API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 11th, 2020
80
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 240.76 KB | None | 0 0
raw download clone embed print report
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 10 minutes and 01 seconds
  5.  
  6. ================================= BIOS =================================
  7. VENDOR: American Megatrends Inc.
  8. VERSION: P4.20
  9. DATE: 10/31/2019
  10.  
  11. ============================= MOTHERBOARD ==============================
  12. MANUFACTURER: ASRock
  13. PRODUCT: Z370 Extreme4
  14.  
  15. ================================= RAM ==================================
  16. Size Speed Manufacturer Part No.
  17. -------------- -------------- ------------------- ----------------------
  18. 0MHz
  19. 8192MB 3200MHz 029E CMK16GX4M2B3200C16
  20. 0MHz
  21. 8192MB 3200MHz 029E CMK16GX4M2B3200C16
  22.  
  23. ================================= CPU ==================================
  24. Processor Version: Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  25. COUNT: c
  26. MHZ: 3696
  27. VENDOR: GenuineIntel
  28. FAMILY: 6
  29. MODEL: 9e
  30. STEPPING: a
  31. MICROCODE: 6,9e,a,0 (F,M,S,R) SIG: C6'00000000 (cache) C6'00000000 (init)
  32.  
  33. ================================== OS ==================================
  34. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  35. BUILD_VERSION: 10.0.19041.330 (WinBuild.160101.0800)
  36. BUILD: 19041
  37. SERVICEPACK: 330
  38. PLATFORM_TYPE: x64
  39. NAME: Windows 10
  40. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  41. BUILD_TIMESTAMP: unknown_date
  42. BUILDDATESTAMP: 160101.0800
  43. BUILDLAB: WinBuild
  44. BUILDOSVER: 10.0.19041.330
  45.  
  46. =============================== DEBUGGER ===============================
  47. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  48. Copyright (c) Microsoft Corporation. All rights reserved.
  49.  
  50. =============================== COMMENTS ===============================
  51. * Information gathered from different dump files may be different. If
  52. Windows updates between two dump files, two or more OS versions may
  53. be shown above.
  54. * If the user updates the BIOS between dump files, two or more versions
  55. and dates may be shown above.
  56. * More RAM information can be found below in a full BIOS section.
  57.  
  58. ========================================================================
  59. ======================= Dump #1: ANALYZE VERBOSE =======================
  60. ======================= File: 071120-4421-01.dmp =======================
  61. ========================================================================
  62.  
  63. Mini Kernel Dump File: Only registers and stack trace are available
  64. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  65. Kernel base = 0xfffff801`30e00000 PsLoadedModuleList = 0xfffff801`31a2a2b0
  66. Debug session time: Sat Jul 11 00:24:48.274 2020 (UTC - 4:00)
  67. System Uptime: 1 days 0:08:23.941
  68.  
  69. BugCheck 139, {3, ffff8a830dda6a90, ffff8a830dda69e8, 0}
  70. Probably caused by : dxgmms2.sys ( dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+117 )
  71. Followup: MachineOwner
  72.  
  73. KERNEL_SECURITY_CHECK_FAILURE (139)
  74. A kernel component has corrupted a critical data structure. The corruption
  75. could potentially allow a malicious user to gain control of this machine.
  76.  
  77. Arguments:
  78. Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
  79. Arg2: ffff8a830dda6a90, Address of the trap frame for the exception that caused the bugcheck
  80. Arg3: ffff8a830dda69e8, Address of the exception record for the exception that caused the bugcheck
  81. Arg4: 0000000000000000, Reserved
  82.  
  83. Debugging Details:
  84. DUMP_CLASS: 1
  85. DUMP_QUALIFIER: 400
  86. DUMP_TYPE: 2
  87. DUMP_FILE_ATTRIBUTES: 0x8
  88. Kernel Generated Triage Dump
  89. TRAP_FRAME: ffff8a830dda6a90 -- (.trap 0xffff8a830dda6a90)
  90. NOTE: The trap frame does not contain all registers.
  91. Some register values may be zeroed or incorrect.
  92. rax=ffffbe0fc8412ca8 rbx=0000000000000000 rcx=0000000000000003
  93. rdx=ffffbe0fca219ec8 rsi=0000000000000000 rdi=0000000000000000
  94. rip=fffff801478633d3 rsp=ffff8a830dda6c20 rbp=0000000000000000
  95. r8=ffffad8239fd38a8 r9=ffffbe0fc407af50 r10=0000000000000000
  96. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  97. r14=0000000000000000 r15=0000000000000000
  98. iopl=0 nv up ei ng nz na po cy
  99. dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+0x117:
  100. fffff801`478633d3 cd29 int 29h
  101. Resetting default scope
  102. EXCEPTION_RECORD: ffff8a830dda69e8 -- (.exr 0xffff8a830dda69e8)
  103. ExceptionAddress: fffff801478633d3 (dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+0x0000000000000117)
  104. ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  105. ExceptionFlags: 00000001
  106. NumberParameters: 1
  107. Parameter[0]: 0000000000000003
  108. Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
  109. CUSTOMER_CRASH_COUNT: 1
  110. DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
  111. BUGCHECK_STR: 0x139
  112.  
  113. PROCESS_NAME: System
  114.  
  115. CURRENT_IRQL: 0
  116. ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  117. EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  118. EXCEPTION_CODE_STR: c0000409
  119. EXCEPTION_PARAMETER1: 0000000000000003
  120. LAST_CONTROL_TRANSFER: from fffff801311ef929 to fffff801311dda20
  121. STACK_TEXT:
  122. ffff8a83`0dda6768 fffff801`311ef929 : 00000000`00000139 00000000`00000003 ffff8a83`0dda6a90 ffff8a83`0dda69e8 : nt!KeBugCheckEx
  123. ffff8a83`0dda6770 fffff801`311efd50 : ffff8160`e9ce728f 00000000`00000004 ffff8a83`0dda69c8 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  124. ffff8a83`0dda68b0 fffff801`311ee0e3 : ffffad82`392264f0 00000000`00000002 ffff8a83`00000007 ffff8a83`0dda6af0 : nt!KiFastFailDispatch+0xd0
  125. ffff8a83`0dda6a90 fffff801`478633d3 : ffffbe0f`c8412b30 00000000`00000000 ffffbe0f`c8412b30 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
  126. ffff8a83`0dda6c20 fffff801`478643c0 : ffffbe0f`c8412b30 ffffad82`3b1c9000 ffffad82`3d39f010 00000000`dcf6e000 : dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+0x117
  127. ffff8a83`0dda6c50 fffff801`47860c29 : ffffad82`3d39f010 ffffad82`3b1c9000 ffffbe0f`cac8a500 ffffbe0f`c8412b30 : dxgmms2!VIDMM_GLOBAL::NotifyAllocationEviction+0x98
  128. ffff8a83`0dda6c80 fffff801`47860681 : ffffbe0f`eb20cf60 00000000`00000000 ffffbe0f`cac8a5b0 00000000`0000000d : dxgmms2!VIDMM_GLOBAL::EvictOneAllocation+0x59
  129. ffff8a83`0dda6cd0 fffff801`4785ff50 : ffffbe0f`eb20cf60 00000000`dcf9a000 00000000`00000002 00000000`0025bcd0 : dxgmms2!VIDMM_PAGE_TABLE::EvictPageTable+0x81
  130. ffff8a83`0dda6d10 fffff801`47865b02 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`0025bc00 : dxgmms2!VIDMM_PAGE_TABLE::DestroyPageTable+0x30
  131. ffff8a83`0dda6d90 fffff801`478967c2 : 00000000`00000000 ffffbe0f`cac8a5b0 00000000`00000001 00000000`00000000 : dxgmms2!VIDMM_PAGE_DIRECTORY::CommitVirtualAddressRange+0xb42
  132. ffff8a83`0dda6f00 fffff801`47864f40 : ffffad82`39fd38a8 ffffbe0f`cac8a5b0 ffffad82`33c45e00 00000000`00000000 : dxgmms2!VIDMM_PAGE_DIRECTORY::CommitVirtualAddressRange+0x31802
  133. ffff8a83`0dda7070 fffff801`47868369 : ffffad82`336d7000 ffffad82`3b0f3280 00000000`00000000 00000000`00000000 : dxgmms2!CVirtualAddressAllocator::UncommitVirtualAddressRange+0xf4
  134. ffff8a83`0dda7180 fffff801`47871008 : 00000000`01001002 fffff801`47801ee7 ffffbe0f`c97ed848 fffff801`00000003 : dxgmms2!VIDMM_GLOBAL::MakeOneVirtualAddressRangeNotResident+0x165
  135. ffff8a83`0dda7610 fffff801`4787209b : ffffbe0f`c969fd50 ffff8a83`0dda7700 ffffbe0f`c969fe70 ffffad82`39b62dd0 : dxgmms2!VIDMM_GLOBAL::MakeVirtualAddressRangeNotResident+0xc0
  136. ffff8a83`0dda7670 fffff801`4786e388 : ffffbe0f`c97ed810 ffff8a83`0dda77c0 ffffad82`3b1c9000 00000000`00000000 : dxgmms2!VIDMM_MEMORY_SEGMENT::EvictResource+0x23b
  137. ffff8a83`0dda76c0 fffff801`478879e8 : ffffad82`3b1c9000 ffffad82`3b1d2c10 ffffad82`3b1c9000 ffffad82`3b1c9000 : dxgmms2!VIDMM_GLOBAL::ProcessDeferredCommand+0x8f8
  138. ffff8a83`0dda7900 fffff801`47891b89 : ffffbe0f`bffbf490 ffffad82`3b0f3200 00000000`00000000 00000000`02821d00 : dxgmms2!VIDMM_WORKER_THREAD::Run+0xb78
  139. ffff8a83`0dda7ae0 fffff801`31146715 : ffffad82`3b0f3280 fffff801`47891b80 ffffbe0f`bffbf490 000fa4ef`bd9bbfff : dxgmms2!VidMmWorkerThreadProc+0x9
  140. ffff8a83`0dda7b10 fffff801`311e5078 : ffffd401`100f6180 ffffad82`3b0f3280 fffff801`311466c0 004d005c`00730070 : nt!PspSystemThreadStartup+0x55
  141. ffff8a83`0dda7b60 00000000`00000000 : ffff8a83`0dda8000 ffff8a83`0dda1000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  142. STACK_COMMAND: kb
  143. THREAD_SHA1_HASH_MOD_FUNC: c2717c3ba2b4d45c1594bee98f05014860a4b53b
  144. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: bb24661e86bf9ff690401ebb13207b9e8819099e
  145. THREAD_SHA1_HASH_MOD: a2d08543f6bac7a0719ac5a57897ce755fbdd2ef
  146. FOLLOWUP_IP:
  147. dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+117
  148. fffff801`478633d3 cd29 int 29h
  149. FAULT_INSTR_CODE: cccc29cd
  150. SYMBOL_STACK_INDEX: 4
  151. SYMBOL_NAME: dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+117
  152. FOLLOWUP_NAME: MachineOwner
  153. MODULE_NAME: dxgmms2
  154.  
  155. IMAGE_NAME: dxgmms2.sys
  156.  
  157. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  158. IMAGE_VERSION: 10.0.19041.207
  159. BUCKET_ID_FUNC_OFFSET: 117
  160. FAILURE_BUCKET_ID: 0x139_3_dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction
  161. BUCKET_ID: 0x139_3_dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction
  162. PRIMARY_PROBLEM_CLASS: 0x139_3_dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction
  163. TARGET_TIME: 2020-07-11T04:24:48.000Z
  164. SUITE_MASK: 784
  165. PRODUCT_TYPE: 1
  166. USER_LCID: 0
  167. FAILURE_ID_HASH_STRING: km:0x139_3_dxgmms2!vidmm_segment::markresourcesforeviction
  168. FAILURE_ID_HASH: {6d4aa933-0df0-13cc-0e2a-045a4d7f377d}
  169. Followup: MachineOwner
  170.  
  171. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  172.  
  173. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  174. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  175. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  176. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  177. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  178. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  179. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  180.  
  181. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  182.  
  183. Image name: wdcsam64.sys
  184. Search : https://www.google.com/search?q=wdcsam64.sys
  185. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  186. Timestamp : Fri Oct 9 2015
  187.  
  188. Image name: imaucxhpal.sys
  189. Search : https://www.google.com/search?q=imaucxhpal.sys
  190. ADA Info : MA-USB (UCX) HPAL driver
  191. Timestamp : Mon Jan 21 2019
  192.  
  193. Image name: iwigig.sys
  194. Search : https://www.google.com/search?q=iwigig.sys
  195. ADA Info : WiGig MAC driver (Intel)
  196. Timestamp : Mon Jan 21 2019
  197.  
  198. Image name: TeeDriverW8x64.sys
  199. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  200. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  201. Timestamp : Thu Apr 4 2019
  202.  
  203. Image name: e1d68x64.sys
  204. Search : https://www.google.com/search?q=e1d68x64.sys
  205. ADA Info : Intel(R) Gigabit Adapter driver
  206. Timestamp : Tue May 7 2019
  207.  
  208. Image name: nvhda64v.sys
  209. Search : https://www.google.com/search?q=nvhda64v.sys
  210. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  211. Timestamp : Tue Jun 9 2020
  212.  
  213. Image name: nvlddmkm.sys
  214. Search : https://www.google.com/search?q=nvlddmkm.sys
  215. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  216. Timestamp : Sun Jun 21 2020
  217.  
  218. ====================== Dump #1: MICROSOFT DRIVERS ======================
  219.  
  220. ACPI.sys ACPI Driver for NT (Microsoft)
  221. acpiex.sys ACPIEx Driver (Microsoft)
  222. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  223. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  224. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  225. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  226. ahcache.sys Application Compatibility Cache (Microsoft)
  227. bam.sys BAM Kernal driver (Microsoft)
  228. BasicDisplay.sys Basic Display driver (Microsoft)
  229. BasicRender.sys Basic Render driver (Microsoft)
  230. Beep.SYS BEEP driver (Microsoft)
  231. bindflt.sys Windows Bind Filter driver (Microsoft)
  232. BOOTVID.dll VGA Boot Driver (Microsoft)
  233. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  234. cdd.dll Canonical Display Driver (Microsoft)
  235. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  236. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  237. CI.dll Code Integrity Module (Microsoft)
  238. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  239. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  240. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  241. CLFS.SYS Common Log File System Driver (Microsoft)
  242. clipsp.sys CLIP Service (Microsoft)
  243. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  244. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  245. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  246. condrv.sys Console Driver (Microsoft)
  247. crashdmp.sys Crash Dump driver (Microsoft)
  248. dfsc.sys DFS Namespace Client Driver (Microsoft)
  249. disk.sys PnP Disk Driver (Microsoft)
  250. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  251. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  252. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  253. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  254. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  255. dxgmms2.sys DirectX Graphics MMS
  256. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  257. fastfat.SYS Fast FAT File System Driver (Microsoft)
  258. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  259. fileinfo.sys FileInfo Filter Driver (Microsoft)
  260. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  261. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  262. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  263. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  264. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  265. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  266. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  267. HdAudio.sys High Definition Audio Function driver (Microsoft)
  268. HIDCLASS.SYS Hid Class Library (Microsoft)
  269. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  270. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  271. HTTP.sys HTTP Protocol Stack (Microsoft)
  272. intelpep.sys Intel Power Engine Plugin (Microsoft)
  273. intelppm.sys Processor Device Driver (Microsoft)
  274. IntelTA.sys Intel Telemetry Driver
  275. iorate.sys I/O rate control Filter (Microsoft)
  276. kbdclass.sys Keyboard Class Driver (Microsoft)
  277. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  278. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  279. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  280. ks.sys Kernal CSA Library (Microsoft)
  281. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  282. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  283. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  284. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  285. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  286. mcupdate.dll Media Center Update (Microsoft)
  287. mmcss.sys MMCSS Driver (Microsoft)
  288. monitor.sys Monitor Driver (Microsoft)
  289. mouclass.sys Mouse Class Driver (Microsoft)
  290. mouhid.sys HID Mouse Filter Driver (Microsoft)
  291. mountmgr.sys Mount Point Manager (Microsoft)
  292. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  293. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  294. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  295. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  296. Msfs.SYS Mailslot driver (Microsoft)
  297. msisadrv.sys ISA Driver (Microsoft)
  298. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  299. msquic.sys Windows QUIC Driver
  300. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  301. mssmbios.sys System Management BIOS driver (Microsoft)
  302. mup.sys Multiple UNC Provider driver (Microsoft)
  303. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  304. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  305. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  306. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  307. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  308. NDProxy.sys NDIS Proxy driver (Microsoft)
  309. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  310. netbios.sys NetBIOS Interface driver (Microsoft)
  311. netbt.sys MBT Transport driver (Microsoft)
  312. NETIO.SYS Network I/O Subsystem (Microsoft)
  313. Npfs.SYS NPFS driver (Microsoft)
  314. npsvctrig.sys Named pipe service triggers (Microsoft)
  315. nsiproxy.sys NSI Proxy driver (Microsoft)
  316. Ntfs.sys NT File System Driver (Microsoft)
  317. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  318. ntosext.sys NTOS Extension Host driver (Microsoft)
  319. Null.SYS NULL Driver (Microsoft)
  320. pacer.sys QoS Packet Scheduler (Microsoft)
  321. partmgr.sys Partition driver (Microsoft)
  322. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  323. pcw.sys Performance Counter Driver (Microsoft)
  324. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  325. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  326. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  327. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  328. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  329. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  330. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  331. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  332. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  333. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  334. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  335. rdyboost.sys ReadyBoost Driver (Microsoft)
  336. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  337. serenum.sys Serial Port Enumerator (Microsoft)
  338. serial.sys Serial Device Driver
  339. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  340. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  341. spaceport.sys Storage Spaces driver (Microsoft)
  342. srv2.sys Smb 2.0 Server driver (Microsoft)
  343. srvnet.sys Server Network driver (Microsoft)
  344. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  345. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  346. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  347. storqosflt.sys Storage QoS Filter driver (Microsoft)
  348. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  349. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  350. tcpip.sys TCP/IP Protocol driver (Microsoft)
  351. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  352. TDI.SYS TDI Wrapper driver (Microsoft)
  353. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  354. tm.sys Kernel Transaction Manager driver (Microsoft)
  355. ucx01000.sys USB Controller Extension (Microsoft)
  356. udfs.sys UDF File System driver (Microsoft)
  357. UEFI.sys UEFI NT driver (Microsoft)
  358. umbus.sys User-Mode Bus Enumerator (Microsoft)
  359. usbaudio.sys USB Audio Class Driver (Microsoft)
  360. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  361. USBD.SYS Universal Serial Bus Driver (Microsoft)
  362. UsbHub3.sys USB3 HUB driver (Microsoft)
  363. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  364. USBXHCI.SYS USB XHCI driver (Microsoft)
  365. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  366. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  367. volmgr.sys Volume Manager Driver (Microsoft)
  368. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  369. volsnap.sys Volume Shadow Copy driver (Microsoft)
  370. volume.sys Volume driver (Microsoft)
  371. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  372. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  373. watchdog.sys Watchdog driver (Microsoft)
  374. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  375. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  376. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  377. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  378. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  379. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  380. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  381. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  382. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  383. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  384. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  385. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  386. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  387. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  388. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  389. Wof.sys Windows Overlay Filter (Microsoft)
  390. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  391. WppRecorder.sys WPP Trace Recorder (Microsoft)
  392. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  393.  
  394. ====================== Dump #1: UNLOADED MODULES =======================
  395.  
  396. fffff801`483b0000 fffff801`483bf000 hiber_storpo
  397. fffff801`483c0000 fffff801`483f3000 hiber_storah
  398. fffff801`48400000 fffff801`4841e000 hiber_dumpfv
  399. fffff801`48340000 fffff801`4834f000 hiber_storpo
  400. fffff801`48350000 fffff801`48383000 hiber_storah
  401. fffff801`48390000 fffff801`483ae000 hiber_dumpfv
  402. fffff801`47380000 fffff801`4738f000 dump_storpor
  403. fffff801`46c00000 fffff801`46c33000 dump_storahc
  404. fffff801`46c60000 fffff801`46c7e000 dump_dumpfve
  405. fffff801`49530000 fffff801`49585000 WUDFRd.sys
  406. fffff801`475f0000 fffff801`4760c000 dam.sys
  407. fffff801`33600000 fffff801`33611000 WdBoot.sys
  408. fffff801`346b0000 fffff801`346c0000 hwpolicy.sys
  409.  
  410. ====================== Dump #1: BIOS INFORMATION =======================
  411.  
  412. [SMBIOS Data Tables v3.1]
  413. [DMI Version - 0]
  414. [2.0 Calling Convention - No]
  415. [Table Size - 2808 bytes]
  416. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  417. Vendor American Megatrends Inc.
  418. BIOS Version P4.20
  419. BIOS Starting Address Segment f000
  420. BIOS Release Date 10/31/2019
  421. BIOS ROM Size 1000000
  422. BIOS Characteristics
  423. 07: - PCI Supported
  424. 11: - Upgradeable FLASH BIOS
  425. 12: - BIOS Shadowing Supported
  426. 15: - CD-Boot Supported
  427. 16: - Selectable Boot Supported
  428. 17: - BIOS ROM Socketed
  429. 19: - EDD Supported
  430. 23: - 1.2MB Floppy Supported
  431. 24: - 720KB Floppy Supported
  432. 25: - 2.88MB Floppy Supported
  433. 26: - Print Screen Device Supported
  434. 27: - Keyboard Services Supported
  435. 28: - Serial Services Supported
  436. 29: - Printer Services Supported
  437. 32: - BIOS Vendor Reserved
  438. BIOS Characteristic Extensions
  439. 00: - ACPI Supported
  440. 01: - USB Legacy Supported
  441. 08: - BIOS Boot Specification Supported
  442. 10: - Specification Reserved
  443. 11: - Specification Reserved
  444. BIOS Major Revision 5
  445. BIOS Minor Revision 12
  446. EC Firmware Major Revision 255
  447. EC Firmware Minor Revision 255
  448. [System Information (Type 1) - Length 27 - Handle 0001h]
  449. UUID 00000000-0000-0000-0000-000000000000
  450. Wakeup Type Power Switch
  451. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  452. Manufacturer ASRock
  453. Product Z370 Extreme4
  454. Version
  455. Feature Flags 09h
  456. -1660307744: - -1660307696: - ÷7?Öý
  457. Location
  458. Chassis Handle 0003h
  459. Board Type 0ah - Processor/Memory Module
  460. Number of Child Handles 0
  461. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  462. Chassis Type Desktop
  463. Bootup State Safe
  464. Power Supply State Safe
  465. Thermal State Safe
  466. Security Status None
  467. OEM Defined 0
  468. Height 0U
  469. Number of Power Cords 1
  470. Number of Contained Elements 0
  471. Contained Element Size 3
  472. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  473. Number of Strings 1
  474. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  475. Location 03h - SystemBoard/Motherboard
  476. Use 03h - System Memory
  477. Memory Error Correction 03h - None
  478. Maximum Capacity 67108864KB
  479. Number of Memory Devices 4
  480. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  481. Physical Memory Array Handle 0010h
  482. Total Width 0 bits
  483. Data Width 0 bits
  484. Form Factor 09h - DIMM
  485. Device Locator ChannelA-DIMM0
  486. Bank Locator BANK 0
  487. Memory Type 02h - Unknown
  488. Type Detail 0000h -
  489. Speed 0MHz
  490. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  491. Physical Memory Array Handle 0010h
  492. Total Width 64 bits
  493. Data Width 64 bits
  494. Size 8192MB
  495. Form Factor 09h - DIMM
  496. Device Locator ChannelA-DIMM1
  497. Bank Locator BANK 1
  498. Memory Type 1ah - Specification Reserved
  499. Type Detail 4080h - Synchronous
  500. Speed 3200MHz
  501. Manufacturer 029E
  502. Part Number CMK16GX4M2B3200C16
  503. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  504. Physical Memory Array Handle 0010h
  505. Total Width 0 bits
  506. Data Width 0 bits
  507. Form Factor 09h - DIMM
  508. Device Locator ChannelB-DIMM0
  509. Bank Locator BANK 2
  510. Memory Type 02h - Unknown
  511. Type Detail 0000h -
  512. Speed 0MHz
  513. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  514. Physical Memory Array Handle 0010h
  515. Total Width 64 bits
  516. Data Width 64 bits
  517. Size 8192MB
  518. Form Factor 09h - DIMM
  519. Device Locator ChannelB-DIMM1
  520. Bank Locator BANK 3
  521. Memory Type 1ah - Specification Reserved
  522. Type Detail 4080h - Synchronous
  523. Speed 3200MHz
  524. Manufacturer 029E
  525. Part Number CMK16GX4M2B3200C16
  526. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  527. Starting Address 00000000h
  528. Ending Address 00ffffffh
  529. Memory Array Handle 0010h
  530. Partition Width 02
  531. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  532. Socket Designation L1 Cache
  533. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  534. Maximum Cache Size 0180h - 384K
  535. Installed Size 0180h - 384K
  536. Supported SRAM Type 0020h - Synchronous
  537. Current SRAM Type 0020h - Synchronous
  538. Cache Speed 0ns
  539. Error Correction Type ParitySingle-Bit ECC
  540. System Cache Type Unified
  541. Associativity 8-way Set-Associative
  542. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  543. Socket Designation L2 Cache
  544. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  545. Maximum Cache Size 0600h - 1536K
  546. Installed Size 0600h - 1536K
  547. Supported SRAM Type 0020h - Synchronous
  548. Current SRAM Type 0020h - Synchronous
  549. Cache Speed 0ns
  550. Error Correction Type Multi-Bit ECC
  551. System Cache Type Unified
  552. Associativity 4-way Set-Associative
  553. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  554. Socket Designation L3 Cache
  555. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  556. Maximum Cache Size 3000h - 12288K
  557. Installed Size 3000h - 12288K
  558. Supported SRAM Type 0020h - Synchronous
  559. Current SRAM Type 0020h - Synchronous
  560. Cache Speed 0ns
  561. Error Correction Type Specification Reserved
  562. System Cache Type Unified
  563. Associativity 16-way Set-Associative
  564. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  565. Socket Designation CPUSocket
  566. Processor Type Central Processor
  567. Processor Family c6h - Specification Reserved
  568. Processor Manufacturer Intel(R) Corporation
  569. Processor ID ea060900fffbebbf
  570. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  571. Processor Voltage 8ah - 1.0V
  572. External Clock 100MHz
  573. Max Speed 8300MHz
  574. Current Speed 3700MHz
  575. Status Enabled Populated
  576. Processor Upgrade Specification Reserved
  577. L1 Cache Handle 0016h
  578. L2 Cache Handle 0017h
  579. L3 Cache Handle 0018h
  580. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  581. Starting Address 00000000h
  582. Ending Address 007fffffh
  583. Memory Device Handle 0012h
  584. Mem Array Mapped Adr Handle 0015h
  585. Partition Row Position 01
  586. Interleave Position 01
  587. Interleave Data Depth 02
  588. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  589. Starting Address 00800000h
  590. Ending Address 00ffffffh
  591. Memory Device Handle 0014h
  592. Mem Array Mapped Adr Handle 0015h
  593. Partition Row Position 01
  594. Interleave Position 02
  595. Interleave Data Depth 02
  596.  
  597. ========================== Dump #1: Extra #1 ===========================
  598.  
  599. 0: kd> !verifier
  600. fffff80131a2a6c0: Unable to get verifier list.
  601.  
  602. ========================== Dump #1: Extra #2 ===========================
  603.  
  604. 0: kd> !thread
  605. THREAD ffffad823b0f3280 Cid 0004.02e8 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 0
  606. Not impersonating
  607. GetUlongFromAddress: unable to read from fffff80131a1143c
  608. Owning Process ffffad823349c040 Image: System
  609. Attached Process N/A Image: N/A
  610. fffff78000000000: Unable to get shared data
  611. Wait Start TickCount 5561852
  612. Context Switch Count 2501996 IdealProcessor: 8
  613. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  614. UserTime 00:00:00.000
  615. KernelTime 00:00:00.000
  616. Win32 Start Address dxgmms2!VidMmWorkerThreadProc (0xfffff80147891b80)
  617. Stack Init ffff8a830dda7b90 Current ffff8a830dda7520
  618. Base ffff8a830dda8000 Limit ffff8a830dda1000 Call 0000000000000000
  619. Priority 15 BasePriority 15 PriorityDecrement 0 IoPriority 2 PagePriority 5
  620. Child-SP RetAddr : Args to Child : Call Site
  621. ffff8a83`0dda6768 fffff801`311ef929 : 00000000`00000139 00000000`00000003 ffff8a83`0dda6a90 ffff8a83`0dda69e8 : nt!KeBugCheckEx
  622. ffff8a83`0dda6770 fffff801`311efd50 : ffff8160`e9ce728f 00000000`00000004 ffff8a83`0dda69c8 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  623. ffff8a83`0dda68b0 fffff801`311ee0e3 : ffffad82`392264f0 00000000`00000002 ffff8a83`00000007 ffff8a83`0dda6af0 : nt!KiFastFailDispatch+0xd0
  624. ffff8a83`0dda6a90 fffff801`478633d3 : ffffbe0f`c8412b30 00000000`00000000 ffffbe0f`c8412b30 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323 (TrapFrame @ ffff8a83`0dda6a90)
  625. ffff8a83`0dda6c20 fffff801`478643c0 : ffffbe0f`c8412b30 ffffad82`3b1c9000 ffffad82`3d39f010 00000000`dcf6e000 : dxgmms2!VIDMM_SEGMENT::MarkResourcesForEviction+0x117
  626. ffff8a83`0dda6c50 fffff801`47860c29 : ffffad82`3d39f010 ffffad82`3b1c9000 ffffbe0f`cac8a500 ffffbe0f`c8412b30 : dxgmms2!VIDMM_GLOBAL::NotifyAllocationEviction+0x98
  627. ffff8a83`0dda6c80 fffff801`47860681 : ffffbe0f`eb20cf60 00000000`00000000 ffffbe0f`cac8a5b0 00000000`0000000d : dxgmms2!VIDMM_GLOBAL::EvictOneAllocation+0x59
  628. ffff8a83`0dda6cd0 fffff801`4785ff50 : ffffbe0f`eb20cf60 00000000`dcf9a000 00000000`00000002 00000000`0025bcd0 : dxgmms2!VIDMM_PAGE_TABLE::EvictPageTable+0x81
  629. ffff8a83`0dda6d10 fffff801`47865b02 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`0025bc00 : dxgmms2!VIDMM_PAGE_TABLE::DestroyPageTable+0x30
  630. ffff8a83`0dda6d90 fffff801`478967c2 : 00000000`00000000 ffffbe0f`cac8a5b0 00000000`00000001 00000000`00000000 : dxgmms2!VIDMM_PAGE_DIRECTORY::CommitVirtualAddressRange+0xb42
  631. ffff8a83`0dda6f00 fffff801`47864f40 : ffffad82`39fd38a8 ffffbe0f`cac8a5b0 ffffad82`33c45e00 00000000`00000000 : dxgmms2!VIDMM_PAGE_DIRECTORY::CommitVirtualAddressRange+0x31802
  632. ffff8a83`0dda7070 fffff801`47868369 : ffffad82`336d7000 ffffad82`3b0f3280 00000000`00000000 00000000`00000000 : dxgmms2!CVirtualAddressAllocator::UncommitVirtualAddressRange+0xf4
  633. ffff8a83`0dda7180 fffff801`47871008 : 00000000`01001002 fffff801`47801ee7 ffffbe0f`c97ed848 fffff801`00000003 : dxgmms2!VIDMM_GLOBAL::MakeOneVirtualAddressRangeNotResident+0x165
  634. ffff8a83`0dda7610 fffff801`4787209b : ffffbe0f`c969fd50 ffff8a83`0dda7700 ffffbe0f`c969fe70 ffffad82`39b62dd0 : dxgmms2!VIDMM_GLOBAL::MakeVirtualAddressRangeNotResident+0xc0
  635. ffff8a83`0dda7670 fffff801`4786e388 : ffffbe0f`c97ed810 ffff8a83`0dda77c0 ffffad82`3b1c9000 00000000`00000000 : dxgmms2!VIDMM_MEMORY_SEGMENT::EvictResource+0x23b
  636. ffff8a83`0dda76c0 fffff801`478879e8 : ffffad82`3b1c9000 ffffad82`3b1d2c10 ffffad82`3b1c9000 ffffad82`3b1c9000 : dxgmms2!VIDMM_GLOBAL::ProcessDeferredCommand+0x8f8
  637. ffff8a83`0dda7900 fffff801`47891b89 : ffffbe0f`bffbf490 ffffad82`3b0f3200 00000000`00000000 00000000`02821d00 : dxgmms2!VIDMM_WORKER_THREAD::Run+0xb78
  638. ffff8a83`0dda7ae0 fffff801`31146715 : ffffad82`3b0f3280 fffff801`47891b80 ffffbe0f`bffbf490 000fa4ef`bd9bbfff : dxgmms2!VidMmWorkerThreadProc+0x9
  639. ffff8a83`0dda7b10 fffff801`311e5078 : ffffd401`100f6180 ffffad82`3b0f3280 fffff801`311466c0 004d005c`00730070 : nt!PspSystemThreadStartup+0x55
  640. ffff8a83`0dda7b60 00000000`00000000 : ffff8a83`0dda8000 ffff8a83`0dda1000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  641.  
  642.  
  643. ========================================================================
  644. ======================= Dump #2: ANALYZE VERBOSE =======================
  645. ======================= File: 071020-4828-01.dmp =======================
  646. ========================================================================
  647.  
  648. Mini Kernel Dump File: Only registers and stack trace are available
  649. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  650. Kernel base = 0xfffff801`27c00000 PsLoadedModuleList = 0xfffff801`2882a2b0
  651. Debug session time: Fri Jul 10 00:14:37.025 2020 (UTC - 4:00)
  652. System Uptime: 0 days 12:19:45.692
  653.  
  654. BugCheck 1A, {9696, ffffa68009da7bd0, 0, 0}
  655. Probably caused by : memory_corruption ( nt!MiGetTopLevelPfn+1c664b )
  656. Followup: MachineOwner
  657.  
  658. MEMORY_MANAGEMENT (1a)
  659. # Any other values for parameter 1 must be individually examined.
  660.  
  661. Arguments:
  662. Arg1: 0000000000009696, The subtype of the bugcheck.
  663. Arg2: ffffa68009da7bd0
  664. Arg3: 0000000000000000
  665. Arg4: 0000000000000000
  666.  
  667. Debugging Details:
  668. DUMP_CLASS: 1
  669. DUMP_QUALIFIER: 400
  670. DUMP_TYPE: 2
  671. DUMP_FILE_ATTRIBUTES: 0x8
  672. Kernel Generated Triage Dump
  673. BUGCHECK_STR: 0x1a_9696
  674. CUSTOMER_CRASH_COUNT: 1
  675. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  676.  
  677. PROCESS_NAME: System
  678.  
  679. CURRENT_IRQL: 2
  680. LAST_CONTROL_TRANSFER: from fffff801280250eb to fffff80127fdda20
  681. STACK_TEXT:
  682. ffff8288`1c11f7e8 fffff801`280250eb : 00000000`0000001a 00000000`00009696 ffffa680`09da7bd0 00000000`00000000 : nt!KeBugCheckEx
  683. ffff8288`1c11f7f0 fffff801`2803d6b6 : ffffa680`09da7bd0 7fffffff`ffffffff 00080000`00359bac ffffa680`00000001 : nt!MiGetTopLevelPfn+0x1c664b
  684. ffff8288`1c11f880 fffff801`27f6fa0e : fffff801`28851508 ffffa680`09da7bd0 00000000`00000000 00000000`00000001 : nt!MiRestoreTransitionPte+0x1a4d36
  685. ffff8288`1c11f8f0 fffff801`28158191 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveLowestPriorityStandbyPage+0x1ce
  686. ffff8288`1c11f990 fffff801`281583e3 : fffff801`28850ac0 00000000`00000000 fffff801`00000000 00000000`0000027d : nt!MiPruneStandbyPages+0x265
  687. ffff8288`1c11fa20 fffff801`27e33f25 : ffffc00a`93d42040 fffff801`28158350 ffffc00a`8ae93a20 fffff801`28852360 : nt!MiRebalanceZeroFreeLists+0x93
  688. ffff8288`1c11fa70 fffff801`27f46715 : ffffc00a`93d42040 00000000`00000080 ffffc00a`8ae9d040 00700020`00000001 : nt!ExpWorkerThread+0x105
  689. ffff8288`1c11fb10 fffff801`27fe5078 : ffffe281`fbc80180 ffffc00a`93d42040 fffff801`27f466c0 0065006c`00500020 : nt!PspSystemThreadStartup+0x55
  690. ffff8288`1c11fb60 00000000`00000000 : ffff8288`1c120000 ffff8288`1c119000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  691. STACK_COMMAND: kb
  692. THREAD_SHA1_HASH_MOD_FUNC: 89698d946d4044f2adeb0f1b0c8506e740b95753
  693. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 9424b9466b92d84c3132398bdb83b6b8856a14f8
  694. THREAD_SHA1_HASH_MOD: 9f457f347057f10e1df248e166a3e95e6570ecfe
  695. FOLLOWUP_IP:
  696. nt!MiGetTopLevelPfn+1c664b
  697. fffff801`280250eb cc int 3
  698. FAULT_INSTR_CODE: e92ccdcc
  699. SYMBOL_STACK_INDEX: 1
  700. SYMBOL_NAME: nt!MiGetTopLevelPfn+1c664b
  701. FOLLOWUP_NAME: MachineOwner
  702. MODULE_NAME: nt
  703. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  704. IMAGE_VERSION: 10.0.19041.330
  705.  
  706. IMAGE_NAME: memory_corruption
  707.  
  708. BUCKET_ID_FUNC_OFFSET: 1c664b
  709. FAILURE_BUCKET_ID: 0x1a_9696_nt!MiGetTopLevelPfn
  710. BUCKET_ID: 0x1a_9696_nt!MiGetTopLevelPfn
  711. PRIMARY_PROBLEM_CLASS: 0x1a_9696_nt!MiGetTopLevelPfn
  712. TARGET_TIME: 2020-07-10T04:14:37.000Z
  713. SUITE_MASK: 784
  714. PRODUCT_TYPE: 1
  715. USER_LCID: 0
  716. FAILURE_ID_HASH_STRING: km:0x1a_9696_nt!migettoplevelpfn
  717. FAILURE_ID_HASH: {d4280011-e8e7-b961-d005-2ab957e4b051}
  718. Followup: MachineOwner
  719.  
  720. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  721.  
  722. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  723. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  724. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  725. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  726. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  727. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  728. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  729.  
  730. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  731.  
  732. Image name: wdcsam64.sys
  733. Search : https://www.google.com/search?q=wdcsam64.sys
  734. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  735. Timestamp : Fri Oct 9 2015
  736.  
  737. Image name: imaucxhpal.sys
  738. Search : https://www.google.com/search?q=imaucxhpal.sys
  739. ADA Info : MA-USB (UCX) HPAL driver
  740. Timestamp : Mon Jan 21 2019
  741.  
  742. Image name: iwigig.sys
  743. Search : https://www.google.com/search?q=iwigig.sys
  744. ADA Info : WiGig MAC driver (Intel)
  745. Timestamp : Mon Jan 21 2019
  746.  
  747. Image name: TeeDriverW8x64.sys
  748. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  749. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  750. Timestamp : Thu Apr 4 2019
  751.  
  752. Image name: e1d68x64.sys
  753. Search : https://www.google.com/search?q=e1d68x64.sys
  754. ADA Info : Intel(R) Gigabit Adapter driver
  755. Timestamp : Tue May 7 2019
  756.  
  757. Image name: nvhda64v.sys
  758. Search : https://www.google.com/search?q=nvhda64v.sys
  759. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  760. Timestamp : Tue Jun 9 2020
  761.  
  762. Image name: nvlddmkm.sys
  763. Search : https://www.google.com/search?q=nvlddmkm.sys
  764. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  765. Timestamp : Sun Jun 21 2020
  766.  
  767. ====================== Dump #2: MICROSOFT DRIVERS ======================
  768.  
  769. ACPI.sys ACPI Driver for NT (Microsoft)
  770. acpiex.sys ACPIEx Driver (Microsoft)
  771. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  772. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  773. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  774. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  775. ahcache.sys Application Compatibility Cache (Microsoft)
  776. bam.sys BAM Kernal driver (Microsoft)
  777. BasicDisplay.sys Basic Display driver (Microsoft)
  778. BasicRender.sys Basic Render driver (Microsoft)
  779. Beep.SYS BEEP driver (Microsoft)
  780. bindflt.sys Windows Bind Filter driver (Microsoft)
  781. BOOTVID.dll VGA Boot Driver (Microsoft)
  782. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  783. cdd.dll Canonical Display Driver (Microsoft)
  784. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  785. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  786. CI.dll Code Integrity Module (Microsoft)
  787. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  788. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  789. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  790. CLFS.SYS Common Log File System Driver (Microsoft)
  791. clipsp.sys CLIP Service (Microsoft)
  792. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  793. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  794. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  795. condrv.sys Console Driver (Microsoft)
  796. crashdmp.sys Crash Dump driver (Microsoft)
  797. dfsc.sys DFS Namespace Client Driver (Microsoft)
  798. disk.sys PnP Disk Driver (Microsoft)
  799. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  800. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  801. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  802. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  803. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  804. dxgmms2.sys DirectX Graphics MMS
  805. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  806. fastfat.SYS Fast FAT File System Driver (Microsoft)
  807. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  808. fileinfo.sys FileInfo Filter Driver (Microsoft)
  809. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  810. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  811. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  812. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  813. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  814. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  815. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  816. HdAudio.sys High Definition Audio Function driver (Microsoft)
  817. HIDCLASS.SYS Hid Class Library (Microsoft)
  818. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  819. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  820. HTTP.sys HTTP Protocol Stack (Microsoft)
  821. intelpep.sys Intel Power Engine Plugin (Microsoft)
  822. intelppm.sys Processor Device Driver (Microsoft)
  823. IntelTA.sys Intel Telemetry Driver
  824. iorate.sys I/O rate control Filter (Microsoft)
  825. kbdclass.sys Keyboard Class Driver (Microsoft)
  826. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  827. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  828. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  829. ks.sys Kernal CSA Library (Microsoft)
  830. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  831. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  832. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  833. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  834. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  835. mcupdate.dll Media Center Update (Microsoft)
  836. mmcss.sys MMCSS Driver (Microsoft)
  837. monitor.sys Monitor Driver (Microsoft)
  838. mouclass.sys Mouse Class Driver (Microsoft)
  839. mouhid.sys HID Mouse Filter Driver (Microsoft)
  840. mountmgr.sys Mount Point Manager (Microsoft)
  841. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  842. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  843. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  844. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  845. Msfs.SYS Mailslot driver (Microsoft)
  846. msisadrv.sys ISA Driver (Microsoft)
  847. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  848. msquic.sys Windows QUIC Driver
  849. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  850. mssmbios.sys System Management BIOS driver (Microsoft)
  851. mup.sys Multiple UNC Provider driver (Microsoft)
  852. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  853. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  854. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  855. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  856. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  857. NDProxy.sys NDIS Proxy driver (Microsoft)
  858. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  859. netbios.sys NetBIOS Interface driver (Microsoft)
  860. netbt.sys MBT Transport driver (Microsoft)
  861. NETIO.SYS Network I/O Subsystem (Microsoft)
  862. Npfs.SYS NPFS driver (Microsoft)
  863. npsvctrig.sys Named pipe service triggers (Microsoft)
  864. nsiproxy.sys NSI Proxy driver (Microsoft)
  865. Ntfs.sys NT File System Driver (Microsoft)
  866. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  867. ntosext.sys NTOS Extension Host driver (Microsoft)
  868. Null.SYS NULL Driver (Microsoft)
  869. pacer.sys QoS Packet Scheduler (Microsoft)
  870. partmgr.sys Partition driver (Microsoft)
  871. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  872. pcw.sys Performance Counter Driver (Microsoft)
  873. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  874. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  875. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  876. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  877. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  878. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  879. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  880. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  881. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  882. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  883. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  884. rdyboost.sys ReadyBoost Driver (Microsoft)
  885. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  886. serenum.sys Serial Port Enumerator (Microsoft)
  887. serial.sys Serial Device Driver
  888. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  889. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  890. spaceport.sys Storage Spaces driver (Microsoft)
  891. srv2.sys Smb 2.0 Server driver (Microsoft)
  892. srvnet.sys Server Network driver (Microsoft)
  893. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  894. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  895. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  896. storqosflt.sys Storage QoS Filter driver (Microsoft)
  897. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  898. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  899. tcpip.sys TCP/IP Protocol driver (Microsoft)
  900. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  901. TDI.SYS TDI Wrapper driver (Microsoft)
  902. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  903. tm.sys Kernel Transaction Manager driver (Microsoft)
  904. ucx01000.sys USB Controller Extension (Microsoft)
  905. udfs.sys UDF File System driver (Microsoft)
  906. UEFI.sys UEFI NT driver (Microsoft)
  907. umbus.sys User-Mode Bus Enumerator (Microsoft)
  908. usbaudio.sys USB Audio Class Driver (Microsoft)
  909. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  910. USBD.SYS Universal Serial Bus Driver (Microsoft)
  911. UsbHub3.sys USB3 HUB driver (Microsoft)
  912. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  913. USBXHCI.SYS USB XHCI driver (Microsoft)
  914. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  915. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  916. volmgr.sys Volume Manager Driver (Microsoft)
  917. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  918. volsnap.sys Volume Shadow Copy driver (Microsoft)
  919. volume.sys Volume driver (Microsoft)
  920. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  921. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  922. watchdog.sys Watchdog driver (Microsoft)
  923. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  924. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  925. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  926. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  927. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  928. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  929. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  930. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  931. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  932. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  933. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  934. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  935. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  936. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  937. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  938. Wof.sys Windows Overlay Filter (Microsoft)
  939. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  940. WppRecorder.sys WPP Trace Recorder (Microsoft)
  941. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  942.  
  943. ====================== Dump #2: UNLOADED MODULES =======================
  944.  
  945. fffff801`3f490000 fffff801`3f49f000 hiber_storpo
  946. fffff801`29b30000 fffff801`29b63000 hiber_storah
  947. fffff801`29b70000 fffff801`29b8e000 hiber_dumpfv
  948. fffff801`3f470000 fffff801`3f481000 MpKslDrv.sys
  949. fffff801`3f470000 fffff801`3f47f000 hiber_storpo
  950. fffff801`3f480000 fffff801`3f4b3000 hiber_storah
  951. fffff801`3fbd0000 fffff801`3fbee000 hiber_dumpfv
  952. fffff801`3fbe0000 fffff801`3fbef000 dump_storpor
  953. fffff801`3f440000 fffff801`3f473000 dump_storahc
  954. fffff801`3f4a0000 fffff801`3f4be000 dump_dumpfve
  955. fffff801`427b0000 fffff801`42805000 WUDFRd.sys
  956. fffff801`3fdf0000 fffff801`3fe0c000 dam.sys
  957. fffff801`2be00000 fffff801`2be11000 WdBoot.sys
  958. fffff801`2ceb0000 fffff801`2cec0000 hwpolicy.sys
  959.  
  960. ====================== Dump #2: BIOS INFORMATION =======================
  961.  
  962. [SMBIOS Data Tables v3.1]
  963. [DMI Version - 0]
  964. [2.0 Calling Convention - No]
  965. [Table Size - 2808 bytes]
  966. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  967. Vendor American Megatrends Inc.
  968. BIOS Version P4.20
  969. BIOS Starting Address Segment f000
  970. BIOS Release Date 10/31/2019
  971. BIOS ROM Size 1000000
  972. BIOS Characteristics
  973. 07: - PCI Supported
  974. 11: - Upgradeable FLASH BIOS
  975. 12: - BIOS Shadowing Supported
  976. 15: - CD-Boot Supported
  977. 16: - Selectable Boot Supported
  978. 17: - BIOS ROM Socketed
  979. 19: - EDD Supported
  980. 23: - 1.2MB Floppy Supported
  981. 24: - 720KB Floppy Supported
  982. 25: - 2.88MB Floppy Supported
  983. 26: - Print Screen Device Supported
  984. 27: - Keyboard Services Supported
  985. 28: - Serial Services Supported
  986. 29: - Printer Services Supported
  987. 32: - BIOS Vendor Reserved
  988. BIOS Characteristic Extensions
  989. 00: - ACPI Supported
  990. 01: - USB Legacy Supported
  991. 08: - BIOS Boot Specification Supported
  992. 10: - Specification Reserved
  993. 11: - Specification Reserved
  994. BIOS Major Revision 5
  995. BIOS Minor Revision 12
  996. EC Firmware Major Revision 255
  997. EC Firmware Minor Revision 255
  998. [System Information (Type 1) - Length 27 - Handle 0001h]
  999. UUID 00000000-0000-0000-0000-000000000000
  1000. Wakeup Type Power Switch
  1001. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1002. Manufacturer ASRock
  1003. Product Z370 Extreme4
  1004. Version
  1005. Feature Flags 09h
  1006. -1625966880: - -1625966832: - ÷7?Öý
  1007. Location
  1008. Chassis Handle 0003h
  1009. Board Type 0ah - Processor/Memory Module
  1010. Number of Child Handles 0
  1011. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1012. Chassis Type Desktop
  1013. Bootup State Safe
  1014. Power Supply State Safe
  1015. Thermal State Safe
  1016. Security Status None
  1017. OEM Defined 0
  1018. Height 0U
  1019. Number of Power Cords 1
  1020. Number of Contained Elements 0
  1021. Contained Element Size 3
  1022. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  1023. Number of Strings 1
  1024. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  1025. Location 03h - SystemBoard/Motherboard
  1026. Use 03h - System Memory
  1027. Memory Error Correction 03h - None
  1028. Maximum Capacity 67108864KB
  1029. Number of Memory Devices 4
  1030. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  1031. Physical Memory Array Handle 0010h
  1032. Total Width 0 bits
  1033. Data Width 0 bits
  1034. Form Factor 09h - DIMM
  1035. Device Locator ChannelA-DIMM0
  1036. Bank Locator BANK 0
  1037. Memory Type 02h - Unknown
  1038. Type Detail 0000h -
  1039. Speed 0MHz
  1040. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  1041. Physical Memory Array Handle 0010h
  1042. Total Width 64 bits
  1043. Data Width 64 bits
  1044. Size 8192MB
  1045. Form Factor 09h - DIMM
  1046. Device Locator ChannelA-DIMM1
  1047. Bank Locator BANK 1
  1048. Memory Type 1ah - Specification Reserved
  1049. Type Detail 4080h - Synchronous
  1050. Speed 3200MHz
  1051. Manufacturer 029E
  1052. Part Number CMK16GX4M2B3200C16
  1053. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  1054. Physical Memory Array Handle 0010h
  1055. Total Width 0 bits
  1056. Data Width 0 bits
  1057. Form Factor 09h - DIMM
  1058. Device Locator ChannelB-DIMM0
  1059. Bank Locator BANK 2
  1060. Memory Type 02h - Unknown
  1061. Type Detail 0000h -
  1062. Speed 0MHz
  1063. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  1064. Physical Memory Array Handle 0010h
  1065. Total Width 64 bits
  1066. Data Width 64 bits
  1067. Size 8192MB
  1068. Form Factor 09h - DIMM
  1069. Device Locator ChannelB-DIMM1
  1070. Bank Locator BANK 3
  1071. Memory Type 1ah - Specification Reserved
  1072. Type Detail 4080h - Synchronous
  1073. Speed 3200MHz
  1074. Manufacturer 029E
  1075. Part Number CMK16GX4M2B3200C16
  1076. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  1077. Starting Address 00000000h
  1078. Ending Address 00ffffffh
  1079. Memory Array Handle 0010h
  1080. Partition Width 02
  1081. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  1082. Socket Designation L1 Cache
  1083. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1084. Maximum Cache Size 0180h - 384K
  1085. Installed Size 0180h - 384K
  1086. Supported SRAM Type 0020h - Synchronous
  1087. Current SRAM Type 0020h - Synchronous
  1088. Cache Speed 0ns
  1089. Error Correction Type ParitySingle-Bit ECC
  1090. System Cache Type Unified
  1091. Associativity 8-way Set-Associative
  1092. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  1093. Socket Designation L2 Cache
  1094. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1095. Maximum Cache Size 0600h - 1536K
  1096. Installed Size 0600h - 1536K
  1097. Supported SRAM Type 0020h - Synchronous
  1098. Current SRAM Type 0020h - Synchronous
  1099. Cache Speed 0ns
  1100. Error Correction Type Multi-Bit ECC
  1101. System Cache Type Unified
  1102. Associativity 4-way Set-Associative
  1103. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  1104. Socket Designation L3 Cache
  1105. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1106. Maximum Cache Size 3000h - 12288K
  1107. Installed Size 3000h - 12288K
  1108. Supported SRAM Type 0020h - Synchronous
  1109. Current SRAM Type 0020h - Synchronous
  1110. Cache Speed 0ns
  1111. Error Correction Type Specification Reserved
  1112. System Cache Type Unified
  1113. Associativity 16-way Set-Associative
  1114. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  1115. Socket Designation CPUSocket
  1116. Processor Type Central Processor
  1117. Processor Family c6h - Specification Reserved
  1118. Processor Manufacturer Intel(R) Corporation
  1119. Processor ID ea060900fffbebbf
  1120. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  1121. Processor Voltage 8ah - 1.0V
  1122. External Clock 100MHz
  1123. Max Speed 8300MHz
  1124. Current Speed 3700MHz
  1125. Status Enabled Populated
  1126. Processor Upgrade Specification Reserved
  1127. L1 Cache Handle 0016h
  1128. L2 Cache Handle 0017h
  1129. L3 Cache Handle 0018h
  1130. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  1131. Starting Address 00000000h
  1132. Ending Address 007fffffh
  1133. Memory Device Handle 0012h
  1134. Mem Array Mapped Adr Handle 0015h
  1135. Partition Row Position 01
  1136. Interleave Position 01
  1137. Interleave Data Depth 02
  1138. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  1139. Starting Address 00800000h
  1140. Ending Address 00ffffffh
  1141. Memory Device Handle 0014h
  1142. Mem Array Mapped Adr Handle 0015h
  1143. Partition Row Position 01
  1144. Interleave Position 02
  1145. Interleave Data Depth 02
  1146.  
  1147. ========================== Dump #2: Extra #1 ===========================
  1148.  
  1149. 3: kd> !verifier
  1150. fffff8012882a6c0: Unable to get verifier list.
  1151.  
  1152. ========================== Dump #2: Extra #2 ===========================
  1153.  
  1154. 3: kd> !thread
  1155. THREAD ffffc00a93d42040 Cid 0004.2378 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 3
  1156. Not impersonating
  1157. GetUlongFromAddress: unable to read from fffff8012881143c
  1158. Owning Process ffffc00a8ae9d040 Image: System
  1159. Attached Process N/A Image: N/A
  1160. fffff78000000000: Unable to get shared data
  1161. Wait Start TickCount 2840684
  1162. Context Switch Count 50712 IdealProcessor: 3 NoStackSwap
  1163. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1164. UserTime 00:00:00.000
  1165. KernelTime 00:00:00.000
  1166. Win32 Start Address nt!ExpWorkerThread (0xfffff80127e33e20)
  1167. Stack Init ffff82881c11fb90 Current ffff82881c11f720
  1168. Base ffff82881c120000 Limit ffff82881c119000 Call 0000000000000000
  1169. Priority 12 BasePriority 12 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1170. Child-SP RetAddr : Args to Child : Call Site
  1171. ffff8288`1c11f7e8 fffff801`280250eb : 00000000`0000001a 00000000`00009696 ffffa680`09da7bd0 00000000`00000000 : nt!KeBugCheckEx
  1172. ffff8288`1c11f7f0 fffff801`2803d6b6 : ffffa680`09da7bd0 7fffffff`ffffffff 00080000`00359bac ffffa680`00000001 : nt!MiGetTopLevelPfn+0x1c664b
  1173. ffff8288`1c11f880 fffff801`27f6fa0e : fffff801`28851508 ffffa680`09da7bd0 00000000`00000000 00000000`00000001 : nt!MiRestoreTransitionPte+0x1a4d36
  1174. ffff8288`1c11f8f0 fffff801`28158191 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveLowestPriorityStandbyPage+0x1ce
  1175. ffff8288`1c11f990 fffff801`281583e3 : fffff801`28850ac0 00000000`00000000 fffff801`00000000 00000000`0000027d : nt!MiPruneStandbyPages+0x265
  1176. ffff8288`1c11fa20 fffff801`27e33f25 : ffffc00a`93d42040 fffff801`28158350 ffffc00a`8ae93a20 fffff801`28852360 : nt!MiRebalanceZeroFreeLists+0x93
  1177. ffff8288`1c11fa70 fffff801`27f46715 : ffffc00a`93d42040 00000000`00000080 ffffc00a`8ae9d040 00700020`00000001 : nt!ExpWorkerThread+0x105
  1178. ffff8288`1c11fb10 fffff801`27fe5078 : ffffe281`fbc80180 ffffc00a`93d42040 fffff801`27f466c0 0065006c`00500020 : nt!PspSystemThreadStartup+0x55
  1179. ffff8288`1c11fb60 00000000`00000000 : ffff8288`1c120000 ffff8288`1c119000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  1180.  
  1181.  
  1182. ========================================================================
  1183. ======================= Dump #3: ANALYZE VERBOSE =======================
  1184. ======================= File: 071020-4437-01.dmp =======================
  1185. ========================================================================
  1186.  
  1187. Mini Kernel Dump File: Only registers and stack trace are available
  1188. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  1189. Kernel base = 0xfffff805`18200000 PsLoadedModuleList = 0xfffff805`18e2a2b0
  1190. Debug session time: Fri Jul 10 00:15:55.925 2020 (UTC - 4:00)
  1191. System Uptime: 0 days 0:00:45.592
  1192.  
  1193. BugCheck 3B, {c0000005, fffff8051842c1c0, fffff8051b0a5920, 0}
  1194. Probably caused by : memory_corruption
  1195. Followup: memory_corruption
  1196.  
  1197. SYSTEM_SERVICE_EXCEPTION (3b)
  1198. An exception happened while executing a system service routine.
  1199.  
  1200. Arguments:
  1201. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  1202. Arg2: fffff8051842c1c0, Address of the instruction which caused the bugcheck
  1203. Arg3: fffff8051b0a5920, Address of the context record for the exception that caused the bugcheck
  1204. Arg4: 0000000000000000, zero.
  1205.  
  1206. Debugging Details:
  1207. DUMP_CLASS: 1
  1208. DUMP_QUALIFIER: 400
  1209. DUMP_TYPE: 2
  1210. DUMP_FILE_ATTRIBUTES: 0x8
  1211. Kernel Generated Triage Dump
  1212. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  1213. FAULTING_IP:
  1214. nt!MiIdentifyPfn+240
  1215. fffff805`1842c1c0 488b4018 mov rax,qword ptr [rax+18h]
  1216. CONTEXT: fffff8051b0a5920 -- (.cxr 0xfffff8051b0a5920)
  1217. rax=feff8d0f2e26f370 rbx=ffff8d0f3060b888 rcx=0000000000000000
  1218. rdx=0000000080000000 rsi=ffff8d0f2e33a8f0 rdi=ffffec80049d1540
  1219. rip=fffff8051842c1c0 rsp=ffffe983947df050 rbp=ffffffffffffffff
  1220. r8=0000000000189b1c r9=0000000000000000 r10=000000002b5f0542
  1221. r11=0a00000000000020 r12=8000000000000000 r13=fffff80512f72180
  1222. r14=ffff8d0f2e33a870 r15=0000000000000000
  1223. iopl=0 nv up ei ng nz na pe nc
  1224. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050282
  1225. nt!MiIdentifyPfn+0x240:
  1226. fffff805`1842c1c0 488b4018 mov rax,qword ptr [rax+18h] ds:002b:feff8d0f`2e26f388=????????????????
  1227. Resetting default scope
  1228. CUSTOMER_CRASH_COUNT: 1
  1229. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1230. BUGCHECK_STR: 0x3B
  1231.  
  1232. PROCESS_NAME: svchost.exe
  1233.  
  1234. CURRENT_IRQL: 2
  1235. BAD_STACK_POINTER: fffff8051b0a5018
  1236. LAST_CONTROL_TRANSFER: from fffff8051842bf15 to fffff8051842c1c0
  1237. STACK_TEXT:
  1238. ffffe983`947df050 fffff805`1842bf15 : 00000000`00000100 fffff805`00000000 ffff8d0f`3060b888 00000000`00000001 : nt!MiIdentifyPfn+0x240
  1239. ffffe983`947df110 fffff805`187fde94 : 00000000`00000000 ffff8d0f`3060b888 ffffe983`947dfa80 ffff8d0f`3060c8c0 : nt!MiIdentifyPfnWrapper+0x55
  1240. ffffe983`947df140 fffff805`187fd91c : 00000000`00000000 ffff9d07`00000000 ffffe983`947df334 ffff8d0f`3060b000 : nt!PfpPfnPrioRequest+0xe4
  1241. ffffe983`947df1c0 fffff805`187fb9bb : 00000049`1d279e30 00000000`00000000 00000000`0000004f 00000000`00000000 : nt!PfQuerySuperfetchInformation+0x2ec
  1242. ffffe983`947df300 fffff805`187fb6a7 : 00000049`1d279ea0 00000000`00000000 00000000`00000008 00000000`00000000 : nt!ExpQuerySystemInformation+0x1cb
  1243. ffffe983`947df9c0 fffff805`185ef375 : 00000000`00000000 00000000`00000001 00000000`00000000 ffffe983`947dfa80 : nt!NtQuerySystemInformation+0x37
  1244. ffffe983`947dfa00 00007ff9`99f0b454 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  1245. 00000049`1d279d38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`99f0b454
  1246. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  1247. fffff8051842c321 - nt!MiIdentifyPfn+3a1
  1248. [ f6:82 ]
  1249. fffff8051842c3e0 - nt!MiIdentifyPfn+460 (+0xbf)
  1250. [ fa:ec ]
  1251. fffff8051842c49d - nt!MiIdentifyPfn+51d (+0xbd)
  1252. [ f6:82 ]
  1253. fffff8051842c5a9 - nt!MiIdentifyPfn+629 (+0x10c)
  1254. [ f6:82 ]
  1255. fffff8051842c5b3 - nt!MiIdentifyPfn+633 (+0x0a)
  1256. [ f6:82 ]
  1257. fffff8051842c6a8 - nt!MiIdentifyPfn+728 (+0xf5)
  1258. [ f6:82 ]
  1259. fffff8051842c85f - nt!MiIdentifyPfn+8df (+0x1b7)
  1260. [ f6:82 ]
  1261. 7 errors : !nt (fffff8051842c321-fffff8051842c85f)
  1262. MODULE_NAME: memory_corruption
  1263.  
  1264. IMAGE_NAME: memory_corruption
  1265.  
  1266. FOLLOWUP_NAME: memory_corruption
  1267. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1268. MEMORY_CORRUPTOR: LARGE
  1269. STACK_COMMAND: .cxr 0xfffff8051b0a5920 ; kb
  1270. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1271. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1272. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1273. TARGET_TIME: 2020-07-10T04:15:55.000Z
  1274. SUITE_MASK: 784
  1275. PRODUCT_TYPE: 1
  1276. USER_LCID: 0
  1277. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1278. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1279. Followup: memory_corruption
  1280.  
  1281. ====================== Dump #3: 3RD PARTY DRIVERS ======================
  1282.  
  1283. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  1284. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  1285. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  1286. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1287. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  1288. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1289. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1290.  
  1291. ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
  1292.  
  1293. Image name: wdcsam64.sys
  1294. Search : https://www.google.com/search?q=wdcsam64.sys
  1295. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  1296. Timestamp : Fri Oct 9 2015
  1297.  
  1298. Image name: imaucxhpal.sys
  1299. Search : https://www.google.com/search?q=imaucxhpal.sys
  1300. ADA Info : MA-USB (UCX) HPAL driver
  1301. Timestamp : Mon Jan 21 2019
  1302.  
  1303. Image name: iwigig.sys
  1304. Search : https://www.google.com/search?q=iwigig.sys
  1305. ADA Info : WiGig MAC driver (Intel)
  1306. Timestamp : Mon Jan 21 2019
  1307.  
  1308. Image name: TeeDriverW8x64.sys
  1309. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  1310. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1311. Timestamp : Thu Apr 4 2019
  1312.  
  1313. Image name: e1d68x64.sys
  1314. Search : https://www.google.com/search?q=e1d68x64.sys
  1315. ADA Info : Intel(R) Gigabit Adapter driver
  1316. Timestamp : Tue May 7 2019
  1317.  
  1318. Image name: nvhda64v.sys
  1319. Search : https://www.google.com/search?q=nvhda64v.sys
  1320. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1321. Timestamp : Tue Jun 9 2020
  1322.  
  1323. Image name: nvlddmkm.sys
  1324. Search : https://www.google.com/search?q=nvlddmkm.sys
  1325. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1326. Timestamp : Sun Jun 21 2020
  1327.  
  1328. ====================== Dump #3: MICROSOFT DRIVERS ======================
  1329.  
  1330. ACPI.sys ACPI Driver for NT (Microsoft)
  1331. acpiex.sys ACPIEx Driver (Microsoft)
  1332. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  1333. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1334. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1335. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1336. ahcache.sys Application Compatibility Cache (Microsoft)
  1337. bam.sys BAM Kernal driver (Microsoft)
  1338. BasicDisplay.sys Basic Display driver (Microsoft)
  1339. BasicRender.sys Basic Render driver (Microsoft)
  1340. Beep.SYS BEEP driver (Microsoft)
  1341. bindflt.sys Windows Bind Filter driver (Microsoft)
  1342. BOOTVID.dll VGA Boot Driver (Microsoft)
  1343. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1344. cdd.dll Canonical Display Driver (Microsoft)
  1345. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1346. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1347. CI.dll Code Integrity Module (Microsoft)
  1348. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1349. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1350. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1351. CLFS.SYS Common Log File System Driver (Microsoft)
  1352. clipsp.sys CLIP Service (Microsoft)
  1353. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1354. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1355. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1356. condrv.sys Console Driver (Microsoft)
  1357. crashdmp.sys Crash Dump driver (Microsoft)
  1358. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1359. disk.sys PnP Disk Driver (Microsoft)
  1360. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1361. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1362. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1363. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  1364. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1365. dxgmms2.sys DirectX Graphics MMS
  1366. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1367. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1368. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1369. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1370. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1371. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1372. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1373. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1374. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1375. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1376. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1377. HdAudio.sys High Definition Audio Function driver (Microsoft)
  1378. HIDCLASS.SYS Hid Class Library (Microsoft)
  1379. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1380. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1381. HTTP.sys HTTP Protocol Stack (Microsoft)
  1382. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1383. intelppm.sys Processor Device Driver (Microsoft)
  1384. IntelTA.sys Intel Telemetry Driver
  1385. iorate.sys I/O rate control Filter (Microsoft)
  1386. kbdclass.sys Keyboard Class Driver (Microsoft)
  1387. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1388. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  1389. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1390. ks.sys Kernal CSA Library (Microsoft)
  1391. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1392. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1393. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1394. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1395. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1396. mcupdate.dll Media Center Update (Microsoft)
  1397. mmcss.sys MMCSS Driver (Microsoft)
  1398. monitor.sys Monitor Driver (Microsoft)
  1399. mouclass.sys Mouse Class Driver (Microsoft)
  1400. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1401. mountmgr.sys Mount Point Manager (Microsoft)
  1402. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1403. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1404. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  1405. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1406. Msfs.SYS Mailslot driver (Microsoft)
  1407. msisadrv.sys ISA Driver (Microsoft)
  1408. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1409. msquic.sys Windows QUIC Driver
  1410. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1411. mssmbios.sys System Management BIOS driver (Microsoft)
  1412. mup.sys Multiple UNC Provider driver (Microsoft)
  1413. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1414. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1415. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1416. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1417. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1418. NDProxy.sys NDIS Proxy driver (Microsoft)
  1419. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1420. netbios.sys NetBIOS Interface driver (Microsoft)
  1421. netbt.sys MBT Transport driver (Microsoft)
  1422. NETIO.SYS Network I/O Subsystem (Microsoft)
  1423. Npfs.SYS NPFS driver (Microsoft)
  1424. npsvctrig.sys Named pipe service triggers (Microsoft)
  1425. nsiproxy.sys NSI Proxy driver (Microsoft)
  1426. Ntfs.sys NT File System Driver (Microsoft)
  1427. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1428. ntosext.sys NTOS Extension Host driver (Microsoft)
  1429. Null.SYS NULL Driver (Microsoft)
  1430. pacer.sys QoS Packet Scheduler (Microsoft)
  1431. partmgr.sys Partition driver (Microsoft)
  1432. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1433. pcw.sys Performance Counter Driver (Microsoft)
  1434. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1435. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1436. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1437. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1438. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1439. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1440. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1441. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1442. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1443. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1444. rdyboost.sys ReadyBoost Driver (Microsoft)
  1445. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1446. serenum.sys Serial Port Enumerator (Microsoft)
  1447. serial.sys Serial Device Driver
  1448. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1449. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1450. spaceport.sys Storage Spaces driver (Microsoft)
  1451. srv2.sys Smb 2.0 Server driver (Microsoft)
  1452. srvnet.sys Server Network driver (Microsoft)
  1453. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1454. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  1455. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1456. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1457. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1458. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1459. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1460. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1461. TDI.SYS TDI Wrapper driver (Microsoft)
  1462. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1463. tm.sys Kernel Transaction Manager driver (Microsoft)
  1464. ucx01000.sys USB Controller Extension (Microsoft)
  1465. udfs.sys UDF File System driver (Microsoft)
  1466. UEFI.sys UEFI NT driver (Microsoft)
  1467. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1468. usbaudio.sys USB Audio Class Driver (Microsoft)
  1469. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1470. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1471. UsbHub3.sys USB3 HUB driver (Microsoft)
  1472. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  1473. USBXHCI.SYS USB XHCI driver (Microsoft)
  1474. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1475. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1476. volmgr.sys Volume Manager Driver (Microsoft)
  1477. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1478. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1479. volume.sys Volume driver (Microsoft)
  1480. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1481. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1482. watchdog.sys Watchdog driver (Microsoft)
  1483. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1484. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1485. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1486. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1487. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1488. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1489. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1490. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1491. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1492. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1493. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1494. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1495. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1496. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1497. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1498. Wof.sys Windows Overlay Filter (Microsoft)
  1499. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  1500. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1501. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  1502.  
  1503. ====================== Dump #3: UNLOADED MODULES =======================
  1504.  
  1505. fffff805`2e1c0000 fffff805`2e1cf000 dump_storpor
  1506. fffff805`2d240000 fffff805`2d273000 dump_storahc
  1507. fffff805`2d2a0000 fffff805`2d2be000 dump_dumpfve
  1508. fffff805`30050000 fffff805`300a5000 WUDFRd.sys
  1509. fffff805`2dbc0000 fffff805`2dbdc000 dam.sys
  1510. fffff805`19c00000 fffff805`19c11000 WdBoot.sys
  1511. fffff805`1acb0000 fffff805`1acc0000 hwpolicy.sys
  1512.  
  1513. ====================== Dump #3: BIOS INFORMATION =======================
  1514.  
  1515. [SMBIOS Data Tables v3.1]
  1516. [DMI Version - 0]
  1517. [2.0 Calling Convention - No]
  1518. [Table Size - 2808 bytes]
  1519. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  1520. Vendor American Megatrends Inc.
  1521. BIOS Version P4.20
  1522. BIOS Starting Address Segment f000
  1523. BIOS Release Date 10/31/2019
  1524. BIOS ROM Size 1000000
  1525. BIOS Characteristics
  1526. 07: - PCI Supported
  1527. 11: - Upgradeable FLASH BIOS
  1528. 12: - BIOS Shadowing Supported
  1529. 15: - CD-Boot Supported
  1530. 16: - Selectable Boot Supported
  1531. 17: - BIOS ROM Socketed
  1532. 19: - EDD Supported
  1533. 23: - 1.2MB Floppy Supported
  1534. 24: - 720KB Floppy Supported
  1535. 25: - 2.88MB Floppy Supported
  1536. 26: - Print Screen Device Supported
  1537. 27: - Keyboard Services Supported
  1538. 28: - Serial Services Supported
  1539. 29: - Printer Services Supported
  1540. 32: - BIOS Vendor Reserved
  1541. BIOS Characteristic Extensions
  1542. 00: - ACPI Supported
  1543. 01: - USB Legacy Supported
  1544. 08: - BIOS Boot Specification Supported
  1545. 10: - Specification Reserved
  1546. 11: - Specification Reserved
  1547. BIOS Major Revision 5
  1548. BIOS Minor Revision 12
  1549. EC Firmware Major Revision 255
  1550. EC Firmware Minor Revision 255
  1551. [System Information (Type 1) - Length 27 - Handle 0001h]
  1552. UUID 00000000-0000-0000-0000-000000000000
  1553. Wakeup Type Power Switch
  1554. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1555. Manufacturer ASRock
  1556. Product Z370 Extreme4
  1557. Version
  1558. Feature Flags 09h
  1559. -1660307744: - -1660307696: - ÷7?Öý
  1560. Location
  1561. Chassis Handle 0003h
  1562. Board Type 0ah - Processor/Memory Module
  1563. Number of Child Handles 0
  1564. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1565. Chassis Type Desktop
  1566. Bootup State Safe
  1567. Power Supply State Safe
  1568. Thermal State Safe
  1569. Security Status None
  1570. OEM Defined 0
  1571. Height 0U
  1572. Number of Power Cords 1
  1573. Number of Contained Elements 0
  1574. Contained Element Size 3
  1575. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  1576. Number of Strings 1
  1577. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  1578. Location 03h - SystemBoard/Motherboard
  1579. Use 03h - System Memory
  1580. Memory Error Correction 03h - None
  1581. Maximum Capacity 67108864KB
  1582. Number of Memory Devices 4
  1583. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  1584. Physical Memory Array Handle 0010h
  1585. Total Width 0 bits
  1586. Data Width 0 bits
  1587. Form Factor 09h - DIMM
  1588. Device Locator ChannelA-DIMM0
  1589. Bank Locator BANK 0
  1590. Memory Type 02h - Unknown
  1591. Type Detail 0000h -
  1592. Speed 0MHz
  1593. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  1594. Physical Memory Array Handle 0010h
  1595. Total Width 64 bits
  1596. Data Width 64 bits
  1597. Size 8192MB
  1598. Form Factor 09h - DIMM
  1599. Device Locator ChannelA-DIMM1
  1600. Bank Locator BANK 1
  1601. Memory Type 1ah - Specification Reserved
  1602. Type Detail 4080h - Synchronous
  1603. Speed 3200MHz
  1604. Manufacturer 029E
  1605. Part Number CMK16GX4M2B3200C16
  1606. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  1607. Physical Memory Array Handle 0010h
  1608. Total Width 0 bits
  1609. Data Width 0 bits
  1610. Form Factor 09h - DIMM
  1611. Device Locator ChannelB-DIMM0
  1612. Bank Locator BANK 2
  1613. Memory Type 02h - Unknown
  1614. Type Detail 0000h -
  1615. Speed 0MHz
  1616. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  1617. Physical Memory Array Handle 0010h
  1618. Total Width 64 bits
  1619. Data Width 64 bits
  1620. Size 8192MB
  1621. Form Factor 09h - DIMM
  1622. Device Locator ChannelB-DIMM1
  1623. Bank Locator BANK 3
  1624. Memory Type 1ah - Specification Reserved
  1625. Type Detail 4080h - Synchronous
  1626. Speed 3200MHz
  1627. Manufacturer 029E
  1628. Part Number CMK16GX4M2B3200C16
  1629. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  1630. Starting Address 00000000h
  1631. Ending Address 00ffffffh
  1632. Memory Array Handle 0010h
  1633. Partition Width 02
  1634. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  1635. Socket Designation L1 Cache
  1636. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1637. Maximum Cache Size 0180h - 384K
  1638. Installed Size 0180h - 384K
  1639. Supported SRAM Type 0020h - Synchronous
  1640. Current SRAM Type 0020h - Synchronous
  1641. Cache Speed 0ns
  1642. Error Correction Type ParitySingle-Bit ECC
  1643. System Cache Type Unified
  1644. Associativity 8-way Set-Associative
  1645. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  1646. Socket Designation L2 Cache
  1647. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1648. Maximum Cache Size 0600h - 1536K
  1649. Installed Size 0600h - 1536K
  1650. Supported SRAM Type 0020h - Synchronous
  1651. Current SRAM Type 0020h - Synchronous
  1652. Cache Speed 0ns
  1653. Error Correction Type Multi-Bit ECC
  1654. System Cache Type Unified
  1655. Associativity 4-way Set-Associative
  1656. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  1657. Socket Designation L3 Cache
  1658. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1659. Maximum Cache Size 3000h - 12288K
  1660. Installed Size 3000h - 12288K
  1661. Supported SRAM Type 0020h - Synchronous
  1662. Current SRAM Type 0020h - Synchronous
  1663. Cache Speed 0ns
  1664. Error Correction Type Specification Reserved
  1665. System Cache Type Unified
  1666. Associativity 16-way Set-Associative
  1667. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  1668. Socket Designation CPUSocket
  1669. Processor Type Central Processor
  1670. Processor Family c6h - Specification Reserved
  1671. Processor Manufacturer Intel(R) Corporation
  1672. Processor ID ea060900fffbebbf
  1673. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  1674. Processor Voltage 8ah - 1.0V
  1675. External Clock 100MHz
  1676. Max Speed 8300MHz
  1677. Current Speed 3700MHz
  1678. Status Enabled Populated
  1679. Processor Upgrade Specification Reserved
  1680. L1 Cache Handle 0016h
  1681. L2 Cache Handle 0017h
  1682. L3 Cache Handle 0018h
  1683. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  1684. Starting Address 00000000h
  1685. Ending Address 007fffffh
  1686. Memory Device Handle 0012h
  1687. Mem Array Mapped Adr Handle 0015h
  1688. Partition Row Position 01
  1689. Interleave Position 01
  1690. Interleave Data Depth 02
  1691. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  1692. Starting Address 00800000h
  1693. Ending Address 00ffffffh
  1694. Memory Device Handle 0014h
  1695. Mem Array Mapped Adr Handle 0015h
  1696. Partition Row Position 01
  1697. Interleave Position 02
  1698. Interleave Data Depth 02
  1699.  
  1700. ========================== Dump #3: Extra #1 ===========================
  1701.  
  1702. 0: kd> !verifier
  1703. fffff80518e2a6c0: Unable to get verifier list.
  1704.  
  1705. ========================== Dump #3: Extra #2 ===========================
  1706.  
  1707. 0: kd> !thread
  1708. THREAD ffff8d0f2d39e080 Cid 0808.086c Teb: 000000491cf9a000 Win32Thread: 0000000000000000 RUNNING on processor 0
  1709. Impersonation token: ffff9d0744b51060 (Level Impersonation)
  1710. GetUlongFromAddress: unable to read from fffff80518e1143c
  1711. Owning Process ffff8d0f2d33d340 Image: svchost.exe
  1712. Attached Process N/A Image: N/A
  1713. fffff78000000000: Unable to get shared data
  1714. Wait Start TickCount 2902
  1715. Context Switch Count 431 IdealProcessor: 10
  1716. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1717. UserTime 00:00:00.000
  1718. KernelTime 00:00:00.000
  1719. Win32 Start Address 0x00007ff9984bd650
  1720. Stack Init ffffe983947dfb90 Current ffffe983947df0a0
  1721. Base ffffe983947e0000 Limit ffffe983947d9000 Call 0000000000000000
  1722. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1723. Child-SP RetAddr : Args to Child : Call Site
  1724. fffff805`1b0a5018 fffff805`185ef929 : 00000000`0000003b 00000000`c0000005 fffff805`1842c1c0 fffff805`1b0a5920 : nt!KeBugCheckEx
  1725. fffff805`1b0a5020 fffff805`185eed7c : fffff805`1b0a5760 fffff805`182e68e0 fffff805`1b0a5210 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  1726. fffff805`1b0a5160 fffff805`185e68df : fffff805`185eed00 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceHandler+0x7c
  1727. fffff805`1b0a51a0 fffff805`18432fb7 : fffff805`1b0a5710 00000000`00000000 ffffe983`947dfa00 fffff805`185ef375 : nt!RtlpExecuteHandlerForException+0xf
  1728. fffff805`1b0a51d0 fffff805`1847b226 : ffffe983`947dee18 fffff805`1b0a5e20 ffffe983`947dee18 ffffec80`049d1540 : nt!RtlDispatchException+0x297
  1729. fffff805`1b0a58f0 fffff805`185de8b2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x186
  1730. fffff805`1b0a5fb0 fffff805`185de880 : fffff805`185efa65 00000000`00000000 00000000`07ac1000 00000000`00000001 : nt!KxExceptionDispatchOnExceptionStack+0x12 (TrapFrame @ fffff805`1b0a5e70)
  1731. ffffe983`947decd8 fffff805`185efa65 : 00000000`00000000 00000000`07ac1000 00000000`00000001 00000000`00000003 : nt!KiExceptionDispatchOnExceptionStackContinue
  1732. ffffe983`947dece0 fffff805`185eb7a0 : 00000000`00000000 ffff8d0f`3060afe0 ffffe983`947defb0 ffff8d0f`3060afe8 : nt!KiExceptionDispatch+0x125
  1733. ffffe983`947deec0 fffff805`1842c1c0 : 00000000`00000001 00000000`42506650 ffffe983`947df1d8 00000000`00000000 : nt!KiGeneralProtectionFault+0x320 (TrapFrame @ ffffe983`947deec0)
  1734. ffffe983`947df050 fffff805`1842bf15 : 00000000`00000100 fffff805`00000000 ffff8d0f`3060b888 00000000`00000001 : nt!MiIdentifyPfn+0x240
  1735. ffffe983`947df110 fffff805`187fde94 : 00000000`00000000 ffff8d0f`3060b888 ffffe983`947dfa80 ffff8d0f`3060c8c0 : nt!MiIdentifyPfnWrapper+0x55
  1736. ffffe983`947df140 fffff805`187fd91c : 00000000`00000000 ffff9d07`00000000 ffffe983`947df334 ffff8d0f`3060b000 : nt!PfpPfnPrioRequest+0xe4
  1737. ffffe983`947df1c0 fffff805`187fb9bb : 00000049`1d279e30 00000000`00000000 00000000`0000004f 00000000`00000000 : nt!PfQuerySuperfetchInformation+0x2ec
  1738. ffffe983`947df300 fffff805`187fb6a7 : 00000049`1d279ea0 00000000`00000000 00000000`00000008 00000000`00000000 : nt!ExpQuerySystemInformation+0x1cb
  1739. ffffe983`947df9c0 fffff805`185ef375 : 00000000`00000000 00000000`00000001 00000000`00000000 ffffe983`947dfa80 : nt!NtQuerySystemInformation+0x37
  1740. ffffe983`947dfa00 00007ff9`99f0b454 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ ffffe983`947dfa00)
  1741. 00000049`1d279d38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`99f0b454
  1742.  
  1743.  
  1744. ========================================================================
  1745. ======================= Dump #4: ANALYZE VERBOSE =======================
  1746. ======================= File: 070920-5437-01.dmp =======================
  1747. ========================================================================
  1748.  
  1749. Mini Kernel Dump File: Only registers and stack trace are available
  1750. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  1751. Kernel base = 0xfffff804`5cc00000 PsLoadedModuleList = 0xfffff804`5d82a2b0
  1752. Debug session time: Thu Jul 9 11:54:21.522 2020 (UTC - 4:00)
  1753. System Uptime: 1 days 11:11:44.989
  1754.  
  1755. BugCheck 3B, {c0000005, fffff8045ce40619, ffff8b08e4616cf0, 0}
  1756. Probably caused by : ntkrnlmp.exe ( nt!PspReturnQuota+49 )
  1757. Followup: MachineOwner
  1758.  
  1759. SYSTEM_SERVICE_EXCEPTION (3b)
  1760. An exception happened while executing a system service routine.
  1761.  
  1762. Arguments:
  1763. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  1764. Arg2: fffff8045ce40619, Address of the instruction which caused the bugcheck
  1765. Arg3: ffff8b08e4616cf0, Address of the context record for the exception that caused the bugcheck
  1766. Arg4: 0000000000000000, zero.
  1767.  
  1768. Debugging Details:
  1769. DUMP_CLASS: 1
  1770. DUMP_QUALIFIER: 400
  1771. DUMP_TYPE: 2
  1772. DUMP_FILE_ATTRIBUTES: 0x8
  1773. Kernel Generated Triage Dump
  1774. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  1775. FAULTING_IP:
  1776. nt!PspReturnQuota+49
  1777. fffff804`5ce40619 488b1f mov rbx,qword ptr [rdi]
  1778. CONTEXT: ffff8b08e4616cf0 -- (.cxr 0xffff8b08e4616cf0)
  1779. rax=000000000000d939 rbx=ffff928e81836080 rcx=fffff8045cc00000
  1780. rdx=0000000000000000 rsi=00000000000000d8 rdi=fbff928e7c1f2d80
  1781. rip=fffff8045ce40619 rsp=ffff8b08e46176f0 rbp=0000000000000000
  1782. r8=0000000000000000 r9=00000000000000d8 r10=0000000000000000
  1783. r11=ffff8b08e4617790 r12=fbff928e7c1f2d80 r13=0000000000000005
  1784. r14=0000000000000000 r15=0000000000000000
  1785. iopl=0 nv up ei pl zr na po nc
  1786. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050246
  1787. nt!PspReturnQuota+0x49:
  1788. fffff804`5ce40619 488b1f mov rbx,qword ptr [rdi] ds:002b:fbff928e`7c1f2d80=????????????????
  1789. Resetting default scope
  1790. CUSTOMER_CRASH_COUNT: 1
  1791. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  1792. BUGCHECK_STR: 0x3B
  1793.  
  1794. PROCESS_NAME: naturallocomot
  1795.  
  1796. CURRENT_IRQL: 0
  1797. LAST_CONTROL_TRANSFER: from fffff8045d20c67b to fffff8045ce40619
  1798. STACK_TEXT:
  1799. ffff8b08`e46176f0 fffff804`5d20c67b : ffff928e`81836080 ffff928e`81836080 ffff928e`745f3820 fbff928e`7c1f2d80 : nt!PspReturnQuota+0x49
  1800. ffff8b08`e4617750 fffff804`5d20c4f8 : ffff928e`81836070 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObpFreeObject+0x12b
  1801. ffff8b08`e46177b0 fffff804`5ce24e97 : 00000000`00000000 00000000`00000000 ffff8b08`e4617939 ffff928e`818360b0 : nt!ObpRemoveObjectRoutine+0x88
  1802. ffff8b08`e4617810 fffff804`5d1f4bbe : ffff928e`745f3820 00000000`00000000 ffffffff`00000000 ffffffff`ffffffff : nt!ObfDereferenceObjectWithTag+0xc7
  1803. ffff8b08`e4617850 fffff804`5d1fb11c : 00000000`000001c8 00000000`00000000 00000000`00000000 000000de`21dff0d8 : nt!ObCloseHandleTableEntry+0x29e
  1804. ffff8b08`e4617990 fffff804`5cfef375 : ffff928e`838c8000 0000025d`00000001 ffff8b08`e4617a80 ffff928e`00000000 : nt!NtClose+0xec
  1805. ffff8b08`e4617a00 00007ffd`1cd6af74 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  1806. 000000de`21dff3e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`1cd6af74
  1807. THREAD_SHA1_HASH_MOD_FUNC: e8cf64670cd1aff1addd324a6202eec3e6bc9662
  1808. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: aa61a60f3df886b4a7f63e3132106f42132cd778
  1809. THREAD_SHA1_HASH_MOD: 30a3e915496deaace47137d5b90c3ecc03746bf6
  1810. FOLLOWUP_IP:
  1811. nt!PspReturnQuota+49
  1812. fffff804`5ce40619 488b1f mov rbx,qword ptr [rdi]
  1813. FAULT_INSTR_CODE: 481f8b48
  1814. SYMBOL_STACK_INDEX: 0
  1815. SYMBOL_NAME: nt!PspReturnQuota+49
  1816. FOLLOWUP_NAME: MachineOwner
  1817. MODULE_NAME: nt
  1818.  
  1819. IMAGE_NAME: ntkrnlmp.exe
  1820.  
  1821. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1822. IMAGE_VERSION: 10.0.19041.330
  1823. STACK_COMMAND: .cxr 0xffff8b08e4616cf0 ; kb
  1824. BUCKET_ID_FUNC_OFFSET: 49
  1825. FAILURE_BUCKET_ID: 0x3B_nt!PspReturnQuota
  1826. BUCKET_ID: 0x3B_nt!PspReturnQuota
  1827. PRIMARY_PROBLEM_CLASS: 0x3B_nt!PspReturnQuota
  1828. TARGET_TIME: 2020-07-09T15:54:21.000Z
  1829. SUITE_MASK: 784
  1830. PRODUCT_TYPE: 1
  1831. USER_LCID: 0
  1832. FAILURE_ID_HASH_STRING: km:0x3b_nt!pspreturnquota
  1833. FAILURE_ID_HASH: {b08ecb23-fca0-5e47-3efd-af2f42c1a228}
  1834. Followup: MachineOwner
  1835.  
  1836. ====================== Dump #4: 3RD PARTY DRIVERS ======================
  1837.  
  1838. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  1839. Oct 04 2016 - DisplayLinkXRUsbIo_x64_2.1.6.8682.sys - DisplayLink XR USB driver
  1840. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  1841. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  1842. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1843. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  1844. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1845. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1846.  
  1847. ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
  1848.  
  1849. Image name: wdcsam64.sys
  1850. Search : https://www.google.com/search?q=wdcsam64.sys
  1851. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  1852. Timestamp : Fri Oct 9 2015
  1853.  
  1854. Image name: DisplayLinkXRUsbIo_x64_2.1.6.8682.sys
  1855. Search : https://www.google.com/search?q=DisplayLinkXRUsbIo_x64_2.1.6.8682.sys
  1856. ADA Info : DisplayLink XR USB driver
  1857. Timestamp : Tue Oct 4 2016
  1858.  
  1859. Image name: imaucxhpal.sys
  1860. Search : https://www.google.com/search?q=imaucxhpal.sys
  1861. ADA Info : MA-USB (UCX) HPAL driver
  1862. Timestamp : Mon Jan 21 2019
  1863.  
  1864. Image name: iwigig.sys
  1865. Search : https://www.google.com/search?q=iwigig.sys
  1866. ADA Info : WiGig MAC driver (Intel)
  1867. Timestamp : Mon Jan 21 2019
  1868.  
  1869. Image name: TeeDriverW8x64.sys
  1870. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  1871. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  1872. Timestamp : Thu Apr 4 2019
  1873.  
  1874. Image name: e1d68x64.sys
  1875. Search : https://www.google.com/search?q=e1d68x64.sys
  1876. ADA Info : Intel(R) Gigabit Adapter driver
  1877. Timestamp : Tue May 7 2019
  1878.  
  1879. Image name: nvhda64v.sys
  1880. Search : https://www.google.com/search?q=nvhda64v.sys
  1881. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1882. Timestamp : Tue Jun 9 2020
  1883.  
  1884. Image name: nvlddmkm.sys
  1885. Search : https://www.google.com/search?q=nvlddmkm.sys
  1886. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1887. Timestamp : Sun Jun 21 2020
  1888.  
  1889. ====================== Dump #4: MICROSOFT DRIVERS ======================
  1890.  
  1891. ACPI.sys ACPI Driver for NT (Microsoft)
  1892. acpiex.sys ACPIEx Driver (Microsoft)
  1893. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  1894. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1895. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1896. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1897. ahcache.sys Application Compatibility Cache (Microsoft)
  1898. bam.sys BAM Kernal driver (Microsoft)
  1899. BasicDisplay.sys Basic Display driver (Microsoft)
  1900. BasicRender.sys Basic Render driver (Microsoft)
  1901. Beep.SYS BEEP driver (Microsoft)
  1902. bindflt.sys Windows Bind Filter driver (Microsoft)
  1903. BOOTVID.dll VGA Boot Driver (Microsoft)
  1904. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1905. cdd.dll Canonical Display Driver (Microsoft)
  1906. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1907. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1908. CI.dll Code Integrity Module (Microsoft)
  1909. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1910. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1911. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1912. CLFS.SYS Common Log File System Driver (Microsoft)
  1913. clipsp.sys CLIP Service (Microsoft)
  1914. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1915. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1916. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1917. condrv.sys Console Driver (Microsoft)
  1918. crashdmp.sys Crash Dump driver (Microsoft)
  1919. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1920. disk.sys PnP Disk Driver (Microsoft)
  1921. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1922. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1923. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1924. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  1925. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1926. dxgmms2.sys DirectX Graphics MMS
  1927. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1928. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1929. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1930. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1931. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1932. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1933. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1934. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1935. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1936. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1937. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1938. HdAudio.sys High Definition Audio Function driver (Microsoft)
  1939. HIDCLASS.SYS Hid Class Library (Microsoft)
  1940. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1941. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1942. HTTP.sys HTTP Protocol Stack (Microsoft)
  1943. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1944. intelppm.sys Processor Device Driver (Microsoft)
  1945. IntelTA.sys Intel Telemetry Driver
  1946. iorate.sys I/O rate control Filter (Microsoft)
  1947. kbdclass.sys Keyboard Class Driver (Microsoft)
  1948. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1949. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  1950. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1951. ks.sys Kernal CSA Library (Microsoft)
  1952. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1953. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1954. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1955. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1956. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1957. mcupdate.dll Media Center Update (Microsoft)
  1958. mmcss.sys MMCSS Driver (Microsoft)
  1959. monitor.sys Monitor Driver (Microsoft)
  1960. mouclass.sys Mouse Class Driver (Microsoft)
  1961. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1962. mountmgr.sys Mount Point Manager (Microsoft)
  1963. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1964. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1965. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  1966. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1967. Msfs.SYS Mailslot driver (Microsoft)
  1968. msisadrv.sys ISA Driver (Microsoft)
  1969. MSKSSRV.sys MS KS Server driver
  1970. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1971. msquic.sys Windows QUIC Driver
  1972. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1973. mssmbios.sys System Management BIOS driver (Microsoft)
  1974. mup.sys Multiple UNC Provider driver (Microsoft)
  1975. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1976. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1977. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1978. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1979. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1980. NDProxy.sys NDIS Proxy driver (Microsoft)
  1981. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1982. netbios.sys NetBIOS Interface driver (Microsoft)
  1983. netbt.sys MBT Transport driver (Microsoft)
  1984. NETIO.SYS Network I/O Subsystem (Microsoft)
  1985. Npfs.SYS NPFS driver (Microsoft)
  1986. npsvctrig.sys Named pipe service triggers (Microsoft)
  1987. nsiproxy.sys NSI Proxy driver (Microsoft)
  1988. Ntfs.sys NT File System Driver (Microsoft)
  1989. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1990. ntosext.sys NTOS Extension Host driver (Microsoft)
  1991. Null.SYS NULL Driver (Microsoft)
  1992. pacer.sys QoS Packet Scheduler (Microsoft)
  1993. partmgr.sys Partition driver (Microsoft)
  1994. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1995. pcw.sys Performance Counter Driver (Microsoft)
  1996. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1997. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1998. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1999. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2000. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  2001. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  2002. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  2003. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  2004. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2005. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2006. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  2007. rdyboost.sys ReadyBoost Driver (Microsoft)
  2008. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2009. serenum.sys Serial Port Enumerator (Microsoft)
  2010. serial.sys Serial Device Driver
  2011. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2012. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2013. spaceport.sys Storage Spaces driver (Microsoft)
  2014. srv2.sys Smb 2.0 Server driver (Microsoft)
  2015. srvnet.sys Server Network driver (Microsoft)
  2016. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  2017. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  2018. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2019. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2020. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2021. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2022. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2023. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2024. TDI.SYS TDI Wrapper driver (Microsoft)
  2025. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2026. tm.sys Kernel Transaction Manager driver (Microsoft)
  2027. ucx01000.sys USB Controller Extension (Microsoft)
  2028. udfs.sys UDF File System driver (Microsoft)
  2029. UEFI.sys UEFI NT driver (Microsoft)
  2030. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2031. usbaudio.sys USB Audio Class Driver (Microsoft)
  2032. usbaudio2.sys Microsoft USB Audio Class 2.0 Driver
  2033. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2034. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2035. UsbHub3.sys USB3 HUB driver (Microsoft)
  2036. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  2037. USBXHCI.SYS USB XHCI driver (Microsoft)
  2038. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2039. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2040. volmgr.sys Volume Manager Driver (Microsoft)
  2041. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2042. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2043. volume.sys Volume driver (Microsoft)
  2044. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2045. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  2046. watchdog.sys Watchdog driver (Microsoft)
  2047. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2048. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2049. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2050. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2051. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2052. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2053. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2054. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2055. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2056. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2057. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2058. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2059. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2060. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2061. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2062. Wof.sys Windows Overlay Filter (Microsoft)
  2063. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  2064. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2065. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  2066.  
  2067. ====================== Dump #4: UNLOADED MODULES =======================
  2068.  
  2069. fffff804`77120000 fffff804`77171000 usbvideo.sys
  2070. fffff804`771a0000 fffff804`771b1000 MSKSSRV.sys
  2071. fffff804`77180000 fffff804`77191000 MSKSSRV.sys
  2072. fffff804`77110000 fffff804`7711c000 WdmCompanion
  2073. fffff804`76fb0000 fffff804`76fc1000 MpKslDrv.sys
  2074. fffff804`77040000 fffff804`7704f000 hiber_storpo
  2075. fffff804`77050000 fffff804`77083000 hiber_storah
  2076. fffff804`77090000 fffff804`770ae000 hiber_dumpfv
  2077. fffff804`76fd0000 fffff804`76fdf000 hiber_storpo
  2078. fffff804`76fe0000 fffff804`77013000 hiber_storah
  2079. fffff804`77020000 fffff804`7703e000 hiber_dumpfv
  2080. fffff804`76f40000 fffff804`76f4f000 hiber_storpo
  2081. fffff804`76f50000 fffff804`76f83000 hiber_storah
  2082. fffff804`76f90000 fffff804`76fae000 hiber_dumpfv
  2083. fffff804`75210000 fffff804`7521f000 dump_storpor
  2084. fffff804`75260000 fffff804`75293000 dump_storahc
  2085. fffff804`752c0000 fffff804`752de000 dump_dumpfve
  2086. fffff804`76100000 fffff804`76155000 WUDFRd.sys
  2087. fffff804`75b30000 fffff804`75b4c000 dam.sys
  2088. fffff804`61c00000 fffff804`61c11000 WdBoot.sys
  2089. fffff804`62cb0000 fffff804`62cc0000 hwpolicy.sys
  2090.  
  2091. ====================== Dump #4: BIOS INFORMATION =======================
  2092.  
  2093. [SMBIOS Data Tables v3.1]
  2094. [DMI Version - 0]
  2095. [2.0 Calling Convention - No]
  2096. [Table Size - 2808 bytes]
  2097. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  2098. Vendor American Megatrends Inc.
  2099. BIOS Version P4.20
  2100. BIOS Starting Address Segment f000
  2101. BIOS Release Date 10/31/2019
  2102. BIOS ROM Size 1000000
  2103. BIOS Characteristics
  2104. 07: - PCI Supported
  2105. 11: - Upgradeable FLASH BIOS
  2106. 12: - BIOS Shadowing Supported
  2107. 15: - CD-Boot Supported
  2108. 16: - Selectable Boot Supported
  2109. 17: - BIOS ROM Socketed
  2110. 19: - EDD Supported
  2111. 23: - 1.2MB Floppy Supported
  2112. 24: - 720KB Floppy Supported
  2113. 25: - 2.88MB Floppy Supported
  2114. 26: - Print Screen Device Supported
  2115. 27: - Keyboard Services Supported
  2116. 28: - Serial Services Supported
  2117. 29: - Printer Services Supported
  2118. 32: - BIOS Vendor Reserved
  2119. BIOS Characteristic Extensions
  2120. 00: - ACPI Supported
  2121. 01: - USB Legacy Supported
  2122. 08: - BIOS Boot Specification Supported
  2123. 10: - Specification Reserved
  2124. 11: - Specification Reserved
  2125. BIOS Major Revision 5
  2126. BIOS Minor Revision 12
  2127. EC Firmware Major Revision 255
  2128. EC Firmware Minor Revision 255
  2129. [System Information (Type 1) - Length 27 - Handle 0001h]
  2130. UUID 00000000-0000-0000-0000-000000000000
  2131. Wakeup Type Power Switch
  2132. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2133. Manufacturer ASRock
  2134. Product Z370 Extreme4
  2135. Version
  2136. Feature Flags 09h
  2137. -1660307744: - -1660307696: - ÷7?Öý
  2138. Location
  2139. Chassis Handle 0003h
  2140. Board Type 0ah - Processor/Memory Module
  2141. Number of Child Handles 0
  2142. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2143. Chassis Type Desktop
  2144. Bootup State Safe
  2145. Power Supply State Safe
  2146. Thermal State Safe
  2147. Security Status None
  2148. OEM Defined 0
  2149. Height 0U
  2150. Number of Power Cords 1
  2151. Number of Contained Elements 0
  2152. Contained Element Size 3
  2153. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  2154. Number of Strings 1
  2155. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  2156. Location 03h - SystemBoard/Motherboard
  2157. Use 03h - System Memory
  2158. Memory Error Correction 03h - None
  2159. Maximum Capacity 67108864KB
  2160. Number of Memory Devices 4
  2161. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  2162. Physical Memory Array Handle 0010h
  2163. Total Width 0 bits
  2164. Data Width 0 bits
  2165. Form Factor 09h - DIMM
  2166. Device Locator ChannelA-DIMM0
  2167. Bank Locator BANK 0
  2168. Memory Type 02h - Unknown
  2169. Type Detail 0000h -
  2170. Speed 0MHz
  2171. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  2172. Physical Memory Array Handle 0010h
  2173. Total Width 64 bits
  2174. Data Width 64 bits
  2175. Size 8192MB
  2176. Form Factor 09h - DIMM
  2177. Device Locator ChannelA-DIMM1
  2178. Bank Locator BANK 1
  2179. Memory Type 1ah - Specification Reserved
  2180. Type Detail 4080h - Synchronous
  2181. Speed 3200MHz
  2182. Manufacturer 029E
  2183. Part Number CMK16GX4M2B3200C16
  2184. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  2185. Physical Memory Array Handle 0010h
  2186. Total Width 0 bits
  2187. Data Width 0 bits
  2188. Form Factor 09h - DIMM
  2189. Device Locator ChannelB-DIMM0
  2190. Bank Locator BANK 2
  2191. Memory Type 02h - Unknown
  2192. Type Detail 0000h -
  2193. Speed 0MHz
  2194. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  2195. Physical Memory Array Handle 0010h
  2196. Total Width 64 bits
  2197. Data Width 64 bits
  2198. Size 8192MB
  2199. Form Factor 09h - DIMM
  2200. Device Locator ChannelB-DIMM1
  2201. Bank Locator BANK 3
  2202. Memory Type 1ah - Specification Reserved
  2203. Type Detail 4080h - Synchronous
  2204. Speed 3200MHz
  2205. Manufacturer 029E
  2206. Part Number CMK16GX4M2B3200C16
  2207. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  2208. Starting Address 00000000h
  2209. Ending Address 00ffffffh
  2210. Memory Array Handle 0010h
  2211. Partition Width 02
  2212. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  2213. Socket Designation L1 Cache
  2214. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2215. Maximum Cache Size 0180h - 384K
  2216. Installed Size 0180h - 384K
  2217. Supported SRAM Type 0020h - Synchronous
  2218. Current SRAM Type 0020h - Synchronous
  2219. Cache Speed 0ns
  2220. Error Correction Type ParitySingle-Bit ECC
  2221. System Cache Type Unified
  2222. Associativity 8-way Set-Associative
  2223. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  2224. Socket Designation L2 Cache
  2225. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2226. Maximum Cache Size 0600h - 1536K
  2227. Installed Size 0600h - 1536K
  2228. Supported SRAM Type 0020h - Synchronous
  2229. Current SRAM Type 0020h - Synchronous
  2230. Cache Speed 0ns
  2231. Error Correction Type Multi-Bit ECC
  2232. System Cache Type Unified
  2233. Associativity 4-way Set-Associative
  2234. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  2235. Socket Designation L3 Cache
  2236. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2237. Maximum Cache Size 3000h - 12288K
  2238. Installed Size 3000h - 12288K
  2239. Supported SRAM Type 0020h - Synchronous
  2240. Current SRAM Type 0020h - Synchronous
  2241. Cache Speed 0ns
  2242. Error Correction Type Specification Reserved
  2243. System Cache Type Unified
  2244. Associativity 16-way Set-Associative
  2245. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  2246. Socket Designation CPUSocket
  2247. Processor Type Central Processor
  2248. Processor Family c6h - Specification Reserved
  2249. Processor Manufacturer Intel(R) Corporation
  2250. Processor ID ea060900fffbebbf
  2251. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  2252. Processor Voltage 8ah - 1.0V
  2253. External Clock 100MHz
  2254. Max Speed 8300MHz
  2255. Current Speed 3700MHz
  2256. Status Enabled Populated
  2257. Processor Upgrade Specification Reserved
  2258. L1 Cache Handle 0016h
  2259. L2 Cache Handle 0017h
  2260. L3 Cache Handle 0018h
  2261. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  2262. Starting Address 00000000h
  2263. Ending Address 007fffffh
  2264. Memory Device Handle 0012h
  2265. Mem Array Mapped Adr Handle 0015h
  2266. Partition Row Position 01
  2267. Interleave Position 01
  2268. Interleave Data Depth 02
  2269. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  2270. Starting Address 00800000h
  2271. Ending Address 00ffffffh
  2272. Memory Device Handle 0014h
  2273. Mem Array Mapped Adr Handle 0015h
  2274. Partition Row Position 01
  2275. Interleave Position 02
  2276. Interleave Data Depth 02
  2277.  
  2278. ========================== Dump #4: Extra #1 ===========================
  2279.  
  2280. 4: kd> !verifier
  2281. fffff8045d82a6c0: Unable to get verifier list.
  2282.  
  2283. ========================== Dump #4: Extra #2 ===========================
  2284.  
  2285. 4: kd> !thread
  2286. THREAD ffff928e838c8080 Cid 1d24.0d18 Teb: 000000de21a84000 Win32Thread: ffff928e856c26f0 RUNNING on processor 4
  2287. Not impersonating
  2288. GetUlongFromAddress: unable to read from fffff8045d81143c
  2289. Owning Process ffff928e81728080 Image: naturallocomot
  2290. Attached Process N/A Image: N/A
  2291. fffff78000000000: Unable to get shared data
  2292. Wait Start TickCount 8109119
  2293. Context Switch Count 1652949 IdealProcessor: 2
  2294. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2295. UserTime 00:00:00.000
  2296. KernelTime 00:00:00.000
  2297. Win32 Start Address 0x00007ff6d2f3d3ec
  2298. Stack Init ffff8b08e4617b90 Current ffff8b08e4616c00
  2299. Base ffff8b08e4618000 Limit ffff8b08e4611000 Call 0000000000000000
  2300. Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2301. Child-SP RetAddr : Args to Child : Call Site
  2302. ffff8b08`e46163e8 fffff804`5cfef929 : 00000000`0000003b 00000000`c0000005 fffff804`5ce40619 ffff8b08`e4616cf0 : nt!KeBugCheckEx
  2303. ffff8b08`e46163f0 fffff804`5cfeed7c : ffff8b08`e4616790 fffff804`5cce68e0 ffff8b08`e46165e0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  2304. ffff8b08`e4616530 fffff804`5cfe68df : fffff804`5cfeed00 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceHandler+0x7c
  2305. ffff8b08`e4616570 fffff804`5ce32fb7 : ffff8b08`e4616ae0 00000000`00000000 ffff8b08`e4617a00 fffff804`5cfef375 : nt!RtlpExecuteHandlerForException+0xf
  2306. ffff8b08`e46165a0 fffff804`5ce7b226 : ffff8b08`e46174b8 ffff8b08`e46171f0 ffff8b08`e46174b8 fbff928e`7c1f2d80 : nt!RtlDispatchException+0x297
  2307. ffff8b08`e4616cc0 fffff804`5cfefa6c : 00007ffd`1c46a000 00000000`00000000 00000000`00000000 00000000`00000001 : nt!KiDispatchException+0x186
  2308. ffff8b08`e4617380 fffff804`5cfeb7a0 : ffff8b08`e4617780 0a000001`177fb121 00000000`00000000 fffff804`00000000 : nt!KiExceptionDispatch+0x12c
  2309. ffff8b08`e4617560 fffff804`5ce40619 : ffff8b08`e46176f0 ffff8b08`e46176f0 ffff928e`818360b0 fffff804`5d20b72c : nt!KiGeneralProtectionFault+0x320 (TrapFrame @ ffff8b08`e4617560)
  2310. ffff8b08`e46176f0 fffff804`5d20c67b : ffff928e`81836080 ffff928e`81836080 ffff928e`745f3820 fbff928e`7c1f2d80 : nt!PspReturnQuota+0x49
  2311. ffff8b08`e4617750 fffff804`5d20c4f8 : ffff928e`81836070 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ObpFreeObject+0x12b
  2312. ffff8b08`e46177b0 fffff804`5ce24e97 : 00000000`00000000 00000000`00000000 ffff8b08`e4617939 ffff928e`818360b0 : nt!ObpRemoveObjectRoutine+0x88
  2313. ffff8b08`e4617810 fffff804`5d1f4bbe : ffff928e`745f3820 00000000`00000000 ffffffff`00000000 ffffffff`ffffffff : nt!ObfDereferenceObjectWithTag+0xc7
  2314. ffff8b08`e4617850 fffff804`5d1fb11c : 00000000`000001c8 00000000`00000000 00000000`00000000 000000de`21dff0d8 : nt!ObCloseHandleTableEntry+0x29e
  2315. ffff8b08`e4617990 fffff804`5cfef375 : ffff928e`838c8000 0000025d`00000001 ffff8b08`e4617a80 ffff928e`00000000 : nt!NtClose+0xec
  2316. ffff8b08`e4617a00 00007ffd`1cd6af74 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ ffff8b08`e4617a00)
  2317. 000000de`21dff3e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`1cd6af74
  2318.  
  2319.  
  2320. ========================================================================
  2321. ======================= Dump #5: ANALYZE VERBOSE =======================
  2322. ======================= File: 070820-4750-01.dmp =======================
  2323. ========================================================================
  2324.  
  2325. Mini Kernel Dump File: Only registers and stack trace are available
  2326. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  2327. Kernel base = 0xfffff806`71800000 PsLoadedModuleList = 0xfffff806`7242a2b0
  2328. Debug session time: Wed Jul 8 00:42:02.440 2020 (UTC - 4:00)
  2329. System Uptime: 0 days 4:30:04.107
  2330.  
  2331. BugCheck A, {ffffc48aea284850, 2, 0, fffff80671a98aff}
  2332. Probably caused by : memory_corruption
  2333. Followup: memory_corruption
  2334.  
  2335. IRQL_NOT_LESS_OR_EQUAL (a)
  2336. An attempt was made to access a pageable (or completely invalid) address at an
  2337. interrupt request level (IRQL) that is too high. This is usually
  2338. caused by drivers using improper addresses.
  2339. If a kernel debugger is available get the stack backtrace.
  2340.  
  2341. Arguments:
  2342. Arg1: ffffc48aea284850, memory referenced
  2343. Arg2: 0000000000000002, IRQL
  2344. Arg3: 0000000000000000, bitfield :
  2345. bit 0 : value 0 = read operation, 1 = write operation
  2346. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  2347. Arg4: fffff80671a98aff, address which referenced memory
  2348.  
  2349. Debugging Details:
  2350. DUMP_CLASS: 1
  2351. DUMP_QUALIFIER: 400
  2352. DUMP_TYPE: 2
  2353. DUMP_FILE_ATTRIBUTES: 0x8
  2354. Kernel Generated Triage Dump
  2355. READ_ADDRESS: fffff806724fa388: Unable to get MiVisibleState
  2356. ffffc48aea284850 Paged pool
  2357. CURRENT_IRQL: 2
  2358. FAULTING_IP:
  2359. nt!MiRestoreTransitionPte+17f
  2360. fffff806`71a98aff 488b09 mov rcx,qword ptr [rcx]
  2361. CUSTOMER_CRASH_COUNT: 1
  2362. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  2363. BUGCHECK_STR: AV
  2364.  
  2365. PROCESS_NAME: System
  2366.  
  2367. TRAP_FRAME: ffffac8587f876f0 -- (.trap 0xffffac8587f876f0)
  2368. NOTE: The trap frame does not contain all registers.
  2369. Some register values may be zeroed or incorrect.
  2370. rax=0000200000000000 rbx=0000000000000000 rcx=ffffc48aea284850
  2371. rdx=ffffc48aea284850 rsi=0000000000000000 rdi=0000000000000000
  2372. rip=fffff80671a98aff rsp=ffffac8587f87880 rbp=fffff80672450ac0
  2373. r8=0000000080000000 r9=0000000000000003 r10=fffff28000000000
  2374. r11=ffffac8587f87810 r12=0000000000000000 r13=0000000000000000
  2375. r14=0000000000000000 r15=0000000000000000
  2376. iopl=0 nv up ei ng nz na po nc
  2377. nt!MiRestoreTransitionPte+0x17f:
  2378. fffff806`71a98aff 488b09 mov rcx,qword ptr [rcx] ds:ffffc48a`ea284850=????????????????
  2379. Resetting default scope
  2380. LAST_CONTROL_TRANSFER: from fffff80671bef929 to fffff80671bdda20
  2381. STACK_TEXT:
  2382. ffffac85`87f875a8 fffff806`71bef929 : 00000000`0000000a ffffc48a`ea284850 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  2383. ffffac85`87f875b0 fffff806`71bebc29 : 00000000`00000000 00000000`0000011e ffffcde3`2d8b8f7e ffffc68a`e902c040 : nt!KiBugCheckDispatch+0x69
  2384. ffffac85`87f876f0 fffff806`71a98aff : c48aea28`485004d0 fffff280`0bdcd080 fffff280`0a028520 00000000`00000000 : nt!KiPageFault+0x469
  2385. ffffac85`87f87880 fffff806`71b6fa0e : c48aea28`485004d0 fffff280`0a028520 00000000`00000000 00000000`00000001 : nt!MiRestoreTransitionPte+0x17f
  2386. ffffac85`87f878f0 fffff806`71d58191 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveLowestPriorityStandbyPage+0x1ce
  2387. ffffac85`87f87990 fffff806`71d583e3 : fffff806`72450ac0 00000000`00000000 fffff806`00000000 00000000`00000240 : nt!MiPruneStandbyPages+0x265
  2388. ffffac85`87f87a20 fffff806`71a33f25 : ffffc68a`e902c040 fffff806`71d58350 ffffc68a`dd715010 fffff806`72452360 : nt!MiRebalanceZeroFreeLists+0x93
  2389. ffffac85`87f87a70 fffff806`71b46715 : ffffc68a`e902c040 00000000`00000080 ffffc68a`dd69c040 0b6abca9`00000001 : nt!ExpWorkerThread+0x105
  2390. ffffac85`87f87b10 fffff806`71be5078 : fffff806`6e938180 ffffc68a`e902c040 fffff806`71b466c0 4949c94a`5f393fff : nt!PspSystemThreadStartup+0x55
  2391. ffffac85`87f87b60 00000000`00000000 : ffffac85`87f88000 ffffac85`87f81000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  2392. STACK_COMMAND: kb
  2393. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  2394. fffff80671a987e7-fffff80671a987e8 2 bytes - nt!MiHyperPage+23
  2395. [ 80 f6:00 9b ]
  2396. fffff80671a9882a-fffff80671a9882b 2 bytes - nt!MiHyperPage+66 (+0x43)
  2397. [ ff f6:7f 9b ]
  2398. fffff80671a989ee - nt!MiRestoreTransitionPte+6e (+0x1c4)
  2399. [ fa:f2 ]
  2400. fffff80671a98bb6 - nt!MiRestoreTransitionPte+236 (+0x1c8)
  2401. [ fa:f2 ]
  2402. fffff80671a98c97 - nt!MiRestoreTransitionPte+317 (+0xe1)
  2403. [ fa:f2 ]
  2404. fffff80671a98e48 - nt!MiChangePageAttributeBatch+118 (+0x1b1)
  2405. [ fa:f2 ]
  2406. 8 errors : !nt (fffff80671a987e7-fffff80671a98e48)
  2407. MODULE_NAME: memory_corruption
  2408.  
  2409. IMAGE_NAME: memory_corruption
  2410.  
  2411. FOLLOWUP_NAME: memory_corruption
  2412. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2413. MEMORY_CORRUPTOR: LARGE
  2414. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2415. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2416. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  2417. TARGET_TIME: 2020-07-08T04:42:02.000Z
  2418. SUITE_MASK: 784
  2419. PRODUCT_TYPE: 1
  2420. USER_LCID: 0
  2421. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  2422. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  2423. Followup: memory_corruption
  2424.  
  2425. ====================== Dump #5: 3RD PARTY DRIVERS ======================
  2426.  
  2427. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  2428. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  2429. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  2430. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  2431. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  2432. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  2433. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  2434.  
  2435. ================== Dump #5: 3RD PARTY DRIVERS (FULL) ===================
  2436.  
  2437. Image name: wdcsam64.sys
  2438. Search : https://www.google.com/search?q=wdcsam64.sys
  2439. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  2440. Timestamp : Fri Oct 9 2015
  2441.  
  2442. Image name: imaucxhpal.sys
  2443. Search : https://www.google.com/search?q=imaucxhpal.sys
  2444. ADA Info : MA-USB (UCX) HPAL driver
  2445. Timestamp : Mon Jan 21 2019
  2446.  
  2447. Image name: iwigig.sys
  2448. Search : https://www.google.com/search?q=iwigig.sys
  2449. ADA Info : WiGig MAC driver (Intel)
  2450. Timestamp : Mon Jan 21 2019
  2451.  
  2452. Image name: TeeDriverW8x64.sys
  2453. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  2454. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  2455. Timestamp : Thu Apr 4 2019
  2456.  
  2457. Image name: e1d68x64.sys
  2458. Search : https://www.google.com/search?q=e1d68x64.sys
  2459. ADA Info : Intel(R) Gigabit Adapter driver
  2460. Timestamp : Tue May 7 2019
  2461.  
  2462. Image name: nvhda64v.sys
  2463. Search : https://www.google.com/search?q=nvhda64v.sys
  2464. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  2465. Timestamp : Tue Jun 9 2020
  2466.  
  2467. Image name: nvlddmkm.sys
  2468. Search : https://www.google.com/search?q=nvlddmkm.sys
  2469. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  2470. Timestamp : Sun Jun 21 2020
  2471.  
  2472. ====================== Dump #5: MICROSOFT DRIVERS ======================
  2473.  
  2474. ACPI.sys ACPI Driver for NT (Microsoft)
  2475. acpiex.sys ACPIEx Driver (Microsoft)
  2476. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  2477. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  2478. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  2479. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  2480. ahcache.sys Application Compatibility Cache (Microsoft)
  2481. bam.sys BAM Kernal driver (Microsoft)
  2482. BasicDisplay.sys Basic Display driver (Microsoft)
  2483. BasicRender.sys Basic Render driver (Microsoft)
  2484. Beep.SYS BEEP driver (Microsoft)
  2485. bindflt.sys Windows Bind Filter driver (Microsoft)
  2486. BOOTVID.dll VGA Boot Driver (Microsoft)
  2487. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  2488. cdd.dll Canonical Display Driver (Microsoft)
  2489. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  2490. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  2491. CI.dll Code Integrity Module (Microsoft)
  2492. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  2493. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  2494. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  2495. CLFS.SYS Common Log File System Driver (Microsoft)
  2496. clipsp.sys CLIP Service (Microsoft)
  2497. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  2498. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  2499. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  2500. condrv.sys Console Driver (Microsoft)
  2501. crashdmp.sys Crash Dump driver (Microsoft)
  2502. dfsc.sys DFS Namespace Client Driver (Microsoft)
  2503. disk.sys PnP Disk Driver (Microsoft)
  2504. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  2505. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2506. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2507. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  2508. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  2509. dxgmms2.sys DirectX Graphics MMS
  2510. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  2511. fastfat.SYS Fast FAT File System Driver (Microsoft)
  2512. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  2513. fileinfo.sys FileInfo Filter Driver (Microsoft)
  2514. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  2515. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  2516. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  2517. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  2518. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  2519. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  2520. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  2521. HdAudio.sys High Definition Audio Function driver (Microsoft)
  2522. HIDCLASS.SYS Hid Class Library (Microsoft)
  2523. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  2524. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  2525. HTTP.sys HTTP Protocol Stack (Microsoft)
  2526. intelpep.sys Intel Power Engine Plugin (Microsoft)
  2527. intelppm.sys Processor Device Driver (Microsoft)
  2528. IntelTA.sys Intel Telemetry Driver
  2529. iorate.sys I/O rate control Filter (Microsoft)
  2530. kbdclass.sys Keyboard Class Driver (Microsoft)
  2531. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  2532. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  2533. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  2534. ks.sys Kernal CSA Library (Microsoft)
  2535. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  2536. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  2537. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  2538. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  2539. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  2540. mcupdate.dll Media Center Update (Microsoft)
  2541. mmcss.sys MMCSS Driver (Microsoft)
  2542. monitor.sys Monitor Driver (Microsoft)
  2543. mouclass.sys Mouse Class Driver (Microsoft)
  2544. mouhid.sys HID Mouse Filter Driver (Microsoft)
  2545. mountmgr.sys Mount Point Manager (Microsoft)
  2546. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  2547. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  2548. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  2549. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  2550. Msfs.SYS Mailslot driver (Microsoft)
  2551. msisadrv.sys ISA Driver (Microsoft)
  2552. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  2553. msquic.sys Windows QUIC Driver
  2554. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  2555. mssmbios.sys System Management BIOS driver (Microsoft)
  2556. mup.sys Multiple UNC Provider driver (Microsoft)
  2557. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  2558. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  2559. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  2560. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  2561. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  2562. NDProxy.sys NDIS Proxy driver (Microsoft)
  2563. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  2564. netbios.sys NetBIOS Interface driver (Microsoft)
  2565. netbt.sys MBT Transport driver (Microsoft)
  2566. NETIO.SYS Network I/O Subsystem (Microsoft)
  2567. Npfs.SYS NPFS driver (Microsoft)
  2568. npsvctrig.sys Named pipe service triggers (Microsoft)
  2569. nsiproxy.sys NSI Proxy driver (Microsoft)
  2570. Ntfs.sys NT File System Driver (Microsoft)
  2571. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  2572. ntosext.sys NTOS Extension Host driver (Microsoft)
  2573. Null.SYS NULL Driver (Microsoft)
  2574. pacer.sys QoS Packet Scheduler (Microsoft)
  2575. partmgr.sys Partition driver (Microsoft)
  2576. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  2577. pcw.sys Performance Counter Driver (Microsoft)
  2578. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  2579. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  2580. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  2581. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2582. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  2583. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  2584. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  2585. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  2586. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2587. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2588. rdyboost.sys ReadyBoost Driver (Microsoft)
  2589. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2590. serenum.sys Serial Port Enumerator (Microsoft)
  2591. serial.sys Serial Device Driver
  2592. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2593. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2594. spaceport.sys Storage Spaces driver (Microsoft)
  2595. srv2.sys Smb 2.0 Server driver (Microsoft)
  2596. srvnet.sys Server Network driver (Microsoft)
  2597. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  2598. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  2599. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2600. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2601. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2602. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2603. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2604. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2605. TDI.SYS TDI Wrapper driver (Microsoft)
  2606. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2607. tm.sys Kernel Transaction Manager driver (Microsoft)
  2608. ucx01000.sys USB Controller Extension (Microsoft)
  2609. udfs.sys UDF File System driver (Microsoft)
  2610. UEFI.sys UEFI NT driver (Microsoft)
  2611. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2612. usbaudio.sys USB Audio Class Driver (Microsoft)
  2613. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2614. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2615. UsbHub3.sys USB3 HUB driver (Microsoft)
  2616. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  2617. USBXHCI.SYS USB XHCI driver (Microsoft)
  2618. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2619. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2620. volmgr.sys Volume Manager Driver (Microsoft)
  2621. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2622. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2623. volume.sys Volume driver (Microsoft)
  2624. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2625. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  2626. watchdog.sys Watchdog driver (Microsoft)
  2627. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2628. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2629. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2630. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2631. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2632. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2633. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2634. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2635. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2636. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2637. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2638. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2639. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2640. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2641. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2642. Wof.sys Windows Overlay Filter (Microsoft)
  2643. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  2644. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2645. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  2646.  
  2647. ====================== Dump #5: UNLOADED MODULES =======================
  2648.  
  2649. fffff806`ccf10000 fffff806`ccf1f000 hiber_storpo
  2650. fffff806`ccf20000 fffff806`ccf53000 hiber_storah
  2651. fffff806`ccf60000 fffff806`ccf7e000 hiber_dumpfv
  2652. fffff806`ccea0000 fffff806`cceaf000 hiber_storpo
  2653. fffff806`cceb0000 fffff806`ccee3000 hiber_storah
  2654. fffff806`ccef0000 fffff806`ccf0e000 hiber_dumpfv
  2655. fffff806`895d0000 fffff806`895df000 dump_storpor
  2656. fffff806`88a40000 fffff806`88a73000 dump_storahc
  2657. fffff806`88aa0000 fffff806`88abe000 dump_dumpfve
  2658. fffff806`89790000 fffff806`897e5000 WUDFRd.sys
  2659. fffff806`893c0000 fffff806`893dc000 dam.sys
  2660. fffff806`75600000 fffff806`75611000 WdBoot.sys
  2661. fffff806`766b0000 fffff806`766c0000 hwpolicy.sys
  2662.  
  2663. ====================== Dump #5: BIOS INFORMATION =======================
  2664.  
  2665. [SMBIOS Data Tables v3.1]
  2666. [DMI Version - 0]
  2667. [2.0 Calling Convention - No]
  2668. [Table Size - 2808 bytes]
  2669. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  2670. Vendor American Megatrends Inc.
  2671. BIOS Version P4.20
  2672. BIOS Starting Address Segment f000
  2673. BIOS Release Date 10/31/2019
  2674. BIOS ROM Size 1000000
  2675. BIOS Characteristics
  2676. 07: - PCI Supported
  2677. 11: - Upgradeable FLASH BIOS
  2678. 12: - BIOS Shadowing Supported
  2679. 15: - CD-Boot Supported
  2680. 16: - Selectable Boot Supported
  2681. 17: - BIOS ROM Socketed
  2682. 19: - EDD Supported
  2683. 23: - 1.2MB Floppy Supported
  2684. 24: - 720KB Floppy Supported
  2685. 25: - 2.88MB Floppy Supported
  2686. 26: - Print Screen Device Supported
  2687. 27: - Keyboard Services Supported
  2688. 28: - Serial Services Supported
  2689. 29: - Printer Services Supported
  2690. 32: - BIOS Vendor Reserved
  2691. BIOS Characteristic Extensions
  2692. 00: - ACPI Supported
  2693. 01: - USB Legacy Supported
  2694. 08: - BIOS Boot Specification Supported
  2695. 10: - Specification Reserved
  2696. 11: - Specification Reserved
  2697. BIOS Major Revision 5
  2698. BIOS Minor Revision 12
  2699. EC Firmware Major Revision 255
  2700. EC Firmware Minor Revision 255
  2701. [System Information (Type 1) - Length 27 - Handle 0001h]
  2702. UUID 00000000-0000-0000-0000-000000000000
  2703. Wakeup Type Power Switch
  2704. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2705. Manufacturer ASRock
  2706. Product Z370 Extreme4
  2707. Version
  2708. Feature Flags 09h
  2709. -1387415840: - -1387415792: - ÷7?Öý
  2710. Location
  2711. Chassis Handle 0003h
  2712. Board Type 0ah - Processor/Memory Module
  2713. Number of Child Handles 0
  2714. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2715. Chassis Type Desktop
  2716. Bootup State Safe
  2717. Power Supply State Safe
  2718. Thermal State Safe
  2719. Security Status None
  2720. OEM Defined 0
  2721. Height 0U
  2722. Number of Power Cords 1
  2723. Number of Contained Elements 0
  2724. Contained Element Size 3
  2725. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  2726. Number of Strings 1
  2727. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  2728. Location 03h - SystemBoard/Motherboard
  2729. Use 03h - System Memory
  2730. Memory Error Correction 03h - None
  2731. Maximum Capacity 67108864KB
  2732. Number of Memory Devices 4
  2733. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  2734. Physical Memory Array Handle 0010h
  2735. Total Width 0 bits
  2736. Data Width 0 bits
  2737. Form Factor 09h - DIMM
  2738. Device Locator ChannelA-DIMM0
  2739. Bank Locator BANK 0
  2740. Memory Type 02h - Unknown
  2741. Type Detail 0000h -
  2742. Speed 0MHz
  2743. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  2744. Physical Memory Array Handle 0010h
  2745. Total Width 64 bits
  2746. Data Width 64 bits
  2747. Size 8192MB
  2748. Form Factor 09h - DIMM
  2749. Device Locator ChannelA-DIMM1
  2750. Bank Locator BANK 1
  2751. Memory Type 1ah - Specification Reserved
  2752. Type Detail 4080h - Synchronous
  2753. Speed 3200MHz
  2754. Manufacturer 029E
  2755. Part Number CMK16GX4M2B3200C16
  2756. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  2757. Physical Memory Array Handle 0010h
  2758. Total Width 0 bits
  2759. Data Width 0 bits
  2760. Form Factor 09h - DIMM
  2761. Device Locator ChannelB-DIMM0
  2762. Bank Locator BANK 2
  2763. Memory Type 02h - Unknown
  2764. Type Detail 0000h -
  2765. Speed 0MHz
  2766. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  2767. Physical Memory Array Handle 0010h
  2768. Total Width 64 bits
  2769. Data Width 64 bits
  2770. Size 8192MB
  2771. Form Factor 09h - DIMM
  2772. Device Locator ChannelB-DIMM1
  2773. Bank Locator BANK 3
  2774. Memory Type 1ah - Specification Reserved
  2775. Type Detail 4080h - Synchronous
  2776. Speed 3200MHz
  2777. Manufacturer 029E
  2778. Part Number CMK16GX4M2B3200C16
  2779. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  2780. Starting Address 00000000h
  2781. Ending Address 00ffffffh
  2782. Memory Array Handle 0010h
  2783. Partition Width 02
  2784. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  2785. Socket Designation L1 Cache
  2786. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2787. Maximum Cache Size 0180h - 384K
  2788. Installed Size 0180h - 384K
  2789. Supported SRAM Type 0020h - Synchronous
  2790. Current SRAM Type 0020h - Synchronous
  2791. Cache Speed 0ns
  2792. Error Correction Type ParitySingle-Bit ECC
  2793. System Cache Type Unified
  2794. Associativity 8-way Set-Associative
  2795. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  2796. Socket Designation L2 Cache
  2797. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2798. Maximum Cache Size 0600h - 1536K
  2799. Installed Size 0600h - 1536K
  2800. Supported SRAM Type 0020h - Synchronous
  2801. Current SRAM Type 0020h - Synchronous
  2802. Cache Speed 0ns
  2803. Error Correction Type Multi-Bit ECC
  2804. System Cache Type Unified
  2805. Associativity 4-way Set-Associative
  2806. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  2807. Socket Designation L3 Cache
  2808. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2809. Maximum Cache Size 3000h - 12288K
  2810. Installed Size 3000h - 12288K
  2811. Supported SRAM Type 0020h - Synchronous
  2812. Current SRAM Type 0020h - Synchronous
  2813. Cache Speed 0ns
  2814. Error Correction Type Specification Reserved
  2815. System Cache Type Unified
  2816. Associativity 16-way Set-Associative
  2817. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  2818. Socket Designation CPUSocket
  2819. Processor Type Central Processor
  2820. Processor Family c6h - Specification Reserved
  2821. Processor Manufacturer Intel(R) Corporation
  2822. Processor ID ea060900fffbebbf
  2823. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  2824. Processor Voltage 8ah - 1.0V
  2825. External Clock 100MHz
  2826. Max Speed 8300MHz
  2827. Current Speed 3700MHz
  2828. Status Enabled Populated
  2829. Processor Upgrade Specification Reserved
  2830. L1 Cache Handle 0016h
  2831. L2 Cache Handle 0017h
  2832. L3 Cache Handle 0018h
  2833. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  2834. Starting Address 00000000h
  2835. Ending Address 007fffffh
  2836. Memory Device Handle 0012h
  2837. Mem Array Mapped Adr Handle 0015h
  2838. Partition Row Position 01
  2839. Interleave Position 01
  2840. Interleave Data Depth 02
  2841. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  2842. Starting Address 00800000h
  2843. Ending Address 00ffffffh
  2844. Memory Device Handle 0014h
  2845. Mem Array Mapped Adr Handle 0015h
  2846. Partition Row Position 01
  2847. Interleave Position 02
  2848. Interleave Data Depth 02
  2849.  
  2850. ========================== Dump #5: Extra #1 ===========================
  2851.  
  2852. 7: kd> !verifier
  2853. fffff8067242a6c0: Unable to get verifier list.
  2854.  
  2855. ========================== Dump #5: Extra #2 ===========================
  2856.  
  2857. 7: kd> !thread
  2858. THREAD ffffc68ae902c040 Cid 0004.11a0 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 7
  2859. Not impersonating
  2860. GetUlongFromAddress: unable to read from fffff8067241143c
  2861. Owning Process ffffc68add69c040 Image: System
  2862. Attached Process N/A Image: N/A
  2863. fffff78000000000: Unable to get shared data
  2864. Wait Start TickCount 1037062
  2865. Context Switch Count 92568 IdealProcessor: 7
  2866. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2867. UserTime 00:00:00.000
  2868. KernelTime 00:00:00.000
  2869. Win32 Start Address nt!ExpWorkerThread (0xfffff80671a33e20)
  2870. Stack Init ffffac8587f87b90 Current ffffac8587f87720
  2871. Base ffffac8587f88000 Limit ffffac8587f81000 Call 0000000000000000
  2872. Priority 12 BasePriority 12 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2873. Child-SP RetAddr : Args to Child : Call Site
  2874. ffffac85`87f875a8 fffff806`71bef929 : 00000000`0000000a ffffc48a`ea284850 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  2875. ffffac85`87f875b0 fffff806`71bebc29 : 00000000`00000000 00000000`0000011e ffffcde3`2d8b8f7e ffffc68a`e902c040 : nt!KiBugCheckDispatch+0x69
  2876. ffffac85`87f876f0 fffff806`71a98aff : c48aea28`485004d0 fffff280`0bdcd080 fffff280`0a028520 00000000`00000000 : nt!KiPageFault+0x469 (TrapFrame @ ffffac85`87f876f0)
  2877. ffffac85`87f87880 fffff806`71b6fa0e : c48aea28`485004d0 fffff280`0a028520 00000000`00000000 00000000`00000001 : nt!MiRestoreTransitionPte+0x17f
  2878. ffffac85`87f878f0 fffff806`71d58191 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRemoveLowestPriorityStandbyPage+0x1ce
  2879. ffffac85`87f87990 fffff806`71d583e3 : fffff806`72450ac0 00000000`00000000 fffff806`00000000 00000000`00000240 : nt!MiPruneStandbyPages+0x265
  2880. ffffac85`87f87a20 fffff806`71a33f25 : ffffc68a`e902c040 fffff806`71d58350 ffffc68a`dd715010 fffff806`72452360 : nt!MiRebalanceZeroFreeLists+0x93
  2881. ffffac85`87f87a70 fffff806`71b46715 : ffffc68a`e902c040 00000000`00000080 ffffc68a`dd69c040 0b6abca9`00000001 : nt!ExpWorkerThread+0x105
  2882. ffffac85`87f87b10 fffff806`71be5078 : fffff806`6e938180 ffffc68a`e902c040 fffff806`71b466c0 4949c94a`5f393fff : nt!PspSystemThreadStartup+0x55
  2883. ffffac85`87f87b60 00000000`00000000 : ffffac85`87f88000 ffffac85`87f81000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  2884.  
  2885.  
  2886. ========================================================================
  2887. ======================= Dump #6: ANALYZE VERBOSE =======================
  2888. ======================= File: 070720-5125-01.dmp =======================
  2889. ========================================================================
  2890.  
  2891. Mini Kernel Dump File: Only registers and stack trace are available
  2892. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  2893. Kernel base = 0xfffff807`5dc00000 PsLoadedModuleList = 0xfffff807`5e82a2b0
  2894. Debug session time: Tue Jul 7 15:48:02.264 2020 (UTC - 4:00)
  2895. System Uptime: 0 days 1:38:34.931
  2896.  
  2897. BugCheck 3B, {c0000005, fffff8075de42acc, ffff82002c74f920, 0}
  2898. Probably caused by : Pool_Corruption ( nt!ExFreePool+9 )
  2899. Followup: Pool_corruption
  2900.  
  2901. SYSTEM_SERVICE_EXCEPTION (3b)
  2902. An exception happened while executing a system service routine.
  2903.  
  2904. Arguments:
  2905. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  2906. Arg2: fffff8075de42acc, Address of the instruction which caused the bugcheck
  2907. Arg3: ffff82002c74f920, Address of the context record for the exception that caused the bugcheck
  2908. Arg4: 0000000000000000, zero.
  2909.  
  2910. Debugging Details:
  2911. DUMP_CLASS: 1
  2912. DUMP_QUALIFIER: 400
  2913. DUMP_TYPE: 2
  2914. DUMP_FILE_ATTRIBUTES: 0x8
  2915. Kernel Generated Triage Dump
  2916. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  2917. FAULTING_IP:
  2918. nt!RtlRbRemoveNode+7c
  2919. fffff807`5de42acc 498b4308 mov rax,qword ptr [r11+8]
  2920. CONTEXT: ffff82002c74f920 -- (.cxr 0xffff82002c74f920)
  2921. rax=0000000000000000 rbx=ffffb904cfe02290 rcx=0000000000000000
  2922. rdx=ffffb904dda50b08 rsi=ffffb904dda4ffe0 rdi=ffffb904dda50b08
  2923. rip=fffff8075de42acc rsp=ffffce857d1d9a48 rbp=00000000000000b2
  2924. r8=0000000000000000 r9=0000000000000000 r10=0000000000000000
  2925. r11=fbffb904df664de8 r12=ffffb904dda46030 r13=ffffb904dda46000
  2926. r14=0000000000000000 r15=ffffb904dda50b00
  2927. iopl=0 nv up ei ng nz na po nc
  2928. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050286
  2929. nt!RtlRbRemoveNode+0x7c:
  2930. fffff807`5de42acc 498b4308 mov rax,qword ptr [r11+8] ds:002b:fbffb904`df664df0=????????????????
  2931. Resetting default scope
  2932. CUSTOMER_CRASH_COUNT: 1
  2933. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  2934. BUGCHECK_STR: 0x3B
  2935.  
  2936. PROCESS_NAME: steamtours.exe
  2937.  
  2938. CURRENT_IRQL: 2
  2939. IRP_ADDRESS: ffffffffffffff89
  2940. BAD_STACK_POINTER: ffff82002c74f018
  2941. LAST_CONTROL_TRANSFER: from fffff8075de428e3 to fffff8075de42acc
  2942. STACK_TEXT:
  2943. ffffce85`7d1d9a48 fffff807`5de428e3 : 00000000`000000b2 ffffb904`dda4ffe0 00000000`00000000 ffffb904`dda50b00 : nt!RtlRbRemoveNode+0x7c
  2944. ffffce85`7d1d9a60 fffff807`5de42258 : ffffb904`cfe02280 ffffb904`dda46000 ffffb904`cfe02280 ffffce85`7d1d9b68 : nt!RtlpHpVsChunkCoalesce+0x183
  2945. ffffce85`7d1d9ac0 fffff807`5de40be4 : ffffb904`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlpHpVsContextFree+0x188
  2946. ffffce85`7d1d9b60 fffff807`5e5c2019 : ffffb904`00000500 ffffb904`dcce1220 00000000`00000000 01000000`00100000 : nt!ExFreeHeapPool+0x4d4
  2947. ffffce85`7d1d9c40 fffff807`5de3dfd2 : ffffb904`00000001 ffffce85`7d1d9db9 00000000`00400201 ffffb904`d5b46b40 : nt!ExFreePool+0x9
  2948. ffffce85`7d1d9c70 fffff807`5de3cd88 : 00000000`00000001 00000000`00000001 00000000`00000000 ffffb904`df2b95e0 : nt!IopCompleteRequest+0x8a2
  2949. ffffce85`7d1d9d30 fffff807`5de3c697 : 00000000`00000000 00000000`00000001 ffffcf8c`fe7af970 ffffb904`df2b95e0 : nt!IopfCompleteRequest+0x6d8
  2950. ffffce85`7d1d9e20 fffff807`619de788 : 00000000`00000000 ffffcf8c`00000001 ffffce85`7d1da100 fffff807`619de392 : nt!IofCompleteRequest+0x17
  2951. ffffce85`7d1d9e50 fffff807`61acddae : 00000000`00000000 ffffcf8c`fe7af970 ffffcf8c`fe7af5a0 00000000`00000000 : Ntfs!NtfsExtendedCompleteRequestInternal+0x178
  2952. ffffce85`7d1d9eb0 fffff807`61acc8d6 : ffffce85`7d1da100 ffffb904`df2b95e0 00000000`0000011a fffff807`00000002 : Ntfs!NtfsCommonQueryInformation+0xfbe
  2953. ffffce85`7d1d9fb0 fffff807`61acc760 : ffffce85`7d1da100 ffffb904`df2b95e0 ffffb904`df2b95e0 fffff807`5de24fad : Ntfs!NtfsFsdDispatchSwitch+0x156
  2954. ffffce85`7d1da0e0 fffff807`5de46d25 : ffffce85`7d1da450 fffff807`5b8a4b46 ffffce85`7d1db000 ffffce85`7d1d4000 : Ntfs!NtfsFsdDispatchWait+0x40
  2955. ffffce85`7d1da380 fffff807`5b8a6ccf : 00000000`00000200 00000000`00000000 00000000`000004c0 fffff807`5e5c2094 : nt!IofCallDriver+0x55
  2956. ffffce85`7d1da3c0 fffff807`5b8a48d3 : ffffce85`7d1da450 00000000`00000009 00000000`0000000e fffff807`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28f
  2957. ffffce85`7d1da430 fffff807`5de46d25 : ffffb904`dcce1220 fffff807`5de46d67 00000000`0000000e 00000000`00000000 : FLTMGR!FltpDispatch+0xa3
  2958. ffffce85`7d1da490 fffff807`5e2a1148 : ffffce85`7d1da530 ffffb904`dcce1220 ffffb904`d5b46b40 ffffcf8c`00000000 : nt!IofCallDriver+0x55
  2959. ffffce85`7d1da4d0 fffff807`5e29ee9d : ffffb904`d53ae800 00000000`00000000 00000000`000001dc ffffce85`7d1da5b0 : nt!IopQueryXxxInformation+0x120
  2960. ffffce85`7d1da570 fffff807`5e29e9f6 : ffffb904`dcce1220 00000000`00000000 00000000`00000000 000000dd`c76af0e0 : nt!IopQueryNameInternal+0x3e9
  2961. ffffce85`7d1da620 fffff807`5e29fa73 : ffffb904`df903840 ffffce85`7d1da810 ffffb904`dc3dd700 00000000`00000000 : nt!IopQueryName+0x26
  2962. ffffce85`7d1da670 fffff807`5e26a984 : ffffb904`dcce1220 000000dd`c76af0e0 ffffb904`00000218 ffffce85`7d1da7d8 : nt!ObQueryNameStringMode+0xd3
  2963. ffffce85`7d1da790 fffff807`5e269d85 : ffffa050`00b4a020 ffffa050`28005a50 ffffa050`28140028 ffffb904`dc3dd700 : nt!MmQueryVirtualMemory+0xbe4
  2964. ffffce85`7d1da940 fffff807`5dfef375 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffce85`7d1daa80 : nt!NtQueryVirtualMemory+0x25
  2965. ffffce85`7d1da990 00007ff9`56d8b1f4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  2966. 000000dd`c76af098 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`56d8b1f4
  2967. THREAD_SHA1_HASH_MOD_FUNC: 6b993cda0b4d9e70f3ea70cfb527fd1e7538b9fb
  2968. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 9905228c9d6a7f487c62707b140a11790be798c8
  2969. THREAD_SHA1_HASH_MOD: 05145e774d5b0968782d0d6d929dc7589214a7cd
  2970. FOLLOWUP_IP:
  2971. nt!ExFreePool+9
  2972. fffff807`5e5c2019 4883c428 add rsp,28h
  2973. FAULT_INSTR_CODE: 28c48348
  2974. SYMBOL_STACK_INDEX: 4
  2975. SYMBOL_NAME: nt!ExFreePool+9
  2976. FOLLOWUP_NAME: Pool_corruption
  2977.  
  2978. IMAGE_NAME: Pool_Corruption
  2979.  
  2980. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2981. IMAGE_VERSION: 10.0.19041.330
  2982. MODULE_NAME: Pool_Corruption
  2983. STACK_COMMAND: .cxr 0xffff82002c74f920 ; kb
  2984. BUCKET_ID_FUNC_OFFSET: 9
  2985. FAILURE_BUCKET_ID: 0x3B_STACKPTR_ERROR_nt!ExFreePool
  2986. BUCKET_ID: 0x3B_STACKPTR_ERROR_nt!ExFreePool
  2987. PRIMARY_PROBLEM_CLASS: 0x3B_STACKPTR_ERROR_nt!ExFreePool
  2988. TARGET_TIME: 2020-07-07T19:48:02.000Z
  2989. SUITE_MASK: 784
  2990. PRODUCT_TYPE: 1
  2991. USER_LCID: 0
  2992. FAILURE_ID_HASH_STRING: km:0x3b_stackptr_error_nt!exfreepool
  2993. FAILURE_ID_HASH: {74c0fd9b-610b-14e7-0dc5-63896bb10036}
  2994. Followup: Pool_corruption
  2995.  
  2996. ====================== Dump #6: 3RD PARTY DRIVERS ======================
  2997.  
  2998. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  2999. Oct 04 2016 - DisplayLinkXRUsbIo_x64_2.1.6.8682.sys - DisplayLink XR USB driver
  3000. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  3001. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  3002. Mar 19 2019 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  3003. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  3004. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  3005. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  3006.  
  3007. ================== Dump #6: 3RD PARTY DRIVERS (FULL) ===================
  3008.  
  3009. Image name: wdcsam64.sys
  3010. Search : https://www.google.com/search?q=wdcsam64.sys
  3011. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  3012. Timestamp : Fri Oct 9 2015
  3013.  
  3014. Image name: DisplayLinkXRUsbIo_x64_2.1.6.8682.sys
  3015. Search : https://www.google.com/search?q=DisplayLinkXRUsbIo_x64_2.1.6.8682.sys
  3016. ADA Info : DisplayLink XR USB driver
  3017. Timestamp : Tue Oct 4 2016
  3018.  
  3019. Image name: imaucxhpal.sys
  3020. Search : https://www.google.com/search?q=imaucxhpal.sys
  3021. ADA Info : MA-USB (UCX) HPAL driver
  3022. Timestamp : Mon Jan 21 2019
  3023.  
  3024. Image name: iwigig.sys
  3025. Search : https://www.google.com/search?q=iwigig.sys
  3026. ADA Info : WiGig MAC driver (Intel)
  3027. Timestamp : Mon Jan 21 2019
  3028.  
  3029. Image name: nvhda64v.sys
  3030. Search : https://www.google.com/search?q=nvhda64v.sys
  3031. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  3032. Timestamp : Tue Mar 19 2019
  3033.  
  3034. Image name: TeeDriverW8x64.sys
  3035. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  3036. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  3037. Timestamp : Thu Apr 4 2019
  3038.  
  3039. Image name: e1d68x64.sys
  3040. Search : https://www.google.com/search?q=e1d68x64.sys
  3041. ADA Info : Intel(R) Gigabit Adapter driver
  3042. Timestamp : Tue May 7 2019
  3043.  
  3044. Image name: nvlddmkm.sys
  3045. Search : https://www.google.com/search?q=nvlddmkm.sys
  3046. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  3047. Timestamp : Wed Oct 2 2019
  3048.  
  3049. ====================== Dump #6: MICROSOFT DRIVERS ======================
  3050.  
  3051. ACPI.sys ACPI Driver for NT (Microsoft)
  3052. acpiex.sys ACPIEx Driver (Microsoft)
  3053. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  3054. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  3055. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  3056. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  3057. ahcache.sys Application Compatibility Cache (Microsoft)
  3058. bam.sys BAM Kernal driver (Microsoft)
  3059. BasicDisplay.sys Basic Display driver (Microsoft)
  3060. BasicRender.sys Basic Render driver (Microsoft)
  3061. Beep.SYS BEEP driver (Microsoft)
  3062. bindflt.sys Windows Bind Filter driver (Microsoft)
  3063. BOOTVID.dll VGA Boot Driver (Microsoft)
  3064. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  3065. cdd.dll Canonical Display Driver (Microsoft)
  3066. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  3067. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  3068. CI.dll Code Integrity Module (Microsoft)
  3069. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  3070. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  3071. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  3072. CLFS.SYS Common Log File System Driver (Microsoft)
  3073. clipsp.sys CLIP Service (Microsoft)
  3074. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  3075. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  3076. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  3077. condrv.sys Console Driver (Microsoft)
  3078. crashdmp.sys Crash Dump driver (Microsoft)
  3079. dfsc.sys DFS Namespace Client Driver (Microsoft)
  3080. disk.sys PnP Disk Driver (Microsoft)
  3081. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  3082. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  3083. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  3084. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  3085. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  3086. dxgmms2.sys DirectX Graphics MMS
  3087. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  3088. fastfat.SYS Fast FAT File System Driver (Microsoft)
  3089. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  3090. fileinfo.sys FileInfo Filter Driver (Microsoft)
  3091. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  3092. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  3093. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  3094. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  3095. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  3096. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  3097. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  3098. HdAudio.sys High Definition Audio Function driver (Microsoft)
  3099. HIDCLASS.SYS Hid Class Library (Microsoft)
  3100. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  3101. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  3102. HTTP.sys HTTP Protocol Stack (Microsoft)
  3103. intelpep.sys Intel Power Engine Plugin (Microsoft)
  3104. intelppm.sys Processor Device Driver (Microsoft)
  3105. IntelTA.sys Intel Telemetry Driver
  3106. iorate.sys I/O rate control Filter (Microsoft)
  3107. kbdclass.sys Keyboard Class Driver (Microsoft)
  3108. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  3109. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  3110. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  3111. ks.sys Kernal CSA Library (Microsoft)
  3112. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  3113. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  3114. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  3115. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  3116. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  3117. mcupdate.dll Media Center Update (Microsoft)
  3118. mmcss.sys MMCSS Driver (Microsoft)
  3119. monitor.sys Monitor Driver (Microsoft)
  3120. mouclass.sys Mouse Class Driver (Microsoft)
  3121. mouhid.sys HID Mouse Filter Driver (Microsoft)
  3122. mountmgr.sys Mount Point Manager (Microsoft)
  3123. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  3124. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  3125. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  3126. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  3127. Msfs.SYS Mailslot driver (Microsoft)
  3128. msisadrv.sys ISA Driver (Microsoft)
  3129. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  3130. msquic.sys Windows QUIC Driver
  3131. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  3132. mssmbios.sys System Management BIOS driver (Microsoft)
  3133. mup.sys Multiple UNC Provider driver (Microsoft)
  3134. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  3135. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  3136. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  3137. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  3138. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  3139. NDProxy.sys NDIS Proxy driver (Microsoft)
  3140. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  3141. netbios.sys NetBIOS Interface driver (Microsoft)
  3142. netbt.sys MBT Transport driver (Microsoft)
  3143. NETIO.SYS Network I/O Subsystem (Microsoft)
  3144. Npfs.SYS NPFS driver (Microsoft)
  3145. npsvctrig.sys Named pipe service triggers (Microsoft)
  3146. nsiproxy.sys NSI Proxy driver (Microsoft)
  3147. Ntfs.sys NT File System Driver (Microsoft)
  3148. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  3149. ntosext.sys NTOS Extension Host driver (Microsoft)
  3150. Null.SYS NULL Driver (Microsoft)
  3151. pacer.sys QoS Packet Scheduler (Microsoft)
  3152. partmgr.sys Partition driver (Microsoft)
  3153. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  3154. pcw.sys Performance Counter Driver (Microsoft)
  3155. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  3156. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  3157. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  3158. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  3159. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  3160. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  3161. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  3162. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  3163. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  3164. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  3165. rdyboost.sys ReadyBoost Driver (Microsoft)
  3166. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  3167. serenum.sys Serial Port Enumerator (Microsoft)
  3168. serial.sys Serial Device Driver
  3169. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  3170. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  3171. spaceport.sys Storage Spaces driver (Microsoft)
  3172. srv2.sys Smb 2.0 Server driver (Microsoft)
  3173. srvnet.sys Server Network driver (Microsoft)
  3174. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  3175. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  3176. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  3177. storqosflt.sys Storage QoS Filter driver (Microsoft)
  3178. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  3179. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  3180. tcpip.sys TCP/IP Protocol driver (Microsoft)
  3181. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  3182. TDI.SYS TDI Wrapper driver (Microsoft)
  3183. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  3184. tm.sys Kernel Transaction Manager driver (Microsoft)
  3185. ucx01000.sys USB Controller Extension (Microsoft)
  3186. udfs.sys UDF File System driver (Microsoft)
  3187. UEFI.sys UEFI NT driver (Microsoft)
  3188. umbus.sys User-Mode Bus Enumerator (Microsoft)
  3189. usbaudio.sys USB Audio Class Driver (Microsoft)
  3190. usbaudio2.sys Microsoft USB Audio Class 2.0 Driver
  3191. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  3192. USBD.SYS Universal Serial Bus Driver (Microsoft)
  3193. UsbHub3.sys USB3 HUB driver (Microsoft)
  3194. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  3195. usbvideo.sys USB Video Class Driver (Microsoft)
  3196. USBXHCI.SYS USB XHCI driver (Microsoft)
  3197. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  3198. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  3199. volmgr.sys Volume Manager Driver (Microsoft)
  3200. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  3201. volsnap.sys Volume Shadow Copy driver (Microsoft)
  3202. volume.sys Volume driver (Microsoft)
  3203. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  3204. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  3205. watchdog.sys Watchdog driver (Microsoft)
  3206. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  3207. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  3208. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  3209. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  3210. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  3211. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  3212. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  3213. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  3214. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  3215. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  3216. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  3217. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  3218. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  3219. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  3220. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  3221. Wof.sys Windows Overlay Filter (Microsoft)
  3222. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  3223. WppRecorder.sys WPP Trace Recorder (Microsoft)
  3224. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  3225.  
  3226. ====================== Dump #6: UNLOADED MODULES =======================
  3227.  
  3228. fffff807`75a70000 fffff807`75a81000 MSKSSRV.sys
  3229. fffff807`75a00000 fffff807`75a0c000 WdmCompanion
  3230. fffff807`74b30000 fffff807`74b3f000 dump_storpor
  3231. fffff807`74b80000 fffff807`74bb3000 dump_storahc
  3232. fffff807`74be0000 fffff807`74bfe000 dump_dumpfve
  3233. fffff807`77b30000 fffff807`77b85000 WUDFRd.sys
  3234. fffff807`753d0000 fffff807`753ec000 dam.sys
  3235. fffff807`61400000 fffff807`61411000 WdBoot.sys
  3236. fffff807`624b0000 fffff807`624c0000 hwpolicy.sys
  3237.  
  3238. ====================== Dump #6: BIOS INFORMATION =======================
  3239.  
  3240. sysinfo: could not find necessary interfaces.
  3241. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  3242.  
  3243. ========================== Dump #6: Extra #1 ===========================
  3244.  
  3245. 8: kd> !verifier
  3246. fffff8075e82a6c0: Unable to get verifier list.
  3247.  
  3248. ========================== Dump #6: Extra #2 ===========================
  3249.  
  3250. 8: kd> !thread
  3251. THREAD ffffb904ddbea080 Cid 15d8.2dc4 Teb: 000000ddc787a000 Win32Thread: ffffb904df9ca380 RUNNING on processor 8
  3252. Not impersonating
  3253. GetUlongFromAddress: unable to read from fffff8075e81143c
  3254. Owning Process ffffb904dc3dd080 Image: steamtours.exe
  3255. Attached Process N/A Image: N/A
  3256. fffff78000000000: Unable to get shared data
  3257. Wait Start TickCount 378555
  3258. Context Switch Count 222 IdealProcessor: 2
  3259. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  3260. UserTime 00:00:00.000
  3261. KernelTime 00:00:00.000
  3262. Win32 Start Address 0x00007ff7bd6ba5d0
  3263. Stack Init ffffce857d1dab90 Current ffffce857d1da2f0
  3264. Base ffffce857d1db000 Limit ffffce857d1d4000 Call 0000000000000000
  3265. Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  3266. Child-SP RetAddr : Args to Child : Call Site
  3267. ffff8200`2c74f018 fffff807`5dfef929 : 00000000`0000003b 00000000`c0000005 fffff807`5de42acc ffff8200`2c74f920 : nt!KeBugCheckEx
  3268. ffff8200`2c74f020 fffff807`5dfeed7c : ffff8200`2c74f760 fffff807`5dce68e0 ffff8200`2c74f210 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  3269. ffff8200`2c74f160 fffff807`5dfe68df : fffff807`5dfeed00 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceHandler+0x7c
  3270. ffff8200`2c74f1a0 fffff807`5de32fb7 : ffff8200`2c74f710 00000000`00000000 ffffce85`7d1da990 fffff807`5dfef375 : nt!RtlpExecuteHandlerForException+0xf
  3271. ffff8200`2c74f1d0 fffff807`5de7b226 : ffffce85`7d1d9808 ffff8200`2c74fe20 ffffce85`7d1d9808 ffffb904`dda50b08 : nt!RtlDispatchException+0x297
  3272. ffff8200`2c74f8f0 fffff807`5dfde8b2 : 448b1875`c0000023 f08b0b76`c63b6024 eb87a6e9`9f76c33b c085c000`00e5b8ff : nt!KiDispatchException+0x186
  3273. ffff8200`2c74ffb0 fffff807`5dfde880 : fffff807`5dfefa65 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxExceptionDispatchOnExceptionStack+0x12 (TrapFrame @ ffff8200`2c74fe70)
  3274. ffffce85`7d1d96c8 fffff807`5dfefa65 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatchOnExceptionStackContinue
  3275. ffffce85`7d1d96d0 fffff807`5dfeb7a0 : 00000000`00000000 00220000`00000000 ffffce85`7d1d99e0 ffffce85`7d1d9a50 : nt!KiExceptionDispatch+0x125
  3276. ffffce85`7d1d98b0 fffff807`5de42acc : 00000038`00200000 0001007a`00380000 fffff807`5de428e3 00000000`000000b2 : nt!KiGeneralProtectionFault+0x320 (TrapFrame @ ffffce85`7d1d98b0)
  3277. ffffce85`7d1d9a48 fffff807`5de428e3 : 00000000`000000b2 ffffb904`dda4ffe0 00000000`00000000 ffffb904`dda50b00 : nt!RtlRbRemoveNode+0x7c
  3278. ffffce85`7d1d9a60 fffff807`5de42258 : ffffb904`cfe02280 ffffb904`dda46000 ffffb904`cfe02280 ffffce85`7d1d9b68 : nt!RtlpHpVsChunkCoalesce+0x183
  3279. ffffce85`7d1d9ac0 fffff807`5de40be4 : ffffb904`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlpHpVsContextFree+0x188
  3280. ffffce85`7d1d9b60 fffff807`5e5c2019 : ffffb904`00000500 ffffb904`dcce1220 00000000`00000000 01000000`00100000 : nt!ExFreeHeapPool+0x4d4
  3281. ffffce85`7d1d9c40 fffff807`5de3dfd2 : ffffb904`00000001 ffffce85`7d1d9db9 00000000`00400201 ffffb904`d5b46b40 : nt!ExFreePool+0x9
  3282. ffffce85`7d1d9c70 fffff807`5de3cd88 : 00000000`00000001 00000000`00000001 00000000`00000000 ffffb904`df2b95e0 : nt!IopCompleteRequest+0x8a2
  3283. ffffce85`7d1d9d30 fffff807`5de3c697 : 00000000`00000000 00000000`00000001 ffffcf8c`fe7af970 ffffb904`df2b95e0 : nt!IopfCompleteRequest+0x6d8
  3284. ffffce85`7d1d9e20 fffff807`619de788 : 00000000`00000000 ffffcf8c`00000001 ffffce85`7d1da100 fffff807`619de392 : nt!IofCompleteRequest+0x17
  3285. ffffce85`7d1d9e50 fffff807`61acddae : 00000000`00000000 ffffcf8c`fe7af970 ffffcf8c`fe7af5a0 00000000`00000000 : Ntfs!NtfsExtendedCompleteRequestInternal+0x178
  3286. ffffce85`7d1d9eb0 fffff807`61acc8d6 : ffffce85`7d1da100 ffffb904`df2b95e0 00000000`0000011a fffff807`00000002 : Ntfs!NtfsCommonQueryInformation+0xfbe
  3287. ffffce85`7d1d9fb0 fffff807`61acc760 : ffffce85`7d1da100 ffffb904`df2b95e0 ffffb904`df2b95e0 fffff807`5de24fad : Ntfs!NtfsFsdDispatchSwitch+0x156
  3288. ffffce85`7d1da0e0 fffff807`5de46d25 : ffffce85`7d1da450 fffff807`5b8a4b46 ffffce85`7d1db000 ffffce85`7d1d4000 : Ntfs!NtfsFsdDispatchWait+0x40
  3289. ffffce85`7d1da380 fffff807`5b8a6ccf : 00000000`00000200 00000000`00000000 00000000`000004c0 fffff807`5e5c2094 : nt!IofCallDriver+0x55
  3290. ffffce85`7d1da3c0 fffff807`5b8a48d3 : ffffce85`7d1da450 00000000`00000009 00000000`0000000e fffff807`00000000 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x28f
  3291. ffffce85`7d1da430 fffff807`5de46d25 : ffffb904`dcce1220 fffff807`5de46d67 00000000`0000000e 00000000`00000000 : FLTMGR!FltpDispatch+0xa3
  3292. ffffce85`7d1da490 fffff807`5e2a1148 : ffffce85`7d1da530 ffffb904`dcce1220 ffffb904`d5b46b40 ffffcf8c`00000000 : nt!IofCallDriver+0x55
  3293. ffffce85`7d1da4d0 fffff807`5e29ee9d : ffffb904`d53ae800 00000000`00000000 00000000`000001dc ffffce85`7d1da5b0 : nt!IopQueryXxxInformation+0x120
  3294. ffffce85`7d1da570 fffff807`5e29e9f6 : ffffb904`dcce1220 00000000`00000000 00000000`00000000 000000dd`c76af0e0 : nt!IopQueryNameInternal+0x3e9
  3295. ffffce85`7d1da620 fffff807`5e29fa73 : ffffb904`df903840 ffffce85`7d1da810 ffffb904`dc3dd700 00000000`00000000 : nt!IopQueryName+0x26
  3296. ffffce85`7d1da670 fffff807`5e26a984 : ffffb904`dcce1220 000000dd`c76af0e0 ffffb904`00000218 ffffce85`7d1da7d8 : nt!ObQueryNameStringMode+0xd3
  3297. ffffce85`7d1da790 fffff807`5e269d85 : ffffa050`00b4a020 ffffa050`28005a50 ffffa050`28140028 ffffb904`dc3dd700 : nt!MmQueryVirtualMemory+0xbe4
  3298. ffffce85`7d1da940 fffff807`5dfef375 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffce85`7d1daa80 : nt!NtQueryVirtualMemory+0x25
  3299. ffffce85`7d1da990 00007ff9`56d8b1f4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ ffffce85`7d1daa00)
  3300. 000000dd`c76af098 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`56d8b1f4
  3301.  
  3302.  
  3303. ========================================================================
  3304. ======================= Dump #7: ANALYZE VERBOSE =======================
  3305. ======================= File: 070620-5718-01.dmp =======================
  3306. ========================================================================
  3307.  
  3308. Mini Kernel Dump File: Only registers and stack trace are available
  3309. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  3310. Kernel base = 0xfffff801`1c600000 PsLoadedModuleList = 0xfffff801`1d22a2b0
  3311. Debug session time: Mon Jul 6 14:09:44.963 2020 (UTC - 4:00)
  3312. System Uptime: 0 days 0:25:07.630
  3313.  
  3314. BugCheck 1A, {41792, ffffd73fff7635f8, 800000000000000, 0}
  3315. Probably caused by : memory_corruption
  3316. Followup: memory_corruption
  3317.  
  3318. MEMORY_MANAGEMENT (1a)
  3319. # Any other values for parameter 1 must be individually examined.
  3320.  
  3321. Arguments:
  3322. Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
  3323. the PTE. Parameters 3/4 contain the low/high parts of the PTE.
  3324. Arg2: ffffd73fff7635f8
  3325. Arg3: 0800000000000000
  3326. Arg4: 0000000000000000
  3327.  
  3328. Debugging Details:
  3329. DUMP_CLASS: 1
  3330. DUMP_QUALIFIER: 400
  3331. DUMP_TYPE: 2
  3332. DUMP_FILE_ATTRIBUTES: 0x8
  3333. Kernel Generated Triage Dump
  3334. MEMORY_CORRUPTOR: LARGE
  3335. BUGCHECK_STR: 0x1a_41792
  3336. CUSTOMER_CRASH_COUNT: 1
  3337. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  3338.  
  3339. PROCESS_NAME: chrome.exe
  3340.  
  3341. CURRENT_IRQL: 2
  3342. STACK_TEXT:
  3343. ffff8502`26d76b88 fffff801`1ca5418e : 00000000`0000001a 00000000`00041792 ffffd73f`ff7635f8 08000000`00000000 : nt!KeBugCheckEx
  3344. ffff8502`26d76b90 fffff801`1c8119d1 : 00000000`00000003 ffffd73f`ff763000 ffff8502`26d77060 00000000`00000003 : nt!MiDeleteVa+0x191e6e
  3345. ffff8502`26d76c80 fffff801`1c811cf0 : 00000000`00000000 ffffd809`4f644700 00000000`00000000 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x301
  3346. ffff8502`26d76d10 fffff801`1c811cf0 : 00000000`00000000 ffffd809`4f644700 ffffd76b`00000000 00000000`00000010 : nt!MiWalkPageTablesRecursively+0x620
  3347. ffff8502`26d76da0 fffff801`1c811cf0 : ffff8502`26d77060 ffffd809`4f644700 ffffd76b`00000000 00000000`00000020 : nt!MiWalkPageTablesRecursively+0x620
  3348. ffff8502`26d76e30 fffff801`1c80e5fb : 00000000`00000000 ffffd809`4f644700 00000000`00000000 00000000`00000030 : nt!MiWalkPageTablesRecursively+0x620
  3349. ffff8502`26d76ec0 fffff801`1c8c22d1 : ffff8502`26d77060 ffffd809`00000000 ffffd73e`00000002 ffff8502`00000000 : nt!MiWalkPageTables+0x36b
  3350. ffff8502`26d76fc0 fffff801`1c8a787f : 00000000`00000000 00000000`00000060 ffffd809`4f6447c0 00000000`00000000 : nt!MiDeletePagablePteRange+0x491
  3351. ffff8502`26d77440 fffff801`1cbeab99 : ffffd809`4f644080 00000000`00000000 ffffd809`00000000 ffffd809`00000001 : nt!MiDeleteVad+0x41f
  3352. ffff8502`26d77570 fffff801`1cc66dc0 : ffffd809`4f6d1da0 ffffd809`4f644d20 ffffd809`4f74f080 00000000`00000000 : nt!MiUnmapVad+0x49
  3353. ffff8502`26d775a0 fffff801`1cc67c73 : ffffd809`4f6ccb20 ffffd809`4f6ccb20 ffffd809`4f6d1da0 ffffd809`4f644080 : nt!MiCleanVad+0x30
  3354. ffff8502`26d775d0 fffff801`1ccba247 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffd809`4f644080 : nt!MmCleanProcessAddressSpace+0x137
  3355. ffff8502`26d77650 fffff801`1cbe8e32 : ffffd809`4f644080 ffffc685`a0e55060 ffff8502`26d77890 00000000`00000000 : nt!PspRundownSingleProcess+0x13b
  3356. ffff8502`26d776d0 fffff801`1ccf51e8 : 00000001`00000000 00000000`00000001 ffff8502`26d778e0 00000066`17280000 : nt!PspExitThread+0x5f6
  3357. ffff8502`26d777d0 fffff801`1c82a4e7 : 00000000`40ad0088 00000000`00000000 00000000`00000000 fffff801`1c814bb6 : nt!KiSchedulerApcTerminate+0x38
  3358. ffff8502`26d77810 fffff801`1c9e1fc0 : 00000066`183ff858 ffff8502`26d778c0 ffff8502`26d77a80 7fffffff`00000000 : nt!KiDeliverApc+0x487
  3359. ffff8502`26d778c0 fffff801`1c9ef41f : ffffd809`4f74f080 00000000`00000001 ffff8502`26d77a18 fffffff7`c1fede00 : nt!KiInitiateUserApc+0x70
  3360. ffff8502`26d77a00 00007fff`2f14ae14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
  3361. 00000066`183ff828 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`2f14ae14
  3362. STACK_COMMAND: kb
  3363. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  3364. fffff8011c8c20e1-fffff8011c8c20e2 2 bytes - nt!MiDeletePagablePteRange+2a1
  3365. [ 80 f6:00 d7 ]
  3366. fffff8011c8c2348-fffff8011c8c234c 5 bytes - nt!MiDeleteVa+28 (+0x267)
  3367. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3368. fffff8011c8c235b-fffff8011c8c235f 5 bytes - nt!MiDeleteVa+3b (+0x13)
  3369. [ d7 be 7d fb f6:e7 da b5 6b d7 ]
  3370. fffff8011c8c23c3-fffff8011c8c23c4 2 bytes - nt!MiDeleteVa+a3 (+0x68)
  3371. [ 80 f6:00 d7 ]
  3372. fffff8011c8c2462-fffff8011c8c2463 2 bytes - nt!MiDeleteVa+142 (+0x9f)
  3373. [ 80 f6:00 d7 ]
  3374. fffff8011c8c248f-fffff8011c8c2493 5 bytes - nt!MiDeleteVa+16f (+0x2d)
  3375. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3376. fffff8011c8c24ef-fffff8011c8c24f0 2 bytes - nt!MiDeleteVa+1cf (+0x60)
  3377. [ 80 fa:00 e9 ]
  3378. fffff8011c8c2546-fffff8011c8c2547 2 bytes - nt!MiDeleteVa+226 (+0x57)
  3379. [ 80 f6:00 d7 ]
  3380. fffff8011c8c2566-fffff8011c8c256a 5 bytes - nt!MiDeleteVa+246 (+0x20)
  3381. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3382. fffff8011c8c2576-fffff8011c8c257a 5 bytes - nt!MiDeleteVa+256 (+0x10)
  3383. [ d7 be 7d fb f6:e7 da b5 6b d7 ]
  3384. fffff8011c8c2620-fffff8011c8c2621 2 bytes - nt!MiDeleteVa+300 (+0xaa)
  3385. [ 80 fa:00 e9 ]
  3386. fffff8011c8c2889-fffff8011c8c288a 2 bytes - nt!MiDeleteVa+569 (+0x269)
  3387. [ 80 f6:00 d7 ]
  3388. fffff8011c8c28e3-fffff8011c8c28e4 2 bytes - nt!MiDeleteVa+5c3 (+0x5a)
  3389. [ 80 fa:00 e9 ]
  3390. fffff8011c8c28fb-fffff8011c8c28fc 2 bytes - nt!MiDeleteVa+5db (+0x18)
  3391. [ 80 f6:00 d7 ]
  3392. fffff8011c8c2916-fffff8011c8c291a 5 bytes - nt!MiDeleteVa+5f6 (+0x1b)
  3393. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3394. fffff8011c8c296d-fffff8011c8c2971 5 bytes - nt!MiDeleteVa+64d (+0x57)
  3395. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3396. fffff8011c8c29e7-fffff8011c8c29e9 3 bytes - nt!MiDeleteVa+6c7 (+0x7a)
  3397. [ 40 fb f6:80 6b d7 ]
  3398. fffff8011c8c29ff-fffff8011c8c2a03 5 bytes - nt!MiDeleteVa+6df (+0x18)
  3399. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3400. fffff8011c8c2a43-fffff8011c8c2a44 2 bytes - nt!MiDeleteVa+723 (+0x44)
  3401. [ 80 fa:00 e9 ]
  3402. fffff8011c8c2c2b-fffff8011c8c2c2f 5 bytes - nt!MiDeleteVa+90b (+0x1e8)
  3403. [ d0 be 7d fb f6:e0 da b5 6b d7 ]
  3404. fffff8011c8c2c4e-fffff8011c8c2c50 3 bytes - nt!MiDeleteVa+92e (+0x23)
  3405. [ 40 fb f6:80 6b d7 ]
  3406. fffff8011c8c2c96-fffff8011c8c2c97 2 bytes - nt!MiDeleteVa+976 (+0x48)
  3407. [ 80 fa:00 e9 ]
  3408. fffff8011c8c2fbc-fffff8011c8c2fbd 2 bytes - nt!MiDeleteVa+c9c (+0x326)
  3409. [ ff f6:7f d7 ]
  3410. 75 errors : !nt (fffff8011c8c20e1-fffff8011c8c2fbd)
  3411. MODULE_NAME: memory_corruption
  3412.  
  3413. IMAGE_NAME: memory_corruption
  3414.  
  3415. FOLLOWUP_NAME: memory_corruption
  3416. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  3417. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  3418. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  3419. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  3420. TARGET_TIME: 2020-07-06T18:09:44.000Z
  3421. SUITE_MASK: 784
  3422. PRODUCT_TYPE: 1
  3423. USER_LCID: 0
  3424. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  3425. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  3426. Followup: memory_corruption
  3427.  
  3428. ====================== Dump #7: 3RD PARTY DRIVERS ======================
  3429.  
  3430. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  3431. Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
  3432. Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
  3433. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  3434. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  3435. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  3436. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  3437. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  3438. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  3439.  
  3440. ================== Dump #7: 3RD PARTY DRIVERS (FULL) ===================
  3441.  
  3442. Image name: wdcsam64.sys
  3443. Search : https://www.google.com/search?q=wdcsam64.sys
  3444. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  3445. Timestamp : Fri Oct 9 2015
  3446.  
  3447. Image name: SteamStreamingSpeakers.sys
  3448. Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
  3449. ADA Info : Steam Streaming Speakers driver (Valve Corporation)
  3450. Timestamp : Thu Jul 20 2017
  3451.  
  3452. Image name: SteamStreamingMicrophone.sys
  3453. Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
  3454. ADA Info : Steam Streaming Microphone driver (Valve Corporation)
  3455. Timestamp : Fri Jul 28 2017
  3456.  
  3457. Image name: imaucxhpal.sys
  3458. Search : https://www.google.com/search?q=imaucxhpal.sys
  3459. ADA Info : MA-USB (UCX) HPAL driver
  3460. Timestamp : Mon Jan 21 2019
  3461.  
  3462. Image name: iwigig.sys
  3463. Search : https://www.google.com/search?q=iwigig.sys
  3464. ADA Info : WiGig MAC driver (Intel)
  3465. Timestamp : Mon Jan 21 2019
  3466.  
  3467. Image name: TeeDriverW8x64.sys
  3468. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  3469. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  3470. Timestamp : Thu Apr 4 2019
  3471.  
  3472. Image name: e1d68x64.sys
  3473. Search : https://www.google.com/search?q=e1d68x64.sys
  3474. ADA Info : Intel(R) Gigabit Adapter driver
  3475. Timestamp : Tue May 7 2019
  3476.  
  3477. Image name: nvhda64v.sys
  3478. Search : https://www.google.com/search?q=nvhda64v.sys
  3479. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  3480. Timestamp : Tue Jun 9 2020
  3481.  
  3482. Image name: nvlddmkm.sys
  3483. Search : https://www.google.com/search?q=nvlddmkm.sys
  3484. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  3485. Timestamp : Sun Jun 21 2020
  3486.  
  3487. ====================== Dump #7: MICROSOFT DRIVERS ======================
  3488.  
  3489. ACPI.sys ACPI Driver for NT (Microsoft)
  3490. acpiex.sys ACPIEx Driver (Microsoft)
  3491. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  3492. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  3493. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  3494. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  3495. ahcache.sys Application Compatibility Cache (Microsoft)
  3496. bam.sys BAM Kernal driver (Microsoft)
  3497. BasicDisplay.sys Basic Display driver (Microsoft)
  3498. BasicRender.sys Basic Render driver (Microsoft)
  3499. Beep.SYS BEEP driver (Microsoft)
  3500. bindflt.sys Windows Bind Filter driver (Microsoft)
  3501. BOOTVID.dll VGA Boot Driver (Microsoft)
  3502. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  3503. cdd.dll Canonical Display Driver (Microsoft)
  3504. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  3505. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  3506. CI.dll Code Integrity Module (Microsoft)
  3507. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  3508. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  3509. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  3510. CLFS.SYS Common Log File System Driver (Microsoft)
  3511. clipsp.sys CLIP Service (Microsoft)
  3512. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  3513. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  3514. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  3515. condrv.sys Console Driver (Microsoft)
  3516. crashdmp.sys Crash Dump driver (Microsoft)
  3517. dfsc.sys DFS Namespace Client Driver (Microsoft)
  3518. disk.sys PnP Disk Driver (Microsoft)
  3519. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  3520. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  3521. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  3522. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  3523. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  3524. dxgmms2.sys DirectX Graphics MMS
  3525. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  3526. fastfat.SYS Fast FAT File System Driver (Microsoft)
  3527. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  3528. fileinfo.sys FileInfo Filter Driver (Microsoft)
  3529. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  3530. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  3531. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  3532. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  3533. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  3534. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  3535. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  3536. HdAudio.sys High Definition Audio Function driver (Microsoft)
  3537. HIDCLASS.SYS Hid Class Library (Microsoft)
  3538. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  3539. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  3540. HTTP.sys HTTP Protocol Stack (Microsoft)
  3541. intelpep.sys Intel Power Engine Plugin (Microsoft)
  3542. intelppm.sys Processor Device Driver (Microsoft)
  3543. IntelTA.sys Intel Telemetry Driver
  3544. iorate.sys I/O rate control Filter (Microsoft)
  3545. kbdclass.sys Keyboard Class Driver (Microsoft)
  3546. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  3547. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  3548. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  3549. ks.sys Kernal CSA Library (Microsoft)
  3550. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  3551. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  3552. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  3553. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  3554. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  3555. mcupdate.dll Media Center Update (Microsoft)
  3556. mmcss.sys MMCSS Driver (Microsoft)
  3557. monitor.sys Monitor Driver (Microsoft)
  3558. mouclass.sys Mouse Class Driver (Microsoft)
  3559. mouhid.sys HID Mouse Filter Driver (Microsoft)
  3560. mountmgr.sys Mount Point Manager (Microsoft)
  3561. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  3562. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  3563. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  3564. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  3565. Msfs.SYS Mailslot driver (Microsoft)
  3566. msisadrv.sys ISA Driver (Microsoft)
  3567. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  3568. msquic.sys Windows QUIC Driver
  3569. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  3570. mssmbios.sys System Management BIOS driver (Microsoft)
  3571. mup.sys Multiple UNC Provider driver (Microsoft)
  3572. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  3573. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  3574. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  3575. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  3576. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  3577. NDProxy.sys NDIS Proxy driver (Microsoft)
  3578. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  3579. netbios.sys NetBIOS Interface driver (Microsoft)
  3580. netbt.sys MBT Transport driver (Microsoft)
  3581. NETIO.SYS Network I/O Subsystem (Microsoft)
  3582. Npfs.SYS NPFS driver (Microsoft)
  3583. npsvctrig.sys Named pipe service triggers (Microsoft)
  3584. nsiproxy.sys NSI Proxy driver (Microsoft)
  3585. Ntfs.sys NT File System Driver (Microsoft)
  3586. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  3587. ntosext.sys NTOS Extension Host driver (Microsoft)
  3588. Null.SYS NULL Driver (Microsoft)
  3589. pacer.sys QoS Packet Scheduler (Microsoft)
  3590. partmgr.sys Partition driver (Microsoft)
  3591. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  3592. pcw.sys Performance Counter Driver (Microsoft)
  3593. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  3594. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  3595. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  3596. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  3597. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  3598. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  3599. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  3600. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  3601. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  3602. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  3603. rdyboost.sys ReadyBoost Driver (Microsoft)
  3604. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  3605. serenum.sys Serial Port Enumerator (Microsoft)
  3606. serial.sys Serial Device Driver
  3607. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  3608. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  3609. spaceport.sys Storage Spaces driver (Microsoft)
  3610. srv2.sys Smb 2.0 Server driver (Microsoft)
  3611. srvnet.sys Server Network driver (Microsoft)
  3612. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  3613. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  3614. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  3615. storqosflt.sys Storage QoS Filter driver (Microsoft)
  3616. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  3617. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  3618. tcpip.sys TCP/IP Protocol driver (Microsoft)
  3619. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  3620. TDI.SYS TDI Wrapper driver (Microsoft)
  3621. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  3622. tm.sys Kernel Transaction Manager driver (Microsoft)
  3623. ucx01000.sys USB Controller Extension (Microsoft)
  3624. udfs.sys UDF File System driver (Microsoft)
  3625. UEFI.sys UEFI NT driver (Microsoft)
  3626. umbus.sys User-Mode Bus Enumerator (Microsoft)
  3627. usbaudio.sys USB Audio Class Driver (Microsoft)
  3628. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  3629. USBD.SYS Universal Serial Bus Driver (Microsoft)
  3630. UsbHub3.sys USB3 HUB driver (Microsoft)
  3631. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  3632. USBXHCI.SYS USB XHCI driver (Microsoft)
  3633. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  3634. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  3635. volmgr.sys Volume Manager Driver (Microsoft)
  3636. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  3637. volsnap.sys Volume Shadow Copy driver (Microsoft)
  3638. volume.sys Volume driver (Microsoft)
  3639. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  3640. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  3641. watchdog.sys Watchdog driver (Microsoft)
  3642. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  3643. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  3644. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  3645. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  3646. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  3647. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  3648. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  3649. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  3650. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  3651. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  3652. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  3653. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  3654. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  3655. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  3656. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  3657. Wof.sys Windows Overlay Filter (Microsoft)
  3658. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  3659. WppRecorder.sys WPP Trace Recorder (Microsoft)
  3660. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  3661.  
  3662. ====================== Dump #7: UNLOADED MODULES =======================
  3663.  
  3664. fffff801`34470000 fffff801`3447f000 dump_storpor
  3665. fffff801`344c0000 fffff801`344f3000 dump_storahc
  3666. fffff801`34520000 fffff801`3453e000 dump_dumpfve
  3667. fffff801`36600000 fffff801`36655000 WUDFRd.sys
  3668. fffff801`33e70000 fffff801`33e8c000 dam.sys
  3669. fffff801`20200000 fffff801`20211000 WdBoot.sys
  3670. fffff801`212b0000 fffff801`212c0000 hwpolicy.sys
  3671.  
  3672. ====================== Dump #7: BIOS INFORMATION =======================
  3673.  
  3674. [SMBIOS Data Tables v3.1]
  3675. [DMI Version - 0]
  3676. [2.0 Calling Convention - No]
  3677. [Table Size - 2808 bytes]
  3678. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  3679. Vendor American Megatrends Inc.
  3680. BIOS Version P4.20
  3681. BIOS Starting Address Segment f000
  3682. BIOS Release Date 10/31/2019
  3683. BIOS ROM Size 1000000
  3684. BIOS Characteristics
  3685. 07: - PCI Supported
  3686. 11: - Upgradeable FLASH BIOS
  3687. 12: - BIOS Shadowing Supported
  3688. 15: - CD-Boot Supported
  3689. 16: - Selectable Boot Supported
  3690. 17: - BIOS ROM Socketed
  3691. 19: - EDD Supported
  3692. 23: - 1.2MB Floppy Supported
  3693. 24: - 720KB Floppy Supported
  3694. 25: - 2.88MB Floppy Supported
  3695. 26: - Print Screen Device Supported
  3696. 27: - Keyboard Services Supported
  3697. 28: - Serial Services Supported
  3698. 29: - Printer Services Supported
  3699. 32: - BIOS Vendor Reserved
  3700. BIOS Characteristic Extensions
  3701. 00: - ACPI Supported
  3702. 01: - USB Legacy Supported
  3703. 08: - BIOS Boot Specification Supported
  3704. 10: - Specification Reserved
  3705. 11: - Specification Reserved
  3706. BIOS Major Revision 5
  3707. BIOS Minor Revision 12
  3708. EC Firmware Major Revision 255
  3709. EC Firmware Minor Revision 255
  3710. [System Information (Type 1) - Length 27 - Handle 0001h]
  3711. UUID 00000000-0000-0000-0000-000000000000
  3712. Wakeup Type Power Switch
  3713. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  3714. Manufacturer ASRock
  3715. Product Z370 Extreme4
  3716. Version
  3717. Feature Flags 09h
  3718. -1387415840: - -1387415792: - ÷7?Öý
  3719. Location
  3720. Chassis Handle 0003h
  3721. Board Type 0ah - Processor/Memory Module
  3722. Number of Child Handles 0
  3723. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  3724. Chassis Type Desktop
  3725. Bootup State Safe
  3726. Power Supply State Safe
  3727. Thermal State Safe
  3728. Security Status None
  3729. OEM Defined 0
  3730. Height 0U
  3731. Number of Power Cords 1
  3732. Number of Contained Elements 0
  3733. Contained Element Size 3
  3734. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  3735. Number of Strings 1
  3736. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  3737. Location 03h - SystemBoard/Motherboard
  3738. Use 03h - System Memory
  3739. Memory Error Correction 03h - None
  3740. Maximum Capacity 67108864KB
  3741. Number of Memory Devices 4
  3742. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  3743. Physical Memory Array Handle 0010h
  3744. Total Width 0 bits
  3745. Data Width 0 bits
  3746. Form Factor 09h - DIMM
  3747. Device Locator ChannelA-DIMM0
  3748. Bank Locator BANK 0
  3749. Memory Type 02h - Unknown
  3750. Type Detail 0000h -
  3751. Speed 0MHz
  3752. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  3753. Physical Memory Array Handle 0010h
  3754. Total Width 64 bits
  3755. Data Width 64 bits
  3756. Size 8192MB
  3757. Form Factor 09h - DIMM
  3758. Device Locator ChannelA-DIMM1
  3759. Bank Locator BANK 1
  3760. Memory Type 1ah - Specification Reserved
  3761. Type Detail 4080h - Synchronous
  3762. Speed 3200MHz
  3763. Manufacturer 029E
  3764. Part Number CMK16GX4M2B3200C16
  3765. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  3766. Physical Memory Array Handle 0010h
  3767. Total Width 0 bits
  3768. Data Width 0 bits
  3769. Form Factor 09h - DIMM
  3770. Device Locator ChannelB-DIMM0
  3771. Bank Locator BANK 2
  3772. Memory Type 02h - Unknown
  3773. Type Detail 0000h -
  3774. Speed 0MHz
  3775. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  3776. Physical Memory Array Handle 0010h
  3777. Total Width 64 bits
  3778. Data Width 64 bits
  3779. Size 8192MB
  3780. Form Factor 09h - DIMM
  3781. Device Locator ChannelB-DIMM1
  3782. Bank Locator BANK 3
  3783. Memory Type 1ah - Specification Reserved
  3784. Type Detail 4080h - Synchronous
  3785. Speed 3200MHz
  3786. Manufacturer 029E
  3787. Part Number CMK16GX4M2B3200C16
  3788. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  3789. Starting Address 00000000h
  3790. Ending Address 00ffffffh
  3791. Memory Array Handle 0010h
  3792. Partition Width 02
  3793. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  3794. Socket Designation L1 Cache
  3795. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  3796. Maximum Cache Size 0180h - 384K
  3797. Installed Size 0180h - 384K
  3798. Supported SRAM Type 0020h - Synchronous
  3799. Current SRAM Type 0020h - Synchronous
  3800. Cache Speed 0ns
  3801. Error Correction Type ParitySingle-Bit ECC
  3802. System Cache Type Unified
  3803. Associativity 8-way Set-Associative
  3804. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  3805. Socket Designation L2 Cache
  3806. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  3807. Maximum Cache Size 0600h - 1536K
  3808. Installed Size 0600h - 1536K
  3809. Supported SRAM Type 0020h - Synchronous
  3810. Current SRAM Type 0020h - Synchronous
  3811. Cache Speed 0ns
  3812. Error Correction Type Multi-Bit ECC
  3813. System Cache Type Unified
  3814. Associativity 4-way Set-Associative
  3815. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  3816. Socket Designation L3 Cache
  3817. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  3818. Maximum Cache Size 3000h - 12288K
  3819. Installed Size 3000h - 12288K
  3820. Supported SRAM Type 0020h - Synchronous
  3821. Current SRAM Type 0020h - Synchronous
  3822. Cache Speed 0ns
  3823. Error Correction Type Specification Reserved
  3824. System Cache Type Unified
  3825. Associativity 16-way Set-Associative
  3826. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  3827. Socket Designation CPUSocket
  3828. Processor Type Central Processor
  3829. Processor Family c6h - Specification Reserved
  3830. Processor Manufacturer Intel(R) Corporation
  3831. Processor ID ea060900fffbebbf
  3832. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  3833. Processor Voltage 8ah - 1.0V
  3834. External Clock 100MHz
  3835. Max Speed 8300MHz
  3836. Current Speed 3700MHz
  3837. Status Enabled Populated
  3838. Processor Upgrade Specification Reserved
  3839. L1 Cache Handle 0016h
  3840. L2 Cache Handle 0017h
  3841. L3 Cache Handle 0018h
  3842. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  3843. Starting Address 00000000h
  3844. Ending Address 007fffffh
  3845. Memory Device Handle 0012h
  3846. Mem Array Mapped Adr Handle 0015h
  3847. Partition Row Position 01
  3848. Interleave Position 01
  3849. Interleave Data Depth 02
  3850. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  3851. Starting Address 00800000h
  3852. Ending Address 00ffffffh
  3853. Memory Device Handle 0014h
  3854. Mem Array Mapped Adr Handle 0015h
  3855. Partition Row Position 01
  3856. Interleave Position 02
  3857. Interleave Data Depth 02
  3858.  
  3859. ========================== Dump #7: Extra #1 ===========================
  3860.  
  3861. 7: kd> !verifier
  3862. fffff8011d22a6c0: Unable to get verifier list.
  3863.  
  3864. ========================== Dump #7: Extra #2 ===========================
  3865.  
  3866. 7: kd> !thread
  3867. THREAD ffffd8094f74f080 Cid 1ccc.2030 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 7
  3868. Not impersonating
  3869. GetUlongFromAddress: unable to read from fffff8011d21143c
  3870. Owning Process ffffd8094f644080 Image: chrome.exe
  3871. Attached Process N/A Image: N/A
  3872. fffff78000000000: Unable to get shared data
  3873. Wait Start TickCount 96488
  3874. Context Switch Count 29 IdealProcessor: 4
  3875. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  3876. UserTime 00:00:00.000
  3877. KernelTime 00:00:00.000
  3878. Win32 Start Address 0x00007ffeea648cf0
  3879. Stack Init ffff850226d77b90 Current ffff850226d76910
  3880. Base ffff850226d78000 Limit ffff850226d71000 Call 0000000000000000
  3881. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  3882. Child-SP RetAddr : Args to Child : Call Site
  3883. ffff8502`26d76b88 fffff801`1ca5418e : 00000000`0000001a 00000000`00041792 ffffd73f`ff7635f8 08000000`00000000 : nt!KeBugCheckEx
  3884. ffff8502`26d76b90 fffff801`1c8119d1 : 00000000`00000003 ffffd73f`ff763000 ffff8502`26d77060 00000000`00000003 : nt!MiDeleteVa+0x191e6e
  3885. ffff8502`26d76c80 fffff801`1c811cf0 : 00000000`00000000 ffffd809`4f644700 00000000`00000000 00000000`00000000 : nt!MiWalkPageTablesRecursively+0x301
  3886. ffff8502`26d76d10 fffff801`1c811cf0 : 00000000`00000000 ffffd809`4f644700 ffffd76b`00000000 00000000`00000010 : nt!MiWalkPageTablesRecursively+0x620
  3887. ffff8502`26d76da0 fffff801`1c811cf0 : ffff8502`26d77060 ffffd809`4f644700 ffffd76b`00000000 00000000`00000020 : nt!MiWalkPageTablesRecursively+0x620
  3888. ffff8502`26d76e30 fffff801`1c80e5fb : 00000000`00000000 ffffd809`4f644700 00000000`00000000 00000000`00000030 : nt!MiWalkPageTablesRecursively+0x620
  3889. ffff8502`26d76ec0 fffff801`1c8c22d1 : ffff8502`26d77060 ffffd809`00000000 ffffd73e`00000002 ffff8502`00000000 : nt!MiWalkPageTables+0x36b
  3890. ffff8502`26d76fc0 fffff801`1c8a787f : 00000000`00000000 00000000`00000060 ffffd809`4f6447c0 00000000`00000000 : nt!MiDeletePagablePteRange+0x491
  3891. ffff8502`26d77440 fffff801`1cbeab99 : ffffd809`4f644080 00000000`00000000 ffffd809`00000000 ffffd809`00000001 : nt!MiDeleteVad+0x41f
  3892. ffff8502`26d77570 fffff801`1cc66dc0 : ffffd809`4f6d1da0 ffffd809`4f644d20 ffffd809`4f74f080 00000000`00000000 : nt!MiUnmapVad+0x49
  3893. ffff8502`26d775a0 fffff801`1cc67c73 : ffffd809`4f6ccb20 ffffd809`4f6ccb20 ffffd809`4f6d1da0 ffffd809`4f644080 : nt!MiCleanVad+0x30
  3894. ffff8502`26d775d0 fffff801`1ccba247 : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffffd809`4f644080 : nt!MmCleanProcessAddressSpace+0x137
  3895. ffff8502`26d77650 fffff801`1cbe8e32 : ffffd809`4f644080 ffffc685`a0e55060 ffff8502`26d77890 00000000`00000000 : nt!PspRundownSingleProcess+0x13b
  3896. ffff8502`26d776d0 fffff801`1ccf51e8 : 00000001`00000000 00000000`00000001 ffff8502`26d778e0 00000066`17280000 : nt!PspExitThread+0x5f6
  3897. ffff8502`26d777d0 fffff801`1c82a4e7 : 00000000`40ad0088 00000000`00000000 00000000`00000000 fffff801`1c814bb6 : nt!KiSchedulerApcTerminate+0x38
  3898. ffff8502`26d77810 fffff801`1c9e1fc0 : 00000066`183ff858 ffff8502`26d778c0 ffff8502`26d77a80 7fffffff`00000000 : nt!KiDeliverApc+0x487
  3899. ffff8502`26d778c0 fffff801`1c9ef41f : ffffd809`4f74f080 00000000`00000001 ffff8502`26d77a18 fffffff7`c1fede00 : nt!KiInitiateUserApc+0x70
  3900. ffff8502`26d77a00 00007fff`2f14ae14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f (TrapFrame @ ffff8502`26d77a00)
  3901. 00000066`183ff828 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`2f14ae14
  3902.  
  3903.  
  3904. ========================================================================
  3905. ======================= Dump #8: ANALYZE VERBOSE =======================
  3906. ======================= File: 070620-5062-01.dmp =======================
  3907. ========================================================================
  3908.  
  3909. Mini Kernel Dump File: Only registers and stack trace are available
  3910. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  3911. Kernel base = 0xfffff802`3f000000 PsLoadedModuleList = 0xfffff802`3fc2a2b0
  3912. Debug session time: Mon Jul 6 14:35:12.589 2020 (UTC - 4:00)
  3913. System Uptime: 0 days 0:12:27.256
  3914.  
  3915. BugCheck 1A, {41201, ffffa780ab4716e8, 81000002762dd867, ffff96893ce65a30}
  3916. Probably caused by : memory_corruption ( nt!MiGetPageProtection+19544e )
  3917. Followup: MachineOwner
  3918.  
  3919. MEMORY_MANAGEMENT (1a)
  3920. # Any other values for parameter 1 must be individually examined.
  3921.  
  3922. Arguments:
  3923. Arg1: 0000000000041201, The subtype of the bugcheck.
  3924. Arg2: ffffa780ab4716e8
  3925. Arg3: 81000002762dd867
  3926. Arg4: ffff96893ce65a30
  3927.  
  3928. Debugging Details:
  3929. DUMP_CLASS: 1
  3930. DUMP_QUALIFIER: 400
  3931. DUMP_TYPE: 2
  3932. DUMP_FILE_ATTRIBUTES: 0x8
  3933. Kernel Generated Triage Dump
  3934. BUGCHECK_STR: 0x1a_41201
  3935. CUSTOMER_CRASH_COUNT: 1
  3936. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  3937.  
  3938. PROCESS_NAME: Overwatch.exe
  3939.  
  3940. CURRENT_IRQL: 2
  3941. LAST_CONTROL_TRANSFER: from fffff8023f44be8e to fffff8023f3dda20
  3942. STACK_TEXT:
  3943. ffffc309`28fa7448 fffff802`3f44be8e : 00000000`0000001a 00000000`00041201 ffffa780`ab4716e8 81000002`762dd867 : nt!KeBugCheckEx
  3944. ffffc309`28fa7450 fffff802`3f2b5d14 : 00000000`00001000 00000000`00000000 00000000`00000000 ffff9689`3ce65a30 : nt!MiGetPageProtection+0x19544e
  3945. ffffc309`28fa74b0 fffff802`3f2a3bff : 00000000`00000000 00000156`8e2a0000 00000000`00000000 00000000`00000000 : nt!MiQueryAddressState+0x2f4
  3946. ffffc309`28fa76d0 fffff802`3f66a5dc : 00000000`00000000 00000000`00000000 ffff9689`00000000 00000000`00000000 : nt!MiQueryAddressSpan+0xcf
  3947. ffffc309`28fa7790 fffff802`3f669d85 : 00000000`00000059 00000000`00000000 ffff9689`00000001 0000004e`466fe2b8 : nt!MmQueryVirtualMemory+0x83c
  3948. ffffc309`28fa7940 fffff802`3f3ef375 : 00000000`00000001 0000004e`466fe2b8 00000000`000ed107 00000000`00000000 : nt!NtQueryVirtualMemory+0x25
  3949. ffffc309`28fa7990 00000156`1ea50b68 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  3950. 0000004e`466fe338 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00000156`1ea50b68
  3951. STACK_COMMAND: kb
  3952. THREAD_SHA1_HASH_MOD_FUNC: daeab5d68ba3ecb3234b5b8938d47aee75235996
  3953. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 3aeafd959efe4759b4a5f4ef3cd11db1a0a65eeb
  3954. THREAD_SHA1_HASH_MOD: 30a3e915496deaace47137d5b90c3ecc03746bf6
  3955. FOLLOWUP_IP:
  3956. nt!MiGetPageProtection+19544e
  3957. fffff802`3f44be8e cc int 3
  3958. FAULT_INSTR_CODE: d8b48cc
  3959. SYMBOL_STACK_INDEX: 1
  3960. SYMBOL_NAME: nt!MiGetPageProtection+19544e
  3961. FOLLOWUP_NAME: MachineOwner
  3962. MODULE_NAME: nt
  3963. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  3964. IMAGE_VERSION: 10.0.19041.330
  3965.  
  3966. IMAGE_NAME: memory_corruption
  3967.  
  3968. BUCKET_ID_FUNC_OFFSET: 19544e
  3969. FAILURE_BUCKET_ID: 0x1a_41201_nt!MiGetPageProtection
  3970. BUCKET_ID: 0x1a_41201_nt!MiGetPageProtection
  3971. PRIMARY_PROBLEM_CLASS: 0x1a_41201_nt!MiGetPageProtection
  3972. TARGET_TIME: 2020-07-06T18:35:12.000Z
  3973. SUITE_MASK: 784
  3974. PRODUCT_TYPE: 1
  3975. USER_LCID: 0
  3976. FAILURE_ID_HASH_STRING: km:0x1a_41201_nt!migetpageprotection
  3977. FAILURE_ID_HASH: {c1fe3b27-3ba8-d99e-656f-85f3d58dc669}
  3978. Followup: MachineOwner
  3979.  
  3980. ====================== Dump #8: 3RD PARTY DRIVERS ======================
  3981.  
  3982. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  3983. Jul 20 2017 - SteamStreamingSpeakers.sys - Steam Streaming Speakers driver (Valve Corporation)
  3984. Jul 28 2017 - SteamStreamingMicrophone.sys - Steam Streaming Microphone driver (Valve Corporation)
  3985. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  3986. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  3987. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  3988. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  3989. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  3990. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  3991.  
  3992. ================== Dump #8: 3RD PARTY DRIVERS (FULL) ===================
  3993.  
  3994. Image name: wdcsam64.sys
  3995. Search : https://www.google.com/search?q=wdcsam64.sys
  3996. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  3997. Timestamp : Fri Oct 9 2015
  3998.  
  3999. Image name: SteamStreamingSpeakers.sys
  4000. Search : https://www.google.com/search?q=SteamStreamingSpeakers.sys
  4001. ADA Info : Steam Streaming Speakers driver (Valve Corporation)
  4002. Timestamp : Thu Jul 20 2017
  4003.  
  4004. Image name: SteamStreamingMicrophone.sys
  4005. Search : https://www.google.com/search?q=SteamStreamingMicrophone.sys
  4006. ADA Info : Steam Streaming Microphone driver (Valve Corporation)
  4007. Timestamp : Fri Jul 28 2017
  4008.  
  4009. Image name: imaucxhpal.sys
  4010. Search : https://www.google.com/search?q=imaucxhpal.sys
  4011. ADA Info : MA-USB (UCX) HPAL driver
  4012. Timestamp : Mon Jan 21 2019
  4013.  
  4014. Image name: iwigig.sys
  4015. Search : https://www.google.com/search?q=iwigig.sys
  4016. ADA Info : WiGig MAC driver (Intel)
  4017. Timestamp : Mon Jan 21 2019
  4018.  
  4019. Image name: TeeDriverW8x64.sys
  4020. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  4021. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  4022. Timestamp : Thu Apr 4 2019
  4023.  
  4024. Image name: e1d68x64.sys
  4025. Search : https://www.google.com/search?q=e1d68x64.sys
  4026. ADA Info : Intel(R) Gigabit Adapter driver
  4027. Timestamp : Tue May 7 2019
  4028.  
  4029. Image name: nvhda64v.sys
  4030. Search : https://www.google.com/search?q=nvhda64v.sys
  4031. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  4032. Timestamp : Tue Jun 9 2020
  4033.  
  4034. Image name: nvlddmkm.sys
  4035. Search : https://www.google.com/search?q=nvlddmkm.sys
  4036. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  4037. Timestamp : Sun Jun 21 2020
  4038.  
  4039. ====================== Dump #8: MICROSOFT DRIVERS ======================
  4040.  
  4041. ACPI.sys ACPI Driver for NT (Microsoft)
  4042. acpiex.sys ACPIEx Driver (Microsoft)
  4043. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  4044. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  4045. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  4046. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  4047. ahcache.sys Application Compatibility Cache (Microsoft)
  4048. bam.sys BAM Kernal driver (Microsoft)
  4049. BasicDisplay.sys Basic Display driver (Microsoft)
  4050. BasicRender.sys Basic Render driver (Microsoft)
  4051. Beep.SYS BEEP driver (Microsoft)
  4052. bindflt.sys Windows Bind Filter driver (Microsoft)
  4053. BOOTVID.dll VGA Boot Driver (Microsoft)
  4054. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  4055. cdd.dll Canonical Display Driver (Microsoft)
  4056. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  4057. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  4058. CI.dll Code Integrity Module (Microsoft)
  4059. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  4060. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  4061. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  4062. CLFS.SYS Common Log File System Driver (Microsoft)
  4063. clipsp.sys CLIP Service (Microsoft)
  4064. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  4065. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  4066. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  4067. condrv.sys Console Driver (Microsoft)
  4068. crashdmp.sys Crash Dump driver (Microsoft)
  4069. dfsc.sys DFS Namespace Client Driver (Microsoft)
  4070. disk.sys PnP Disk Driver (Microsoft)
  4071. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  4072. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  4073. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  4074. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  4075. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  4076. dxgmms2.sys DirectX Graphics MMS
  4077. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  4078. fastfat.SYS Fast FAT File System Driver (Microsoft)
  4079. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  4080. fileinfo.sys FileInfo Filter Driver (Microsoft)
  4081. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  4082. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  4083. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  4084. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  4085. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  4086. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  4087. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  4088. HdAudio.sys High Definition Audio Function driver (Microsoft)
  4089. HIDCLASS.SYS Hid Class Library (Microsoft)
  4090. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  4091. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  4092. HTTP.sys HTTP Protocol Stack (Microsoft)
  4093. intelpep.sys Intel Power Engine Plugin (Microsoft)
  4094. intelppm.sys Processor Device Driver (Microsoft)
  4095. IntelTA.sys Intel Telemetry Driver
  4096. iorate.sys I/O rate control Filter (Microsoft)
  4097. kbdclass.sys Keyboard Class Driver (Microsoft)
  4098. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  4099. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  4100. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  4101. ks.sys Kernal CSA Library (Microsoft)
  4102. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  4103. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  4104. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  4105. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  4106. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  4107. mcupdate.dll Media Center Update (Microsoft)
  4108. mmcss.sys MMCSS Driver (Microsoft)
  4109. monitor.sys Monitor Driver (Microsoft)
  4110. mouclass.sys Mouse Class Driver (Microsoft)
  4111. mouhid.sys HID Mouse Filter Driver (Microsoft)
  4112. mountmgr.sys Mount Point Manager (Microsoft)
  4113. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  4114. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  4115. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  4116. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  4117. Msfs.SYS Mailslot driver (Microsoft)
  4118. msisadrv.sys ISA Driver (Microsoft)
  4119. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  4120. msquic.sys Windows QUIC Driver
  4121. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  4122. mssmbios.sys System Management BIOS driver (Microsoft)
  4123. mup.sys Multiple UNC Provider driver (Microsoft)
  4124. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  4125. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  4126. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  4127. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  4128. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  4129. NDProxy.sys NDIS Proxy driver (Microsoft)
  4130. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  4131. netbios.sys NetBIOS Interface driver (Microsoft)
  4132. netbt.sys MBT Transport driver (Microsoft)
  4133. NETIO.SYS Network I/O Subsystem (Microsoft)
  4134. Npfs.SYS NPFS driver (Microsoft)
  4135. npsvctrig.sys Named pipe service triggers (Microsoft)
  4136. nsiproxy.sys NSI Proxy driver (Microsoft)
  4137. Ntfs.sys NT File System Driver (Microsoft)
  4138. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  4139. ntosext.sys NTOS Extension Host driver (Microsoft)
  4140. Null.SYS NULL Driver (Microsoft)
  4141. pacer.sys QoS Packet Scheduler (Microsoft)
  4142. partmgr.sys Partition driver (Microsoft)
  4143. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  4144. pcw.sys Performance Counter Driver (Microsoft)
  4145. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  4146. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  4147. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  4148. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  4149. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  4150. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  4151. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  4152. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  4153. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  4154. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  4155. rdyboost.sys ReadyBoost Driver (Microsoft)
  4156. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  4157. serenum.sys Serial Port Enumerator (Microsoft)
  4158. serial.sys Serial Device Driver
  4159. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  4160. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  4161. spaceport.sys Storage Spaces driver (Microsoft)
  4162. srv2.sys Smb 2.0 Server driver (Microsoft)
  4163. srvnet.sys Server Network driver (Microsoft)
  4164. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  4165. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  4166. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  4167. storqosflt.sys Storage QoS Filter driver (Microsoft)
  4168. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  4169. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  4170. tcpip.sys TCP/IP Protocol driver (Microsoft)
  4171. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  4172. TDI.SYS TDI Wrapper driver (Microsoft)
  4173. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  4174. tm.sys Kernel Transaction Manager driver (Microsoft)
  4175. ucx01000.sys USB Controller Extension (Microsoft)
  4176. udfs.sys UDF File System driver (Microsoft)
  4177. UEFI.sys UEFI NT driver (Microsoft)
  4178. umbus.sys User-Mode Bus Enumerator (Microsoft)
  4179. usbaudio.sys USB Audio Class Driver (Microsoft)
  4180. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  4181. USBD.SYS Universal Serial Bus Driver (Microsoft)
  4182. UsbHub3.sys USB3 HUB driver (Microsoft)
  4183. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  4184. USBXHCI.SYS USB XHCI driver (Microsoft)
  4185. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  4186. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  4187. volmgr.sys Volume Manager Driver (Microsoft)
  4188. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  4189. volsnap.sys Volume Shadow Copy driver (Microsoft)
  4190. volume.sys Volume driver (Microsoft)
  4191. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  4192. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  4193. watchdog.sys Watchdog driver (Microsoft)
  4194. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  4195. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  4196. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  4197. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  4198. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  4199. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  4200. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  4201. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  4202. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  4203. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  4204. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  4205. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  4206. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  4207. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  4208. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  4209. Wof.sys Windows Overlay Filter (Microsoft)
  4210. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  4211. WppRecorder.sys WPP Trace Recorder (Microsoft)
  4212. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  4213.  
  4214. ====================== Dump #8: UNLOADED MODULES =======================
  4215.  
  4216. fffff802`57370000 fffff802`5737f000 dump_storpor
  4217. fffff802`573c0000 fffff802`573f3000 dump_storahc
  4218. fffff802`57220000 fffff802`5723e000 dump_dumpfve
  4219. fffff802`57f40000 fffff802`57f95000 WUDFRd.sys
  4220. fffff802`57b50000 fffff802`57b6c000 dam.sys
  4221. fffff802`43e00000 fffff802`43e11000 WdBoot.sys
  4222. fffff802`44eb0000 fffff802`44ec0000 hwpolicy.sys
  4223.  
  4224. ====================== Dump #8: BIOS INFORMATION =======================
  4225.  
  4226. [SMBIOS Data Tables v3.1]
  4227. [DMI Version - 0]
  4228. [2.0 Calling Convention - No]
  4229. [Table Size - 2808 bytes]
  4230. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  4231. Vendor American Megatrends Inc.
  4232. BIOS Version P4.20
  4233. BIOS Starting Address Segment f000
  4234. BIOS Release Date 10/31/2019
  4235. BIOS ROM Size 1000000
  4236. BIOS Characteristics
  4237. 07: - PCI Supported
  4238. 11: - Upgradeable FLASH BIOS
  4239. 12: - BIOS Shadowing Supported
  4240. 15: - CD-Boot Supported
  4241. 16: - Selectable Boot Supported
  4242. 17: - BIOS ROM Socketed
  4243. 19: - EDD Supported
  4244. 23: - 1.2MB Floppy Supported
  4245. 24: - 720KB Floppy Supported
  4246. 25: - 2.88MB Floppy Supported
  4247. 26: - Print Screen Device Supported
  4248. 27: - Keyboard Services Supported
  4249. 28: - Serial Services Supported
  4250. 29: - Printer Services Supported
  4251. 32: - BIOS Vendor Reserved
  4252. BIOS Characteristic Extensions
  4253. 00: - ACPI Supported
  4254. 01: - USB Legacy Supported
  4255. 08: - BIOS Boot Specification Supported
  4256. 10: - Specification Reserved
  4257. 11: - Specification Reserved
  4258. BIOS Major Revision 5
  4259. BIOS Minor Revision 12
  4260. EC Firmware Major Revision 255
  4261. EC Firmware Minor Revision 255
  4262. [System Information (Type 1) - Length 27 - Handle 0001h]
  4263. UUID 00000000-0000-0000-0000-000000000000
  4264. Wakeup Type Power Switch
  4265. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  4266. Manufacturer ASRock
  4267. Product Z370 Extreme4
  4268. Version
  4269. Feature Flags 09h
  4270. -1387415840: - -1387415792: - ÷7?Öý
  4271. Location
  4272. Chassis Handle 0003h
  4273. Board Type 0ah - Processor/Memory Module
  4274. Number of Child Handles 0
  4275. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  4276. Chassis Type Desktop
  4277. Bootup State Safe
  4278. Power Supply State Safe
  4279. Thermal State Safe
  4280. Security Status None
  4281. OEM Defined 0
  4282. Height 0U
  4283. Number of Power Cords 1
  4284. Number of Contained Elements 0
  4285. Contained Element Size 3
  4286. [OEM Strings (Type 11) - Length 5 - Handle 000dh]
  4287. Number of Strings 1
  4288. [Physical Memory Array (Type 16) - Length 23 - Handle 0010h]
  4289. Location 03h - SystemBoard/Motherboard
  4290. Use 03h - System Memory
  4291. Memory Error Correction 03h - None
  4292. Maximum Capacity 67108864KB
  4293. Number of Memory Devices 4
  4294. [Memory Device (Type 17) - Length 40 - Handle 0011h]
  4295. Physical Memory Array Handle 0010h
  4296. Total Width 0 bits
  4297. Data Width 0 bits
  4298. Form Factor 09h - DIMM
  4299. Device Locator ChannelA-DIMM0
  4300. Bank Locator BANK 0
  4301. Memory Type 02h - Unknown
  4302. Type Detail 0000h -
  4303. Speed 0MHz
  4304. [Memory Device (Type 17) - Length 40 - Handle 0012h]
  4305. Physical Memory Array Handle 0010h
  4306. Total Width 64 bits
  4307. Data Width 64 bits
  4308. Size 8192MB
  4309. Form Factor 09h - DIMM
  4310. Device Locator ChannelA-DIMM1
  4311. Bank Locator BANK 1
  4312. Memory Type 1ah - Specification Reserved
  4313. Type Detail 4080h - Synchronous
  4314. Speed 3200MHz
  4315. Manufacturer 029E
  4316. Part Number CMK16GX4M2B3200C16
  4317. [Memory Device (Type 17) - Length 40 - Handle 0013h]
  4318. Physical Memory Array Handle 0010h
  4319. Total Width 0 bits
  4320. Data Width 0 bits
  4321. Form Factor 09h - DIMM
  4322. Device Locator ChannelB-DIMM0
  4323. Bank Locator BANK 2
  4324. Memory Type 02h - Unknown
  4325. Type Detail 0000h -
  4326. Speed 0MHz
  4327. [Memory Device (Type 17) - Length 40 - Handle 0014h]
  4328. Physical Memory Array Handle 0010h
  4329. Total Width 64 bits
  4330. Data Width 64 bits
  4331. Size 8192MB
  4332. Form Factor 09h - DIMM
  4333. Device Locator ChannelB-DIMM1
  4334. Bank Locator BANK 3
  4335. Memory Type 1ah - Specification Reserved
  4336. Type Detail 4080h - Synchronous
  4337. Speed 3200MHz
  4338. Manufacturer 029E
  4339. Part Number CMK16GX4M2B3200C16
  4340. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0015h]
  4341. Starting Address 00000000h
  4342. Ending Address 00ffffffh
  4343. Memory Array Handle 0010h
  4344. Partition Width 02
  4345. [Cache Information (Type 7) - Length 27 - Handle 0016h]
  4346. Socket Designation L1 Cache
  4347. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  4348. Maximum Cache Size 0180h - 384K
  4349. Installed Size 0180h - 384K
  4350. Supported SRAM Type 0020h - Synchronous
  4351. Current SRAM Type 0020h - Synchronous
  4352. Cache Speed 0ns
  4353. Error Correction Type ParitySingle-Bit ECC
  4354. System Cache Type Unified
  4355. Associativity 8-way Set-Associative
  4356. [Cache Information (Type 7) - Length 27 - Handle 0017h]
  4357. Socket Designation L2 Cache
  4358. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  4359. Maximum Cache Size 0600h - 1536K
  4360. Installed Size 0600h - 1536K
  4361. Supported SRAM Type 0020h - Synchronous
  4362. Current SRAM Type 0020h - Synchronous
  4363. Cache Speed 0ns
  4364. Error Correction Type Multi-Bit ECC
  4365. System Cache Type Unified
  4366. Associativity 4-way Set-Associative
  4367. [Cache Information (Type 7) - Length 27 - Handle 0018h]
  4368. Socket Designation L3 Cache
  4369. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  4370. Maximum Cache Size 3000h - 12288K
  4371. Installed Size 3000h - 12288K
  4372. Supported SRAM Type 0020h - Synchronous
  4373. Current SRAM Type 0020h - Synchronous
  4374. Cache Speed 0ns
  4375. Error Correction Type Specification Reserved
  4376. System Cache Type Unified
  4377. Associativity 16-way Set-Associative
  4378. [Processor Information (Type 4) - Length 48 - Handle 0019h]
  4379. Socket Designation CPUSocket
  4380. Processor Type Central Processor
  4381. Processor Family c6h - Specification Reserved
  4382. Processor Manufacturer Intel(R) Corporation
  4383. Processor ID ea060900fffbebbf
  4384. Processor Version Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
  4385. Processor Voltage 8ah - 1.0V
  4386. External Clock 100MHz
  4387. Max Speed 8300MHz
  4388. Current Speed 3700MHz
  4389. Status Enabled Populated
  4390. Processor Upgrade Specification Reserved
  4391. L1 Cache Handle 0016h
  4392. L2 Cache Handle 0017h
  4393. L3 Cache Handle 0018h
  4394. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  4395. Starting Address 00000000h
  4396. Ending Address 007fffffh
  4397. Memory Device Handle 0012h
  4398. Mem Array Mapped Adr Handle 0015h
  4399. Partition Row Position 01
  4400. Interleave Position 01
  4401. Interleave Data Depth 02
  4402. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  4403. Starting Address 00800000h
  4404. Ending Address 00ffffffh
  4405. Memory Device Handle 0014h
  4406. Mem Array Mapped Adr Handle 0015h
  4407. Partition Row Position 01
  4408. Interleave Position 02
  4409. Interleave Data Depth 02
  4410.  
  4411. ========================== Dump #8: Extra #1 ===========================
  4412.  
  4413. 3: kd> !verifier
  4414. fffff8023fc2a6c0: Unable to get verifier list.
  4415.  
  4416. ========================== Dump #8: Extra #2 ===========================
  4417.  
  4418. 3: kd> !thread
  4419. THREAD ffff96893ab47080 Cid 2490.2868 Teb: 0000004e42860000 Win32Thread: ffff96893f4118c0 RUNNING on processor 3
  4420. Not impersonating
  4421. GetUlongFromAddress: unable to read from fffff8023fc1143c
  4422. Owning Process ffff968938f8d300 Image: Overwatch.exe
  4423. Attached Process N/A Image: N/A
  4424. fffff78000000000: Unable to get shared data
  4425. Wait Start TickCount 47824
  4426. Context Switch Count 83142 IdealProcessor: 2
  4427. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  4428. UserTime 00:00:00.000
  4429. KernelTime 00:00:00.000
  4430. Win32 Start Address 0x00007ff6a16c0ab8
  4431. Stack Init ffffc30928fa7b90 Current ffffc30928fa7670
  4432. Base ffffc30928fa8000 Limit ffffc30928fa1000 Call 0000000000000000
  4433. Priority 10 BasePriority 8 PriorityDecrement 2 IoPriority 2 PagePriority 5
  4434. Child-SP RetAddr : Args to Child : Call Site
  4435. ffffc309`28fa7448 fffff802`3f44be8e : 00000000`0000001a 00000000`00041201 ffffa780`ab4716e8 81000002`762dd867 : nt!KeBugCheckEx
  4436. ffffc309`28fa7450 fffff802`3f2b5d14 : 00000000`00001000 00000000`00000000 00000000`00000000 ffff9689`3ce65a30 : nt!MiGetPageProtection+0x19544e
  4437. ffffc309`28fa74b0 fffff802`3f2a3bff : 00000000`00000000 00000156`8e2a0000 00000000`00000000 00000000`00000000 : nt!MiQueryAddressState+0x2f4
  4438. ffffc309`28fa76d0 fffff802`3f66a5dc : 00000000`00000000 00000000`00000000 ffff9689`00000000 00000000`00000000 : nt!MiQueryAddressSpan+0xcf
  4439. ffffc309`28fa7790 fffff802`3f669d85 : 00000000`00000059 00000000`00000000 ffff9689`00000001 0000004e`466fe2b8 : nt!MmQueryVirtualMemory+0x83c
  4440. ffffc309`28fa7940 fffff802`3f3ef375 : 00000000`00000001 0000004e`466fe2b8 00000000`000ed107 00000000`00000000 : nt!NtQueryVirtualMemory+0x25
  4441. ffffc309`28fa7990 00000156`1ea50b68 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25 (TrapFrame @ ffffc309`28fa7a00)
  4442. 0000004e`466fe338 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00000156`1ea50b68
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!