Guest User

Untitled

a guest
Jun 30th, 2020
88
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 79.37 KB | None | 0 0
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 01 minutes and 51 seconds
  5.  
  6. ================================ SYSTEM ================================
  7. MANUFACTURER: Micro-Star International Co., Ltd.
  8. PRODUCT_NAME: MS-7B93
  9. VERSION: 1.0
  10.  
  11. ================================= BIOS =================================
  12. VENDOR: American Megatrends Inc.
  13. VERSION: 1.72
  14. DATE: 04/22/2020
  15.  
  16. ============================= MOTHERBOARD ==============================
  17. MANUFACTURER: Micro-Star International Co., Ltd.
  18. PRODUCT: MPG X570 GAMING PRO CARBON WIFI (MS-7B93)
  19. VERSION: 1.0
  20.  
  21. ================================= RAM ==================================
  22. Size Speed Manufacturer Part No.
  23. -------------- -------------- ------------------- ----------------------
  24. 3000MHz Unknown Unknown
  25. 8192MB 3000MHz Unknown CMK16GX4M2B3000C15
  26. 3000MHz Unknown Unknown
  27. 8192MB 3000MHz Unknown CMK16GX4M2B3000C15
  28.  
  29. ================================= CPU ==================================
  30. Processor Version: AMD Ryzen 5 3600 6-Core Processor
  31. COUNT: c
  32. MHZ: 3600
  33. VENDOR: AuthenticAMD
  34. FAMILY: 17
  35. MODEL: 71
  36. STEPPING: 0
  37.  
  38. ================================== OS ==================================
  39. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  40. Built by: 19041.1.amd64fre.vb_release.191206-1406
  41. BUILD_VERSION: 10.0.19041.329 (WinBuild.160101.0800)
  42. BUILD: 19041
  43. SERVICEPACK: 329
  44. PLATFORM_TYPE: x64
  45. NAME: Windows 10
  46. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  47. BUILD_TIMESTAMP: unknown_date
  48. BUILDDATESTAMP: 160101.0800
  49. BUILDLAB: WinBuild
  50. BUILDOSVER: 10.0.19041.329
  51.  
  52. =============================== DEBUGGER ===============================
  53. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  54. Copyright (c) Microsoft Corporation. All rights reserved.
  55.  
  56. =============================== COMMENTS ===============================
  57. * Information gathered from different dump files may be different. If
  58. Windows updates between two dump files, two or more OS versions may
  59. be shown above.
  60. * If the user updates the BIOS between dump files, two or more versions
  61. and dates may be shown above.
  62. * More RAM information can be found below in a full BIOS section.
  63.  
  64. ========================================================================
  65. ======================= Dump #1: ANALYZE VERBOSE =======================
  66. ======================= File: 063020-7406-01.dmp =======================
  67. ========================================================================
  68.  
  69. Mini Kernel Dump File: Only registers and stack trace are available
  70. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  71. Kernel base = 0xfffff800`49000000 PsLoadedModuleList = 0xfffff800`49c2a2b0
  72. Debug session time: Tue Jun 30 10:58:03.391 2020 (UTC - 4:00)
  73. System Uptime: 1 days 20:02:38.026
  74.  
  75. BugCheck 162, {ffffb481d5a88080, ffffd68511313000, ffffffff, 0}
  76. Probably caused by : memory_corruption
  77. Followup: memory_corruption
  78.  
  79. KERNEL_AUTO_BOOST_INVALID_LOCK_RELEASE (162)
  80. A lock tracked by AutoBoost was released by a thread that did not own the lock.
  81. This is typically caused when some thread releases a lock on behalf of another
  82. thread (which is not legal with AutoBoost tracking enabled) or when some thread
  83. tries to release a lock it no longer owns.
  84.  
  85. Arguments:
  86. Arg1: ffffb481d5a88080, The address of the thread
  87. Arg2: ffffd68511313000, The lock address
  88. Arg3: 00000000ffffffff, The session ID of the thread
  89. Arg4: 0000000000000000, Reserved
  90.  
  91. Debugging Details:
  92. DUMP_CLASS: 1
  93. DUMP_QUALIFIER: 400
  94. DUMP_TYPE: 2
  95. CUSTOMER_CRASH_COUNT: 1
  96. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  97. BUGCHECK_STR: 0x162
  98.  
  99. PROCESS_NAME: DCv2.e
  100.  
  101. CURRENT_IRQL: 0
  102. LAST_CONTROL_TRANSFER: from fffff800493fabaa to fffff800493dda20
  103. STACK_TEXT:
  104. ffff8386`d904af48 fffff800`493fabaa : 00000000`00000162 ffffb481`d5a88080 ffffd685`11313000 00000000`ffffffff : nt!KeBugCheckEx
  105. ffff8386`d904af50 fffff800`495f6916 : ffffd684`e23e28b5 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExReleasePushLockEx+0x1d4d9a
  106. ffff8386`d904afb0 fffff800`49621557 : ffffd684`ee087bf0 ffffd684`ee087bf0 ffff8386`d904b1d0 fffff800`00000006 : nt!CmpPerformSingleKcbCacheLookup+0x306
  107. ffff8386`d904b040 fffff800`495f9a2a : ffff8386`d9040000 ffff8386`d904b100 ffff8386`00000006 00000000`00000000 : nt!CmpPerformCompleteKcbCacheLookup+0x77
  108. ffff8386`d904b0d0 fffff800`495f1e63 : ffffb481`0000001c ffff8386`d904b420 ffff8386`d904b3d8 ffffb481`d4717a20 : nt!CmpDoParseKey+0x2da
  109. ffff8386`d904b370 fffff800`495f554e : fffff800`495f1b01 00000000`00000000 ffffb481`d4717a20 00000000`6d4e6201 : nt!CmpParseKey+0x2c3
  110. ffff8386`d904b510 fffff800`495f0faa : ffffb481`d4717a00 ffff8386`d904b778 00000000`00000040 ffffb481`c08bc820 : nt!ObpLookupObjectName+0x3fe
  111. ffff8386`d904b6e0 fffff800`495f0d8c : 00000000`00000000 00000000`00000000 00000000`00000000 ffffb481`c08bc820 : nt!ObOpenObjectByNameEx+0x1fa
  112. ffff8386`d904b810 fffff800`495f08b1 : 000000a0`7a6be5c8 ffff8386`d904bb80 00000000`00000001 fffff800`4920198e : nt!ObOpenObjectByName+0x5c
  113. ffff8386`d904b860 fffff800`495efe9f : ffffb481`d5a88080 fffff800`4960b8af 00000000`00000000 000000a0`7a6be600 : nt!CmOpenKey+0x2c1
  114. ffff8386`d904bac0 fffff800`493ef378 : ffffb481`d5a88000 ffffb481`cfacc9e0 ffffffff`ffffd8f0 ffffb481`00000000 : nt!NtOpenKeyEx+0xf
  115. ffff8386`d904bb00 00007ff8`a008d184 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  116. 000000a0`7a6be4e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`a008d184
  117. STACK_COMMAND: kb
  118. CHKIMG_EXTENSION: !chkimg -lo 50 -d !FLTMGR
  119. fffff8004597cd05-fffff8004597cd06 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+35
  120. [ 48 ff:4c 8b ]
  121. fffff8004597cd0c-fffff8004597cd10 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+3c (+0x07)
  122. [ 0f 1f 44 00 00:e8 ff 5a 99 03 ]
  123. fffff8004597cd1a-fffff8004597cd1b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+4a (+0x0e)
  124. [ 48 ff:4c 8b ]
  125. fffff8004597cd21-fffff8004597cd25 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+51 (+0x07)
  126. [ 0f 1f 44 00 00:e8 da 63 8a 03 ]
  127. fffff8004597cd6a-fffff8004597cd6b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+9a (+0x49)
  128. [ 48 ff:4c 8b ]
  129. fffff8004597cd71-fffff8004597cd77 7 bytes - FLTMGR!DeleteStreamListCtrlCallback+a1 (+0x07)
  130. [ 0f 1f 44 00 00 48 ff:e8 da 5b 8a 03 4c 8b ]
  131. fffff8004597cd7d-fffff8004597cd81 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+ad (+0x0c)
  132. [ 0f 1f 44 00 00:e8 3e eb 97 03 ]
  133. 28 errors : !FLTMGR (fffff8004597cd05-fffff8004597cd81)
  134. MODULE_NAME: memory_corruption
  135.  
  136. IMAGE_NAME: memory_corruption
  137.  
  138. FOLLOWUP_NAME: memory_corruption
  139. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  140. MEMORY_CORRUPTOR: LARGE
  141. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  142. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  143. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  144. TARGET_TIME: 2020-06-30T14:58:03.000Z
  145. SUITE_MASK: 784
  146. PRODUCT_TYPE: 1
  147. USER_LCID: 0
  148. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  149. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  150. Followup: memory_corruption
  151.  
  152. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  153.  
  154. Jul 09 2017 - NTIOLib_X64.sys - !!! Overclocking Software - NTIO Library http://www.msi.com/ This file may be installed with other software such as MSI Live Update and that is OK.
  155. Jul 09 2017 - NTIOLib_X64.sys - !!! Overclocking Software - NTIO Library http://www.msi.com/ This file may be installed with other software such as MSI Live Update and that is OK.
  156. Jul 09 2017 - NTIOLib_X64.sys - !!! Overclocking Software - NTIO Library http://www.msi.com/ This file may be installed with other software such as MSI Live Update and that is OK.
  157. May 28 2018 - I2cHkBurn.sys - MSI Gaming App driver or FINTEK FitGpBus Device driver (Feature Integration Technology)
  158. May 13 2019 - Netwtw08.sys - Intel(R) Wireless Networking driver
  159. Jul 24 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  160. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  161. Oct 16 2019 - msio64.sys - MSI Gaming App driver
  162. Jan 17 2020 - Nahimic_Mirroring.sys - Nahimic driver https://www.nahimic.com/
  163. Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  164. Feb 12 2020 - e1r68x64.sys - Intel(R) Gigabit Adapter driver https://downloadcenter.intel.com/
  165. Apr 02 2020 - ibtusb.sys - Intel(R) Wireless Bluetooth(R) Filter driver (Intel Corporation)
  166. Apr 08 2020 - iqvsw64e.sys - Intel driver
  167. May 08 2020 - ene.sys - (Ptolemy Tech Co.) or ASUS RGB driver or Gigabyte RGB driver
  168. May 28 2020 - cfosspeed6.sys - cFosSpeed driver (cFos Software)
  169. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  170. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  171.  
  172. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  173.  
  174. Image path: \??\C:\Program Files (x86)\MSI\One Dragon Center\Lib\NTIOLib_X64.sys
  175. Image name: NTIOLib_X64.sys
  176. Search : https://www.google.com/search?q=NTIOLib_X64.sys
  177. ADA Info : !!! Overclocking Software - NTIO Library http://www.msi.com/ This file may be installed with other software such as MSI Live Update and that is OK.
  178. Timestamp : Sun Jul 9 2017
  179.  
  180. Image path: \??\C:\Program Files (x86)\MSI\One Dragon Center\Lib\SYS\NTIOLib_X64.sys
  181. Image name: NTIOLib_X64.sys
  182. Search : https://www.google.com/search?q=NTIOLib_X64.sys
  183. ADA Info : !!! Overclocking Software - NTIO Library http://www.msi.com/ This file may be installed with other software such as MSI Live Update and that is OK.
  184. Timestamp : Sun Jul 9 2017
  185.  
  186. Image path: \??\C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\NTIOLib_X64.sys
  187. Image name: NTIOLib_X64.sys
  188. Search : https://www.google.com/search?q=NTIOLib_X64.sys
  189. ADA Info : !!! Overclocking Software - NTIO Library http://www.msi.com/ This file may be installed with other software such as MSI Live Update and that is OK.
  190. Timestamp : Sun Jul 9 2017
  191.  
  192. Image path: \SystemRoot\system32\drivers\I2cHkBurn.sys
  193. Image name: I2cHkBurn.sys
  194. Search : https://www.google.com/search?q=I2cHkBurn.sys
  195. ADA Info : MSI Gaming App driver or FINTEK FitGpBus Device driver (Feature Integration Technology)
  196. Timestamp : Mon May 28 2018
  197.  
  198. Mapped memory image file: C:\ProgramData\dbg\sym\Netwtw08.sys\5CD9DF95910000\Netwtw08.sys
  199. Image path: \SystemRoot\System32\drivers\Netwtw08.sys
  200. Image name: Netwtw08.sys
  201. Search : https://www.google.com/search?q=Netwtw08.sys
  202. ADA Info : Intel(R) Wireless Networking driver
  203. Timestamp : Mon May 13 2019
  204. File version: 21.10.2.2
  205. Product version: 1.0.1.0
  206. File flags: 0 (Mask 3F)
  207. File OS: 40004 NT Win32
  208. File type: 3.6 Driver
  209. File date: 00000000.00000000
  210. CompanyName: Intel Corporation
  211. ProductName: Intel® Wireless WiFi Link Adapter
  212. InternalName: .sys
  213. OriginalFilename: .sys
  214. FileVersion: 21.10.2.2
  215. FileDescription: Intel® Wireless WiFi Link Driver
  216. LegalCopyright: Copyright © Intel Corporation 2011
  217. Comments: NDIS650_MINIPORT
  218.  
  219. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  220. Image name: AMDPCIDev.sys
  221. Search : https://www.google.com/search?q=AMDPCIDev.sys
  222. ADA Info : Advanced Micro Devices PCI Device driver
  223. Timestamp : Wed Jul 24 2019
  224.  
  225. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  226. Image name: amdgpio2.sys
  227. Search : https://www.google.com/search?q=amdgpio2.sys
  228. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  229. Timestamp : Sun Sep 29 2019
  230.  
  231. Image path: \??\C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\msio64.sys
  232. Image name: msio64.sys
  233. Search : https://www.google.com/search?q=msio64.sys
  234. ADA Info : MSI Gaming App driver
  235. Timestamp : Wed Oct 16 2019
  236.  
  237. Image path: \SystemRoot\System32\drivers\Nahimic_Mirroring.sys
  238. Image name: Nahimic_Mirroring.sys
  239. Search : https://www.google.com/search?q=Nahimic_Mirroring.sys
  240. ADA Info : Nahimic driver https://www.nahimic.com/
  241. Timestamp : Fri Jan 17 2020
  242.  
  243. Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
  244. Image name: UcmCxUcsiNvppc.sys
  245. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  246. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  247. Timestamp : Sun Jan 26 2020
  248.  
  249. Image path: \SystemRoot\System32\drivers\e1r68x64.sys
  250. Image name: e1r68x64.sys
  251. Search : https://www.google.com/search?q=e1r68x64.sys
  252. ADA Info : Intel(R) Gigabit Adapter driver https://downloadcenter.intel.com/
  253. Timestamp : Wed Feb 12 2020
  254.  
  255. Image path: \SystemRoot\System32\DriverStore\FileRepository\ibtusb.inf_amd64_94347ae3d824b51e\ibtusb.sys
  256. Image name: ibtusb.sys
  257. Search : https://www.google.com/search?q=ibtusb.sys
  258. ADA Info : Intel(R) Wireless Bluetooth(R) Filter driver (Intel Corporation)
  259. Timestamp : Thu Apr 2 2020
  260.  
  261. Image path: \??\C:\Windows\system32\Drivers\iqvsw64e.sys
  262. Image name: iqvsw64e.sys
  263. Search : https://www.google.com/search?q=iqvsw64e.sys
  264. ADA Info : Intel driver
  265. Timestamp : Wed Apr 8 2020
  266.  
  267. Image path: \??\C:\Windows\system32\drivers\ene.sys
  268. Image name: ene.sys
  269. Search : https://www.google.com/search?q=ene.sys
  270. ADA Info : (Ptolemy Tech Co.) or ASUS RGB driver or Gigabyte RGB driver
  271. Timestamp : Fri May 8 2020
  272.  
  273. Image path: \SystemRoot\system32\DRIVERS\cfosspeed6.sys
  274. Image name: cfosspeed6.sys
  275. Search : https://www.google.com/search?q=cfosspeed6.sys
  276. ADA Info : cFosSpeed driver (cFos Software)
  277. Timestamp : Thu May 28 2020
  278.  
  279. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  280. Image name: nvhda64v.sys
  281. Search : https://www.google.com/search?q=nvhda64v.sys
  282. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  283. Timestamp : Tue Jun 9 2020
  284.  
  285. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ccad5caddc3a3d35\nvlddmkm.sys
  286. Image name: nvlddmkm.sys
  287. Search : https://www.google.com/search?q=nvlddmkm.sys
  288. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  289. Timestamp : Sun Jun 21 2020
  290.  
  291. ====================== Dump #1: MICROSOFT DRIVERS ======================
  292.  
  293. ACPI.sys ACPI Driver for NT (Microsoft)
  294. acpiex.sys ACPIEx Driver (Microsoft)
  295. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  296. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  297. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  298. ahcache.sys Application Compatibility Cache (Microsoft)
  299. amdppm.sys Processor Device Driver
  300. bam.sys BAM Kernal driver (Microsoft)
  301. BasicDisplay.sys Basic Display driver (Microsoft)
  302. BasicRender.sys Basic Render driver (Microsoft)
  303. Beep.SYS BEEP driver (Microsoft)
  304. bindflt.sys Windows Bind Filter driver (Microsoft)
  305. BOOTVID.dll VGA Boot Driver (Microsoft)
  306. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  307. BthEnum.sys Bluetooth Bus Extender
  308. bthpan.sys Bluetooth Personal Area Networking
  309. BTHport.sys Bluetooth Bus driver (Microsoft)
  310. BTHUSB.sys Bluetooth Miniport driver (Microsoft)
  311. cdd.dll Canonical Display Driver (Microsoft)
  312. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  313. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  314. CI.dll Code Integrity Module (Microsoft)
  315. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  316. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  317. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  318. CLFS.SYS Common Log File System Driver (Microsoft)
  319. clipsp.sys CLIP Service (Microsoft)
  320. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  321. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  322. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  323. condrv.sys Console Driver (Microsoft)
  324. crashdmp.sys Crash Dump driver (Microsoft)
  325. dc1-controller.sys KMDF driver for DC1 Controller
  326. DevAuthE.sys Xbox Device Authentication Driver
  327. dfsc.sys DFS Namespace Client Driver (Microsoft)
  328. disk.sys PnP Disk Driver (Microsoft)
  329. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  330. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  331. dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  332. dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  333. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  334. dxgmms2.sys DirectX Graphics MMS
  335. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  336. fastfat.SYS Fast FAT File System Driver (Microsoft)
  337. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  338. fileinfo.sys FileInfo Filter Driver (Microsoft)
  339. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  340. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  341. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  342. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  343. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  344. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  345. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  346. HdAudio.sys High Definition Audio Function driver (Microsoft)
  347. HIDCLASS.SYS Hid Class Library (Microsoft)
  348. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  349. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  350. HTTP.sys HTTP Protocol Stack (Microsoft)
  351. intelpep.sys Intel Power Engine Plugin (Microsoft)
  352. IntelTA.sys Intel Telemetry Driver
  353. iorate.sys I/O rate control Filter (Microsoft)
  354. kbdclass.sys Keyboard Class Driver (Microsoft)
  355. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  356. kd.dll Local Kernal Debugger (Microsoft)
  357. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  358. ks.sys Kernal CSA Library (Microsoft)
  359. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  360. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  361. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  362. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  363. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  364. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  365. Microsoft.Bluetooth.Legacy.LEEnumerator.sys Microsoft Bluetooth Legacy LE Enumerator driver (Microsoft)
  366. mmcss.sys MMCSS Driver (Microsoft)
  367. monitor.sys Monitor Driver (Microsoft)
  368. mouclass.sys Mouse Class Driver (Microsoft)
  369. mouhid.sys HID Mouse Filter Driver (Microsoft)
  370. mountmgr.sys Mount Point Manager (Microsoft)
  371. MpKslDrv.sys Microsoft Anti-malware Protection driver
  372. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  373. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  374. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  375. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  376. Msfs.SYS Mailslot driver (Microsoft)
  377. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  378. msisadrv.sys ISA Driver (Microsoft)
  379. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  380. msquic.sys Windows QUIC Driver
  381. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  382. mssmbios.sys System Management BIOS driver (Microsoft)
  383. mup.sys Multiple UNC Provider driver (Microsoft)
  384. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  385. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  386. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  387. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  388. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  389. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  390. NDProxy.sys NDIS Proxy driver (Microsoft)
  391. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  392. netbios.sys NetBIOS Interface driver (Microsoft)
  393. netbt.sys MBT Transport driver (Microsoft)
  394. NETIO.SYS Network I/O Subsystem (Microsoft)
  395. Npfs.SYS NPFS driver (Microsoft)
  396. npsvctrig.sys Named pipe service triggers (Microsoft)
  397. nsiproxy.sys NSI Proxy driver (Microsoft)
  398. Ntfs.sys NT File System Driver (Microsoft)
  399. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  400. ntosext.sys NTOS Extension Host driver (Microsoft)
  401. Null.SYS NULL Driver (Microsoft)
  402. nwifi.sys NativeWiFi Miniport Driver (Microsoft)
  403. pacer.sys QoS Packet Scheduler (Microsoft)
  404. partmgr.sys Partition driver (Microsoft)
  405. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  406. pcw.sys Performance Counter Driver (Microsoft)
  407. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  408. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  409. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  410. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  411. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  412. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  413. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  414. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  415. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  416. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  417. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  418. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  419. rdyboost.sys ReadyBoost Driver (Microsoft)
  420. rfcomm.sys Bluetooth RFCOMM driver (Microsoft)
  421. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  422. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  423. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  424. spaceport.sys Storage Spaces driver (Microsoft)
  425. srv2.sys Smb 2.0 Server driver (Microsoft)
  426. srvnet.sys Server Network driver (Microsoft)
  427. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  428. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  429. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  430. storqosflt.sys Storage QoS Filter driver (Microsoft)
  431. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  432. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  433. tcpip.sys TCP/IP Protocol driver (Microsoft)
  434. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  435. TDI.SYS TDI Wrapper driver (Microsoft)
  436. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  437. tm.sys Kernel Transaction Manager driver (Microsoft)
  438. UcmCx.sys USB Connector Manager KMDF Class Extension
  439. ucx01000.sys USB Controller Extension (Microsoft)
  440. UEFI.sys UEFI NT driver (Microsoft)
  441. umbus.sys User-Mode Bus Enumerator (Microsoft)
  442. umpass.sys Generic pass-through driver (Microsoft)
  443. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  444. USBD.SYS Universal Serial Bus Driver (Microsoft)
  445. UsbHub3.sys USB3 HUB driver (Microsoft)
  446. USBXHCI.SYS USB XHCI driver (Microsoft)
  447. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  448. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  449. volmgr.sys Volume Manager Driver (Microsoft)
  450. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  451. volsnap.sys Volume Shadow Copy driver (Microsoft)
  452. volume.sys Volume driver (Microsoft)
  453. vwifibus.sys Virtual Wireless Bus driver (Microsoft)
  454. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  455. vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
  456. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  457. watchdog.sys Watchdog driver (Microsoft)
  458. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  459. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  460. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  461. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  462. wdiwifi.sys WDI Driver Framework driver (Microsoft)
  463. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  464. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  465. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  466. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  467. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  468. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  469. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  470. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  471. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  472. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  473. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  474. Wof.sys Windows Overlay Filter (Microsoft)
  475. WppRecorder.sys WPP Trace Recorder (Microsoft)
  476. xboxgip.sys Game Input Protocol Driver
  477. xinputhid.sys XINPUT filter driver for HID
  478.  
  479. ====================== Dump #1: UNLOADED MODULES =======================
  480.  
  481. fffff800`9e910000 fffff800`9e918000 amifldrv64.s
  482. fffff800`5c130000 fffff800`5c1c6000 e1r68x64.sys
  483. fffff800`5c090000 fffff800`5c126000 e1r68x64.sys
  484. fffff800`5b300000 fffff800`5b30c000 umpass.sys
  485. fffff800`55720000 fffff800`557b5000 e1r68x64.sys
  486. fffff800`5c1a0000 fffff800`5c1b4000 xinputhid.sy
  487. fffff800`5c1f0000 fffff800`5c1ff000 hiber_storpo
  488. fffff800`5b290000 fffff800`5b2bc000 hiber_stornv
  489. fffff800`5b2c0000 fffff800`5b2de000 hiber_dumpfv
  490. fffff800`5c1c0000 fffff800`5c1cc000 umpass.sys
  491. fffff800`55c00000 fffff800`55ee7000 BEDaisy.sys
  492. fffff800`5c110000 fffff800`5c11c000 umpass.sys
  493. fffff800`5c0f0000 fffff800`5c104000 xinputhid.sy
  494. fffff800`5c140000 fffff800`5c14f000 hiber_storpo
  495. fffff800`5c150000 fffff800`5c17c000 hiber_stornv
  496. fffff800`5c180000 fffff800`5c19e000 hiber_dumpfv
  497. fffff800`5c120000 fffff800`5c131000 MpKslDrv.sys
  498. fffff800`55c00000 fffff800`55eed000 BEDaisy.sys
  499. fffff800`5b330000 fffff800`5b341000 MpKsld845e74
  500. fffff800`5c090000 fffff800`5c09f000 hiber_storpo
  501. fffff800`5c0a0000 fffff800`5c0cc000 hiber_stornv
  502. fffff800`5c0d0000 fffff800`5c0ee000 hiber_dumpfv
  503. fffff800`5b300000 fffff800`5b314000 xinputhid.sy
  504. fffff800`55570000 fffff800`55581000 MpKslDrv.sys
  505. fffff800`5b320000 fffff800`5b32c000 umpass.sys
  506. fffff800`5a710000 fffff800`5a724000 xinputhid.sy
  507. fffff800`5b2a0000 fffff800`5b2af000 hiber_storpo
  508. fffff800`5b2b0000 fffff800`5b2dc000 hiber_stornv
  509. fffff800`5b2e0000 fffff800`5b2fe000 hiber_dumpfv
  510. fffff800`5b290000 fffff800`5b29c000 umpass.sys
  511. fffff800`551c0000 fffff800`551cf000 dump_storpor
  512. fffff800`54c00000 fffff800`54c2c000 dump_stornvm
  513. fffff800`54c50000 fffff800`54c6e000 dump_dumpfve
  514. fffff800`555d0000 fffff800`555ec000 dam.sys
  515. fffff800`4b3a0000 fffff800`4b3b1000 WdBoot.sys
  516. fffff800`4c450000 fffff800`4c460000 hwpolicy.sys
  517.  
  518. ====================== Dump #1: BIOS INFORMATION =======================
  519.  
  520. [SMBIOS Data Tables v2.8]
  521. [DMI Version - 0]
  522. [2.0 Calling Convention - No]
  523. [Table Size - 2465 bytes]
  524. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  525. Vendor American Megatrends Inc.
  526. BIOS Version 1.72
  527. BIOS Starting Address Segment f000
  528. BIOS Release Date 04/22/2020
  529. BIOS ROM Size 1000000
  530. BIOS Characteristics
  531. 07: - PCI Supported
  532. 11: - Upgradeable FLASH BIOS
  533. 12: - BIOS Shadowing Supported
  534. 15: - CD-Boot Supported
  535. 16: - Selectable Boot Supported
  536. 17: - BIOS ROM Socketed
  537. 19: - EDD Supported
  538. 23: - 1.2MB Floppy Supported
  539. 24: - 720KB Floppy Supported
  540. 25: - 2.88MB Floppy Supported
  541. 26: - Print Screen Device Supported
  542. 27: - Keyboard Services Supported
  543. 28: - Serial Services Supported
  544. 29: - Printer Services Supported
  545. 32: - BIOS Vendor Reserved
  546. BIOS Characteristic Extensions
  547. 00: - ACPI Supported
  548. 01: - USB Legacy Supported
  549. 08: - BIOS Boot Specification Supported
  550. 10: - Specification Reserved
  551. 11: - Specification Reserved
  552. BIOS Major Revision 5
  553. BIOS Minor Revision 14
  554. EC Firmware Major Revision 255
  555. EC Firmware Minor Revision 255
  556. [System Information (Type 1) - Length 27 - Handle 0001h]
  557. Manufacturer Micro-Star International Co., Ltd.
  558. Product Name MS-7B93
  559. Version 1.0
  560. UUID 00000000-0000-0000-0000-000000000000
  561. Wakeup Type Power Switch
  562. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  563. Manufacturer Micro-Star International Co., Ltd.
  564. Product MPG X570 GAMING PRO CARBON WIFI (MS-7B93)
  565. Version 1.0
  566. Feature Flags 09h
  567. -469322016: - -469321968: - ÷7!ü
  568. Chassis Handle 0003h
  569. Board Type 0ah - Processor/Memory Module
  570. Number of Child Handles 0
  571. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  572. Manufacturer Micro-Star International Co., Ltd.
  573. Chassis Type Desktop
  574. Version 1.0
  575. Bootup State Safe
  576. Power Supply State Safe
  577. Thermal State Safe
  578. Security Status None
  579. OEM Defined 0
  580. Height 0U
  581. Number of Power Cords 1
  582. Number of Contained Elements 0
  583. Contained Element Size 3
  584. [OEM Strings (Type 11) - Length 5 - Handle 000bh]
  585. Number of Strings 1
  586. [System Configuration Options (Type 12) - Length 5 - Handle 000ch]
  587. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000eh]
  588. [Physical Memory Array (Type 16) - Length 23 - Handle 000fh]
  589. Location 03h - SystemBoard/Motherboard
  590. Use 03h - System Memory
  591. Memory Error Correction 03h - None
  592. Maximum Capacity 134217728KB
  593. Memory Error Inf Handle 000eh
  594. Number of Memory Devices 4
  595. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0010h]
  596. Starting Address 00000000h
  597. Ending Address 0037ffffh
  598. Memory Array Handle 000fh
  599. Partition Width 02
  600. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0011h]
  601. Starting Address 00400000h
  602. Ending Address 0107ffffh
  603. Memory Array Handle 000fh
  604. Partition Width 02
  605. [Cache Information (Type 7) - Length 19 - Handle 0012h]
  606. Socket Designation L1 - Cache
  607. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  608. Maximum Cache Size 0180h - 384K
  609. Installed Size 0180h - 384K
  610. Supported SRAM Type 0010h - Pipeline-Burst
  611. Current SRAM Type 0010h - Pipeline-Burst
  612. Cache Speed 1ns
  613. Error Correction Type Specification Reserved
  614. System Cache Type Unified
  615. Associativity 8-way Set-Associative
  616. [Cache Information (Type 7) - Length 19 - Handle 0013h]
  617. Socket Designation L2 - Cache
  618. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  619. Maximum Cache Size 0c00h - 3072K
  620. Installed Size 0c00h - 3072K
  621. Supported SRAM Type 0010h - Pipeline-Burst
  622. Current SRAM Type 0010h - Pipeline-Burst
  623. Cache Speed 1ns
  624. Error Correction Type Specification Reserved
  625. System Cache Type Unified
  626. Associativity 8-way Set-Associative
  627. [Cache Information (Type 7) - Length 19 - Handle 0014h]
  628. Socket Designation L3 - Cache
  629. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  630. Maximum Cache Size 8200h - 32768K
  631. Installed Size 8200h - 32768K
  632. Supported SRAM Type 0010h - Pipeline-Burst
  633. Current SRAM Type 0010h - Pipeline-Burst
  634. Cache Speed 1ns
  635. Error Correction Type Specification Reserved
  636. System Cache Type Unified
  637. Associativity 16-way Set-Associative
  638. [Processor Information (Type 4) - Length 48 - Handle 0015h]
  639. Socket Designation AM4
  640. Processor Type Central Processor
  641. Processor Family 6bh - Specification Reserved
  642. Processor Manufacturer Advanced Micro Devices, Inc.
  643. Processor ID 100f8700fffb8b17
  644. Processor Version AMD Ryzen 5 3600 6-Core Processor
  645. Processor Voltage 8bh - 1.1V
  646. External Clock 100MHz
  647. Max Speed 4200MHz
  648. Current Speed 3600MHz
  649. Status Enabled Populated
  650. Processor Upgrade Specification Reserved
  651. L1 Cache Handle 0012h
  652. L2 Cache Handle 0013h
  653. L3 Cache Handle 0014h
  654. Part Number Unknown
  655. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
  656. [Memory Device (Type 17) - Length 40 - Handle 0017h]
  657. Physical Memory Array Handle 000fh
  658. Memory Error Info Handle 0016h
  659. Form Factor 02h - Unknown
  660. Device Locator DIMM 0
  661. Bank Locator P0 CHANNEL A
  662. Memory Type 02h - Unknown
  663. Type Detail 0004h - Unknown
  664. Speed 3000MHz
  665. Manufacturer Unknown
  666. Part Number Unknown
  667. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0018h]
  668. [Memory Device (Type 17) - Length 40 - Handle 0019h]
  669. Physical Memory Array Handle 000fh
  670. Memory Error Info Handle 0018h
  671. Total Width 64 bits
  672. Data Width 64 bits
  673. Size 8192MB
  674. Form Factor 09h - DIMM
  675. Device Locator DIMM 1
  676. Bank Locator P0 CHANNEL A
  677. Memory Type 1ah - Specification Reserved
  678. Type Detail 4080h - Synchronous
  679. Speed 3000MHz
  680. Manufacturer Unknown
  681. Part Number CMK16GX4M2B3000C15
  682. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  683. Starting Address 00000000h
  684. Ending Address 00ffffffh
  685. Memory Device Handle 0019h
  686. Mem Array Mapped Adr Handle 0011h
  687. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 001bh]
  688. [Memory Device (Type 17) - Length 40 - Handle 001ch]
  689. Physical Memory Array Handle 000fh
  690. Memory Error Info Handle 001bh
  691. Form Factor 02h - Unknown
  692. Device Locator DIMM 0
  693. Bank Locator P0 CHANNEL B
  694. Memory Type 02h - Unknown
  695. Type Detail 0004h - Unknown
  696. Speed 3000MHz
  697. Manufacturer Unknown
  698. Part Number Unknown
  699. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 001dh]
  700. [Memory Device (Type 17) - Length 40 - Handle 001eh]
  701. Physical Memory Array Handle 000fh
  702. Memory Error Info Handle 001dh
  703. Total Width 64 bits
  704. Data Width 64 bits
  705. Size 8192MB
  706. Form Factor 09h - DIMM
  707. Device Locator DIMM 1
  708. Bank Locator P0 CHANNEL B
  709. Memory Type 1ah - Specification Reserved
  710. Type Detail 4080h - Synchronous
  711. Speed 3000MHz
  712. Manufacturer Unknown
  713. Part Number CMK16GX4M2B3000C15
  714. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001fh]
  715. Starting Address 00000000h
  716. Ending Address 00ffffffh
  717. Memory Device Handle 001eh
  718. Mem Array Mapped Adr Handle 0011h
  719.  
  720. ========================== Dump #1: Extra #1 ===========================
  721.  
  722. 3: kd> !verifier
  723. Verify Flags Level 0x00000000
  724. STANDARD FLAGS:
  725. [X] (0x00000000) Automatic Checks
  726. [ ] (0x00000001) Special pool
  727. [ ] (0x00000002) Force IRQL checking
  728. [ ] (0x00000008) Pool tracking
  729. [ ] (0x00000010) I/O verification
  730. [ ] (0x00000020) Deadlock detection
  731. [ ] (0x00000080) DMA checking
  732. [ ] (0x00000100) Security checks
  733. [ ] (0x00000800) Miscellaneous checks
  734. [ ] (0x00020000) DDI compliance checking
  735. ADDITIONAL FLAGS:
  736. [ ] (0x00000004) Randomized low resources simulation
  737. [ ] (0x00000200) Force pending I/O requests
  738. [ ] (0x00000400) IRP logging
  739. [ ] (0x00002000) Invariant MDL checking for stack
  740. [ ] (0x00004000) Invariant MDL checking for driver
  741. [ ] (0x00008000) Power framework delay fuzzing
  742. [ ] (0x00010000) Port/miniport interface checking
  743. [ ] (0x00040000) Systematic low resources simulation
  744. [ ] (0x00080000) DDI compliance checking (additional)
  745. [ ] (0x00200000) NDIS/WIFI verification
  746. [ ] (0x00800000) Kernel synchronization delay fuzzing
  747. [ ] (0x01000000) VM switch verification
  748. [ ] (0x02000000) Code integrity checks
  749. [X] Indicates flag is enabled
  750. Summary of All Verifier Statistics
  751. RaiseIrqls 0x0
  752. AcquireSpinLocks 0x0
  753. Synch Executions 0x0
  754. Trims 0x0
  755. Pool Allocations Attempted 0x0
  756. Pool Allocations Succeeded 0x0
  757. Pool Allocations Succeeded SpecialPool 0x0
  758. Pool Allocations With NO TAG 0x0
  759. Pool Allocations Failed 0x0
  760. Current paged pool allocations 0x0 for 00000000 bytes
  761. Peak paged pool allocations 0x0 for 00000000 bytes
  762. Current nonpaged pool allocations 0x0 for 00000000 bytes
  763. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  764.  
  765. ========================== Dump #1: Extra #2 ===========================
  766.  
  767. 3: kd> !thread
  768. THREAD ffffb481d5a88080 Cid 093c.2dc0 Teb: 000000a07387a000 Win32Thread: 0000000000000000 RUNNING on processor 3
  769. Not impersonating
  770. GetUlongFromAddress: unable to read from fffff80049c1143c
  771. Owning Process ffffb481cef47080 Image: DCv2.e
  772. Attached Process N/A Image: N/A
  773. fffff78000000000: Unable to get shared data
  774. Wait Start TickCount 10147713
  775. Context Switch Count 42535 IdealProcessor: 7
  776. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  777. UserTime 00:00:00.000
  778. KernelTime 00:00:00.000
  779. Win32 Start Address 0x00007ff8727bb530
  780. Stack Init ffff8386d904bc90 Current ffff8386d904b490
  781. Base ffff8386d904c000 Limit ffff8386d9046000 Call 0000000000000000
  782. Priority 8 BasePriority 6 PriorityDecrement 2 IoPriority 1 PagePriority 2
  783. Child-SP RetAddr : Args to Child : Call Site
  784. ffff8386`d904af48 fffff800`493fabaa : 00000000`00000162 ffffb481`d5a88080 ffffd685`11313000 00000000`ffffffff : nt!KeBugCheckEx
  785. ffff8386`d904af50 fffff800`495f6916 : ffffd684`e23e28b5 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExReleasePushLockEx+0x1d4d9a
  786. ffff8386`d904afb0 fffff800`49621557 : ffffd684`ee087bf0 ffffd684`ee087bf0 ffff8386`d904b1d0 fffff800`00000006 : nt!CmpPerformSingleKcbCacheLookup+0x306
  787. ffff8386`d904b040 fffff800`495f9a2a : ffff8386`d9040000 ffff8386`d904b100 ffff8386`00000006 00000000`00000000 : nt!CmpPerformCompleteKcbCacheLookup+0x77
  788. ffff8386`d904b0d0 fffff800`495f1e63 : ffffb481`0000001c ffff8386`d904b420 ffff8386`d904b3d8 ffffb481`d4717a20 : nt!CmpDoParseKey+0x2da
  789. ffff8386`d904b370 fffff800`495f554e : fffff800`495f1b01 00000000`00000000 ffffb481`d4717a20 00000000`6d4e6201 : nt!CmpParseKey+0x2c3
  790. ffff8386`d904b510 fffff800`495f0faa : ffffb481`d4717a00 ffff8386`d904b778 00000000`00000040 ffffb481`c08bc820 : nt!ObpLookupObjectName+0x3fe
  791. ffff8386`d904b6e0 fffff800`495f0d8c : 00000000`00000000 00000000`00000000 00000000`00000000 ffffb481`c08bc820 : nt!ObOpenObjectByNameEx+0x1fa
  792. ffff8386`d904b810 fffff800`495f08b1 : 000000a0`7a6be5c8 ffff8386`d904bb80 00000000`00000001 fffff800`4920198e : nt!ObOpenObjectByName+0x5c
  793. ffff8386`d904b860 fffff800`495efe9f : ffffb481`d5a88080 fffff800`4960b8af 00000000`00000000 000000a0`7a6be600 : nt!CmOpenKey+0x2c1
  794. ffff8386`d904bac0 fffff800`493ef378 : ffffb481`d5a88000 ffffb481`cfacc9e0 ffffffff`ffffd8f0 ffffb481`00000000 : nt!NtOpenKeyEx+0xf
  795. ffff8386`d904bb00 00007ff8`a008d184 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffff8386`d904bb00)
  796. 000000a0`7a6be4e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`a008d184
  797.  
  798.  
  799. ========================================================================
  800. ======================= Dump #2: ANALYZE VERBOSE =======================
  801. ======================= File: 063020-7406-02.dmp =======================
  802. ========================================================================
  803.  
  804. Mini Kernel Dump File: Only registers and stack trace are available
  805. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  806. Kernel base = 0xfffff806`80400000 PsLoadedModuleList = 0xfffff806`8102a2b0
  807. Debug session time: Tue Jun 30 11:56:03.468 2020 (UTC - 4:00)
  808. System Uptime: 0 days 0:57:30.102
  809.  
  810. BugCheck 139, {1e, ffffec04f97eca90, ffffec04f97ec9e8, 0}
  811. Probably caused by : memory_corruption
  812. Followup: memory_corruption
  813.  
  814. KERNEL_SECURITY_CHECK_FAILURE (139)
  815. A kernel component has corrupted a critical data structure. The corruption
  816. could potentially allow a malicious user to gain control of this machine.
  817.  
  818. Arguments:
  819. Arg1: 000000000000001e, Type of memory safety violation
  820. Arg2: ffffec04f97eca90, Address of the trap frame for the exception that caused the bugcheck
  821. Arg3: ffffec04f97ec9e8, Address of the exception record for the exception that caused the bugcheck
  822. Arg4: 0000000000000000, Reserved
  823.  
  824. Debugging Details:
  825. DUMP_CLASS: 1
  826. DUMP_QUALIFIER: 400
  827. DUMP_TYPE: 2
  828. TRAP_FRAME: ffffec04f97eca90 -- (.trap 0xffffec04f97eca90)
  829. NOTE: The trap frame does not contain all registers.
  830. Some register values may be zeroed or incorrect.
  831. rax=0000000000000005 rbx=0000000000000000 rcx=000000000000001e
  832. rdx=fffff806810fcc80 rsi=0000000000000000 rdi=0000000000000000
  833. rip=fffff806808628db rsp=ffffec04f97ecc20 rbp=ffffdb812fcd5180
  834. r8=0000000000000000 r9=ffffec04f97ecfb0 r10=0000000000000000
  835. r11=000000000000000e r12=0000000000000000 r13=0000000000000000
  836. r14=0000000000000000 r15=0000000000000000
  837. iopl=0 nv up ei pl zr na po nc
  838. nt!KeQueryValuesThread+0x17e62b:
  839. fffff806`808628db cd29 int 29h
  840. Resetting default scope
  841. EXCEPTION_RECORD: ffffec04f97ec9e8 -- (.exr 0xffffec04f97ec9e8)
  842. ExceptionAddress: fffff806808628db (nt!KeQueryValuesThread+0x000000000017e62b)
  843. ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  844. ExceptionFlags: 00000001
  845. NumberParameters: 1
  846. Parameter[0]: 000000000000001e
  847. Subcode: 0x1e FAST_FAIL_INVALID_NEXT_THREAD
  848. CUSTOMER_CRASH_COUNT: 2
  849. BUGCHECK_STR: 0x139
  850.  
  851. PROCESS_NAME: steam.exe
  852.  
  853. CURRENT_IRQL: 2
  854. ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  855. EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  856. EXCEPTION_CODE_STR: c0000409
  857. EXCEPTION_PARAMETER1: 000000000000001e
  858. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  859. LAST_CONTROL_TRANSFER: from fffff806807ef929 to fffff806807dda20
  860. STACK_TEXT:
  861. ffffec04`f97ec768 fffff806`807ef929 : 00000000`00000139 00000000`0000001e ffffec04`f97eca90 ffffec04`f97ec9e8 : nt!KeBugCheckEx
  862. ffffec04`f97ec770 fffff806`807efd50 : fffff806`80751800 fffff806`80712284 ffff9507`96f96c98 fffff806`806ec455 : nt!KiBugCheckDispatch+0x69
  863. ffffec04`f97ec8b0 fffff806`807ee0e3 : 00000000`00000000 00000000`00000000 ffffcb0d`2cc69060 00000000`000001f0 : nt!KiFastFailDispatch+0xd0
  864. ffffec04`f97eca90 fffff806`808628db : ffff9507`8d012880 01f000d0`000000d0 0064006e`00000000 005c0073`0077006f : nt!KiRaiseSecurityCheckFailure+0x323
  865. ffffec04`f97ecc20 fffff806`80a95a31 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeQueryValuesThread+0x17e62b
  866. ffffec04`f97ecca0 fffff806`80a956c2 : ffff9507`9bf4d660 ffff9507`9bf4d8e0 ffff9507`9d76d080 00000000`00000002 : nt!PsQueryStatisticsProcess+0x111
  867. ffffec04`f97ecd20 fffff806`809f8071 : 00000000`00000002 ffff9507`9bf4d080 00000000`ffffffff 00000000`00000000 : nt!ExpCopyProcessInfo+0x42
  868. ffffec04`f97ecda0 fffff806`809fbfc3 : 00000000`00f10000 00000000`00041e30 ffffec04`f97ed8e8 00000000`00000000 : nt!ExpGetProcessInformation+0x9f1
  869. ffffec04`f97ed400 fffff806`809fb6a7 : ffff9507`9d76d080 00000000`00000000 00000000`00000000 00000000`09bff860 : nt!ExpQuerySystemInformation+0x7d3
  870. ffffec04`f97edac0 fffff806`807ef378 : ffff9507`9d760000 ffff9507`9aa25080 ffffec04`f97edb18 ffffffff`ff676980 : nt!NtQuerySystemInformation+0x37
  871. ffffec04`f97edb00 00007ffc`c954b454 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  872. 00000000`09afe5e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`c954b454
  873. STACK_COMMAND: kb
  874. CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32kbase
  875. fffff7471da2aecc-fffff7471da2aecd 2 bytes - win32kbase!GreSetDCOwnerEx+6c
  876. [ 48 ff:4c 8b ]
  877. fffff7471da2aed3-fffff7471da2aed6 4 bytes - win32kbase!GreSetDCOwnerEx+73 (+0x07)
  878. [ 0f 1f 44 00:e8 48 a5 2b ]
  879. fffff7471da2aedb-fffff7471da2aedc 2 bytes - win32kbase!GreSetDCOwnerEx+7b (+0x08)
  880. [ 48 ff:4c 8b ]
  881. fffff7471da2aee2-fffff7471da2aee5 4 bytes - win32kbase!GreSetDCOwnerEx+82 (+0x07)
  882. [ 0f 1f 44 00:e8 39 a5 2b ]
  883. fffff7471da2af02-fffff7471da2af03 2 bytes - win32kbase!GreSetDCOwnerEx+a2 (+0x20)
  884. [ 48 ff:4c 8b ]
  885. fffff7471da2af09-fffff7471da2af0c 4 bytes - win32kbase!GreSetDCOwnerEx+a9 (+0x07)
  886. [ 0f 1f 44 00:e8 12 a5 2b ]
  887. fffff7471da2af0e-fffff7471da2af0f 2 bytes - win32kbase!GreSetDCOwnerEx+ae (+0x05)
  888. [ 48 ff:4c 8b ]
  889. fffff7471da2af15-fffff7471da2af18 4 bytes - win32kbase!GreSetDCOwnerEx+b5 (+0x07)
  890. [ 0f 1f 44 00:e8 06 a5 2b ]
  891. fffff7471dc8b167-fffff7471dc8b168 2 bytes - win32kbase!TraceLoggingRegisterEx_EtwRegister_EtwSetInformation+6b
  892. [ 48 ff:4c 8b ]
  893. fffff7471dc8b16e-fffff7471dc8b171 4 bytes - win32kbase!TraceLoggingRegisterEx_EtwRegister_EtwSetInformation+72 (+0x07)
  894. [ 0f 1f 44 00:e8 ad a2 05 ]
  895. fffff7471dc8b1dc-fffff7471dc8b1dd 2 bytes - win32kbase!CreateTlgAggregateSession+40 (+0x6e)
  896. [ 48 ff:4c 8b ]
  897. fffff7471dc8b1e3-fffff7471dc8b1e6 4 bytes - win32kbase!CreateTlgAggregateSession+47 (+0x07)
  898. [ 0f 1f 44 00:e8 38 a2 05 ]
  899. fffff7471dc8b545-fffff7471dc8b54a 6 bytes - win32kbase!tlgEnableCallback+45 (+0x362)
  900. [ ff 15 6d 8a ff ff:e8 56 9d 05 00 90 ]
  901. fffff7471dc8b5c8-fffff7471dc8b5c9 2 bytes - win32kbase!WmsgpPostMessage+4c (+0x83)
  902. [ 48 ff:4c 8b ]
  903. fffff7471dc8b5cf-fffff7471dc8b5d2 4 bytes - win32kbase!WmsgpPostMessage+53 (+0x07)
  904. [ 0f 1f 44 00:e8 4c 9e 05 ]
  905. fffff7471dc8b5e6-fffff7471dc8b5e7 2 bytes - win32kbase!WmsgpPostMessage+6a (+0x17)
  906. [ 48 ff:4c 8b ]
  907. fffff7471dc8b5ed-fffff7471dc8b5f0 4 bytes - win32kbase!WmsgpPostMessage+71 (+0x07)
  908. [ 0f 1f 44 00:e8 2e 9e 05 ]
  909. 54 errors : !win32kbase (fffff7471da2aecc-fffff7471dc8b5f0)
  910. MODULE_NAME: memory_corruption
  911.  
  912. IMAGE_NAME: memory_corruption
  913.  
  914. FOLLOWUP_NAME: memory_corruption
  915. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  916. MEMORY_CORRUPTOR: LARGE
  917. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  918. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  919. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  920. TARGET_TIME: 2020-06-30T15:56:03.000Z
  921. SUITE_MASK: 784
  922. PRODUCT_TYPE: 1
  923. USER_LCID: 0
  924. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  925. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  926. Followup: memory_corruption
  927.  
  928. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  929.  
  930. May 13 2019 - Netwtw08.sys - Intel(R) Wireless Networking driver
  931. Jul 24 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  932. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  933. Jan 17 2020 - Nahimic_Mirroring.sys - Nahimic driver https://www.nahimic.com/
  934. Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  935. Feb 12 2020 - e1r68x64.sys - Intel(R) Gigabit Adapter driver https://downloadcenter.intel.com/
  936. Apr 02 2020 - ibtusb.sys - Intel(R) Wireless Bluetooth(R) Filter driver (Intel Corporation)
  937. Apr 08 2020 - iqvsw64e.sys - Intel driver
  938. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  939. Jun 21 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  940.  
  941. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  942.  
  943. Mapped memory image file: C:\ProgramData\dbg\sym\Netwtw08.sys\5CD9DF95910000\Netwtw08.sys
  944. Image path: \SystemRoot\System32\drivers\Netwtw08.sys
  945. Image name: Netwtw08.sys
  946. Search : https://www.google.com/search?q=Netwtw08.sys
  947. ADA Info : Intel(R) Wireless Networking driver
  948. Timestamp : Mon May 13 2019
  949. File version: 21.10.2.2
  950. Product version: 1.0.1.0
  951. File flags: 0 (Mask 3F)
  952. File OS: 40004 NT Win32
  953. File type: 3.6 Driver
  954. File date: 00000000.00000000
  955. CompanyName: Intel Corporation
  956. ProductName: Intel® Wireless WiFi Link Adapter
  957. InternalName: .sys
  958. OriginalFilename: .sys
  959. FileVersion: 21.10.2.2
  960. FileDescription: Intel® Wireless WiFi Link Driver
  961. LegalCopyright: Copyright © Intel Corporation 2011
  962. Comments: NDIS650_MINIPORT
  963.  
  964. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  965. Image name: AMDPCIDev.sys
  966. Search : https://www.google.com/search?q=AMDPCIDev.sys
  967. ADA Info : Advanced Micro Devices PCI Device driver
  968. Timestamp : Wed Jul 24 2019
  969.  
  970. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  971. Image name: amdgpio2.sys
  972. Search : https://www.google.com/search?q=amdgpio2.sys
  973. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  974. Timestamp : Sun Sep 29 2019
  975.  
  976. Image path: \SystemRoot\System32\drivers\Nahimic_Mirroring.sys
  977. Image name: Nahimic_Mirroring.sys
  978. Search : https://www.google.com/search?q=Nahimic_Mirroring.sys
  979. ADA Info : Nahimic driver https://www.nahimic.com/
  980. Timestamp : Fri Jan 17 2020
  981.  
  982. Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
  983. Image name: UcmCxUcsiNvppc.sys
  984. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  985. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  986. Timestamp : Sun Jan 26 2020
  987.  
  988. Image path: \SystemRoot\System32\drivers\e1r68x64.sys
  989. Image name: e1r68x64.sys
  990. Search : https://www.google.com/search?q=e1r68x64.sys
  991. ADA Info : Intel(R) Gigabit Adapter driver https://downloadcenter.intel.com/
  992. Timestamp : Wed Feb 12 2020
  993.  
  994. Image path: \SystemRoot\System32\DriverStore\FileRepository\ibtusb.inf_amd64_94347ae3d824b51e\ibtusb.sys
  995. Image name: ibtusb.sys
  996. Search : https://www.google.com/search?q=ibtusb.sys
  997. ADA Info : Intel(R) Wireless Bluetooth(R) Filter driver (Intel Corporation)
  998. Timestamp : Thu Apr 2 2020
  999.  
  1000. Image path: \??\C:\Windows\system32\Drivers\iqvsw64e.sys
  1001. Image name: iqvsw64e.sys
  1002. Search : https://www.google.com/search?q=iqvsw64e.sys
  1003. ADA Info : Intel driver
  1004. Timestamp : Wed Apr 8 2020
  1005.  
  1006. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1007. Image name: nvhda64v.sys
  1008. Search : https://www.google.com/search?q=nvhda64v.sys
  1009. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1010. Timestamp : Tue Jun 9 2020
  1011.  
  1012. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ccad5caddc3a3d35\nvlddmkm.sys
  1013. Image name: nvlddmkm.sys
  1014. Search : https://www.google.com/search?q=nvlddmkm.sys
  1015. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1016. Timestamp : Sun Jun 21 2020
  1017.  
  1018. ====================== Dump #2: MICROSOFT DRIVERS ======================
  1019.  
  1020. ACPI.sys ACPI Driver for NT (Microsoft)
  1021. acpiex.sys ACPIEx Driver (Microsoft)
  1022. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1023. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1024. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1025. ahcache.sys Application Compatibility Cache (Microsoft)
  1026. amdppm.sys Processor Device Driver
  1027. bam.sys BAM Kernal driver (Microsoft)
  1028. BasicDisplay.sys Basic Display driver (Microsoft)
  1029. BasicRender.sys Basic Render driver (Microsoft)
  1030. Beep.SYS BEEP driver (Microsoft)
  1031. bindflt.sys Windows Bind Filter driver (Microsoft)
  1032. BOOTVID.dll VGA Boot Driver (Microsoft)
  1033. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1034. BthEnum.sys Bluetooth Bus Extender
  1035. bthpan.sys Bluetooth Personal Area Networking
  1036. BTHport.sys Bluetooth Bus driver (Microsoft)
  1037. BTHUSB.sys Bluetooth Miniport driver (Microsoft)
  1038. cdd.dll Canonical Display Driver (Microsoft)
  1039. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1040. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1041. CI.dll Code Integrity Module (Microsoft)
  1042. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1043. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1044. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1045. CLFS.SYS Common Log File System Driver (Microsoft)
  1046. clipsp.sys CLIP Service (Microsoft)
  1047. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1048. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1049. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1050. condrv.sys Console Driver (Microsoft)
  1051. crashdmp.sys Crash Dump driver (Microsoft)
  1052. dc1-controller.sys KMDF driver for DC1 Controller
  1053. DevAuthE.sys Xbox Device Authentication Driver
  1054. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1055. disk.sys PnP Disk Driver (Microsoft)
  1056. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1057. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1058. dump_dumpstorport.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1059. dump_stornvme.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1060. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1061. dxgmms2.sys DirectX Graphics MMS
  1062. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1063. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1064. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1065. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1066. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1067. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1068. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1069. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1070. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1071. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1072. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1073. HdAudio.sys High Definition Audio Function driver (Microsoft)
  1074. HIDCLASS.SYS Hid Class Library (Microsoft)
  1075. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1076. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1077. HTTP.sys HTTP Protocol Stack (Microsoft)
  1078. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1079. IntelTA.sys Intel Telemetry Driver
  1080. iorate.sys I/O rate control Filter (Microsoft)
  1081. kbdclass.sys Keyboard Class Driver (Microsoft)
  1082. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1083. kd.dll Local Kernal Debugger (Microsoft)
  1084. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1085. ks.sys Kernal CSA Library (Microsoft)
  1086. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1087. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1088. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1089. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1090. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1091. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  1092. Microsoft.Bluetooth.Legacy.LEEnumerator.sys Microsoft Bluetooth Legacy LE Enumerator driver (Microsoft)
  1093. mmcss.sys MMCSS Driver (Microsoft)
  1094. monitor.sys Monitor Driver (Microsoft)
  1095. mouclass.sys Mouse Class Driver (Microsoft)
  1096. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1097. mountmgr.sys Mount Point Manager (Microsoft)
  1098. MpKslDrv.sys Microsoft Anti-malware Protection driver
  1099. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1100. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1101. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  1102. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1103. Msfs.SYS Mailslot driver (Microsoft)
  1104. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1105. msisadrv.sys ISA Driver (Microsoft)
  1106. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1107. msquic.sys Windows QUIC Driver
  1108. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1109. mssmbios.sys System Management BIOS driver (Microsoft)
  1110. mup.sys Multiple UNC Provider driver (Microsoft)
  1111. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1112. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1113. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1114. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  1115. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1116. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1117. NDProxy.sys NDIS Proxy driver (Microsoft)
  1118. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1119. netbios.sys NetBIOS Interface driver (Microsoft)
  1120. netbt.sys MBT Transport driver (Microsoft)
  1121. NETIO.SYS Network I/O Subsystem (Microsoft)
  1122. Npfs.SYS NPFS driver (Microsoft)
  1123. npsvctrig.sys Named pipe service triggers (Microsoft)
  1124. nsiproxy.sys NSI Proxy driver (Microsoft)
  1125. Ntfs.sys NT File System Driver (Microsoft)
  1126. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1127. ntosext.sys NTOS Extension Host driver (Microsoft)
  1128. Null.SYS NULL Driver (Microsoft)
  1129. nwifi.sys NativeWiFi Miniport Driver (Microsoft)
  1130. pacer.sys QoS Packet Scheduler (Microsoft)
  1131. partmgr.sys Partition driver (Microsoft)
  1132. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1133. pcw.sys Performance Counter Driver (Microsoft)
  1134. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1135. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1136. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1137. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1138. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1139. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1140. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1141. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1142. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1143. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1144. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  1145. rdyboost.sys ReadyBoost Driver (Microsoft)
  1146. rfcomm.sys Bluetooth RFCOMM driver (Microsoft)
  1147. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1148. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1149. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1150. spaceport.sys Storage Spaces driver (Microsoft)
  1151. srv2.sys Smb 2.0 Server driver (Microsoft)
  1152. srvnet.sys Server Network driver (Microsoft)
  1153. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1154. stornvme.sys NVM Express Storport Miniport driver (Microsoft)
  1155. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1156. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1157. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1158. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1159. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1160. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1161. TDI.SYS TDI Wrapper driver (Microsoft)
  1162. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1163. tm.sys Kernel Transaction Manager driver (Microsoft)
  1164. UcmCx.sys USB Connector Manager KMDF Class Extension
  1165. ucx01000.sys USB Controller Extension (Microsoft)
  1166. UEFI.sys UEFI NT driver (Microsoft)
  1167. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1168. umpass.sys Generic pass-through driver (Microsoft)
  1169. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1170. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1171. UsbHub3.sys USB3 HUB driver (Microsoft)
  1172. USBXHCI.SYS USB XHCI driver (Microsoft)
  1173. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1174. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1175. volmgr.sys Volume Manager Driver (Microsoft)
  1176. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1177. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1178. volume.sys Volume driver (Microsoft)
  1179. vwifibus.sys Virtual Wireless Bus driver (Microsoft)
  1180. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1181. vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
  1182. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1183. watchdog.sys Watchdog driver (Microsoft)
  1184. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1185. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1186. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1187. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1188. wdiwifi.sys WDI Driver Framework driver (Microsoft)
  1189. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1190. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1191. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1192. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1193. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1194. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1195. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1196. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1197. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1198. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1199. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1200. Wof.sys Windows Overlay Filter (Microsoft)
  1201. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1202. xboxgip.sys Game Input Protocol Driver
  1203. xinputhid.sys XINPUT filter driver for HID
  1204.  
  1205. ====================== Dump #2: UNLOADED MODULES =======================
  1206.  
  1207. fffff806`7d600000 fffff806`7d8e7000 BEDaisy.sys
  1208. fffff806`7eb60000 fffff806`7eb6c000 umpass.sys
  1209. fffff806`923f0000 fffff806`92404000 xinputhid.sy
  1210. fffff806`7eae0000 fffff806`7eaef000 hiber_storpo
  1211. fffff806`7eaf0000 fffff806`7eb1c000 hiber_stornv
  1212. fffff806`7eb20000 fffff806`7eb3e000 hiber_dumpfv
  1213. fffff806`7ea30000 fffff806`7ea3c000 umpass.sys
  1214. fffff806`7eac0000 fffff806`7eac8000 NTIOLib_X64.
  1215. fffff806`8d060000 fffff806`8d069000 ene.sys
  1216. fffff806`7eab0000 fffff806`7eab8000 NTIOLib_X64.
  1217. fffff806`7eaa0000 fffff806`7eaa8000 NTIOLib_X64.
  1218. fffff806`7ea50000 fffff806`7ea59000 msio64.sys
  1219. fffff806`7ea60000 fffff806`7ea68000 NTIOLib_X64.
  1220. fffff806`7ea40000 fffff806`7ea48000 NTIOLib_X64.
  1221. fffff806`8cbf0000 fffff806`8cded000 cfosspeed6.s
  1222. fffff806`7ea80000 fffff806`7ea91000 MpKslc3969c2
  1223. fffff806`7ea70000 fffff806`7ea78000 amifldrv64.s
  1224. fffff806`8d2b0000 fffff806`8d2bf000 dump_storpor
  1225. fffff806`8d2f0000 fffff806`8d31c000 dump_stornvm
  1226. fffff806`8d340000 fffff806`8d35e000 dump_dumpfve
  1227. fffff806`8d0a0000 fffff806`8d0bc000 dam.sys
  1228. fffff806`82da0000 fffff806`82db1000 WdBoot.sys
  1229. fffff806`83e50000 fffff806`83e60000 hwpolicy.sys
  1230.  
  1231. ====================== Dump #2: BIOS INFORMATION =======================
  1232.  
  1233. [SMBIOS Data Tables v2.8]
  1234. [DMI Version - 0]
  1235. [2.0 Calling Convention - No]
  1236. [Table Size - 2465 bytes]
  1237. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  1238. Vendor American Megatrends Inc.
  1239. BIOS Version 1.72
  1240. BIOS Starting Address Segment f000
  1241. BIOS Release Date 04/22/2020
  1242. BIOS ROM Size 1000000
  1243. BIOS Characteristics
  1244. 07: - PCI Supported
  1245. 11: - Upgradeable FLASH BIOS
  1246. 12: - BIOS Shadowing Supported
  1247. 15: - CD-Boot Supported
  1248. 16: - Selectable Boot Supported
  1249. 17: - BIOS ROM Socketed
  1250. 19: - EDD Supported
  1251. 23: - 1.2MB Floppy Supported
  1252. 24: - 720KB Floppy Supported
  1253. 25: - 2.88MB Floppy Supported
  1254. 26: - Print Screen Device Supported
  1255. 27: - Keyboard Services Supported
  1256. 28: - Serial Services Supported
  1257. 29: - Printer Services Supported
  1258. 32: - BIOS Vendor Reserved
  1259. BIOS Characteristic Extensions
  1260. 00: - ACPI Supported
  1261. 01: - USB Legacy Supported
  1262. 08: - BIOS Boot Specification Supported
  1263. 10: - Specification Reserved
  1264. 11: - Specification Reserved
  1265. BIOS Major Revision 5
  1266. BIOS Minor Revision 14
  1267. EC Firmware Major Revision 255
  1268. EC Firmware Minor Revision 255
  1269. [System Information (Type 1) - Length 27 - Handle 0001h]
  1270. Manufacturer Micro-Star International Co., Ltd.
  1271. Product Name MS-7B93
  1272. Version 1.0
  1273. UUID 00000000-0000-0000-0000-000000000000
  1274. Wakeup Type Power Switch
  1275. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1276. Manufacturer Micro-Star International Co., Ltd.
  1277. Product MPG X570 GAMING PRO CARBON WIFI (MS-7B93)
  1278. Version 1.0
  1279. Feature Flags 09h
  1280. -409880864: - -409880816: - ÷7!ü
  1281. Chassis Handle 0003h
  1282. Board Type 0ah - Processor/Memory Module
  1283. Number of Child Handles 0
  1284. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1285. Manufacturer Micro-Star International Co., Ltd.
  1286. Chassis Type Desktop
  1287. Version 1.0
  1288. Bootup State Safe
  1289. Power Supply State Safe
  1290. Thermal State Safe
  1291. Security Status None
  1292. OEM Defined 0
  1293. Height 0U
  1294. Number of Power Cords 1
  1295. Number of Contained Elements 0
  1296. Contained Element Size 3
  1297. [OEM Strings (Type 11) - Length 5 - Handle 000bh]
  1298. Number of Strings 1
  1299. [System Configuration Options (Type 12) - Length 5 - Handle 000ch]
  1300. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000eh]
  1301. [Physical Memory Array (Type 16) - Length 23 - Handle 000fh]
  1302. Location 03h - SystemBoard/Motherboard
  1303. Use 03h - System Memory
  1304. Memory Error Correction 03h - None
  1305. Maximum Capacity 134217728KB
  1306. Memory Error Inf Handle 000eh
  1307. Number of Memory Devices 4
  1308. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0010h]
  1309. Starting Address 00000000h
  1310. Ending Address 0037ffffh
  1311. Memory Array Handle 000fh
  1312. Partition Width 02
  1313. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0011h]
  1314. Starting Address 00400000h
  1315. Ending Address 0107ffffh
  1316. Memory Array Handle 000fh
  1317. Partition Width 02
  1318. [Cache Information (Type 7) - Length 19 - Handle 0012h]
  1319. Socket Designation L1 - Cache
  1320. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1321. Maximum Cache Size 0180h - 384K
  1322. Installed Size 0180h - 384K
  1323. Supported SRAM Type 0010h - Pipeline-Burst
  1324. Current SRAM Type 0010h - Pipeline-Burst
  1325. Cache Speed 1ns
  1326. Error Correction Type Specification Reserved
  1327. System Cache Type Unified
  1328. Associativity 8-way Set-Associative
  1329. [Cache Information (Type 7) - Length 19 - Handle 0013h]
  1330. Socket Designation L2 - Cache
  1331. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1332. Maximum Cache Size 0c00h - 3072K
  1333. Installed Size 0c00h - 3072K
  1334. Supported SRAM Type 0010h - Pipeline-Burst
  1335. Current SRAM Type 0010h - Pipeline-Burst
  1336. Cache Speed 1ns
  1337. Error Correction Type Specification Reserved
  1338. System Cache Type Unified
  1339. Associativity 8-way Set-Associative
  1340. [Cache Information (Type 7) - Length 19 - Handle 0014h]
  1341. Socket Designation L3 - Cache
  1342. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1343. Maximum Cache Size 8200h - 32768K
  1344. Installed Size 8200h - 32768K
  1345. Supported SRAM Type 0010h - Pipeline-Burst
  1346. Current SRAM Type 0010h - Pipeline-Burst
  1347. Cache Speed 1ns
  1348. Error Correction Type Specification Reserved
  1349. System Cache Type Unified
  1350. Associativity 16-way Set-Associative
  1351. [Processor Information (Type 4) - Length 48 - Handle 0015h]
  1352. Socket Designation AM4
  1353. Processor Type Central Processor
  1354. Processor Family 6bh - Specification Reserved
  1355. Processor Manufacturer Advanced Micro Devices, Inc.
  1356. Processor ID 100f8700fffb8b17
  1357. Processor Version AMD Ryzen 5 3600 6-Core Processor
  1358. Processor Voltage 8bh - 1.1V
  1359. External Clock 100MHz
  1360. Max Speed 4200MHz
  1361. Current Speed 3600MHz
  1362. Status Enabled Populated
  1363. Processor Upgrade Specification Reserved
  1364. L1 Cache Handle 0012h
  1365. L2 Cache Handle 0013h
  1366. L3 Cache Handle 0014h
  1367. Part Number Unknown
  1368. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0016h]
  1369. [Memory Device (Type 17) - Length 40 - Handle 0017h]
  1370. Physical Memory Array Handle 000fh
  1371. Memory Error Info Handle 0016h
  1372. Form Factor 02h - Unknown
  1373. Device Locator DIMM 0
  1374. Bank Locator P0 CHANNEL A
  1375. Memory Type 02h - Unknown
  1376. Type Detail 0004h - Unknown
  1377. Speed 3000MHz
  1378. Manufacturer Unknown
  1379. Part Number Unknown
  1380. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0018h]
  1381. [Memory Device (Type 17) - Length 40 - Handle 0019h]
  1382. Physical Memory Array Handle 000fh
  1383. Memory Error Info Handle 0018h
  1384. Total Width 64 bits
  1385. Data Width 64 bits
  1386. Size 8192MB
  1387. Form Factor 09h - DIMM
  1388. Device Locator DIMM 1
  1389. Bank Locator P0 CHANNEL A
  1390. Memory Type 1ah - Specification Reserved
  1391. Type Detail 4080h - Synchronous
  1392. Speed 3000MHz
  1393. Manufacturer Unknown
  1394. Part Number CMK16GX4M2B3000C15
  1395. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001ah]
  1396. Starting Address 00000000h
  1397. Ending Address 00ffffffh
  1398. Memory Device Handle 0019h
  1399. Mem Array Mapped Adr Handle 0011h
  1400. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 001bh]
  1401. [Memory Device (Type 17) - Length 40 - Handle 001ch]
  1402. Physical Memory Array Handle 000fh
  1403. Memory Error Info Handle 001bh
  1404. Form Factor 02h - Unknown
  1405. Device Locator DIMM 0
  1406. Bank Locator P0 CHANNEL B
  1407. Memory Type 02h - Unknown
  1408. Type Detail 0004h - Unknown
  1409. Speed 3000MHz
  1410. Manufacturer Unknown
  1411. Part Number Unknown
  1412. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 001dh]
  1413. [Memory Device (Type 17) - Length 40 - Handle 001eh]
  1414. Physical Memory Array Handle 000fh
  1415. Memory Error Info Handle 001dh
  1416. Total Width 64 bits
  1417. Data Width 64 bits
  1418. Size 8192MB
  1419. Form Factor 09h - DIMM
  1420. Device Locator DIMM 1
  1421. Bank Locator P0 CHANNEL B
  1422. Memory Type 1ah - Specification Reserved
  1423. Type Detail 4080h - Synchronous
  1424. Speed 3000MHz
  1425. Manufacturer Unknown
  1426. Part Number CMK16GX4M2B3000C15
  1427. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001fh]
  1428. Starting Address 00000000h
  1429. Ending Address 00ffffffh
  1430. Memory Device Handle 001eh
  1431. Mem Array Mapped Adr Handle 0011h
  1432.  
  1433. ========================== Dump #2: Extra #1 ===========================
  1434.  
  1435. 11: kd> !verifier
  1436. Verify Flags Level 0x00000000
  1437. STANDARD FLAGS:
  1438. [X] (0x00000000) Automatic Checks
  1439. [ ] (0x00000001) Special pool
  1440. [ ] (0x00000002) Force IRQL checking
  1441. [ ] (0x00000008) Pool tracking
  1442. [ ] (0x00000010) I/O verification
  1443. [ ] (0x00000020) Deadlock detection
  1444. [ ] (0x00000080) DMA checking
  1445. [ ] (0x00000100) Security checks
  1446. [ ] (0x00000800) Miscellaneous checks
  1447. [ ] (0x00020000) DDI compliance checking
  1448. ADDITIONAL FLAGS:
  1449. [ ] (0x00000004) Randomized low resources simulation
  1450. [ ] (0x00000200) Force pending I/O requests
  1451. [ ] (0x00000400) IRP logging
  1452. [ ] (0x00002000) Invariant MDL checking for stack
  1453. [ ] (0x00004000) Invariant MDL checking for driver
  1454. [ ] (0x00008000) Power framework delay fuzzing
  1455. [ ] (0x00010000) Port/miniport interface checking
  1456. [ ] (0x00040000) Systematic low resources simulation
  1457. [ ] (0x00080000) DDI compliance checking (additional)
  1458. [ ] (0x00200000) NDIS/WIFI verification
  1459. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1460. [ ] (0x01000000) VM switch verification
  1461. [ ] (0x02000000) Code integrity checks
  1462. [X] Indicates flag is enabled
  1463. Summary of All Verifier Statistics
  1464. RaiseIrqls 0x0
  1465. AcquireSpinLocks 0x0
  1466. Synch Executions 0x0
  1467. Trims 0x0
  1468. Pool Allocations Attempted 0x0
  1469. Pool Allocations Succeeded 0x0
  1470. Pool Allocations Succeeded SpecialPool 0x0
  1471. Pool Allocations With NO TAG 0x0
  1472. Pool Allocations Failed 0x0
  1473. Current paged pool allocations 0x0 for 00000000 bytes
  1474. Peak paged pool allocations 0x0 for 00000000 bytes
  1475. Current nonpaged pool allocations 0x0 for 00000000 bytes
  1476. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  1477.  
  1478. ========================== Dump #2: Extra #2 ===========================
  1479.  
  1480. 11: kd> !thread
  1481. THREAD ffff95079d76d080 Cid 1cfc.36dc Teb: 0000000000d86000 Win32Thread: ffff950792a44310 RUNNING on processor b
  1482. Not impersonating
  1483. GetUlongFromAddress: unable to read from fffff8068101143c
  1484. Owning Process ffff950798d51080 Image: steam.exe
  1485. Attached Process N/A Image: N/A
  1486. fffff78000000000: Unable to get shared data
  1487. Wait Start TickCount 220742
  1488. Context Switch Count 4357 IdealProcessor: 5
  1489. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1490. UserTime 00:00:00.000
  1491. KernelTime 00:00:00.000
  1492. Win32 Start Address 0x000000005da8b380
  1493. Stack Init ffffec04f97edc90 Current ffffec04f97ed6a0
  1494. Base ffffec04f97ee000 Limit ffffec04f97e8000 Call 0000000000000000
  1495. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1496. Child-SP RetAddr : Args to Child : Call Site
  1497. ffffec04`f97ec768 fffff806`807ef929 : 00000000`00000139 00000000`0000001e ffffec04`f97eca90 ffffec04`f97ec9e8 : nt!KeBugCheckEx
  1498. ffffec04`f97ec770 fffff806`807efd50 : fffff806`80751800 fffff806`80712284 ffff9507`96f96c98 fffff806`806ec455 : nt!KiBugCheckDispatch+0x69
  1499. ffffec04`f97ec8b0 fffff806`807ee0e3 : 00000000`00000000 00000000`00000000 ffffcb0d`2cc69060 00000000`000001f0 : nt!KiFastFailDispatch+0xd0
  1500. ffffec04`f97eca90 fffff806`808628db : ffff9507`8d012880 01f000d0`000000d0 0064006e`00000000 005c0073`0077006f : nt!KiRaiseSecurityCheckFailure+0x323 (TrapFrame @ ffffec04`f97eca90)
  1501. ffffec04`f97ecc20 fffff806`80a95a31 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeQueryValuesThread+0x17e62b
  1502. ffffec04`f97ecca0 fffff806`80a956c2 : ffff9507`9bf4d660 ffff9507`9bf4d8e0 ffff9507`9d76d080 00000000`00000002 : nt!PsQueryStatisticsProcess+0x111
  1503. ffffec04`f97ecd20 fffff806`809f8071 : 00000000`00000002 ffff9507`9bf4d080 00000000`ffffffff 00000000`00000000 : nt!ExpCopyProcessInfo+0x42
  1504. ffffec04`f97ecda0 fffff806`809fbfc3 : 00000000`00f10000 00000000`00041e30 ffffec04`f97ed8e8 00000000`00000000 : nt!ExpGetProcessInformation+0x9f1
  1505. ffffec04`f97ed400 fffff806`809fb6a7 : ffff9507`9d76d080 00000000`00000000 00000000`00000000 00000000`09bff860 : nt!ExpQuerySystemInformation+0x7d3
  1506. ffffec04`f97edac0 fffff806`807ef378 : ffff9507`9d760000 ffff9507`9aa25080 ffffec04`f97edb18 ffffffff`ff676980 : nt!NtQuerySystemInformation+0x37
  1507. ffffec04`f97edb00 00007ffc`c954b454 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffffec04`f97edb00)
  1508. 00000000`09afe5e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`c954b454
Add Comment
Please, Sign In to add comment