API tools faq
paste
Guest User

Untitled

a guest
Jun 3rd, 2020
82
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 154.19 KB | None | 0 0
raw download clone embed print report
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 10 minutes and 08 seconds
  5.  
  6. ================================ SYSTEM ================================
  7. MANUFACTURER: PC Specialist LTD
  8. PRODUCT_NAME: Intel Z270
  9. SKU: [Removed]
  10.  
  11. ================================= BIOS =================================
  12. VENDOR: American Megatrends Inc.
  13. VERSION: 1002
  14. DATE: 12/14/2017
  15.  
  16. ============================= MOTHERBOARD ==============================
  17. MANUFACTURER: ASUSTeK COMPUTER INC.
  18. PRODUCT: PRIME Z270-K
  19. VERSION: Rev X.0x
  20.  
  21. ================================= RAM ==================================
  22. Size Speed Manufacturer Part No.
  23. -------------- -------------- ------------------- ----------------------
  24. 8192MB 2133MHz Corsair CMR32GX4M4C3000C16
  25. 8192MB 2133MHz Corsair CMR32GX4M4C3000C16
  26. 8192MB 2133MHz Corsair CMR32GX4M4C3000C16
  27. 8192MB 2133MHz Corsair CMR32GX4M4C3000C16
  28.  
  29. ================================= CPU ==================================
  30. Processor Version: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
  31. COUNT: 8
  32. MHZ: 4200
  33. VENDOR: GenuineIntel
  34. FAMILY: 6
  35. MODEL: 9e
  36. STEPPING: 9
  37. MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 8E'00000000 (cache) 8E'00000000 (init)
  38. MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: B4'00000000 (cache) B4'00000000 (init)
  39. MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
  40.  
  41. ================================== OS ==================================
  42. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  43. Built by: 18362.1.amd64fre.19h1_release.190318-1202
  44. BUILD_VERSION: 10.0.18362.836 (WinBuild.160101.0800)
  45. BUILD: 18362
  46. SERVICEPACK: 836
  47. PLATFORM_TYPE: x64
  48. NAME: Windows 10
  49. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  50. BUILD_TIMESTAMP: unknown_date
  51. BUILDDATESTAMP: 160101.0800
  52. BUILDLAB: WinBuild
  53. BUILDOSVER: 10.0.18362.836
  54. Built by: 17763.1.amd64fre.rs5_release.180914-1434
  55. BUILD_VERSION: 10.0.17763.1217 (WinBuild.160101.0800)
  56. BUILD: 17763
  57. SERVICEPACK: 1217
  58. BUILDOSVER: 10.0.17763.1217
  59.  
  60. =============================== DEBUGGER ===============================
  61. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  62. Copyright (c) Microsoft Corporation. All rights reserved.
  63.  
  64. =============================== COMMENTS ===============================
  65. * Information gathered from different dump files may be different. If
  66. Windows updates between two dump files, two or more OS versions may
  67. be shown above.
  68. * If the user updates the BIOS between dump files, two or more versions
  69. and dates may be shown above.
  70. * More RAM information can be found below in a full BIOS section.
  71.  
  72. ========================================================================
  73. ======================= Dump #1: ANALYZE VERBOSE =======================
  74. ====================== File: 060220-14250-01.dmp =======================
  75. ========================================================================
  76.  
  77. Mini Kernel Dump File: Only registers and stack trace are available
  78. Windows 10 Kernel Version 18362 MP (8 procs) Free x64
  79. Kernel base = 0xfffff805`6dc00000 PsLoadedModuleList = 0xfffff805`6e048170
  80. Debug session time: Tue Jun 2 17:02:21.559 2020 (UTC - 4:00)
  81. System Uptime: 0 days 5:10:11.191
  82.  
  83. BugCheck 3B, {80000003, fffff8056dc5a1c8, fffff286e557d260, 0}
  84. Probably caused by : memory_corruption
  85. Followup: memory_corruption
  86.  
  87. SYSTEM_SERVICE_EXCEPTION (3b)
  88. An exception happened while executing a system service routine.
  89.  
  90. Arguments:
  91. Arg1: 0000000080000003, Exception code that caused the bugcheck
  92. Arg2: fffff8056dc5a1c8, Address of the instruction which caused the bugcheck
  93. Arg3: fffff286e557d260, Address of the context record for the exception that caused the bugcheck
  94. Arg4: 0000000000000000, zero.
  95.  
  96. Debugging Details:
  97. DUMP_CLASS: 1
  98. DUMP_QUALIFIER: 400
  99. DUMP_TYPE: 2
  100. EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
  101. FAULTING_IP:
  102. nt!KeCheckStackAndTargetAddress+48
  103. fffff805`6dc5a1c8 cc int 3
  104. CONTEXT: fffff286e557d260 -- (.cxr 0xfffff286e557d260)
  105. rax=fffff286e557dc78 rbx=fffff286e557eec0 rcx=0000000000040282
  106. rdx=fffff286e557eec0 rsi=fffff286e557e4d0 rdi=0000000000040282
  107. rip=fffff8056dc5a1c8 rsp=fffff286e557dc50 rbp=fffff286e557ec88
  108. r8=fffff286e557e4d0 r9=fffff286e557e310 r10=fffff8056dd9d2d0
  109. r11=fffff286e557dce8 r12=fffff286e557f740 r13=fffff286e557ec88
  110. r14=fffff286e557e310 r15=fffff80570ddd718
  111. iopl=0 nv up ei pl nz na po nc
  112. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00040206
  113. nt!KeCheckStackAndTargetAddress+0x48:
  114. fffff805`6dc5a1c8 cc int 3
  115. Resetting default scope
  116. CUSTOMER_CRASH_COUNT: 1
  117. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  118. BUGCHECK_STR: 0x3B
  119.  
  120. PROCESS_NAME: obs64.exe
  121.  
  122. CURRENT_IRQL: 0
  123. EXCEPTION_RECORD: fffff286e557eb40 -- (.exr 0xfffff286e557eb40)
  124. ExceptionAddress: fffff286e557eb40
  125. ExceptionCode: e557edb0
  126. ExceptionFlags: fffff286
  127. NumberParameters: 16
  128. Parameter[0]: ffff96b55cd65600
  129. Parameter[1]: 0000000000040282
  130. Parameter[2]: 0000000000040201
  131. Parameter[3]: 0000000000000000
  132. Parameter[4]: 0000000000000000
  133. Parameter[5]: 0000000000000000
  134. Parameter[6]: 0000000000000000
  135. Parameter[7]: 0000000000000000
  136. Parameter[8]: 0000000000000000
  137. Parameter[9]: 0000000000000000
  138. Parameter[10]: 0000000000000000
  139. Parameter[11]: 0000000000000000
  140. Parameter[12]: 0000000000000000
  141. Parameter[13]: 0000000000000000
  142. Parameter[14]: 0000000000000000
  143. TRAP_FRAME: ffff96b55cd65600 -- (.trap 0xffff96b55cd65600)
  144. Unable to read trap frame at ffff96b5`5cd65600
  145. LAST_CONTROL_TRANSFER: from fffff8056dd9d315 to fffff8056dc5a1c8
  146. STACK_TEXT:
  147. fffff286`e557dc50 fffff805`6dd9d315 : 00000000`00000000 fffff805`70dba820 fffff286`e557dda0 fffff805`6dd0bc44 : nt!KeCheckStackAndTargetAddress+0x48
  148. fffff286`e557dc80 fffff805`70d54cbe : fffff805`70dba820 fffff286`e557ec88 fffff286`e557f740 00000000`4c4c764e : nt!_C_specific_handler+0x45
  149. fffff286`e557dcf0 fffff805`6ddcb17f : fffff286`e557f740 fffff286`e557e290 00000000`00000000 00000000`00000000 : dxgkrnl!_GSHandlerCheck_SEH+0x6a
  150. fffff286`e557dd20 fffff805`6dcfa2c5 : 00000000`00000000 00000000`00000000 fffff286`e557e290 00007fff`ffff0000 : nt!RtlpExecuteHandlerForException+0xf
  151. fffff286`e557dd50 fffff805`6dcfe85e : fffff286`e557ec88 fffff286`e557e9d0 fffff286`e557ec88 00000000`00004012 : nt!RtlDispatchException+0x4a5
  152. fffff286`e557e4a0 fffff805`6ddd431d : fffff286`e557eb40 00000000`00000010 ffff96b5`5cd65600 00000000`00040282 : nt!KiDispatchException+0x16e
  153. fffff286`e557eb50 fffff805`6ddd0503 : 00000000`00000000 fffff286`e557f538 fffffaa0`c61b0d20 00000000`00000000 : nt!KiExceptionDispatch+0x11d
  154. fffff286`e557ed30 00000000`00040282 : 00000000`00000000 fffffac8`505e3c0c fffffaa0`c68be010 00000000`00004012 : nt!KiPageFault+0x443
  155. fffff286`e557eec0 00000000`00000000 : fffffac8`505e3c0c fffffaa0`c68be010 00000000`00004012 fffffaa0`c4c3ca70 : 0x40282
  156. CHKIMG_EXTENSION: !chkimg -lo 50 -d !hal
  157. fffff8056db5de16-fffff8056db5de17 2 bytes - hal!HalRequestIpiSpecifyVector+36
  158. [ 48 ff:4c 8b ]
  159. fffff8056db5de1d-fffff8056db5de20 4 bytes - hal!HalRequestIpiSpecifyVector+3d (+0x07)
  160. [ 0f 1f 44 00:e8 2e 10 14 ]
  161. fffff8056db5f285-fffff8056db5f286 2 bytes - hal!HalpTimerClockIpiRoutine+15 (+0x1468)
  162. [ 48 ff:4c 8b ]
  163. fffff8056db5f28c-fffff8056db5f28f 4 bytes - hal!HalpTimerClockIpiRoutine+1c (+0x07)
  164. [ 0f 1f 44 00:e8 0f 92 15 ]
  165. fffff8056db5f457-fffff8056db5f458 2 bytes - hal!HalPutScatterGatherList+67 (+0x1cb)
  166. [ 48 ff:4c 8b ]
  167. fffff8056db5f45e-fffff8056db5f461 4 bytes - hal!HalPutScatterGatherList+6e (+0x07)
  168. [ 0f 1f 44 00:e8 ad fb 40 ]
  169. 18 errors : !hal (fffff8056db5de16-fffff8056db5f461)
  170. MODULE_NAME: memory_corruption
  171.  
  172. IMAGE_NAME: memory_corruption
  173.  
  174. FOLLOWUP_NAME: memory_corruption
  175. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  176. MEMORY_CORRUPTOR: LARGE
  177. STACK_COMMAND: .cxr 0xfffff286e557d260 ; kb
  178. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  179. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  180. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  181. TARGET_TIME: 2020-06-02T21:02:21.000Z
  182. SUITE_MASK: 784
  183. PRODUCT_TYPE: 1
  184. USER_LCID: 0
  185. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  186. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  187. Followup: memory_corruption
  188.  
  189. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  190.  
  191. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  192. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  193. Oct 17 2017 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  194. Nov 19 2017 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  195. Jul 13 2018 - CMUSBDAC.sys - C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  196. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  197. Apr 11 2019 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  198. Apr 11 2019 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  199. Jul 18 2019 - semav6msr64.sys - Intel Driver Update Utility http://www.intel.com/ OR (SEMA Software) http://www.sema-soft.de/en/home/
  200. Aug 06 2019 - iaStorE.sys - Intel SATA Storage Device RAID Controller
  201. Dec 05 2019 - cpuz149_x64.sys - CPUID driver
  202. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  203. Feb 03 2020 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  204. Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
  205. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  206. Feb 25 2020 - IntcDAud.sys - Intel Display Audio Driver http://www.intel.com/
  207. May 13 2020 - BEDaisy.sys - BattlEye Anti Cheat driver
  208. May 15 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  209. May 19 2020 - igdkmd64.sys - Intel HD graphics driver
  210.  
  211. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  212.  
  213. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  214. Image name: lvrs64.sys
  215. Search : https://www.google.com/search?q=lvrs64.sys
  216. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  217. Timestamp : Mon Oct 22 2012
  218.  
  219. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  220. Image name: lvuvc64.sys
  221. Search : https://www.google.com/search?q=lvuvc64.sys
  222. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  223. Timestamp : Mon Oct 22 2012
  224.  
  225. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  226. Image name: RTKVHD64.sys
  227. Search : https://www.google.com/search?q=RTKVHD64.sys
  228. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  229. Timestamp : Tue Oct 17 2017
  230.  
  231. Mapped memory image file: C:\ProgramData\dbg\sym\TeeDriverW8x64.sys\5A116D8F34000\TeeDriverW8x64.sys
  232. Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
  233. Image name: TeeDriverW8x64.sys
  234. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  235. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  236. Timestamp : Sun Nov 19 2017
  237. File version: 11.7.0.1057
  238. Product version: 11.7.0.1057
  239. File flags: 8 (Mask 3F) Private
  240. File OS: 40004 NT Win32
  241. File type: 3.7 Driver
  242. File date: 00000000.00000000
  243. CompanyName: Intel Corporation
  244. ProductName: Intel(R) Management Engine Interface
  245. InternalName: TeeDriverx64.sys
  246. OriginalFilename: TeeDriverx64.sys
  247. ProductVersion: 11.7.0.1057
  248. FileVersion: 11.7.0.1057
  249. FileDescription: Intel(R) Management Engine Interface
  250. LegalCopyright: Copyright © 2006-2015, Intel Corporation. All rights reserved.
  251.  
  252. Image path: \SystemRoot\system32\DRIVERS\CMUSBDAC.sys
  253. Image name: CMUSBDAC.sys
  254. Search : https://www.google.com/search?q=CMUSBDAC.sys
  255. ADA Info : C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  256. Timestamp : Fri Jul 13 2018
  257.  
  258. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  259. Image name: nvvad64v.sys
  260. Search : https://www.google.com/search?q=nvvad64v.sys
  261. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  262. Timestamp : Thu Mar 14 2019
  263.  
  264. Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
  265. Image name: CorsairVBusDriver.sys
  266. Search : https://www.google.com/search?q=CorsairVBusDriver.sys
  267. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  268. Timestamp : Thu Apr 11 2019
  269.  
  270. Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
  271. Image name: CorsairVHidDriver.sys
  272. Search : https://www.google.com/search?q=CorsairVHidDriver.sys
  273. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  274. Timestamp : Thu Apr 11 2019
  275.  
  276. Image path: \??\C:\WINDOWS\system32\drivers\semav6msr64.sys
  277. Image name: semav6msr64.sys
  278. Search : https://www.google.com/search?q=semav6msr64.sys
  279. ADA Info : Intel Driver Update Utility http://www.intel.com/ OR (SEMA Software) http://www.sema-soft.de/en/home/
  280. Timestamp : Thu Jul 18 2019
  281.  
  282. Image path: \SystemRoot\System32\drivers\iaStorE.sys
  283. Image name: iaStorE.sys
  284. Search : https://www.google.com/search?q=iaStorE.sys
  285. ADA Info : Intel SATA Storage Device RAID Controller
  286. Timestamp : Tue Aug 6 2019
  287.  
  288. Image path: \??\C:\WINDOWS\temp\cpuz149\cpuz149_x64.sys
  289. Image name: cpuz149_x64.sys
  290. Search : https://www.google.com/search?q=cpuz149_x64.sys
  291. ADA Info : CPUID driver
  292. Timestamp : Thu Dec 5 2019
  293.  
  294. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  295. Image name: nvvhci.sys
  296. Search : https://www.google.com/search?q=nvvhci.sys
  297. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  298. Timestamp : Fri Jan 10 2020
  299.  
  300. Image path: \SystemRoot\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_93c9cab23ae4703b\e1d68x64.sys
  301. Image name: e1d68x64.sys
  302. Search : https://www.google.com/search?q=e1d68x64.sys
  303. ADA Info : Intel(R) Gigabit Adapter driver
  304. Timestamp : Mon Feb 3 2020
  305.  
  306. Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
  307. Image name: CorsairLLAccess64.sys
  308. Search : https://www.google.com/search?q=CorsairLLAccess64.sys
  309. ADA Info : CORSAIR iCUE Software driver
  310. Timestamp : Fri Feb 14 2020
  311.  
  312. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  313. Image name: nvhda64v.sys
  314. Search : https://www.google.com/search?q=nvhda64v.sys
  315. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  316. Timestamp : Wed Feb 19 2020
  317.  
  318. Image path: \SystemRoot\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1b570d7b9a790b1a\IntcDAud.sys
  319. Image name: IntcDAud.sys
  320. Search : https://www.google.com/search?q=IntcDAud.sys
  321. ADA Info : Intel Display Audio Driver http://www.intel.com/
  322. Timestamp : Tue Feb 25 2020
  323.  
  324. Image path: \??\C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys
  325. Image name: BEDaisy.sys
  326. Search : https://www.google.com/search?q=BEDaisy.sys
  327. ADA Info : BattlEye Anti Cheat driver
  328. Timestamp : Wed May 13 2020
  329.  
  330. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys
  331. Image name: nvlddmkm.sys
  332. Search : https://www.google.com/search?q=nvlddmkm.sys
  333. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  334. Timestamp : Fri May 15 2020
  335.  
  336. Image path: \SystemRoot\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_352025668c124c7e\igdkmd64.sys
  337. Image name: igdkmd64.sys
  338. Search : https://www.google.com/search?q=igdkmd64.sys
  339. ADA Info : Intel HD graphics driver
  340. Timestamp : Tue May 19 2020
  341.  
  342. ====================== Dump #1: MICROSOFT DRIVERS ======================
  343.  
  344. ACPI.sys ACPI Driver for NT (Microsoft)
  345. acpiex.sys ACPIEx Driver (Microsoft)
  346. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  347. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  348. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  349. ahcache.sys Application Compatibility Cache (Microsoft)
  350. bam.sys BAM Kernal driver (Microsoft)
  351. BasicDisplay.sys Basic Display driver (Microsoft)
  352. BasicRender.sys Basic Render driver (Microsoft)
  353. Beep.SYS BEEP driver (Microsoft)
  354. bindflt.sys Windows Bind Filter driver (Microsoft)
  355. BOOTVID.dll VGA Boot Driver (Microsoft)
  356. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  357. cdd.dll Canonical Display Driver (Microsoft)
  358. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  359. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  360. CI.dll Code Integrity Module (Microsoft)
  361. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  362. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  363. CLFS.SYS Common Log File System Driver (Microsoft)
  364. clipsp.sys CLIP Service (Microsoft)
  365. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  366. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  367. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  368. condrv.sys Console Driver (Microsoft)
  369. crashdmp.sys Crash Dump driver (Microsoft)
  370. dfsc.sys DFS Namespace Client Driver (Microsoft)
  371. disk.sys PnP Disk Driver (Microsoft)
  372. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  373. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  374. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  375. dump_iaStorE.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  376. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  377. dxgmms2.sys DirectX Graphics MMS
  378. fastfat.SYS Fast FAT File System Driver (Microsoft)
  379. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  380. fileinfo.sys FileInfo Filter Driver (Microsoft)
  381. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  382. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  383. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  384. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  385. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  386. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  387. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  388. HIDCLASS.SYS Hid Class Library (Microsoft)
  389. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  390. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  391. HTTP.sys HTTP Protocol Stack (Microsoft)
  392. intelpep.sys Intel Power Engine Plugin (Microsoft)
  393. intelppm.sys Processor Device Driver (Microsoft)
  394. iorate.sys I/O rate control Filter (Microsoft)
  395. kbdclass.sys Keyboard Class Driver (Microsoft)
  396. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  397. kd.dll Local Kernal Debugger (Microsoft)
  398. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  399. ks.sys Kernal CSA Library (Microsoft)
  400. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  401. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  402. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  403. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  404. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  405. mcupdate_GenuineIntel.dll Intel Microcode Update Library (Microsoft)
  406. mmcss.sys MMCSS Driver (Microsoft)
  407. monitor.sys Monitor Driver (Microsoft)
  408. mouclass.sys Mouse Class Driver (Microsoft)
  409. mouhid.sys HID Mouse Filter Driver (Microsoft)
  410. mountmgr.sys Mount Point Manager (Microsoft)
  411. MpKslDrv.sys Microsoft Anti-malware Protection driver
  412. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  413. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  414. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  415. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  416. Msfs.SYS Mailslot driver (Microsoft)
  417. msisadrv.sys ISA Driver (Microsoft)
  418. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  419. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  420. mssmbios.sys System Management BIOS driver (Microsoft)
  421. mup.sys Multiple UNC Provider driver (Microsoft)
  422. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  423. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  424. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  425. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  426. netbios.sys NetBIOS Interface driver (Microsoft)
  427. netbt.sys MBT Transport driver (Microsoft)
  428. NETIO.SYS Network I/O Subsystem (Microsoft)
  429. Npfs.SYS NPFS driver (Microsoft)
  430. npsvctrig.sys Named pipe service triggers (Microsoft)
  431. nsiproxy.sys NSI Proxy driver (Microsoft)
  432. Ntfs.sys NT File System Driver (Microsoft)
  433. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  434. ntosext.sys NTOS Extension Host driver (Microsoft)
  435. Null.SYS NULL Driver (Microsoft)
  436. nwifi.sys NativeWiFi Miniport Driver (Microsoft)
  437. pacer.sys QoS Packet Scheduler (Microsoft)
  438. partmgr.sys Partition driver (Microsoft)
  439. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  440. pcw.sys Performance Counter Driver (Microsoft)
  441. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  442. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  443. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  444. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  445. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  446. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  447. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  448. rdyboost.sys ReadyBoost Driver (Microsoft)
  449. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  450. serenum.sys Serial Port Enumerator (Microsoft)
  451. serial.sys Serial Device Driver
  452. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  453. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  454. spaceport.sys Storage Spaces driver (Microsoft)
  455. srv2.sys Smb 2.0 Server driver (Microsoft)
  456. srvnet.sys Server Network driver (Microsoft)
  457. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  458. storqosflt.sys Storage QoS Filter driver (Microsoft)
  459. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  460. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  461. tcpip.sys TCP/IP Protocol driver (Microsoft)
  462. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  463. TDI.SYS TDI Wrapper driver (Microsoft)
  464. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  465. tm.sys Kernel Transaction Manager driver (Microsoft)
  466. tpm.sys Trusted Platform Module Device driver (Microsoft)
  467. ucx01000.sys USB Controller Extension (Microsoft)
  468. umbus.sys User-Mode Bus Enumerator (Microsoft)
  469. usbaudio.sys USB Audio Class Driver (Microsoft)
  470. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  471. USBD.SYS Universal Serial Bus Driver (Microsoft)
  472. UsbHub3.sys USB3 HUB driver (Microsoft)
  473. USBXHCI.SYS USB XHCI driver (Microsoft)
  474. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  475. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  476. volmgr.sys Volume Manager Driver (Microsoft)
  477. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  478. volsnap.sys Volume Shadow Copy driver (Microsoft)
  479. volume.sys Volume driver (Microsoft)
  480. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  481. watchdog.sys Watchdog driver (Microsoft)
  482. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  483. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  484. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  485. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  486. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  487. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  488. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  489. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  490. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  491. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  492. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  493. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  494. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  495. winquic.sys QUIC Transport Protocol driver (Microsoft)
  496. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  497. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  498. Wof.sys Windows Overlay Filter (Microsoft)
  499. WppRecorder.sys WPP Trace Recorder (Microsoft)
  500.  
  501. ====================== Dump #1: UNLOADED MODULES =======================
  502.  
  503. fffff805`b1a80000 fffff805`b1d6b000 BEDaisy.sys
  504. fffff805`b6310000 fffff805`b6321000 MSKSSRV.sys
  505. fffff805`b62f0000 fffff805`b6301000 MSKSSRV.sys
  506. fffff805`b67c0000 fffff805`b67d1000 MSKSSRV.sys
  507. fffff805`b1da0000 fffff805`b1dad000 MSPCLOCK.sys
  508. fffff805`b1d90000 fffff805`b1d9d000 MSPQM.sys
  509. fffff805`79780000 fffff805`797d5000 lvrs64.sys
  510. fffff805`73a80000 fffff805`73f09000 lvuvc64.sys
  511. fffff805`b6480000 fffff805`b648f000 hiber_storpo
  512. fffff805`b6650000 fffff805`b6780000 hiber_iaStor
  513. fffff805`b6780000 fffff805`b679e000 hiber_dumpfv
  514. fffff805`713f0000 fffff805`71401000 MpKsl1aa97ad
  515. fffff805`b1a20000 fffff805`b1a31000 MpKsl9536851
  516. fffff805`b6160000 fffff805`b644b000 BEDaisy.sys
  517. fffff805`b6450000 fffff805`b6461000 MSKSSRV.sys
  518. fffff805`b5e00000 fffff805`b60eb000 BEDaisy.sys
  519. fffff805`b6140000 fffff805`b6151000 MSKSSRV.sys
  520. fffff805`b60f0000 fffff805`b6116000 USBSTOR.SYS
  521. fffff805`b6120000 fffff805`b613c000 EhStorClass.
  522. fffff805`757f0000 fffff805`757ff000 WpdUpFltr.sy
  523. fffff805`72120000 fffff805`72171000 WUDFRd.sys
  524. fffff805`77d80000 fffff805`77da6000 USBSTOR.SYS
  525. fffff805`b1aa0000 fffff805`b1d8b000 BEDaisy.sys
  526. fffff805`b6680000 fffff805`b6691000 MSKSSRV.sys
  527. fffff805`b6650000 fffff805`b6661000 MSKSSRV.sys
  528. fffff805`b6670000 fffff805`b667c000 bertreader.s
  529. fffff805`b1a80000 fffff805`b1a91000 MSKSSRV.sys
  530. fffff805`77530000 fffff805`7753a000 CorsairVHidD
  531. fffff805`71c10000 fffff805`71c21000 MSKSSRV.sys
  532. fffff805`73fa0000 fffff805`73fbc000 EhStorClass.
  533. fffff805`711c0000 fffff805`711cf000 dump_storpor
  534. fffff805`70b30000 fffff805`70c60000 dump_iaStorE
  535. fffff805`70c80000 fffff805`70c9e000 dump_dumpfve
  536. fffff805`6f8b0000 fffff805`6f8cc000 EhStorClass.
  537. fffff805`71450000 fffff805`7146e000 dam.sys
  538. fffff805`6f360000 fffff805`6f371000 WdBoot.sys
  539. fffff805`70450000 fffff805`70461000 hwpolicy.sys
  540.  
  541. ====================== Dump #1: BIOS INFORMATION =======================
  542.  
  543. [SMBIOS Data Tables v3.0]
  544. [DMI Version - 0]
  545. [2.0 Calling Convention - No]
  546. [Table Size - 4506 bytes]
  547. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  548. Vendor American Megatrends Inc.
  549. BIOS Version 1002
  550. BIOS Starting Address Segment f000
  551. BIOS Release Date 12/14/2017
  552. BIOS ROM Size 1000000
  553. BIOS Characteristics
  554. 07: - PCI Supported
  555. 10: - APM Supported
  556. 11: - Upgradeable FLASH BIOS
  557. 12: - BIOS Shadowing Supported
  558. 15: - CD-Boot Supported
  559. 16: - Selectable Boot Supported
  560. 17: - BIOS ROM Socketed
  561. 19: - EDD Supported
  562. 23: - 1.2MB Floppy Supported
  563. 24: - 720KB Floppy Supported
  564. 25: - 2.88MB Floppy Supported
  565. 26: - Print Screen Device Supported
  566. 27: - Keyboard Services Supported
  567. 28: - Serial Services Supported
  568. 29: - Printer Services Supported
  569. 32: - BIOS Vendor Reserved
  570. BIOS Characteristic Extensions
  571. 00: - ACPI Supported
  572. 01: - USB Legacy Supported
  573. 08: - BIOS Boot Specification Supported
  574. 10: - Specification Reserved
  575. 11: - Specification Reserved
  576. BIOS Major Revision 5
  577. BIOS Minor Revision 12
  578. EC Firmware Major Revision 255
  579. EC Firmware Minor Revision 255
  580. [System Information (Type 1) - Length 27 - Handle 0001h]
  581. Manufacturer PC Specialist LTD
  582. Product Name Intel Z270
  583. Version System Version
  584. UUID 00000000-0000-0000-0000-000000000000
  585. Wakeup Type Power Switch
  586. SKUNumber 1364299
  587. Family Intel Z270 Systems
  588. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  589. Manufacturer ASUSTeK COMPUTER INC.
  590. Product PRIME Z270-K
  591. Version Rev X.0x
  592. Feature Flags 09h
  593. -813648160: - -813648112: - ÷7?
  594. ü
  595. Location Default string
  596. Chassis Handle 0003h
  597. Board Type 0ah - Processor/Memory Module
  598. Number of Child Handles 0
  599. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  600. Manufacturer Default string
  601. Chassis Type Desktop
  602. Version Default string
  603. Bootup State Safe
  604. Power Supply State Safe
  605. Thermal State Safe
  606. Security Status None
  607. OEM Defined 0
  608. Height 0U
  609. Number of Power Cords 1
  610. Number of Contained Elements 0
  611. Contained Element Size 3
  612. [Onboard Devices Information (Type 10) - Length 6 - Handle 0026h]
  613. Number of Devices 1
  614. 01: Type Video [enabled]
  615. [OEM Strings (Type 11) - Length 5 - Handle 0027h]
  616. Number of Strings 8
  617. 1 Default string
  618. 2 Default string
  619. 3 POTATO
  620. 4 Default string
  621. 5 FFFFFFFFFFFFF
  622. 6 FFFFFFFFFFFFF
  623. 7 FFFFFFFFFFFFF
  624. 8 Default string
  625. [System Configuration Options (Type 12) - Length 5 - Handle 0028h]
  626. [Physical Memory Array (Type 16) - Length 23 - Handle 0043h]
  627. Location 03h - SystemBoard/Motherboard
  628. Use 03h - System Memory
  629. Memory Error Correction 03h - None
  630. Maximum Capacity 67108864KB
  631. Number of Memory Devices 4
  632. [Memory Device (Type 17) - Length 40 - Handle 0044h]
  633. Physical Memory Array Handle 0043h
  634. Total Width 64 bits
  635. Data Width 64 bits
  636. Size 8192MB
  637. Form Factor 09h - DIMM
  638. Device Locator ChannelA-DIMM1
  639. Bank Locator BANK 0
  640. Memory Type 1ah - Specification Reserved
  641. Type Detail 4080h - Synchronous
  642. Speed 2133MHz
  643. Manufacturer Corsair
  644. Part Number CMR32GX4M4C3000C16
  645. [Memory Device (Type 17) - Length 40 - Handle 0045h]
  646. Physical Memory Array Handle 0043h
  647. Total Width 64 bits
  648. Data Width 64 bits
  649. Size 8192MB
  650. Form Factor 09h - DIMM
  651. Device Locator ChannelA-DIMM2
  652. Bank Locator BANK 1
  653. Memory Type 1ah - Specification Reserved
  654. Type Detail 4080h - Synchronous
  655. Speed 2133MHz
  656. Manufacturer Corsair
  657. Part Number CMR32GX4M4C3000C16
  658. [Memory Device (Type 17) - Length 40 - Handle 0046h]
  659. Physical Memory Array Handle 0043h
  660. Total Width 64 bits
  661. Data Width 64 bits
  662. Size 8192MB
  663. Form Factor 09h - DIMM
  664. Device Locator ChannelB-DIMM1
  665. Bank Locator BANK 2
  666. Memory Type 1ah - Specification Reserved
  667. Type Detail 4080h - Synchronous
  668. Speed 2133MHz
  669. Manufacturer Corsair
  670. Part Number CMR32GX4M4C3000C16
  671. [Memory Device (Type 17) - Length 40 - Handle 0047h]
  672. Physical Memory Array Handle 0043h
  673. Total Width 64 bits
  674. Data Width 64 bits
  675. Size 8192MB
  676. Form Factor 09h - DIMM
  677. Device Locator ChannelB-DIMM2
  678. Bank Locator BANK 3
  679. Memory Type 1ah - Specification Reserved
  680. Type Detail 4080h - Synchronous
  681. Speed 2133MHz
  682. Manufacturer Corsair
  683. Part Number CMR32GX4M4C3000C16
  684. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0048h]
  685. Starting Address 00000000h
  686. Ending Address 01ffffffh
  687. Memory Array Handle 0043h
  688. Partition Width 04
  689. [Cache Information (Type 7) - Length 19 - Handle 0049h]
  690. Socket Designation L1 Cache
  691. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  692. Maximum Cache Size 0100h - 256K
  693. Installed Size 0100h - 256K
  694. Supported SRAM Type 0020h - Synchronous
  695. Current SRAM Type 0020h - Synchronous
  696. Cache Speed 0ns
  697. Error Correction Type ParitySingle-Bit ECC
  698. System Cache Type Unified
  699. Associativity 8-way Set-Associative
  700. [Cache Information (Type 7) - Length 19 - Handle 004ah]
  701. Socket Designation L2 Cache
  702. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  703. Maximum Cache Size 0400h - 1024K
  704. Installed Size 0400h - 1024K
  705. Supported SRAM Type 0020h - Synchronous
  706. Current SRAM Type 0020h - Synchronous
  707. Cache Speed 0ns
  708. Error Correction Type Multi-Bit ECC
  709. System Cache Type Unified
  710. Associativity 4-way Set-Associative
  711. [Cache Information (Type 7) - Length 19 - Handle 004bh]
  712. Socket Designation L3 Cache
  713. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  714. Maximum Cache Size 2000h - 8192K
  715. Installed Size 2000h - 8192K
  716. Supported SRAM Type 0020h - Synchronous
  717. Current SRAM Type 0020h - Synchronous
  718. Cache Speed 0ns
  719. Error Correction Type Specification Reserved
  720. System Cache Type Unified
  721. Associativity 16-way Set-Associative
  722. [Processor Information (Type 4) - Length 48 - Handle 004ch]
  723. Socket Designation LGA1151
  724. Processor Type Central Processor
  725. Processor Family c6h - Specification Reserved
  726. Processor Manufacturer Intel(R) Corporation
  727. Processor ID e9060900fffbebbf
  728. Processor Version Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
  729. Processor Voltage 8bh - 1.1V
  730. External Clock 100MHz
  731. Max Speed 8300MHz
  732. Current Speed 4200MHz
  733. Status Enabled Populated
  734. Processor Upgrade Other
  735. L1 Cache Handle 0049h
  736. L2 Cache Handle 004ah
  737. L3 Cache Handle 004bh
  738. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004dh]
  739. Starting Address 00000000h
  740. Ending Address 007fffffh
  741. Memory Device Handle 0044h
  742. Mem Array Mapped Adr Handle 0048h
  743. Interleave Position 01
  744. Interleave Data Depth 02
  745. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004eh]
  746. Starting Address 01000000h
  747. Ending Address 017fffffh
  748. Memory Device Handle 0045h
  749. Mem Array Mapped Adr Handle 0048h
  750. Interleave Position 01
  751. Interleave Data Depth 02
  752. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004fh]
  753. Starting Address 00800000h
  754. Ending Address 00ffffffh
  755. Memory Device Handle 0046h
  756. Mem Array Mapped Adr Handle 0048h
  757. Interleave Position 02
  758. Interleave Data Depth 02
  759. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0050h]
  760. Starting Address 01800000h
  761. Ending Address 01ffffffh
  762. Memory Device Handle 0047h
  763. Mem Array Mapped Adr Handle 0048h
  764. Interleave Position 02
  765. Interleave Data Depth 02
  766.  
  767. ========================== Dump #1: Extra #1 ===========================
  768.  
  769. 7: kd> !verifier
  770. Verify Flags Level 0x00000000
  771. STANDARD FLAGS:
  772. [X] (0x00000000) Automatic Checks
  773. [ ] (0x00000001) Special pool
  774. [ ] (0x00000002) Force IRQL checking
  775. [ ] (0x00000008) Pool tracking
  776. [ ] (0x00000010) I/O verification
  777. [ ] (0x00000020) Deadlock detection
  778. [ ] (0x00000080) DMA checking
  779. [ ] (0x00000100) Security checks
  780. [ ] (0x00000800) Miscellaneous checks
  781. [ ] (0x00020000) DDI compliance checking
  782. ADDITIONAL FLAGS:
  783. [ ] (0x00000004) Randomized low resources simulation
  784. [ ] (0x00000200) Force pending I/O requests
  785. [ ] (0x00000400) IRP logging
  786. [ ] (0x00002000) Invariant MDL checking for stack
  787. [ ] (0x00004000) Invariant MDL checking for driver
  788. [ ] (0x00008000) Power framework delay fuzzing
  789. [ ] (0x00010000) Port/miniport interface checking
  790. [ ] (0x00040000) Systematic low resources simulation
  791. [ ] (0x00080000) DDI compliance checking (additional)
  792. [ ] (0x00200000) NDIS/WIFI verification
  793. [ ] (0x00800000) Kernel synchronization delay fuzzing
  794. [ ] (0x01000000) VM switch verification
  795. [ ] (0x02000000) Code integrity checks
  796. [X] Indicates flag is enabled
  797. Summary of All Verifier Statistics
  798. RaiseIrqls 0x0
  799. AcquireSpinLocks 0x0
  800. Synch Executions 0x0
  801. Trims 0x0
  802. Pool Allocations Attempted 0x0
  803. Pool Allocations Succeeded 0x0
  804. Pool Allocations Succeeded SpecialPool 0x0
  805. Pool Allocations With NO TAG 0x0
  806. Pool Allocations Failed 0x0
  807. Current paged pool allocations 0x0 for 00000000 bytes
  808. Peak paged pool allocations 0x0 for 00000000 bytes
  809. Current nonpaged pool allocations 0x0 for 00000000 bytes
  810. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  811.  
  812. ========================== Dump #1: Extra #2 ===========================
  813.  
  814. 7: kd> !thread
  815. THREAD ffffe10348dba080 Cid 468c.35c0 Teb: 000000e99bedf000 Win32Thread: ffffe10349e12580 RUNNING on processor 7
  816. Not impersonating
  817. GetUlongFromAddress: unable to read from fffff8056e02ca24
  818. Owning Process ffffe10348d29080 Image: obs64.exe
  819. Attached Process N/A Image: N/A
  820. fffff78000000000: Unable to get shared data
  821. Wait Start TickCount 1191116 Ticks: 0
  822. Context Switch Count 1674175 IdealProcessor: 7
  823. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  824. UserTime 00:00:00.000
  825. KernelTime 00:00:00.000
  826. Win32 Start Address 0x00007ffdcfe9928c
  827. Stack Init fffff286e557fb90 Current fffff286e557f5e0
  828. Base fffff286e5580000 Limit fffff286e5579000 Call 0000000000000000
  829. Priority 10 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
  830. Child-SP RetAddr : Args to Child : Call Site
  831. fffff286`e557c928 fffff805`6ddd41e9 : 00000000`0000003b 00000000`80000003 fffff805`6dc5a1c8 fffff286`e557d260 : nt!KeBugCheckEx
  832. fffff286`e557c930 fffff805`6ddd363c : fffff286`e557d0a0 fffff805`70d54cbe fffff805`70dba820 fffff286`e557da18 : nt!KiBugCheckDispatch+0x69
  833. fffff286`e557ca70 fffff805`6ddcb17f : fffff805`6e111000 fffff805`6dc00000 0005e338`00ab7000 00000000`00000000 : nt!KiSystemServiceHandler+0x7c
  834. fffff286`e557cab0 fffff805`6dcfa2c5 : 00000000`00000000 00000000`00000000 fffff286`e557d020 00007fff`ffff0000 : nt!RtlpExecuteHandlerForException+0xf
  835. fffff286`e557cae0 fffff805`6dcfe85e : fffff286`e557da18 fffff286`e557d760 fffff286`e557da18 00000000`00040282 : nt!RtlDispatchException+0x4a5
  836. fffff286`e557d230 fffff805`6ddd431d : 00000000`00000000 ffff8c81`329cd180 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x16e
  837. fffff286`e557d8e0 fffff805`6ddcdcd6 : ffffffff`ffffffff fffff805`6ddc3ee1 00000000`00000097 fffff805`6db5f37b : nt!KiExceptionDispatch+0x11d
  838. fffff286`e557dac0 fffff805`6dc5a1c9 : fffff805`00000000 00000000`4c4c764e 00000000`00000001 00000000`000001a0 : nt!KiBreakpointTrap+0x316 (TrapFrame @ fffff286`e557dac0)
  839. fffff286`e557dc50 fffff805`6dd9d315 : 00000000`00000000 fffff805`70dba820 fffff286`e557dda0 fffff805`6dd0bc44 : nt!KeCheckStackAndTargetAddress+0x49
  840. fffff286`e557dc80 fffff805`70d54cbe : fffff805`70dba820 fffff286`e557ec88 fffff286`e557f740 00000000`4c4c764e : nt!_C_specific_handler+0x45
  841. fffff286`e557dcf0 fffff805`6ddcb17f : fffff286`e557f740 fffff286`e557e290 00000000`00000000 00000000`00000000 : dxgkrnl!_GSHandlerCheck_SEH+0x6a
  842. fffff286`e557dd20 fffff805`6dcfa2c5 : 00000000`00000000 00000000`00000000 fffff286`e557e290 00007fff`ffff0000 : nt!RtlpExecuteHandlerForException+0xf
  843. fffff286`e557dd50 fffff805`6dcfe85e : fffff286`e557ec88 fffff286`e557e9d0 fffff286`e557ec88 00000000`00004012 : nt!RtlDispatchException+0x4a5
  844. fffff286`e557e4a0 fffff805`6ddd431d : fffff286`e557eb40 00000000`00000010 ffff96b5`5cd65600 00000000`00040282 : nt!KiDispatchException+0x16e
  845. fffff286`e557eb50 fffff805`6ddd0503 : 00000000`00000000 fffff286`e557f538 fffffaa0`c61b0d20 00000000`00000000 : nt!KiExceptionDispatch+0x11d
  846. fffff286`e557ed30 00000000`00040282 : 00000000`00000000 fffffac8`505e3c0c fffffaa0`c68be010 00000000`00004012 : nt!KiPageFault+0x443 (TrapFrame @ fffff286`e557ed30)
  847. fffff286`e557eec0 00000000`00000000 : fffffac8`505e3c0c fffffaa0`c68be010 00000000`00004012 fffffaa0`c4c3ca70 : 0x40282
  848.  
  849.  
  850. ========================================================================
  851. ======================= Dump #2: ANALYZE VERBOSE =======================
  852. ====================== File: 060220-13265-01.dmp =======================
  853. ========================================================================
  854.  
  855. Mini Kernel Dump File: Only registers and stack trace are available
  856. Windows 10 Kernel Version 17763 MP (8 procs) Free x64
  857. Kernel base = 0xfffff800`3acb1000 PsLoadedModuleList = 0xfffff800`3b0cb6f0
  858. Debug session time: Tue Jun 2 08:42:05.520 2020 (UTC - 4:00)
  859. System Uptime: 0 days 0:22:28.198
  860.  
  861. BugCheck 50, {fffff63cc45ae770, 0, fffff697dae386ef, 2}
  862. Could not read faulting driver name
  863. Probably caused by : memory_corruption
  864. Followup: memory_corruption
  865.  
  866. PAGE_FAULT_IN_NONPAGED_AREA (50)
  867. Invalid system memory was referenced. This cannot be protected by try-except.
  868. Typically the address is just plain bad or it is pointing at freed memory.
  869.  
  870. Arguments:
  871. Arg1: fffff63cc45ae770, memory referenced.
  872. Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
  873. Arg3: fffff697dae386ef, If non-zero, the instruction address which referenced the bad memory
  874. address.
  875. Arg4: 0000000000000002, (reserved)
  876.  
  877. Debugging Details:
  878. Could not read faulting driver name
  879. DUMP_CLASS: 1
  880. DUMP_QUALIFIER: 400
  881. DUMP_TYPE: 2
  882. READ_ADDRESS: fffff8003b1f2390: Unable to get MiVisibleState
  883. fffff63cc45ae770
  884. FAULTING_IP:
  885. win32kfull!PhkFirstValid+17
  886. fffff697`dae386ef 8b4140 mov eax,dword ptr [rcx+40h]
  887. MM_INTERNAL_CODE: 2
  888. CUSTOMER_CRASH_COUNT: 1
  889. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  890. BUGCHECK_STR: AV
  891.  
  892. PROCESS_NAME: iCUE.exe
  893.  
  894. CURRENT_IRQL: 0
  895. TRAP_FRAME: fffff3089a30f550 -- (.trap 0xfffff3089a30f550)
  896. NOTE: The trap frame does not contain all registers.
  897. Some register values may be zeroed or incorrect.
  898. rax=fffff6b6c62518a0 rbx=0000000000000000 rcx=fffff63cc45ae730
  899. rdx=0000000000000003 rsi=0000000000000000 rdi=0000000000000000
  900. rip=fffff697dae386ef rsp=fffff3089a30f6e0 rbp=fffff3089a30fa80
  901. r8=0000000000000003 r9=0000000000000001 r10=0000000000000003
  902. r11=fffff3089a30f920 r12=0000000000000000 r13=0000000000000000
  903. r14=0000000000000000 r15=0000000000000000
  904. iopl=0 nv up ei ng nz na po nc
  905. win32kfull!PhkFirstValid+0x17:
  906. fffff697`dae386ef 8b4140 mov eax,dword ptr [rcx+40h] ds:fffff63c`c45ae770=????????
  907. Resetting default scope
  908. LAST_CONTROL_TRANSFER: from fffff8003ae94b73 to fffff8003ae68ab0
  909. STACK_TEXT:
  910. fffff308`9a30f268 fffff800`3ae94b73 : 00000000`00000050 fffff63c`c45ae770 00000000`00000000 fffff308`9a30f550 : nt!KeBugCheckEx
  911. fffff308`9a30f270 fffff800`3ad61c68 : 00000000`00000000 ffff8000`00000000 00000000`00003dff fffff63c`c45ae770 : nt!MiSystemFault+0x1b9673
  912. fffff308`9a30f3b0 fffff800`3ae765c9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x1d8
  913. fffff308`9a30f550 fffff697`dae386ef : ffffdf83`abed7710 fffff800`3ad6f0de ffffc9f1`559e898b fffff697`db1a334b : nt!KiPageFault+0x349
  914. fffff308`9a30f6e0 fffff697`daf4eeff : fffff308`9a30f920 00000000`00000400 00000000`00000000 00000000`00000001 : win32kfull!PhkFirstValid+0x17
  915. fffff308`9a30f710 fffff697`dae6ba2f : fffff6b6`c62518a0 fffff308`9a30fa80 00000000`00003dff 00000000`00060001 : win32kfull!xxxCallHook+0x57
  916. fffff308`9a30f750 fffff697`dae6a9b7 : fffff308`9a30f920 fffff308`9a303dbf 00000000`00000000 00000000`00000f33 : win32kfull!xxxRealInternalGetMessage+0xfff
  917. fffff308`9a30f8e0 fffff800`3ae7a23e : 00000000`00f1e0c0 ffffdf83`b09a2080 fffff308`9a30f9a8 00000000`011c9000 : win32kfull!NtUserPeekMessage+0x157
  918. fffff308`9a30f990 00007ffc`0304f4e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2b9
  919. 00000000`00f1e088 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`0304f4e4
  920. STACK_COMMAND: kb
  921. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  922. fffff8003ae260b2-fffff8003ae260b3 2 bytes - nt!PpmResetPerformanceAccumulation+32
  923. [ 48 ff:4c 8b ]
  924. fffff8003ae260b9-fffff8003ae260bd 5 bytes - nt!PpmResetPerformanceAccumulation+39 (+0x07)
  925. [ 0f 1f 44 00 00:e8 12 e5 de ff ]
  926. 7 errors : !nt (fffff8003ae260b2-fffff8003ae260bd)
  927. MODULE_NAME: memory_corruption
  928.  
  929. IMAGE_NAME: memory_corruption
  930.  
  931. FOLLOWUP_NAME: memory_corruption
  932. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  933. MEMORY_CORRUPTOR: LARGE
  934. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  935. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  936. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  937. TARGET_TIME: 2020-06-02T12:42:05.000Z
  938. SUITE_MASK: 784
  939. PRODUCT_TYPE: 1
  940. USER_LCID: 0
  941. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  942. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  943. Followup: memory_corruption
  944.  
  945. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  946.  
  947. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  948. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  949. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  950. Jul 18 2017 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  951. Jul 13 2018 - CMUSBDAC.sys - C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  952. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  953. Apr 11 2019 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  954. Apr 11 2019 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  955. Aug 06 2019 - iaStorE.sys - Intel SATA Storage Device RAID Controller
  956. Aug 22 2019 - IntcDAud.sys - Intel Display Audio Driver http://www.intel.com/
  957. Sep 25 2019 - igdkmd64.sys - Intel HD graphics driver
  958. Dec 05 2019 - cpuz149_x64.sys - CPUID driver
  959. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  960. Feb 03 2020 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  961. Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
  962. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  963. May 13 2020 - BEDaisy.sys - BattlEye Anti Cheat driver
  964. May 15 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  965.  
  966. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  967.  
  968. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  969. Image name: lvrs64.sys
  970. Search : https://www.google.com/search?q=lvrs64.sys
  971. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  972. Timestamp : Mon Oct 22 2012
  973.  
  974. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  975. Image name: lvuvc64.sys
  976. Search : https://www.google.com/search?q=lvuvc64.sys
  977. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  978. Timestamp : Mon Oct 22 2012
  979.  
  980. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  981. Image name: RTKVHD64.sys
  982. Search : https://www.google.com/search?q=RTKVHD64.sys
  983. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  984. Timestamp : Fri Jun 3 2016
  985.  
  986. Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
  987. Image name: TeeDriverW8x64.sys
  988. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  989. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  990. Timestamp : Tue Jul 18 2017
  991.  
  992. Image path: \SystemRoot\system32\DRIVERS\CMUSBDAC.sys
  993. Image name: CMUSBDAC.sys
  994. Search : https://www.google.com/search?q=CMUSBDAC.sys
  995. ADA Info : C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  996. Timestamp : Fri Jul 13 2018
  997.  
  998. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  999. Image name: nvvad64v.sys
  1000. Search : https://www.google.com/search?q=nvvad64v.sys
  1001. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1002. Timestamp : Thu Mar 14 2019
  1003.  
  1004. Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
  1005. Image name: CorsairVBusDriver.sys
  1006. Search : https://www.google.com/search?q=CorsairVBusDriver.sys
  1007. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  1008. Timestamp : Thu Apr 11 2019
  1009.  
  1010. Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
  1011. Image name: CorsairVHidDriver.sys
  1012. Search : https://www.google.com/search?q=CorsairVHidDriver.sys
  1013. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  1014. Timestamp : Thu Apr 11 2019
  1015.  
  1016. Image path: \SystemRoot\System32\drivers\iaStorE.sys
  1017. Image name: iaStorE.sys
  1018. Search : https://www.google.com/search?q=iaStorE.sys
  1019. ADA Info : Intel SATA Storage Device RAID Controller
  1020. Timestamp : Tue Aug 6 2019
  1021.  
  1022. Image path: \SystemRoot\System32\DriverStore\FileRepository\intcdaud.inf_amd64_4cd2f01cfbce3160\IntcDAud.sys
  1023. Image name: IntcDAud.sys
  1024. Search : https://www.google.com/search?q=IntcDAud.sys
  1025. ADA Info : Intel Display Audio Driver http://www.intel.com/
  1026. Timestamp : Thu Aug 22 2019
  1027.  
  1028. Image path: \SystemRoot\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_38bfcb542ef4272e\igdkmd64.sys
  1029. Image name: igdkmd64.sys
  1030. Search : https://www.google.com/search?q=igdkmd64.sys
  1031. ADA Info : Intel HD graphics driver
  1032. Timestamp : Wed Sep 25 2019
  1033.  
  1034. Image path: \??\C:\WINDOWS\temp\cpuz149\cpuz149_x64.sys
  1035. Image name: cpuz149_x64.sys
  1036. Search : https://www.google.com/search?q=cpuz149_x64.sys
  1037. ADA Info : CPUID driver
  1038. Timestamp : Thu Dec 5 2019
  1039.  
  1040. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  1041. Image name: nvvhci.sys
  1042. Search : https://www.google.com/search?q=nvvhci.sys
  1043. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1044. Timestamp : Fri Jan 10 2020
  1045.  
  1046. Image path: \SystemRoot\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_93c9cab23ae4703b\e1d68x64.sys
  1047. Image name: e1d68x64.sys
  1048. Search : https://www.google.com/search?q=e1d68x64.sys
  1049. ADA Info : Intel(R) Gigabit Adapter driver
  1050. Timestamp : Mon Feb 3 2020
  1051.  
  1052. Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
  1053. Image name: CorsairLLAccess64.sys
  1054. Search : https://www.google.com/search?q=CorsairLLAccess64.sys
  1055. ADA Info : CORSAIR iCUE Software driver
  1056. Timestamp : Fri Feb 14 2020
  1057.  
  1058. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1059. Image name: nvhda64v.sys
  1060. Search : https://www.google.com/search?q=nvhda64v.sys
  1061. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1062. Timestamp : Wed Feb 19 2020
  1063.  
  1064. Image path: \??\C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys
  1065. Image name: BEDaisy.sys
  1066. Search : https://www.google.com/search?q=BEDaisy.sys
  1067. ADA Info : BattlEye Anti Cheat driver
  1068. Timestamp : Wed May 13 2020
  1069.  
  1070. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys
  1071. Image name: nvlddmkm.sys
  1072. Search : https://www.google.com/search?q=nvlddmkm.sys
  1073. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1074. Timestamp : Fri May 15 2020
  1075.  
  1076. ====================== Dump #2: MICROSOFT DRIVERS ======================
  1077.  
  1078. ACPI.sys ACPI Driver for NT (Microsoft)
  1079. acpiex.sys ACPIEx Driver (Microsoft)
  1080. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  1081. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1082. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1083. ahcache.sys Application Compatibility Cache (Microsoft)
  1084. bam.sys BAM Kernal driver (Microsoft)
  1085. BasicDisplay.sys Basic Display driver (Microsoft)
  1086. BasicRender.sys Basic Render driver (Microsoft)
  1087. Beep.SYS BEEP driver (Microsoft)
  1088. BOOTVID.dll VGA Boot Driver (Microsoft)
  1089. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1090. cdd.dll Canonical Display Driver (Microsoft)
  1091. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1092. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1093. CI.dll Code Integrity Module (Microsoft)
  1094. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1095. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1096. CLFS.SYS Common Log File System Driver (Microsoft)
  1097. clipsp.sys CLIP Service (Microsoft)
  1098. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1099. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1100. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1101. condrv.sys Console Driver (Microsoft)
  1102. crashdmp.sys Crash Dump driver (Microsoft)
  1103. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1104. disk.sys PnP Disk Driver (Microsoft)
  1105. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1106. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1107. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1108. dump_iaStorE.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1109. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1110. dxgmms2.sys DirectX Graphics MMS
  1111. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1112. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1113. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1114. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1115. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1116. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1117. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1118. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1119. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1120. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1121. HIDCLASS.SYS Hid Class Library (Microsoft)
  1122. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1123. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1124. HTTP.sys HTTP Protocol Stack (Microsoft)
  1125. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1126. intelppm.sys Processor Device Driver (Microsoft)
  1127. iorate.sys I/O rate control Filter (Microsoft)
  1128. kbdclass.sys Keyboard Class Driver (Microsoft)
  1129. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1130. kd.dll Local Kernal Debugger (Microsoft)
  1131. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1132. ks.sys Kernal CSA Library (Microsoft)
  1133. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1134. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1135. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1136. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1137. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1138. mcupdate_GenuineIntel.dll Intel Microcode Update Library (Microsoft)
  1139. mmcss.sys MMCSS Driver (Microsoft)
  1140. monitor.sys Monitor Driver (Microsoft)
  1141. mouclass.sys Mouse Class Driver (Microsoft)
  1142. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1143. mountmgr.sys Mount Point Manager (Microsoft)
  1144. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1145. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1146. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  1147. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1148. Msfs.SYS Mailslot driver (Microsoft)
  1149. msisadrv.sys ISA Driver (Microsoft)
  1150. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1151. MSPCLOCK.sys MS Proxy Clock (Microsoft)
  1152. MSPQM.sys MS Proxy Quality Manager (Microsoft)
  1153. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1154. mssmbios.sys System Management BIOS driver (Microsoft)
  1155. mup.sys Multiple UNC Provider driver (Microsoft)
  1156. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1157. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  1158. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1159. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1160. netbios.sys NetBIOS Interface driver (Microsoft)
  1161. netbt.sys MBT Transport driver (Microsoft)
  1162. NETIO.SYS Network I/O Subsystem (Microsoft)
  1163. Npfs.SYS NPFS driver (Microsoft)
  1164. npsvctrig.sys Named pipe service triggers (Microsoft)
  1165. nsiproxy.sys NSI Proxy driver (Microsoft)
  1166. Ntfs.sys NT File System Driver (Microsoft)
  1167. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1168. ntosext.sys NTOS Extension Host driver (Microsoft)
  1169. Null.SYS NULL Driver (Microsoft)
  1170. nwifi.sys NativeWiFi Miniport Driver (Microsoft)
  1171. pacer.sys QoS Packet Scheduler (Microsoft)
  1172. partmgr.sys Partition driver (Microsoft)
  1173. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1174. pcw.sys Performance Counter Driver (Microsoft)
  1175. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1176. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1177. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1178. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1179. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1180. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1181. rdyboost.sys ReadyBoost Driver (Microsoft)
  1182. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1183. serenum.sys Serial Port Enumerator (Microsoft)
  1184. serial.sys Serial Device Driver
  1185. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1186. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1187. spaceport.sys Storage Spaces driver (Microsoft)
  1188. srv2.sys Smb 2.0 Server driver (Microsoft)
  1189. srvnet.sys Server Network driver (Microsoft)
  1190. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1191. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1192. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1193. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1194. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1195. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1196. TDI.SYS TDI Wrapper driver (Microsoft)
  1197. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1198. tm.sys Kernel Transaction Manager driver (Microsoft)
  1199. tpm.sys Trusted Platform Module Device driver (Microsoft)
  1200. ucx01000.sys USB Controller Extension (Microsoft)
  1201. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1202. usbaudio.sys USB Audio Class Driver (Microsoft)
  1203. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1204. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1205. UsbHub3.sys USB3 HUB driver (Microsoft)
  1206. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  1207. USBXHCI.SYS USB XHCI driver (Microsoft)
  1208. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1209. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1210. volmgr.sys Volume Manager Driver (Microsoft)
  1211. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1212. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1213. volume.sys Volume driver (Microsoft)
  1214. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1215. watchdog.sys Watchdog driver (Microsoft)
  1216. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1217. wcnfs.sys Windows Container Name Virtualization FS Filter driver (Microsoft)
  1218. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1219. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1220. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1221. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1222. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1223. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1224. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1225. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1226. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1227. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1228. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1229. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1230. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1231. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1232. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1233. Wof.sys Windows Overlay Filter (Microsoft)
  1234. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  1235. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1236. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1237.  
  1238. ====================== Dump #2: UNLOADED MODULES =======================
  1239.  
  1240. fffff800`8a490000 fffff800`8a4a1000 MSKSSRV.sys
  1241. fffff800`8a150000 fffff800`8a43b000 BEDaisy.sys
  1242. fffff800`8a440000 fffff800`8a451000 MSKSSRV.sys
  1243. fffff800`405c0000 fffff800`405d1000 MSKSSRV.sys
  1244. fffff800`44110000 fffff800`4411a000 CorsairVHidD
  1245. fffff800`3ff70000 fffff800`3ff81000 MSKSSRV.sys
  1246. fffff800`3e000000 fffff800`3e01d000 EhStorClass.
  1247. fffff800`3e5d0000 fffff800`3e5e0000 dump_storpor
  1248. fffff800`3ee00000 fffff800`3ef30000 dump_iaStorE
  1249. fffff800`3ef50000 fffff800`3ef6e000 dump_dumpfve
  1250. fffff800`3f5f0000 fffff800`3f60c000 dam.sys
  1251. fffff800`3dae0000 fffff800`3daf1000 WdBoot.sys
  1252. fffff800`3eaa0000 fffff800`3eab1000 hwpolicy.sys
  1253.  
  1254. ====================== Dump #2: BIOS INFORMATION =======================
  1255.  
  1256. [SMBIOS Data Tables v3.0]
  1257. [DMI Version - 0]
  1258. [2.0 Calling Convention - No]
  1259. [Table Size - 4506 bytes]
  1260. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  1261. Vendor American Megatrends Inc.
  1262. BIOS Version 1002
  1263. BIOS Starting Address Segment f000
  1264. BIOS Release Date 12/14/2017
  1265. BIOS ROM Size 1000000
  1266. BIOS Characteristics
  1267. 07: - PCI Supported
  1268. 10: - APM Supported
  1269. 11: - Upgradeable FLASH BIOS
  1270. 12: - BIOS Shadowing Supported
  1271. 15: - CD-Boot Supported
  1272. 16: - Selectable Boot Supported
  1273. 17: - BIOS ROM Socketed
  1274. 19: - EDD Supported
  1275. 23: - 1.2MB Floppy Supported
  1276. 24: - 720KB Floppy Supported
  1277. 25: - 2.88MB Floppy Supported
  1278. 26: - Print Screen Device Supported
  1279. 27: - Keyboard Services Supported
  1280. 28: - Serial Services Supported
  1281. 29: - Printer Services Supported
  1282. 32: - BIOS Vendor Reserved
  1283. BIOS Characteristic Extensions
  1284. 00: - ACPI Supported
  1285. 01: - USB Legacy Supported
  1286. 08: - BIOS Boot Specification Supported
  1287. 10: - Specification Reserved
  1288. 11: - Specification Reserved
  1289. BIOS Major Revision 5
  1290. BIOS Minor Revision 12
  1291. EC Firmware Major Revision 255
  1292. EC Firmware Minor Revision 255
  1293. [System Information (Type 1) - Length 27 - Handle 0001h]
  1294. Manufacturer PC Specialist LTD
  1295. Product Name Intel Z270
  1296. Version System Version
  1297. UUID 00000000-0000-0000-0000-000000000000
  1298. Wakeup Type Power Switch
  1299. SKUNumber 1364299
  1300. Family Intel Z270 Systems
  1301. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1302. Manufacturer ASUSTeK COMPUTER INC.
  1303. Product PRIME Z270-K
  1304. Version Rev X.0x
  1305. Feature Flags 09h
  1306. -808667424: - -808667376: - ÷7?
  1307. ü
  1308. Location Default string
  1309. Chassis Handle 0003h
  1310. Board Type 0ah - Processor/Memory Module
  1311. Number of Child Handles 0
  1312. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1313. Manufacturer Default string
  1314. Chassis Type Desktop
  1315. Version Default string
  1316. Bootup State Safe
  1317. Power Supply State Safe
  1318. Thermal State Safe
  1319. Security Status None
  1320. OEM Defined 0
  1321. Height 0U
  1322. Number of Power Cords 1
  1323. Number of Contained Elements 0
  1324. Contained Element Size 3
  1325. [Onboard Devices Information (Type 10) - Length 6 - Handle 0026h]
  1326. Number of Devices 1
  1327. 01: Type Video [enabled]
  1328. [OEM Strings (Type 11) - Length 5 - Handle 0027h]
  1329. Number of Strings 8
  1330. 1 Default string
  1331. 2 Default string
  1332. 3 POTATO
  1333. 4 Default string
  1334. 5 FFFFFFFFFFFFF
  1335. 6 FFFFFFFFFFFFF
  1336. 7 FFFFFFFFFFFFF
  1337. 8 Default string
  1338. [System Configuration Options (Type 12) - Length 5 - Handle 0028h]
  1339. [Physical Memory Array (Type 16) - Length 23 - Handle 0043h]
  1340. Location 03h - SystemBoard/Motherboard
  1341. Use 03h - System Memory
  1342. Memory Error Correction 03h - None
  1343. Maximum Capacity 67108864KB
  1344. Number of Memory Devices 4
  1345. [Memory Device (Type 17) - Length 40 - Handle 0044h]
  1346. Physical Memory Array Handle 0043h
  1347. Total Width 64 bits
  1348. Data Width 64 bits
  1349. Size 8192MB
  1350. Form Factor 09h - DIMM
  1351. Device Locator ChannelA-DIMM1
  1352. Bank Locator BANK 0
  1353. Memory Type 1ah - Specification Reserved
  1354. Type Detail 4080h - Synchronous
  1355. Speed 2133MHz
  1356. Manufacturer Corsair
  1357. Part Number CMR32GX4M4C3000C16
  1358. [Memory Device (Type 17) - Length 40 - Handle 0045h]
  1359. Physical Memory Array Handle 0043h
  1360. Total Width 64 bits
  1361. Data Width 64 bits
  1362. Size 8192MB
  1363. Form Factor 09h - DIMM
  1364. Device Locator ChannelA-DIMM2
  1365. Bank Locator BANK 1
  1366. Memory Type 1ah - Specification Reserved
  1367. Type Detail 4080h - Synchronous
  1368. Speed 2133MHz
  1369. Manufacturer Corsair
  1370. Part Number CMR32GX4M4C3000C16
  1371. [Memory Device (Type 17) - Length 40 - Handle 0046h]
  1372. Physical Memory Array Handle 0043h
  1373. Total Width 64 bits
  1374. Data Width 64 bits
  1375. Size 8192MB
  1376. Form Factor 09h - DIMM
  1377. Device Locator ChannelB-DIMM1
  1378. Bank Locator BANK 2
  1379. Memory Type 1ah - Specification Reserved
  1380. Type Detail 4080h - Synchronous
  1381. Speed 2133MHz
  1382. Manufacturer Corsair
  1383. Part Number CMR32GX4M4C3000C16
  1384. [Memory Device (Type 17) - Length 40 - Handle 0047h]
  1385. Physical Memory Array Handle 0043h
  1386. Total Width 64 bits
  1387. Data Width 64 bits
  1388. Size 8192MB
  1389. Form Factor 09h - DIMM
  1390. Device Locator ChannelB-DIMM2
  1391. Bank Locator BANK 3
  1392. Memory Type 1ah - Specification Reserved
  1393. Type Detail 4080h - Synchronous
  1394. Speed 2133MHz
  1395. Manufacturer Corsair
  1396. Part Number CMR32GX4M4C3000C16
  1397. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0048h]
  1398. Starting Address 00000000h
  1399. Ending Address 01ffffffh
  1400. Memory Array Handle 0043h
  1401. Partition Width 04
  1402. [Cache Information (Type 7) - Length 19 - Handle 0049h]
  1403. Socket Designation L1 Cache
  1404. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1405. Maximum Cache Size 0100h - 256K
  1406. Installed Size 0100h - 256K
  1407. Supported SRAM Type 0020h - Synchronous
  1408. Current SRAM Type 0020h - Synchronous
  1409. Cache Speed 0ns
  1410. Error Correction Type ParitySingle-Bit ECC
  1411. System Cache Type Unified
  1412. Associativity 8-way Set-Associative
  1413. [Cache Information (Type 7) - Length 19 - Handle 004ah]
  1414. Socket Designation L2 Cache
  1415. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1416. Maximum Cache Size 0400h - 1024K
  1417. Installed Size 0400h - 1024K
  1418. Supported SRAM Type 0020h - Synchronous
  1419. Current SRAM Type 0020h - Synchronous
  1420. Cache Speed 0ns
  1421. Error Correction Type Multi-Bit ECC
  1422. System Cache Type Unified
  1423. Associativity 4-way Set-Associative
  1424. [Cache Information (Type 7) - Length 19 - Handle 004bh]
  1425. Socket Designation L3 Cache
  1426. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1427. Maximum Cache Size 2000h - 8192K
  1428. Installed Size 2000h - 8192K
  1429. Supported SRAM Type 0020h - Synchronous
  1430. Current SRAM Type 0020h - Synchronous
  1431. Cache Speed 0ns
  1432. Error Correction Type Specification Reserved
  1433. System Cache Type Unified
  1434. Associativity 16-way Set-Associative
  1435. [Processor Information (Type 4) - Length 48 - Handle 004ch]
  1436. Socket Designation LGA1151
  1437. Processor Type Central Processor
  1438. Processor Family c6h - Specification Reserved
  1439. Processor Manufacturer Intel(R) Corporation
  1440. Processor ID e9060900fffbebbf
  1441. Processor Version Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
  1442. Processor Voltage 8bh - 1.1V
  1443. External Clock 100MHz
  1444. Max Speed 8300MHz
  1445. Current Speed 4200MHz
  1446. Status Enabled Populated
  1447. Processor Upgrade Other
  1448. L1 Cache Handle 0049h
  1449. L2 Cache Handle 004ah
  1450. L3 Cache Handle 004bh
  1451. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004dh]
  1452. Starting Address 00000000h
  1453. Ending Address 007fffffh
  1454. Memory Device Handle 0044h
  1455. Mem Array Mapped Adr Handle 0048h
  1456. Interleave Position 01
  1457. Interleave Data Depth 02
  1458. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004eh]
  1459. Starting Address 01000000h
  1460. Ending Address 017fffffh
  1461. Memory Device Handle 0045h
  1462. Mem Array Mapped Adr Handle 0048h
  1463. Interleave Position 01
  1464. Interleave Data Depth 02
  1465. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004fh]
  1466. Starting Address 00800000h
  1467. Ending Address 00ffffffh
  1468. Memory Device Handle 0046h
  1469. Mem Array Mapped Adr Handle 0048h
  1470. Interleave Position 02
  1471. Interleave Data Depth 02
  1472. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0050h]
  1473. Starting Address 01800000h
  1474. Ending Address 01ffffffh
  1475. Memory Device Handle 0047h
  1476. Mem Array Mapped Adr Handle 0048h
  1477. Interleave Position 02
  1478. Interleave Data Depth 02
  1479.  
  1480. ========================== Dump #2: Extra #1 ===========================
  1481.  
  1482. 1: kd> !verifier
  1483. Verify Flags Level 0x00000000
  1484. STANDARD FLAGS:
  1485. [X] (0x00000000) Automatic Checks
  1486. [ ] (0x00000001) Special pool
  1487. [ ] (0x00000002) Force IRQL checking
  1488. [ ] (0x00000008) Pool tracking
  1489. [ ] (0x00000010) I/O verification
  1490. [ ] (0x00000020) Deadlock detection
  1491. [ ] (0x00000080) DMA checking
  1492. [ ] (0x00000100) Security checks
  1493. [ ] (0x00000800) Miscellaneous checks
  1494. [ ] (0x00020000) DDI compliance checking
  1495. ADDITIONAL FLAGS:
  1496. [ ] (0x00000004) Randomized low resources simulation
  1497. [ ] (0x00000200) Force pending I/O requests
  1498. [ ] (0x00000400) IRP logging
  1499. [ ] (0x00002000) Invariant MDL checking for stack
  1500. [ ] (0x00004000) Invariant MDL checking for driver
  1501. [ ] (0x00008000) Power framework delay fuzzing
  1502. [ ] (0x00010000) Port/miniport interface checking
  1503. [ ] (0x00040000) Systematic low resources simulation
  1504. [ ] (0x00080000) DDI compliance checking (additional)
  1505. [ ] (0x00200000) NDIS/WIFI verification
  1506. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1507. [ ] (0x01000000) VM switch verification
  1508. [ ] (0x02000000) Code integrity checks
  1509. [X] Indicates flag is enabled
  1510. Summary of All Verifier Statistics
  1511. RaiseIrqls 0x0
  1512. AcquireSpinLocks 0x0
  1513. Synch Executions 0x0
  1514. Trims 0x0
  1515. Pool Allocations Attempted 0x0
  1516. Pool Allocations Succeeded 0x0
  1517. Pool Allocations Succeeded SpecialPool 0x0
  1518. Pool Allocations With NO TAG 0x0
  1519. Pool Allocations Failed 0x0
  1520. Current paged pool allocations 0x0 for 00000000 bytes
  1521. Peak paged pool allocations 0x0 for 00000000 bytes
  1522. Current nonpaged pool allocations 0x0 for 00000000 bytes
  1523. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  1524.  
  1525. ========================== Dump #2: Extra #2 ===========================
  1526.  
  1527. 1: kd> !thread
  1528. THREAD ffffdf83b09a2080 Cid 33f8.33fc Teb: 00000000011c9000 Win32Thread: ffffdf83b12cb5b0 RUNNING on processor 1
  1529. IRP List:
  1530. Unable to read nt!_IRP @ ffffdf83b17c20e0
  1531. Not impersonating
  1532. GetUlongFromAddress: unable to read from fffff8003b0b5204
  1533. Owning Process ffffdf83b1309080 Image: iCUE.exe
  1534. Attached Process N/A Image: N/A
  1535. fffff78000000000: Unable to get shared data
  1536. Wait Start TickCount 86284
  1537. Context Switch Count 1478573 IdealProcessor: 3
  1538. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1539. UserTime 00:00:00.000
  1540. KernelTime 00:00:00.000
  1541. Win32 Start Address 0x00000000002518f2
  1542. Stack Init fffff3089a30fb90 Current fffff3089a30e740
  1543. Base fffff3089a310000 Limit fffff3089a309000 Call 0000000000000000
  1544. Priority 10 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1545. Child-SP RetAddr : Args to Child : Call Site
  1546. fffff308`9a30f268 fffff800`3ae94b73 : 00000000`00000050 fffff63c`c45ae770 00000000`00000000 fffff308`9a30f550 : nt!KeBugCheckEx
  1547. fffff308`9a30f270 fffff800`3ad61c68 : 00000000`00000000 ffff8000`00000000 00000000`00003dff fffff63c`c45ae770 : nt!MiSystemFault+0x1b9673
  1548. fffff308`9a30f3b0 fffff800`3ae765c9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x1d8
  1549. fffff308`9a30f550 fffff697`dae386ef : ffffdf83`abed7710 fffff800`3ad6f0de ffffc9f1`559e898b fffff697`db1a334b : nt!KiPageFault+0x349 (TrapFrame @ fffff308`9a30f550)
  1550. fffff308`9a30f6e0 fffff697`daf4eeff : fffff308`9a30f920 00000000`00000400 00000000`00000000 00000000`00000001 : win32kfull!PhkFirstValid+0x17
  1551. fffff308`9a30f710 fffff697`dae6ba2f : fffff6b6`c62518a0 fffff308`9a30fa80 00000000`00003dff 00000000`00060001 : win32kfull!xxxCallHook+0x57
  1552. fffff308`9a30f750 fffff697`dae6a9b7 : fffff308`9a30f920 fffff308`9a303dbf 00000000`00000000 00000000`00000f33 : win32kfull!xxxRealInternalGetMessage+0xfff
  1553. fffff308`9a30f8e0 fffff800`3ae7a23e : 00000000`00f1e0c0 ffffdf83`b09a2080 fffff308`9a30f9a8 00000000`011c9000 : win32kfull!NtUserPeekMessage+0x157
  1554. fffff308`9a30f990 00007ffc`0304f4e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2b9 (TrapFrame @ fffff308`9a30fa00)
  1555. 00000000`00f1e088 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`0304f4e4
  1556.  
  1557.  
  1558. ========================================================================
  1559. ======================= Dump #3: ANALYZE VERBOSE =======================
  1560. ====================== File: 060120-16593-01.dmp =======================
  1561. ========================================================================
  1562.  
  1563. Mini Kernel Dump File: Only registers and stack trace are available
  1564. Windows 10 Kernel Version 17763 MP (8 procs) Free x64
  1565. Kernel base = 0xfffff806`60c07000 PsLoadedModuleList = 0xfffff806`610216f0
  1566. Debug session time: Mon Jun 1 11:45:00.217 2020 (UTC - 4:00)
  1567. System Uptime: 0 days 2:18:50.894
  1568.  
  1569. BugCheck 3B, {c0000005, fffff80663e2ef49, fffffb8728ad6520, 0}
  1570. Probably caused by : memory_corruption
  1571. Followup: memory_corruption
  1572.  
  1573. SYSTEM_SERVICE_EXCEPTION (3b)
  1574. An exception happened while executing a system service routine.
  1575.  
  1576. Arguments:
  1577. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  1578. Arg2: fffff80663e2ef49, Address of the instruction which caused the bugcheck
  1579. Arg3: fffffb8728ad6520, Address of the context record for the exception that caused the bugcheck
  1580. Arg4: 0000000000000000, zero.
  1581.  
  1582. Debugging Details:
  1583. DUMP_CLASS: 1
  1584. DUMP_QUALIFIER: 400
  1585. DUMP_TYPE: 2
  1586. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  1587. FAULTING_IP:
  1588. Ntfs!memset+c9
  1589. fffff806`63e2ef49 12660f adc ah,byte ptr [rsi+0Fh]
  1590. CONTEXT: fffffb8728ad6520 -- (.cxr 0xfffffb8728ad6520)
  1591. rax=00000000b9636fe7 rbx=fffffb8728ad6fe8 rcx=ffff80072d685b30
  1592. rdx=0000000000000000 rsi=0000000000000000 rdi=ffff80072d6859a8
  1593. rip=fffff80663e2ef49 rsp=fffffb8728ad6f18 rbp=ffff800733aa5010
  1594. r8=0000000000000048 r9=0000000000000048 r10=ffff800716adf2c0
  1595. r11=fffffb8728ad71e8 r12=0000000000000001 r13=ffff800716d89180
  1596. r14=0000000000080000 r15=00000000000001d0
  1597. iopl=0 nv up ei ng nz na po cy
  1598. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010287
  1599. Ntfs!memset+0xc9:
  1600. fffff806`63e2ef49 12660f adc ah,byte ptr [rsi+0Fh] ds:002b:00000000`0000000f=??
  1601. Resetting default scope
  1602. CUSTOMER_CRASH_COUNT: 1
  1603. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1604. BUGCHECK_STR: 0x3B
  1605.  
  1606. PROCESS_NAME: amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.1150_none_5707061f9905
  1607.  
  1608. CURRENT_IRQL: 0
  1609. MISALIGNED_IP:
  1610. Ntfs!memset+c9
  1611. fffff806`63e2ef49 12660f adc ah,byte ptr [rsi+0Fh]
  1612. LAST_CONTROL_TRANSFER: from fffff80663e18e52 to fffff80663e2ef49
  1613. STACK_TEXT:
  1614. fffffb87`28ad6f18 fffff806`63e18e52 : ffff8007`23b1f8a0 ffff8007`2f4daa88 fffff806`6362b080 fffffb87`28ad6f58 : Ntfs!memset+0xc9
  1615. fffffb87`28ad6f20 fffff806`63f03f42 : ffff8007`33aa5000 ffff8007`33aa5010 ffff8007`33aa5000 00000000`00000000 : Ntfs!NtfsInitializeIrpContext+0xe2
  1616. fffffb87`28ad6f90 fffff806`60d103c9 : ffff8007`16d89030 ffff8007`33aa5010 ffff8007`16c0a800 ffff8007`2c874a10 : Ntfs!NtfsFsdCreate+0xb2
  1617. fffffb87`28ad71f0 fffff806`6360621e : ffff8007`33aa5010 ffff8007`2c874a10 ffff8007`33aa53f8 ffff8007`16bca8d0 : nt!IofCallDriver+0x59
  1618. fffffb87`28ad7230 fffff806`6363d559 : fffffb87`28ad72e0 ffff8007`2c874a10 00000000`000000c0 00000000`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28e
  1619. fffffb87`28ad72a0 fffff806`60d103c9 : ffff8007`2c874900 ffff8007`14fd15d0 00000000`00000000 ffff8007`00000030 : FLTMGR!FltpCreate+0x2f9
  1620. fffffb87`28ad7350 fffff806`60d117b4 : 00000000`00000000 00000000`00000005 ffff8007`16d5ac60 fffff806`60d121b3 : nt!IofCallDriver+0x59
  1621. fffffb87`28ad7390 fffff806`61273442 : fffffb87`28ad7650 ffff8007`14fd15d0 00000000`00000005 ffff8007`16ba88f0 : nt!IoCallDriverWithTracing+0x34
  1622. fffffb87`28ad73e0 fffff806`612477e9 : ffff8007`16ba88f0 ffff8007`16ba8800 ffff8007`32ae99a0 ffffcb8a`cee24401 : nt!IopParseDevice+0x632
  1623. fffffb87`28ad7550 fffff806`61245def : ffff8007`32ae9900 fffffb87`28ad77b8 ffff8007`00000040 ffff8007`14b25400 : nt!ObpLookupObjectName+0x719
  1624. fffffb87`28ad7720 fffff806`6129d632 : ffffdb80`00000001 00000060`c16fe358 00000000`00000000 00000000`00004021 : nt!ObOpenObjectByNameEx+0x1df
  1625. fffffb87`28ad7860 fffff806`6129cdf9 : 00000060`c16fe0d8 00000000`00100080 00000060`c16fe358 00000060`c16fe3b0 : nt!IopCreateFile+0x822
  1626. fffffb87`28ad7900 fffff806`60dcfd05 : 00000000`00000000 00000000`00000001 00000000`00000000 00000253`fdc0c610 : nt!NtCreateFile+0x79
  1627. fffffb87`28ad7990 00007ffd`dd040204 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  1628. 00000060`c16fdb08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`dd040204
  1629. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  1630. fffff80660cfb35f - nt!MiInPagePageTable+31f
  1631. [ f6:fd ]
  1632. fffff80660cfb37c-fffff80660cfb380 5 bytes - nt!MiInPagePageTable+33c (+0x1d)
  1633. [ df be 7d fb f6:bf 7f ff fe fd ]
  1634. fffff80660cfbf10-fffff80660cfbf11 2 bytes - nt!KiIpiSendRequest+340 (+0xb94)
  1635. [ 48 ff:4c 8b ]
  1636. fffff80660cfbf17-fffff80660cfbf1a 4 bytes - nt!KiIpiSendRequest+347 (+0x07)
  1637. [ 0f 1f 44 00:e8 b4 d6 97 ]
  1638. fffff80660d7c0b2-fffff80660d7c0b3 2 bytes - nt!PpmResetPerformanceAccumulation+32 (+0x8019b)
  1639. [ 48 ff:4c 8b ]
  1640. fffff80660d7c0b9-fffff80660d7c0bc 4 bytes - nt!PpmResetPerformanceAccumulation+39 (+0x07)
  1641. [ 0f 1f 44 00:e8 12 c5 8f ]
  1642. fffff80660d7e5b1 - nt!MiZeroPageThread+191 (+0x24f8)
  1643. [ f6:fd ]
  1644. fffff80660dc0a88-fffff80660dc0a89 2 bytes - nt!KiInterruptDispatchNoLockNoEtw+b8 (+0x424d7)
  1645. [ 48 ff:4c 8b ]
  1646. fffff80660dc0a8f-fffff80660dc0a92 4 bytes - nt!KiInterruptDispatchNoLockNoEtw+bf (+0x07)
  1647. [ 0f 1f 44 00:e8 4c 8a 8b ]
  1648. 25 errors : !nt (fffff80660cfb35f-fffff80660dc0a92)
  1649. MODULE_NAME: memory_corruption
  1650.  
  1651. IMAGE_NAME: memory_corruption
  1652.  
  1653. FOLLOWUP_NAME: memory_corruption
  1654. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1655. MEMORY_CORRUPTOR: LARGE
  1656. STACK_COMMAND: .cxr 0xfffffb8728ad6520 ; kb
  1657. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1658. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1659. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1660. TARGET_TIME: 2020-06-01T15:45:00.000Z
  1661. SUITE_MASK: 784
  1662. PRODUCT_TYPE: 1
  1663. USER_LCID: 0
  1664. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1665. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1666. Followup: memory_corruption
  1667.  
  1668. ====================== Dump #3: 3RD PARTY DRIVERS ======================
  1669.  
  1670. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  1671. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  1672. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  1673. Jul 18 2017 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1674. Jul 13 2018 - CMUSBDAC.sys - C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  1675. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1676. Apr 11 2019 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  1677. Apr 11 2019 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  1678. Aug 06 2019 - iaStorE.sys - Intel SATA Storage Device RAID Controller
  1679. Aug 22 2019 - IntcDAud.sys - Intel Display Audio Driver http://www.intel.com/
  1680. Sep 25 2019 - igdkmd64.sys - Intel HD graphics driver
  1681. Dec 05 2019 - cpuz149_x64.sys - CPUID driver
  1682. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1683. Feb 03 2020 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  1684. Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
  1685. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1686. May 15 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1687.  
  1688. ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
  1689.  
  1690. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  1691. Image name: lvrs64.sys
  1692. Search : https://www.google.com/search?q=lvrs64.sys
  1693. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  1694. Timestamp : Mon Oct 22 2012
  1695.  
  1696. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  1697. Image name: lvuvc64.sys
  1698. Search : https://www.google.com/search?q=lvuvc64.sys
  1699. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  1700. Timestamp : Mon Oct 22 2012
  1701.  
  1702. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  1703. Image name: RTKVHD64.sys
  1704. Search : https://www.google.com/search?q=RTKVHD64.sys
  1705. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  1706. Timestamp : Fri Jun 3 2016
  1707.  
  1708. Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
  1709. Image name: TeeDriverW8x64.sys
  1710. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  1711. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1712. Timestamp : Tue Jul 18 2017
  1713.  
  1714. Image path: \SystemRoot\system32\DRIVERS\CMUSBDAC.sys
  1715. Image name: CMUSBDAC.sys
  1716. Search : https://www.google.com/search?q=CMUSBDAC.sys
  1717. ADA Info : C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  1718. Timestamp : Fri Jul 13 2018
  1719.  
  1720. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  1721. Image name: nvvad64v.sys
  1722. Search : https://www.google.com/search?q=nvvad64v.sys
  1723. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1724. Timestamp : Thu Mar 14 2019
  1725.  
  1726. Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
  1727. Image name: CorsairVBusDriver.sys
  1728. Search : https://www.google.com/search?q=CorsairVBusDriver.sys
  1729. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  1730. Timestamp : Thu Apr 11 2019
  1731.  
  1732. Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
  1733. Image name: CorsairVHidDriver.sys
  1734. Search : https://www.google.com/search?q=CorsairVHidDriver.sys
  1735. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  1736. Timestamp : Thu Apr 11 2019
  1737.  
  1738. Image path: \SystemRoot\System32\drivers\iaStorE.sys
  1739. Image name: iaStorE.sys
  1740. Search : https://www.google.com/search?q=iaStorE.sys
  1741. ADA Info : Intel SATA Storage Device RAID Controller
  1742. Timestamp : Tue Aug 6 2019
  1743.  
  1744. Image path: \SystemRoot\System32\DriverStore\FileRepository\intcdaud.inf_amd64_4cd2f01cfbce3160\IntcDAud.sys
  1745. Image name: IntcDAud.sys
  1746. Search : https://www.google.com/search?q=IntcDAud.sys
  1747. ADA Info : Intel Display Audio Driver http://www.intel.com/
  1748. Timestamp : Thu Aug 22 2019
  1749.  
  1750. Image path: \SystemRoot\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_38bfcb542ef4272e\igdkmd64.sys
  1751. Image name: igdkmd64.sys
  1752. Search : https://www.google.com/search?q=igdkmd64.sys
  1753. ADA Info : Intel HD graphics driver
  1754. Timestamp : Wed Sep 25 2019
  1755.  
  1756. Image path: \??\C:\WINDOWS\temp\cpuz149\cpuz149_x64.sys
  1757. Image name: cpuz149_x64.sys
  1758. Search : https://www.google.com/search?q=cpuz149_x64.sys
  1759. ADA Info : CPUID driver
  1760. Timestamp : Thu Dec 5 2019
  1761.  
  1762. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  1763. Image name: nvvhci.sys
  1764. Search : https://www.google.com/search?q=nvvhci.sys
  1765. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1766. Timestamp : Fri Jan 10 2020
  1767.  
  1768. Image path: \SystemRoot\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_93c9cab23ae4703b\e1d68x64.sys
  1769. Image name: e1d68x64.sys
  1770. Search : https://www.google.com/search?q=e1d68x64.sys
  1771. ADA Info : Intel(R) Gigabit Adapter driver
  1772. Timestamp : Mon Feb 3 2020
  1773.  
  1774. Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
  1775. Image name: CorsairLLAccess64.sys
  1776. Search : https://www.google.com/search?q=CorsairLLAccess64.sys
  1777. ADA Info : CORSAIR iCUE Software driver
  1778. Timestamp : Fri Feb 14 2020
  1779.  
  1780. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1781. Image name: nvhda64v.sys
  1782. Search : https://www.google.com/search?q=nvhda64v.sys
  1783. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1784. Timestamp : Wed Feb 19 2020
  1785.  
  1786. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys
  1787. Image name: nvlddmkm.sys
  1788. Search : https://www.google.com/search?q=nvlddmkm.sys
  1789. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1790. Timestamp : Fri May 15 2020
  1791.  
  1792. ====================== Dump #3: MICROSOFT DRIVERS ======================
  1793.  
  1794. ACPI.sys ACPI Driver for NT (Microsoft)
  1795. acpiex.sys ACPIEx Driver (Microsoft)
  1796. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  1797. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1798. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1799. ahcache.sys Application Compatibility Cache (Microsoft)
  1800. bam.sys BAM Kernal driver (Microsoft)
  1801. BasicDisplay.sys Basic Display driver (Microsoft)
  1802. BasicRender.sys Basic Render driver (Microsoft)
  1803. Beep.SYS BEEP driver (Microsoft)
  1804. BOOTVID.dll VGA Boot Driver (Microsoft)
  1805. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1806. cdd.dll Canonical Display Driver (Microsoft)
  1807. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1808. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1809. CI.dll Code Integrity Module (Microsoft)
  1810. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1811. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1812. CLFS.SYS Common Log File System Driver (Microsoft)
  1813. clipsp.sys CLIP Service (Microsoft)
  1814. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1815. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1816. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1817. condrv.sys Console Driver (Microsoft)
  1818. crashdmp.sys Crash Dump driver (Microsoft)
  1819. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1820. disk.sys PnP Disk Driver (Microsoft)
  1821. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1822. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1823. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1824. dump_iaStorE.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1825. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1826. dxgmms2.sys DirectX Graphics MMS
  1827. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1828. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1829. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1830. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1831. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1832. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1833. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1834. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1835. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1836. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1837. HIDCLASS.SYS Hid Class Library (Microsoft)
  1838. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1839. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1840. HTTP.sys HTTP Protocol Stack (Microsoft)
  1841. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1842. intelppm.sys Processor Device Driver (Microsoft)
  1843. iorate.sys I/O rate control Filter (Microsoft)
  1844. kbdclass.sys Keyboard Class Driver (Microsoft)
  1845. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1846. kd.dll Local Kernal Debugger (Microsoft)
  1847. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1848. ks.sys Kernal CSA Library (Microsoft)
  1849. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1850. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1851. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1852. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1853. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1854. mcupdate_GenuineIntel.dll Intel Microcode Update Library (Microsoft)
  1855. mmcss.sys MMCSS Driver (Microsoft)
  1856. monitor.sys Monitor Driver (Microsoft)
  1857. mouclass.sys Mouse Class Driver (Microsoft)
  1858. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1859. mountmgr.sys Mount Point Manager (Microsoft)
  1860. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1861. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1862. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  1863. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1864. Msfs.SYS Mailslot driver (Microsoft)
  1865. msisadrv.sys ISA Driver (Microsoft)
  1866. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1867. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1868. mssmbios.sys System Management BIOS driver (Microsoft)
  1869. mup.sys Multiple UNC Provider driver (Microsoft)
  1870. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1871. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  1872. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1873. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1874. netbios.sys NetBIOS Interface driver (Microsoft)
  1875. netbt.sys MBT Transport driver (Microsoft)
  1876. NETIO.SYS Network I/O Subsystem (Microsoft)
  1877. Npfs.SYS NPFS driver (Microsoft)
  1878. npsvctrig.sys Named pipe service triggers (Microsoft)
  1879. nsiproxy.sys NSI Proxy driver (Microsoft)
  1880. Ntfs.sys NT File System Driver (Microsoft)
  1881. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1882. ntosext.sys NTOS Extension Host driver (Microsoft)
  1883. Null.SYS NULL Driver (Microsoft)
  1884. pacer.sys QoS Packet Scheduler (Microsoft)
  1885. partmgr.sys Partition driver (Microsoft)
  1886. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1887. pcw.sys Performance Counter Driver (Microsoft)
  1888. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1889. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1890. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1891. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1892. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1893. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1894. rdyboost.sys ReadyBoost Driver (Microsoft)
  1895. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1896. serenum.sys Serial Port Enumerator (Microsoft)
  1897. serial.sys Serial Device Driver
  1898. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1899. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1900. spaceport.sys Storage Spaces driver (Microsoft)
  1901. srv2.sys Smb 2.0 Server driver (Microsoft)
  1902. srvnet.sys Server Network driver (Microsoft)
  1903. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1904. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1905. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1906. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1907. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1908. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1909. TDI.SYS TDI Wrapper driver (Microsoft)
  1910. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1911. tm.sys Kernel Transaction Manager driver (Microsoft)
  1912. tpm.sys Trusted Platform Module Device driver (Microsoft)
  1913. ucx01000.sys USB Controller Extension (Microsoft)
  1914. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1915. usbaudio.sys USB Audio Class Driver (Microsoft)
  1916. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1917. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1918. UsbHub3.sys USB3 HUB driver (Microsoft)
  1919. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  1920. USBXHCI.SYS USB XHCI driver (Microsoft)
  1921. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1922. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1923. volmgr.sys Volume Manager Driver (Microsoft)
  1924. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1925. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1926. volume.sys Volume driver (Microsoft)
  1927. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1928. watchdog.sys Watchdog driver (Microsoft)
  1929. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1930. wcnfs.sys Windows Container Name Virtualization FS Filter driver (Microsoft)
  1931. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1932. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1933. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1934. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1935. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1936. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1937. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1938. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1939. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1940. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1941. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1942. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1943. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1944. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1945. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1946. Wof.sys Windows Overlay Filter (Microsoft)
  1947. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  1948. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1949. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1950.  
  1951. ====================== Dump #3: UNLOADED MODULES =======================
  1952.  
  1953. fffff806`64360000 fffff806`643b8000 WdFilter.sys
  1954. fffff806`603b0000 fffff806`603c3000 WdNisDrv.sys
  1955. fffff806`69cb0000 fffff806`69cc0000 MpKsl8ab10c8
  1956. fffff806`aeaa0000 fffff806`aeab1000 MSKSSRV.sys
  1957. fffff806`aea90000 fffff806`aea9e000 MSTEE.sys
  1958. fffff806`aea70000 fffff806`aea81000 MSKSSRV.sys
  1959. fffff806`aff50000 fffff806`aff61000 MSKSSRV.sys
  1960. fffff806`aeab0000 fffff806`aeabd000 MSPCLOCK.sys
  1961. fffff806`aeaa0000 fffff806`aeaad000 MSPQM.sys
  1962. fffff806`aea00000 fffff806`aea0b000 drmkaud.sys
  1963. fffff806`aff70000 fffff806`aff7e000 MSTEE.sys
  1964. fffff806`aeb00000 fffff806`aeb11000 nvvhci.sys
  1965. fffff806`69c30000 fffff806`69c68000 nvhda64v.sys
  1966. fffff806`686b0000 fffff806`69c26000 nvlddmkm.sys
  1967. fffff806`aea20000 fffff806`aea31000 MSKSSRV.sys
  1968. fffff806`aeaf0000 fffff806`aeafb000 drmkaud.sys
  1969. fffff806`aeae0000 fffff806`aeaee000 MSTEE.sys
  1970. fffff806`aea90000 fffff806`aea9b000 drmkaud.sys
  1971. fffff806`aea80000 fffff806`aea8e000 MSTEE.sys
  1972. fffff806`aea70000 fffff806`aea7d000 MSPQM.sys
  1973. fffff806`aea60000 fffff806`aea6d000 MSPCLOCK.sys
  1974. fffff806`aea50000 fffff806`aea5b000 drmkaud.sys
  1975. fffff806`aea40000 fffff806`aea4e000 MSTEE.sys
  1976. fffff806`aea10000 fffff806`aea1d000 MSPQM.sys
  1977. fffff806`aea00000 fffff806`aea0d000 MSPCLOCK.sys
  1978. fffff806`aff10000 fffff806`aff79000 HdAudio.sys
  1979. fffff806`ac0d0000 fffff806`ac5e9000 RTKVHD64.sys
  1980. fffff806`60410000 fffff806`60421000 MSKSSRV.sys
  1981. fffff806`ab620000 fffff806`ab62b000 drmkaud.sys
  1982. fffff806`ab610000 fffff806`ab61e000 MSTEE.sys
  1983. fffff806`ab600000 fffff806`ab60d000 MSPQM.sys
  1984. fffff806`ac5f0000 fffff806`ac5fd000 MSPCLOCK.sys
  1985. fffff806`65f90000 fffff806`65ff9000 HdAudio.sys
  1986. fffff806`69cc0000 fffff806`69cdd000 EhStorClass.
  1987. fffff806`69ca0000 fffff806`69cab000 drmkaud.sys
  1988. fffff806`69c80000 fffff806`69c8e000 MSTEE.sys
  1989. fffff806`69c90000 fffff806`69c9d000 MSPQM.sys
  1990. fffff806`69c70000 fffff806`69c7d000 MSPCLOCK.sys
  1991. fffff806`603d0000 fffff806`603e1000 MSKSSRV.sys
  1992. fffff806`60920000 fffff806`60931000 MSKSSRV.sys
  1993. fffff806`642e0000 fffff806`642fd000 EhStorClass.
  1994. fffff806`64a90000 fffff806`64aa0000 dump_storpor
  1995. fffff806`64bd0000 fffff806`64d00000 dump_iaStorE
  1996. fffff806`64d20000 fffff806`64d3e000 dump_dumpfve
  1997. fffff806`656d0000 fffff806`656ec000 dam.sys
  1998. fffff806`638e0000 fffff806`638f0000 WdBoot.sys
  1999. fffff806`64990000 fffff806`649a1000 hwpolicy.sys
  2000.  
  2001. ====================== Dump #3: BIOS INFORMATION =======================
  2002.  
  2003. [SMBIOS Data Tables v3.0]
  2004. [DMI Version - 0]
  2005. [2.0 Calling Convention - No]
  2006. [Table Size - 4506 bytes]
  2007. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  2008. Vendor American Megatrends Inc.
  2009. BIOS Version 1002
  2010. BIOS Starting Address Segment f000
  2011. BIOS Release Date 12/14/2017
  2012. BIOS ROM Size 1000000
  2013. BIOS Characteristics
  2014. 07: - PCI Supported
  2015. 10: - APM Supported
  2016. 11: - Upgradeable FLASH BIOS
  2017. 12: - BIOS Shadowing Supported
  2018. 15: - CD-Boot Supported
  2019. 16: - Selectable Boot Supported
  2020. 17: - BIOS ROM Socketed
  2021. 19: - EDD Supported
  2022. 23: - 1.2MB Floppy Supported
  2023. 24: - 720KB Floppy Supported
  2024. 25: - 2.88MB Floppy Supported
  2025. 26: - Print Screen Device Supported
  2026. 27: - Keyboard Services Supported
  2027. 28: - Serial Services Supported
  2028. 29: - Printer Services Supported
  2029. 32: - BIOS Vendor Reserved
  2030. BIOS Characteristic Extensions
  2031. 00: - ACPI Supported
  2032. 01: - USB Legacy Supported
  2033. 08: - BIOS Boot Specification Supported
  2034. 10: - Specification Reserved
  2035. 11: - Specification Reserved
  2036. BIOS Major Revision 5
  2037. BIOS Minor Revision 12
  2038. EC Firmware Major Revision 255
  2039. EC Firmware Minor Revision 255
  2040. [System Information (Type 1) - Length 27 - Handle 0001h]
  2041. Manufacturer PC Specialist LTD
  2042. Product Name Intel Z270
  2043. Version System Version
  2044. UUID 00000000-0000-0000-0000-000000000000
  2045. Wakeup Type Power Switch
  2046. SKUNumber 1364299
  2047. Family Intel Z270 Systems
  2048. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2049. Manufacturer ASUSTeK COMPUTER INC.
  2050. Product PRIME Z270-K
  2051. Version Rev X.0x
  2052. Feature Flags 09h
  2053. -808667424: - -808667376: - ÷7?
  2054. ü
  2055. Location Default string
  2056. Chassis Handle 0003h
  2057. Board Type 0ah - Processor/Memory Module
  2058. Number of Child Handles 0
  2059. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2060. Manufacturer Default string
  2061. Chassis Type Desktop
  2062. Version Default string
  2063. Bootup State Safe
  2064. Power Supply State Safe
  2065. Thermal State Safe
  2066. Security Status None
  2067. OEM Defined 0
  2068. Height 0U
  2069. Number of Power Cords 1
  2070. Number of Contained Elements 0
  2071. Contained Element Size 3
  2072. [Onboard Devices Information (Type 10) - Length 6 - Handle 0026h]
  2073. Number of Devices 1
  2074. 01: Type Video [enabled]
  2075. [OEM Strings (Type 11) - Length 5 - Handle 0027h]
  2076. Number of Strings 8
  2077. 1 Default string
  2078. 2 Default string
  2079. 3 POTATO
  2080. 4 Default string
  2081. 5 FFFFFFFFFFFFF
  2082. 6 FFFFFFFFFFFFF
  2083. 7 FFFFFFFFFFFFF
  2084. 8 Default string
  2085. [System Configuration Options (Type 12) - Length 5 - Handle 0028h]
  2086. [Physical Memory Array (Type 16) - Length 23 - Handle 0043h]
  2087. Location 03h - SystemBoard/Motherboard
  2088. Use 03h - System Memory
  2089. Memory Error Correction 03h - None
  2090. Maximum Capacity 67108864KB
  2091. Number of Memory Devices 4
  2092. [Memory Device (Type 17) - Length 40 - Handle 0044h]
  2093. Physical Memory Array Handle 0043h
  2094. Total Width 64 bits
  2095. Data Width 64 bits
  2096. Size 8192MB
  2097. Form Factor 09h - DIMM
  2098. Device Locator ChannelA-DIMM1
  2099. Bank Locator BANK 0
  2100. Memory Type 1ah - Specification Reserved
  2101. Type Detail 4080h - Synchronous
  2102. Speed 2133MHz
  2103. Manufacturer Corsair
  2104. Part Number CMR32GX4M4C3000C16
  2105. [Memory Device (Type 17) - Length 40 - Handle 0045h]
  2106. Physical Memory Array Handle 0043h
  2107. Total Width 64 bits
  2108. Data Width 64 bits
  2109. Size 8192MB
  2110. Form Factor 09h - DIMM
  2111. Device Locator ChannelA-DIMM2
  2112. Bank Locator BANK 1
  2113. Memory Type 1ah - Specification Reserved
  2114. Type Detail 4080h - Synchronous
  2115. Speed 2133MHz
  2116. Manufacturer Corsair
  2117. Part Number CMR32GX4M4C3000C16
  2118. [Memory Device (Type 17) - Length 40 - Handle 0046h]
  2119. Physical Memory Array Handle 0043h
  2120. Total Width 64 bits
  2121. Data Width 64 bits
  2122. Size 8192MB
  2123. Form Factor 09h - DIMM
  2124. Device Locator ChannelB-DIMM1
  2125. Bank Locator BANK 2
  2126. Memory Type 1ah - Specification Reserved
  2127. Type Detail 4080h - Synchronous
  2128. Speed 2133MHz
  2129. Manufacturer Corsair
  2130. Part Number CMR32GX4M4C3000C16
  2131. [Memory Device (Type 17) - Length 40 - Handle 0047h]
  2132. Physical Memory Array Handle 0043h
  2133. Total Width 64 bits
  2134. Data Width 64 bits
  2135. Size 8192MB
  2136. Form Factor 09h - DIMM
  2137. Device Locator ChannelB-DIMM2
  2138. Bank Locator BANK 3
  2139. Memory Type 1ah - Specification Reserved
  2140. Type Detail 4080h - Synchronous
  2141. Speed 2133MHz
  2142. Manufacturer Corsair
  2143. Part Number CMR32GX4M4C3000C16
  2144. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0048h]
  2145. Starting Address 00000000h
  2146. Ending Address 01ffffffh
  2147. Memory Array Handle 0043h
  2148. Partition Width 04
  2149. [Cache Information (Type 7) - Length 19 - Handle 0049h]
  2150. Socket Designation L1 Cache
  2151. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2152. Maximum Cache Size 0100h - 256K
  2153. Installed Size 0100h - 256K
  2154. Supported SRAM Type 0020h - Synchronous
  2155. Current SRAM Type 0020h - Synchronous
  2156. Cache Speed 0ns
  2157. Error Correction Type ParitySingle-Bit ECC
  2158. System Cache Type Unified
  2159. Associativity 8-way Set-Associative
  2160. [Cache Information (Type 7) - Length 19 - Handle 004ah]
  2161. Socket Designation L2 Cache
  2162. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2163. Maximum Cache Size 0400h - 1024K
  2164. Installed Size 0400h - 1024K
  2165. Supported SRAM Type 0020h - Synchronous
  2166. Current SRAM Type 0020h - Synchronous
  2167. Cache Speed 0ns
  2168. Error Correction Type Multi-Bit ECC
  2169. System Cache Type Unified
  2170. Associativity 4-way Set-Associative
  2171. [Cache Information (Type 7) - Length 19 - Handle 004bh]
  2172. Socket Designation L3 Cache
  2173. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2174. Maximum Cache Size 2000h - 8192K
  2175. Installed Size 2000h - 8192K
  2176. Supported SRAM Type 0020h - Synchronous
  2177. Current SRAM Type 0020h - Synchronous
  2178. Cache Speed 0ns
  2179. Error Correction Type Specification Reserved
  2180. System Cache Type Unified
  2181. Associativity 16-way Set-Associative
  2182. [Processor Information (Type 4) - Length 48 - Handle 004ch]
  2183. Socket Designation LGA1151
  2184. Processor Type Central Processor
  2185. Processor Family c6h - Specification Reserved
  2186. Processor Manufacturer Intel(R) Corporation
  2187. Processor ID e9060900fffbebbf
  2188. Processor Version Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
  2189. Processor Voltage 8bh - 1.1V
  2190. External Clock 100MHz
  2191. Max Speed 8300MHz
  2192. Current Speed 4200MHz
  2193. Status Enabled Populated
  2194. Processor Upgrade Other
  2195. L1 Cache Handle 0049h
  2196. L2 Cache Handle 004ah
  2197. L3 Cache Handle 004bh
  2198. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004dh]
  2199. Starting Address 00000000h
  2200. Ending Address 007fffffh
  2201. Memory Device Handle 0044h
  2202. Mem Array Mapped Adr Handle 0048h
  2203. Interleave Position 01
  2204. Interleave Data Depth 02
  2205. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004eh]
  2206. Starting Address 01000000h
  2207. Ending Address 017fffffh
  2208. Memory Device Handle 0045h
  2209. Mem Array Mapped Adr Handle 0048h
  2210. Interleave Position 01
  2211. Interleave Data Depth 02
  2212. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004fh]
  2213. Starting Address 00800000h
  2214. Ending Address 00ffffffh
  2215. Memory Device Handle 0046h
  2216. Mem Array Mapped Adr Handle 0048h
  2217. Interleave Position 02
  2218. Interleave Data Depth 02
  2219. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0050h]
  2220. Starting Address 01800000h
  2221. Ending Address 01ffffffh
  2222. Memory Device Handle 0047h
  2223. Mem Array Mapped Adr Handle 0048h
  2224. Interleave Position 02
  2225. Interleave Data Depth 02
  2226.  
  2227. ========================== Dump #3: Extra #1 ===========================
  2228.  
  2229. 5: kd> !verifier
  2230. Verify Flags Level 0x00000000
  2231. STANDARD FLAGS:
  2232. [X] (0x00000000) Automatic Checks
  2233. [ ] (0x00000001) Special pool
  2234. [ ] (0x00000002) Force IRQL checking
  2235. [ ] (0x00000008) Pool tracking
  2236. [ ] (0x00000010) I/O verification
  2237. [ ] (0x00000020) Deadlock detection
  2238. [ ] (0x00000080) DMA checking
  2239. [ ] (0x00000100) Security checks
  2240. [ ] (0x00000800) Miscellaneous checks
  2241. [ ] (0x00020000) DDI compliance checking
  2242. ADDITIONAL FLAGS:
  2243. [ ] (0x00000004) Randomized low resources simulation
  2244. [ ] (0x00000200) Force pending I/O requests
  2245. [ ] (0x00000400) IRP logging
  2246. [ ] (0x00002000) Invariant MDL checking for stack
  2247. [ ] (0x00004000) Invariant MDL checking for driver
  2248. [ ] (0x00008000) Power framework delay fuzzing
  2249. [ ] (0x00010000) Port/miniport interface checking
  2250. [ ] (0x00040000) Systematic low resources simulation
  2251. [ ] (0x00080000) DDI compliance checking (additional)
  2252. [ ] (0x00200000) NDIS/WIFI verification
  2253. [ ] (0x00800000) Kernel synchronization delay fuzzing
  2254. [ ] (0x01000000) VM switch verification
  2255. [ ] (0x02000000) Code integrity checks
  2256. [X] Indicates flag is enabled
  2257. Summary of All Verifier Statistics
  2258. RaiseIrqls 0x0
  2259. AcquireSpinLocks 0x0
  2260. Synch Executions 0x0
  2261. Trims 0x0
  2262. Pool Allocations Attempted 0x0
  2263. Pool Allocations Succeeded 0x0
  2264. Pool Allocations Succeeded SpecialPool 0x0
  2265. Pool Allocations With NO TAG 0x0
  2266. Pool Allocations Failed 0x0
  2267. Current paged pool allocations 0x0 for 00000000 bytes
  2268. Peak paged pool allocations 0x0 for 00000000 bytes
  2269. Current nonpaged pool allocations 0x0 for 00000000 bytes
  2270. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  2271.  
  2272. ========================== Dump #3: Extra #2 ===========================
  2273.  
  2274. 5: kd> !thread
  2275. THREAD ffff800732bf4400 Cid 2dd4.1738 Teb: 00000060c1187000 Win32Thread: 0000000000000000 RUNNING on processor 5
  2276. IRP List:
  2277. ffff800733aa5010: (0006,0478) Flags: 00000884 Mdl: 00000000
  2278. Impersonation token: ffffcb8af840f770 (Level Impersonation)
  2279. GetUlongFromAddress: unable to read from fffff8066100b204
  2280. Owning Process ffff800726815480 Image: amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.1150_none_5707061f9905
  2281. Attached Process N/A Image: N/A
  2282. fffff78000000000: Unable to get shared data
  2283. Wait Start TickCount 533177
  2284. Context Switch Count 99506 IdealProcessor: 7
  2285. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2286. UserTime 00:00:00.000
  2287. KernelTime 00:00:00.000
  2288. Win32 Start Address 0x00007ffd93300960
  2289. Stack Init fffffb8728ad7b90 Current fffffb8728ad7870
  2290. Base fffffb8728ad8000 Limit fffffb8728ad1000 Call 0000000000000000
  2291. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2292. Child-SP RetAddr : Args to Child : Call Site
  2293. fffffb87`28ad5be8 fffff806`60dd02e9 : 00000000`0000003b 00000000`c0000005 fffff806`63e2ef49 fffffb87`28ad6520 : nt!KeBugCheckEx
  2294. fffffb87`28ad5bf0 fffff806`60dcf73c : fffffb87`28ad6cd8 fffffb87`28ad6520 fffffb87`28ad6cd8 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  2295. fffffb87`28ad5d30 fffff806`60dc75bf : fffff806`610e9000 fffff806`60c07000 0005b824`00a6f000 00000000`0010001f : nt!KiSystemServiceHandler+0x7c
  2296. fffffb87`28ad5d70 fffff806`60c23620 : fffffb87`28ad63c0 00000000`00000000 fffffb87`28ad62e0 fffff806`60fd6c68 : nt!RtlpExecuteHandlerForException+0xf
  2297. fffffb87`28ad5da0 fffff806`60c66694 : fffffb87`28ad6cd8 fffffb87`28ad6a20 fffffb87`28ad6cd8 ffff8007`2d6859a8 : nt!RtlDispatchException+0x430
  2298. fffffb87`28ad64f0 fffff806`60dd03c2 : 00000000`00000000 fffffb87`28ad6d80 00000000`00001000 00000000`0000000f : nt!KiDispatchException+0x144
  2299. fffffb87`28ad6ba0 fffff806`60dcc6ae : fffffb87`28ad74e0 ffff958c`81228000 ffff8007`00000000 fffff806`60cc3317 : nt!KiExceptionDispatch+0xc2
  2300. fffffb87`28ad6d80 fffff806`63e2ef49 : fffff806`63e18e52 ffff8007`23b1f8a0 ffff8007`2f4daa88 fffff806`6362b080 : nt!KiPageFault+0x42e (TrapFrame @ fffffb87`28ad6d80)
  2301. fffffb87`28ad6f18 fffff806`63e18e52 : ffff8007`23b1f8a0 ffff8007`2f4daa88 fffff806`6362b080 fffffb87`28ad6f58 : Ntfs!memset+0xc9
  2302. fffffb87`28ad6f20 fffff806`63f03f42 : ffff8007`33aa5000 ffff8007`33aa5010 ffff8007`33aa5000 00000000`00000000 : Ntfs!NtfsInitializeIrpContext+0xe2
  2303. fffffb87`28ad6f90 fffff806`60d103c9 : ffff8007`16d89030 ffff8007`33aa5010 ffff8007`16c0a800 ffff8007`2c874a10 : Ntfs!NtfsFsdCreate+0xb2
  2304. fffffb87`28ad71f0 fffff806`6360621e : ffff8007`33aa5010 ffff8007`2c874a10 ffff8007`33aa53f8 ffff8007`16bca8d0 : nt!IofCallDriver+0x59
  2305. fffffb87`28ad7230 fffff806`6363d559 : fffffb87`28ad72e0 ffff8007`2c874a10 00000000`000000c0 00000000`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28e
  2306. fffffb87`28ad72a0 fffff806`60d103c9 : ffff8007`2c874900 ffff8007`14fd15d0 00000000`00000000 ffff8007`00000030 : FLTMGR!FltpCreate+0x2f9
  2307. fffffb87`28ad7350 fffff806`60d117b4 : 00000000`00000000 00000000`00000005 ffff8007`16d5ac60 fffff806`60d121b3 : nt!IofCallDriver+0x59
  2308. fffffb87`28ad7390 fffff806`61273442 : fffffb87`28ad7650 ffff8007`14fd15d0 00000000`00000005 ffff8007`16ba88f0 : nt!IoCallDriverWithTracing+0x34
  2309. fffffb87`28ad73e0 fffff806`612477e9 : ffff8007`16ba88f0 ffff8007`16ba8800 ffff8007`32ae99a0 ffffcb8a`cee24401 : nt!IopParseDevice+0x632
  2310. fffffb87`28ad7550 fffff806`61245def : ffff8007`32ae9900 fffffb87`28ad77b8 ffff8007`00000040 ffff8007`14b25400 : nt!ObpLookupObjectName+0x719
  2311. fffffb87`28ad7720 fffff806`6129d632 : ffffdb80`00000001 00000060`c16fe358 00000000`00000000 00000000`00004021 : nt!ObOpenObjectByNameEx+0x1df
  2312. fffffb87`28ad7860 fffff806`6129cdf9 : 00000060`c16fe0d8 00000000`00100080 00000060`c16fe358 00000060`c16fe3b0 : nt!IopCreateFile+0x822
  2313. fffffb87`28ad7900 fffff806`60dcfd05 : 00000000`00000000 00000000`00000001 00000000`00000000 00000253`fdc0c610 : nt!NtCreateFile+0x79
  2314. fffffb87`28ad7990 00007ffd`dd040204 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ fffffb87`28ad7a00)
  2315. 00000060`c16fdb08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`dd040204
  2316.  
  2317.  
  2318. ========================================================================
  2319. ======================= Dump #4: ANALYZE VERBOSE =======================
  2320. ====================== File: 060120-13390-01.dmp =======================
  2321. ========================================================================
  2322.  
  2323. Mini Kernel Dump File: Only registers and stack trace are available
  2324. Windows 10 Kernel Version 17763 MP (8 procs) Free x64
  2325. Kernel base = 0xfffff805`2b204000 PsLoadedModuleList = 0xfffff805`2b61e6f0
  2326. Debug session time: Mon Jun 1 17:31:02.880 2020 (UTC - 4:00)
  2327. System Uptime: 0 days 5:14:19.557
  2328.  
  2329. BugCheck 7F, {8, ffffab006efac050, ffffd0006ee70ff0, fffff8057efcf803}
  2330. *** WARNING: Unable to verify timestamp for BEDaisy.sys
  2331. *** ERROR: Module load completed but symbols could not be loaded for BEDaisy.sys
  2332. *** WARNING: Unable to verify timestamp for win32k.sys
  2333. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  2334. Probably caused by : memory_corruption
  2335. Followup: memory_corruption
  2336.  
  2337. UNEXPECTED_KERNEL_MODE_TRAP (7f)
  2338. This means a trap occurred in kernel mode, and it's a trap of a kind
  2339. that the kernel isn't allowed to have/catch (bound trap) or that
  2340. is always instant death (double fault). The first number in the
  2341. bugcheck params is the number of the trap (8 = double fault, etc)
  2342. Consult an Intel x86 family manual to learn more about what these
  2343. traps are. Here is a *portion* of those codes:
  2344. If kv shows a taskGate
  2345. use .tss on the part before the colon, then kv.
  2346. Else if kv shows a trapframe
  2347. use .trap on that value
  2348. Else
  2349. .trap on the appropriate frame will show where the trap was taken
  2350. (on x86, this will be the ebp that goes with the procedure KiTrap)
  2351. Endif
  2352. kb will then show the corrected stack.
  2353.  
  2354. Arguments:
  2355. Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
  2356. Arg2: ffffab006efac050
  2357. Arg3: ffffd0006ee70ff0
  2358. Arg4: fffff8057efcf803
  2359.  
  2360. Debugging Details:
  2361. DUMP_CLASS: 1
  2362. DUMP_QUALIFIER: 400
  2363. DUMP_TYPE: 2
  2364. BUGCHECK_STR: 0x7f_8
  2365. TRAP_FRAME: ffffab006efac050 -- (.trap 0xffffab006efac050)
  2366. NOTE: The trap frame does not contain all registers.
  2367. Some register values may be zeroed or incorrect.
  2368. rax=0000000140001354 rbx=0000000000000000 rcx=0000000000000100
  2369. rdx=ffffd0006ee71030 rsi=0000000000000000 rdi=0000000000000000
  2370. rip=fffff8057efcf803 rsp=ffffd0006ee70ff0 rbp=fffff8057ef9554d
  2371. r8=ffffd0006ee70ff0 r9=00000000000000c0 r10=ffffd0006ee71170
  2372. r11=fffff8057eeb77f0 r12=0000000000000000 r13=0000000000000000
  2373. r14=0000000000000000 r15=0000000000000000
  2374. iopl=0 nv up ei ng nz na po nc
  2375. BEDaisy+0x23f803:
  2376. fffff805`7efcf803 56 push rsi
  2377. Resetting default scope
  2378. CUSTOMER_CRASH_COUNT: 1
  2379. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  2380.  
  2381. PROCESS_NAME: System
  2382.  
  2383. CURRENT_IRQL: 0
  2384. STACK_OVERFLOW: Stack Limit: ffffd0006ee71000. Use (kF) and (!stackusage) to investigate stack usage.
  2385. LAST_CONTROL_TRANSFER: from fffff8052b3cd2e9 to fffff8052b3bbab0
  2386. STACK_TEXT:
  2387. ffffab00`6efabf08 fffff805`2b3cd2e9 : 00000000`0000007f 00000000`00000008 ffffab00`6efac050 ffffd000`6ee70ff0 : nt!KeBugCheckEx
  2388. ffffab00`6efabf10 fffff805`2b3c82ee : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  2389. ffffab00`6efac050 fffff805`7efcf803 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0x2ae
  2390. ffffd000`6ee70ff0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : BEDaisy+0x23f803
  2391. STACK_COMMAND: kb
  2392. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  2393. fffff8052b24a47f - nt!MmUnmapIoSpace+7f
  2394. [ f6:f9 ]
  2395. fffff8052b3790b2-fffff8052b3790b3 2 bytes - nt!PpmResetPerformanceAccumulation+32 (+0x12ec33)
  2396. [ 48 ff:4c 8b ]
  2397. fffff8052b3790b9-fffff8052b3790bc 4 bytes - nt!PpmResetPerformanceAccumulation+39 (+0x07)
  2398. [ 0f 1f 44 00:e8 12 c5 8f ]
  2399. 7 errors : !nt (fffff8052b24a47f-fffff8052b3790bc)
  2400. MODULE_NAME: memory_corruption
  2401.  
  2402. IMAGE_NAME: memory_corruption
  2403.  
  2404. FOLLOWUP_NAME: memory_corruption
  2405. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2406. MEMORY_CORRUPTOR: LARGE
  2407. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2408. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2409. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  2410. TARGET_TIME: 2020-06-01T21:31:02.000Z
  2411. SUITE_MASK: 784
  2412. PRODUCT_TYPE: 1
  2413. USER_LCID: 0
  2414. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  2415. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  2416. Followup: memory_corruption
  2417.  
  2418. ====================== Dump #4: 3RD PARTY DRIVERS ======================
  2419.  
  2420. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  2421. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  2422. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  2423. Jul 18 2017 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  2424. Jul 13 2018 - CMUSBDAC.sys - C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  2425. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  2426. Apr 11 2019 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  2427. Apr 11 2019 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  2428. Aug 06 2019 - iaStorE.sys - Intel SATA Storage Device RAID Controller
  2429. Aug 22 2019 - IntcDAud.sys - Intel Display Audio Driver http://www.intel.com/
  2430. Sep 25 2019 - igdkmd64.sys - Intel HD graphics driver
  2431. Dec 05 2019 - cpuz149_x64.sys - CPUID driver
  2432. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2433. Feb 03 2020 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  2434. Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
  2435. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  2436. May 13 2020 - BEDaisy.sys - BattlEye Anti Cheat driver
  2437. May 15 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  2438.  
  2439. ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
  2440.  
  2441. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  2442. Image name: lvrs64.sys
  2443. Search : https://www.google.com/search?q=lvrs64.sys
  2444. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  2445. Timestamp : Mon Oct 22 2012
  2446.  
  2447. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  2448. Image name: lvuvc64.sys
  2449. Search : https://www.google.com/search?q=lvuvc64.sys
  2450. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  2451. Timestamp : Mon Oct 22 2012
  2452.  
  2453. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  2454. Image name: RTKVHD64.sys
  2455. Search : https://www.google.com/search?q=RTKVHD64.sys
  2456. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  2457. Timestamp : Fri Jun 3 2016
  2458.  
  2459. Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
  2460. Image name: TeeDriverW8x64.sys
  2461. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  2462. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  2463. Timestamp : Tue Jul 18 2017
  2464.  
  2465. Image path: \SystemRoot\system32\DRIVERS\CMUSBDAC.sys
  2466. Image name: CMUSBDAC.sys
  2467. Search : https://www.google.com/search?q=CMUSBDAC.sys
  2468. ADA Info : C-Media USB Audio Class 1.0 and 2.0 DAC Device driver https://www.cmedia.com.tw/
  2469. Timestamp : Fri Jul 13 2018
  2470.  
  2471. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  2472. Image name: nvvad64v.sys
  2473. Search : https://www.google.com/search?q=nvvad64v.sys
  2474. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  2475. Timestamp : Thu Mar 14 2019
  2476.  
  2477. Image path: \SystemRoot\System32\drivers\CorsairVBusDriver.sys
  2478. Image name: CorsairVBusDriver.sys
  2479. Search : https://www.google.com/search?q=CorsairVBusDriver.sys
  2480. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  2481. Timestamp : Thu Apr 11 2019
  2482.  
  2483. Image path: \SystemRoot\System32\drivers\CorsairVHidDriver.sys
  2484. Image name: CorsairVHidDriver.sys
  2485. Search : https://www.google.com/search?q=CorsairVHidDriver.sys
  2486. ADA Info : Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
  2487. Timestamp : Thu Apr 11 2019
  2488.  
  2489. Image path: \SystemRoot\System32\drivers\iaStorE.sys
  2490. Image name: iaStorE.sys
  2491. Search : https://www.google.com/search?q=iaStorE.sys
  2492. ADA Info : Intel SATA Storage Device RAID Controller
  2493. Timestamp : Tue Aug 6 2019
  2494.  
  2495. Image path: \SystemRoot\System32\DriverStore\FileRepository\intcdaud.inf_amd64_4cd2f01cfbce3160\IntcDAud.sys
  2496. Image name: IntcDAud.sys
  2497. Search : https://www.google.com/search?q=IntcDAud.sys
  2498. ADA Info : Intel Display Audio Driver http://www.intel.com/
  2499. Timestamp : Thu Aug 22 2019
  2500.  
  2501. Image path: \SystemRoot\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_38bfcb542ef4272e\igdkmd64.sys
  2502. Image name: igdkmd64.sys
  2503. Search : https://www.google.com/search?q=igdkmd64.sys
  2504. ADA Info : Intel HD graphics driver
  2505. Timestamp : Wed Sep 25 2019
  2506.  
  2507. Image path: \??\C:\WINDOWS\temp\cpuz149\cpuz149_x64.sys
  2508. Image name: cpuz149_x64.sys
  2509. Search : https://www.google.com/search?q=cpuz149_x64.sys
  2510. ADA Info : CPUID driver
  2511. Timestamp : Thu Dec 5 2019
  2512.  
  2513. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  2514. Image name: nvvhci.sys
  2515. Search : https://www.google.com/search?q=nvvhci.sys
  2516. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2517. Timestamp : Fri Jan 10 2020
  2518.  
  2519. Image path: \SystemRoot\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_93c9cab23ae4703b\e1d68x64.sys
  2520. Image name: e1d68x64.sys
  2521. Search : https://www.google.com/search?q=e1d68x64.sys
  2522. ADA Info : Intel(R) Gigabit Adapter driver
  2523. Timestamp : Mon Feb 3 2020
  2524.  
  2525. Image path: \??\C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys
  2526. Image name: CorsairLLAccess64.sys
  2527. Search : https://www.google.com/search?q=CorsairLLAccess64.sys
  2528. ADA Info : CORSAIR iCUE Software driver
  2529. Timestamp : Fri Feb 14 2020
  2530.  
  2531. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  2532. Image name: nvhda64v.sys
  2533. Search : https://www.google.com/search?q=nvhda64v.sys
  2534. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  2535. Timestamp : Wed Feb 19 2020
  2536.  
  2537. Image path: \??\C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys
  2538. Image name: BEDaisy.sys
  2539. Search : https://www.google.com/search?q=BEDaisy.sys
  2540. ADA Info : BattlEye Anti Cheat driver
  2541. Timestamp : Wed May 13 2020
  2542.  
  2543. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys
  2544. Image name: nvlddmkm.sys
  2545. Search : https://www.google.com/search?q=nvlddmkm.sys
  2546. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  2547. Timestamp : Fri May 15 2020
  2548.  
  2549. ====================== Dump #4: MICROSOFT DRIVERS ======================
  2550.  
  2551. ACPI.sys ACPI Driver for NT (Microsoft)
  2552. acpiex.sys ACPIEx Driver (Microsoft)
  2553. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  2554. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  2555. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  2556. ahcache.sys Application Compatibility Cache (Microsoft)
  2557. bam.sys BAM Kernal driver (Microsoft)
  2558. BasicDisplay.sys Basic Display driver (Microsoft)
  2559. BasicRender.sys Basic Render driver (Microsoft)
  2560. Beep.SYS BEEP driver (Microsoft)
  2561. BOOTVID.dll VGA Boot Driver (Microsoft)
  2562. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  2563. cdd.dll Canonical Display Driver (Microsoft)
  2564. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  2565. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  2566. CI.dll Code Integrity Module (Microsoft)
  2567. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  2568. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  2569. CLFS.SYS Common Log File System Driver (Microsoft)
  2570. clipsp.sys CLIP Service (Microsoft)
  2571. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  2572. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  2573. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  2574. condrv.sys Console Driver (Microsoft)
  2575. crashdmp.sys Crash Dump driver (Microsoft)
  2576. dfsc.sys DFS Namespace Client Driver (Microsoft)
  2577. disk.sys PnP Disk Driver (Microsoft)
  2578. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  2579. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2580. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2581. dump_iaStorE.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2582. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  2583. dxgmms2.sys DirectX Graphics MMS
  2584. fastfat.SYS Fast FAT File System Driver (Microsoft)
  2585. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  2586. fileinfo.sys FileInfo Filter Driver (Microsoft)
  2587. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  2588. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  2589. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  2590. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  2591. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  2592. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  2593. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  2594. HIDCLASS.SYS Hid Class Library (Microsoft)
  2595. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  2596. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  2597. HTTP.sys HTTP Protocol Stack (Microsoft)
  2598. intelpep.sys Intel Power Engine Plugin (Microsoft)
  2599. intelppm.sys Processor Device Driver (Microsoft)
  2600. iorate.sys I/O rate control Filter (Microsoft)
  2601. kbdclass.sys Keyboard Class Driver (Microsoft)
  2602. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  2603. kd.dll Local Kernal Debugger (Microsoft)
  2604. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  2605. ks.sys Kernal CSA Library (Microsoft)
  2606. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  2607. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  2608. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  2609. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  2610. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  2611. mcupdate_GenuineIntel.dll Intel Microcode Update Library (Microsoft)
  2612. mmcss.sys MMCSS Driver (Microsoft)
  2613. monitor.sys Monitor Driver (Microsoft)
  2614. mouclass.sys Mouse Class Driver (Microsoft)
  2615. mouhid.sys HID Mouse Filter Driver (Microsoft)
  2616. mountmgr.sys Mount Point Manager (Microsoft)
  2617. MpKslDrv.sys Microsoft Anti-malware Protection driver
  2618. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  2619. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  2620. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  2621. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  2622. Msfs.SYS Mailslot driver (Microsoft)
  2623. msisadrv.sys ISA Driver (Microsoft)
  2624. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  2625. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  2626. mssmbios.sys System Management BIOS driver (Microsoft)
  2627. mup.sys Multiple UNC Provider driver (Microsoft)
  2628. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  2629. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  2630. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  2631. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  2632. netbios.sys NetBIOS Interface driver (Microsoft)
  2633. netbt.sys MBT Transport driver (Microsoft)
  2634. NETIO.SYS Network I/O Subsystem (Microsoft)
  2635. Npfs.SYS NPFS driver (Microsoft)
  2636. npsvctrig.sys Named pipe service triggers (Microsoft)
  2637. nsiproxy.sys NSI Proxy driver (Microsoft)
  2638. Ntfs.sys NT File System Driver (Microsoft)
  2639. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  2640. ntosext.sys NTOS Extension Host driver (Microsoft)
  2641. Null.SYS NULL Driver (Microsoft)
  2642. pacer.sys QoS Packet Scheduler (Microsoft)
  2643. partmgr.sys Partition driver (Microsoft)
  2644. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  2645. pcw.sys Performance Counter Driver (Microsoft)
  2646. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  2647. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  2648. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  2649. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2650. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  2651. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2652. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2653. rdyboost.sys ReadyBoost Driver (Microsoft)
  2654. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2655. serenum.sys Serial Port Enumerator (Microsoft)
  2656. serial.sys Serial Device Driver
  2657. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2658. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2659. spaceport.sys Storage Spaces driver (Microsoft)
  2660. srv2.sys Smb 2.0 Server driver (Microsoft)
  2661. srvnet.sys Server Network driver (Microsoft)
  2662. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2663. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2664. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2665. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2666. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2667. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2668. TDI.SYS TDI Wrapper driver (Microsoft)
  2669. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2670. tm.sys Kernel Transaction Manager driver (Microsoft)
  2671. tpm.sys Trusted Platform Module Device driver (Microsoft)
  2672. ucx01000.sys USB Controller Extension (Microsoft)
  2673. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2674. usbaudio.sys USB Audio Class Driver (Microsoft)
  2675. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2676. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2677. UsbHub3.sys USB3 HUB driver (Microsoft)
  2678. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  2679. USBXHCI.SYS USB XHCI driver (Microsoft)
  2680. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2681. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2682. volmgr.sys Volume Manager Driver (Microsoft)
  2683. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2684. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2685. volume.sys Volume driver (Microsoft)
  2686. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2687. watchdog.sys Watchdog driver (Microsoft)
  2688. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2689. wcnfs.sys Windows Container Name Virtualization FS Filter driver (Microsoft)
  2690. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2691. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2692. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2693. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2694. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2695. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2696. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2697. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2698. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2699. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2700. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2701. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2702. winquic.sys QUIC Transport Protocol driver (Microsoft)
  2703. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2704. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2705. Wof.sys Windows Overlay Filter (Microsoft)
  2706. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  2707. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2708. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  2709.  
  2710. ====================== Dump #4: UNLOADED MODULES =======================
  2711.  
  2712. fffff805`763c0000 fffff805`763e8000 tunnel.sys
  2713. fffff805`7f490000 fffff805`7f77b000 BEDaisy.sys
  2714. fffff805`75f20000 fffff805`75f31000 MSKSSRV.sys
  2715. fffff805`30400000 fffff805`30570000 EasyAntiChea
  2716. fffff805`75fd0000 fffff805`75fe1000 MSKSSRV.sys
  2717. fffff805`75fa0000 fffff805`75fad000 MSPCLOCK.sys
  2718. fffff805`75f90000 fffff805`75f9d000 MSPQM.sys
  2719. fffff805`75f70000 fffff805`75f81000 MSKSSRV.sys
  2720. fffff805`75f20000 fffff805`75f31000 MSKSSRV.sys
  2721. fffff805`333e0000 fffff805`333ea000 CorsairVHidD
  2722. fffff805`30b30000 fffff805`30b41000 MSKSSRV.sys
  2723. fffff805`30b10000 fffff805`30b2d000 EhStorClass.
  2724. fffff805`2e2a0000 fffff805`2e2bd000 EhStorClass.
  2725. fffff805`2eef0000 fffff805`2ef00000 dump_storpor
  2726. fffff805`2f030000 fffff805`2f160000 dump_iaStorE
  2727. fffff805`2f180000 fffff805`2f19e000 dump_dumpfve
  2728. fffff805`2ff90000 fffff805`2ffac000 dam.sys
  2729. fffff805`2dd80000 fffff805`2dd91000 WdBoot.sys
  2730. fffff805`2edf0000 fffff805`2ee01000 hwpolicy.sys
  2731.  
  2732. ====================== Dump #4: BIOS INFORMATION =======================
  2733.  
  2734. [SMBIOS Data Tables v3.0]
  2735. [DMI Version - 0]
  2736. [2.0 Calling Convention - No]
  2737. [Table Size - 4506 bytes]
  2738. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  2739. Vendor American Megatrends Inc.
  2740. BIOS Version 1002
  2741. BIOS Starting Address Segment f000
  2742. BIOS Release Date 12/14/2017
  2743. BIOS ROM Size 1000000
  2744. BIOS Characteristics
  2745. 07: - PCI Supported
  2746. 10: - APM Supported
  2747. 11: - Upgradeable FLASH BIOS
  2748. 12: - BIOS Shadowing Supported
  2749. 15: - CD-Boot Supported
  2750. 16: - Selectable Boot Supported
  2751. 17: - BIOS ROM Socketed
  2752. 19: - EDD Supported
  2753. 23: - 1.2MB Floppy Supported
  2754. 24: - 720KB Floppy Supported
  2755. 25: - 2.88MB Floppy Supported
  2756. 26: - Print Screen Device Supported
  2757. 27: - Keyboard Services Supported
  2758. 28: - Serial Services Supported
  2759. 29: - Printer Services Supported
  2760. 32: - BIOS Vendor Reserved
  2761. BIOS Characteristic Extensions
  2762. 00: - ACPI Supported
  2763. 01: - USB Legacy Supported
  2764. 08: - BIOS Boot Specification Supported
  2765. 10: - Specification Reserved
  2766. 11: - Specification Reserved
  2767. BIOS Major Revision 5
  2768. BIOS Minor Revision 12
  2769. EC Firmware Major Revision 255
  2770. EC Firmware Minor Revision 255
  2771. [System Information (Type 1) - Length 27 - Handle 0001h]
  2772. Manufacturer PC Specialist LTD
  2773. Product Name Intel Z270
  2774. Version System Version
  2775. UUID 00000000-0000-0000-0000-000000000000
  2776. Wakeup Type Power Switch
  2777. SKUNumber 1364299
  2778. Family Intel Z270 Systems
  2779. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2780. Manufacturer ASUSTeK COMPUTER INC.
  2781. Product PRIME Z270-K
  2782. Version Rev X.0x
  2783. Feature Flags 09h
  2784. -808667424: - -808667376: - ÷7?
  2785. ü
  2786. Location Default string
  2787. Chassis Handle 0003h
  2788. Board Type 0ah - Processor/Memory Module
  2789. Number of Child Handles 0
  2790. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2791. Manufacturer Default string
  2792. Chassis Type Desktop
  2793. Version Default string
  2794. Bootup State Safe
  2795. Power Supply State Safe
  2796. Thermal State Safe
  2797. Security Status None
  2798. OEM Defined 0
  2799. Height 0U
  2800. Number of Power Cords 1
  2801. Number of Contained Elements 0
  2802. Contained Element Size 3
  2803. [Onboard Devices Information (Type 10) - Length 6 - Handle 0026h]
  2804. Number of Devices 1
  2805. 01: Type Video [enabled]
  2806. [OEM Strings (Type 11) - Length 5 - Handle 0027h]
  2807. Number of Strings 8
  2808. 1 Default string
  2809. 2 Default string
  2810. 3 POTATO
  2811. 4 Default string
  2812. 5 FFFFFFFFFFFFF
  2813. 6 FFFFFFFFFFFFF
  2814. 7 FFFFFFFFFFFFF
  2815. 8 Default string
  2816. [System Configuration Options (Type 12) - Length 5 - Handle 0028h]
  2817. [Physical Memory Array (Type 16) - Length 23 - Handle 0043h]
  2818. Location 03h - SystemBoard/Motherboard
  2819. Use 03h - System Memory
  2820. Memory Error Correction 03h - None
  2821. Maximum Capacity 67108864KB
  2822. Number of Memory Devices 4
  2823. [Memory Device (Type 17) - Length 40 - Handle 0044h]
  2824. Physical Memory Array Handle 0043h
  2825. Total Width 64 bits
  2826. Data Width 64 bits
  2827. Size 8192MB
  2828. Form Factor 09h - DIMM
  2829. Device Locator ChannelA-DIMM1
  2830. Bank Locator BANK 0
  2831. Memory Type 1ah - Specification Reserved
  2832. Type Detail 4080h - Synchronous
  2833. Speed 2133MHz
  2834. Manufacturer Corsair
  2835. Part Number CMR32GX4M4C3000C16
  2836. [Memory Device (Type 17) - Length 40 - Handle 0045h]
  2837. Physical Memory Array Handle 0043h
  2838. Total Width 64 bits
  2839. Data Width 64 bits
  2840. Size 8192MB
  2841. Form Factor 09h - DIMM
  2842. Device Locator ChannelA-DIMM2
  2843. Bank Locator BANK 1
  2844. Memory Type 1ah - Specification Reserved
  2845. Type Detail 4080h - Synchronous
  2846. Speed 2133MHz
  2847. Manufacturer Corsair
  2848. Part Number CMR32GX4M4C3000C16
  2849. [Memory Device (Type 17) - Length 40 - Handle 0046h]
  2850. Physical Memory Array Handle 0043h
  2851. Total Width 64 bits
  2852. Data Width 64 bits
  2853. Size 8192MB
  2854. Form Factor 09h - DIMM
  2855. Device Locator ChannelB-DIMM1
  2856. Bank Locator BANK 2
  2857. Memory Type 1ah - Specification Reserved
  2858. Type Detail 4080h - Synchronous
  2859. Speed 2133MHz
  2860. Manufacturer Corsair
  2861. Part Number CMR32GX4M4C3000C16
  2862. [Memory Device (Type 17) - Length 40 - Handle 0047h]
  2863. Physical Memory Array Handle 0043h
  2864. Total Width 64 bits
  2865. Data Width 64 bits
  2866. Size 8192MB
  2867. Form Factor 09h - DIMM
  2868. Device Locator ChannelB-DIMM2
  2869. Bank Locator BANK 3
  2870. Memory Type 1ah - Specification Reserved
  2871. Type Detail 4080h - Synchronous
  2872. Speed 2133MHz
  2873. Manufacturer Corsair
  2874. Part Number CMR32GX4M4C3000C16
  2875. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0048h]
  2876. Starting Address 00000000h
  2877. Ending Address 01ffffffh
  2878. Memory Array Handle 0043h
  2879. Partition Width 04
  2880. [Cache Information (Type 7) - Length 19 - Handle 0049h]
  2881. Socket Designation L1 Cache
  2882. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2883. Maximum Cache Size 0100h - 256K
  2884. Installed Size 0100h - 256K
  2885. Supported SRAM Type 0020h - Synchronous
  2886. Current SRAM Type 0020h - Synchronous
  2887. Cache Speed 0ns
  2888. Error Correction Type ParitySingle-Bit ECC
  2889. System Cache Type Unified
  2890. Associativity 8-way Set-Associative
  2891. [Cache Information (Type 7) - Length 19 - Handle 004ah]
  2892. Socket Designation L2 Cache
  2893. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2894. Maximum Cache Size 0400h - 1024K
  2895. Installed Size 0400h - 1024K
  2896. Supported SRAM Type 0020h - Synchronous
  2897. Current SRAM Type 0020h - Synchronous
  2898. Cache Speed 0ns
  2899. Error Correction Type Multi-Bit ECC
  2900. System Cache Type Unified
  2901. Associativity 4-way Set-Associative
  2902. [Cache Information (Type 7) - Length 19 - Handle 004bh]
  2903. Socket Designation L3 Cache
  2904. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2905. Maximum Cache Size 2000h - 8192K
  2906. Installed Size 2000h - 8192K
  2907. Supported SRAM Type 0020h - Synchronous
  2908. Current SRAM Type 0020h - Synchronous
  2909. Cache Speed 0ns
  2910. Error Correction Type Specification Reserved
  2911. System Cache Type Unified
  2912. Associativity 16-way Set-Associative
  2913. [Processor Information (Type 4) - Length 48 - Handle 004ch]
  2914. Socket Designation LGA1151
  2915. Processor Type Central Processor
  2916. Processor Family c6h - Specification Reserved
  2917. Processor Manufacturer Intel(R) Corporation
  2918. Processor ID e9060900fffbebbf
  2919. Processor Version Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz
  2920. Processor Voltage 8bh - 1.1V
  2921. External Clock 100MHz
  2922. Max Speed 8300MHz
  2923. Current Speed 4200MHz
  2924. Status Enabled Populated
  2925. Processor Upgrade Other
  2926. L1 Cache Handle 0049h
  2927. L2 Cache Handle 004ah
  2928. L3 Cache Handle 004bh
  2929. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004dh]
  2930. Starting Address 00000000h
  2931. Ending Address 007fffffh
  2932. Memory Device Handle 0044h
  2933. Mem Array Mapped Adr Handle 0048h
  2934. Interleave Position 01
  2935. Interleave Data Depth 02
  2936. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004eh]
  2937. Starting Address 01000000h
  2938. Ending Address 017fffffh
  2939. Memory Device Handle 0045h
  2940. Mem Array Mapped Adr Handle 0048h
  2941. Interleave Position 01
  2942. Interleave Data Depth 02
  2943. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 004fh]
  2944. Starting Address 00800000h
  2945. Ending Address 00ffffffh
  2946. Memory Device Handle 0046h
  2947. Mem Array Mapped Adr Handle 0048h
  2948. Interleave Position 02
  2949. Interleave Data Depth 02
  2950. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0050h]
  2951. Starting Address 01800000h
  2952. Ending Address 01ffffffh
  2953. Memory Device Handle 0047h
  2954. Mem Array Mapped Adr Handle 0048h
  2955. Interleave Position 02
  2956. Interleave Data Depth 02
  2957.  
  2958. ========================== Dump #4: Extra #1 ===========================
  2959.  
  2960. 7: kd> !verifier
  2961. Verify Flags Level 0x00000000
  2962. STANDARD FLAGS:
  2963. [X] (0x00000000) Automatic Checks
  2964. [ ] (0x00000001) Special pool
  2965. [ ] (0x00000002) Force IRQL checking
  2966. [ ] (0x00000008) Pool tracking
  2967. [ ] (0x00000010) I/O verification
  2968. [ ] (0x00000020) Deadlock detection
  2969. [ ] (0x00000080) DMA checking
  2970. [ ] (0x00000100) Security checks
  2971. [ ] (0x00000800) Miscellaneous checks
  2972. [ ] (0x00020000) DDI compliance checking
  2973. ADDITIONAL FLAGS:
  2974. [ ] (0x00000004) Randomized low resources simulation
  2975. [ ] (0x00000200) Force pending I/O requests
  2976. [ ] (0x00000400) IRP logging
  2977. [ ] (0x00002000) Invariant MDL checking for stack
  2978. [ ] (0x00004000) Invariant MDL checking for driver
  2979. [ ] (0x00008000) Power framework delay fuzzing
  2980. [ ] (0x00010000) Port/miniport interface checking
  2981. [ ] (0x00040000) Systematic low resources simulation
  2982. [ ] (0x00080000) DDI compliance checking (additional)
  2983. [ ] (0x00200000) NDIS/WIFI verification
  2984. [ ] (0x00800000) Kernel synchronization delay fuzzing
  2985. [ ] (0x01000000) VM switch verification
  2986. [ ] (0x02000000) Code integrity checks
  2987. [X] Indicates flag is enabled
  2988. Summary of All Verifier Statistics
  2989. RaiseIrqls 0x0
  2990. AcquireSpinLocks 0x0
  2991. Synch Executions 0x0
  2992. Trims 0x0
  2993. Pool Allocations Attempted 0x0
  2994. Pool Allocations Succeeded 0x0
  2995. Pool Allocations Succeeded SpecialPool 0x0
  2996. Pool Allocations With NO TAG 0x0
  2997. Pool Allocations Failed 0x0
  2998. Current paged pool allocations 0x0 for 00000000 bytes
  2999. Peak paged pool allocations 0x0 for 00000000 bytes
  3000. Current nonpaged pool allocations 0x0 for 00000000 bytes
  3001. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  3002.  
  3003. ========================== Dump #4: Extra #2 ===========================
  3004.  
  3005. 7: kd> !thread
  3006. THREAD ffffbe010ca38040 Cid 0004.3ad4 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 7
  3007. Not impersonating
  3008. GetUlongFromAddress: unable to read from fffff8052b608204
  3009. Owning Process ffffbe0ffa073080 Image: System
  3010. Attached Process N/A Image: N/A
  3011. fffff78000000000: Unable to get shared data
  3012. Wait Start TickCount 1207011
  3013. Context Switch Count 3915647 IdealProcessor: 1
  3014. UserTime 00:00:00.000
  3015. KernelTime 00:03:25.562
  3016. Win32 Start Address BEDaisy (0xfffff8057ed94830)
  3017. Stack Init ffffd0006ee77b90 Current ffffd0006ee773a0
  3018. Base ffffd0006ee78000 Limit ffffd0006ee71000 Call 0000000000000000
  3019. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  3020. Child-SP RetAddr : Args to Child : Call Site
  3021. ffffab00`6efabf08 fffff805`2b3cd2e9 : 00000000`0000007f 00000000`00000008 ffffab00`6efac050 ffffd000`6ee70ff0 : nt!KeBugCheckEx
  3022. ffffab00`6efabf10 fffff805`2b3c82ee : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  3023. ffffab00`6efac050 fffff805`7efcf803 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0x2ae (TrapFrame @ ffffab00`6efac050)
  3024. ffffd000`6ee70ff0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : BEDaisy+0x23f803
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!