Guest User

Untitled

a guest
Dec 17th, 2020
4,581
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 132.42 KB | None | 0 0
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 10 minutes and 22 seconds
  5.  
  6. ================================= CPU ==================================
  7. COUNT: 10
  8. MHZ: 3593
  9. VENDOR: AuthenticAMD
  10. FAMILY: 17
  11. MODEL: 71
  12. STEPPING: 0
  13.  
  14. ================================== OS ==================================
  15. Product: WinNt, suite: TerminalServer SingleUserTS
  16. Built by: 18362.1.amd64fre.19h1_release.190318-1202
  17. BUILD_VERSION: 10.0.18362.1256 (WinBuild.160101.0800)
  18. BUILD: 18362
  19. SERVICEPACK: 1256
  20. PLATFORM_TYPE: x64
  21. NAME: Windows 10
  22. EDITION: Windows 10 WinNt TerminalServer SingleUserTS
  23. BUILD_TIMESTAMP: unknown_date
  24. BUILDDATESTAMP: 160101.0800
  25. BUILDLAB: WinBuild
  26. BUILDOSVER: 10.0.18362.1256
  27. BUILD_VERSION: 10.0.18362.1198 (WinBuild.160101.0800)
  28. SERVICEPACK: 1198
  29. BUILD_TIMESTAMP: 1981-09-10 19:55:31
  30. BUILDOSVER: 10.0.18362.1198
  31. BUILD_VERSION: 10.0.18362.1 (WinBuild.160101.0800)
  32. SERVICEPACK: 1
  33. BUILD_TIMESTAMP: 1970-06-25 11:20:15
  34. BUILDOSVER: 10.0.18362.1
  35.  
  36. =============================== DEBUGGER ===============================
  37. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  38. Copyright (c) Microsoft Corporation. All rights reserved.
  39.  
  40. =============================== COMMENTS ===============================
  41. * Information gathered from different dump files may be different. If
  42. Windows updates between two dump files, two or more OS versions may
  43. be shown above.
  44. * Additional BIOS information was not included in the dump file(s). This
  45. can be caused by an outdated BIOS.
  46.  
  47. ========================================================================
  48. ======================= Dump #1: ANALYZE VERBOSE =======================
  49. ====================== File: 121620-10437-01.dmp =======================
  50. ========================================================================
  51.  
  52. Mini Kernel Dump File: Only registers and stack trace are available
  53. Windows 10 Kernel Version 18362 MP (16 procs) Free x64
  54. Kernel base = 0xfffff800`2dc00000 PsLoadedModuleList = 0xfffff800`2e0461b0
  55. Debug session time: Wed Dec 16 08:00:51.791 2020 (UTC - 5:00)
  56. System Uptime: 0 days 0:05:30.445
  57.  
  58. BugCheck D1, {fffff80000400a02, ff, 0, fffff80000400a02}
  59. *** WARNING: Unable to verify timestamp for win32k.sys
  60. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  61. Probably caused by : memory_corruption
  62. Followup: memory_corruption
  63.  
  64. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  65. An attempt was made to access a pageable (or completely invalid) address at an
  66. interrupt request level (IRQL) that is too high. This is usually
  67. caused by drivers using improper addresses.
  68. If kernel debugger is available get stack backtrace.
  69.  
  70. Arguments:
  71. Arg1: fffff80000400a02, memory referenced
  72. Arg2: 00000000000000ff, IRQL
  73. Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
  74. Arg4: fffff80000400a02, address which referenced memory
  75.  
  76. Debugging Details:
  77. DUMP_CLASS: 1
  78. DUMP_QUALIFIER: 400
  79. DUMP_TYPE: 2
  80. READ_ADDRESS: fffff8002e1713b8: Unable to get MiVisibleState
  81. fffff80000400a02
  82. CURRENT_IRQL: 0
  83. FAULTING_IP:
  84. +0
  85. fffff800`00400a02 ?? ???
  86. ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.
  87. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT
  88. CUSTOMER_CRASH_COUNT: 1
  89. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  90.  
  91. PROCESS_NAME: System
  92.  
  93. TRAP_FRAME: ffff838dc1237520 -- (.trap 0xffff838dc1237520)
  94. NOTE: The trap frame does not contain all registers.
  95. Some register values may be zeroed or incorrect.
  96. rax=fffff80000400a02 rbx=0000000000000000 rcx=ffffbf045fe3fa10
  97. rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
  98. rip=fffff80000400a02 rsp=ffff838dc12376b8 rbp=0000000000000200
  99. r8=ffff838dc1237720 r9=ffff838dc1237710 r10=0000fffff8000040
  100. r11=ffffd77cbec00000 r12=0000000000000000 r13=0000000000000000
  101. r14=0000000000000000 r15=0000000000000000
  102. iopl=0 nv up di pl nz na pe nc
  103. fffff800`00400a02 ?? ???
  104. Resetting default scope
  105. LAST_CONTROL_TRANSFER: from fffff8002ddd5929 to fffff8002ddc3b20
  106. FAILED_INSTRUCTION_ADDRESS:
  107. +0
  108. fffff800`00400a02 ?? ???
  109. STACK_TEXT:
  110. ffff838d`c12373d8 fffff800`2ddd5929 : 00000000`0000000a fffff800`00400a02 00000000`000000ff 00000000`00000000 : nt!KeBugCheckEx
  111. ffff838d`c12373e0 fffff800`2ddd1c69 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  112. ffff838d`c1237520 fffff800`00400a02 : fffff800`3c789841 ffffbf04`5fd90770 00000000`00000004 ffff838d`c123762c : nt!KiPageFault+0x469
  113. ffff838d`c12376b8 fffff800`3c789841 : ffffbf04`5fd90770 00000000`00000004 ffff838d`c123762c 00000000`00000004 : 0xfffff800`00400a02
  114. ffff838d`c12376c0 fffff800`2dc33e6f : 00000000`00000000 ffffe780`7ad9eec8 ffffe780`7ad99180 ffffe780`00000001 : amdppm!PerfReadWrappingCounter+0x31
  115. ffff838d`c1237710 fffff800`2dc31fd2 : 00000000`00000000 00000000`c51add6c 00000000`c51add6c 00000000`00000012 : nt!PpmUpdatePerformanceFeedback+0x14f
  116. ffff838d`c12377c0 fffff800`2dc3138e : 00000000`00000003 00000000`00000002 00000000`00000001 00000000`00000000 : nt!PpmIdleExecuteTransition+0xaa2
  117. ffff838d`c1237b00 fffff800`2ddc7614 : ffffffff`00000000 ffffe780`7ad99180 ffffbf04`6530e080 00000000`00000264 : nt!PoIdle+0x36e
  118. ffff838d`c1237c60 00000000`00000000 : ffff838d`c1238000 ffff838d`c1232000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x44
  119. STACK_COMMAND: kb
  120. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  121. fffff8002dc3146f-fffff8002dc31470 2 bytes - nt!PoIdle+44f
  122. [ 48 ff:4c 8b ]
  123. fffff8002dc31476-fffff8002dc31479 4 bytes - nt!PoIdle+456 (+0x07)
  124. [ 0f 1f 44 00:e8 a5 5d a8 ]
  125. fffff8002dc31489-fffff8002dc3148a 2 bytes - nt!PoIdle+469 (+0x13)
  126. [ 48 ff:4c 8b ]
  127. 8 errors : !nt (fffff8002dc3146f-fffff8002dc3148a)
  128. MODULE_NAME: memory_corruption
  129.  
  130. IMAGE_NAME: memory_corruption
  131.  
  132. FOLLOWUP_NAME: memory_corruption
  133. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  134. MEMORY_CORRUPTOR: LARGE
  135. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  136. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  137. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  138. TARGET_TIME: 2020-12-16T13:00:51.000Z
  139. SUITE_MASK: 272
  140. PRODUCT_TYPE: 1
  141. USER_LCID: 0
  142. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  143. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  144. Followup: memory_corruption
  145.  
  146. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  147.  
  148. Jun 11 2018 - e1i65x64.sys - Intel(R) Gigabit Adapter driver
  149. Dec 09 2018 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  150. Feb 07 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  151. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  152. May 14 2019 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  153. Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  154. Sep 11 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  155. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  156. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  157. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  158. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  159.  
  160. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  161.  
  162. Mapped memory image file: C:\ProgramData\dbg\sym\e1i65x64.sys\5B1EB8E28e000\e1i65x64.sys
  163. Image path: \SystemRoot\System32\drivers\e1i65x64.sys
  164. Image name: e1i65x64.sys
  165. Search : https://www.google.com/search?q=e1i65x64.sys
  166. ADA Info : Intel(R) Gigabit Adapter driver
  167. Timestamp : Mon Jun 11 2018
  168. File version: 12.17.10.8
  169. Product version: 10.0.10011.16384
  170. File flags: 8 (Mask 3F) Private
  171. File OS: 40004 NT Win32
  172. File type: 3.6 Driver
  173. File date: 00000000.00000000
  174. CompanyName: Intel Corporation
  175. ProductName: Intel(R) Gigabit Adapter
  176. InternalName: e1i65x64.sys
  177. OriginalFilename: e1i65x64.sys
  178. ProductVersion: 12.17.10.8
  179. FileVersion: 12.17.10.8
  180. FileDescription: Intel(R) Gigabit Adapter NDIS 6.x driver
  181. LegalCopyright: Copyright(C) 2013, Intel Corporation. All rights reserved.
  182.  
  183. Image path: \SystemRoot\System32\drivers\UcmCxUcsiNvppc.sys
  184. Image name: UcmCxUcsiNvppc.sys
  185. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  186. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  187. Timestamp : Sun Dec 9 2018
  188.  
  189. Mapped memory image file: C:\ProgramData\dbg\sym\amdgpio2.sys\5C5BFB24c000\amdgpio2.sys
  190. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  191. Image name: amdgpio2.sys
  192. Search : https://www.google.com/search?q=amdgpio2.sys
  193. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  194. Timestamp : Thu Feb 7 2019
  195. File version: 2.2.0.71
  196. Product version: 2.2.0.71
  197. File flags: 8 (Mask 3F) Private
  198. File OS: 40004 NT Win32
  199. File type: 3.7 Driver
  200. File date: 00000000.00000000
  201. CompanyName: Advanced Micro Devices, Inc
  202. ProductName: AMD GPIO Controller Driver
  203. InternalName: amdgpio2.sys
  204. OriginalFilename: amdgpio2.sys
  205. ProductVersion: 2.2.0.71
  206. FileVersion: 2.2.0.71
  207. FileDescription: AMD GPIO Controller Driver
  208. LegalCopyright: Copyright © 2012-2019 Advanced Micro Devices, Inc
  209.  
  210. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  211. Image name: nvvad64v.sys
  212. Search : https://www.google.com/search?q=nvvad64v.sys
  213. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  214. Timestamp : Thu Mar 14 2019
  215.  
  216. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  217. Image name: RTKVHD64.sys
  218. Search : https://www.google.com/search?q=RTKVHD64.sys
  219. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  220. Timestamp : Tue May 14 2019
  221.  
  222. Image path: \SystemRoot\System32\drivers\amdpsp.sys
  223. Image name: amdpsp.sys
  224. Search : https://www.google.com/search?q=amdpsp.sys
  225. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  226. Timestamp : Wed Jun 19 2019
  227.  
  228. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  229. Image name: AMDPCIDev.sys
  230. Search : https://www.google.com/search?q=AMDPCIDev.sys
  231. ADA Info : Advanced Micro Devices PCI Device driver
  232. Timestamp : Wed Sep 11 2019
  233.  
  234. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys
  235. Image name: nvlddmkm.sys
  236. Search : https://www.google.com/search?q=nvlddmkm.sys
  237. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  238. Timestamp : Wed Oct 2 2019
  239.  
  240. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  241. Image name: NvModuleTracker.sys
  242. Search : https://www.google.com/search?q=NvModuleTracker.sys
  243. ADA Info : NVIDIA Module Tracker driver
  244. Timestamp : Fri Nov 29 2019
  245.  
  246. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  247. Image name: nvvhci.sys
  248. Search : https://www.google.com/search?q=nvvhci.sys
  249. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  250. Timestamp : Fri Jan 10 2020
  251.  
  252. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  253. Image name: nvhda64v.sys
  254. Search : https://www.google.com/search?q=nvhda64v.sys
  255. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  256. Timestamp : Fri Oct 16 2020
  257.  
  258. ====================== Dump #1: MICROSOFT DRIVERS ======================
  259.  
  260. ACPI.sys ACPI Driver for NT (Microsoft)
  261. acpiex.sys ACPIEx Driver (Microsoft)
  262. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  263. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  264. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  265. ahcache.sys Application Compatibility Cache (Microsoft)
  266. amdppm.sys Processor Device Driver
  267. bam.sys BAM Kernal driver (Microsoft)
  268. BasicDisplay.sys Basic Display driver (Microsoft)
  269. BasicRender.sys Basic Render driver (Microsoft)
  270. Beep.SYS BEEP driver (Microsoft)
  271. BOOTVID.dll VGA Boot Driver (Microsoft)
  272. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  273. cdd.dll Canonical Display Driver (Microsoft)
  274. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  275. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  276. CI.dll Code Integrity Module (Microsoft)
  277. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  278. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  279. CLFS.SYS Common Log File System Driver (Microsoft)
  280. clipsp.sys CLIP Service (Microsoft)
  281. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  282. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  283. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  284. condrv.sys Console Driver (Microsoft)
  285. crashdmp.sys Crash Dump driver (Microsoft)
  286. csc.sys Windows Client Side Caching driver (Microsoft)
  287. dfsc.sys DFS Namespace Client Driver (Microsoft)
  288. disk.sys PnP Disk Driver (Microsoft)
  289. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  290. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  291. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  292. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  293. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  294. dxgmms2.sys DirectX Graphics MMS
  295. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  296. fastfat.SYS Fast FAT File System Driver (Microsoft)
  297. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  298. fileinfo.sys FileInfo Filter Driver (Microsoft)
  299. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  300. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  301. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  302. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  303. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  304. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  305. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  306. HIDCLASS.SYS Hid Class Library (Microsoft)
  307. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  308. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  309. HTTP.sys HTTP Protocol Stack (Microsoft)
  310. intelpep.sys Intel Power Engine Plugin (Microsoft)
  311. iorate.sys I/O rate control Filter (Microsoft)
  312. kbdclass.sys Keyboard Class Driver (Microsoft)
  313. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  314. kd.dll Local Kernal Debugger (Microsoft)
  315. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  316. ks.sys Kernal CSA Library (Microsoft)
  317. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  318. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  319. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  320. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  321. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  322. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  323. mmcss.sys MMCSS Driver (Microsoft)
  324. monitor.sys Monitor Driver (Microsoft)
  325. mouclass.sys Mouse Class Driver (Microsoft)
  326. mouhid.sys HID Mouse Filter Driver (Microsoft)
  327. mountmgr.sys Mount Point Manager (Microsoft)
  328. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  329. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  330. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  331. Msfs.SYS Mailslot driver (Microsoft)
  332. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  333. msisadrv.sys ISA Driver (Microsoft)
  334. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  335. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  336. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  337. mssmbios.sys System Management BIOS driver (Microsoft)
  338. mup.sys Multiple UNC Provider driver (Microsoft)
  339. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  340. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  341. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  342. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  343. NDProxy.sys NDIS Proxy driver (Microsoft)
  344. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  345. netbios.sys NetBIOS Interface driver (Microsoft)
  346. netbt.sys MBT Transport driver (Microsoft)
  347. NETIO.SYS Network I/O Subsystem (Microsoft)
  348. Npfs.SYS NPFS driver (Microsoft)
  349. npsvctrig.sys Named pipe service triggers (Microsoft)
  350. nsiproxy.sys NSI Proxy driver (Microsoft)
  351. Ntfs.sys NT File System Driver (Microsoft)
  352. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  353. ntosext.sys NTOS Extension Host driver (Microsoft)
  354. Null.SYS NULL Driver (Microsoft)
  355. pacer.sys QoS Packet Scheduler (Microsoft)
  356. partmgr.sys Partition driver (Microsoft)
  357. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  358. pcw.sys Performance Counter Driver (Microsoft)
  359. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  360. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  361. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  362. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  363. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  364. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  365. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  366. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  367. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  368. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  369. rdyboost.sys ReadyBoost Driver (Microsoft)
  370. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  371. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  372. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  373. spaceport.sys Storage Spaces driver (Microsoft)
  374. srv2.sys Smb 2.0 Server driver (Microsoft)
  375. srvnet.sys Server Network driver (Microsoft)
  376. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  377. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  378. storqosflt.sys Storage QoS Filter driver (Microsoft)
  379. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  380. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  381. tcpip.sys TCP/IP Protocol driver (Microsoft)
  382. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  383. TDI.SYS TDI Wrapper driver (Microsoft)
  384. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  385. tm.sys Kernel Transaction Manager driver (Microsoft)
  386. UcmCx.sys USB Connector Manager KMDF Class Extension
  387. ucx01000.sys USB Controller Extension (Microsoft)
  388. UEFI.sys UEFI NT driver (Microsoft)
  389. umbus.sys User-Mode Bus Enumerator (Microsoft)
  390. usbaudio.sys USB Audio Class Driver (Microsoft)
  391. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  392. USBD.SYS Universal Serial Bus Driver (Microsoft)
  393. UsbHub3.sys USB3 HUB driver (Microsoft)
  394. USBXHCI.SYS USB XHCI driver (Microsoft)
  395. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  396. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  397. volmgr.sys Volume Manager Driver (Microsoft)
  398. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  399. volsnap.sys Volume Shadow Copy driver (Microsoft)
  400. volume.sys Volume driver (Microsoft)
  401. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  402. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  403. watchdog.sys Watchdog driver (Microsoft)
  404. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  405. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  406. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  407. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  408. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  409. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  410. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  411. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  412. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  413. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  414. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  415. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  416. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  417. winquic.sys QUIC Transport Protocol driver (Microsoft)
  418. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  419. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  420. Wof.sys Windows Overlay Filter (Microsoft)
  421. WppRecorder.sys WPP Trace Recorder (Microsoft)
  422.  
  423. ====================== Dump #1: UNLOADED MODULES =======================
  424.  
  425. fffff800`316c0000 fffff800`316cf000 dump_storpor
  426. fffff800`31700000 fffff800`3172f000 dump_storahc
  427. fffff800`31750000 fffff800`3176e000 dump_dumpfve
  428. fffff800`39fa0000 fffff800`39fbe000 dam.sys
  429. fffff800`2ffd0000 fffff800`2ffe1000 WdBoot.sys
  430. fffff800`30ff0000 fffff800`31001000 hwpolicy.sys
  431.  
  432. ====================== Dump #1: BIOS INFORMATION =======================
  433.  
  434. sysinfo: could not find necessary interfaces.
  435. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  436.  
  437. ========================== Dump #1: Extra #1 ===========================
  438.  
  439. 2: kd> !verifier
  440. Verify Flags Level 0x00000000
  441. STANDARD FLAGS:
  442. [X] (0x00000000) Automatic Checks
  443. [ ] (0x00000001) Special pool
  444. [ ] (0x00000002) Force IRQL checking
  445. [ ] (0x00000008) Pool tracking
  446. [ ] (0x00000010) I/O verification
  447. [ ] (0x00000020) Deadlock detection
  448. [ ] (0x00000080) DMA checking
  449. [ ] (0x00000100) Security checks
  450. [ ] (0x00000800) Miscellaneous checks
  451. [ ] (0x00020000) DDI compliance checking
  452. ADDITIONAL FLAGS:
  453. [ ] (0x00000004) Randomized low resources simulation
  454. [ ] (0x00000200) Force pending I/O requests
  455. [ ] (0x00000400) IRP logging
  456. [ ] (0x00002000) Invariant MDL checking for stack
  457. [ ] (0x00004000) Invariant MDL checking for driver
  458. [ ] (0x00008000) Power framework delay fuzzing
  459. [ ] (0x00010000) Port/miniport interface checking
  460. [ ] (0x00040000) Systematic low resources simulation
  461. [ ] (0x00080000) DDI compliance checking (additional)
  462. [ ] (0x00200000) NDIS/WIFI verification
  463. [ ] (0x00800000) Kernel synchronization delay fuzzing
  464. [ ] (0x01000000) VM switch verification
  465. [ ] (0x02000000) Code integrity checks
  466. [X] Indicates flag is enabled
  467. Summary of All Verifier Statistics
  468. RaiseIrqls 0x0
  469. AcquireSpinLocks 0x0
  470. Synch Executions 0x0
  471. Trims 0x0
  472. Pool Allocations Attempted 0x0
  473. Pool Allocations Succeeded 0x0
  474. Pool Allocations Succeeded SpecialPool 0x0
  475. Pool Allocations With NO TAG 0x0
  476. Pool Allocations Failed 0x0
  477. Current paged pool allocations 0x0 for 00000000 bytes
  478. Peak paged pool allocations 0x0 for 00000000 bytes
  479. Current nonpaged pool allocations 0x0 for 00000000 bytes
  480. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  481.  
  482. ========================== Dump #1: Extra #2 ===========================
  483.  
  484. 2: kd> !thread
  485. THREAD ffffe7807adaa440 Cid 0000.0000 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 2
  486. Not impersonating
  487. GetUlongFromAddress: unable to read from fffff8002e02aa04
  488. Owning Process fffff8002e18c9c0 Image: System Process
  489. Attached Process ffffbf045d4b0080 Image: System
  490. fffff78000000000: Unable to get shared data
  491. Wait Start TickCount 21143
  492. Context Switch Count 196047 IdealProcessor: 2
  493. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  494. UserTime 00:00:00.000
  495. KernelTime 00:00:00.000
  496. Win32 Start Address nt!KiIdleLoop (0xfffff8002ddc75d0)
  497. Stack Init ffff838dc1237c90 Current ffff838dc1237c20
  498. Base ffff838dc1238000 Limit ffff838dc1232000 Call 0000000000000000
  499. Priority 0 BasePriority 0 PriorityDecrement 0 IoPriority 0 PagePriority 0
  500. Child-SP RetAddr : Args to Child : Call Site
  501. ffff838d`c12373d8 fffff800`2ddd5929 : 00000000`0000000a fffff800`00400a02 00000000`000000ff 00000000`00000000 : nt!KeBugCheckEx
  502. ffff838d`c12373e0 fffff800`2ddd1c69 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  503. ffff838d`c1237520 fffff800`00400a02 : fffff800`3c789841 ffffbf04`5fd90770 00000000`00000004 ffff838d`c123762c : nt!KiPageFault+0x469 (TrapFrame @ ffff838d`c1237520)
  504. ffff838d`c12376b8 fffff800`3c789841 : ffffbf04`5fd90770 00000000`00000004 ffff838d`c123762c 00000000`00000004 : 0xfffff800`00400a02
  505. ffff838d`c12376c0 fffff800`2dc33e6f : 00000000`00000000 ffffe780`7ad9eec8 ffffe780`7ad99180 ffffe780`00000001 : amdppm!PerfReadWrappingCounter+0x31
  506. ffff838d`c1237710 fffff800`2dc31fd2 : 00000000`00000000 00000000`c51add6c 00000000`c51add6c 00000000`00000012 : nt!PpmUpdatePerformanceFeedback+0x14f
  507. ffff838d`c12377c0 fffff800`2dc3138e : 00000000`00000003 00000000`00000002 00000000`00000001 00000000`00000000 : nt!PpmIdleExecuteTransition+0xaa2
  508. ffff838d`c1237b00 fffff800`2ddc7614 : ffffffff`00000000 ffffe780`7ad99180 ffffbf04`6530e080 00000000`00000264 : nt!PoIdle+0x36e
  509. ffff838d`c1237c60 00000000`00000000 : ffff838d`c1238000 ffff838d`c1232000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x44
  510.  
  511.  
  512. ========================================================================
  513. ======================= Dump #2: ANALYZE VERBOSE =======================
  514. ====================== File: 121520-11843-01.dmp =======================
  515. ========================================================================
  516.  
  517. Mini Kernel Dump File: Only registers and stack trace are available
  518. Windows 10 Kernel Version 18362 MP (16 procs) Free x64
  519. Kernel base = 0xfffff807`73800000 PsLoadedModuleList = 0xfffff807`73c461b0
  520. Debug session time: Tue Dec 15 00:32:48.052 2020 (UTC - 5:00)
  521. System Uptime: 0 days 20:43:42.706
  522.  
  523. BugCheck 139, {2, ffffbd0e717f4720, ffffbd0e717f4678, 0}
  524. *** WARNING: Unable to verify timestamp for win32kfull.sys
  525. *** ERROR: Module load completed but symbols could not be loaded for win32kfull.sys
  526. Probably caused by : memory_corruption
  527. Followup: memory_corruption
  528.  
  529. KERNEL_SECURITY_CHECK_FAILURE (139)
  530. A kernel component has corrupted a critical data structure. The corruption
  531. could potentially allow a malicious user to gain control of this machine.
  532.  
  533. Arguments:
  534. Arg1: 0000000000000002, Stack cookie instrumentation code detected a stack-based
  535. buffer overrun.
  536. Arg2: ffffbd0e717f4720, Address of the trap frame for the exception that caused the bugcheck
  537. Arg3: ffffbd0e717f4678, Address of the exception record for the exception that caused the bugcheck
  538. Arg4: 0000000000000000, Reserved
  539.  
  540. Debugging Details:
  541. DUMP_CLASS: 1
  542. DUMP_QUALIFIER: 400
  543. DUMP_TYPE: 2
  544. TRAP_FRAME: ffffbd0e717f4720 -- (.trap 0xffffbd0e717f4720)
  545. NOTE: The trap frame does not contain all registers.
  546. Some register values may be zeroed or incorrect.
  547. rax=00000000000113a4 rbx=0000000000000000 rcx=0000000000000002
  548. rdx=ffff8f0c4139e330 rsi=0000000000000000 rdi=0000000000000000
  549. rip=ffff8f6150142ab5 rsp=ffffbd0e717f48b8 rbp=ffff8f614fcbcc9a
  550. r8=ffffbd0e717f4440 r9=0000000000000001 r10=fffff80773909aa0
  551. r11=ffffbd0e717f4570 r12=0000000000000000 r13=0000000000000000
  552. r14=0000000000000000 r15=0000000000000000
  553. iopl=0 nv up ei ng nz ac pe nc
  554. win32kfull+0x162ab5:
  555. ffff8f61`50142ab5 cd29 int 29h
  556. Resetting default scope
  557. EXCEPTION_RECORD: ffffbd0e717f4678 -- (.exr 0xffffbd0e717f4678)
  558. ExceptionAddress: ffff8f6150142ab5 (win32kfull+0x0000000000162ab5)
  559. ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  560. ExceptionFlags: 00000001
  561. NumberParameters: 1
  562. Parameter[0]: 0000000000000002
  563. Subcode: 0x2 FAST_FAIL_STACK_COOKIE_CHECK_FAILURE
  564. CUSTOMER_CRASH_COUNT: 1
  565. BUGCHECK_STR: 0x139
  566.  
  567. PROCESS_NAME: explorer.exe
  568.  
  569. CURRENT_IRQL: 0
  570. ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  571. EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  572. EXCEPTION_CODE_STR: c0000409
  573. EXCEPTION_PARAMETER1: 0000000000000002
  574. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  575. WATSON_BKT_EVENT: BEX
  576. LAST_CONTROL_TRANSFER: from fffff807739d5929 to fffff807739c3b20
  577. FAULTING_THREAD: 0000000000000000
  578. STACK_TEXT:
  579. ffffbd0e`717f43f8 fffff807`739d5929 : 00000000`00000139 00000000`00000002 ffffbd0e`717f4720 ffffbd0e`717f4678 : nt!KeBugCheckEx
  580. ffffbd0e`717f4400 fffff807`739d5d50 : ffff8f0c`44739010 ffffbd0e`717f4570 ffff8f0c`44739010 ffff8f61`4fc26e52 : nt!KiBugCheckDispatch+0x69
  581. ffffbd0e`717f4540 fffff807`739d40e3 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`01eb0422 : nt!KiFastFailDispatch+0xd0
  582. ffffbd0e`717f4720 ffff8f61`50142ab5 : ffff8f61`500a8812 ffff8f0c`00000000 000001eb`00000422 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
  583. ffffbd0e`717f48b8 ffff8f61`500a8812 : ffff8f0c`00000000 000001eb`00000422 00000000`00000000 00000000`01eb0422 : win32kfull+0x162ab5
  584. ffffbd0e`717f48c0 ffff8f0c`00000000 : 000001eb`00000422 00000000`00000000 00000000`01eb0422 00000000`00000000 : win32kfull+0xc8812
  585. ffffbd0e`717f48c8 000001eb`00000422 : 00000000`00000000 00000000`01eb0422 00000000`00000000 fffff807`00000000 : 0xffff8f0c`00000000
  586. ffffbd0e`717f48d0 00000000`00000000 : 00000000`01eb0422 00000000`00000000 fffff807`00000000 00000000`00000001 : 0x000001eb`00000422
  587. CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32k
  588. ffff8f614fa422ca-ffff8f614fa422cc 3 bytes - win32k!NtUserPeekMessage
  589. [ 48 ff 25:4c 8b 15 ]
  590. ffff8f614fa422d1-ffff8f614fa422d5 5 bytes - win32k!NtUserPeekMessage+7 (+0x07)
  591. [ cc cc cc cc cc:e9 4a a1 08 00 ]
  592. ffff8f614fa422dc-ffff8f614fa422de 3 bytes - win32k!NtUserCallOneParam (+0x0b)
  593. [ 48 ff 25:4c 8b 15 ]
  594. ffff8f614fa422e3-ffff8f614fa422e7 5 bytes - win32k!NtUserCallOneParam+7 (+0x07)
  595. [ cc cc cc cc cc:e9 38 a1 08 00 ]
  596. ffff8f614fa422ee-ffff8f614fa422f0 3 bytes - win32k!NtUserGetKeyState (+0x0b)
  597. [ 48 ff 25:4c 8b 15 ]
  598. ffff8f614fa422f5-ffff8f614fa422f9 5 bytes - win32k!NtUserGetKeyState+7 (+0x07)
  599. [ cc cc cc cc cc:e9 26 a1 08 00 ]
  600. ffff8f614fa42300-ffff8f614fa42302 3 bytes - win32k!NtUserInvalidateRect (+0x0b)
  601. [ 48 ff 25:4c 8b 15 ]
  602. ffff8f614fa42307-ffff8f614fa4230b 5 bytes - win32k!NtUserInvalidateRect+7 (+0x07)
  603. [ cc cc cc cc cc:e9 14 a1 08 00 ]
  604. ffff8f614fa42312-ffff8f614fa42314 3 bytes - win32k!NtUserCallNoParam (+0x0b)
  605. [ 48 ff 25:4c 8b 15 ]
  606. ffff8f614fa42319-ffff8f614fa4231d 5 bytes - win32k!NtUserCallNoParam+7 (+0x07)
  607. [ cc cc cc cc cc:e9 02 a1 08 00 ]
  608. ffff8f614fa42324-ffff8f614fa42326 3 bytes - win32k!NtUserGetMessage (+0x0b)
  609. [ 48 ff 25:4c 8b 15 ]
  610. ffff8f614fa4232b-ffff8f614fa4232f 5 bytes - win32k!NtUserGetMessage+7 (+0x07)
  611. [ cc cc cc cc cc:e9 f0 a0 08 00 ]
  612. ffff8f614fa42336-ffff8f614fa42338 3 bytes - win32k!NtUserMessageCall (+0x0b)
  613. [ 48 ff 25:4c 8b 15 ]
  614. ffff8f614fa4233d-ffff8f614fa42341 5 bytes - win32k!NtUserMessageCall+7 (+0x07)
  615. [ cc cc cc cc cc:e9 de a0 08 00 ]
  616. ffff8f614fa42348-ffff8f614fa4234a 3 bytes - win32k!NtGdiBitBlt (+0x0b)
  617. [ 48 ff 25:4c 8b 15 ]
  618. ffff8f614fa4234f - win32k!NtGdiBitBlt+7 (+0x07)
  619. [ cc:e9 ]
  620. ffff8f614fa42351-ffff8f614fa42353 3 bytes - win32k!NtGdiBitBlt+9 (+0x02)
  621. [ cc cc cc:a0 08 00 ]
  622. ffff8f614fa4235a-ffff8f614fa4235c 3 bytes - win32k!NtGdiGetCharSet (+0x09)
  623. [ 48 ff 25:4c 8b 15 ]
  624. ffff8f614fa42361-ffff8f614fa42365 5 bytes - win32k!NtGdiGetCharSet+7 (+0x07)
  625. [ cc cc cc cc cc:e9 ba a0 08 00 ]
  626. ffff8f614fa4236c-ffff8f614fa4236e 3 bytes - win32k!NtUserGetDC (+0x0b)
  627. [ 48 ff 25:4c 8b 15 ]
  628. ffff8f614fa42373-ffff8f614fa42377 5 bytes - win32k!NtUserGetDC+7 (+0x07)
  629. [ cc cc cc cc cc:e9 a8 a0 08 00 ]
  630. ffff8f614fa4237e-ffff8f614fa42380 3 bytes - win32k!NtGdiSelectBitmap (+0x0b)
  631. [ 48 ff 25:4c 8b 15 ]
  632. ffff8f614fa42385-ffff8f614fa42389 5 bytes - win32k!NtGdiSelectBitmap+7 (+0x07)
  633. [ cc cc cc cc cc:e9 96 a0 08 00 ]
  634. ffff8f614fa42390-ffff8f614fa42392 3 bytes - win32k!NtUserWaitMessage (+0x0b)
  635. [ 48 ff 25:4c 8b 15 ]
  636. ffff8f614fa42397-ffff8f614fa4239b 5 bytes - win32k!NtUserWaitMessage+7 (+0x07)
  637. [ cc cc cc cc cc:e9 84 a0 08 00 ]
  638. ffff8f614fa423a2-ffff8f614fa423a4 3 bytes - win32k!NtUserTranslateMessage (+0x0b)
  639. [ 48 ff 25:4c 8b 15 ]
  640. ffff8f614fa423a9-ffff8f614fa423ad 5 bytes - win32k!NtUserTranslateMessage+7 (+0x07)
  641. [ cc cc cc cc cc:e9 72 a0 08 00 ]
  642. ffff8f614fa423b4-ffff8f614fa423b6 3 bytes - win32k!NtUserGetProp (+0x0b)
  643. [ 48 ff 25:4c 8b 15 ]
  644. ffff8f614fa423bb-ffff8f614fa423bf 5 bytes - win32k!NtUserGetProp+7 (+0x07)
  645. [ cc cc cc cc cc:e9 60 a0 08 00 ]
  646. ffff8f614fa423c6-ffff8f614fa423c8 3 bytes - win32k!NtUserPostMessage (+0x0b)
  647. [ 48 ff 25:4c 8b 15 ]
  648. ffff8f614fa423cd-ffff8f614fa423d1 5 bytes - win32k!NtUserPostMessage+7 (+0x07)
  649. [ cc cc cc cc cc:e9 4e a0 08 00 ]
  650. ffff8f614fa423d8-ffff8f614fa423da 3 bytes - win32k!NtUserQueryWindow (+0x0b)
  651. [ 48 ff 25:4c 8b 15 ]
  652. ffff8f614fa423df-ffff8f614fa423e3 5 bytes - win32k!NtUserQueryWindow+7 (+0x07)
  653. [ cc cc cc cc cc:e9 3c a0 08 00 ]
  654. ffff8f614fa423ea-ffff8f614fa423ec 3 bytes - win32k!NtUserTranslateAccelerator (+0x0b)
  655. [ 48 ff 25:4c 8b 15 ]
  656. ffff8f614fa423f1-ffff8f614fa423f5 5 bytes - win32k!NtUserTranslateAccelerator+7 (+0x07)
  657. [ cc cc cc cc cc:e9 2a a0 08 00 ]
  658. ffff8f614fa423fc-ffff8f614fa423fe 3 bytes - win32k!NtGdiFlush (+0x0b)
  659. [ 48 ff 25:4c 8b 15 ]
  660. ffff8f614fa42403-ffff8f614fa42407 5 bytes - win32k!NtGdiFlush+7 (+0x07)
  661. [ cc cc cc cc cc:e9 18 a0 08 00 ]
  662. ffff8f614fa4240e-ffff8f614fa42410 3 bytes - win32k!NtUserRedrawWindow (+0x0b)
  663. [ 48 ff 25:4c 8b 15 ]
  664. ffff8f614fa42415-ffff8f614fa42419 5 bytes - win32k!NtUserRedrawWindow+7 (+0x07)
  665. [ cc cc cc cc cc:e9 06 a0 08 00 ]
  666. ffff8f614fa42420-ffff8f614fa42422 3 bytes - win32k!NtUserWindowFromPoint (+0x0b)
  667. [ 48 ff 25:4c 8b 15 ]
  668. ffff8f614fa42427-ffff8f614fa4242b 5 bytes - win32k!NtUserWindowFromPoint+7 (+0x07)
  669. [ cc cc cc cc cc:e9 f4 9f 08 00 ]
  670. ffff8f614fa42432-ffff8f614fa42434 3 bytes - win32k!NtUserCallMsgFilter (+0x0b)
  671. [ 48 ff 25:4c 8b 15 ]
  672. ffff8f614fa42439-ffff8f614fa4243d 5 bytes - win32k!NtUserCallMsgFilter+7 (+0x07)
  673. [ cc cc cc cc cc:e9 e2 9f 08 00 ]
  674. ffff8f614fa42444-ffff8f614fa42446 3 bytes - win32k!NtUserValidateTimerCallback (+0x0b)
  675. [ 48 ff 25:4c 8b 15 ]
  676. ffff8f614fa4244b-ffff8f614fa4244f 5 bytes - win32k!NtUserValidateTimerCallback+7 (+0x07)
  677. [ cc cc cc cc cc:e9 d0 9f 08 00 ]
  678. ffff8f614fa42456-ffff8f614fa42458 3 bytes - win32k!NtUserBeginPaint (+0x0b)
  679. [ 48 ff 25:4c 8b 15 ]
  680. ffff8f614fa4245d-ffff8f614fa42461 5 bytes - win32k!NtUserBeginPaint+7 (+0x07)
  681. [ cc cc cc cc cc:e9 be 9f 08 00 ]
  682. ffff8f614fa42468-ffff8f614fa4246a 3 bytes - win32k!NtUserSetTimer (+0x0b)
  683. [ 48 ff 25:4c 8b 15 ]
  684. ffff8f614fa4246f-ffff8f614fa42473 5 bytes - win32k!NtUserSetTimer+7 (+0x07)
  685. [ cc cc cc cc cc:e9 ac 9f 08 00 ]
  686. ffff8f614fa4247a-ffff8f614fa4247c 3 bytes - win32k!NtUserEndPaint (+0x0b)
  687. [ 48 ff 25:4c 8b 15 ]
  688. WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
  689. 923 errors : !win32k (ffff8f614fa422ca-ffff8f614fa47338)
  690. MODULE_NAME: memory_corruption
  691.  
  692. IMAGE_NAME: memory_corruption
  693.  
  694. FOLLOWUP_NAME: memory_corruption
  695. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  696. MEMORY_CORRUPTOR: LARGE
  697. STACK_COMMAND: ~0s ; kb
  698. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  699. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  700. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  701. TARGET_TIME: 2020-12-15T05:32:48.000Z
  702. SUITE_MASK: 272
  703. PRODUCT_TYPE: 1
  704. USER_LCID: 0
  705. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  706. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  707. Followup: memory_corruption
  708.  
  709. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  710.  
  711. Jun 11 2018 - e1i65x64.sys - Intel(R) Gigabit Adapter driver
  712. Dec 09 2018 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  713. Feb 07 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  714. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  715. May 14 2019 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  716. Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  717. Sep 11 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  718. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  719. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  720. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  721. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  722.  
  723. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  724.  
  725. Mapped memory image file: C:\ProgramData\dbg\sym\e1i65x64.sys\5B1EB8E28e000\e1i65x64.sys
  726. Image path: \SystemRoot\System32\drivers\e1i65x64.sys
  727. Image name: e1i65x64.sys
  728. Search : https://www.google.com/search?q=e1i65x64.sys
  729. ADA Info : Intel(R) Gigabit Adapter driver
  730. Timestamp : Mon Jun 11 2018
  731. File version: 12.17.10.8
  732. Product version: 10.0.10011.16384
  733. File flags: 8 (Mask 3F) Private
  734. File OS: 40004 NT Win32
  735. File type: 3.6 Driver
  736. File date: 00000000.00000000
  737. CompanyName: Intel Corporation
  738. ProductName: Intel(R) Gigabit Adapter
  739. InternalName: e1i65x64.sys
  740. OriginalFilename: e1i65x64.sys
  741. ProductVersion: 12.17.10.8
  742. FileVersion: 12.17.10.8
  743. FileDescription: Intel(R) Gigabit Adapter NDIS 6.x driver
  744. LegalCopyright: Copyright(C) 2013, Intel Corporation. All rights reserved.
  745.  
  746. Image path: \SystemRoot\System32\drivers\UcmCxUcsiNvppc.sys
  747. Image name: UcmCxUcsiNvppc.sys
  748. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  749. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  750. Timestamp : Sun Dec 9 2018
  751.  
  752. Mapped memory image file: C:\ProgramData\dbg\sym\amdgpio2.sys\5C5BFB24c000\amdgpio2.sys
  753. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  754. Image name: amdgpio2.sys
  755. Search : https://www.google.com/search?q=amdgpio2.sys
  756. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  757. Timestamp : Thu Feb 7 2019
  758. File version: 2.2.0.71
  759. Product version: 2.2.0.71
  760. File flags: 8 (Mask 3F) Private
  761. File OS: 40004 NT Win32
  762. File type: 3.7 Driver
  763. File date: 00000000.00000000
  764. CompanyName: Advanced Micro Devices, Inc
  765. ProductName: AMD GPIO Controller Driver
  766. InternalName: amdgpio2.sys
  767. OriginalFilename: amdgpio2.sys
  768. ProductVersion: 2.2.0.71
  769. FileVersion: 2.2.0.71
  770. FileDescription: AMD GPIO Controller Driver
  771. LegalCopyright: Copyright © 2012-2019 Advanced Micro Devices, Inc
  772.  
  773. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  774. Image name: nvvad64v.sys
  775. Search : https://www.google.com/search?q=nvvad64v.sys
  776. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  777. Timestamp : Thu Mar 14 2019
  778.  
  779. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  780. Image name: RTKVHD64.sys
  781. Search : https://www.google.com/search?q=RTKVHD64.sys
  782. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  783. Timestamp : Tue May 14 2019
  784.  
  785. Image path: \SystemRoot\System32\drivers\amdpsp.sys
  786. Image name: amdpsp.sys
  787. Search : https://www.google.com/search?q=amdpsp.sys
  788. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  789. Timestamp : Wed Jun 19 2019
  790.  
  791. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  792. Image name: AMDPCIDev.sys
  793. Search : https://www.google.com/search?q=AMDPCIDev.sys
  794. ADA Info : Advanced Micro Devices PCI Device driver
  795. Timestamp : Wed Sep 11 2019
  796.  
  797. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys
  798. Image name: nvlddmkm.sys
  799. Search : https://www.google.com/search?q=nvlddmkm.sys
  800. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  801. Timestamp : Wed Oct 2 2019
  802.  
  803. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  804. Image name: NvModuleTracker.sys
  805. Search : https://www.google.com/search?q=NvModuleTracker.sys
  806. ADA Info : NVIDIA Module Tracker driver
  807. Timestamp : Fri Nov 29 2019
  808.  
  809. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  810. Image name: nvvhci.sys
  811. Search : https://www.google.com/search?q=nvvhci.sys
  812. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  813. Timestamp : Fri Jan 10 2020
  814.  
  815. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  816. Image name: nvhda64v.sys
  817. Search : https://www.google.com/search?q=nvhda64v.sys
  818. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  819. Timestamp : Fri Oct 16 2020
  820.  
  821. ====================== Dump #2: MICROSOFT DRIVERS ======================
  822.  
  823. ACPI.sys ACPI Driver for NT (Microsoft)
  824. acpiex.sys ACPIEx Driver (Microsoft)
  825. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  826. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  827. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  828. ahcache.sys Application Compatibility Cache (Microsoft)
  829. amdppm.sys Processor Device Driver
  830. bam.sys BAM Kernal driver (Microsoft)
  831. BasicDisplay.sys Basic Display driver (Microsoft)
  832. BasicRender.sys Basic Render driver (Microsoft)
  833. Beep.SYS BEEP driver (Microsoft)
  834. BOOTVID.dll VGA Boot Driver (Microsoft)
  835. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  836. cdd.dll Canonical Display Driver (Microsoft)
  837. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  838. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  839. CI.dll Code Integrity Module (Microsoft)
  840. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  841. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  842. CLFS.SYS Common Log File System Driver (Microsoft)
  843. clipsp.sys CLIP Service (Microsoft)
  844. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  845. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  846. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  847. condrv.sys Console Driver (Microsoft)
  848. crashdmp.sys Crash Dump driver (Microsoft)
  849. csc.sys Windows Client Side Caching driver (Microsoft)
  850. dfsc.sys DFS Namespace Client Driver (Microsoft)
  851. disk.sys PnP Disk Driver (Microsoft)
  852. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  853. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  854. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  855. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  856. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  857. dxgmms2.sys DirectX Graphics MMS
  858. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  859. fastfat.SYS Fast FAT File System Driver (Microsoft)
  860. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  861. fileinfo.sys FileInfo Filter Driver (Microsoft)
  862. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  863. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  864. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  865. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  866. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  867. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  868. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  869. HIDCLASS.SYS Hid Class Library (Microsoft)
  870. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  871. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  872. HTTP.sys HTTP Protocol Stack (Microsoft)
  873. intelpep.sys Intel Power Engine Plugin (Microsoft)
  874. iorate.sys I/O rate control Filter (Microsoft)
  875. kbdclass.sys Keyboard Class Driver (Microsoft)
  876. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  877. kd.dll Local Kernal Debugger (Microsoft)
  878. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  879. ks.sys Kernal CSA Library (Microsoft)
  880. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  881. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  882. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  883. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  884. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  885. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  886. mmcss.sys MMCSS Driver (Microsoft)
  887. monitor.sys Monitor Driver (Microsoft)
  888. mouclass.sys Mouse Class Driver (Microsoft)
  889. mouhid.sys HID Mouse Filter Driver (Microsoft)
  890. mountmgr.sys Mount Point Manager (Microsoft)
  891. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  892. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  893. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  894. Msfs.SYS Mailslot driver (Microsoft)
  895. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  896. msisadrv.sys ISA Driver (Microsoft)
  897. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  898. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  899. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  900. mssmbios.sys System Management BIOS driver (Microsoft)
  901. mup.sys Multiple UNC Provider driver (Microsoft)
  902. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  903. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  904. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  905. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  906. NDProxy.sys NDIS Proxy driver (Microsoft)
  907. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  908. netbios.sys NetBIOS Interface driver (Microsoft)
  909. netbt.sys MBT Transport driver (Microsoft)
  910. NETIO.SYS Network I/O Subsystem (Microsoft)
  911. Npfs.SYS NPFS driver (Microsoft)
  912. npsvctrig.sys Named pipe service triggers (Microsoft)
  913. nsiproxy.sys NSI Proxy driver (Microsoft)
  914. Ntfs.sys NT File System Driver (Microsoft)
  915. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  916. ntosext.sys NTOS Extension Host driver (Microsoft)
  917. Null.SYS NULL Driver (Microsoft)
  918. pacer.sys QoS Packet Scheduler (Microsoft)
  919. partmgr.sys Partition driver (Microsoft)
  920. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  921. pcw.sys Performance Counter Driver (Microsoft)
  922. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  923. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  924. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  925. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  926. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  927. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  928. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  929. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  930. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  931. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  932. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  933. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  934. rdyboost.sys ReadyBoost Driver (Microsoft)
  935. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  936. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  937. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  938. spaceport.sys Storage Spaces driver (Microsoft)
  939. srv2.sys Smb 2.0 Server driver (Microsoft)
  940. srvnet.sys Server Network driver (Microsoft)
  941. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  942. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  943. storqosflt.sys Storage QoS Filter driver (Microsoft)
  944. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  945. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  946. tcpip.sys TCP/IP Protocol driver (Microsoft)
  947. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  948. TDI.SYS TDI Wrapper driver (Microsoft)
  949. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  950. tm.sys Kernel Transaction Manager driver (Microsoft)
  951. UcmCx.sys USB Connector Manager KMDF Class Extension
  952. ucx01000.sys USB Controller Extension (Microsoft)
  953. UEFI.sys UEFI NT driver (Microsoft)
  954. umbus.sys User-Mode Bus Enumerator (Microsoft)
  955. usbaudio.sys USB Audio Class Driver (Microsoft)
  956. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  957. USBD.SYS Universal Serial Bus Driver (Microsoft)
  958. UsbHub3.sys USB3 HUB driver (Microsoft)
  959. USBXHCI.SYS USB XHCI driver (Microsoft)
  960. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  961. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  962. volmgr.sys Volume Manager Driver (Microsoft)
  963. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  964. volsnap.sys Volume Shadow Copy driver (Microsoft)
  965. volume.sys Volume driver (Microsoft)
  966. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  967. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  968. watchdog.sys Watchdog driver (Microsoft)
  969. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  970. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  971. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  972. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  973. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  974. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  975. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  976. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  977. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  978. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  979. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  980. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  981. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  982. winquic.sys QUIC Transport Protocol driver (Microsoft)
  983. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  984. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  985. Wof.sys Windows Overlay Filter (Microsoft)
  986. WppRecorder.sys WPP Trace Recorder (Microsoft)
  987.  
  988. ====================== Dump #2: UNLOADED MODULES =======================
  989.  
  990. fffff807`700a0000 fffff807`703c3000 BEDaisy.sys
  991. fffff807`703e0000 fffff807`703ef000 hiber_storpo
  992. fffff807`703f0000 fffff807`7041f000 hiber_storah
  993. fffff807`70420000 fffff807`7043e000 hiber_dumpfv
  994. fffff807`700a0000 fffff807`703c3000 BEDaisy.sys
  995. fffff807`703e0000 fffff807`703ef000 hiber_storpo
  996. fffff807`703f0000 fffff807`7041f000 hiber_storah
  997. fffff807`70420000 fffff807`7043e000 hiber_dumpfv
  998. fffff807`700a0000 fffff807`703c3000 BEDaisy.sys
  999. fffff807`703e0000 fffff807`703ef000 hiber_storpo
  1000. fffff807`703f0000 fffff807`7041f000 hiber_storah
  1001. fffff807`70420000 fffff807`7043e000 hiber_dumpfv
  1002. fffff807`700a0000 fffff807`703c3000 BEDaisy.sys
  1003. fffff807`80770000 fffff807`8077f000 dump_storpor
  1004. fffff807`807b0000 fffff807`807df000 dump_storahc
  1005. fffff807`7f800000 fffff807`7f81e000 dump_dumpfve
  1006. fffff807`80070000 fffff807`8008e000 dam.sys
  1007. fffff807`75fd0000 fffff807`75fe1000 WdBoot.sys
  1008. fffff807`76ff0000 fffff807`77001000 hwpolicy.sys
  1009.  
  1010. ====================== Dump #2: BIOS INFORMATION =======================
  1011.  
  1012. sysinfo: could not find necessary interfaces.
  1013. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  1014.  
  1015. ========================== Dump #2: Extra #1 ===========================
  1016.  
  1017. 3: kd> !verifier
  1018. Verify Flags Level 0x00000000
  1019. STANDARD FLAGS:
  1020. [X] (0x00000000) Automatic Checks
  1021. [ ] (0x00000001) Special pool
  1022. [ ] (0x00000002) Force IRQL checking
  1023. [ ] (0x00000008) Pool tracking
  1024. [ ] (0x00000010) I/O verification
  1025. [ ] (0x00000020) Deadlock detection
  1026. [ ] (0x00000080) DMA checking
  1027. [ ] (0x00000100) Security checks
  1028. [ ] (0x00000800) Miscellaneous checks
  1029. [ ] (0x00020000) DDI compliance checking
  1030. ADDITIONAL FLAGS:
  1031. [ ] (0x00000004) Randomized low resources simulation
  1032. [ ] (0x00000200) Force pending I/O requests
  1033. [ ] (0x00000400) IRP logging
  1034. [ ] (0x00002000) Invariant MDL checking for stack
  1035. [ ] (0x00004000) Invariant MDL checking for driver
  1036. [ ] (0x00008000) Power framework delay fuzzing
  1037. [ ] (0x00010000) Port/miniport interface checking
  1038. [ ] (0x00040000) Systematic low resources simulation
  1039. [ ] (0x00080000) DDI compliance checking (additional)
  1040. [ ] (0x00200000) NDIS/WIFI verification
  1041. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1042. [ ] (0x01000000) VM switch verification
  1043. [ ] (0x02000000) Code integrity checks
  1044. [X] Indicates flag is enabled
  1045. Summary of All Verifier Statistics
  1046. RaiseIrqls 0x0
  1047. AcquireSpinLocks 0x0
  1048. Synch Executions 0x0
  1049. Trims 0x0
  1050. Pool Allocations Attempted 0x0
  1051. Pool Allocations Succeeded 0x0
  1052. Pool Allocations Succeeded SpecialPool 0x0
  1053. Pool Allocations With NO TAG 0x0
  1054. Pool Allocations Failed 0x0
  1055. Current paged pool allocations 0x0 for 00000000 bytes
  1056. Peak paged pool allocations 0x0 for 00000000 bytes
  1057. Current nonpaged pool allocations 0x0 for 00000000 bytes
  1058. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  1059.  
  1060. ========================== Dump #2: Extra #2 ===========================
  1061.  
  1062. 3: kd> !thread
  1063. THREAD ffffd20e92d0f080 Cid 1b68.1770 Teb: 000000000116c000 Win32Thread: ffffd20e8f29cfc0 RUNNING on processor 3
  1064. Not impersonating
  1065. GetUlongFromAddress: unable to read from fffff80773c2aa04
  1066. Owning Process ffffd20e903e60c0 Image: explorer.exe
  1067. Attached Process N/A Image: N/A
  1068. fffff78000000000: Unable to get shared data
  1069. Wait Start TickCount 4775852
  1070. Context Switch Count 4918 IdealProcessor: 3
  1071. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1072. UserTime 00:00:00.000
  1073. KernelTime 00:00:00.000
  1074. Win32 Start Address 0x00007ff99034c140
  1075. Stack Init ffffbd0e717f5fd0 Current ffffbd0e717f4b20
  1076. Base ffffbd0e717f6000 Limit ffffbd0e717f0000 Call 0000000000000000
  1077. Priority 12 BasePriority 8 PriorityDecrement 2 IoPriority 2 PagePriority 5
  1078. Child-SP RetAddr : Args to Child : Call Site
  1079. ffffbd0e`717f43f8 fffff807`739d5929 : 00000000`00000139 00000000`00000002 ffffbd0e`717f4720 ffffbd0e`717f4678 : nt!KeBugCheckEx
  1080. ffffbd0e`717f4400 fffff807`739d5d50 : ffff8f0c`44739010 ffffbd0e`717f4570 ffff8f0c`44739010 ffff8f61`4fc26e52 : nt!KiBugCheckDispatch+0x69
  1081. ffffbd0e`717f4540 fffff807`739d40e3 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`01eb0422 : nt!KiFastFailDispatch+0xd0
  1082. ffffbd0e`717f4720 ffff8f61`50142ab5 : ffff8f61`500a8812 ffff8f0c`00000000 000001eb`00000422 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323 (TrapFrame @ ffffbd0e`717f4720)
  1083. ffffbd0e`717f48b8 ffff8f61`500a8812 : ffff8f0c`00000000 000001eb`00000422 00000000`00000000 00000000`01eb0422 : win32kfull+0x162ab5
  1084. ffffbd0e`717f48c0 ffff8f0c`00000000 : 000001eb`00000422 00000000`00000000 00000000`01eb0422 00000000`00000000 : win32kfull+0xc8812
  1085. ffffbd0e`717f48c8 000001eb`00000422 : 00000000`00000000 00000000`01eb0422 00000000`00000000 fffff807`00000000 : 0xffff8f0c`00000000
  1086. ffffbd0e`717f48d0 00000000`00000000 : 00000000`01eb0422 00000000`00000000 fffff807`00000000 00000000`00000001 : 0x000001eb`00000422
  1087.  
  1088.  
  1089. ========================================================================
  1090. ======================= Dump #3: ANALYZE VERBOSE =======================
  1091. ======================= File: 121420-9765-01.dmp =======================
  1092. ========================================================================
  1093.  
  1094. Mini Kernel Dump File: Only registers and stack trace are available
  1095. Windows 10 Kernel Version 18362 MP (16 procs) Free x64
  1096. Kernel base = 0xfffff804`5a800000 PsLoadedModuleList = 0xfffff804`5ac461b0
  1097. Debug session time: Mon Dec 14 03:47:45.622 2020 (UTC - 5:00)
  1098. System Uptime: 0 days 2:29:48.276
  1099.  
  1100. BugCheck A, {118, 2, 1, fffff8045a9cae18}
  1101. *** WARNING: Unable to verify timestamp for win32k.sys
  1102. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  1103. Probably caused by : memory_corruption
  1104. Followup: memory_corruption
  1105.  
  1106. IRQL_NOT_LESS_OR_EQUAL (a)
  1107. An attempt was made to access a pageable (or completely invalid) address at an
  1108. interrupt request level (IRQL) that is too high. This is usually
  1109. caused by drivers using improper addresses.
  1110. If a kernel debugger is available get the stack backtrace.
  1111.  
  1112. Arguments:
  1113. Arg1: 0000000000000118, memory referenced
  1114. Arg2: 0000000000000002, IRQL
  1115. Arg3: 0000000000000001, bitfield :
  1116. bit 0 : value 0 = read operation, 1 = write operation
  1117. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  1118. Arg4: fffff8045a9cae18, address which referenced memory
  1119.  
  1120. Debugging Details:
  1121. DUMP_CLASS: 1
  1122. DUMP_QUALIFIER: 400
  1123. DUMP_TYPE: 2
  1124. WRITE_ADDRESS: fffff8045ad713b8: Unable to get MiVisibleState
  1125. 0000000000000118
  1126. CURRENT_IRQL: 2
  1127. FAULTING_IP:
  1128. nt!SwapContext+2d8
  1129. fffff804`5a9cae18 f0480fb38cc218010000 lock btr qword ptr [rdx+rax*8+118h],rcx
  1130. CUSTOMER_CRASH_COUNT: 1
  1131. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1132. BUGCHECK_STR: AV
  1133.  
  1134. PROCESS_NAME: Discord.exe
  1135.  
  1136. TRAP_FRAME: fffff40bdb46ddb0 -- (.trap 0xfffff40bdb46ddb0)
  1137. NOTE: The trap frame does not contain all registers.
  1138. Some register values may be zeroed or incorrect.
  1139. rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000002
  1140. rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
  1141. rip=fffff8045a9cae18 rsp=fffff40bdb46df40 rbp=00000067b4bbbdff
  1142. r8=ffff890157558180 r9=0000000000000000 r10=ffff990192a020c0
  1143. r11=000000010000004b r12=0000000000000000 r13=0000000000000000
  1144. r14=0000000000000000 r15=0000000000000000
  1145. iopl=0 nv up ei pl zr na po nc
  1146. nt!SwapContext+0x2d8:
  1147. fffff804`5a9cae18 f0480fb38cc218010000 lock btr qword ptr [rdx+rax*8+118h],rcx ds:00000000`00000118=????????????????
  1148. Resetting default scope
  1149. LAST_CONTROL_TRANSFER: from fffff8045a9d5929 to fffff8045a9c3b20
  1150. STACK_TEXT:
  1151. fffff40b`db46dc68 fffff804`5a9d5929 : 00000000`0000000a 00000000`00000118 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
  1152. fffff40b`db46dc70 fffff804`5a9d1c69 : ffff8901`57558180 fffff40b`db46de30 ffff9901`830c2000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  1153. fffff40b`db46ddb0 fffff804`5a9cae18 : 00000067`b4bbbdff 00000000`00000001 ffff8901`00000000 00001f80`00ce00ac : nt!KiPageFault+0x469
  1154. fffff40b`db46df40 fffff804`5a9ca866 : fffff804`5a800000 ffff9901`92a020c0 fffff40b`db46e0b8 00000000`0000ffff : nt!SwapContext+0x2d8
  1155. fffff40b`db46df80 fffff804`5a8419fd : ffff8901`57500180 00000000`fffffffe ffff8901`ffffffff 00000000`00000001 : nt!KiSwapContext+0x76
  1156. fffff40b`db46e0c0 fffff804`5a840884 : ffff9901`8fdda080 00001f80`00000000 00000000`00000000 ffff9901`00000000 : nt!KiSwapThread+0xbfd
  1157. fffff40b`db46e160 fffff804`5a87c7b7 : 00000000`0000006e 00000000`00000000 43300000`00000001 00000000`00000000 : nt!KiCommitThreadWait+0x144
  1158. fffff40b`db46e200 fffff804`5ae0b1e9 : fffff40b`db46e5c0 00000000`00000001 ffff9901`8f1a38b0 fffff804`5a8cff31 : nt!KeWaitForMultipleObjects+0x287
  1159. fffff40b`db46e310 fffff804`5aec839c : 00000000`00000000 ffff8901`57558100 ffff9901`8fdda000 ffff9901`8c0c3080 : nt!ObWaitForMultipleObjects+0x2a9
  1160. fffff40b`db46e810 fffff804`5a9d5891 : ffff9901`8fdda080 fffff40b`db46eb80 00000000`14bfe7c8 ffff8901`57558180 : nt!NtWaitForMultipleObjects32+0xfc
  1161. fffff40b`db46ea90 00000000`77731cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2bc
  1162. 00000000`14bff0a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77731cbc
  1163. STACK_COMMAND: kb
  1164. CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32kbase
  1165. ffffa94ab4096b89-ffffa94ab4096b8e 6 bytes - win32kbase!DirectComposition::CAnimationMarshaler::SetReferenceProperty+49
  1166. [ ff 15 39 dc 19 00:e8 12 d7 20 00 90 ]
  1167. ffffa94ab4096c09-ffffa94ab4096c0a 2 bytes - win32kbase!SfmSignalTokenEvent+19 (+0x80)
  1168. [ 48 ff:4c 8b ]
  1169. ffffa94ab4096c10-ffffa94ab4096c13 4 bytes - win32kbase!SfmSignalTokenEvent+20 (+0x07)
  1170. [ 0f 1f 44 00:e8 0b d8 20 ]
  1171. 12 errors : !win32kbase (ffffa94ab4096b89-ffffa94ab4096c13)
  1172. MODULE_NAME: memory_corruption
  1173.  
  1174. IMAGE_NAME: memory_corruption
  1175.  
  1176. FOLLOWUP_NAME: memory_corruption
  1177. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1178. MEMORY_CORRUPTOR: LARGE
  1179. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1180. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1181. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1182. TARGET_TIME: 2020-12-14T08:47:45.000Z
  1183. SUITE_MASK: 272
  1184. PRODUCT_TYPE: 1
  1185. USER_LCID: 0
  1186. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1187. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1188. Followup: memory_corruption
  1189.  
  1190. ====================== Dump #3: 3RD PARTY DRIVERS ======================
  1191.  
  1192. Jun 11 2018 - e1i65x64.sys - Intel(R) Gigabit Adapter driver
  1193. Dec 09 2018 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  1194. Feb 07 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1195. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1196. May 14 2019 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  1197. Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  1198. Sep 11 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  1199. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1200. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  1201. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1202. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1203.  
  1204. ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
  1205.  
  1206. Mapped memory image file: C:\ProgramData\dbg\sym\e1i65x64.sys\5B1EB8E28e000\e1i65x64.sys
  1207. Image path: \SystemRoot\System32\drivers\e1i65x64.sys
  1208. Image name: e1i65x64.sys
  1209. Search : https://www.google.com/search?q=e1i65x64.sys
  1210. ADA Info : Intel(R) Gigabit Adapter driver
  1211. Timestamp : Mon Jun 11 2018
  1212. File version: 12.17.10.8
  1213. Product version: 10.0.10011.16384
  1214. File flags: 8 (Mask 3F) Private
  1215. File OS: 40004 NT Win32
  1216. File type: 3.6 Driver
  1217. File date: 00000000.00000000
  1218. CompanyName: Intel Corporation
  1219. ProductName: Intel(R) Gigabit Adapter
  1220. InternalName: e1i65x64.sys
  1221. OriginalFilename: e1i65x64.sys
  1222. ProductVersion: 12.17.10.8
  1223. FileVersion: 12.17.10.8
  1224. FileDescription: Intel(R) Gigabit Adapter NDIS 6.x driver
  1225. LegalCopyright: Copyright(C) 2013, Intel Corporation. All rights reserved.
  1226.  
  1227. Image path: \SystemRoot\System32\drivers\UcmCxUcsiNvppc.sys
  1228. Image name: UcmCxUcsiNvppc.sys
  1229. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  1230. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  1231. Timestamp : Sun Dec 9 2018
  1232.  
  1233. Mapped memory image file: C:\ProgramData\dbg\sym\amdgpio2.sys\5C5BFB24c000\amdgpio2.sys
  1234. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  1235. Image name: amdgpio2.sys
  1236. Search : https://www.google.com/search?q=amdgpio2.sys
  1237. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1238. Timestamp : Thu Feb 7 2019
  1239. File version: 2.2.0.71
  1240. Product version: 2.2.0.71
  1241. File flags: 8 (Mask 3F) Private
  1242. File OS: 40004 NT Win32
  1243. File type: 3.7 Driver
  1244. File date: 00000000.00000000
  1245. CompanyName: Advanced Micro Devices, Inc
  1246. ProductName: AMD GPIO Controller Driver
  1247. InternalName: amdgpio2.sys
  1248. OriginalFilename: amdgpio2.sys
  1249. ProductVersion: 2.2.0.71
  1250. FileVersion: 2.2.0.71
  1251. FileDescription: AMD GPIO Controller Driver
  1252. LegalCopyright: Copyright © 2012-2019 Advanced Micro Devices, Inc
  1253.  
  1254. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  1255. Image name: nvvad64v.sys
  1256. Search : https://www.google.com/search?q=nvvad64v.sys
  1257. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1258. Timestamp : Thu Mar 14 2019
  1259.  
  1260. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  1261. Image name: RTKVHD64.sys
  1262. Search : https://www.google.com/search?q=RTKVHD64.sys
  1263. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  1264. Timestamp : Tue May 14 2019
  1265.  
  1266. Image path: \SystemRoot\System32\drivers\amdpsp.sys
  1267. Image name: amdpsp.sys
  1268. Search : https://www.google.com/search?q=amdpsp.sys
  1269. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  1270. Timestamp : Wed Jun 19 2019
  1271.  
  1272. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  1273. Image name: AMDPCIDev.sys
  1274. Search : https://www.google.com/search?q=AMDPCIDev.sys
  1275. ADA Info : Advanced Micro Devices PCI Device driver
  1276. Timestamp : Wed Sep 11 2019
  1277.  
  1278. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys
  1279. Image name: nvlddmkm.sys
  1280. Search : https://www.google.com/search?q=nvlddmkm.sys
  1281. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1282. Timestamp : Wed Oct 2 2019
  1283.  
  1284. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  1285. Image name: NvModuleTracker.sys
  1286. Search : https://www.google.com/search?q=NvModuleTracker.sys
  1287. ADA Info : NVIDIA Module Tracker driver
  1288. Timestamp : Fri Nov 29 2019
  1289.  
  1290. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  1291. Image name: nvvhci.sys
  1292. Search : https://www.google.com/search?q=nvvhci.sys
  1293. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1294. Timestamp : Fri Jan 10 2020
  1295.  
  1296. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1297. Image name: nvhda64v.sys
  1298. Search : https://www.google.com/search?q=nvhda64v.sys
  1299. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1300. Timestamp : Fri Oct 16 2020
  1301.  
  1302. ====================== Dump #3: MICROSOFT DRIVERS ======================
  1303.  
  1304. ACPI.sys ACPI Driver for NT (Microsoft)
  1305. acpiex.sys ACPIEx Driver (Microsoft)
  1306. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1307. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1308. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1309. ahcache.sys Application Compatibility Cache (Microsoft)
  1310. amdppm.sys Processor Device Driver
  1311. bam.sys BAM Kernal driver (Microsoft)
  1312. BasicDisplay.sys Basic Display driver (Microsoft)
  1313. BasicRender.sys Basic Render driver (Microsoft)
  1314. Beep.SYS BEEP driver (Microsoft)
  1315. bindflt.sys Windows Bind Filter driver (Microsoft)
  1316. BOOTVID.dll VGA Boot Driver (Microsoft)
  1317. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1318. cdd.dll Canonical Display Driver (Microsoft)
  1319. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1320. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1321. CI.dll Code Integrity Module (Microsoft)
  1322. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1323. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1324. CLFS.SYS Common Log File System Driver (Microsoft)
  1325. clipsp.sys CLIP Service (Microsoft)
  1326. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1327. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1328. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1329. condrv.sys Console Driver (Microsoft)
  1330. crashdmp.sys Crash Dump driver (Microsoft)
  1331. csc.sys Windows Client Side Caching driver (Microsoft)
  1332. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1333. disk.sys PnP Disk Driver (Microsoft)
  1334. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1335. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1336. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1337. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1338. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1339. dxgmms2.sys DirectX Graphics MMS
  1340. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1341. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1342. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1343. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1344. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1345. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1346. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1347. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1348. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1349. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1350. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1351. HIDCLASS.SYS Hid Class Library (Microsoft)
  1352. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1353. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1354. HTTP.sys HTTP Protocol Stack (Microsoft)
  1355. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1356. iorate.sys I/O rate control Filter (Microsoft)
  1357. kbdclass.sys Keyboard Class Driver (Microsoft)
  1358. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1359. kd.dll Local Kernal Debugger (Microsoft)
  1360. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1361. ks.sys Kernal CSA Library (Microsoft)
  1362. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1363. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1364. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1365. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1366. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1367. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  1368. mmcss.sys MMCSS Driver (Microsoft)
  1369. monitor.sys Monitor Driver (Microsoft)
  1370. mouclass.sys Mouse Class Driver (Microsoft)
  1371. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1372. mountmgr.sys Mount Point Manager (Microsoft)
  1373. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1374. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1375. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1376. Msfs.SYS Mailslot driver (Microsoft)
  1377. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1378. msisadrv.sys ISA Driver (Microsoft)
  1379. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1380. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1381. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1382. mssmbios.sys System Management BIOS driver (Microsoft)
  1383. mup.sys Multiple UNC Provider driver (Microsoft)
  1384. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1385. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1386. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  1387. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1388. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1389. NDProxy.sys NDIS Proxy driver (Microsoft)
  1390. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1391. netbios.sys NetBIOS Interface driver (Microsoft)
  1392. netbt.sys MBT Transport driver (Microsoft)
  1393. NETIO.SYS Network I/O Subsystem (Microsoft)
  1394. Npfs.SYS NPFS driver (Microsoft)
  1395. npsvctrig.sys Named pipe service triggers (Microsoft)
  1396. nsiproxy.sys NSI Proxy driver (Microsoft)
  1397. Ntfs.sys NT File System Driver (Microsoft)
  1398. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1399. ntosext.sys NTOS Extension Host driver (Microsoft)
  1400. Null.SYS NULL Driver (Microsoft)
  1401. pacer.sys QoS Packet Scheduler (Microsoft)
  1402. partmgr.sys Partition driver (Microsoft)
  1403. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1404. pcw.sys Performance Counter Driver (Microsoft)
  1405. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1406. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1407. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1408. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1409. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  1410. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1411. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1412. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1413. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1414. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1415. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1416. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  1417. rdyboost.sys ReadyBoost Driver (Microsoft)
  1418. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1419. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1420. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1421. spaceport.sys Storage Spaces driver (Microsoft)
  1422. srv2.sys Smb 2.0 Server driver (Microsoft)
  1423. srvnet.sys Server Network driver (Microsoft)
  1424. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1425. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1426. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1427. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1428. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1429. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1430. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1431. TDI.SYS TDI Wrapper driver (Microsoft)
  1432. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1433. tm.sys Kernel Transaction Manager driver (Microsoft)
  1434. UcmCx.sys USB Connector Manager KMDF Class Extension
  1435. ucx01000.sys USB Controller Extension (Microsoft)
  1436. UEFI.sys UEFI NT driver (Microsoft)
  1437. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1438. usbaudio.sys USB Audio Class Driver (Microsoft)
  1439. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1440. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1441. UsbHub3.sys USB3 HUB driver (Microsoft)
  1442. USBXHCI.SYS USB XHCI driver (Microsoft)
  1443. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1444. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1445. volmgr.sys Volume Manager Driver (Microsoft)
  1446. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1447. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1448. volume.sys Volume driver (Microsoft)
  1449. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1450. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1451. watchdog.sys Watchdog driver (Microsoft)
  1452. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1453. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1454. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1455. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1456. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1457. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1458. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1459. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1460. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1461. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1462. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1463. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1464. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1465. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1466. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1467. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1468. Wof.sys Windows Overlay Filter (Microsoft)
  1469. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1470.  
  1471. ====================== Dump #3: UNLOADED MODULES =======================
  1472.  
  1473. fffff804`597e0000 fffff804`597ef000 hiber_storpo
  1474. fffff804`597f0000 fffff804`5981f000 hiber_storah
  1475. fffff804`59820000 fffff804`5983e000 hiber_dumpfv
  1476. fffff804`59480000 fffff804`597a3000 BEDaisy.sys
  1477. fffff804`695d0000 fffff804`695df000 dump_storpor
  1478. fffff804`68c30000 fffff804`68c5f000 dump_storahc
  1479. fffff804`68c80000 fffff804`68c9e000 dump_dumpfve
  1480. fffff804`694f0000 fffff804`6950e000 dam.sys
  1481. fffff804`5f3d0000 fffff804`5f3e1000 WdBoot.sys
  1482. fffff804`603f0000 fffff804`60401000 hwpolicy.sys
  1483.  
  1484. ====================== Dump #3: BIOS INFORMATION =======================
  1485.  
  1486. sysinfo: could not find necessary interfaces.
  1487. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  1488.  
  1489. ========================== Dump #3: Extra #1 ===========================
  1490.  
  1491. 2: kd> !verifier
  1492. Verify Flags Level 0x00000000
  1493. STANDARD FLAGS:
  1494. [X] (0x00000000) Automatic Checks
  1495. [ ] (0x00000001) Special pool
  1496. [ ] (0x00000002) Force IRQL checking
  1497. [ ] (0x00000008) Pool tracking
  1498. [ ] (0x00000010) I/O verification
  1499. [ ] (0x00000020) Deadlock detection
  1500. [ ] (0x00000080) DMA checking
  1501. [ ] (0x00000100) Security checks
  1502. [ ] (0x00000800) Miscellaneous checks
  1503. [ ] (0x00020000) DDI compliance checking
  1504. ADDITIONAL FLAGS:
  1505. [ ] (0x00000004) Randomized low resources simulation
  1506. [ ] (0x00000200) Force pending I/O requests
  1507. [ ] (0x00000400) IRP logging
  1508. [ ] (0x00002000) Invariant MDL checking for stack
  1509. [ ] (0x00004000) Invariant MDL checking for driver
  1510. [ ] (0x00008000) Power framework delay fuzzing
  1511. [ ] (0x00010000) Port/miniport interface checking
  1512. [ ] (0x00040000) Systematic low resources simulation
  1513. [ ] (0x00080000) DDI compliance checking (additional)
  1514. [ ] (0x00200000) NDIS/WIFI verification
  1515. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1516. [ ] (0x01000000) VM switch verification
  1517. [ ] (0x02000000) Code integrity checks
  1518. [X] Indicates flag is enabled
  1519. Summary of All Verifier Statistics
  1520. RaiseIrqls 0x0
  1521. AcquireSpinLocks 0x0
  1522. Synch Executions 0x0
  1523. Trims 0x0
  1524. Pool Allocations Attempted 0x0
  1525. Pool Allocations Succeeded 0x0
  1526. Pool Allocations Succeeded SpecialPool 0x0
  1527. Pool Allocations With NO TAG 0x0
  1528. Pool Allocations Failed 0x0
  1529. Current paged pool allocations 0x0 for 00000000 bytes
  1530. Peak paged pool allocations 0x0 for 00000000 bytes
  1531. Current nonpaged pool allocations 0x0 for 00000000 bytes
  1532. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  1533.  
  1534. ========================== Dump #3: Extra #2 ===========================
  1535.  
  1536. 2: kd> !thread
  1537. THREAD ffff99018fdda080 Cid 1aa8.31c4 Teb: 000000000a03c000 Win32Thread: ffff99018dac1de0 RUNNING on processor 2
  1538. Not impersonating
  1539. GetUlongFromAddress: unable to read from fffff8045ac2aa04
  1540. Owning Process ffff990192a020c0 Image: Discord.exe
  1541. Attached Process N/A Image: N/A
  1542. fffff78000000000: Unable to get shared data
  1543. Wait Start TickCount 575249
  1544. Context Switch Count 25219 IdealProcessor: 1
  1545. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1546. UserTime 00:00:00.000
  1547. KernelTime 00:00:00.000
  1548. Win32 Start Address 0x0000000064c81d22
  1549. Stack Init fffff40bdb46ec90 Current fffff40bdb46df40
  1550. Base fffff40bdb46f000 Limit fffff40bdb469000 Call 0000000000000000
  1551. Priority 26 BasePriority 26 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1552. Child-SP RetAddr : Args to Child : Call Site
  1553. fffff40b`db46dc68 fffff804`5a9d5929 : 00000000`0000000a 00000000`00000118 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
  1554. fffff40b`db46dc70 fffff804`5a9d1c69 : ffff8901`57558180 fffff40b`db46de30 ffff9901`830c2000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  1555. fffff40b`db46ddb0 fffff804`5a9cae18 : 00000067`b4bbbdff 00000000`00000001 ffff8901`00000000 00001f80`00ce00ac : nt!KiPageFault+0x469 (TrapFrame @ fffff40b`db46ddb0)
  1556. fffff40b`db46df40 fffff804`5a9ca866 : fffff804`5a800000 ffff9901`92a020c0 fffff40b`db46e0b8 00000000`0000ffff : nt!SwapContext+0x2d8
  1557. fffff40b`db46df80 fffff804`5a8419fd : ffff8901`57500180 00000000`fffffffe ffff8901`ffffffff 00000000`00000001 : nt!KiSwapContext+0x76
  1558. fffff40b`db46e0c0 fffff804`5a840884 : ffff9901`8fdda080 00001f80`00000000 00000000`00000000 ffff9901`00000000 : nt!KiSwapThread+0xbfd
  1559. fffff40b`db46e160 fffff804`5a87c7b7 : 00000000`0000006e 00000000`00000000 43300000`00000001 00000000`00000000 : nt!KiCommitThreadWait+0x144
  1560. fffff40b`db46e200 fffff804`5ae0b1e9 : fffff40b`db46e5c0 00000000`00000001 ffff9901`8f1a38b0 fffff804`5a8cff31 : nt!KeWaitForMultipleObjects+0x287
  1561. fffff40b`db46e310 fffff804`5aec839c : 00000000`00000000 ffff8901`57558100 ffff9901`8fdda000 ffff9901`8c0c3080 : nt!ObWaitForMultipleObjects+0x2a9
  1562. fffff40b`db46e810 fffff804`5a9d5891 : ffff9901`8fdda080 fffff40b`db46eb80 00000000`14bfe7c8 ffff8901`57558180 : nt!NtWaitForMultipleObjects32+0xfc
  1563. fffff40b`db46ea90 00000000`77731cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2bc (TrapFrame @ fffff40b`db46eb00)
  1564. 00000000`14bff0a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77731cbc
  1565.  
  1566.  
  1567. ========================================================================
  1568. ======================= Dump #4: ANALYZE VERBOSE =======================
  1569. ======================= File: 121420-9687-01.dmp =======================
  1570. ========================================================================
  1571.  
  1572. Mini Kernel Dump File: Only registers and stack trace are available
  1573. Windows 10 Kernel Version 18362 MP (16 procs) Free x64
  1574. Kernel base = 0xfffff806`38000000 PsLoadedModuleList = 0xfffff806`38443290
  1575. Debug session time: Mon Dec 14 01:12:30.432 2020 (UTC - 5:00)
  1576. System Uptime: 0 days 18:06:18.085
  1577.  
  1578. BugCheck 3B, {c0000005, fffff8063802edfa, ffff8209c7f8df60, 0}
  1579. Probably caused by : memory_corruption
  1580. Followup: memory_corruption
  1581.  
  1582. SYSTEM_SERVICE_EXCEPTION (3b)
  1583. An exception happened while executing a system service routine.
  1584.  
  1585. Arguments:
  1586. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  1587. Arg2: fffff8063802edfa, Address of the instruction which caused the bugcheck
  1588. Arg3: ffff8209c7f8df60, Address of the context record for the exception that caused the bugcheck
  1589. Arg4: 0000000000000000, zero.
  1590.  
  1591. Debugging Details:
  1592. DUMP_CLASS: 1
  1593. DUMP_QUALIFIER: 400
  1594. DUMP_TYPE: 2
  1595. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  1596. FAULTING_IP:
  1597. nt!KeAbPreAcquire+11a
  1598. fffff806`3802edfa 0fb64220 movzx eax,byte ptr [rdx+20h]
  1599. CONTEXT: ffff8209c7f8df60 -- (.cxr 0xffff8209c7f8df60)
  1600. rax=0000000000000102 rbx=ffffc202bd91a080 rcx=ffffc202c3369060
  1601. rdx=0000000000000e10 rsi=ffffc202c3369060 rdi=0000000000000e10
  1602. rip=fffff8063802edfa rsp=ffff8209c7f8e950 rbp=0000000000000000
  1603. r8=0000000000000000 r9=fffff80638000000 r10=ffffd2811c556180
  1604. r11=ffff8209c7f8e858 r12=ffffc202bd91a1c0 r13=0000000000000000
  1605. r14=0000000000000e10 r15=ffffd2811c364180
  1606. iopl=0 nv up ei pl nz na pe nc
  1607. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050202
  1608. nt!KeAbPreAcquire+0x11a:
  1609. fffff806`3802edfa 0fb64220 movzx eax,byte ptr [rdx+20h] ds:002b:00000000`00000e30=??
  1610. Resetting default scope
  1611. CUSTOMER_CRASH_COUNT: 1
  1612. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1613. BUGCHECK_STR: 0x3B
  1614.  
  1615. PROCESS_NAME: steam.exe
  1616.  
  1617. CURRENT_IRQL: 0
  1618. LAST_CONTROL_TRANSFER: from fffff806381e8d33 to fffff8063802edfa
  1619. STACK_TEXT:
  1620. ffff8209`c7f8e950 fffff806`381e8d33 : ffffc202`bd91a080 ffff8209`c7f8ea21 00000000`00000102 00000000`00000000 : nt!KeAbPreAcquire+0x11a
  1621. ffff8209`c7f8e9a0 fffff806`3861fa1b : ffffc202`c3369060 ffff8209`00000006 00000000`00000001 ffffa1a7`d1b7a100 : nt!KeWaitForSingleObject+0x1b8893
  1622. ffff8209`c7f8ea80 fffff806`381ce3d1 : ffffc202`bd91a080 00000000`00000000 ffff8209`c7f8eb18 ffffffff`ffd9da60 : nt!NtWaitForSingleObject+0x10b
  1623. ffff8209`c7f8eb00 00000000`77051cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2bc
  1624. 00000000`0a45f088 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77051cbc
  1625. CHKIMG_EXTENSION: !chkimg -lo 50 -d !hal
  1626. fffff80637f5ec4e-fffff80637f5ec53 6 bytes - hal!HalpApicRequestInterrupt+9e
  1627. [ ff 15 b4 6c 07 00:e8 4d 16 3f 00 90 ]
  1628. fffff80637f5ecc1-fffff80637f5ecc6 6 bytes - hal!HalpApicRequestInterrupt+111 (+0x73)
  1629. [ ff 15 41 6c 07 00:e8 da 15 3f 00 90 ]
  1630. fffff80637f601d5-fffff80637f601d6 2 bytes - hal!HalpTimerClockIpiRoutine+15 (+0x1514)
  1631. [ 48 ff:4c 8b ]
  1632. fffff80637f601dc-fffff80637f601df 4 bytes - hal!HalpTimerClockIpiRoutine+1c (+0x07)
  1633. [ 0f 1f 44 00:e8 4f 2e 12 ]
  1634. fffff80637f60237-fffff80637f6023c 6 bytes - hal!HalpTimerClockIpiRoutine+77 (+0x5b)
  1635. [ ff 15 cb 56 07 00:e8 64 00 3f 00 90 ]
  1636. 24 errors : !hal (fffff80637f5ec4e-fffff80637f6023c)
  1637. MODULE_NAME: memory_corruption
  1638.  
  1639. IMAGE_NAME: memory_corruption
  1640.  
  1641. FOLLOWUP_NAME: memory_corruption
  1642. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1643. MEMORY_CORRUPTOR: LARGE
  1644. STACK_COMMAND: .cxr 0xffff8209c7f8df60 ; kb
  1645. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1646. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1647. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1648. TARGET_TIME: 2020-12-14T06:12:30.000Z
  1649. SUITE_MASK: 272
  1650. PRODUCT_TYPE: 1
  1651. USER_LCID: 0
  1652. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1653. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1654. Followup: memory_corruption
  1655.  
  1656. ====================== Dump #4: 3RD PARTY DRIVERS ======================
  1657.  
  1658. Jun 11 2018 - e1i65x64.sys - Intel(R) Gigabit Adapter driver
  1659. Dec 09 2018 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  1660. Feb 07 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1661. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1662. May 14 2019 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  1663. Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  1664. Sep 11 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  1665. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1666. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  1667. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1668. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1669.  
  1670. ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
  1671.  
  1672. Mapped memory image file: C:\ProgramData\dbg\sym\e1i65x64.sys\5B1EB8E28e000\e1i65x64.sys
  1673. Image path: \SystemRoot\System32\drivers\e1i65x64.sys
  1674. Image name: e1i65x64.sys
  1675. Search : https://www.google.com/search?q=e1i65x64.sys
  1676. ADA Info : Intel(R) Gigabit Adapter driver
  1677. Timestamp : Mon Jun 11 2018
  1678. File version: 12.17.10.8
  1679. Product version: 10.0.10011.16384
  1680. File flags: 8 (Mask 3F) Private
  1681. File OS: 40004 NT Win32
  1682. File type: 3.6 Driver
  1683. File date: 00000000.00000000
  1684. CompanyName: Intel Corporation
  1685. ProductName: Intel(R) Gigabit Adapter
  1686. InternalName: e1i65x64.sys
  1687. OriginalFilename: e1i65x64.sys
  1688. ProductVersion: 12.17.10.8
  1689. FileVersion: 12.17.10.8
  1690. FileDescription: Intel(R) Gigabit Adapter NDIS 6.x driver
  1691. LegalCopyright: Copyright(C) 2013, Intel Corporation. All rights reserved.
  1692.  
  1693. Image path: \SystemRoot\System32\drivers\UcmCxUcsiNvppc.sys
  1694. Image name: UcmCxUcsiNvppc.sys
  1695. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  1696. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  1697. Timestamp : Sun Dec 9 2018
  1698.  
  1699. Mapped memory image file: C:\ProgramData\dbg\sym\amdgpio2.sys\5C5BFB24c000\amdgpio2.sys
  1700. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  1701. Image name: amdgpio2.sys
  1702. Search : https://www.google.com/search?q=amdgpio2.sys
  1703. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1704. Timestamp : Thu Feb 7 2019
  1705. File version: 2.2.0.71
  1706. Product version: 2.2.0.71
  1707. File flags: 8 (Mask 3F) Private
  1708. File OS: 40004 NT Win32
  1709. File type: 3.7 Driver
  1710. File date: 00000000.00000000
  1711. CompanyName: Advanced Micro Devices, Inc
  1712. ProductName: AMD GPIO Controller Driver
  1713. InternalName: amdgpio2.sys
  1714. OriginalFilename: amdgpio2.sys
  1715. ProductVersion: 2.2.0.71
  1716. FileVersion: 2.2.0.71
  1717. FileDescription: AMD GPIO Controller Driver
  1718. LegalCopyright: Copyright © 2012-2019 Advanced Micro Devices, Inc
  1719.  
  1720. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  1721. Image name: nvvad64v.sys
  1722. Search : https://www.google.com/search?q=nvvad64v.sys
  1723. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1724. Timestamp : Thu Mar 14 2019
  1725.  
  1726. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  1727. Image name: RTKVHD64.sys
  1728. Search : https://www.google.com/search?q=RTKVHD64.sys
  1729. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  1730. Timestamp : Tue May 14 2019
  1731.  
  1732. Image path: \SystemRoot\System32\drivers\amdpsp.sys
  1733. Image name: amdpsp.sys
  1734. Search : https://www.google.com/search?q=amdpsp.sys
  1735. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  1736. Timestamp : Wed Jun 19 2019
  1737.  
  1738. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  1739. Image name: AMDPCIDev.sys
  1740. Search : https://www.google.com/search?q=AMDPCIDev.sys
  1741. ADA Info : Advanced Micro Devices PCI Device driver
  1742. Timestamp : Wed Sep 11 2019
  1743.  
  1744. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys
  1745. Image name: nvlddmkm.sys
  1746. Search : https://www.google.com/search?q=nvlddmkm.sys
  1747. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1748. Timestamp : Wed Oct 2 2019
  1749.  
  1750. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  1751. Image name: NvModuleTracker.sys
  1752. Search : https://www.google.com/search?q=NvModuleTracker.sys
  1753. ADA Info : NVIDIA Module Tracker driver
  1754. Timestamp : Fri Nov 29 2019
  1755.  
  1756. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  1757. Image name: nvvhci.sys
  1758. Search : https://www.google.com/search?q=nvvhci.sys
  1759. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1760. Timestamp : Fri Jan 10 2020
  1761.  
  1762. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1763. Image name: nvhda64v.sys
  1764. Search : https://www.google.com/search?q=nvhda64v.sys
  1765. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1766. Timestamp : Fri Oct 16 2020
  1767.  
  1768. ====================== Dump #4: MICROSOFT DRIVERS ======================
  1769.  
  1770. ACPI.sys ACPI Driver for NT (Microsoft)
  1771. acpiex.sys ACPIEx Driver (Microsoft)
  1772. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1773. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1774. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1775. ahcache.sys Application Compatibility Cache (Microsoft)
  1776. amdppm.sys Processor Device Driver
  1777. bam.sys BAM Kernal driver (Microsoft)
  1778. BasicDisplay.sys Basic Display driver (Microsoft)
  1779. BasicRender.sys Basic Render driver (Microsoft)
  1780. Beep.SYS BEEP driver (Microsoft)
  1781. BOOTVID.dll VGA Boot Driver (Microsoft)
  1782. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1783. cdd.dll Canonical Display Driver (Microsoft)
  1784. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1785. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1786. CI.dll Code Integrity Module (Microsoft)
  1787. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1788. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1789. CLFS.SYS Common Log File System Driver (Microsoft)
  1790. clipsp.sys CLIP Service (Microsoft)
  1791. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1792. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1793. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1794. condrv.sys Console Driver (Microsoft)
  1795. crashdmp.sys Crash Dump driver (Microsoft)
  1796. csc.sys Windows Client Side Caching driver (Microsoft)
  1797. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1798. disk.sys PnP Disk Driver (Microsoft)
  1799. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1800. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1801. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1802. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1803. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1804. dxgmms2.sys DirectX Graphics MMS
  1805. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1806. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1807. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1808. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1809. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1810. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1811. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1812. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1813. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1814. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1815. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1816. HIDCLASS.SYS Hid Class Library (Microsoft)
  1817. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1818. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1819. HTTP.sys HTTP Protocol Stack (Microsoft)
  1820. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1821. iorate.sys I/O rate control Filter (Microsoft)
  1822. kbdclass.sys Keyboard Class Driver (Microsoft)
  1823. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1824. kd.dll Local Kernal Debugger (Microsoft)
  1825. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1826. ks.sys Kernal CSA Library (Microsoft)
  1827. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1828. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1829. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1830. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1831. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1832. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  1833. mmcss.sys MMCSS Driver (Microsoft)
  1834. monitor.sys Monitor Driver (Microsoft)
  1835. mouclass.sys Mouse Class Driver (Microsoft)
  1836. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1837. mountmgr.sys Mount Point Manager (Microsoft)
  1838. MpKsl58d732fe.sys Microsoft Anti-malware Protection driver
  1839. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1840. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1841. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1842. Msfs.SYS Mailslot driver (Microsoft)
  1843. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1844. msisadrv.sys ISA Driver (Microsoft)
  1845. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1846. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1847. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1848. mssmbios.sys System Management BIOS driver (Microsoft)
  1849. mup.sys Multiple UNC Provider driver (Microsoft)
  1850. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1851. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1852. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  1853. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1854. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1855. NDProxy.sys NDIS Proxy driver (Microsoft)
  1856. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1857. netbios.sys NetBIOS Interface driver (Microsoft)
  1858. netbt.sys MBT Transport driver (Microsoft)
  1859. NETIO.SYS Network I/O Subsystem (Microsoft)
  1860. Npfs.SYS NPFS driver (Microsoft)
  1861. npsvctrig.sys Named pipe service triggers (Microsoft)
  1862. nsiproxy.sys NSI Proxy driver (Microsoft)
  1863. Ntfs.sys NT File System Driver (Microsoft)
  1864. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1865. ntosext.sys NTOS Extension Host driver (Microsoft)
  1866. Null.SYS NULL Driver (Microsoft)
  1867. pacer.sys QoS Packet Scheduler (Microsoft)
  1868. partmgr.sys Partition driver (Microsoft)
  1869. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1870. pcw.sys Performance Counter Driver (Microsoft)
  1871. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1872. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1873. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1874. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1875. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  1876. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1877. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1878. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1879. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1880. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1881. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1882. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  1883. rdyboost.sys ReadyBoost Driver (Microsoft)
  1884. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1885. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1886. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1887. spaceport.sys Storage Spaces driver (Microsoft)
  1888. srv2.sys Smb 2.0 Server driver (Microsoft)
  1889. srvnet.sys Server Network driver (Microsoft)
  1890. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1891. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1892. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1893. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1894. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1895. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1896. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1897. TDI.SYS TDI Wrapper driver (Microsoft)
  1898. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1899. tm.sys Kernel Transaction Manager driver (Microsoft)
  1900. UcmCx.sys USB Connector Manager KMDF Class Extension
  1901. ucx01000.sys USB Controller Extension (Microsoft)
  1902. UEFI.sys UEFI NT driver (Microsoft)
  1903. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1904. usbaudio.sys USB Audio Class Driver (Microsoft)
  1905. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1906. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1907. UsbHub3.sys USB3 HUB driver (Microsoft)
  1908. USBXHCI.SYS USB XHCI driver (Microsoft)
  1909. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1910. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1911. volmgr.sys Volume Manager Driver (Microsoft)
  1912. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1913. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1914. volume.sys Volume driver (Microsoft)
  1915. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1916. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1917. watchdog.sys Watchdog driver (Microsoft)
  1918. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1919. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1920. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1921. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1922. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1923. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1924. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1925. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1926. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1927. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1928. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1929. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1930. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1931. winquic.sys QUIC Transport Protocol driver (Microsoft)
  1932. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1933. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1934. Wof.sys Windows Overlay Filter (Microsoft)
  1935. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1936.  
  1937. ====================== Dump #4: UNLOADED MODULES =======================
  1938.  
  1939. fffff806`46740000 fffff806`46a63000 BEDaisy.sys
  1940. fffff806`48800000 fffff806`4880f000 hiber_storpo
  1941. fffff806`48810000 fffff806`4883f000 hiber_storah
  1942. fffff806`48840000 fffff806`4885e000 hiber_dumpfv
  1943. fffff806`46740000 fffff806`46a63000 BEDaisy.sys
  1944. fffff806`487a0000 fffff806`487af000 hiber_storpo
  1945. fffff806`487b0000 fffff806`487df000 hiber_storah
  1946. fffff806`487e0000 fffff806`487fe000 hiber_dumpfv
  1947. fffff806`46740000 fffff806`46a63000 BEDaisy.sys
  1948. fffff806`482a0000 fffff806`482d8000 usbaudio.sys
  1949. fffff806`48700000 fffff806`4870f000 hiber_storpo
  1950. fffff806`48710000 fffff806`4873f000 hiber_storah
  1951. fffff806`48740000 fffff806`4875e000 hiber_dumpfv
  1952. fffff806`46740000 fffff806`46a63000 BEDaisy.sys
  1953. fffff806`3ac90000 fffff806`3ace5000 WdFilter.sys
  1954. fffff806`48600000 fffff806`48613000 WdNisDrv.sys
  1955. fffff806`44d40000 fffff806`44d4f000 dump_storpor
  1956. fffff806`44d80000 fffff806`44daf000 dump_storahc
  1957. fffff806`44dd0000 fffff806`44dee000 dump_dumpfve
  1958. fffff806`44860000 fffff806`4487e000 dam.sys
  1959. fffff806`3a7d0000 fffff806`3a7e1000 WdBoot.sys
  1960. fffff806`3b7d0000 fffff806`3b7e0000 hwpolicy.sys
  1961.  
  1962. ====================== Dump #4: BIOS INFORMATION =======================
  1963.  
  1964. sysinfo: could not find necessary interfaces.
  1965. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  1966.  
  1967. ========================== Dump #4: Extra #1 ===========================
  1968.  
  1969. 6: kd> !verifier
  1970. Verify Flags Level 0x00000000
  1971. STANDARD FLAGS:
  1972. [X] (0x00000000) Automatic Checks
  1973. [ ] (0x00000001) Special pool
  1974. [ ] (0x00000002) Force IRQL checking
  1975. [ ] (0x00000008) Pool tracking
  1976. [ ] (0x00000010) I/O verification
  1977. [ ] (0x00000020) Deadlock detection
  1978. [ ] (0x00000080) DMA checking
  1979. [ ] (0x00000100) Security checks
  1980. [ ] (0x00000800) Miscellaneous checks
  1981. [ ] (0x00020000) DDI compliance checking
  1982. ADDITIONAL FLAGS:
  1983. [ ] (0x00000004) Randomized low resources simulation
  1984. [ ] (0x00000200) Force pending I/O requests
  1985. [ ] (0x00000400) IRP logging
  1986. [ ] (0x00002000) Invariant MDL checking for stack
  1987. [ ] (0x00004000) Invariant MDL checking for driver
  1988. [ ] (0x00008000) Power framework delay fuzzing
  1989. [ ] (0x00010000) Port/miniport interface checking
  1990. [ ] (0x00040000) Systematic low resources simulation
  1991. [ ] (0x00080000) DDI compliance checking (additional)
  1992. [ ] (0x00200000) NDIS/WIFI verification
  1993. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1994. [ ] (0x01000000) VM switch verification
  1995. [ ] (0x02000000) Code integrity checks
  1996. [X] Indicates flag is enabled
  1997. Summary of All Verifier Statistics
  1998. RaiseIrqls 0x0
  1999. AcquireSpinLocks 0x0
  2000. Synch Executions 0x0
  2001. Trims 0x0
  2002. Pool Allocations Attempted 0x0
  2003. Pool Allocations Succeeded 0x0
  2004. Pool Allocations Succeeded SpecialPool 0x0
  2005. Pool Allocations With NO TAG 0x0
  2006. Pool Allocations Failed 0x0
  2007. Current paged pool allocations 0x0 for 00000000 bytes
  2008. Peak paged pool allocations 0x0 for 00000000 bytes
  2009. Current nonpaged pool allocations 0x0 for 00000000 bytes
  2010. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  2011.  
  2012. ========================== Dump #4: Extra #2 ===========================
  2013.  
  2014. 6: kd> !thread
  2015. THREAD ffffc202bd91a080 Cid 28bc.2520 Teb: 0000000000db2000 Win32Thread: 0000000000000000 RUNNING on processor 6
  2016. Not impersonating
  2017. GetUlongFromAddress: unable to read from fffff80638427604
  2018. Owning Process ffffc202bf7172c0 Image: steam.exe
  2019. Attached Process N/A Image: N/A
  2020. fffff78000000000: Unable to get shared data
  2021. Wait Start TickCount 4171380
  2022. Context Switch Count 33169 IdealProcessor: 10
  2023. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2024. UserTime 00:00:00.000
  2025. KernelTime 00:00:00.000
  2026. Win32 Start Address 0x0000000063145950
  2027. Stack Init ffff8209c7f8ec90 Current ffff8209c7f8e6e0
  2028. Base ffff8209c7f8f000 Limit ffff8209c7f89000 Call 0000000000000000
  2029. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2030. Child-SP RetAddr : Args to Child : Call Site
  2031. ffff8209`c7f8d628 fffff806`381ce469 : 00000000`0000003b 00000000`c0000005 fffff806`3802edfa ffff8209`c7f8df60 : nt!KeBugCheckEx
  2032. ffff8209`c7f8d630 fffff806`381cd8bc : ffff8209`c7f8e718 ffff8209`c7f8df60 fffff806`3853d5b4 ffff8209`c7f8ea00 : nt!KiBugCheckDispatch+0x69
  2033. ffff8209`c7f8d770 fffff806`381c5512 : fffff806`3850c000 fffff806`38000000 0005e5cc`00ab2000 00000000`0010001f : nt!KiSystemServiceHandler+0x7c
  2034. ffff8209`c7f8d7b0 fffff806`380b4745 : 00000000`00000000 00000000`00000000 ffff8209`c7f8dd20 00007fff`ffff0000 : nt!RtlpExecuteHandlerForException+0x12
  2035. ffff8209`c7f8d7e0 fffff806`380b865e : ffff8209`c7f8e718 ffff8209`c7f8e460 ffff8209`c7f8e718 00000000`00000e10 : nt!RtlDispatchException+0x4a5
  2036. ffff8209`c7f8df30 fffff806`381ce59d : fffff8fc`7e3f1000 ffff8209`c7f8e7c0 ffff8000`00000000 00000000`00000e30 : nt!KiDispatchException+0x16e
  2037. ffff8209`c7f8e5e0 fffff806`381ca77f : 00000000`00000000 fffff806`38033445 ffffc202`bd91a1c0 00000000`00000000 : nt!KiExceptionDispatch+0x11d
  2038. ffff8209`c7f8e7c0 fffff806`3802edfa : 00000000`00000000 00000000`00000001 ffffd281`1c364180 00000000`00000000 : nt!KiPageFault+0x43f (TrapFrame @ ffff8209`c7f8e7c0)
  2039. ffff8209`c7f8e950 fffff806`381e8d33 : ffffc202`bd91a080 ffff8209`c7f8ea21 00000000`00000102 00000000`00000000 : nt!KeAbPreAcquire+0x11a
  2040. ffff8209`c7f8e9a0 fffff806`3861fa1b : ffffc202`c3369060 ffff8209`00000006 00000000`00000001 ffffa1a7`d1b7a100 : nt!KeWaitForSingleObject+0x1b8893
  2041. ffff8209`c7f8ea80 fffff806`381ce3d1 : ffffc202`bd91a080 00000000`00000000 ffff8209`c7f8eb18 ffffffff`ffd9da60 : nt!NtWaitForSingleObject+0x10b
  2042. ffff8209`c7f8eb00 00000000`77051cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x2bc (TrapFrame @ ffff8209`c7f8eb00)
  2043. 00000000`0a45f088 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77051cbc
  2044.  
  2045.  
  2046. ========================================================================
  2047. ======================= Dump #5: ANALYZE VERBOSE =======================
  2048. ======================= File: 121320-9812-01.dmp =======================
  2049. ========================================================================
  2050.  
  2051. Mini Kernel Dump File: Only registers and stack trace are available
  2052. Windows 10 Kernel Version 18362 MP (16 procs) Free x64
  2053. Kernel base = 0xfffff800`16400000 PsLoadedModuleList = 0xfffff800`16843290
  2054. Debug session time: Sun Dec 13 07:05:32.987 2020 (UTC - 5:00)
  2055. System Uptime: 0 days 0:02:12.640
  2056.  
  2057. BugCheck 1, {fffff80016a492f0, 0, ffff, 1}
  2058. *** WARNING: Unable to verify timestamp for win32k.sys
  2059. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  2060. Probably caused by : memory_corruption
  2061. Followup: memory_corruption
  2062.  
  2063. APC_INDEX_MISMATCH (1)
  2064. This is a kernel internal error. The most common reason to see this
  2065. bugcheck is when a filesystem or a driver has a mismatched number of
  2066. calls to disable and re-enable APCs. The key data item is the
  2067. Thread->CombinedApcDisable field. This consists of two separate 16-bit
  2068. fields, the SpecialApcDisable and the KernelApcDisable. A negative value
  2069. of either indicates that a driver has disabled special or normal APCs
  2070. (respectively) without re-enabling them; a positive value indicates that
  2071. a driver has enabled special or normal APCs (respectively) too many times.
  2072.  
  2073. Arguments:
  2074. Arg1: fffff80016a492f0, Address of system call function or worker routine
  2075. Arg2: 0000000000000000, Thread->ApcStateIndex
  2076. Arg3: 000000000000ffff, (Thread->SpecialApcDisable << 16) | Thread->KernelApcDisable
  2077. Arg4: 0000000000000001, Call type (0 - system call, 1 - worker routine)
  2078.  
  2079. Debugging Details:
  2080. DUMP_CLASS: 1
  2081. DUMP_QUALIFIER: 400
  2082. DUMP_TYPE: 2
  2083. FAULTING_IP:
  2084. nt!PfSnPopulateReadList+0
  2085. fffff800`16a492f0 4c8bdc mov r11,rsp
  2086. CUSTOMER_CRASH_COUNT: 1
  2087. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  2088. BUGCHECK_STR: 0x1
  2089.  
  2090. PROCESS_NAME: System
  2091.  
  2092. CURRENT_IRQL: 0
  2093. LAST_CONTROL_TRANSFER: from fffff8001661dda3 to fffff800165bc810
  2094. STACK_TEXT:
  2095. fffff18b`aa302b68 fffff800`1661dda3 : 00000000`00000001 fffff800`16a492f0 00000000`00000000 00000000`0000ffff : nt!KeBugCheckEx
  2096. fffff18b`aa302b70 fffff800`16530925 : ffff9f85`10a0e140 00000000`00000080 ffff9f85`10876080 00000000`00000000 : nt!ExpWorkerThread+0x16f673
  2097. fffff18b`aa302c10 fffff800`165c3d5a : fffff800`119c5180 ffff9f85`10a0e140 fffff800`165308d0 0000020b`8a65bb00 : nt!PspSystemThreadStartup+0x55
  2098. fffff18b`aa302c60 00000000`00000000 : fffff18b`aa303000 fffff18b`aa2fd000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
  2099. STACK_COMMAND: kb
  2100. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  2101. fffff800166ab9bf-fffff800166ab9c0 2 bytes - nt!KeSwitchFrozenProcessor+8f
  2102. [ 48 ff:4c 8b ]
  2103. fffff800166ab9c6-fffff800166ab9ca 5 bytes - nt!KeSwitchFrozenProcessor+96 (+0x07)
  2104. [ 0f 1f 44 00 00:e8 f5 2d cb ff ]
  2105. 7 errors : !nt (fffff800166ab9bf-fffff800166ab9ca)
  2106. MODULE_NAME: memory_corruption
  2107.  
  2108. IMAGE_NAME: memory_corruption
  2109.  
  2110. FOLLOWUP_NAME: memory_corruption
  2111. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2112. MEMORY_CORRUPTOR: LARGE
  2113. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2114. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2115. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  2116. TARGET_TIME: 2020-12-13T12:05:32.000Z
  2117. SUITE_MASK: 272
  2118. PRODUCT_TYPE: 1
  2119. USER_LCID: 0
  2120. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  2121. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  2122. Followup: memory_corruption
  2123.  
  2124. ====================== Dump #5: 3RD PARTY DRIVERS ======================
  2125.  
  2126. Jun 11 2018 - e1i65x64.sys - Intel(R) Gigabit Adapter driver
  2127. Dec 09 2018 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  2128. Feb 07 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2129. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  2130. May 14 2019 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  2131. Jun 19 2019 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  2132. Sep 11 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  2133. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  2134. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  2135. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2136. Oct 16 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  2137.  
  2138. ================== Dump #5: 3RD PARTY DRIVERS (FULL) ===================
  2139.  
  2140. Mapped memory image file: C:\ProgramData\dbg\sym\e1i65x64.sys\5B1EB8E28e000\e1i65x64.sys
  2141. Image path: \SystemRoot\System32\drivers\e1i65x64.sys
  2142. Image name: e1i65x64.sys
  2143. Search : https://www.google.com/search?q=e1i65x64.sys
  2144. ADA Info : Intel(R) Gigabit Adapter driver
  2145. Timestamp : Mon Jun 11 2018
  2146. File version: 12.17.10.8
  2147. Product version: 10.0.10011.16384
  2148. File flags: 8 (Mask 3F) Private
  2149. File OS: 40004 NT Win32
  2150. File type: 3.6 Driver
  2151. File date: 00000000.00000000
  2152. CompanyName: Intel Corporation
  2153. ProductName: Intel(R) Gigabit Adapter
  2154. InternalName: e1i65x64.sys
  2155. OriginalFilename: e1i65x64.sys
  2156. ProductVersion: 12.17.10.8
  2157. FileVersion: 12.17.10.8
  2158. FileDescription: Intel(R) Gigabit Adapter NDIS 6.x driver
  2159. LegalCopyright: Copyright(C) 2013, Intel Corporation. All rights reserved.
  2160.  
  2161. Image path: \SystemRoot\System32\drivers\UcmCxUcsiNvppc.sys
  2162. Image name: UcmCxUcsiNvppc.sys
  2163. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  2164. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  2165. Timestamp : Sun Dec 9 2018
  2166.  
  2167. Mapped memory image file: C:\ProgramData\dbg\sym\amdgpio2.sys\5C5BFB24c000\amdgpio2.sys
  2168. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  2169. Image name: amdgpio2.sys
  2170. Search : https://www.google.com/search?q=amdgpio2.sys
  2171. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2172. Timestamp : Thu Feb 7 2019
  2173. File version: 2.2.0.71
  2174. Product version: 2.2.0.71
  2175. File flags: 8 (Mask 3F) Private
  2176. File OS: 40004 NT Win32
  2177. File type: 3.7 Driver
  2178. File date: 00000000.00000000
  2179. CompanyName: Advanced Micro Devices, Inc
  2180. ProductName: AMD GPIO Controller Driver
  2181. InternalName: amdgpio2.sys
  2182. OriginalFilename: amdgpio2.sys
  2183. ProductVersion: 2.2.0.71
  2184. FileVersion: 2.2.0.71
  2185. FileDescription: AMD GPIO Controller Driver
  2186. LegalCopyright: Copyright © 2012-2019 Advanced Micro Devices, Inc
  2187.  
  2188. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  2189. Image name: nvvad64v.sys
  2190. Search : https://www.google.com/search?q=nvvad64v.sys
  2191. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  2192. Timestamp : Thu Mar 14 2019
  2193.  
  2194. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  2195. Image name: RTKVHD64.sys
  2196. Search : https://www.google.com/search?q=RTKVHD64.sys
  2197. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  2198. Timestamp : Tue May 14 2019
  2199.  
  2200. Image path: \SystemRoot\System32\drivers\amdpsp.sys
  2201. Image name: amdpsp.sys
  2202. Search : https://www.google.com/search?q=amdpsp.sys
  2203. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  2204. Timestamp : Wed Jun 19 2019
  2205.  
  2206. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  2207. Image name: AMDPCIDev.sys
  2208. Search : https://www.google.com/search?q=AMDPCIDev.sys
  2209. ADA Info : Advanced Micro Devices PCI Device driver
  2210. Timestamp : Wed Sep 11 2019
  2211.  
  2212. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys
  2213. Image name: nvlddmkm.sys
  2214. Search : https://www.google.com/search?q=nvlddmkm.sys
  2215. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  2216. Timestamp : Wed Oct 2 2019
  2217.  
  2218. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  2219. Image name: NvModuleTracker.sys
  2220. Search : https://www.google.com/search?q=NvModuleTracker.sys
  2221. ADA Info : NVIDIA Module Tracker driver
  2222. Timestamp : Fri Nov 29 2019
  2223.  
  2224. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  2225. Image name: nvvhci.sys
  2226. Search : https://www.google.com/search?q=nvvhci.sys
  2227. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2228. Timestamp : Fri Jan 10 2020
  2229.  
  2230. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  2231. Image name: nvhda64v.sys
  2232. Search : https://www.google.com/search?q=nvhda64v.sys
  2233. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  2234. Timestamp : Fri Oct 16 2020
  2235.  
  2236. ====================== Dump #5: MICROSOFT DRIVERS ======================
  2237.  
  2238. ACPI.sys ACPI Driver for NT (Microsoft)
  2239. acpiex.sys ACPIEx Driver (Microsoft)
  2240. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  2241. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  2242. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  2243. ahcache.sys Application Compatibility Cache (Microsoft)
  2244. amdppm.sys Processor Device Driver
  2245. bam.sys BAM Kernal driver (Microsoft)
  2246. BasicDisplay.sys Basic Display driver (Microsoft)
  2247. BasicRender.sys Basic Render driver (Microsoft)
  2248. Beep.SYS BEEP driver (Microsoft)
  2249. BOOTVID.dll VGA Boot Driver (Microsoft)
  2250. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  2251. cdd.dll Canonical Display Driver (Microsoft)
  2252. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  2253. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  2254. CI.dll Code Integrity Module (Microsoft)
  2255. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  2256. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  2257. CLFS.SYS Common Log File System Driver (Microsoft)
  2258. clipsp.sys CLIP Service (Microsoft)
  2259. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  2260. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  2261. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  2262. condrv.sys Console Driver (Microsoft)
  2263. crashdmp.sys Crash Dump driver (Microsoft)
  2264. csc.sys Windows Client Side Caching driver (Microsoft)
  2265. dfsc.sys DFS Namespace Client Driver (Microsoft)
  2266. disk.sys PnP Disk Driver (Microsoft)
  2267. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  2268. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2269. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2270. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2271. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  2272. dxgmms2.sys DirectX Graphics MMS
  2273. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  2274. fastfat.SYS Fast FAT File System Driver (Microsoft)
  2275. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  2276. fileinfo.sys FileInfo Filter Driver (Microsoft)
  2277. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  2278. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  2279. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  2280. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  2281. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  2282. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  2283. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  2284. HIDCLASS.SYS Hid Class Library (Microsoft)
  2285. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  2286. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  2287. HTTP.sys HTTP Protocol Stack (Microsoft)
  2288. intelpep.sys Intel Power Engine Plugin (Microsoft)
  2289. iorate.sys I/O rate control Filter (Microsoft)
  2290. kbdclass.sys Keyboard Class Driver (Microsoft)
  2291. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  2292. kd.dll Local Kernal Debugger (Microsoft)
  2293. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  2294. ks.sys Kernal CSA Library (Microsoft)
  2295. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  2296. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  2297. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  2298. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  2299. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  2300. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  2301. mmcss.sys MMCSS Driver (Microsoft)
  2302. monitor.sys Monitor Driver (Microsoft)
  2303. mouclass.sys Mouse Class Driver (Microsoft)
  2304. mouhid.sys HID Mouse Filter Driver (Microsoft)
  2305. mountmgr.sys Mount Point Manager (Microsoft)
  2306. MpKsl58d732fe.sys Microsoft Anti-malware Protection driver
  2307. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  2308. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  2309. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  2310. Msfs.SYS Mailslot driver (Microsoft)
  2311. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  2312. msisadrv.sys ISA Driver (Microsoft)
  2313. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  2314. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  2315. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  2316. mssmbios.sys System Management BIOS driver (Microsoft)
  2317. mup.sys Multiple UNC Provider driver (Microsoft)
  2318. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  2319. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  2320. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  2321. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  2322. NDProxy.sys NDIS Proxy driver (Microsoft)
  2323. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  2324. netbios.sys NetBIOS Interface driver (Microsoft)
  2325. netbt.sys MBT Transport driver (Microsoft)
  2326. NETIO.SYS Network I/O Subsystem (Microsoft)
  2327. Npfs.SYS NPFS driver (Microsoft)
  2328. npsvctrig.sys Named pipe service triggers (Microsoft)
  2329. nsiproxy.sys NSI Proxy driver (Microsoft)
  2330. Ntfs.sys NT File System Driver (Microsoft)
  2331. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  2332. ntosext.sys NTOS Extension Host driver (Microsoft)
  2333. Null.SYS NULL Driver (Microsoft)
  2334. pacer.sys QoS Packet Scheduler (Microsoft)
  2335. partmgr.sys Partition driver (Microsoft)
  2336. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  2337. pcw.sys Performance Counter Driver (Microsoft)
  2338. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  2339. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  2340. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  2341. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2342. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  2343. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  2344. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  2345. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  2346. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2347. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2348. rdyboost.sys ReadyBoost Driver (Microsoft)
  2349. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2350. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2351. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2352. spaceport.sys Storage Spaces driver (Microsoft)
  2353. srv2.sys Smb 2.0 Server driver (Microsoft)
  2354. srvnet.sys Server Network driver (Microsoft)
  2355. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  2356. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2357. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2358. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2359. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2360. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2361. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2362. TDI.SYS TDI Wrapper driver (Microsoft)
  2363. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2364. tm.sys Kernel Transaction Manager driver (Microsoft)
  2365. UcmCx.sys USB Connector Manager KMDF Class Extension
  2366. ucx01000.sys USB Controller Extension (Microsoft)
  2367. UEFI.sys UEFI NT driver (Microsoft)
  2368. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2369. usbaudio.sys USB Audio Class Driver (Microsoft)
  2370. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2371. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2372. UsbHub3.sys USB3 HUB driver (Microsoft)
  2373. USBXHCI.SYS USB XHCI driver (Microsoft)
  2374. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2375. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2376. volmgr.sys Volume Manager Driver (Microsoft)
  2377. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2378. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2379. volume.sys Volume driver (Microsoft)
  2380. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2381. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  2382. watchdog.sys Watchdog driver (Microsoft)
  2383. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2384. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2385. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2386. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2387. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2388. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2389. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2390. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2391. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2392. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2393. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2394. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2395. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2396. winquic.sys QUIC Transport Protocol driver (Microsoft)
  2397. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2398. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2399. Wof.sys Windows Overlay Filter (Microsoft)
  2400. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2401.  
  2402. ====================== Dump #5: UNLOADED MODULES =======================
  2403.  
  2404. fffff800`21b70000 fffff800`21b7f000 dump_storpor
  2405. fffff800`21bb0000 fffff800`21bdf000 dump_storahc
  2406. fffff800`21600000 fffff800`2161e000 dump_dumpfve
  2407. fffff800`21e30000 fffff800`21e4e000 dam.sys
  2408. fffff800`17dd0000 fffff800`17de1000 WdBoot.sys
  2409. fffff800`18dd0000 fffff800`18de0000 hwpolicy.sys
  2410.  
  2411. ====================== Dump #5: BIOS INFORMATION =======================
  2412.  
  2413. sysinfo: could not find necessary interfaces.
  2414. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  2415.  
  2416. ========================== Dump #5: Extra #1 ===========================
  2417.  
  2418. 4: kd> !verifier
  2419. Verify Flags Level 0x00000000
  2420. STANDARD FLAGS:
  2421. [X] (0x00000000) Automatic Checks
  2422. [ ] (0x00000001) Special pool
  2423. [ ] (0x00000002) Force IRQL checking
  2424. [ ] (0x00000008) Pool tracking
  2425. [ ] (0x00000010) I/O verification
  2426. [ ] (0x00000020) Deadlock detection
  2427. [ ] (0x00000080) DMA checking
  2428. [ ] (0x00000100) Security checks
  2429. [ ] (0x00000800) Miscellaneous checks
  2430. [ ] (0x00020000) DDI compliance checking
  2431. ADDITIONAL FLAGS:
  2432. [ ] (0x00000004) Randomized low resources simulation
  2433. [ ] (0x00000200) Force pending I/O requests
  2434. [ ] (0x00000400) IRP logging
  2435. [ ] (0x00002000) Invariant MDL checking for stack
  2436. [ ] (0x00004000) Invariant MDL checking for driver
  2437. [ ] (0x00008000) Power framework delay fuzzing
  2438. [ ] (0x00010000) Port/miniport interface checking
  2439. [ ] (0x00040000) Systematic low resources simulation
  2440. [ ] (0x00080000) DDI compliance checking (additional)
  2441. [ ] (0x00200000) NDIS/WIFI verification
  2442. [ ] (0x00800000) Kernel synchronization delay fuzzing
  2443. [ ] (0x01000000) VM switch verification
  2444. [ ] (0x02000000) Code integrity checks
  2445. [X] Indicates flag is enabled
  2446. Summary of All Verifier Statistics
  2447. RaiseIrqls 0x0
  2448. AcquireSpinLocks 0x0
  2449. Synch Executions 0x0
  2450. Trims 0x0
  2451. Pool Allocations Attempted 0x0
  2452. Pool Allocations Succeeded 0x0
  2453. Pool Allocations Succeeded SpecialPool 0x0
  2454. Pool Allocations With NO TAG 0x0
  2455. Pool Allocations Failed 0x0
  2456. Current paged pool allocations 0x0 for 00000000 bytes
  2457. Peak paged pool allocations 0x0 for 00000000 bytes
  2458. Current nonpaged pool allocations 0x0 for 00000000 bytes
  2459. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  2460.  
  2461. ========================== Dump #5: Extra #2 ===========================
  2462.  
  2463. 4: kd> !thread
  2464. THREAD ffff9f8510a0e140 Cid 0004.0020 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 4
  2465. Not impersonating
  2466. GetUlongFromAddress: unable to read from fffff80016827604
  2467. Owning Process ffff9f8510876080 Image: System
  2468. Attached Process N/A Image: N/A
  2469. fffff78000000000: Unable to get shared data
  2470. Wait Start TickCount 8488
  2471. Context Switch Count 374 IdealProcessor: 4
  2472. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2473. UserTime 00:00:00.000
  2474. KernelTime 00:00:00.000
  2475. Win32 Start Address nt!ExpWorkerThread (0xfffff800164ae730)
  2476. Stack Init fffff18baa302c90 Current fffff18baa301220
  2477. Base fffff18baa303000 Limit fffff18baa2fd000 Call 0000000000000000
  2478. Priority 10 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2479. Child-SP RetAddr : Args to Child : Call Site
  2480. fffff18b`aa302b68 fffff800`1661dda3 : 00000000`00000001 fffff800`16a492f0 00000000`00000000 00000000`0000ffff : nt!KeBugCheckEx
  2481. fffff18b`aa302b70 fffff800`16530925 : ffff9f85`10a0e140 00000000`00000080 ffff9f85`10876080 00000000`00000000 : nt!ExpWorkerThread+0x16f673
  2482. fffff18b`aa302c10 fffff800`165c3d5a : fffff800`119c5180 ffff9f85`10a0e140 fffff800`165308d0 0000020b`8a65bb00 : nt!PspSystemThreadStartup+0x55
  2483. fffff18b`aa302c60 00000000`00000000 : fffff18b`aa303000 fffff18b`aa2fd000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
Advertisement
Add Comment
Please, Sign In to add comment