Driver (Microsoft)
- crashdmp.sys Crash Dump driver (Microsoft)
- dc1-controller.sys KMDF driver for DC1 Controller
- DevAuthE.sys Xbox Device Authentication Driver
- dfsc.sys DFS Namespace Client Driver (Microsoft)
- disk.sys PnP Disk Driver (Microsoft)
- drmk.sys Digital Rights Management (DRM) driver (Microsoft)
- dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
- dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
- dxgmms2.sys DirectX Graphics MMS
- EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
- filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
- fileinfo.sys FileInfo Filter Driver (Microsoft)
- FLTMGR.SYS Filesystem Filter Manager (Microsoft)
- Fs_Rec.sys File System Recognizer Driver (Microsoft)
- fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
- fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
- gameflt.sys Gaming Install Filter driver (Microsoft)
- gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
- hal.dll Hardware Abstraction Layer DLL (Microsoft)
- HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
- hidbth.sys Bluetooth Miniport Driver for HID Devices
- HIDCLASS.SYS Hid Class Library (Microsoft)
- HIDPARSE.SYS Hid Parsing Library (Microsoft)
- hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
- HTTP.sys HTTP Protocol Stack (Microsoft)
- intelpep.sys Intel Power Engine Plugin (Microsoft)
- IntelTA.sys Intel Telemetry Driver
- iorate.sys I/O rate control Filter (Microsoft)
- kbdclass.sys Keyboard Class Driver (Microsoft)
- kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
- kd.dll Local Kernal Debugger (Microsoft)
- kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
- ks.sys Kernal CSA Library (Microsoft)
- ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
- ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
- ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
- lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
- luafv.sys LUA File Virtualization Filter Driver (Microsoft)
- mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
- Microsoft.Bluetooth.Legacy.LEEnumerator.sys Microsoft Bluetooth Legacy LE Enumerator driver (Microsoft)
- mmcss.sys MMCSS Driver (Microsoft)
- monitor.sys Monitor Driver (Microsoft)
- mouclass.sys Mouse Class Driver (Microsoft)
- mouhid.sys HID Mouse Filter Driver (Microsoft)
- mountmgr.sys Mount Point Manager (Microsoft)
- mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
- mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
- mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
- Msfs.SYS Mailslot driver (Microsoft)
- msgpioclx.sys GPIO Class Extension Driver (Microsoft)
- msisadrv.sys ISA Driver (Microsoft)
- mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
- msquic.sys Windows QUIC Driver
- msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
- mssmbios.sys System Management BIOS driver (Microsoft)
- mup.sys Multiple UNC Provider driver (Microsoft)
- ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
- ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
- ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
- ndisuio.sys NDIS User mode I/O driver (Microsoft)
- NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
- ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
- NDProxy.sys NDIS Proxy driver (Microsoft)
- Ndu.sys Network Data Usage Monitoring driver (Microsoft)
- netbios.sys NetBIOS Interface driver (Microsoft)
- netbt.sys MBT Transport driver (Microsoft)
- NETIO.SYS Network I/O Subsystem (Microsoft)
- Npfs.SYS NPFS driver (Microsoft)
- npsvctrig.sys Named pipe service triggers (Microsoft)
- nsiproxy.sys NSI Proxy driver (Microsoft)
- Ntfs.sys NT File System Driver (Microsoft)
- ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
- ntosext.sys NTOS Extension Host driver (Microsoft)
- Null.SYS NULL Driver (Microsoft)
- nwifi.sys NativeWiFi Miniport Driver (Microsoft)
- pacer.sys QoS Packet Scheduler (Microsoft)
- partmgr.sys Partition driver (Microsoft)
- pci.sys NT Plug and Play PCI Enumerator (Microsoft)
- pcw.sys Performance Counter Driver (Microsoft)
- pdc.sys Power Dependency Coordinator Driver (Microsoft)
- peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
- portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
- PSHED.dll Platform Specific Hardware Error driver (Microsoft)
- rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
- raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
- raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
- rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
- rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
- rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
- rdyboost.sys ReadyBoost Driver (Microsoft)
- rfcomm.sys Bluetooth RFCOMM driver (Microsoft)
- rspndr.sys Link-Layer Topology Responder driver (Microsoft)
- serenum.sys Serial Port Enumerator (Microsoft)
- serial.sys Serial Device Driver
- SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
- SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
- spaceport.sys Storage Spaces driver (Microsoft)
- srv2.sys Smb 2.0 Server driver (Microsoft)
- srvnet.sys Server Network driver (Microsoft)
- storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
- stornvme.sys NVM Express Storport Miniport driver (Microsoft)
- storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
- storqosflt.sys Storage QoS Filter driver (Microsoft)
- swenum.sys Plug and Play Software Device Enumerator (Microsoft)
- tbs.sys Export driver for kernel mode TPM API (Microsoft)
- tcpip.sys TCP/IP Protocol driver (Microsoft)
- tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
- TDI.SYS TDI Wrapper driver (Microsoft)
- tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
- tm.sys Kernel Transaction Manager driver (Microsoft)
- UcmCx.sys USB Connector Manager KMDF Class Extension
- ucx01000.sys USB Controller Extension (Microsoft)
- umbus.sys User-Mode Bus Enumerator (Microsoft)
- usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
- USBD.SYS Universal Serial Bus Driver (Microsoft)
- UsbHub3.sys USB3 HUB driver (Microsoft)
- USBXHCI.SYS USB XHCI driver (Microsoft)
- vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
- Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
- volmgr.sys Volume Manager Driver (Microsoft)
- volmgrx.sys Volume Manager Extension Driver (Microsoft)
- volsnap.sys Volume Shadow Copy driver (Microsoft)
- volume.sys Volume driver (Microsoft)
- vwifibus.sys Virtual Wireless Bus driver (Microsoft)
- vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
- vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
- wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
- watchdog.sys Watchdog driver (Microsoft)
- wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
- Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
- WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
- WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
- wdiwifi.sys WDI Driver Framework driver (Microsoft)
- WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
- werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
- wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
- win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
- win32kbase.sys Base Win32k Kernel Driver (Microsoft)
- win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
- WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
- WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
- winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
- wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
- WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
- Wof.sys Windows Overlay Filter (Microsoft)
- WppRecorder.sys WPP Trace Recorder (Microsoft)
- xboxgip.sys Game Input Protocol Driver
- xinputhid.sys XINPUT filter driver for HID
- xvdd.sys XVD Disk driver (Microsoft)
- ====================== Dump #5: UNLOADED MODULES =======================
- fffff801`89af0000 fffff801`89afc000 cpuz149_x64.
- fffff801`49ee0000 fffff801`49eea000 CorsairVHidD
- fffff801`49230000 fffff801`4923f000 dump_storpor
- fffff801`49270000 fffff801`4929c000 dump_stornvm
- fffff801`492c0000 fffff801`492de000 dump_dumpfve
- fffff801`49be0000 fffff801`49bfc000 dam.sys
- fffff801`47bb0000 fffff801`47bc2000 WdBoot.sys
- fffff801`47ba0000 fffff801`47ba9000 MbamElam.sys
- fffff801`48c90000 fffff801`48ca0000 hwpolicy.sys
- ====================== Dump #5: BIOS INFORMATION =======================
- [SMBIOS Data Tables v3.2]
- [DMI Version - 0]
- [2.0 Calling Convention - No]
- [Table Size - 2383 bytes]
- [BIOS Information (Type 0) - Length 26 - Handle 0000h]
- Vendor American Megatrends Inc.
- BIOS Version F50
- BIOS Starting Address Segment f000
- BIOS Release Date 11/27/2019
- BIOS ROM Size 1000000
- BIOS Characteristics
- 07: - PCI Supported
- 11: - Upgradeable FLASH BIOS
- 12: - BIOS Shadowing Supported
- 15: - CD-Boot Supported
- 16: - Selectable Boot Supported
- 17: - BIOS ROM Socketed
- 19: - EDD Supported
- 23: - 1.2MB Floppy Supported
- 24: - 720KB Floppy Supported
- 25: - 2.88MB Floppy Supported
- 26: - Print Screen Device Supported
- 28: - Serial Services Supported
- 29: - Printer Services Supported
- 32: - BIOS Vendor Reserved
- BIOS Characteristic Extensions
- 00: - ACPI Supported
- 01: - USB Legacy Supported
- 08: - BIOS Boot Specification Supported
- 10: - Specification Reserved
- 11: - Specification Reserved
- BIOS Major Revision 5
- BIOS Minor Revision 14
- EC Firmware Major Revision 255
- EC Firmware Minor Revision 255
- [System Information (Type 1) - Length 27 - Handle 0001h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product Name B450M DS3H
- Version Default string
- UUID 00000000-0000-0000-0000-000000000000
- Wakeup Type Power Switch
- SKUNumber Default string
- Family Default string
- [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
- Manufacturer Gigabyte Technology Co., Ltd.
- Product B450M DS3H-CF
- Version x.x
- Feature Flags 09h
- -1575110944: - -1575110896: - «ûÚú
- Location Default string
- Chassis Handle 0003h
- Board Type 0ah - Processor/Memory Module
- Number of Child Handles 0
- [System Enclosure (Type 3) - Length 22 - Handle 0003h]
- Manufacturer Default string
- Chassis Type Desktop
- Version Default string
- Bootup State Safe
- Power Supply State Safe
- Thermal State Safe
- Security Status None
- OEM Defined 0
- Height 0U
- Number of Power Cords 1
- Number of Contained Elements 0
- Contained Element Size 3
- [Onboard Devices Information (Type 10) - Length 6 - Handle 0004h]
- Number of Devices 1
- 01: Type Video [enabled]
- [OEM Strings (Type 11) - Length 5 - Handle 0005h]
- Number of Strings 1
- 1 Default string
- [System Configuration Options (Type 12) - Length 5 - Handle 0006h]
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0008h]
- [Physical Memory Array (Type 16) - Length 23 - Handle 0009h]
- Location 03h - SystemBoard/Motherboard
- Use 03h - System Memory
- Memory Error Correction 03h - None
- Maximum Capacity 134217728KB
- Memory Error Inf Handle 0008h
- Number of Memory Devices 4
- [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000ah]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Array Handle 0009h
- Partition Width 02
- [Cache Information (Type 7) - Length 27 - Handle 000bh]
- Socket Designation L1 - Cache
- Cache Configuration 0180h - WB Enabled Int NonSocketed L1
- Maximum Cache Size 0240h - 576K
- Installed Size 0240h - 576K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000ch]
- Socket Designation L2 - Cache
- Cache Configuration 0181h - WB Enabled Int NonSocketed L2
- Maximum Cache Size 0c00h - 3072K
- Installed Size 0c00h - 3072K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 8-way Set-Associative
- [Cache Information (Type 7) - Length 27 - Handle 000dh]
- Socket Designation L3 - Cache
- Cache Configuration 0182h - WB Enabled Int NonSocketed L3
- Maximum Cache Size 4000h - 16384K
- Installed Size 4000h - 16384K
- Supported SRAM Type 0010h - Pipeline-Burst
- Current SRAM Type 0010h - Pipeline-Burst
- Cache Speed 1ns
- Error Correction Type Specification Reserved
- System Cache Type Unified
- Associativity 16-way Set-Associative
- [Processor Information (Type 4) - Length 48 - Handle 000eh]
- Socket Designation AM4
- Processor Type Central Processor
- Processor Family 6bh - Specification Reserved
- Processor Manufacturer Advanced Micro Devices, Inc.
- Processor ID 820f8000fffb8b17
- Processor Version AMD Ryzen 5 2600 Six-Core Processor
- Processor Voltage 8bh - 1.1V
- External Clock 100MHz
- Max Speed 3900MHz
- Current Speed 3400MHz
- Status Enabled Populated
- Processor Upgrade Specification Reserved
- L1 Cache Handle 000bh
- L2 Cache Handle 000ch
- L3 Cache Handle 000dh
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000fh]
- [Memory Device (Type 17) - Length 84 - Handle 0010h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 000fh
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL A
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0011h]
- [Memory Device (Type 17) - Length 84 - Handle 0012h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0011h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL A
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0013h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0012h
- Mem Array Mapped Adr Handle 000ah
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
- [Memory Device (Type 17) - Length 84 - Handle 0015h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0014h
- Form Factor 02h - Unknown
- Device Locator DIMM 0
- Bank Locator P0 CHANNEL B
- Memory Type 02h - Unknown
- Type Detail 0004h - Unknown
- Speed 0MHz
- Manufacturer Unknown
- Part Number Unknown
- [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
- [Memory Device (Type 17) - Length 84 - Handle 0017h]
- Physical Memory Array Handle 0009h
- Memory Error Info Handle 0016h
- Total Width 64 bits
- Data Width 64 bits
- Size 8192MB
- Form Factor 09h - DIMM
- Device Locator DIMM 1
- Bank Locator P0 CHANNEL B
- Memory Type 1ah - Specification Reserved
- Type Detail 4080h - Synchronous
- Speed 3200MHz
- Manufacturer Unknown
- Part Number CMK16GX4M2B3200C16
- [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0018h]
- Starting Address 00000000h
- Ending Address 00ffffffh
- Memory Device Handle 0017h
- Mem Array Mapped Adr Handle 000ah
- ========================== Dump #5: Extra #1 ===========================
- 11: kd> !verifier
- Verify Flags Level 0x00000000
- STANDARD FLAGS:
- [X] (0x00000000) Automatic Checks
- [ ] (0x00000001) Special pool
- [ ] (0x00000002) Force IRQL checking
- [ ] (0x00000008) Pool tracking
- [ ] (0x00000010) I/O verification
- [ ] (0x00000020) Deadlock detection
- [ ] (0x00000080) DMA checking
- [ ] (0x00000100) Security checks
- [ ] (0x00000800) Miscellaneous checks
- [ ] (0x00020000) DDI compliance checking
- ADDITIONAL FLAGS:
- [ ] (0x00000004) Randomized low resources simulation
- [ ] (0x00000200) Force pending I/O requests
- [ ] (0x00000400) IRP logging
- [ ] (0x00002000) Invariant MDL checking for stack
- [ ] (0x00004000) Invariant MDL checking for driver
- [ ] (0x00008000) Power framework delay fuzzing
- [ ] (0x00010000) Port/miniport interface checking
- [ ] (0x00040000) Systematic low resources simulation
- [ ] (0x00080000) DDI compliance checking (additional)
- [ ] (0x00200000) NDIS/WIFI verification
- [ ] (0x00800000) Kernel synchronization delay fuzzing
- [ ] (0x01000000) VM switch verification
- [ ] (0x02000000) Code integrity checks
- [X] Indicates flag is enabled
- Summary of All Verifier Statistics
- RaiseIrqls 0x0
- AcquireSpinLocks 0x0
- Synch Executions 0x0
- Trims 0x0
- Pool Allocations Attempted 0x0
- Pool Allocations Succeeded 0x0
- Pool Allocations Succeeded SpecialPool 0x0
- Pool Allocations With NO TAG 0x0
- Pool Allocations Failed 0x0
- Current paged pool allocations 0x0 for 00000000 bytes
- Peak paged pool allocations 0x0 for 00000000 bytes
- Current nonpaged pool allocations 0x0 for 00000000 bytes
- Peak nonpaged pool allocations 0x0 for 00000000 bytes
- ========================== Dump #5: Extra #2 ===========================
- 11: kd> !thread
- THREAD ffffd08f80417080 Cid 3948.031c Teb: 00000026a61f3000 Win32Thread: ffffd08f79ffa310 RUNNING on processor b
- Not impersonating
- GetUlongFromAddress: unable to read from fffff8014401143c
- Owning Process ffffd08f79ae6080 Image: chrome.exe
- Attached Process N/A Image: N/A
- fffff78000000000: Unable to get shared data
- Wait Start TickCount 189927
- Context Switch Count 209198 IdealProcessor: 11
- ReadMemory error: Cannot get nt!KeMaximumIncrement value.
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address 0x00007ff7cbd8a310
- Stack Init fffff507a9ed8c90 Current fffff507a9ed86a0
- Base fffff507a9ed9000 Limit fffff507a9ed3000 Call 0000000000000000
- Priority 12 BasePriority 11 PriorityDecrement 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff507`a9ed8508 fffff801`43835d15 : 00000000`00000050 fffffa12`38ce5420 00000000`00000010 fffff507`a9ed87b0 : nt!KeBugCheckEx
- fffff507`a9ed8510 fffff801`43612d00 : 00000000`00000000 00000000`00000010 fffff507`a9ed8830 00000000`00000000 : nt!MiSystemFault+0x1ad5c5
- fffff507`a9ed8610 fffff801`437ebc1e : 00000000`00000000 ffffd08f`80417080 ffffe401`20fc0180 ffffffff`00000000 : nt!MmAccessFault+0x400
- fffff507`a9ed87b0 fffffa12`38ce5420 : fffffa12`30a32a87 fffffa52`00602a20 fffff801`00000000 fffffa52`00000000 : nt!KiPageFault+0x35e (TrapFrame @ fffff507`a9ed87b0)
- fffff507`a9ed8948 fffffa12`30a32a87 : fffffa52`00602a20 fffff801`00000000 fffffa52`00000000 00000000`11040caa : 0xfffffa12`38ce5420
- fffff507`a9ed8950 fffffa12`30a29a81 : fffffa52`0647eaa0 00000026`a69fef04 00000000`11040caa 00000000`00003948 : win32kbase!HmgLockEx+0x3f7
- fffff507`a9ed89e0 fffffa12`30aad16c : 00000000`00000000 00000000`00000000 00000000`49040be2 000001f8`9ded2250 : win32kbase!RGNOBJAPI::RGNOBJAPI+0x41
- fffff507`a9ed8a70 fffffa12`3191df51 : 00000026`a69fd9d0 00000026`a69fe2e8 fffffa12`319216cc ffffd3fa`dae00000 : win32kbase!GreEqualRgn+0x1c
- fffff507`a9ed8ad0 fffff801`437ef478 : 000001f8`98e084f8 00000000`04000000 fffff507`a9ed8b18 ffffffff`fee4f310 : win32k!NtGdiEqualRgn+0x15
- fffff507`a9ed8b00 00007ffb`497a30c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ fffff507`a9ed8b00)
- 00000026`a69fd108 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`497a30c4
Add Comment
Please, Sign In to add comment