Advertisement
Guest User

Untitled

a guest
Jun 26th, 2020
130
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.38 KB | None | 0 0
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 00 minutes and 29 seconds
  5.  
  6. ================================= CPU ==================================
  7. COUNT: c
  8. MHZ: 3696
  9. VENDOR: GenuineIntel
  10. FAMILY: 6
  11. MODEL: 9e
  12. STEPPING: a
  13.  
  14. ================================== OS ==================================
  15. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  16. BUILD_VERSION: 10.0.19041.330 (WinBuild.160101.0800)
  17. BUILD: 19041
  18. SERVICEPACK: 330
  19. PLATFORM_TYPE: x64
  20. NAME: Windows 10
  21. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  22. BUILD_TIMESTAMP: unknown_date
  23. BUILDDATESTAMP: 160101.0800
  24. BUILDLAB: WinBuild
  25. BUILDOSVER: 10.0.19041.330
  26.  
  27. =============================== DEBUGGER ===============================
  28. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  29. Copyright (c) Microsoft Corporation. All rights reserved.
  30.  
  31. =============================== COMMENTS ===============================
  32. * Information gathered from different dump files may be different. If
  33. Windows updates between two dump files, two or more OS versions may
  34. be shown above.
  35. * Additional BIOS information was not included in the dump file(s). This
  36. can be caused by an outdated BIOS.
  37.  
  38. ========================================================================
  39. ======================= Dump #1: ANALYZE VERBOSE =======================
  40. ======================= File: 062620-4906-01.dmp =======================
  41. ========================================================================
  42.  
  43. Mini Kernel Dump File: Only registers and stack trace are available
  44. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  45. Kernel base = 0xfffff802`5ac00000 PsLoadedModuleList = 0xfffff802`5b82a2b0
  46. Debug session time: Fri Jun 26 12:31:19.743 2020 (UTC - 4:00)
  47. System Uptime: 0 days 2:54:33.157
  48.  
  49. BugCheck 1000007E, {ffffffffc0000005, fffff8025afe5957, ffffae87963c9e48, ffffae87963c9680}
  50. Probably caused by : memory_corruption ( nt!MiGetPage+fc )
  51. Followup: MachineOwner
  52.  
  53. SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
  54. This is a very common bugcheck. Usually the exception address pinpoints
  55. the driver/function that caused the problem. Always note this address
  56. as well as the link date of the driver/image that contains this address.
  57. Some common problems are exception code 0x80000003. This means a hard
  58. coded breakpoint or assertion was hit, but this system was booted
  59. /NODEBUG. This is not supposed to happen as developers should never have
  60. hardcoded breakpoints in retail code, but ...
  61. If this happens, make sure a debugger gets connected, and the
  62. system is booted /DEBUG. This will let us see why this breakpoint is
  63. happening.
  64.  
  65. Arguments:
  66. Arg1: ffffffffc0000005, The exception code that was not handled
  67. Arg2: fffff8025afe5957, The address that the exception occurred at
  68. Arg3: ffffae87963c9e48, Exception Record Address
  69. Arg4: ffffae87963c9680, Context Record Address
  70.  
  71. Debugging Details:
  72. DUMP_CLASS: 1
  73. DUMP_QUALIFIER: 400
  74. DUMP_TYPE: 2
  75. DUMP_FILE_ATTRIBUTES: 0x8
  76. Kernel Generated Triage Dump
  77. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  78. FAULTING_IP:
  79. nt!ExpInterlockedPopEntrySListFault+0
  80. fffff802`5afe5957 498b08 mov rcx,qword ptr [r8]
  81. EXCEPTION_RECORD: ffffae87963c9e48 -- (.exr 0xffffae87963c9e48)
  82. ExceptionAddress: fffff8025afe5957 (nt!ExpInterlockedPopEntrySListFault)
  83. ExceptionCode: c0000005 (Access violation)
  84. ExceptionFlags: 00000000
  85. NumberParameters: 2
  86. Parameter[0]: 0000000000000000
  87. Parameter[1]: ffffffffffffffff
  88. Attempt to read from address ffffffffffffffff
  89. CONTEXT: ffffae87963c9680 -- (.cxr 0xffffae87963c9680)
  90. rax=00000000fa48000e rbx=0000000000000000 rcx=ffffd70000006330
  91. rdx=0003b3e006ff0990 rsi=0000000000000000 rdi=0000000000000000
  92. rip=fffff8025afe5957 rsp=ffffae87963ca080 rbp=0000000000000000
  93. r8=0003b3e006ff0990 r9=0000000000000000 r10=ffffd70000006330
  94. r11=fffff8025ac09f18 r12=fffff8025ac09f18 r13=0000000000000001
  95. r14=fffff8025b850ac0 r15=0000000000000001
  96. iopl=0 nv up ei pl nz na po nc
  97. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050206
  98. nt!ExpInterlockedPopEntrySListFault:
  99. fffff802`5afe5957 498b08 mov rcx,qword ptr [r8] ds:002b:0003b3e0`06ff0990=????????????????
  100. Resetting default scope
  101. CUSTOMER_CRASH_COUNT: 1
  102. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  103.  
  104. PROCESS_NAME: System
  105.  
  106. CURRENT_IRQL: 0
  107. ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  108. EXCEPTION_CODE_STR: c0000005
  109. EXCEPTION_PARAMETER1: 0000000000000000
  110. EXCEPTION_PARAMETER2: ffffffffffffffff
  111. FOLLOWUP_IP:
  112. nt!MiGetPage+fc
  113. fffff802`5ae1836c 4c8bf0 mov r14,rax
  114. READ_ADDRESS: fffff8025b8fa388: Unable to get MiVisibleState
  115. ffffffffffffffff
  116. BUGCHECK_STR: AV
  117. LAST_CONTROL_TRANSFER: from fffff8025ae1836c to fffff8025afe5957
  118. STACK_TEXT:
  119. ffffae87`963ca080 fffff802`5ae1836c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault
  120. ffffae87`963ca090 fffff802`5ae17972 : fffff802`5b850ac0 00000000`00000033 00000000`00000033 00000000`00000000 : nt!MiGetPage+0xfc
  121. ffffae87`963ca170 fffff802`5b266738 : e18bb608`0bc004c0 00000000`00000010 ffff9e87`cef7f698 0a000001`f460f821 : nt!MiGetPageChain+0x172
  122. ffffae87`963ca3d0 fffff802`5b245245 : 00000000`00000000 ffffe18b`9275a510 ffffe18b`85142040 00000000`00000000 : nt!MiPfPrepareSequentialReadList+0x598
  123. ffffae87`963ca4e0 fffff802`5aef9bdf : ffffe18b`8efb3a20 ffffae87`963ca6f0 00000000`00000000 ffffe18b`92165800 : nt!MmPrefetchForCacheManager+0x75
  124. ffffae87`963ca540 fffff802`5afa0b30 : ffffe18b`00010000 00000000`00000000 00000000`57ec3cc1 ffffe18b`85142040 : nt!CcAsyncReadPrefetch+0x13f
  125. ffffae87`963ca5f0 fffff802`5af46715 : ffffe18b`85142040 ffffe18b`85142040 fffff802`5afa09a0 ffffe18b`851faf60 : nt!CcAsyncReadWorker+0x190
  126. ffffae87`963cab10 fffff802`5afe5078 : ffffb001`ead5f180 ffffe18b`85142040 fffff802`5af466c0 00000000`00000000 : nt!PspSystemThreadStartup+0x55
  127. ffffae87`963cab60 00000000`00000000 : ffffae87`963cb000 ffffae87`963c4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
  128. THREAD_SHA1_HASH_MOD_FUNC: b2dc7b3c8b3b222476f04821cf66e3a07b8ce974
  129. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 531f8e52d989e92424937027323880edb675d177
  130. THREAD_SHA1_HASH_MOD: 9f457f347057f10e1df248e166a3e95e6570ecfe
  131. FAULT_INSTR_CODE: 48f08b4c
  132. SYMBOL_STACK_INDEX: 1
  133. SYMBOL_NAME: nt!MiGetPage+fc
  134. FOLLOWUP_NAME: MachineOwner
  135. MODULE_NAME: nt
  136. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  137. IMAGE_VERSION: 10.0.19041.330
  138. STACK_COMMAND: .cxr 0xffffae87963c9680 ; kb
  139.  
  140. IMAGE_NAME: memory_corruption
  141.  
  142. BUCKET_ID_FUNC_OFFSET: fc
  143. FAILURE_BUCKET_ID: AV_nt!MiGetPage
  144. BUCKET_ID: AV_nt!MiGetPage
  145. PRIMARY_PROBLEM_CLASS: AV_nt!MiGetPage
  146. TARGET_TIME: 2020-06-26T16:31:19.000Z
  147. SUITE_MASK: 784
  148. PRODUCT_TYPE: 1
  149. USER_LCID: 0
  150. FAILURE_ID_HASH_STRING: km:av_nt!migetpage
  151. FAILURE_ID_HASH: {f2081220-629b-308b-003b-b589256b0abf}
  152. Followup: MachineOwner
  153.  
  154. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  155.  
  156. Oct 09 2015 - wdcsam64.sys - Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  157. Oct 04 2016 - DisplayLinkXRUsbIo_x64_2.1.6.8682.sys - DisplayLink XR USB driver
  158. Jan 21 2019 - imaucxhpal.sys - MA-USB (UCX) HPAL driver
  159. Jan 21 2019 - iwigig.sys - WiGig MAC driver (Intel)
  160. Mar 19 2019 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  161. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  162. May 07 2019 - e1d68x64.sys - Intel(R) Gigabit Adapter driver
  163. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  164.  
  165. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  166.  
  167. Image name: wdcsam64.sys
  168. Search : https://www.google.com/search?q=wdcsam64.sys
  169. ADA Info : Western Digital SCSI Arcitecture Model (SAM) WDM driver https://support.wdc.com/
  170. Timestamp : Fri Oct 9 2015
  171.  
  172. Image name: DisplayLinkXRUsbIo_x64_2.1.6.8682.sys
  173. Search : https://www.google.com/search?q=DisplayLinkXRUsbIo_x64_2.1.6.8682.sys
  174. ADA Info : DisplayLink XR USB driver
  175. Timestamp : Tue Oct 4 2016
  176.  
  177. Image name: imaucxhpal.sys
  178. Search : https://www.google.com/search?q=imaucxhpal.sys
  179. ADA Info : MA-USB (UCX) HPAL driver
  180. Timestamp : Mon Jan 21 2019
  181.  
  182. Image name: iwigig.sys
  183. Search : https://www.google.com/search?q=iwigig.sys
  184. ADA Info : WiGig MAC driver (Intel)
  185. Timestamp : Mon Jan 21 2019
  186.  
  187. Image name: nvhda64v.sys
  188. Search : https://www.google.com/search?q=nvhda64v.sys
  189. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  190. Timestamp : Tue Mar 19 2019
  191.  
  192. Image name: TeeDriverW8x64.sys
  193. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  194. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  195. Timestamp : Thu Apr 4 2019
  196.  
  197. Image name: e1d68x64.sys
  198. Search : https://www.google.com/search?q=e1d68x64.sys
  199. ADA Info : Intel(R) Gigabit Adapter driver
  200. Timestamp : Tue May 7 2019
  201.  
  202. Image name: nvlddmkm.sys
  203. Search : https://www.google.com/search?q=nvlddmkm.sys
  204. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  205. Timestamp : Wed Oct 2 2019
  206.  
  207. ====================== Dump #1: MICROSOFT DRIVERS ======================
  208.  
  209. ACPI.sys ACPI Driver for NT (Microsoft)
  210. acpiex.sys ACPIEx Driver (Microsoft)
  211. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  212. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  213. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  214. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  215. ahcache.sys Application Compatibility Cache (Microsoft)
  216. bam.sys BAM Kernal driver (Microsoft)
  217. BasicDisplay.sys Basic Display driver (Microsoft)
  218. BasicRender.sys Basic Render driver (Microsoft)
  219. Beep.SYS BEEP driver (Microsoft)
  220. bindflt.sys Windows Bind Filter driver (Microsoft)
  221. BOOTVID.dll VGA Boot Driver (Microsoft)
  222. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  223. cdd.dll Canonical Display Driver (Microsoft)
  224. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  225. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  226. CI.dll Code Integrity Module (Microsoft)
  227. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  228. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  229. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  230. CLFS.SYS Common Log File System Driver (Microsoft)
  231. clipsp.sys CLIP Service (Microsoft)
  232. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  233. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  234. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  235. condrv.sys Console Driver (Microsoft)
  236. crashdmp.sys Crash Dump driver (Microsoft)
  237. dfsc.sys DFS Namespace Client Driver (Microsoft)
  238. disk.sys PnP Disk Driver (Microsoft)
  239. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  240. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  241. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  242. dump_storport.sys Provides disk access during crash dump file generation (Microsoft)
  243. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  244. dxgmms2.sys DirectX Graphics MMS
  245. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  246. fastfat.SYS Fast FAT File System Driver (Microsoft)
  247. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  248. fileinfo.sys FileInfo Filter Driver (Microsoft)
  249. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  250. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  251. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  252. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  253. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  254. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  255. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  256. HdAudio.sys High Definition Audio Function driver (Microsoft)
  257. HIDCLASS.SYS Hid Class Library (Microsoft)
  258. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  259. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  260. HTTP.sys HTTP Protocol Stack (Microsoft)
  261. intelpep.sys Intel Power Engine Plugin (Microsoft)
  262. intelppm.sys Processor Device Driver (Microsoft)
  263. IntelTA.sys Intel Telemetry Driver
  264. iorate.sys I/O rate control Filter (Microsoft)
  265. kbdclass.sys Keyboard Class Driver (Microsoft)
  266. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  267. kdcom.dll Kernel Debugger HW Extension DLL (Microsoft)
  268. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  269. ks.sys Kernal CSA Library (Microsoft)
  270. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  271. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  272. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  273. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  274. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  275. mcupdate.dll Media Center Update (Microsoft)
  276. mmcss.sys MMCSS Driver (Microsoft)
  277. monitor.sys Monitor Driver (Microsoft)
  278. mouclass.sys Mouse Class Driver (Microsoft)
  279. mouhid.sys HID Mouse Filter Driver (Microsoft)
  280. mountmgr.sys Mount Point Manager (Microsoft)
  281. MpKslDrv.sys Microsoft Anti-malware Protection driver
  282. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  283. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  284. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  285. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  286. Msfs.SYS Mailslot driver (Microsoft)
  287. msisadrv.sys ISA Driver (Microsoft)
  288. MSKSSRV.sys MS KS Server driver
  289. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  290. msquic.sys Windows QUIC Driver
  291. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  292. mssmbios.sys System Management BIOS driver (Microsoft)
  293. mup.sys Multiple UNC Provider driver (Microsoft)
  294. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  295. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  296. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  297. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  298. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  299. NDProxy.sys NDIS Proxy driver (Microsoft)
  300. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  301. netbios.sys NetBIOS Interface driver (Microsoft)
  302. netbt.sys MBT Transport driver (Microsoft)
  303. NETIO.SYS Network I/O Subsystem (Microsoft)
  304. Npfs.SYS NPFS driver (Microsoft)
  305. npsvctrig.sys Named pipe service triggers (Microsoft)
  306. nsiproxy.sys NSI Proxy driver (Microsoft)
  307. Ntfs.sys NT File System Driver (Microsoft)
  308. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  309. ntosext.sys NTOS Extension Host driver (Microsoft)
  310. Null.SYS NULL Driver (Microsoft)
  311. pacer.sys QoS Packet Scheduler (Microsoft)
  312. partmgr.sys Partition driver (Microsoft)
  313. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  314. pcw.sys Performance Counter Driver (Microsoft)
  315. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  316. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  317. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  318. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  319. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  320. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  321. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  322. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  323. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  324. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  325. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  326. rdyboost.sys ReadyBoost Driver (Microsoft)
  327. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  328. serenum.sys Serial Port Enumerator (Microsoft)
  329. serial.sys Serial Device Driver
  330. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  331. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  332. spaceport.sys Storage Spaces driver (Microsoft)
  333. srv2.sys Smb 2.0 Server driver (Microsoft)
  334. srvnet.sys Server Network driver (Microsoft)
  335. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  336. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  337. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  338. storqosflt.sys Storage QoS Filter driver (Microsoft)
  339. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  340. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  341. tcpip.sys TCP/IP Protocol driver (Microsoft)
  342. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  343. TDI.SYS TDI Wrapper driver (Microsoft)
  344. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  345. tm.sys Kernel Transaction Manager driver (Microsoft)
  346. ucx01000.sys USB Controller Extension (Microsoft)
  347. udfs.sys UDF File System driver (Microsoft)
  348. UEFI.sys UEFI NT driver (Microsoft)
  349. umbus.sys User-Mode Bus Enumerator (Microsoft)
  350. usbaudio.sys USB Audio Class Driver (Microsoft)
  351. usbaudio2.sys Microsoft USB Audio Class 2.0 Driver
  352. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  353. USBD.SYS Universal Serial Bus Driver (Microsoft)
  354. UsbHub3.sys USB3 HUB driver (Microsoft)
  355. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  356. usbvideo.sys USB Video Class Driver (Microsoft)
  357. USBXHCI.SYS USB XHCI driver (Microsoft)
  358. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  359. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  360. volmgr.sys Volume Manager Driver (Microsoft)
  361. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  362. volsnap.sys Volume Shadow Copy driver (Microsoft)
  363. volume.sys Volume driver (Microsoft)
  364. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  365. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  366. watchdog.sys Watchdog driver (Microsoft)
  367. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  368. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  369. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  370. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  371. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  372. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  373. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  374. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  375. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  376. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  377. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  378. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  379. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  380. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  381. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  382. Wof.sys Windows Overlay Filter (Microsoft)
  383. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  384. WppRecorder.sys WPP Trace Recorder (Microsoft)
  385. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  386.  
  387. ====================== Dump #1: UNLOADED MODULES =======================
  388.  
  389. fffff802`58340000 fffff802`5834c000 WdmCompanion
  390. fffff802`58290000 fffff802`582d6000 usbaudio2.sy
  391. fffff802`58280000 fffff802`58290000 DisplayLinkX
  392. fffff802`5a170000 fffff802`5a1b6000 usbaudio2.sy
  393. fffff802`5a160000 fffff802`5a170000 DisplayLinkX
  394. fffff802`58260000 fffff802`58271000 MSKSSRV.sys
  395. fffff802`5a1c0000 fffff802`5a1cc000 WdmCompanion
  396. fffff802`5a0d0000 fffff802`5a0df000 hiber_storpo
  397. fffff802`5a0e0000 fffff802`5a113000 hiber_storah
  398. fffff802`5a120000 fffff802`5a13e000 hiber_dumpfv
  399. fffff802`73320000 fffff802`7333c000 monitor.sys
  400. fffff802`746c0000 fffff802`75c36000 nvlddmkm.sys
  401. fffff802`75c40000 fffff802`75c5c000 monitor.sys
  402. fffff802`73300000 fffff802`7331c000 monitor.sys
  403. fffff802`72950000 fffff802`7296c000 monitor.sys
  404. fffff802`712e0000 fffff802`712ef000 dump_storpor
  405. fffff802`71330000 fffff802`71363000 dump_storahc
  406. fffff802`71390000 fffff802`713ae000 dump_dumpfve
  407. fffff802`72570000 fffff802`725c5000 WUDFRd.sys
  408. fffff802`710d0000 fffff802`710ec000 dam.sys
  409. fffff802`5dc00000 fffff802`5dc11000 WdBoot.sys
  410. fffff802`5ecb0000 fffff802`5ecc0000 hwpolicy.sys
  411.  
  412. ====================== Dump #1: BIOS INFORMATION =======================
  413.  
  414. sysinfo: could not find necessary interfaces.
  415. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  416.  
  417. ========================== Dump #1: Extra #1 ===========================
  418.  
  419. 3: kd> !verifier
  420. fffff8025b82a6c0: Unable to get verifier list.
  421.  
  422. ========================== Dump #1: Extra #2 ===========================
  423.  
  424. 3: kd> !thread
  425. THREAD ffffe18b85142040 Cid 0004.0088 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 3
  426. IRP List:
  427. Unable to read nt!_IRP @ ffffe18b953f6940
  428. Not impersonating
  429. GetUlongFromAddress: unable to read from fffff8025b81143c
  430. Owning Process ffffe18b8509c040 Image: System
  431. Attached Process N/A Image: N/A
  432. fffff78000000000: Unable to get shared data
  433. Wait Start TickCount 670282
  434. Context Switch Count 33106 IdealProcessor: 3
  435. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  436. UserTime 00:00:00.000
  437. KernelTime 00:00:00.000
  438. Win32 Start Address nt!CcAsyncReadWorker (0xfffff8025afa09a0)
  439. Stack Init ffffae87963cab90 Current ffffae87963ca0b0
  440. Base ffffae87963cb000 Limit ffffae87963c4000 Call 0000000000000000
  441. Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  442. Child-SP RetAddr : Args to Child : Call Site
  443. ffffae87`963ca080 fffff802`5ae1836c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpInterlockedPopEntrySListFault
  444. ffffae87`963ca090 fffff802`5ae17972 : fffff802`5b850ac0 00000000`00000033 00000000`00000033 00000000`00000000 : nt!MiGetPage+0xfc
  445. ffffae87`963ca170 fffff802`5b266738 : e18bb608`0bc004c0 00000000`00000010 ffff9e87`cef7f698 0a000001`f460f821 : nt!MiGetPageChain+0x172
  446. ffffae87`963ca3d0 fffff802`5b245245 : 00000000`00000000 ffffe18b`9275a510 ffffe18b`85142040 00000000`00000000 : nt!MiPfPrepareSequentialReadList+0x598
  447. ffffae87`963ca4e0 fffff802`5aef9bdf : ffffe18b`8efb3a20 ffffae87`963ca6f0 00000000`00000000 ffffe18b`92165800 : nt!MmPrefetchForCacheManager+0x75
  448. ffffae87`963ca540 fffff802`5afa0b30 : ffffe18b`00010000 00000000`00000000 00000000`57ec3cc1 ffffe18b`85142040 : nt!CcAsyncReadPrefetch+0x13f
  449. ffffae87`963ca5f0 fffff802`5af46715 : ffffe18b`85142040 ffffe18b`85142040 fffff802`5afa09a0 ffffe18b`851faf60 : nt!CcAsyncReadWorker+0x190
  450. ffffae87`963cab10 fffff802`5afe5078 : ffffb001`ead5f180 ffffe18b`85142040 fffff802`5af466c0 00000000`00000000 : nt!PspSystemThreadStartup+0x55
  451. ffffae87`963cab60 00000000`00000000 : ffffae87`963cb000 ffffae87`963c4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement