API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 25th, 2020
88
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 158.14 KB | None | 0 0
raw download clone embed print report
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 03 minutes and 34 seconds
  5.  
  6. ================================= BIOS =================================
  7. VENDOR: American Megatrends Inc.
  8. VERSION: 2401
  9. DATE: 07/15/2019
  10.  
  11. ============================= MOTHERBOARD ==============================
  12. MANUFACTURER: ASUSTeK COMPUTER INC.
  13. PRODUCT: PRIME Z370-P
  14. VERSION: Rev X.0x
  15.  
  16. ================================= RAM ==================================
  17. Size Speed Manufacturer Part No.
  18. -------------- -------------- ------------------- ----------------------
  19. 0MHz
  20. 8192MB 2400MHz Corsair CMK16GX4M2A2400C16
  21. 0MHz
  22. 8192MB 2400MHz Corsair CMK16GX4M2A2400C16
  23.  
  24. ================================= CPU ==================================
  25. Processor Version: Intel(R) Core(TM) i5-8600K CPU @ 3.60GHz
  26. COUNT: 6
  27. MHZ: 3600
  28. VENDOR: GenuineIntel
  29. FAMILY: 6
  30. MODEL: 9e
  31. STEPPING: a
  32. MICROCODE: 6,9e,a,0 (F,M,S,R) SIG: B4'00000000 (cache) B4'00000000 (init)
  33.  
  34. ================================== OS ==================================
  35. Product: WinNt, suite: TerminalServer SingleUserTS
  36. BUILD_VERSION: 10.0.18362.778 (WinBuild.160101.0800)
  37. BUILD: 18362
  38. SERVICEPACK: 778
  39. PLATFORM_TYPE: x64
  40. NAME: Windows 10
  41. EDITION: Windows 10 WinNt TerminalServer SingleUserTS
  42. BUILD_TIMESTAMP: 2015-10-23 02:39:54
  43. BUILDDATESTAMP: 160101.0800
  44. BUILDLAB: WinBuild
  45. BUILDOSVER: 10.0.18362.778
  46. Built by: 18362.1.amd64fre.19h1_release.190318-1202
  47. BUILD_VERSION: 10.0.18362.720 (WinBuild.160101.0800)
  48. SERVICEPACK: 720
  49. BUILD_TIMESTAMP: unknown_date
  50. BUILDOSVER: 10.0.18362.720
  51.  
  52. =============================== DEBUGGER ===============================
  53. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  54. Copyright (c) Microsoft Corporation. All rights reserved.
  55.  
  56. =============================== COMMENTS ===============================
  57. * Information gathered from different dump files may be different. If
  58. Windows updates between two dump files, two or more OS versions may
  59. be shown above.
  60. * If the user updates the BIOS between dump files, two or more versions
  61. and dates may be shown above.
  62. * More RAM information can be found below in a full BIOS section.
  63.  
  64. ========================================================================
  65. ======================= Dump #1: ANALYZE VERBOSE =======================
  66. ======================= File: 042320-5000-01.dmp =======================
  67. ========================================================================
  68.  
  69. Mini Kernel Dump File: Only registers and stack trace are available
  70. Windows 10 Kernel Version 18362 MP (6 procs) Free x64
  71. Kernel base = 0xfffff800`1ce00000 PsLoadedModuleList = 0xfffff800`1d248150
  72. Debug session time: Thu Apr 23 15:25:23.845 2020 (UTC - 4:00)
  73. System Uptime: 0 days 3:08:57.524
  74.  
  75. BugCheck A, {1, 2, 0, fffff8001ce6177e}
  76. Probably caused by : memory_corruption
  77. Followup: memory_corruption
  78.  
  79. IRQL_NOT_LESS_OR_EQUAL (a)
  80. An attempt was made to access a pageable (or completely invalid) address at an
  81. interrupt request level (IRQL) that is too high. This is usually
  82. caused by drivers using improper addresses.
  83. If a kernel debugger is available get the stack backtrace.
  84.  
  85. Arguments:
  86. Arg1: 0000000000000001, memory referenced
  87. Arg2: 0000000000000002, IRQL
  88. Arg3: 0000000000000000, bitfield :
  89. bit 0 : value 0 = read operation, 1 = write operation
  90. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  91. Arg4: fffff8001ce6177e, address which referenced memory
  92.  
  93. Debugging Details:
  94. DUMP_CLASS: 1
  95. DUMP_QUALIFIER: 400
  96. DUMP_TYPE: 2
  97. DUMP_FILE_ATTRIBUTES: 0x8
  98. Kernel Generated Triage Dump
  99. READ_ADDRESS: fffff8001d3733b8: Unable to get MiVisibleState
  100. 0000000000000001
  101. CURRENT_IRQL: 2
  102. FAULTING_IP:
  103. nt!KiAttemptFastRemoveQueue+32
  104. fffff800`1ce6177e 493913 cmp qword ptr [r11],rdx
  105. CUSTOMER_CRASH_COUNT: 1
  106. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  107. BUGCHECK_STR: AV
  108.  
  109. PROCESS_NAME: firefox.exe
  110.  
  111. TRAP_FRAME: fffff98828c4f530 -- (.trap 0xfffff98828c4f530)
  112. NOTE: The trap frame does not contain all registers.
  113. Some register values may be zeroed or incorrect.
  114. rax=0000000000000000 rbx=0000000000000000 rcx=ffff950de730dbd8
  115. rdx=ffff950de5053498 rsi=0000000000000000 rdi=0000000000000000
  116. rip=fffff8001ce6177e rsp=fffff98828c4f6c0 rbp=0000000000000000
  117. r8=ffff950de730dbc0 r9=ffff950de730dbd8 r10=ffff950de730dbd8
  118. r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
  119. r14=0000000000000000 r15=0000000000000000
  120. iopl=0 nv up ei pl zr na po nc
  121. nt!KiAttemptFastRemoveQueue+0x32:
  122. fffff800`1ce6177e 493913 cmp qword ptr [r11],rdx ds:00000000`00000001=????????????????
  123. Resetting default scope
  124. LAST_CONTROL_TRANSFER: from fffff8001cfd41e9 to fffff8001cfc2390
  125. STACK_TEXT:
  126. fffff988`28c4f3e8 fffff800`1cfd41e9 : 00000000`0000000a 00000000`00000001 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  127. fffff988`28c4f3f0 fffff800`1cfd0529 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  128. fffff988`28c4f530 fffff800`1ce6177e : 00000000`00000001 00000000`00000001 00000000`00000000 ffff950d`e730dbc0 : nt!KiPageFault+0x469
  129. fffff988`28c4f6c0 fffff800`1cf18162 : ffff950d`e50533f0 fffff800`00000000 ffff950d`e0985c00 ffff950d`e69c01c0 : nt!KiAttemptFastRemoveQueue+0x32
  130. fffff988`28c4f700 fffff800`1cf178b9 : fffff988`00000000 ffff950d`ec998401 ffff950d`e8af8b00 ffff950d`00000000 : nt!KeRemoveQueueEx+0x622
  131. fffff988`28c4f7b0 fffff800`1d3f38f0 : fffff988`28c4f920 0000004f`1adff7c8 00000000`0000c101 00000000`00000000 : nt!IoRemoveIoCompletion+0x99
  132. fffff988`28c4f8d0 fffff800`1cfd3c15 : ffff950d`e69c0080 0000004f`1adff7a8 fffff988`28c4f9a8 000001da`bbd6a038 : nt!NtRemoveIoCompletion+0x140
  133. fffff988`28c4f990 00007ffb`ed55c194 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  134. 0000004f`1adff788 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`ed55c194
  135. STACK_COMMAND: kb
  136. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  137. fffff8001ce61659 - nt!MiMakeProtoLeafValid+55
  138. [ f6:b6 ]
  139. fffff8001ce61780 - nt!KiAttemptFastRemoveQueue+34 (+0x127)
  140. [ 11:13 ]
  141. fffff8001ce61e0d-fffff8001ce61e0e 2 bytes - nt!MiRaisedIrqlFault+5d (+0x68d)
  142. [ fb f6:db b6 ]
  143. fffff8001ce61e1a-fffff8001ce61e1b 2 bytes - nt!MiRaisedIrqlFault+6a (+0x0d)
  144. [ fb f6:db b6 ]
  145. 6 errors : !nt (fffff8001ce61659-fffff8001ce61e1b)
  146. MODULE_NAME: memory_corruption
  147.  
  148. IMAGE_NAME: memory_corruption
  149.  
  150. FOLLOWUP_NAME: memory_corruption
  151. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  152. MEMORY_CORRUPTOR: ONE_BIT_LARGE
  153. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT_LARGE
  154. BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT_LARGE
  155. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT_LARGE
  156. TARGET_TIME: 2020-04-23T19:25:23.000Z
  157. SUITE_MASK: 272
  158. PRODUCT_TYPE: 1
  159. USER_LCID: 0
  160. FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit_large
  161. FAILURE_ID_HASH: {31545515-196b-fab5-2300-9ce714226f43}
  162. Followup: memory_corruption
  163.  
  164. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  165.  
  166. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  167. Nov 09 2017 - vbdenum.sys - Citrix ICA Host (Citrix Systems, Inc.)
  168. Jul 12 2018 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  169. Aug 08 2018 - ctxusbm.sys - Citrix USB Filter Driver https://www.citrix.com
  170. Oct 22 2018 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  171. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  172. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  173. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  174. Mar 17 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  175.  
  176. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  177.  
  178. Image name: RTKVHD64.sys
  179. Search : https://www.google.com/search?q=RTKVHD64.sys
  180. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  181. Timestamp : Fri Jun 3 2016
  182.  
  183. Image name: vbdenum.sys
  184. Search : https://www.google.com/search?q=vbdenum.sys
  185. ADA Info : Citrix ICA Host (Citrix Systems, Inc.)
  186. Timestamp : Thu Nov 9 2017
  187.  
  188. Image name: TeeDriverW8x64.sys
  189. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  190. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  191. Timestamp : Thu Jul 12 2018
  192.  
  193. Image name: ctxusbm.sys
  194. Search : https://www.google.com/search?q=ctxusbm.sys
  195. ADA Info : Citrix USB Filter Driver https://www.citrix.com
  196. Timestamp : Wed Aug 8 2018
  197.  
  198. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5BCDE005a6000\rt640x64.sys
  199. Image name: rt640x64.sys
  200. Search : https://www.google.com/search?q=rt640x64.sys
  201. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  202. Timestamp : Mon Oct 22 2018
  203. File version: 9.1.409.2015
  204. Product version: 9.1.409.2015
  205. File flags: 8 (Mask 3F) Private
  206. File OS: 40004 NT Win32
  207. File type: 3.6 Driver
  208. File date: 00000000.00000000
  209. CompanyName: Realtek
  210. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  211. InternalName: rt640x64.sys
  212. OriginalFilename: rt640x64.sys
  213. ProductVersion: 9.001.0409.2015
  214. FileVersion: 9.001.0409.2015
  215. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  216. LegalCopyright: Copyright (C) 2018 Realtek Semiconductor Corporation. All Right Reserved.
  217.  
  218. Image name: nvvad64v.sys
  219. Search : https://www.google.com/search?q=nvvad64v.sys
  220. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  221. Timestamp : Thu Mar 14 2019
  222.  
  223. Image name: nvvhci.sys
  224. Search : https://www.google.com/search?q=nvvhci.sys
  225. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  226. Timestamp : Fri Jan 10 2020
  227.  
  228. Image name: nvhda64v.sys
  229. Search : https://www.google.com/search?q=nvhda64v.sys
  230. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  231. Timestamp : Wed Feb 19 2020
  232.  
  233. Image name: nvlddmkm.sys
  234. Search : https://www.google.com/search?q=nvlddmkm.sys
  235. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  236. Timestamp : Tue Mar 17 2020
  237.  
  238. ====================== Dump #1: MICROSOFT DRIVERS ======================
  239.  
  240. ACPI.sys ACPI Driver for NT (Microsoft)
  241. acpiex.sys ACPIEx Driver (Microsoft)
  242. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  243. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  244. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  245. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  246. ahcache.sys Application Compatibility Cache (Microsoft)
  247. bam.sys BAM Kernal driver (Microsoft)
  248. BasicDisplay.sys Basic Display driver (Microsoft)
  249. BasicRender.sys Basic Render driver (Microsoft)
  250. Beep.SYS BEEP driver (Microsoft)
  251. bindflt.sys Windows Bind Filter driver (Microsoft)
  252. BOOTVID.dll VGA Boot Driver (Microsoft)
  253. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  254. cdd.dll Canonical Display Driver (Microsoft)
  255. cdfs.sys CD-ROM File System Driver (Microsoft)
  256. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  257. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  258. CI.dll Code Integrity Module (Microsoft)
  259. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  260. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  261. CLFS.SYS Common Log File System Driver (Microsoft)
  262. clipsp.sys CLIP Service (Microsoft)
  263. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  264. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  265. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  266. condrv.sys Console Driver (Microsoft)
  267. crashdmp.sys Crash Dump driver (Microsoft)
  268. csc.sys Windows Client Side Caching driver (Microsoft)
  269. dfsc.sys DFS Namespace Client Driver (Microsoft)
  270. disk.sys PnP Disk Driver (Microsoft)
  271. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  272. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  273. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  274. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  275. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  276. dxgmms2.sys DirectX Graphics MMS
  277. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  278. fastfat.SYS Fast FAT File System Driver (Microsoft)
  279. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  280. fileinfo.sys FileInfo Filter Driver (Microsoft)
  281. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  282. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  283. FsDepends.sys File System Dependency Manager Mini Filter driver (Microsoft)
  284. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  285. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  286. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  287. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  288. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  289. HIDCLASS.SYS Hid Class Library (Microsoft)
  290. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  291. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  292. HTTP.sys HTTP Protocol Stack (Microsoft)
  293. IndirectKmd.sys Indirect displays kernel-mode filter driver
  294. intelpep.sys Intel Power Engine Plugin (Microsoft)
  295. intelppm.sys Processor Device Driver (Microsoft)
  296. iorate.sys I/O rate control Filter (Microsoft)
  297. kbdclass.sys Keyboard Class Driver (Microsoft)
  298. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  299. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  300. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  301. ks.sys Kernal CSA Library (Microsoft)
  302. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  303. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  304. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  305. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  306. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  307. mcupdate.dll Media Center Update (Microsoft)
  308. mmcss.sys MMCSS Driver (Microsoft)
  309. monitor.sys Monitor Driver (Microsoft)
  310. mouclass.sys Mouse Class Driver (Microsoft)
  311. mouhid.sys HID Mouse Filter Driver (Microsoft)
  312. mountmgr.sys Mount Point Manager (Microsoft)
  313. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  314. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  315. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  316. Msfs.SYS Mailslot driver (Microsoft)
  317. msisadrv.sys ISA Driver (Microsoft)
  318. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  319. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  320. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  321. mssmbios.sys System Management BIOS driver (Microsoft)
  322. mup.sys Multiple UNC Provider driver (Microsoft)
  323. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  324. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  325. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  326. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  327. NDProxy.sys NDIS Proxy driver (Microsoft)
  328. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  329. netbios.sys NetBIOS Interface driver (Microsoft)
  330. netbt.sys MBT Transport driver (Microsoft)
  331. NETIO.SYS Network I/O Subsystem (Microsoft)
  332. Npfs.SYS NPFS driver (Microsoft)
  333. npsvctrig.sys Named pipe service triggers (Microsoft)
  334. nsiproxy.sys NSI Proxy driver (Microsoft)
  335. Ntfs.sys NT File System Driver (Microsoft)
  336. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  337. ntosext.sys NTOS Extension Host driver (Microsoft)
  338. Null.SYS NULL Driver (Microsoft)
  339. pacer.sys QoS Packet Scheduler (Microsoft)
  340. partmgr.sys Partition driver (Microsoft)
  341. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  342. pcw.sys Performance Counter Driver (Microsoft)
  343. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  344. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  345. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  346. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  347. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  348. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  349. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  350. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  351. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  352. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  353. rdyboost.sys ReadyBoost Driver (Microsoft)
  354. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  355. serenum.sys Serial Port Enumerator (Microsoft)
  356. serial.sys Serial Device Driver
  357. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  358. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  359. spaceport.sys Storage Spaces driver (Microsoft)
  360. srv2.sys Smb 2.0 Server driver (Microsoft)
  361. srvnet.sys Server Network driver (Microsoft)
  362. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  363. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  364. storqosflt.sys Storage QoS Filter driver (Microsoft)
  365. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  366. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  367. tcpip.sys TCP/IP Protocol driver (Microsoft)
  368. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  369. TDI.SYS TDI Wrapper driver (Microsoft)
  370. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  371. tm.sys Kernel Transaction Manager driver (Microsoft)
  372. ucx01000.sys USB Controller Extension (Microsoft)
  373. UEFI.sys UEFI NT driver (Microsoft)
  374. umbus.sys User-Mode Bus Enumerator (Microsoft)
  375. usbaudio.sys USB Audio Class Driver (Microsoft)
  376. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  377. USBD.SYS Universal Serial Bus Driver (Microsoft)
  378. UsbHub3.sys USB3 HUB driver (Microsoft)
  379. USBXHCI.SYS USB XHCI driver (Microsoft)
  380. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  381. vhdmp.sys VHD Miniport driver (Microsoft)
  382. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  383. volmgr.sys Volume Manager Driver (Microsoft)
  384. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  385. volsnap.sys Volume Shadow Copy driver (Microsoft)
  386. volume.sys Volume driver (Microsoft)
  387. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  388. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  389. watchdog.sys Watchdog driver (Microsoft)
  390. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  391. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  392. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  393. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  394. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  395. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  396. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  397. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  398. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  399. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  400. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  401. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  402. winquic.sys QUIC Transport Protocol driver (Microsoft)
  403. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  404. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  405. Wof.sys Windows Overlay Filter (Microsoft)
  406. WppRecorder.sys WPP Trace Recorder (Microsoft)
  407. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  408.  
  409. ====================== Dump #1: UNLOADED MODULES =======================
  410.  
  411. fffff800`6bbc0000 fffff800`6bbd4000 WdNisDrv.sys
  412. fffff800`6ba40000 fffff800`6ba54000 WdNisDrv.sys
  413. fffff800`27d40000 fffff800`27d4f000 dump_storpor
  414. fffff800`27d80000 fffff800`27daf000 dump_storahc
  415. fffff800`27dd0000 fffff800`27dee000 dump_dumpfve
  416. fffff800`29970000 fffff800`299c1000 WUDFRd.sys
  417. fffff800`27a70000 fffff800`27a8e000 dam.sys
  418. fffff800`201b0000 fffff800`201c1000 WdBoot.sys
  419. fffff800`211b0000 fffff800`211c1000 hwpolicy.sys
  420.  
  421. ====================== Dump #1: BIOS INFORMATION =======================
  422.  
  423. [SMBIOS Data Tables v3.0]
  424. [DMI Version - 0]
  425. [2.0 Calling Convention - No]
  426. [Table Size - 4215 bytes]
  427. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  428. Vendor American Megatrends Inc.
  429. BIOS Version 2401
  430. BIOS Starting Address Segment f000
  431. BIOS Release Date 07/15/2019
  432. BIOS ROM Size 1000000
  433. BIOS Characteristics
  434. 07: - PCI Supported
  435. 10: - APM Supported
  436. 11: - Upgradeable FLASH BIOS
  437. 12: - BIOS Shadowing Supported
  438. 15: - CD-Boot Supported
  439. 16: - Selectable Boot Supported
  440. 17: - BIOS ROM Socketed
  441. 19: - EDD Supported
  442. 23: - 1.2MB Floppy Supported
  443. 24: - 720KB Floppy Supported
  444. 25: - 2.88MB Floppy Supported
  445. 26: - Print Screen Device Supported
  446. 27: - Keyboard Services Supported
  447. 28: - Serial Services Supported
  448. 29: - Printer Services Supported
  449. 32: - BIOS Vendor Reserved
  450. BIOS Characteristic Extensions
  451. 00: - ACPI Supported
  452. 01: - USB Legacy Supported
  453. 08: - BIOS Boot Specification Supported
  454. 10: - Specification Reserved
  455. 11: - Specification Reserved
  456. BIOS Major Revision 5
  457. BIOS Minor Revision 12
  458. EC Firmware Major Revision 255
  459. EC Firmware Minor Revision 255
  460. [System Information (Type 1) - Length 27 - Handle 0001h]
  461. Manufacturer System manufacturer
  462. Product Name System Product Name
  463. Version System Version
  464. UUID 00000000-0000-0000-0000-000000000000
  465. Wakeup Type Power Switch
  466. SKUNumber SKU
  467. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  468. Manufacturer ASUSTeK COMPUTER INC.
  469. Product PRIME Z370-P
  470. Version Rev X.0x
  471. Feature Flags 09h
  472. -527780128: - -527780080: - ÷7£ý
  473. Location Default string
  474. Chassis Handle 0003h
  475. Board Type 0ah - Processor/Memory Module
  476. Number of Child Handles 0
  477. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  478. Manufacturer Default string
  479. Chassis Type Desktop
  480. Version Default string
  481. Bootup State Safe
  482. Power Supply State Safe
  483. Thermal State Safe
  484. Security Status None
  485. OEM Defined 0
  486. Height 0U
  487. Number of Power Cords 1
  488. Number of Contained Elements 0
  489. Contained Element Size 3
  490. [Onboard Devices Information (Type 10) - Length 6 - Handle 0021h]
  491. Number of Devices 1
  492. 01: Type Video [enabled]
  493. [OEM Strings (Type 11) - Length 5 - Handle 0022h]
  494. Number of Strings 8
  495. 1 Default string
  496. 2 Default string
  497. 3 COD
  498. 4 Default string
  499. 5 FFFFFFFFFFFFF
  500. 6 FFFFFFFFFFFFF
  501. 7 FFFFFFFFFFFFF
  502. 8 Default string
  503. [System Configuration Options (Type 12) - Length 5 - Handle 0023h]
  504. [Physical Memory Array (Type 16) - Length 23 - Handle 003eh]
  505. Location 03h - SystemBoard/Motherboard
  506. Use 03h - System Memory
  507. Memory Error Correction 03h - None
  508. Maximum Capacity 67108864KB
  509. Number of Memory Devices 4
  510. [Memory Device (Type 17) - Length 40 - Handle 003fh]
  511. Physical Memory Array Handle 003eh
  512. Total Width 0 bits
  513. Data Width 0 bits
  514. Form Factor 02h - Unknown
  515. Device Locator ChannelA-DIMM1
  516. Bank Locator BANK 0
  517. Memory Type 02h - Unknown
  518. Type Detail 0000h -
  519. Speed 0MHz
  520. [Memory Device (Type 17) - Length 40 - Handle 0040h]
  521. Physical Memory Array Handle 003eh
  522. Total Width 64 bits
  523. Data Width 64 bits
  524. Size 8192MB
  525. Form Factor 09h - DIMM
  526. Device Locator ChannelA-DIMM2
  527. Bank Locator BANK 1
  528. Memory Type 1ah - Specification Reserved
  529. Type Detail 4080h - Synchronous
  530. Speed 2400MHz
  531. Manufacturer Corsair
  532. Part Number CMK16GX4M2A2400C16
  533. [Memory Device (Type 17) - Length 40 - Handle 0041h]
  534. Physical Memory Array Handle 003eh
  535. Total Width 0 bits
  536. Data Width 0 bits
  537. Form Factor 02h - Unknown
  538. Device Locator ChannelB-DIMM1
  539. Bank Locator BANK 2
  540. Memory Type 02h - Unknown
  541. Type Detail 0000h -
  542. Speed 0MHz
  543. [Memory Device (Type 17) - Length 40 - Handle 0042h]
  544. Physical Memory Array Handle 003eh
  545. Total Width 64 bits
  546. Data Width 64 bits
  547. Size 8192MB
  548. Form Factor 09h - DIMM
  549. Device Locator ChannelB-DIMM2
  550. Bank Locator BANK 3
  551. Memory Type 1ah - Specification Reserved
  552. Type Detail 4080h - Synchronous
  553. Speed 2400MHz
  554. Manufacturer Corsair
  555. Part Number CMK16GX4M2A2400C16
  556. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0043h]
  557. Starting Address 00000000h
  558. Ending Address 00ffffffh
  559. Memory Array Handle 003eh
  560. Partition Width 02
  561. [Cache Information (Type 7) - Length 19 - Handle 0044h]
  562. Socket Designation L1 Cache
  563. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  564. Maximum Cache Size 0180h - 384K
  565. Installed Size 0180h - 384K
  566. Supported SRAM Type 0020h - Synchronous
  567. Current SRAM Type 0020h - Synchronous
  568. Cache Speed 0ns
  569. Error Correction Type ParitySingle-Bit ECC
  570. System Cache Type Unified
  571. Associativity 8-way Set-Associative
  572. [Cache Information (Type 7) - Length 19 - Handle 0045h]
  573. Socket Designation L2 Cache
  574. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  575. Maximum Cache Size 0600h - 1536K
  576. Installed Size 0600h - 1536K
  577. Supported SRAM Type 0020h - Synchronous
  578. Current SRAM Type 0020h - Synchronous
  579. Cache Speed 0ns
  580. Error Correction Type Multi-Bit ECC
  581. System Cache Type Unified
  582. Associativity 4-way Set-Associative
  583. [Cache Information (Type 7) - Length 19 - Handle 0046h]
  584. Socket Designation L3 Cache
  585. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  586. Maximum Cache Size 2400h - 9216K
  587. Installed Size 2400h - 9216K
  588. Supported SRAM Type 0020h - Synchronous
  589. Current SRAM Type 0020h - Synchronous
  590. Cache Speed 0ns
  591. Error Correction Type Specification Reserved
  592. System Cache Type Unified
  593. Associativity Specification Reserved
  594. [Processor Information (Type 4) - Length 48 - Handle 0047h]
  595. Socket Designation LGA1151
  596. Processor Type Central Processor
  597. Processor Family cdh - Specification Reserved
  598. Processor Manufacturer Intel(R) Corporation
  599. Processor ID ea060900fffbebbf
  600. Processor Version Intel(R) Core(TM) i5-8600K CPU @ 3.60GHz
  601. Processor Voltage 8ah - 1.0V
  602. External Clock 100MHz
  603. Max Speed 8300MHz
  604. Current Speed 3600MHz
  605. Status Enabled Populated
  606. Processor Upgrade Specification Reserved
  607. L1 Cache Handle 0044h
  608. L2 Cache Handle 0045h
  609. L3 Cache Handle 0046h
  610. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0048h]
  611. Starting Address 00000000h
  612. Ending Address 007fffffh
  613. Memory Device Handle 0040h
  614. Mem Array Mapped Adr Handle 0043h
  615. Interleave Position 01
  616. Interleave Data Depth 02
  617. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0049h]
  618. Starting Address 00800000h
  619. Ending Address 00ffffffh
  620. Memory Device Handle 0042h
  621. Mem Array Mapped Adr Handle 0043h
  622. Interleave Position 02
  623. Interleave Data Depth 02
  624.  
  625. ========================== Dump #1: Extra #1 ===========================
  626.  
  627. 4: kd> !verifier
  628. fffff8001d248580: Unable to get verifier list.
  629.  
  630. ========================== Dump #1: Extra #2 ===========================
  631.  
  632. 4: kd> !thread
  633. THREAD ffff950de69c0080 Cid 2290.22a8 Teb: 0000004f18c08000 Win32Thread: ffff950de63a3710 WAIT: (WrQueue) UserMode Non-Alertable
  634. ffff950de730dbc0 QueueObject
  635. Not impersonating
  636. GetUlongFromAddress: unable to read from fffff8001d22ca14
  637. Owning Process ffff950de6fec080 Image: firefox.exe
  638. Attached Process N/A Image: N/A
  639. fffff78000000000: Unable to get shared data
  640. Wait Start TickCount 725601
  641. Context Switch Count 3082802 IdealProcessor: 5
  642. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  643. UserTime 00:00:00.000
  644. KernelTime 00:00:00.000
  645. Win32 Start Address 0x00007ffbac3edd30
  646. Stack Init fffff98828c4fb90 Current fffff98828c4f440
  647. Base fffff98828c50000 Limit fffff98828c49000 Call 0000000000000000
  648. Priority 12 BasePriority 8 PriorityDecrement 2 IoPriority 2 PagePriority 5
  649. Child-SP RetAddr : Args to Child : Call Site
  650. fffff988`28c4f480 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
  651.  
  652.  
  653. ========================================================================
  654. ======================= Dump #2: ANALYZE VERBOSE =======================
  655. ======================= File: 042220-4984-01.dmp =======================
  656. ========================================================================
  657.  
  658. Mini Kernel Dump File: Only registers and stack trace are available
  659. Windows 10 Kernel Version 18362 MP (6 procs) Free x64
  660. Kernel base = 0xfffff806`61000000 PsLoadedModuleList = 0xfffff806`61448150
  661. Debug session time: Wed Apr 22 03:45:16.838 2020 (UTC - 4:00)
  662. System Uptime: 0 days 0:00:58.517
  663.  
  664. BugCheck 1E, {ffffffffc0000005, fffff80665e2e605, 1, 9f2fb71}
  665. Probably caused by : memory_corruption
  666. Followup: memory_corruption
  667.  
  668. KMODE_EXCEPTION_NOT_HANDLED (1e)
  669. This is a very common bugcheck. Usually the exception address pinpoints
  670. the driver/function that caused the problem. Always note this address
  671. as well as the link date of the driver/image that contains this address.
  672.  
  673. Arguments:
  674. Arg1: ffffffffc0000005, The exception code that was not handled
  675. Arg2: fffff80665e2e605, The address that the exception occurred at
  676. Arg3: 0000000000000001, Parameter 0 of the exception
  677. Arg4: 0000000009f2fb71, Parameter 1 of the exception
  678.  
  679. Debugging Details:
  680. DUMP_CLASS: 1
  681. DUMP_QUALIFIER: 400
  682. DUMP_TYPE: 2
  683. DUMP_FILE_ATTRIBUTES: 0x8
  684. Kernel Generated Triage Dump
  685. WRITE_ADDRESS: fffff806615733b8: Unable to get MiVisibleState
  686. 0000000009f2fb71
  687. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  688. FAULTING_IP:
  689. fileinfo!FIPfInterfaceClose+145
  690. fffff806`65e2e605 00488d add byte ptr [rax-73h],cl
  691. EXCEPTION_PARAMETER1: 0000000000000001
  692. EXCEPTION_PARAMETER2: 0000000009f2fb71
  693. BUGCHECK_STR: 0x1E_c0000005_W
  694. CUSTOMER_CRASH_COUNT: 1
  695. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  696.  
  697. PROCESS_NAME: svchost.exe
  698.  
  699. CURRENT_IRQL: 0
  700. EXCEPTION_RECORD: ffffed76bb5da000 -- (.exr 0xffffed76bb5da000)
  701. Cannot read Exception record @ ffffed76bb5da000
  702. TRAP_FRAME: ffff800000000000 -- (.trap 0xffff800000000000)
  703. Unable to read trap frame at ffff8000`00000000
  704. LAST_CONTROL_TRANSFER: from fffff8066125ad71 to fffff806611c2390
  705. STACK_TEXT:
  706. fffff280`3e9c6688 fffff806`6125ad71 : 00000000`0000001e ffffffff`c0000005 fffff806`65e2e605 00000000`00000001 : nt!KeBugCheckEx
  707. fffff280`3e9c6690 fffff806`611d431d : ffffed76`bb5da000 fffff280`3e9c6f20 ffff8000`00000000 00000000`09f2fb71 : nt!KiDispatchException+0x15c681
  708. fffff280`3e9c6d40 fffff806`611d0503 : 33333333`33333333 00000000`00002bed 00000000`0000e36a ffffd905`a2000280 : nt!KiExceptionDispatch+0x11d
  709. fffff280`3e9c6f20 fffff806`65e2e605 : fffff280`3e9c7110 ffffd905`a9a4e080 ffffd905`ac7f42c0 ffffd905`acadd608 : nt!KiPageFault+0x443
  710. fffff280`3e9c70b0 fffff806`61635e3d : fffff280`3e9c7301 fffff280`3e9c72b0 ffffd905`acadd608 fffff806`6136f019 : fileinfo!FIPfInterfaceClose+0x145
  711. fffff280`3e9c70f0 fffff806`615e1655 : 00000000`00000000 00000000`000031e2 fffff280`3e9c7301 ffffd905`acadc000 : nt!PfpOpenHandleClose+0x55
  712. fffff280`3e9c7140 fffff806`615e1b72 : 00000000`00000000 00000000`00000000 00000000`00000000 ffff860b`10945190 : nt!PfpReadSupportCleanup+0x49
  713. fffff280`3e9c7170 fffff806`6160a48a : ffffd905`00000000 fffff280`00000658 ffffd905`00000000 ffffd905`00000006 : nt!PfpPrefetchFilesTrickle+0x28e
  714. fffff280`3e9c7260 fffff806`6160a109 : ffffd905`acadc000 ffffd905`acadc000 fffff280`3e9c7480 00000000`00000000 : nt!PfpPrefetchRequestPerform+0x2b6
  715. fffff280`3e9c73d0 fffff806`615e99e2 : 00000000`00000001 00000000`00000001 ffffd905`acadc000 ffff860b`11747be0 : nt!PfpPrefetchRequest+0x129
  716. fffff280`3e9c7450 fffff806`615e7a54 : 00000000`00000000 00000000`00000000 ffff860b`0f50b730 fffff280`3e9c7601 : nt!PfSetSuperfetchInformation+0x16e
  717. fffff280`3e9c7550 fffff806`611d3c15 : ffff860b`10bd8080 0000002a`a1b05000 0000002a`a247f6e0 ffff860b`0f613d60 : nt!NtSetSystemInformation+0x294
  718. fffff280`3e9c7a00 00007ffd`1671f4e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  719. 0000002a`a247f528 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`1671f4e4
  720. STACK_COMMAND: kb
  721. CHKIMG_EXTENSION: !chkimg -lo 50 -d !fileinfo
  722. fffff80665e2e01e-fffff80665e2e01f 2 bytes - fileinfo!FIPostCreateCallback+37e
  723. [ 48 ff:4c 8b ]
  724. fffff80665e2e025-fffff80665e2e029 5 bytes - fileinfo!FIPostCreateCallback+385 (+0x07)
  725. [ 0f 1f 44 00 00:e8 86 7f 2d fb ]
  726. fffff80665e2e0f2-fffff80665e2e0f3 2 bytes - fileinfo!FIPostCreateCallback+452 (+0xcd)
  727. [ 48 ff:4c 8b ]
  728. fffff80665e2e0f9-fffff80665e2e0fd 5 bytes - fileinfo!FIPostCreateCallback+459 (+0x07)
  729. [ 0f 1f 44 00 00:e8 22 b3 6e ff ]
  730. fffff80665e2e23c-fffff80665e2e23d 2 bytes - fileinfo!FIPfFileFSOpPostCreate+11c (+0x143)
  731. [ 48 ff:4c 8b ]
  732. fffff80665e2e243-fffff80665e2e247 5 bytes - fileinfo!FIPfFileFSOpPostCreate+123 (+0x07)
  733. [ 0f 1f 44 00 00:e8 28 f5 6e ff ]
  734. fffff80665e2e29c-fffff80665e2e29d 2 bytes - fileinfo!FIPfFileFSOpPostCreate+17c (+0x59)
  735. [ 48 ff:4c 8b ]
  736. fffff80665e2e2a3-fffff80665e2e2a7 5 bytes - fileinfo!FIPfFileFSOpPostCreate+183 (+0x07)
  737. [ 0f 1f 44 00 00:e8 28 58 22 fb ]
  738. fffff80665e2e2bf-fffff80665e2e2c0 2 bytes - fileinfo!FIPfFileFSOpPostCreate+19f (+0x1c)
  739. [ 48 ff:4c 8b ]
  740. fffff80665e2e2c6-fffff80665e2e2ca 5 bytes - fileinfo!FIPfFileFSOpPostCreate+1a6 (+0x07)
  741. [ 0f 1f 44 00 00:e8 45 ee 71 ff ]
  742. fffff80665e2e2ef-fffff80665e2e2f0 2 bytes - fileinfo!FIPfFileFSOpPostCreate+1cf (+0x29)
  743. [ 48 ff:4c 8b ]
  744. fffff80665e2e2f6-fffff80665e2e2fa 5 bytes - fileinfo!FIPfFileFSOpPostCreate+1d6 (+0x07)
  745. [ 0f 1f 44 00 00:e8 f5 4e 72 ff ]
  746. fffff80665e2e36a-fffff80665e2e36b 2 bytes - fileinfo!FIPfFileFSOpPostCreate+24a (+0x74)
  747. [ 48 ff:4c 8b ]
  748. fffff80665e2e371-fffff80665e2e375 5 bytes - fileinfo!FIPfFileFSOpPostCreate+251 (+0x07)
  749. [ 0f 1f 44 00 00:e8 7a d5 30 fb ]
  750. fffff80665e2e419-fffff80665e2e41a 2 bytes - fileinfo!FIPfFileFSOpPostCreate+2f9 (+0xa8)
  751. [ 48 ff:4c 8b ]
  752. fffff80665e2e420-fffff80665e2e424 5 bytes - fileinfo!FIPfFileFSOpPostCreate+300 (+0x07)
  753. [ 0f 1f 44 00 00:e8 cb 79 71 ff ]
  754. fffff80665e2e42d-fffff80665e2e42e 2 bytes - fileinfo!FIPfFileFSOpPostCreate+30d (+0x0d)
  755. [ 48 ff:4c 8b ]
  756. fffff80665e2e434-fffff80665e2e438 5 bytes - fileinfo!FIPfFileFSOpPostCreate+314 (+0x07)
  757. [ 0f 1f 44 00 00:e8 e7 af 6e ff ]
  758. fffff80665e2e451-fffff80665e2e452 2 bytes - fileinfo!FIPfFileFSOpPostCreate+331 (+0x1d)
  759. [ 48 ff:4c 8b ]
  760. fffff80665e2e458-fffff80665e2e45c 5 bytes - fileinfo!FIPfFileFSOpPostCreate+338 (+0x07)
  761. [ 0f 1f 44 00 00:e8 f3 34 2e fb ]
  762. fffff80665e2e462-fffff80665e2e463 2 bytes - fileinfo!FIPfFileFSOpPostCreate+342 (+0x0a)
  763. [ 48 ff:4c 8b ]
  764. fffff80665e2e469-fffff80665e2e46d 5 bytes - fileinfo!FIPfFileFSOpPostCreate+349 (+0x07)
  765. [ 0f 1f 44 00 00:e8 b2 af 6e ff ]
  766. fffff80665e2e4f5-fffff80665e2e4f6 2 bytes - fileinfo!FIPfInterfaceClose+35 (+0x8c)
  767. [ 48 ff:4c 8b ]
  768. fffff80665e2e4fc-fffff80665e2e500 5 bytes - fileinfo!FIPfInterfaceClose+3c (+0x07)
  769. [ 0f 1f 44 00 00:e8 4f 34 2e fb ]
  770. fffff80665e2e505-fffff80665e2e506 2 bytes - fileinfo!FIPfInterfaceClose+45 (+0x09)
  771. [ 48 ff:4c 8b ]
  772. fffff80665e2e50c-fffff80665e2e510 5 bytes - fileinfo!FIPfInterfaceClose+4c (+0x07)
  773. [ 0f 1f 44 00 00:e8 cf 52 72 ff ]
  774. fffff80665e2e600 - fileinfo!FIPfInterfaceClose+140 (+0xf4)
  775. [ 0f:0d ]
  776. fffff80665e2e622-fffff80665e2e623 2 bytes - fileinfo!FIPfInterfaceClose+162 (+0x22)
  777. [ 48 ff:4c 8b ]
  778. fffff80665e2e629-fffff80665e2e62d 5 bytes - fileinfo!FIPfInterfaceClose+169 (+0x07)
  779. [ 0f 1f 44 00 00:e8 f2 ad 6e ff ]
  780. fffff80665e2e633-fffff80665e2e634 2 bytes - fileinfo!FIPfInterfaceClose+173 (+0x0a)
  781. [ 48 ff:4c 8b ]
  782. fffff80665e2e63a-fffff80665e2e63e 5 bytes - fileinfo!FIPfInterfaceClose+17a (+0x07)
  783. [ 0f 1f 44 00 00:e8 d1 09 54 fb ]
  784. fffff80665e2e64f-fffff80665e2e650 2 bytes - fileinfo!FIPfInterfaceClose+18f (+0x15)
  785. [ 48 ff:4c 8b ]
  786. fffff80665e2e656-fffff80665e2e65a 5 bytes - fileinfo!FIPfInterfaceClose+196 (+0x07)
  787. [ 0f 1f 44 00 00:e8 c5 ad 6e ff ]
  788. fffff80665e2e7d1-fffff80665e2e7d2 2 bytes - fileinfo!FIPfFileOpenAdd+f1 (+0x17b)
  789. [ 48 ff:4c 8b ]
  790. fffff80665e2e7d8-fffff80665e2e7dc 5 bytes - fileinfo!FIPfFileOpenAdd+f8 (+0x07)
  791. [ 0f 1f 44 00 00:e8 43 c1 6e ff ]
  792. fffff80665e2e882-fffff80665e2e883 2 bytes - fileinfo!FIPfFileOpenAdd+1a2 (+0xaa)
  793. [ 48 ff:4c 8b ]
  794. fffff80665e2e889-fffff80665e2e88d 5 bytes - fileinfo!FIPfFileOpenAdd+1a9 (+0x07)
  795. [ 0f 1f 44 00 00:e8 82 07 54 fb ]
  796. fffff80665e2e94a-fffff80665e2e94b 2 bytes - fileinfo!FIPfInterfaceOpen+aa (+0xc1)
  797. [ 48 ff:4c 8b ]
  798. fffff80665e2e951-fffff80665e2e955 5 bytes - fileinfo!FIPfInterfaceOpen+b1 (+0x07)
  799. [ 0f 1f 44 00 00:e8 ea 82 25 fb ]
  800. fffff80665e2e9cb-fffff80665e2e9cc 2 bytes - fileinfo!FIPfInterfaceOpen+12b (+0x7a)
  801. [ 48 ff:4c 8b ]
  802. fffff80665e2e9d2-fffff80665e2e9d6 5 bytes - fileinfo!FIPfInterfaceOpen+132 (+0x07)
  803. [ 0f 1f 44 00 00:e8 59 06 54 fb ]
  804. fffff80665e2eaad-fffff80665e2eaae 2 bytes - fileinfo!FIPfInterfaceOpen+20d (+0xdb)
  805. [ 48 ff:4c 8b ]
  806. fffff80665e2eab4-fffff80665e2eab8 5 bytes - fileinfo!FIPfInterfaceOpen+214 (+0x07)
  807. [ 0f 1f 44 00 00:e8 47 fb 89 fb ]
  808. fffff80665e2eabf-fffff80665e2eac0 2 bytes - fileinfo!FIPfInterfaceOpen+21f (+0x0b)
  809. [ 48 ff:4c 8b ]
  810. fffff80665e2eac6-fffff80665e2eaca 5 bytes - fileinfo!FIPfInterfaceOpen+226 (+0x07)
  811. [ 0f 1f 44 00 00:e8 35 fb 89 fb ]
  812. fffff80665e2ec7d-fffff80665e2ec7e 2 bytes - fileinfo!FIPfInterfaceOpen+3dd (+0x1b7)
  813. [ 48 ff:4c 8b ]
  814. fffff80665e2ec84-fffff80665e2ec88 5 bytes - fileinfo!FIPfInterfaceOpen+3e4 (+0x07)
  815. [ 0f 1f 44 00 00:e8 b7 b5 71 ff ]
  816. fffff80665e2ecbf-fffff80665e2ecc0 2 bytes - fileinfo!FIPfInterfaceOpen+41f (+0x3b)
  817. [ 48 ff:4c 8b ]
  818. fffff80665e2ecc6-fffff80665e2ecca 5 bytes - fileinfo!FIPfInterfaceOpen+426 (+0x07)
  819. [ 0f 1f 44 00 00:e8 75 bb 2d fb ]
  820. fffff80665e2ecd2-fffff80665e2ecd3 2 bytes - fileinfo!FIPfInterfaceOpen+432 (+0x0c)
  821. [ 48 ff:4c 8b ]
  822. WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
  823. 218 errors : !fileinfo (fffff80665e2e01e-fffff80665e2eecf)
  824. MODULE_NAME: memory_corruption
  825.  
  826. IMAGE_NAME: memory_corruption
  827.  
  828. FOLLOWUP_NAME: memory_corruption
  829. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  830. MEMORY_CORRUPTOR: LARGE
  831. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  832. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  833. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  834. TARGET_TIME: 2020-04-22T07:45:16.000Z
  835. SUITE_MASK: 272
  836. PRODUCT_TYPE: 1
  837. USER_LCID: 0
  838. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  839. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  840. Followup: memory_corruption
  841.  
  842. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  843.  
  844. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  845. Nov 09 2017 - vbdenum.sys - Citrix ICA Host (Citrix Systems, Inc.)
  846. Jul 12 2018 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  847. Aug 08 2018 - ctxusbm.sys - Citrix USB Filter Driver https://www.citrix.com
  848. Aug 28 2018 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  849. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  850. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  851. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  852. Mar 17 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  853.  
  854. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  855.  
  856. Image name: RTKVHD64.sys
  857. Search : https://www.google.com/search?q=RTKVHD64.sys
  858. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  859. Timestamp : Fri Jun 3 2016
  860.  
  861. Image name: vbdenum.sys
  862. Search : https://www.google.com/search?q=vbdenum.sys
  863. ADA Info : Citrix ICA Host (Citrix Systems, Inc.)
  864. Timestamp : Thu Nov 9 2017
  865.  
  866. Image name: TeeDriverW8x64.sys
  867. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  868. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  869. Timestamp : Thu Jul 12 2018
  870.  
  871. Image name: ctxusbm.sys
  872. Search : https://www.google.com/search?q=ctxusbm.sys
  873. ADA Info : Citrix USB Filter Driver https://www.citrix.com
  874. Timestamp : Wed Aug 8 2018
  875.  
  876. Image name: rt640x64.sys
  877. Search : https://www.google.com/search?q=rt640x64.sys
  878. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  879. Timestamp : Tue Aug 28 2018
  880.  
  881. Image name: nvvad64v.sys
  882. Search : https://www.google.com/search?q=nvvad64v.sys
  883. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  884. Timestamp : Thu Mar 14 2019
  885.  
  886. Image name: nvvhci.sys
  887. Search : https://www.google.com/search?q=nvvhci.sys
  888. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  889. Timestamp : Fri Jan 10 2020
  890.  
  891. Image name: nvhda64v.sys
  892. Search : https://www.google.com/search?q=nvhda64v.sys
  893. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  894. Timestamp : Wed Feb 19 2020
  895.  
  896. Image name: nvlddmkm.sys
  897. Search : https://www.google.com/search?q=nvlddmkm.sys
  898. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  899. Timestamp : Tue Mar 17 2020
  900.  
  901. ====================== Dump #2: MICROSOFT DRIVERS ======================
  902.  
  903. ACPI.sys ACPI Driver for NT (Microsoft)
  904. acpiex.sys ACPIEx Driver (Microsoft)
  905. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  906. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  907. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  908. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  909. ahcache.sys Application Compatibility Cache (Microsoft)
  910. bam.sys BAM Kernal driver (Microsoft)
  911. BasicDisplay.sys Basic Display driver (Microsoft)
  912. BasicRender.sys Basic Render driver (Microsoft)
  913. Beep.SYS BEEP driver (Microsoft)
  914. bindflt.sys Windows Bind Filter driver (Microsoft)
  915. BOOTVID.dll VGA Boot Driver (Microsoft)
  916. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  917. cdd.dll Canonical Display Driver (Microsoft)
  918. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  919. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  920. CI.dll Code Integrity Module (Microsoft)
  921. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  922. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  923. CLFS.SYS Common Log File System Driver (Microsoft)
  924. clipsp.sys CLIP Service (Microsoft)
  925. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  926. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  927. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  928. condrv.sys Console Driver (Microsoft)
  929. crashdmp.sys Crash Dump driver (Microsoft)
  930. csc.sys Windows Client Side Caching driver (Microsoft)
  931. dfsc.sys DFS Namespace Client Driver (Microsoft)
  932. disk.sys PnP Disk Driver (Microsoft)
  933. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  934. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  935. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  936. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  937. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  938. dxgmms2.sys DirectX Graphics MMS
  939. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  940. fastfat.SYS Fast FAT File System Driver (Microsoft)
  941. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  942. fileinfo.sys FileInfo Filter Driver (Microsoft)
  943. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  944. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  945. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  946. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  947. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  948. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  949. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  950. HIDCLASS.SYS Hid Class Library (Microsoft)
  951. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  952. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  953. HTTP.sys HTTP Protocol Stack (Microsoft)
  954. IndirectKmd.sys Indirect displays kernel-mode filter driver
  955. intelpep.sys Intel Power Engine Plugin (Microsoft)
  956. intelppm.sys Processor Device Driver (Microsoft)
  957. iorate.sys I/O rate control Filter (Microsoft)
  958. kbdclass.sys Keyboard Class Driver (Microsoft)
  959. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  960. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  961. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  962. ks.sys Kernal CSA Library (Microsoft)
  963. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  964. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  965. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  966. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  967. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  968. mcupdate.dll Media Center Update (Microsoft)
  969. mmcss.sys MMCSS Driver (Microsoft)
  970. monitor.sys Monitor Driver (Microsoft)
  971. mouclass.sys Mouse Class Driver (Microsoft)
  972. mouhid.sys HID Mouse Filter Driver (Microsoft)
  973. mountmgr.sys Mount Point Manager (Microsoft)
  974. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  975. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  976. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  977. Msfs.SYS Mailslot driver (Microsoft)
  978. msisadrv.sys ISA Driver (Microsoft)
  979. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  980. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  981. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  982. mssmbios.sys System Management BIOS driver (Microsoft)
  983. mup.sys Multiple UNC Provider driver (Microsoft)
  984. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  985. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  986. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  987. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  988. NDProxy.sys NDIS Proxy driver (Microsoft)
  989. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  990. netbios.sys NetBIOS Interface driver (Microsoft)
  991. netbt.sys MBT Transport driver (Microsoft)
  992. NETIO.SYS Network I/O Subsystem (Microsoft)
  993. Npfs.SYS NPFS driver (Microsoft)
  994. npsvctrig.sys Named pipe service triggers (Microsoft)
  995. nsiproxy.sys NSI Proxy driver (Microsoft)
  996. Ntfs.sys NT File System Driver (Microsoft)
  997. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  998. ntosext.sys NTOS Extension Host driver (Microsoft)
  999. Null.SYS NULL Driver (Microsoft)
  1000. pacer.sys QoS Packet Scheduler (Microsoft)
  1001. partmgr.sys Partition driver (Microsoft)
  1002. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1003. pcw.sys Performance Counter Driver (Microsoft)
  1004. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1005. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1006. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1007. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1008. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1009. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1010. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1011. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1012. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1013. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1014. rdyboost.sys ReadyBoost Driver (Microsoft)
  1015. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1016. serenum.sys Serial Port Enumerator (Microsoft)
  1017. serial.sys Serial Device Driver
  1018. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1019. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1020. spaceport.sys Storage Spaces driver (Microsoft)
  1021. srv2.sys Smb 2.0 Server driver (Microsoft)
  1022. srvnet.sys Server Network driver (Microsoft)
  1023. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1024. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1025. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1026. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1027. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1028. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1029. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1030. TDI.SYS TDI Wrapper driver (Microsoft)
  1031. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1032. tm.sys Kernel Transaction Manager driver (Microsoft)
  1033. ucx01000.sys USB Controller Extension (Microsoft)
  1034. UEFI.sys UEFI NT driver (Microsoft)
  1035. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1036. usbaudio.sys USB Audio Class Driver (Microsoft)
  1037. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1038. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1039. UsbHub3.sys USB3 HUB driver (Microsoft)
  1040. USBXHCI.SYS USB XHCI driver (Microsoft)
  1041. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1042. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1043. volmgr.sys Volume Manager Driver (Microsoft)
  1044. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1045. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1046. volume.sys Volume driver (Microsoft)
  1047. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1048. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1049. watchdog.sys Watchdog driver (Microsoft)
  1050. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1051. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1052. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1053. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1054. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1055. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1056. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1057. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1058. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1059. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1060. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1061. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1062. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1063. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1064. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1065. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1066. Wof.sys Windows Overlay Filter (Microsoft)
  1067. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1068. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1069.  
  1070. ====================== Dump #2: UNLOADED MODULES =======================
  1071.  
  1072. fffff806`6cc80000 fffff806`6cc8f000 dump_storpor
  1073. fffff806`6ccc0000 fffff806`6ccef000 dump_storahc
  1074. fffff806`6cd10000 fffff806`6cd2e000 dump_dumpfve
  1075. fffff806`701e0000 fffff806`70231000 WUDFRd.sys
  1076. fffff806`6d570000 fffff806`6d58e000 dam.sys
  1077. fffff806`659b0000 fffff806`659c1000 WdBoot.sys
  1078. fffff806`669b0000 fffff806`669c1000 hwpolicy.sys
  1079.  
  1080. ====================== Dump #2: BIOS INFORMATION =======================
  1081.  
  1082. sysinfo: could not find necessary interfaces.
  1083. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  1084.  
  1085. ========================== Dump #2: Extra #1 ===========================
  1086.  
  1087. 3: kd> !verifier
  1088. fffff80661448580: Unable to get verifier list.
  1089.  
  1090. ========================== Dump #2: Extra #2 ===========================
  1091.  
  1092. 3: kd> !thread
  1093. THREAD ffff860b10bd8080 Cid 06c8.12a4 Teb: 0000002aa1b1c000 Win32Thread: 0000000000000000 RUNNING on processor 3
  1094. Impersonation token: ffffd905abc43670 (Level Impersonation)
  1095. GetUlongFromAddress: unable to read from fffff8066142ca14
  1096. Owning Process ffff860b0f6ab0c0 Image: svchost.exe
  1097. Attached Process N/A Image: N/A
  1098. fffff78000000000: Unable to get shared data
  1099. Wait Start TickCount 3745
  1100. Context Switch Count 812 IdealProcessor: 0
  1101. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1102. UserTime 00:00:00.000
  1103. KernelTime 00:00:00.000
  1104. Win32 Start Address 0x00007ffd0e49ebd0
  1105. Stack Init fffff2803e9c7b90 Current fffff2803e9c6b30
  1106. Base fffff2803e9c8000 Limit fffff2803e9c1000 Call 0000000000000000
  1107. Priority 7 BasePriority 6 PriorityDecrement 0 IoPriority 0 PagePriority 1
  1108. Child-SP RetAddr : Args to Child : Call Site
  1109. fffff280`3e9c6688 fffff806`6125ad71 : 00000000`0000001e ffffffff`c0000005 fffff806`65e2e605 00000000`00000001 : nt!KeBugCheckEx
  1110. fffff280`3e9c6690 fffff806`611d431d : ffffed76`bb5da000 fffff280`3e9c6f20 ffff8000`00000000 00000000`09f2fb71 : nt!KiDispatchException+0x15c681
  1111. fffff280`3e9c6d40 fffff806`611d0503 : 33333333`33333333 00000000`00002bed 00000000`0000e36a ffffd905`a2000280 : nt!KiExceptionDispatch+0x11d
  1112. fffff280`3e9c6f20 fffff806`65e2e605 : fffff280`3e9c7110 ffffd905`a9a4e080 ffffd905`ac7f42c0 ffffd905`acadd608 : nt!KiPageFault+0x443 (TrapFrame @ fffff280`3e9c6f20)
  1113. fffff280`3e9c70b0 fffff806`61635e3d : fffff280`3e9c7301 fffff280`3e9c72b0 ffffd905`acadd608 fffff806`6136f019 : fileinfo!FIPfInterfaceClose+0x145
  1114. fffff280`3e9c70f0 fffff806`615e1655 : 00000000`00000000 00000000`000031e2 fffff280`3e9c7301 ffffd905`acadc000 : nt!PfpOpenHandleClose+0x55
  1115. fffff280`3e9c7140 fffff806`615e1b72 : 00000000`00000000 00000000`00000000 00000000`00000000 ffff860b`10945190 : nt!PfpReadSupportCleanup+0x49
  1116. fffff280`3e9c7170 fffff806`6160a48a : ffffd905`00000000 fffff280`00000658 ffffd905`00000000 ffffd905`00000006 : nt!PfpPrefetchFilesTrickle+0x28e
  1117. fffff280`3e9c7260 fffff806`6160a109 : ffffd905`acadc000 ffffd905`acadc000 fffff280`3e9c7480 00000000`00000000 : nt!PfpPrefetchRequestPerform+0x2b6
  1118. fffff280`3e9c73d0 fffff806`615e99e2 : 00000000`00000001 00000000`00000001 ffffd905`acadc000 ffff860b`11747be0 : nt!PfpPrefetchRequest+0x129
  1119. fffff280`3e9c7450 fffff806`615e7a54 : 00000000`00000000 00000000`00000000 ffff860b`0f50b730 fffff280`3e9c7601 : nt!PfSetSuperfetchInformation+0x16e
  1120. fffff280`3e9c7550 fffff806`611d3c15 : ffff860b`10bd8080 0000002a`a1b05000 0000002a`a247f6e0 ffff860b`0f613d60 : nt!NtSetSystemInformation+0x294
  1121. fffff280`3e9c7a00 00007ffd`1671f4e4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ fffff280`3e9c7a00)
  1122. 0000002a`a247f528 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`1671f4e4
  1123.  
  1124.  
  1125. ========================================================================
  1126. ======================= Dump #3: ANALYZE VERBOSE =======================
  1127. ======================= File: 041920-4531-01.dmp =======================
  1128. ========================================================================
  1129.  
  1130. Mini Kernel Dump File: Only registers and stack trace are available
  1131. Windows 10 Kernel Version 18362 MP (6 procs) Free x64
  1132. Kernel base = 0xfffff805`45200000 PsLoadedModuleList = 0xfffff805`45648150
  1133. Debug session time: Sun Apr 19 15:50:49.924 2020 (UTC - 4:00)
  1134. System Uptime: 0 days 0:00:11.603
  1135.  
  1136. BugCheck EF, {ffffc78db1bfa4c0, 0, 0, 0}
  1137. Probably caused by : ntkrnlmp.exe ( nt!PspCatchCriticalBreak+115 )
  1138. Followup: MachineOwner
  1139.  
  1140. CRITICAL_PROCESS_DIED (ef)
  1141. A critical system process died
  1142.  
  1143. Arguments:
  1144. Arg1: ffffc78db1bfa4c0, Process object or thread object
  1145. Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
  1146. Arg3: 0000000000000000
  1147. Arg4: 0000000000000000
  1148.  
  1149. Debugging Details:
  1150. DUMP_CLASS: 1
  1151. DUMP_QUALIFIER: 400
  1152. DUMP_TYPE: 2
  1153. DUMP_FILE_ATTRIBUTES: 0x8
  1154. Kernel Generated Triage Dump
  1155.  
  1156. PROCESS_NAME: svchost.exe
  1157.  
  1158. CRITICAL_PROCESS: svchost.exe
  1159. EXCEPTION_CODE: (HRESULT) 0xab75e080 (2876629120) - <Unable to get error code text>
  1160. ERROR_CODE: (NTSTATUS) 0xab75e080 - <Unable to get error code text>
  1161. CUSTOMER_CRASH_COUNT: 1
  1162. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  1163. BUGCHECK_STR: 0xEF
  1164. CURRENT_IRQL: 0
  1165. LAST_CONTROL_TRANSFER: from fffff80545acb8a9 to fffff805453c2390
  1166. STACK_TEXT:
  1167. ffff8405`187a7838 fffff805`45acb8a9 : 00000000`000000ef ffffc78d`b1bfa4c0 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
  1168. ffff8405`187a7840 fffff805`459ecbdf : ffffc78d`b1bfa4c0 fffff805`45288065 ffffc78d`b1bfa4c0 fffff805`452880e0 : nt!PspCatchCriticalBreak+0x115
  1169. ffff8405`187a78e0 fffff805`458700c0 : ffffc78d`00000000 00000000`00000000 ffffc78d`b1bfa4c0 ffffc78d`b1bfa4c0 : nt!PspTerminateAllThreads+0x17b193
  1170. ffff8405`187a7950 fffff805`4586fce9 : ffffffff`ffffffff ffff8405`187a7a80 ffffc78d`b1bfa4c0 fffff805`45879401 : nt!PspTerminateProcess+0xe0
  1171. ffff8405`187a7990 fffff805`453d3c15 : ffffc78d`0000021c ffffc78d`ab75e080 ffffc78d`b1bfa4c0 00000072`d297f7dc : nt!NtTerminateProcess+0xa9
  1172. ffff8405`187a7a00 00007ffe`e0f1c5f4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  1173. 00000072`d297c4e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`e0f1c5f4
  1174. STACK_COMMAND: kb
  1175. THREAD_SHA1_HASH_MOD_FUNC: 042a2b51772309c39e12d732cc93cacf0af3064e
  1176. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 34572be19e12d6120744c21456db4e874020aa32
  1177. THREAD_SHA1_HASH_MOD: ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693
  1178. FOLLOWUP_IP:
  1179. nt!PspCatchCriticalBreak+115
  1180. fffff805`45acb8a9 cc int 3
  1181. FAULT_INSTR_CODE: ed8440cc
  1182. SYMBOL_STACK_INDEX: 1
  1183. SYMBOL_NAME: nt!PspCatchCriticalBreak+115
  1184. FOLLOWUP_NAME: MachineOwner
  1185. MODULE_NAME: nt
  1186.  
  1187. IMAGE_NAME: ntkrnlmp.exe
  1188.  
  1189. DEBUG_FLR_IMAGE_TIMESTAMP: 5629d63a
  1190. IMAGE_VERSION: 10.0.18362.778
  1191. BUCKET_ID_FUNC_OFFSET: 115
  1192. FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_ab75e080_nt!PspCatchCriticalBreak
  1193. BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_ab75e080_nt!PspCatchCriticalBreak
  1194. PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_ab75e080_nt!PspCatchCriticalBreak
  1195. TARGET_TIME: 2020-04-19T19:50:49.000Z
  1196. SUITE_MASK: 272
  1197. PRODUCT_TYPE: 1
  1198. USER_LCID: 0
  1199. FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_ab75e080_nt!pspcatchcriticalbreak
  1200. FAILURE_ID_HASH: {cd9b01d0-cd93-b821-3d16-f5bdb93b4cd3}
  1201. Followup: MachineOwner
  1202.  
  1203. ====================== Dump #3: 3RD PARTY DRIVERS ======================
  1204.  
  1205. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  1206. Nov 09 2017 - vbdenum.sys - Citrix ICA Host (Citrix Systems, Inc.)
  1207. Jul 12 2018 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1208. Aug 08 2018 - ctxusbm.sys - Citrix USB Filter Driver https://www.citrix.com
  1209. Aug 28 2018 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1210. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1211. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1212. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1213. Mar 17 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1214.  
  1215. ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
  1216.  
  1217. Image name: RTKVHD64.sys
  1218. Search : https://www.google.com/search?q=RTKVHD64.sys
  1219. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  1220. Timestamp : Fri Jun 3 2016
  1221.  
  1222. Image name: vbdenum.sys
  1223. Search : https://www.google.com/search?q=vbdenum.sys
  1224. ADA Info : Citrix ICA Host (Citrix Systems, Inc.)
  1225. Timestamp : Thu Nov 9 2017
  1226.  
  1227. Image name: TeeDriverW8x64.sys
  1228. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  1229. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1230. Timestamp : Thu Jul 12 2018
  1231.  
  1232. Image name: ctxusbm.sys
  1233. Search : https://www.google.com/search?q=ctxusbm.sys
  1234. ADA Info : Citrix USB Filter Driver https://www.citrix.com
  1235. Timestamp : Wed Aug 8 2018
  1236.  
  1237. Image name: rt640x64.sys
  1238. Search : https://www.google.com/search?q=rt640x64.sys
  1239. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1240. Timestamp : Tue Aug 28 2018
  1241.  
  1242. Image name: nvvad64v.sys
  1243. Search : https://www.google.com/search?q=nvvad64v.sys
  1244. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1245. Timestamp : Thu Mar 14 2019
  1246.  
  1247. Image name: nvvhci.sys
  1248. Search : https://www.google.com/search?q=nvvhci.sys
  1249. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1250. Timestamp : Fri Jan 10 2020
  1251.  
  1252. Image name: nvhda64v.sys
  1253. Search : https://www.google.com/search?q=nvhda64v.sys
  1254. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1255. Timestamp : Wed Feb 19 2020
  1256.  
  1257. Image name: nvlddmkm.sys
  1258. Search : https://www.google.com/search?q=nvlddmkm.sys
  1259. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1260. Timestamp : Tue Mar 17 2020
  1261.  
  1262. ====================== Dump #3: MICROSOFT DRIVERS ======================
  1263.  
  1264. ACPI.sys ACPI Driver for NT (Microsoft)
  1265. acpiex.sys ACPIEx Driver (Microsoft)
  1266. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  1267. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1268. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1269. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1270. ahcache.sys Application Compatibility Cache (Microsoft)
  1271. bam.sys BAM Kernal driver (Microsoft)
  1272. BasicDisplay.sys Basic Display driver (Microsoft)
  1273. BasicRender.sys Basic Render driver (Microsoft)
  1274. Beep.SYS BEEP driver (Microsoft)
  1275. BOOTVID.dll VGA Boot Driver (Microsoft)
  1276. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1277. cdd.dll Canonical Display Driver (Microsoft)
  1278. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1279. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1280. CI.dll Code Integrity Module (Microsoft)
  1281. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1282. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1283. CLFS.SYS Common Log File System Driver (Microsoft)
  1284. clipsp.sys CLIP Service (Microsoft)
  1285. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1286. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1287. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1288. crashdmp.sys Crash Dump driver (Microsoft)
  1289. csc.sys Windows Client Side Caching driver (Microsoft)
  1290. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1291. disk.sys PnP Disk Driver (Microsoft)
  1292. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1293. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1294. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1295. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  1296. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1297. dxgmms2.sys DirectX Graphics MMS
  1298. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1299. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1300. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1301. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1302. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1303. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1304. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1305. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1306. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1307. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1308. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1309. HIDCLASS.SYS Hid Class Library (Microsoft)
  1310. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1311. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1312. HTTP.sys HTTP Protocol Stack (Microsoft)
  1313. IndirectKmd.sys Indirect displays kernel-mode filter driver
  1314. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1315. intelppm.sys Processor Device Driver (Microsoft)
  1316. iorate.sys I/O rate control Filter (Microsoft)
  1317. kbdclass.sys Keyboard Class Driver (Microsoft)
  1318. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1319. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  1320. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1321. ks.sys Kernal CSA Library (Microsoft)
  1322. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1323. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1324. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1325. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1326. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1327. mcupdate.dll Media Center Update (Microsoft)
  1328. mmcss.sys MMCSS Driver (Microsoft)
  1329. monitor.sys Monitor Driver (Microsoft)
  1330. mouclass.sys Mouse Class Driver (Microsoft)
  1331. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1332. mountmgr.sys Mount Point Manager (Microsoft)
  1333. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1334. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1335. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1336. Msfs.SYS Mailslot driver (Microsoft)
  1337. msisadrv.sys ISA Driver (Microsoft)
  1338. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1339. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1340. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1341. mssmbios.sys System Management BIOS driver (Microsoft)
  1342. mup.sys Multiple UNC Provider driver (Microsoft)
  1343. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1344. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1345. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1346. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1347. NDProxy.sys NDIS Proxy driver (Microsoft)
  1348. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1349. netbios.sys NetBIOS Interface driver (Microsoft)
  1350. netbt.sys MBT Transport driver (Microsoft)
  1351. NETIO.SYS Network I/O Subsystem (Microsoft)
  1352. Npfs.SYS NPFS driver (Microsoft)
  1353. npsvctrig.sys Named pipe service triggers (Microsoft)
  1354. nsiproxy.sys NSI Proxy driver (Microsoft)
  1355. Ntfs.sys NT File System Driver (Microsoft)
  1356. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1357. ntosext.sys NTOS Extension Host driver (Microsoft)
  1358. Null.SYS NULL Driver (Microsoft)
  1359. pacer.sys QoS Packet Scheduler (Microsoft)
  1360. partmgr.sys Partition driver (Microsoft)
  1361. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1362. pcw.sys Performance Counter Driver (Microsoft)
  1363. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1364. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1365. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1366. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1367. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1368. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1369. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1370. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1371. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1372. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1373. rdyboost.sys ReadyBoost Driver (Microsoft)
  1374. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1375. serenum.sys Serial Port Enumerator (Microsoft)
  1376. serial.sys Serial Device Driver
  1377. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1378. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1379. spaceport.sys Storage Spaces driver (Microsoft)
  1380. srv2.sys Smb 2.0 Server driver (Microsoft)
  1381. srvnet.sys Server Network driver (Microsoft)
  1382. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1383. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1384. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1385. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1386. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1387. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1388. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1389. TDI.SYS TDI Wrapper driver (Microsoft)
  1390. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1391. tm.sys Kernel Transaction Manager driver (Microsoft)
  1392. ucx01000.sys USB Controller Extension (Microsoft)
  1393. UEFI.sys UEFI NT driver (Microsoft)
  1394. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1395. usbaudio.sys USB Audio Class Driver (Microsoft)
  1396. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1397. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1398. UsbHub3.sys USB3 HUB driver (Microsoft)
  1399. USBXHCI.SYS USB XHCI driver (Microsoft)
  1400. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1401. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1402. volmgr.sys Volume Manager Driver (Microsoft)
  1403. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1404. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1405. volume.sys Volume driver (Microsoft)
  1406. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1407. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1408. watchdog.sys Watchdog driver (Microsoft)
  1409. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1410. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1411. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1412. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1413. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1414. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1415. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1416. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1417. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1418. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1419. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1420. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1421. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1422. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1423. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1424. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1425. Wof.sys Windows Overlay Filter (Microsoft)
  1426. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1427. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1428.  
  1429. ====================== Dump #3: UNLOADED MODULES =======================
  1430.  
  1431. fffff805`4f570000 fffff805`4f5c1000 WUDFRd.sys
  1432. fffff805`4f1e0000 fffff805`4f1fe000 dam.sys
  1433. fffff805`479b0000 fffff805`479c1000 WdBoot.sys
  1434. fffff805`489b0000 fffff805`489c1000 hwpolicy.sys
  1435.  
  1436. ====================== Dump #3: BIOS INFORMATION =======================
  1437.  
  1438. [SMBIOS Data Tables v3.0]
  1439. [DMI Version - 0]
  1440. [2.0 Calling Convention - No]
  1441. [Table Size - 4215 bytes]
  1442. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  1443. Vendor American Megatrends Inc.
  1444. BIOS Version 2401
  1445. BIOS Starting Address Segment f000
  1446. BIOS Release Date 07/15/2019
  1447. BIOS ROM Size 1000000
  1448. BIOS Characteristics
  1449. 07: - PCI Supported
  1450. 10: - APM Supported
  1451. 11: - Upgradeable FLASH BIOS
  1452. 12: - BIOS Shadowing Supported
  1453. 15: - CD-Boot Supported
  1454. 16: - Selectable Boot Supported
  1455. 17: - BIOS ROM Socketed
  1456. 19: - EDD Supported
  1457. 23: - 1.2MB Floppy Supported
  1458. 24: - 720KB Floppy Supported
  1459. 25: - 2.88MB Floppy Supported
  1460. 26: - Print Screen Device Supported
  1461. 27: - Keyboard Services Supported
  1462. 28: - Serial Services Supported
  1463. 29: - Printer Services Supported
  1464. 32: - BIOS Vendor Reserved
  1465. BIOS Characteristic Extensions
  1466. 00: - ACPI Supported
  1467. 01: - USB Legacy Supported
  1468. 08: - BIOS Boot Specification Supported
  1469. 10: - Specification Reserved
  1470. 11: - Specification Reserved
  1471. BIOS Major Revision 5
  1472. BIOS Minor Revision 12
  1473. EC Firmware Major Revision 255
  1474. EC Firmware Minor Revision 255
  1475. [System Information (Type 1) - Length 27 - Handle 0001h]
  1476. Manufacturer System manufacturer
  1477. Product Name System Product Name
  1478. Version System Version
  1479. UUID 00000000-0000-0000-0000-000000000000
  1480. Wakeup Type Power Switch
  1481. SKUNumber SKU
  1482. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1483. Manufacturer ASUSTeK COMPUTER INC.
  1484. Product PRIME Z370-P
  1485. Version Rev X.0x
  1486. Feature Flags 09h
  1487. -362039584: - -362039536: - ÷7£ý
  1488. Location Default string
  1489. Chassis Handle 0003h
  1490. Board Type 0ah - Processor/Memory Module
  1491. Number of Child Handles 0
  1492. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1493. Manufacturer Default string
  1494. Chassis Type Desktop
  1495. Version Default string
  1496. Bootup State Safe
  1497. Power Supply State Safe
  1498. Thermal State Safe
  1499. Security Status None
  1500. OEM Defined 0
  1501. Height 0U
  1502. Number of Power Cords 1
  1503. Number of Contained Elements 0
  1504. Contained Element Size 3
  1505. [Onboard Devices Information (Type 10) - Length 6 - Handle 0021h]
  1506. Number of Devices 1
  1507. 01: Type Video [enabled]
  1508. [OEM Strings (Type 11) - Length 5 - Handle 0022h]
  1509. Number of Strings 8
  1510. 1 Default string
  1511. 2 Default string
  1512. 3 COD
  1513. 4 Default string
  1514. 5 FFFFFFFFFFFFF
  1515. 6 FFFFFFFFFFFFF
  1516. 7 FFFFFFFFFFFFF
  1517. 8 Default string
  1518. [System Configuration Options (Type 12) - Length 5 - Handle 0023h]
  1519. [Physical Memory Array (Type 16) - Length 23 - Handle 003eh]
  1520. Location 03h - SystemBoard/Motherboard
  1521. Use 03h - System Memory
  1522. Memory Error Correction 03h - None
  1523. Maximum Capacity 67108864KB
  1524. Number of Memory Devices 4
  1525. [Memory Device (Type 17) - Length 40 - Handle 003fh]
  1526. Physical Memory Array Handle 003eh
  1527. Total Width 0 bits
  1528. Data Width 0 bits
  1529. Form Factor 02h - Unknown
  1530. Device Locator ChannelA-DIMM1
  1531. Bank Locator BANK 0
  1532. Memory Type 02h - Unknown
  1533. Type Detail 0000h -
  1534. Speed 0MHz
  1535. [Memory Device (Type 17) - Length 40 - Handle 0040h]
  1536. Physical Memory Array Handle 003eh
  1537. Total Width 64 bits
  1538. Data Width 64 bits
  1539. Size 8192MB
  1540. Form Factor 09h - DIMM
  1541. Device Locator ChannelA-DIMM2
  1542. Bank Locator BANK 1
  1543. Memory Type 1ah - Specification Reserved
  1544. Type Detail 4080h - Synchronous
  1545. Speed 2400MHz
  1546. Manufacturer Corsair
  1547. Part Number CMK16GX4M2A2400C16
  1548. [Memory Device (Type 17) - Length 40 - Handle 0041h]
  1549. Physical Memory Array Handle 003eh
  1550. Total Width 0 bits
  1551. Data Width 0 bits
  1552. Form Factor 02h - Unknown
  1553. Device Locator ChannelB-DIMM1
  1554. Bank Locator BANK 2
  1555. Memory Type 02h - Unknown
  1556. Type Detail 0000h -
  1557. Speed 0MHz
  1558. [Memory Device (Type 17) - Length 40 - Handle 0042h]
  1559. Physical Memory Array Handle 003eh
  1560. Total Width 64 bits
  1561. Data Width 64 bits
  1562. Size 8192MB
  1563. Form Factor 09h - DIMM
  1564. Device Locator ChannelB-DIMM2
  1565. Bank Locator BANK 3
  1566. Memory Type 1ah - Specification Reserved
  1567. Type Detail 4080h - Synchronous
  1568. Speed 2400MHz
  1569. Manufacturer Corsair
  1570. Part Number CMK16GX4M2A2400C16
  1571. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0043h]
  1572. Starting Address 00000000h
  1573. Ending Address 00ffffffh
  1574. Memory Array Handle 003eh
  1575. Partition Width 02
  1576. [Cache Information (Type 7) - Length 19 - Handle 0044h]
  1577. Socket Designation L1 Cache
  1578. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1579. Maximum Cache Size 0180h - 384K
  1580. Installed Size 0180h - 384K
  1581. Supported SRAM Type 0020h - Synchronous
  1582. Current SRAM Type 0020h - Synchronous
  1583. Cache Speed 0ns
  1584. Error Correction Type ParitySingle-Bit ECC
  1585. System Cache Type Unified
  1586. Associativity 8-way Set-Associative
  1587. [Cache Information (Type 7) - Length 19 - Handle 0045h]
  1588. Socket Designation L2 Cache
  1589. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1590. Maximum Cache Size 0600h - 1536K
  1591. Installed Size 0600h - 1536K
  1592. Supported SRAM Type 0020h - Synchronous
  1593. Current SRAM Type 0020h - Synchronous
  1594. Cache Speed 0ns
  1595. Error Correction Type Multi-Bit ECC
  1596. System Cache Type Unified
  1597. Associativity 4-way Set-Associative
  1598. [Cache Information (Type 7) - Length 19 - Handle 0046h]
  1599. Socket Designation L3 Cache
  1600. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1601. Maximum Cache Size 2400h - 9216K
  1602. Installed Size 2400h - 9216K
  1603. Supported SRAM Type 0020h - Synchronous
  1604. Current SRAM Type 0020h - Synchronous
  1605. Cache Speed 0ns
  1606. Error Correction Type Specification Reserved
  1607. System Cache Type Unified
  1608. Associativity Specification Reserved
  1609. [Processor Information (Type 4) - Length 48 - Handle 0047h]
  1610. Socket Designation LGA1151
  1611. Processor Type Central Processor
  1612. Processor Family cdh - Specification Reserved
  1613. Processor Manufacturer Intel(R) Corporation
  1614. Processor ID ea060900fffbebbf
  1615. Processor Version Intel(R) Core(TM) i5-8600K CPU @ 3.60GHz
  1616. Processor Voltage 8ah - 1.0V
  1617. External Clock 100MHz
  1618. Max Speed 8300MHz
  1619. Current Speed 3600MHz
  1620. Status Enabled Populated
  1621. Processor Upgrade Specification Reserved
  1622. L1 Cache Handle 0044h
  1623. L2 Cache Handle 0045h
  1624. L3 Cache Handle 0046h
  1625. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0048h]
  1626. Starting Address 00000000h
  1627. Ending Address 007fffffh
  1628. Memory Device Handle 0040h
  1629. Mem Array Mapped Adr Handle 0043h
  1630. Interleave Position 01
  1631. Interleave Data Depth 02
  1632. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0049h]
  1633. Starting Address 00800000h
  1634. Ending Address 00ffffffh
  1635. Memory Device Handle 0042h
  1636. Mem Array Mapped Adr Handle 0043h
  1637. Interleave Position 02
  1638. Interleave Data Depth 02
  1639.  
  1640. ========================== Dump #3: Extra #1 ===========================
  1641.  
  1642. 2: kd> !verifier
  1643. fffff80545648580: Unable to get verifier list.
  1644.  
  1645. ========================== Dump #3: Extra #2 ===========================
  1646.  
  1647. 2: kd> !thread
  1648. THREAD ffffc78dab75e080 Cid 021c.0584 Teb: 00000072d20a2000 Win32Thread: 0000000000000000 RUNNING on processor 2
  1649. Not impersonating
  1650. GetUlongFromAddress: unable to read from fffff8054562ca14
  1651. Owning Process ffffc78db1bfa4c0 Image: svchost.exe
  1652. Attached Process N/A Image: N/A
  1653. fffff78000000000: Unable to get shared data
  1654. Wait Start TickCount 741
  1655. Context Switch Count 724 IdealProcessor: 0
  1656. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1657. UserTime 00:00:00.000
  1658. KernelTime 00:00:00.000
  1659. Win32 Start Address 0x00007ffee0eb3ce0
  1660. Stack Init ffff8405187a7b90 Current ffff8405187a6e30
  1661. Base ffff8405187a8000 Limit ffff8405187a1000 Call 0000000000000000
  1662. Priority 10 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1663. Child-SP RetAddr : Args to Child : Call Site
  1664. ffff8405`187a7838 fffff805`45acb8a9 : 00000000`000000ef ffffc78d`b1bfa4c0 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
  1665. ffff8405`187a7840 fffff805`459ecbdf : ffffc78d`b1bfa4c0 fffff805`45288065 ffffc78d`b1bfa4c0 fffff805`452880e0 : nt!PspCatchCriticalBreak+0x115
  1666. ffff8405`187a78e0 fffff805`458700c0 : ffffc78d`00000000 00000000`00000000 ffffc78d`b1bfa4c0 ffffc78d`b1bfa4c0 : nt!PspTerminateAllThreads+0x17b193
  1667. ffff8405`187a7950 fffff805`4586fce9 : ffffffff`ffffffff ffff8405`187a7a80 ffffc78d`b1bfa4c0 fffff805`45879401 : nt!PspTerminateProcess+0xe0
  1668. ffff8405`187a7990 fffff805`453d3c15 : ffffc78d`0000021c ffffc78d`ab75e080 ffffc78d`b1bfa4c0 00000072`d297f7dc : nt!NtTerminateProcess+0xa9
  1669. ffff8405`187a7a00 00007ffe`e0f1c5f4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ ffff8405`187a7a00)
  1670. 00000072`d297c4e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`e0f1c5f4
  1671.  
  1672.  
  1673. ========================================================================
  1674. ======================= Dump #4: ANALYZE VERBOSE =======================
  1675. ======================= File: 041820-5250-01.dmp =======================
  1676. ========================================================================
  1677.  
  1678. Mini Kernel Dump File: Only registers and stack trace are available
  1679. Windows 10 Kernel Version 18362 MP (6 procs) Free x64
  1680. Kernel base = 0xfffff803`62c00000 PsLoadedModuleList = 0xfffff803`63048150
  1681. Debug session time: Sat Apr 18 14:39:13.535 2020 (UTC - 4:00)
  1682. System Uptime: 0 days 9:09:38.215
  1683.  
  1684. BugCheck 1000007F, {8, fffff80366880e50, ffffb182b06b0fc0, fffff80362cc8e9a}
  1685. Probably caused by : memory_corruption
  1686. Followup: memory_corruption
  1687.  
  1688. UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
  1689. This means a trap occurred in kernel mode, and it's a trap of a kind
  1690. that the kernel isn't allowed to have/catch (bound trap) or that
  1691. is always instant death (double fault). The first number in the
  1692. bugcheck params is the number of the trap (8 = double fault, etc)
  1693. Consult an Intel x86 family manual to learn more about what these
  1694. traps are. Here is a *portion* of those codes:
  1695. If kv shows a taskGate
  1696. use .tss on the part before the colon, then kv.
  1697. Else if kv shows a trapframe
  1698. use .trap on that value
  1699. Else
  1700. .trap on the appropriate frame will show where the trap was taken
  1701. (on x86, this will be the ebp that goes with the procedure KiTrap)
  1702. Endif
  1703. kb will then show the corrected stack.
  1704.  
  1705. Arguments:
  1706. Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
  1707. Arg2: fffff80366880e50
  1708. Arg3: ffffb182b06b0fc0
  1709. Arg4: fffff80362cc8e9a
  1710.  
  1711. Debugging Details:
  1712. DUMP_CLASS: 1
  1713. DUMP_QUALIFIER: 400
  1714. DUMP_TYPE: 2
  1715. DUMP_FILE_ATTRIBUTES: 0x8
  1716. Kernel Generated Triage Dump
  1717. BUGCHECK_STR: 0x7f_8
  1718. CUSTOMER_CRASH_COUNT: 1
  1719. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1720.  
  1721. PROCESS_NAME: ACOrigins.exe
  1722.  
  1723. CURRENT_IRQL: 0
  1724. TRAP_FRAME: ffffb182b06b1b80 -- (.trap 0xffffb182b06b1b80)
  1725. NOTE: The trap frame does not contain all registers.
  1726. Some register values may be zeroed or incorrect.
  1727. rax=ffffc686c9748080 rbx=0000000000000000 rcx=00000000c0000005
  1728. rdx=0000000000001000 rsi=0000000000000000 rdi=0000000000000000
  1729. rip=fffff80362cdcf7d rsp=ffffb182b06b1d10 rbp=ffffb182b06b1e40
  1730. r8=cfffffffffffffff r9=0000000000000000 r10=ffffc686c57f2580
  1731. r11=ffff8241209047f8 r12=0000000000000000 r13=0000000000000000
  1732. r14=0000000000000000 r15=0000000000000000
  1733. iopl=0 ov up ei pl nz na po cy
  1734. nt!MiIsRetryIoStatus+0x11:
  1735. fffff803`62cdcf7d c0742181f9 sal byte ptr [rcx-7Fh],0F9h ds:00000000`bfffff86=??
  1736. Resetting default scope
  1737. MISALIGNED_IP:
  1738. nt!MiIsRetryIoStatus+11
  1739. fffff803`62cdcf7d c0742181f9 sal byte ptr [rcx-7Fh],0F9h
  1740. LAST_CONTROL_TRANSFER: from fffff80362dd041e to fffff80362cc8e9a
  1741. STACK_COMMAND: kb
  1742. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  1743. fffff80362cc8174-fffff80362cc8175 2 bytes - nt!MiZeroFault+e4
  1744. [ 80 f6:00 82 ]
  1745. fffff80362cc8184-fffff80362cc8185 2 bytes - nt!MiZeroFault+f4 (+0x10)
  1746. [ ff f6:7f 82 ]
  1747. fffff80362cc8ee3-fffff80362cc8ee4 2 bytes - nt!MmAccessFault+83 (+0xd5f)
  1748. [ 80 f6:00 82 ]
  1749. fffff80362cc8f8f-fffff80362cc8f93 5 bytes - nt!MmAccessFault+12f (+0xac)
  1750. [ d0 be 7d fb f6:40 90 20 41 82 ]
  1751. 11 errors : !nt (fffff80362cc8174-fffff80362cc8f93)
  1752. MODULE_NAME: memory_corruption
  1753.  
  1754. IMAGE_NAME: memory_corruption
  1755.  
  1756. FOLLOWUP_NAME: memory_corruption
  1757. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1758. MEMORY_CORRUPTOR: LARGE
  1759. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1760. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1761. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1762. TARGET_TIME: 2020-04-18T18:39:13.000Z
  1763. SUITE_MASK: 272
  1764. PRODUCT_TYPE: 1
  1765. USER_LCID: 0
  1766. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1767. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1768. Followup: memory_corruption
  1769.  
  1770. ====================== Dump #4: 3RD PARTY DRIVERS ======================
  1771.  
  1772. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  1773. Nov 09 2017 - vbdenum.sys - Citrix ICA Host (Citrix Systems, Inc.)
  1774. Jul 12 2018 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1775. Aug 08 2018 - ctxusbm.sys - Citrix USB Filter Driver https://www.citrix.com
  1776. Aug 28 2018 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1777. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1778. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1779. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1780. Mar 17 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1781.  
  1782. ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
  1783.  
  1784. Image name: RTKVHD64.sys
  1785. Search : https://www.google.com/search?q=RTKVHD64.sys
  1786. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  1787. Timestamp : Fri Jun 3 2016
  1788.  
  1789. Image name: vbdenum.sys
  1790. Search : https://www.google.com/search?q=vbdenum.sys
  1791. ADA Info : Citrix ICA Host (Citrix Systems, Inc.)
  1792. Timestamp : Thu Nov 9 2017
  1793.  
  1794. Image name: TeeDriverW8x64.sys
  1795. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  1796. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1797. Timestamp : Thu Jul 12 2018
  1798.  
  1799. Image name: ctxusbm.sys
  1800. Search : https://www.google.com/search?q=ctxusbm.sys
  1801. ADA Info : Citrix USB Filter Driver https://www.citrix.com
  1802. Timestamp : Wed Aug 8 2018
  1803.  
  1804. Image name: rt640x64.sys
  1805. Search : https://www.google.com/search?q=rt640x64.sys
  1806. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1807. Timestamp : Tue Aug 28 2018
  1808.  
  1809. Image name: nvvad64v.sys
  1810. Search : https://www.google.com/search?q=nvvad64v.sys
  1811. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1812. Timestamp : Thu Mar 14 2019
  1813.  
  1814. Image name: nvvhci.sys
  1815. Search : https://www.google.com/search?q=nvvhci.sys
  1816. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1817. Timestamp : Fri Jan 10 2020
  1818.  
  1819. Image name: nvhda64v.sys
  1820. Search : https://www.google.com/search?q=nvhda64v.sys
  1821. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1822. Timestamp : Wed Feb 19 2020
  1823.  
  1824. Image name: nvlddmkm.sys
  1825. Search : https://www.google.com/search?q=nvlddmkm.sys
  1826. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1827. Timestamp : Tue Mar 17 2020
  1828.  
  1829. ====================== Dump #4: MICROSOFT DRIVERS ======================
  1830.  
  1831. ACPI.sys ACPI Driver for NT (Microsoft)
  1832. acpiex.sys ACPIEx Driver (Microsoft)
  1833. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  1834. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1835. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1836. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1837. ahcache.sys Application Compatibility Cache (Microsoft)
  1838. bam.sys BAM Kernal driver (Microsoft)
  1839. BasicDisplay.sys Basic Display driver (Microsoft)
  1840. BasicRender.sys Basic Render driver (Microsoft)
  1841. Beep.SYS BEEP driver (Microsoft)
  1842. bindflt.sys Windows Bind Filter driver (Microsoft)
  1843. BOOTVID.dll VGA Boot Driver (Microsoft)
  1844. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1845. cdd.dll Canonical Display Driver (Microsoft)
  1846. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1847. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1848. CI.dll Code Integrity Module (Microsoft)
  1849. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1850. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1851. CLFS.SYS Common Log File System Driver (Microsoft)
  1852. clipsp.sys CLIP Service (Microsoft)
  1853. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1854. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1855. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1856. condrv.sys Console Driver (Microsoft)
  1857. crashdmp.sys Crash Dump driver (Microsoft)
  1858. csc.sys Windows Client Side Caching driver (Microsoft)
  1859. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1860. disk.sys PnP Disk Driver (Microsoft)
  1861. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1862. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1863. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1864. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  1865. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1866. dxgmms2.sys DirectX Graphics MMS
  1867. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1868. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1869. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1870. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1871. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1872. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1873. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1874. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1875. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1876. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1877. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1878. HIDCLASS.SYS Hid Class Library (Microsoft)
  1879. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1880. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1881. HTTP.sys HTTP Protocol Stack (Microsoft)
  1882. IndirectKmd.sys Indirect displays kernel-mode filter driver
  1883. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1884. intelppm.sys Processor Device Driver (Microsoft)
  1885. iorate.sys I/O rate control Filter (Microsoft)
  1886. kbdclass.sys Keyboard Class Driver (Microsoft)
  1887. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1888. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  1889. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1890. ks.sys Kernal CSA Library (Microsoft)
  1891. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1892. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1893. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1894. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1895. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1896. mcupdate.dll Media Center Update (Microsoft)
  1897. mmcss.sys MMCSS Driver (Microsoft)
  1898. monitor.sys Monitor Driver (Microsoft)
  1899. mouclass.sys Mouse Class Driver (Microsoft)
  1900. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1901. mountmgr.sys Mount Point Manager (Microsoft)
  1902. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1903. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1904. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1905. Msfs.SYS Mailslot driver (Microsoft)
  1906. msisadrv.sys ISA Driver (Microsoft)
  1907. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1908. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1909. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1910. mssmbios.sys System Management BIOS driver (Microsoft)
  1911. mup.sys Multiple UNC Provider driver (Microsoft)
  1912. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1913. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1914. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  1915. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1916. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1917. NDProxy.sys NDIS Proxy driver (Microsoft)
  1918. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1919. netbios.sys NetBIOS Interface driver (Microsoft)
  1920. netbt.sys MBT Transport driver (Microsoft)
  1921. NETIO.SYS Network I/O Subsystem (Microsoft)
  1922. Npfs.SYS NPFS driver (Microsoft)
  1923. npsvctrig.sys Named pipe service triggers (Microsoft)
  1924. nsiproxy.sys NSI Proxy driver (Microsoft)
  1925. Ntfs.sys NT File System Driver (Microsoft)
  1926. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1927. ntosext.sys NTOS Extension Host driver (Microsoft)
  1928. Null.SYS NULL Driver (Microsoft)
  1929. pacer.sys QoS Packet Scheduler (Microsoft)
  1930. partmgr.sys Partition driver (Microsoft)
  1931. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1932. pcw.sys Performance Counter Driver (Microsoft)
  1933. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1934. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1935. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1936. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1937. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1938. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1939. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1940. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1941. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1942. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1943. rdyboost.sys ReadyBoost Driver (Microsoft)
  1944. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1945. serenum.sys Serial Port Enumerator (Microsoft)
  1946. serial.sys Serial Device Driver
  1947. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1948. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1949. spaceport.sys Storage Spaces driver (Microsoft)
  1950. srv2.sys Smb 2.0 Server driver (Microsoft)
  1951. srvnet.sys Server Network driver (Microsoft)
  1952. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1953. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1954. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1955. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1956. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1957. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1958. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1959. TDI.SYS TDI Wrapper driver (Microsoft)
  1960. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1961. tm.sys Kernel Transaction Manager driver (Microsoft)
  1962. ucx01000.sys USB Controller Extension (Microsoft)
  1963. UEFI.sys UEFI NT driver (Microsoft)
  1964. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1965. usbaudio.sys USB Audio Class Driver (Microsoft)
  1966. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1967. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1968. UsbHub3.sys USB3 HUB driver (Microsoft)
  1969. USBXHCI.SYS USB XHCI driver (Microsoft)
  1970. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1971. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1972. volmgr.sys Volume Manager Driver (Microsoft)
  1973. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1974. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1975. volume.sys Volume driver (Microsoft)
  1976. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1977. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1978. watchdog.sys Watchdog driver (Microsoft)
  1979. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1980. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1981. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1982. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1983. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1984. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1985. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1986. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1987. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1988. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1989. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1990. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1991. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1992. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1993. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1994. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1995. Wof.sys Windows Overlay Filter (Microsoft)
  1996. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1997. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1998.  
  1999. ====================== Dump #4: UNLOADED MODULES =======================
  2000.  
  2001. fffff803`6e360000 fffff803`6e374000 WdNisDrv.sys
  2002. fffff803`6e340000 fffff803`6e354000 WdNisDrv.sys
  2003. fffff803`6e320000 fffff803`6e334000 WdNisDrv.sys
  2004. fffff803`6e300000 fffff803`6e314000 WdNisDrv.sys
  2005. fffff803`6e2e0000 fffff803`6e2f4000 WdNisDrv.sys
  2006. fffff803`6e2a0000 fffff803`6e2b4000 WdNisDrv.sys
  2007. fffff803`6e230000 fffff803`6e244000 WdNisDrv.sys
  2008. fffff803`6d2b0000 fffff803`6d2bf000 dump_storpor
  2009. fffff803`6d2f0000 fffff803`6d31f000 dump_storahc
  2010. fffff803`6d340000 fffff803`6d35e000 dump_dumpfve
  2011. fffff803`707e0000 fffff803`70831000 WUDFRd.sys
  2012. fffff803`6cbe0000 fffff803`6cbfe000 dam.sys
  2013. fffff803`653b0000 fffff803`653c1000 WdBoot.sys
  2014. fffff803`663b0000 fffff803`663c1000 hwpolicy.sys
  2015.  
  2016. ====================== Dump #4: BIOS INFORMATION =======================
  2017.  
  2018. [SMBIOS Data Tables v3.0]
  2019. [DMI Version - 0]
  2020. [2.0 Calling Convention - No]
  2021. [Table Size - 4215 bytes]
  2022. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  2023. Vendor American Megatrends Inc.
  2024. BIOS Version 2401
  2025. BIOS Starting Address Segment f000
  2026. BIOS Release Date 07/15/2019
  2027. BIOS ROM Size 1000000
  2028. BIOS Characteristics
  2029. 07: - PCI Supported
  2030. 10: - APM Supported
  2031. 11: - Upgradeable FLASH BIOS
  2032. 12: - BIOS Shadowing Supported
  2033. 15: - CD-Boot Supported
  2034. 16: - Selectable Boot Supported
  2035. 17: - BIOS ROM Socketed
  2036. 19: - EDD Supported
  2037. 23: - 1.2MB Floppy Supported
  2038. 24: - 720KB Floppy Supported
  2039. 25: - 2.88MB Floppy Supported
  2040. 26: - Print Screen Device Supported
  2041. 27: - Keyboard Services Supported
  2042. 28: - Serial Services Supported
  2043. 29: - Printer Services Supported
  2044. 32: - BIOS Vendor Reserved
  2045. BIOS Characteristic Extensions
  2046. 00: - ACPI Supported
  2047. 01: - USB Legacy Supported
  2048. 08: - BIOS Boot Specification Supported
  2049. 10: - Specification Reserved
  2050. 11: - Specification Reserved
  2051. BIOS Major Revision 5
  2052. BIOS Minor Revision 12
  2053. EC Firmware Major Revision 255
  2054. EC Firmware Minor Revision 255
  2055. [System Information (Type 1) - Length 27 - Handle 0001h]
  2056. Manufacturer System manufacturer
  2057. Product Name System Product Name
  2058. Version System Version
  2059. UUID 00000000-0000-0000-0000-000000000000
  2060. Wakeup Type Power Switch
  2061. SKUNumber SKU
  2062. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2063. Manufacturer ASUSTeK COMPUTER INC.
  2064. Product PRIME Z370-P
  2065. Version Rev X.0x
  2066. Feature Flags 09h
  2067. -362039584: - -362039536: - ÷7£ý
  2068. Location Default string
  2069. Chassis Handle 0003h
  2070. Board Type 0ah - Processor/Memory Module
  2071. Number of Child Handles 0
  2072. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2073. Manufacturer Default string
  2074. Chassis Type Desktop
  2075. Version Default string
  2076. Bootup State Safe
  2077. Power Supply State Safe
  2078. Thermal State Safe
  2079. Security Status None
  2080. OEM Defined 0
  2081. Height 0U
  2082. Number of Power Cords 1
  2083. Number of Contained Elements 0
  2084. Contained Element Size 3
  2085. [Onboard Devices Information (Type 10) - Length 6 - Handle 0021h]
  2086. Number of Devices 1
  2087. 01: Type Video [enabled]
  2088. [OEM Strings (Type 11) - Length 5 - Handle 0022h]
  2089. Number of Strings 8
  2090. 1 Default string
  2091. 2 Default string
  2092. 3 COD
  2093. 4 Default string
  2094. 5 FFFFFFFFFFFFF
  2095. 6 FFFFFFFFFFFFF
  2096. 7 FFFFFFFFFFFFF
  2097. 8 Default string
  2098. [System Configuration Options (Type 12) - Length 5 - Handle 0023h]
  2099. [Physical Memory Array (Type 16) - Length 23 - Handle 003eh]
  2100. Location 03h - SystemBoard/Motherboard
  2101. Use 03h - System Memory
  2102. Memory Error Correction 03h - None
  2103. Maximum Capacity 67108864KB
  2104. Number of Memory Devices 4
  2105. [Memory Device (Type 17) - Length 40 - Handle 003fh]
  2106. Physical Memory Array Handle 003eh
  2107. Total Width 0 bits
  2108. Data Width 0 bits
  2109. Form Factor 02h - Unknown
  2110. Device Locator ChannelA-DIMM1
  2111. Bank Locator BANK 0
  2112. Memory Type 02h - Unknown
  2113. Type Detail 0000h -
  2114. Speed 0MHz
  2115. [Memory Device (Type 17) - Length 40 - Handle 0040h]
  2116. Physical Memory Array Handle 003eh
  2117. Total Width 64 bits
  2118. Data Width 64 bits
  2119. Size 8192MB
  2120. Form Factor 09h - DIMM
  2121. Device Locator ChannelA-DIMM2
  2122. Bank Locator BANK 1
  2123. Memory Type 1ah - Specification Reserved
  2124. Type Detail 4080h - Synchronous
  2125. Speed 2400MHz
  2126. Manufacturer Corsair
  2127. Part Number CMK16GX4M2A2400C16
  2128. [Memory Device (Type 17) - Length 40 - Handle 0041h]
  2129. Physical Memory Array Handle 003eh
  2130. Total Width 0 bits
  2131. Data Width 0 bits
  2132. Form Factor 02h - Unknown
  2133. Device Locator ChannelB-DIMM1
  2134. Bank Locator BANK 2
  2135. Memory Type 02h - Unknown
  2136. Type Detail 0000h -
  2137. Speed 0MHz
  2138. [Memory Device (Type 17) - Length 40 - Handle 0042h]
  2139. Physical Memory Array Handle 003eh
  2140. Total Width 64 bits
  2141. Data Width 64 bits
  2142. Size 8192MB
  2143. Form Factor 09h - DIMM
  2144. Device Locator ChannelB-DIMM2
  2145. Bank Locator BANK 3
  2146. Memory Type 1ah - Specification Reserved
  2147. Type Detail 4080h - Synchronous
  2148. Speed 2400MHz
  2149. Manufacturer Corsair
  2150. Part Number CMK16GX4M2A2400C16
  2151. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0043h]
  2152. Starting Address 00000000h
  2153. Ending Address 00ffffffh
  2154. Memory Array Handle 003eh
  2155. Partition Width 02
  2156. [Cache Information (Type 7) - Length 19 - Handle 0044h]
  2157. Socket Designation L1 Cache
  2158. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2159. Maximum Cache Size 0180h - 384K
  2160. Installed Size 0180h - 384K
  2161. Supported SRAM Type 0020h - Synchronous
  2162. Current SRAM Type 0020h - Synchronous
  2163. Cache Speed 0ns
  2164. Error Correction Type ParitySingle-Bit ECC
  2165. System Cache Type Unified
  2166. Associativity 8-way Set-Associative
  2167. [Cache Information (Type 7) - Length 19 - Handle 0045h]
  2168. Socket Designation L2 Cache
  2169. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2170. Maximum Cache Size 0600h - 1536K
  2171. Installed Size 0600h - 1536K
  2172. Supported SRAM Type 0020h - Synchronous
  2173. Current SRAM Type 0020h - Synchronous
  2174. Cache Speed 0ns
  2175. Error Correction Type Multi-Bit ECC
  2176. System Cache Type Unified
  2177. Associativity 4-way Set-Associative
  2178. [Cache Information (Type 7) - Length 19 - Handle 0046h]
  2179. Socket Designation L3 Cache
  2180. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2181. Maximum Cache Size 2400h - 9216K
  2182. Installed Size 2400h - 9216K
  2183. Supported SRAM Type 0020h - Synchronous
  2184. Current SRAM Type 0020h - Synchronous
  2185. Cache Speed 0ns
  2186. Error Correction Type Specification Reserved
  2187. System Cache Type Unified
  2188. Associativity Specification Reserved
  2189. [Processor Information (Type 4) - Length 48 - Handle 0047h]
  2190. Socket Designation LGA1151
  2191. Processor Type Central Processor
  2192. Processor Family cdh - Specification Reserved
  2193. Processor Manufacturer Intel(R) Corporation
  2194. Processor ID ea060900fffbebbf
  2195. Processor Version Intel(R) Core(TM) i5-8600K CPU @ 3.60GHz
  2196. Processor Voltage 8ah - 1.0V
  2197. External Clock 100MHz
  2198. Max Speed 8300MHz
  2199. Current Speed 3600MHz
  2200. Status Enabled Populated
  2201. Processor Upgrade Specification Reserved
  2202. L1 Cache Handle 0044h
  2203. L2 Cache Handle 0045h
  2204. L3 Cache Handle 0046h
  2205. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0048h]
  2206. Starting Address 00000000h
  2207. Ending Address 007fffffh
  2208. Memory Device Handle 0040h
  2209. Mem Array Mapped Adr Handle 0043h
  2210. Interleave Position 01
  2211. Interleave Data Depth 02
  2212. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0049h]
  2213. Starting Address 00800000h
  2214. Ending Address 00ffffffh
  2215. Memory Device Handle 0042h
  2216. Mem Array Mapped Adr Handle 0043h
  2217. Interleave Position 02
  2218. Interleave Data Depth 02
  2219.  
  2220. ========================== Dump #4: Extra #1 ===========================
  2221.  
  2222. 0: kd> !verifier
  2223. fffff80363048580: Unable to get verifier list.
  2224.  
  2225. ========================== Dump #4: Extra #2 ===========================
  2226.  
  2227. 0: kd> !thread
  2228. ffffc686c9748080 is not a thread object, interpreting as stack value...
  2229. Unable to read @ fffff80363038b40
  2230. TYPE mismatch for thread object at ffffc686c9748080
  2231.  
  2232.  
  2233. ========================================================================
  2234. ======================= Dump #5: ANALYZE VERBOSE =======================
  2235. ======================= File: 041520-4843-01.dmp =======================
  2236. ========================================================================
  2237.  
  2238. Mini Kernel Dump File: Only registers and stack trace are available
  2239. Windows 10 Kernel Version 18362 MP (6 procs) Free x64
  2240. Kernel base = 0xfffff800`71200000 PsLoadedModuleList = 0xfffff800`71648150
  2241. Debug session time: Wed Apr 15 11:29:45.110 2020 (UTC - 4:00)
  2242. System Uptime: 0 days 0:05:23.788
  2243.  
  2244. BugCheck 7F, {8, ffffb68010ddb010, ffffb38438e08f90, fffff800713d00d0}
  2245. Probably caused by : memory_corruption
  2246. Followup: memory_corruption
  2247.  
  2248. UNEXPECTED_KERNEL_MODE_TRAP (7f)
  2249. This means a trap occurred in kernel mode, and it's a trap of a kind
  2250. that the kernel isn't allowed to have/catch (bound trap) or that
  2251. is always instant death (double fault). The first number in the
  2252. bugcheck params is the number of the trap (8 = double fault, etc)
  2253. Consult an Intel x86 family manual to learn more about what these
  2254. traps are. Here is a *portion* of those codes:
  2255. If kv shows a taskGate
  2256. use .tss on the part before the colon, then kv.
  2257. Else if kv shows a trapframe
  2258. use .trap on that value
  2259. Else
  2260. .trap on the appropriate frame will show where the trap was taken
  2261. (on x86, this will be the ebp that goes with the procedure KiTrap)
  2262. Endif
  2263. kb will then show the corrected stack.
  2264.  
  2265. Arguments:
  2266. Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
  2267. Arg2: ffffb68010ddb010
  2268. Arg3: ffffb38438e08f90
  2269. Arg4: fffff800713d00d0
  2270.  
  2271. Debugging Details:
  2272. DUMP_CLASS: 1
  2273. DUMP_QUALIFIER: 400
  2274. DUMP_TYPE: 2
  2275. BUGCHECK_STR: 0x7f_8
  2276. TRAP_FRAME: ffffb68010ddb010 -- (.trap 0xffffb68010ddb010)
  2277. NOTE: The trap frame does not contain all registers.
  2278. Some register values may be zeroed or incorrect.
  2279. rax=000000000000008b rbx=0000000000000000 rcx=0000000000000000
  2280. rdx=ffffb38438e09101 rsi=0000000000000000 rdi=0000000000000000
  2281. rip=fffff800713d00d0 rsp=ffffb38438e08f90 rbp=ffffb38438e09010
  2282. r8=0000000000000001 r9=ffffb38438e09140 r10=000000000010001f
  2283. r11=ffffb38438e091d0 r12=0000000000000000 r13=0000000000000000
  2284. r14=0000000000000000 r15=0000000000000000
  2285. iopl=0 nv up di ng nz na po nc
  2286. nt!KiPageFault+0x10:
  2287. fffff800`713d00d0 c645ab01 mov byte ptr [rbp-55h],1 ss:ffffb384`38e08fbb=??
  2288. Resetting default scope
  2289. CUSTOMER_CRASH_COUNT: 1
  2290. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  2291.  
  2292. PROCESS_NAME: firefox.exe
  2293.  
  2294. CURRENT_IRQL: 0
  2295. LAST_CONTROL_TRANSFER: from fffff800713d41e9 to fffff800713c2380
  2296. STACK_OVERFLOW: Stack Limit: ffffb38438e09000. Use (kF) and (!stackusage) to investigate stack usage.
  2297. STACKUSAGE_FUNCTION: The function at address 0xFFFFF800712FE804 was blamed for the stack overflow. It is using 15408 bytes of stack total in 9 instances (likely recursion).
  2298. FOLLOWUP_IP:
  2299. nt!KiDispatchException+104
  2300. fffff800`712fe804 4c8bc6 mov r8,rsi
  2301. STACK_TEXT:
  2302. ffffb384`38e08f90 fffff800`712fe279 : d8a7c9c5`d40059b4 cb11a46a`07524221 0039e3dc`d27ddfb3 d1869f77`140059c4 : nt!KiPageFault+0x10
  2303. ffffb384`38e09120 fffff800`712fe0c0 : d9708f81`47558a01 ffffb384`38e096d0 ffffb384`38e091d0 f9a7c321`d85f70cc : nt!RtlInitializeExtendedContext2+0x6d
  2304. ffffb384`38e09170 fffff800`712fe804 : b226c4ec`f5093ba2 000a8ce5`9406e2b4 38e6f350`35005a14 8fad9403`00000001 : nt!RtlInitializeExtendedContext+0x38
  2305. ffffb384`38e091a0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e09a30 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2306. ffffb384`38e09850 fffff800`713d0505 : 00035948`8730ff8f b4578cb6`17005fc4 00000000`0010001f 006eaede`9861243e : nt!KiExceptionDispatch+0x11d
  2307. ffffb384`38e09a30 fffff800`712fe279 : 86b3a0fa`7b70422e 008fcd82`5e03c3ff a6d6173a`b10060d4 63dd5e88`a6da16d8 : nt!KiPageFault+0x445
  2308. ffffb384`38e09bc0 fffff800`712fe0c0 : 00a4ded8`e6b7d3ff ffffb384`38e0a170 ffffb384`38e09c70 00ef7627`ab68258b : nt!RtlInitializeExtendedContext2+0x6d
  2309. ffffb384`38e09c10 fffff800`712fe804 : 003c5ec1`ebb08c37 e5b0351b`da006124 93259244`23318711 00482207`00000001 : nt!RtlInitializeExtendedContext+0x38
  2310. ffffb384`38e09c40 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0a4d0 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2311. ffffb384`38e0a2f0 fffff800`713d0505 : 001f9a82`3b0e60dc dc9b2376`35005184 00000000`0010001f 00802fb8`bff55c6c : nt!KiExceptionDispatch+0x11d
  2312. ffffb384`38e0a4d0 fffff800`712fe279 : f9efbca5`9178e540 0077f524`16184122 b5c63b8f`39005294 b304f321`5927065a : nt!KiPageFault+0x445
  2313. ffffb384`38e0a660 fffff800`712fe0c0 : 004b1938`2eee02ea ffffb384`38e0ac10 ffffb384`38e0a710 00453e12`a73cce32 : nt!RtlInitializeExtendedContext2+0x6d
  2314. ffffb384`38e0a6b0 fffff800`712fe804 : 004b5dc3`97a4e9f7 b87d1ab6`460052e4 6be0d936`ad3d0ac1 002ecac1`00000001 : nt!RtlInitializeExtendedContext+0x38
  2315. ffffb384`38e0a6e0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0af70 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2316. ffffb384`38e0ad90 fffff800`713d0505 : 88267535`15005894 3127e033`6a965deb 00000000`0010001f 221c7d15`330058a4 : nt!KiExceptionDispatch+0x11d
  2317. ffffb384`38e0af70 fffff800`712fe279 : b4c62d81`a1d3c810 00cae36f`50e0536f 0ee8fce2`a0004454 653f7da4`a3c79180 : nt!KiPageFault+0x445
  2318. ffffb384`38e0b100 fffff800`712fe0c0 : 0045704b`1dbc9aa5 ffffb384`38e0b6b0 ffffb384`38e0b1b0 0075894e`5064419f : nt!RtlInitializeExtendedContext2+0x6d
  2319. ffffb384`38e0b150 fffff800`712fe804 : 005dd30a`6147664e f2552233`210044a4 5329da00`14b461a8 00ee874f`00000001 : nt!RtlInitializeExtendedContext+0x38
  2320. ffffb384`38e0b180 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0ba10 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2321. ffffb384`38e0b830 fffff800`713d0505 : fa9b3f07`12004a54 289926e6`aeab8775 00000000`0010001f 6c5c0d22`da004a64 : nt!KiExceptionDispatch+0x11d
  2322. ffffb384`38e0ba10 fffff800`712fe279 : 00045fa9`072aaf45 b9473bb0`32004b64 2370e3f4`a34ecf0d 00c0bb68`00deb511 : nt!KiPageFault+0x445
  2323. ffffb384`38e0bba0 fffff800`712fe0c0 : 23af658a`45004b94 ffffb384`38e0c150 ffffb384`38e0bc50 fd569131`51004ba4 : nt!RtlInitializeExtendedContext2+0x6d
  2324. ffffb384`38e0bbf0 fffff800`712fe804 : a2fff96a`d7004bb4 63af520e`6f8428b7 002b2cf3`a83b965d 730f6895`00000001 : nt!RtlInitializeExtendedContext+0x38
  2325. ffffb384`38e0bc20 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0c4b0 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2326. ffffb384`38e0c2d0 fffff800`713d0505 : 1451bd42`e0003c14 27e6698d`e542127f 00000000`0010001f e4407939`65003c24 : nt!KiExceptionDispatch+0x11d
  2327. ffffb384`38e0c4b0 fffff800`712fe279 : 00b689fc`3c66d765 57123972`25003d24 dd22e474`ccc1e7a7 0036ee7a`6750ab9e : nt!KiPageFault+0x445
  2328. ffffb384`38e0c640 fffff800`712fe0c0 : 8f4287bc`d6003d54 ffffb384`38e0cbf0 ffffb384`38e0c6f0 6799a0ba`df003d64 : nt!RtlInitializeExtendedContext2+0x6d
  2329. ffffb384`38e0c690 fffff800`712fe804 : 41777186`62003d74 7d5b0025`57c9a412 006aecee`67466779 f992a991`00000001 : nt!RtlInitializeExtendedContext+0x38
  2330. ffffb384`38e0c6c0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0cf50 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2331. ffffb384`38e0cd70 fffff800`713d0505 : c308f23b`62dff93c 00c7e369`7fdf81c6 00000000`0010001f d79d2676`04a006e6 : nt!KiExceptionDispatch+0x11d
  2332. ffffb384`38e0cf50 fffff800`712fe279 : e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 : nt!KiPageFault+0x445
  2333. ffffb384`38e0d0e0 fffff800`712fe0c0 : e5e5e5e5`e5e5e5e5 ffffb384`38e0d690 ffffb384`38e0d190 e5e5e5e5`e5e5e5e5 : nt!RtlInitializeExtendedContext2+0x6d
  2334. ffffb384`38e0d130 fffff800`712fe804 : e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`00000001 : nt!RtlInitializeExtendedContext+0x38
  2335. ffffb384`38e0d160 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0d9f0 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2336. ffffb384`38e0d810 fffff800`713d0505 : 00000000`00000000 ffff970c`3d3a7a00 00000000`0010001f 000000a0`41946350 : nt!KiExceptionDispatch+0x11d
  2337. ffffb384`38e0d9f0 fffff800`712fe279 : ffff970c`38bc1000 ffff970c`38bc1000 00000000`00000000 ffff970c`38bc1000 : nt!KiPageFault+0x445
  2338. ffffb384`38e0db80 fffff800`712fe0c0 : ffff970c`35ef7060 ffffb384`38e0e130 ffffb384`38e0dc30 ffff970c`35ef7060 : nt!RtlInitializeExtendedContext2+0x6d
  2339. ffffb384`38e0dbd0 fffff800`712fe804 : ffff970c`35ef7060 fffff800`7d50ac8e ffff970c`38bc1000 00000000`00000001 : nt!RtlInitializeExtendedContext+0x38
  2340. ffffb384`38e0dc00 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0e490 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2341. ffffb384`38e0e2b0 fffff800`713d0505 : ffffb680`10dd0180 fffff800`7128d367 00000000`0010001f 00000000`00000000 : nt!KiExceptionDispatch+0x11d
  2342. ffffb384`38e0e490 fffff800`712fe279 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x445
  2343. ffffb384`38e0e620 fffff800`712fe0c0 : 00000000`00000000 ffffb384`38e0ebd0 ffffb384`38e0e6d0 00000000`00000000 : nt!RtlInitializeExtendedContext2+0x6d
  2344. ffffb384`38e0e670 fffff800`712fe804 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000001 : nt!RtlInitializeExtendedContext+0x38
  2345. ffffb384`38e0e6a0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0ef30 ffff8000`00000000 00000000`000000b9 : nt!KiDispatchException+0x104
  2346. ffffb384`38e0ed50 fffff800`713d0505 : 00000000`00000000 00000000`00000000 fffff800`73406072 00000000`00000000 : nt!KiExceptionDispatch+0x11d
  2347. ffffb384`38e0ef30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x445
  2348. STACK_COMMAND: .trap 0xffffb68010ddb010 ; kb
  2349. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  2350. fffff8007125a346-fffff8007125a347 2 bytes - nt!EtwpGetPerfCounter+6
  2351. [ 48 ff:4c 8b ]
  2352. fffff8007125a34d-fffff8007125a34e 2 bytes - nt!EtwpGetPerfCounter+d (+0x07)
  2353. [ 0f 1f:e8 6e ]
  2354. fffff8007125a350-fffff8007125a351 2 bytes - nt!EtwpGetPerfCounter+10 (+0x03)
  2355. [ 00 00:f0 ff ]
  2356. fffff800712c91eb-fffff800712c91ef 5 bytes - nt!MmAccessFault+37b (+0x6ee9b)
  2357. [ df be 7d fb f6:4f 92 24 49 92 ]
  2358. fffff800712c9218-fffff800712c921c 5 bytes - nt!MmAccessFault+3a8 (+0x2d)
  2359. [ d7 be 7d fb f6:47 92 24 49 92 ]
  2360. fffff800712c9edd-fffff800712c9edf 3 bytes - nt!MiFastLockLeafPageTable+ad (+0xcc5)
  2361. [ 40 fb f6:00 49 92 ]
  2362. fffff800712c9f11-fffff800712c9f12 2 bytes - nt!MiFastLockLeafPageTable+e1 (+0x34)
  2363. [ 80 f6:00 92 ]
  2364. fffff800712c9f39-fffff800712c9f3d 5 bytes - nt!MiFastLockLeafPageTable+109 (+0x28)
  2365. [ d0 be 7d fb f6:40 92 24 49 92 ]
  2366. fffff800712c9f46-fffff800712c9f4a 5 bytes - nt!MiFastLockLeafPageTable+116 (+0x0d)
  2367. [ d7 be 7d fb f6:47 92 24 49 92 ]
  2368. 31 errors : !nt (fffff8007125a346-fffff800712c9f4a)
  2369. MODULE_NAME: memory_corruption
  2370.  
  2371. IMAGE_NAME: memory_corruption
  2372.  
  2373. FOLLOWUP_NAME: memory_corruption
  2374. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2375. MEMORY_CORRUPTOR: LARGE
  2376. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2377. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2378. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  2379. TARGET_TIME: 2020-04-15T15:29:45.000Z
  2380. SUITE_MASK: 272
  2381. PRODUCT_TYPE: 1
  2382. USER_LCID: 0
  2383. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  2384. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  2385. Followup: memory_corruption
  2386.  
  2387. ====================== Dump #5: 3RD PARTY DRIVERS ======================
  2388.  
  2389. Jun 03 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  2390. Nov 09 2017 - vbdenum.sys - Citrix ICA Host (Citrix Systems, Inc.)
  2391. Jul 12 2018 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  2392. Aug 08 2018 - ctxusbm.sys - Citrix USB Filter Driver https://www.citrix.com
  2393. Aug 28 2018 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  2394. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  2395. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2396. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  2397. Mar 17 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  2398.  
  2399. ================== Dump #5: 3RD PARTY DRIVERS (FULL) ===================
  2400.  
  2401. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  2402. Image name: RTKVHD64.sys
  2403. Search : https://www.google.com/search?q=RTKVHD64.sys
  2404. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  2405. Timestamp : Fri Jun 3 2016
  2406.  
  2407. Image path: \SystemRoot\System32\drivers\vbdenum.sys
  2408. Image name: vbdenum.sys
  2409. Search : https://www.google.com/search?q=vbdenum.sys
  2410. ADA Info : Citrix ICA Host (Citrix Systems, Inc.)
  2411. Timestamp : Thu Nov 9 2017
  2412.  
  2413. Image path: \SystemRoot\System32\drivers\TeeDriverW8x64.sys
  2414. Image name: TeeDriverW8x64.sys
  2415. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  2416. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  2417. Timestamp : Thu Jul 12 2018
  2418.  
  2419. Image path: \SystemRoot\system32\DRIVERS\ctxusbm.sys
  2420. Image name: ctxusbm.sys
  2421. Search : https://www.google.com/search?q=ctxusbm.sys
  2422. ADA Info : Citrix USB Filter Driver https://www.citrix.com
  2423. Timestamp : Wed Aug 8 2018
  2424.  
  2425. Image path: \SystemRoot\System32\drivers\rt640x64.sys
  2426. Image name: rt640x64.sys
  2427. Search : https://www.google.com/search?q=rt640x64.sys
  2428. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  2429. Timestamp : Tue Aug 28 2018
  2430.  
  2431. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  2432. Image name: nvvad64v.sys
  2433. Search : https://www.google.com/search?q=nvvad64v.sys
  2434. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  2435. Timestamp : Thu Mar 14 2019
  2436.  
  2437. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  2438. Image name: nvvhci.sys
  2439. Search : https://www.google.com/search?q=nvvhci.sys
  2440. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2441. Timestamp : Fri Jan 10 2020
  2442.  
  2443. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  2444. Image name: nvhda64v.sys
  2445. Search : https://www.google.com/search?q=nvhda64v.sys
  2446. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  2447. Timestamp : Wed Feb 19 2020
  2448.  
  2449. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e0a5a1b06de180e3\nvlddmkm.sys
  2450. Image name: nvlddmkm.sys
  2451. Search : https://www.google.com/search?q=nvlddmkm.sys
  2452. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  2453. Timestamp : Tue Mar 17 2020
  2454.  
  2455. ====================== Dump #5: MICROSOFT DRIVERS ======================
  2456.  
  2457. ACPI.sys ACPI Driver for NT (Microsoft)
  2458. acpiex.sys ACPIEx Driver (Microsoft)
  2459. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  2460. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  2461. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  2462. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  2463. ahcache.sys Application Compatibility Cache (Microsoft)
  2464. bam.sys BAM Kernal driver (Microsoft)
  2465. BasicDisplay.sys Basic Display driver (Microsoft)
  2466. BasicRender.sys Basic Render driver (Microsoft)
  2467. Beep.SYS BEEP driver (Microsoft)
  2468. bindflt.sys Windows Bind Filter driver (Microsoft)
  2469. BOOTVID.dll VGA Boot Driver (Microsoft)
  2470. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  2471. cdd.dll Canonical Display Driver (Microsoft)
  2472. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  2473. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  2474. CI.dll Code Integrity Module (Microsoft)
  2475. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  2476. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  2477. CLFS.SYS Common Log File System Driver (Microsoft)
  2478. clipsp.sys CLIP Service (Microsoft)
  2479. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  2480. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  2481. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  2482. condrv.sys Console Driver (Microsoft)
  2483. crashdmp.sys Crash Dump driver (Microsoft)
  2484. csc.sys Windows Client Side Caching driver (Microsoft)
  2485. dfsc.sys DFS Namespace Client Driver (Microsoft)
  2486. disk.sys PnP Disk Driver (Microsoft)
  2487. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  2488. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2489. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2490. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2491. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  2492. dxgmms2.sys DirectX Graphics MMS
  2493. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  2494. fastfat.SYS Fast FAT File System Driver (Microsoft)
  2495. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  2496. fileinfo.sys FileInfo Filter Driver (Microsoft)
  2497. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  2498. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  2499. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  2500. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  2501. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  2502. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  2503. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  2504. HIDCLASS.SYS Hid Class Library (Microsoft)
  2505. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  2506. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  2507. HTTP.sys HTTP Protocol Stack (Microsoft)
  2508. IndirectKmd.sys Indirect displays kernel-mode filter driver
  2509. intelpep.sys Intel Power Engine Plugin (Microsoft)
  2510. intelppm.sys Processor Device Driver (Microsoft)
  2511. iorate.sys I/O rate control Filter (Microsoft)
  2512. kbdclass.sys Keyboard Class Driver (Microsoft)
  2513. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  2514. kd.dll Local Kernal Debugger (Microsoft)
  2515. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  2516. ks.sys Kernal CSA Library (Microsoft)
  2517. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  2518. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  2519. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  2520. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  2521. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  2522. mcupdate_GenuineIntel.dll Intel Microcode Update Library (Microsoft)
  2523. mmcss.sys MMCSS Driver (Microsoft)
  2524. monitor.sys Monitor Driver (Microsoft)
  2525. mouclass.sys Mouse Class Driver (Microsoft)
  2526. mouhid.sys HID Mouse Filter Driver (Microsoft)
  2527. mountmgr.sys Mount Point Manager (Microsoft)
  2528. MpKslDrv.sys Microsoft Anti-malware Protection driver
  2529. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  2530. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  2531. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  2532. Msfs.SYS Mailslot driver (Microsoft)
  2533. msisadrv.sys ISA Driver (Microsoft)
  2534. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  2535. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  2536. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  2537. mssmbios.sys System Management BIOS driver (Microsoft)
  2538. mup.sys Multiple UNC Provider driver (Microsoft)
  2539. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  2540. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  2541. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  2542. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  2543. NDProxy.sys NDIS Proxy driver (Microsoft)
  2544. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  2545. netbios.sys NetBIOS Interface driver (Microsoft)
  2546. netbt.sys MBT Transport driver (Microsoft)
  2547. NETIO.SYS Network I/O Subsystem (Microsoft)
  2548. Npfs.SYS NPFS driver (Microsoft)
  2549. npsvctrig.sys Named pipe service triggers (Microsoft)
  2550. nsiproxy.sys NSI Proxy driver (Microsoft)
  2551. Ntfs.sys NT File System Driver (Microsoft)
  2552. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  2553. ntosext.sys NTOS Extension Host driver (Microsoft)
  2554. Null.SYS NULL Driver (Microsoft)
  2555. pacer.sys QoS Packet Scheduler (Microsoft)
  2556. partmgr.sys Partition driver (Microsoft)
  2557. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  2558. pcw.sys Performance Counter Driver (Microsoft)
  2559. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  2560. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  2561. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  2562. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2563. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  2564. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  2565. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  2566. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  2567. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2568. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2569. rdyboost.sys ReadyBoost Driver (Microsoft)
  2570. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2571. serenum.sys Serial Port Enumerator (Microsoft)
  2572. serial.sys Serial Device Driver
  2573. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2574. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2575. spaceport.sys Storage Spaces driver (Microsoft)
  2576. srv2.sys Smb 2.0 Server driver (Microsoft)
  2577. srvnet.sys Server Network driver (Microsoft)
  2578. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  2579. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2580. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2581. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2582. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2583. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2584. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2585. TDI.SYS TDI Wrapper driver (Microsoft)
  2586. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2587. tm.sys Kernel Transaction Manager driver (Microsoft)
  2588. ucx01000.sys USB Controller Extension (Microsoft)
  2589. UEFI.sys UEFI NT driver (Microsoft)
  2590. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2591. usbaudio.sys USB Audio Class Driver (Microsoft)
  2592. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2593. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2594. UsbHub3.sys USB3 HUB driver (Microsoft)
  2595. USBXHCI.SYS USB XHCI driver (Microsoft)
  2596. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2597. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2598. volmgr.sys Volume Manager Driver (Microsoft)
  2599. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2600. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2601. volume.sys Volume driver (Microsoft)
  2602. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2603. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  2604. watchdog.sys Watchdog driver (Microsoft)
  2605. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2606. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2607. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2608. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2609. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2610. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2611. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2612. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2613. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2614. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2615. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2616. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2617. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2618. winquic.sys QUIC Transport Protocol driver (Microsoft)
  2619. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2620. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2621. Wof.sys Windows Overlay Filter (Microsoft)
  2622. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2623. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  2624.  
  2625. ====================== Dump #5: UNLOADED MODULES =======================
  2626.  
  2627. fffff800`7f6b0000 fffff800`7f6c4000 WdNisDrv.sys
  2628. fffff800`7af00000 fffff800`7af0f000 dump_storpor
  2629. fffff800`7af40000 fffff800`7af6f000 dump_storahc
  2630. fffff800`7af90000 fffff800`7afae000 dump_dumpfve
  2631. fffff800`7b2e0000 fffff800`7b331000 WUDFRd.sys
  2632. fffff800`7ae50000 fffff800`7ae6e000 dam.sys
  2633. fffff800`735b0000 fffff800`735c1000 WdBoot.sys
  2634. fffff800`73bf0000 fffff800`73c00000 hwpolicy.sys
  2635.  
  2636. ====================== Dump #5: BIOS INFORMATION =======================
  2637.  
  2638. [SMBIOS Data Tables v3.0]
  2639. [DMI Version - 0]
  2640. [2.0 Calling Convention - No]
  2641. [Table Size - 4215 bytes]
  2642. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  2643. Vendor American Megatrends Inc.
  2644. BIOS Version 2401
  2645. BIOS Starting Address Segment f000
  2646. BIOS Release Date 07/15/2019
  2647. BIOS ROM Size 1000000
  2648. BIOS Characteristics
  2649. 07: - PCI Supported
  2650. 10: - APM Supported
  2651. 11: - Upgradeable FLASH BIOS
  2652. 12: - BIOS Shadowing Supported
  2653. 15: - CD-Boot Supported
  2654. 16: - Selectable Boot Supported
  2655. 17: - BIOS ROM Socketed
  2656. 19: - EDD Supported
  2657. 23: - 1.2MB Floppy Supported
  2658. 24: - 720KB Floppy Supported
  2659. 25: - 2.88MB Floppy Supported
  2660. 26: - Print Screen Device Supported
  2661. 27: - Keyboard Services Supported
  2662. 28: - Serial Services Supported
  2663. 29: - Printer Services Supported
  2664. 32: - BIOS Vendor Reserved
  2665. BIOS Characteristic Extensions
  2666. 00: - ACPI Supported
  2667. 01: - USB Legacy Supported
  2668. 08: - BIOS Boot Specification Supported
  2669. 10: - Specification Reserved
  2670. 11: - Specification Reserved
  2671. BIOS Major Revision 5
  2672. BIOS Minor Revision 12
  2673. EC Firmware Major Revision 255
  2674. EC Firmware Minor Revision 255
  2675. [System Information (Type 1) - Length 27 - Handle 0001h]
  2676. Manufacturer System manufacturer
  2677. Product Name System Product Name
  2678. Version System Version
  2679. UUID 00000000-0000-0000-0000-000000000000
  2680. Wakeup Type Power Switch
  2681. SKUNumber SKU
  2682. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2683. Manufacturer ASUSTeK COMPUTER INC.
  2684. Product PRIME Z370-P
  2685. Version Rev X.0x
  2686. Feature Flags 09h
  2687. -362039584: - -362039536: - ÷7£ý
  2688. Location Default string
  2689. Chassis Handle 0003h
  2690. Board Type 0ah - Processor/Memory Module
  2691. Number of Child Handles 0
  2692. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2693. Manufacturer Default string
  2694. Chassis Type Desktop
  2695. Version Default string
  2696. Bootup State Safe
  2697. Power Supply State Safe
  2698. Thermal State Safe
  2699. Security Status None
  2700. OEM Defined 0
  2701. Height 0U
  2702. Number of Power Cords 1
  2703. Number of Contained Elements 0
  2704. Contained Element Size 3
  2705. [Onboard Devices Information (Type 10) - Length 6 - Handle 0021h]
  2706. Number of Devices 1
  2707. 01: Type Video [enabled]
  2708. [OEM Strings (Type 11) - Length 5 - Handle 0022h]
  2709. Number of Strings 8
  2710. 1 Default string
  2711. 2 Default string
  2712. 3 COD
  2713. 4 Default string
  2714. 5 FFFFFFFFFFFFF
  2715. 6 FFFFFFFFFFFFF
  2716. 7 FFFFFFFFFFFFF
  2717. 8 Default string
  2718. [System Configuration Options (Type 12) - Length 5 - Handle 0023h]
  2719. [Physical Memory Array (Type 16) - Length 23 - Handle 003eh]
  2720. Location 03h - SystemBoard/Motherboard
  2721. Use 03h - System Memory
  2722. Memory Error Correction 03h - None
  2723. Maximum Capacity 67108864KB
  2724. Number of Memory Devices 4
  2725. [Memory Device (Type 17) - Length 40 - Handle 003fh]
  2726. Physical Memory Array Handle 003eh
  2727. Total Width 0 bits
  2728. Data Width 0 bits
  2729. Form Factor 02h - Unknown
  2730. Device Locator ChannelA-DIMM1
  2731. Bank Locator BANK 0
  2732. Memory Type 02h - Unknown
  2733. Type Detail 0000h -
  2734. Speed 0MHz
  2735. [Memory Device (Type 17) - Length 40 - Handle 0040h]
  2736. Physical Memory Array Handle 003eh
  2737. Total Width 64 bits
  2738. Data Width 64 bits
  2739. Size 8192MB
  2740. Form Factor 09h - DIMM
  2741. Device Locator ChannelA-DIMM2
  2742. Bank Locator BANK 1
  2743. Memory Type 1ah - Specification Reserved
  2744. Type Detail 4080h - Synchronous
  2745. Speed 2400MHz
  2746. Manufacturer Corsair
  2747. Part Number CMK16GX4M2A2400C16
  2748. [Memory Device (Type 17) - Length 40 - Handle 0041h]
  2749. Physical Memory Array Handle 003eh
  2750. Total Width 0 bits
  2751. Data Width 0 bits
  2752. Form Factor 02h - Unknown
  2753. Device Locator ChannelB-DIMM1
  2754. Bank Locator BANK 2
  2755. Memory Type 02h - Unknown
  2756. Type Detail 0000h -
  2757. Speed 0MHz
  2758. [Memory Device (Type 17) - Length 40 - Handle 0042h]
  2759. Physical Memory Array Handle 003eh
  2760. Total Width 64 bits
  2761. Data Width 64 bits
  2762. Size 8192MB
  2763. Form Factor 09h - DIMM
  2764. Device Locator ChannelB-DIMM2
  2765. Bank Locator BANK 3
  2766. Memory Type 1ah - Specification Reserved
  2767. Type Detail 4080h - Synchronous
  2768. Speed 2400MHz
  2769. Manufacturer Corsair
  2770. Part Number CMK16GX4M2A2400C16
  2771. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0043h]
  2772. Starting Address 00000000h
  2773. Ending Address 00ffffffh
  2774. Memory Array Handle 003eh
  2775. Partition Width 02
  2776. [Cache Information (Type 7) - Length 19 - Handle 0044h]
  2777. Socket Designation L1 Cache
  2778. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2779. Maximum Cache Size 0180h - 384K
  2780. Installed Size 0180h - 384K
  2781. Supported SRAM Type 0020h - Synchronous
  2782. Current SRAM Type 0020h - Synchronous
  2783. Cache Speed 0ns
  2784. Error Correction Type ParitySingle-Bit ECC
  2785. System Cache Type Unified
  2786. Associativity 8-way Set-Associative
  2787. [Cache Information (Type 7) - Length 19 - Handle 0045h]
  2788. Socket Designation L2 Cache
  2789. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2790. Maximum Cache Size 0600h - 1536K
  2791. Installed Size 0600h - 1536K
  2792. Supported SRAM Type 0020h - Synchronous
  2793. Current SRAM Type 0020h - Synchronous
  2794. Cache Speed 0ns
  2795. Error Correction Type Multi-Bit ECC
  2796. System Cache Type Unified
  2797. Associativity 4-way Set-Associative
  2798. [Cache Information (Type 7) - Length 19 - Handle 0046h]
  2799. Socket Designation L3 Cache
  2800. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2801. Maximum Cache Size 2400h - 9216K
  2802. Installed Size 2400h - 9216K
  2803. Supported SRAM Type 0020h - Synchronous
  2804. Current SRAM Type 0020h - Synchronous
  2805. Cache Speed 0ns
  2806. Error Correction Type Specification Reserved
  2807. System Cache Type Unified
  2808. Associativity Specification Reserved
  2809. [Processor Information (Type 4) - Length 48 - Handle 0047h]
  2810. Socket Designation LGA1151
  2811. Processor Type Central Processor
  2812. Processor Family cdh - Specification Reserved
  2813. Processor Manufacturer Intel(R) Corporation
  2814. Processor ID ea060900fffbebbf
  2815. Processor Version Intel(R) Core(TM) i5-8600K CPU @ 3.60GHz
  2816. Processor Voltage 8ah - 1.0V
  2817. External Clock 100MHz
  2818. Max Speed 8300MHz
  2819. Current Speed 3600MHz
  2820. Status Enabled Populated
  2821. Processor Upgrade Specification Reserved
  2822. L1 Cache Handle 0044h
  2823. L2 Cache Handle 0045h
  2824. L3 Cache Handle 0046h
  2825. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0048h]
  2826. Starting Address 00000000h
  2827. Ending Address 007fffffh
  2828. Memory Device Handle 0040h
  2829. Mem Array Mapped Adr Handle 0043h
  2830. Interleave Position 01
  2831. Interleave Data Depth 02
  2832. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0049h]
  2833. Starting Address 00800000h
  2834. Ending Address 00ffffffh
  2835. Memory Device Handle 0042h
  2836. Mem Array Mapped Adr Handle 0043h
  2837. Interleave Position 02
  2838. Interleave Data Depth 02
  2839.  
  2840. ========================== Dump #5: Extra #1 ===========================
  2841.  
  2842. 4: kd> !verifier
  2843. Verify Flags Level 0x00000000
  2844. STANDARD FLAGS:
  2845. [X] (0x00000000) Automatic Checks
  2846. [ ] (0x00000001) Special pool
  2847. [ ] (0x00000002) Force IRQL checking
  2848. [ ] (0x00000008) Pool tracking
  2849. [ ] (0x00000010) I/O verification
  2850. [ ] (0x00000020) Deadlock detection
  2851. [ ] (0x00000080) DMA checking
  2852. [ ] (0x00000100) Security checks
  2853. [ ] (0x00000800) Miscellaneous checks
  2854. [ ] (0x00020000) DDI compliance checking
  2855. ADDITIONAL FLAGS:
  2856. [ ] (0x00000004) Randomized low resources simulation
  2857. [ ] (0x00000200) Force pending I/O requests
  2858. [ ] (0x00000400) IRP logging
  2859. [ ] (0x00002000) Invariant MDL checking for stack
  2860. [ ] (0x00004000) Invariant MDL checking for driver
  2861. [ ] (0x00008000) Power framework delay fuzzing
  2862. [ ] (0x00010000) Port/miniport interface checking
  2863. [ ] (0x00040000) Systematic low resources simulation
  2864. [ ] (0x00080000) DDI compliance checking (additional)
  2865. [ ] (0x00200000) NDIS/WIFI verification
  2866. [ ] (0x00800000) Kernel synchronization delay fuzzing
  2867. [ ] (0x01000000) VM switch verification
  2868. [ ] (0x02000000) Code integrity checks
  2869. [X] Indicates flag is enabled
  2870. Summary of All Verifier Statistics
  2871. RaiseIrqls 0x0
  2872. AcquireSpinLocks 0x0
  2873. Synch Executions 0x0
  2874. Trims 0x0
  2875. Pool Allocations Attempted 0x0
  2876. Pool Allocations Succeeded 0x0
  2877. Pool Allocations Succeeded SpecialPool 0x0
  2878. Pool Allocations With NO TAG 0x0
  2879. Pool Allocations Failed 0x0
  2880. Current paged pool allocations 0x0 for 00000000 bytes
  2881. Peak paged pool allocations 0x0 for 00000000 bytes
  2882. Current nonpaged pool allocations 0x0 for 00000000 bytes
  2883. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  2884.  
  2885. ========================== Dump #5: Extra #2 ===========================
  2886.  
  2887. 4: kd> !thread
  2888. THREAD ffff970c3edca080 Cid 1c08.17e4 Teb: 000000b24ce4e000 Win32Thread: ffff970c3de41750 RUNNING on processor 4
  2889. Not impersonating
  2890. GetUlongFromAddress: unable to read from fffff8007162ca14
  2891. Owning Process ffff970c3f5cb480 Image: firefox.exe
  2892. Attached Process N/A Image: N/A
  2893. fffff78000000000: Unable to get shared data
  2894. Wait Start TickCount 20721
  2895. Context Switch Count 5427 IdealProcessor: 4
  2896. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2897. UserTime 00:00:00.000
  2898. KernelTime 00:00:00.000
  2899. Win32 Start Address 0x00007ff9bd83dd30
  2900. Stack Init ffffb38438e0fb90 Current ffffb38438e0f5e0
  2901. Base ffffb38438e10000 Limit ffffb38438e09000 Call 0000000000000000
  2902. Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2903. Child-SP RetAddr : Args to Child : Call Site
  2904. ffffb680`10ddaec8 fffff800`713d41e9 : 00000000`0000007f 00000000`00000008 ffffb680`10ddb010 ffffb384`38e08f90 : nt!KeBugCheckEx
  2905. ffffb680`10ddaed0 fffff800`713cf045 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  2906. ffffb680`10ddb010 fffff800`713d00d0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0x2c5 (TrapFrame @ ffffb680`10ddb010)
  2907. ffffb384`38e08f90 fffff800`712fe279 : d8a7c9c5`d40059b4 cb11a46a`07524221 0039e3dc`d27ddfb3 d1869f77`140059c4 : nt!KiPageFault+0x10 (TrapFrame @ ffffb384`38e08f90)
  2908. ffffb384`38e09120 fffff800`712fe0c0 : d9708f81`47558a01 ffffb384`38e096d0 ffffb384`38e091d0 f9a7c321`d85f70cc : nt!RtlInitializeExtendedContext2+0x6d
  2909. ffffb384`38e09170 fffff800`712fe804 : b226c4ec`f5093ba2 000a8ce5`9406e2b4 38e6f350`35005a14 8fad9403`00000001 : nt!RtlInitializeExtendedContext+0x38
  2910. ffffb384`38e091a0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e09a30 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2911. ffffb384`38e09850 fffff800`713d0505 : 00035948`8730ff8f b4578cb6`17005fc4 00000000`0010001f 006eaede`9861243e : nt!KiExceptionDispatch+0x11d
  2912. ffffb384`38e09a30 fffff800`712fe279 : 86b3a0fa`7b70422e 008fcd82`5e03c3ff a6d6173a`b10060d4 63dd5e88`a6da16d8 : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e09a30)
  2913. ffffb384`38e09bc0 fffff800`712fe0c0 : 00a4ded8`e6b7d3ff ffffb384`38e0a170 ffffb384`38e09c70 00ef7627`ab68258b : nt!RtlInitializeExtendedContext2+0x6d
  2914. ffffb384`38e09c10 fffff800`712fe804 : 003c5ec1`ebb08c37 e5b0351b`da006124 93259244`23318711 00482207`00000001 : nt!RtlInitializeExtendedContext+0x38
  2915. ffffb384`38e09c40 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0a4d0 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2916. ffffb384`38e0a2f0 fffff800`713d0505 : 001f9a82`3b0e60dc dc9b2376`35005184 00000000`0010001f 00802fb8`bff55c6c : nt!KiExceptionDispatch+0x11d
  2917. ffffb384`38e0a4d0 fffff800`712fe279 : f9efbca5`9178e540 0077f524`16184122 b5c63b8f`39005294 b304f321`5927065a : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e0a4d0)
  2918. ffffb384`38e0a660 fffff800`712fe0c0 : 004b1938`2eee02ea ffffb384`38e0ac10 ffffb384`38e0a710 00453e12`a73cce32 : nt!RtlInitializeExtendedContext2+0x6d
  2919. ffffb384`38e0a6b0 fffff800`712fe804 : 004b5dc3`97a4e9f7 b87d1ab6`460052e4 6be0d936`ad3d0ac1 002ecac1`00000001 : nt!RtlInitializeExtendedContext+0x38
  2920. ffffb384`38e0a6e0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0af70 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2921. ffffb384`38e0ad90 fffff800`713d0505 : 88267535`15005894 3127e033`6a965deb 00000000`0010001f 221c7d15`330058a4 : nt!KiExceptionDispatch+0x11d
  2922. ffffb384`38e0af70 fffff800`712fe279 : b4c62d81`a1d3c810 00cae36f`50e0536f 0ee8fce2`a0004454 653f7da4`a3c79180 : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e0af70)
  2923. ffffb384`38e0b100 fffff800`712fe0c0 : 0045704b`1dbc9aa5 ffffb384`38e0b6b0 ffffb384`38e0b1b0 0075894e`5064419f : nt!RtlInitializeExtendedContext2+0x6d
  2924. ffffb384`38e0b150 fffff800`712fe804 : 005dd30a`6147664e f2552233`210044a4 5329da00`14b461a8 00ee874f`00000001 : nt!RtlInitializeExtendedContext+0x38
  2925. ffffb384`38e0b180 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0ba10 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2926. ffffb384`38e0b830 fffff800`713d0505 : fa9b3f07`12004a54 289926e6`aeab8775 00000000`0010001f 6c5c0d22`da004a64 : nt!KiExceptionDispatch+0x11d
  2927. ffffb384`38e0ba10 fffff800`712fe279 : 00045fa9`072aaf45 b9473bb0`32004b64 2370e3f4`a34ecf0d 00c0bb68`00deb511 : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e0ba10)
  2928. ffffb384`38e0bba0 fffff800`712fe0c0 : 23af658a`45004b94 ffffb384`38e0c150 ffffb384`38e0bc50 fd569131`51004ba4 : nt!RtlInitializeExtendedContext2+0x6d
  2929. ffffb384`38e0bbf0 fffff800`712fe804 : a2fff96a`d7004bb4 63af520e`6f8428b7 002b2cf3`a83b965d 730f6895`00000001 : nt!RtlInitializeExtendedContext+0x38
  2930. ffffb384`38e0bc20 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0c4b0 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2931. ffffb384`38e0c2d0 fffff800`713d0505 : 1451bd42`e0003c14 27e6698d`e542127f 00000000`0010001f e4407939`65003c24 : nt!KiExceptionDispatch+0x11d
  2932. ffffb384`38e0c4b0 fffff800`712fe279 : 00b689fc`3c66d765 57123972`25003d24 dd22e474`ccc1e7a7 0036ee7a`6750ab9e : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e0c4b0)
  2933. ffffb384`38e0c640 fffff800`712fe0c0 : 8f4287bc`d6003d54 ffffb384`38e0cbf0 ffffb384`38e0c6f0 6799a0ba`df003d64 : nt!RtlInitializeExtendedContext2+0x6d
  2934. ffffb384`38e0c690 fffff800`712fe804 : 41777186`62003d74 7d5b0025`57c9a412 006aecee`67466779 f992a991`00000001 : nt!RtlInitializeExtendedContext+0x38
  2935. ffffb384`38e0c6c0 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0cf50 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2936. ffffb384`38e0cd70 fffff800`713d0505 : c308f23b`62dff93c 00c7e369`7fdf81c6 00000000`0010001f d79d2676`04a006e6 : nt!KiExceptionDispatch+0x11d
  2937. ffffb384`38e0cf50 fffff800`712fe279 : e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e0cf50)
  2938. ffffb384`38e0d0e0 fffff800`712fe0c0 : e5e5e5e5`e5e5e5e5 ffffb384`38e0d690 ffffb384`38e0d190 e5e5e5e5`e5e5e5e5 : nt!RtlInitializeExtendedContext2+0x6d
  2939. ffffb384`38e0d130 fffff800`712fe804 : e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`e5e5e5e5 e5e5e5e5`00000001 : nt!RtlInitializeExtendedContext+0x38
  2940. ffffb384`38e0d160 fffff800`713d431d : ffff9249`24924000 ffffb384`38e0d9f0 ffff8000`00000000 00000000`00000008 : nt!KiDispatchException+0x104
  2941. ffffb384`38e0d810 fffff800`713d0505 : 00000000`00000000 ffff970c`3d3a7a00 00000000`0010001f 000000a0`41946350 : nt!KiExceptionDispatch+0x11d
  2942. ffffb384`38e0d9f0 fffff800`712fe279 : ffff970c`38bc1000 ffff970c`38bc1000 00000000`00000000 ffff970c`38bc1000 : nt!KiPageFault+0x445 (TrapFrame @ ffffb384`38e0d9f0)
  2943. ffffb384`38e0db80 fffff800`712fe0c0 : ffff970c`35ef7060 ffffb384`38e0e130 ffffb384`38e0dc30 ffff970c`35ef7060 : nt!RtlInitializeExtendedContext2+0x6d
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!