API tools faq
paste
Guest User

Untitled

a guest
Jun 28th, 2020
171
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 42.47 KB | None | 0 0
raw download clone embed print report
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 00 minutes and 50 seconds
  5.  
  6. ================================ SYSTEM ================================
  7. MANUFACTURER: Dell Inc.
  8. PRODUCT_NAME: XPS 8910
  9. SKU: [Removed]
  10. VERSION: 1.1.11
  11.  
  12. ================================= BIOS =================================
  13. VENDOR: Dell Inc.
  14. VERSION: 1.1.11
  15. DATE: 03/05/2020
  16.  
  17. ============================= MOTHERBOARD ==============================
  18. MANUFACTURER: Dell Inc.
  19. PRODUCT: 0WPMFG
  20. VERSION: A00
  21.  
  22. ================================= RAM ==================================
  23. Size Speed Manufacturer Part No.
  24. -------------- -------------- ------------------- ----------------------
  25. 0MHz
  26. 0MHz
  27. 8192MB 2133MHz Micron 16ATF1G64AZ-2G1B1
  28. 8192MB 2133MHz Micron 16ATF1G64AZ-2G1B1
  29.  
  30. ================================= CPU ==================================
  31. Processor Version: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
  32. COUNT: 8
  33. MHZ: 4008
  34. VENDOR: GenuineIntel
  35. FAMILY: 6
  36. MODEL: 5e
  37. STEPPING: 3
  38. MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: D6'00000000 (cache) D6'00000000 (init)
  39.  
  40. ================================== OS ==================================
  41. Product: WinNt, suite: TerminalServer SingleUserTS
  42. Built by: 19041.1.amd64fre.vb_release.191206-1406
  43. BUILD_VERSION: 10.0.19041.329 (WinBuild.160101.0800)
  44. BUILD: 19041
  45. SERVICEPACK: 329
  46. PLATFORM_TYPE: x64
  47. NAME: Windows 10
  48. EDITION: Windows 10 WinNt TerminalServer SingleUserTS
  49. BUILD_TIMESTAMP: unknown_date
  50. BUILDDATESTAMP: 160101.0800
  51. BUILDLAB: WinBuild
  52. BUILDOSVER: 10.0.19041.329
  53.  
  54. =============================== DEBUGGER ===============================
  55. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  56. Copyright (c) Microsoft Corporation. All rights reserved.
  57.  
  58. =============================== COMMENTS ===============================
  59. * Information gathered from different dump files may be different. If
  60. Windows updates between two dump files, two or more OS versions may
  61. be shown above.
  62. * If the user updates the BIOS between dump files, two or more versions
  63. and dates may be shown above.
  64. * More RAM information can be found below in a full BIOS section.
  65.  
  66. ========================================================================
  67. ======================= Dump #1: ANALYZE VERBOSE =======================
  68. ======================= File: 062720-9875-01.dmp =======================
  69. ========================================================================
  70.  
  71. Mini Kernel Dump File: Only registers and stack trace are available
  72. Windows 10 Kernel Version 19041 MP (8 procs) Free x64
  73. Kernel base = 0xfffff802`44c00000 PsLoadedModuleList = 0xfffff802`4582a2b0
  74. Debug session time: Sun Jun 28 01:17:32.841 2020 (UTC - 4:00)
  75. System Uptime: 3 days 6:35:52.095
  76.  
  77. BugCheck 139, {3, fffff98329f1f5c0, fffff98329f1f518, 0}
  78. Probably caused by : memory_corruption
  79. Followup: memory_corruption
  80.  
  81. KERNEL_SECURITY_CHECK_FAILURE (139)
  82. A kernel component has corrupted a critical data structure. The corruption
  83. could potentially allow a malicious user to gain control of this machine.
  84.  
  85. Arguments:
  86. Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
  87. Arg2: fffff98329f1f5c0, Address of the trap frame for the exception that caused the bugcheck
  88. Arg3: fffff98329f1f518, Address of the exception record for the exception that caused the bugcheck
  89. Arg4: 0000000000000000, Reserved
  90.  
  91. Debugging Details:
  92. DUMP_CLASS: 1
  93. DUMP_QUALIFIER: 400
  94. DUMP_TYPE: 2
  95. TRAP_FRAME: fffff98329f1f5c0 -- (.trap 0xfffff98329f1f5c0)
  96. NOTE: The trap frame does not contain all registers.
  97. Some register values may be zeroed or incorrect.
  98. rax=ffffc00c7bae21a0 rbx=0000000000000000 rcx=0000000000000003
  99. rdx=fffff8024268e1ac rsi=0000000000000000 rdi=0000000000000000
  100. rip=fffff8024500d21f rsp=fffff98329f1f750 rbp=00000292cc9d8e0c
  101. r8=4268e1ac00000000 r9=fffff80244c00000 r10=fffff8024268dac0
  102. r11=fffff98329f1f800 r12=0000000000000000 r13=0000000000000000
  103. r14=0000000000000000 r15=0000000000000000
  104. iopl=0 nv up ei pl nz ac po cy
  105. nt!KiInsertTimerTable+0x1e406f:
  106. fffff802`4500d21f cd29 int 29h
  107. Resetting default scope
  108. EXCEPTION_RECORD: fffff98329f1f518 -- (.exr 0xfffff98329f1f518)
  109. ExceptionAddress: fffff8024500d21f (nt!KiInsertTimerTable+0x00000000001e406f)
  110. ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  111. ExceptionFlags: 00000001
  112. NumberParameters: 1
  113. Parameter[0]: 0000000000000003
  114. Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
  115. CUSTOMER_CRASH_COUNT: 1
  116. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  117. BUGCHECK_STR: 0x139
  118.  
  119. PROCESS_NAME: Wow.exe
  120.  
  121. CURRENT_IRQL: 2
  122. ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  123. EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
  124. EXCEPTION_CODE_STR: c0000409
  125. EXCEPTION_PARAMETER1: 0000000000000003
  126. LAST_CONTROL_TRANSFER: from fffff80244fef929 to fffff80244fdda20
  127. STACK_TEXT:
  128. fffff983`29f1f298 fffff802`44fef929 : 00000000`00000139 00000000`00000003 fffff983`29f1f5c0 fffff983`29f1f518 : nt!KeBugCheckEx
  129. fffff983`29f1f2a0 fffff802`44fefd50 : ffffc00c`7e3e6480 00000000`00000000 ffff2deb`7a474278 00000000`00000003 : nt!KiBugCheckDispatch+0x69
  130. fffff983`29f1f3e0 fffff802`44fee0e3 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff802`44fe47a6 : nt!KiFastFailDispatch+0xd0
  131. fffff983`29f1f5c0 fffff802`4500d21f : 00000000`00000000 00000000`00000004 00000000`00000000 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
  132. fffff983`29f1f750 fffff802`44e2751d : ffffc00c`7bae2080 00001f80`00000002 fffff983`29f1f8e0 fffff983`00000000 : nt!KiInsertTimerTable+0x1e406f
  133. fffff983`29f1f7d0 fffff802`44e26b53 : ffff8b00`00000027 fffff802`00000000 000fa4ef`bd9bbf01 ffffc00c`7bae21c0 : nt!KiCommitThreadWait+0x3bd
  134. fffff983`29f1f870 fffff802`451fb311 : ffffc00c`83a692e0 00000000`00000006 00000000`00000001 00000000`00000000 : nt!KeWaitForSingleObject+0x233
  135. fffff983`29f1f960 fffff802`451fb3ba : ffffc00c`7bae2080 000000fd`351ffb28 00000000`00000000 00000000`00000000 : nt!ObWaitForSingleObject+0x91
  136. fffff983`29f1f9c0 fffff802`44fef375 : 00000222`00000000 00000000`00000001 fffff983`29f1fa18 ffffffff`fff9e580 : nt!NtWaitForSingleObject+0x6a
  137. fffff983`29f1fa00 00007ffd`f91eae14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
  138. 000000fd`351ffaf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`f91eae14
  139. STACK_COMMAND: kb
  140. CHKIMG_EXTENSION: !chkimg -lo 50 -d !FLTMGR
  141. fffff80243b6cd05-fffff80243b6cd06 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+35
  142. [ 48 ff:4c 8b ]
  143. fffff80243b6cd0c-fffff80243b6cd10 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+3c (+0x07)
  144. [ 0f 1f 44 00 00:e8 ff 5a 3a 01 ]
  145. fffff80243b6cd1a-fffff80243b6cd1b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+4a (+0x0e)
  146. [ 48 ff:4c 8b ]
  147. fffff80243b6cd21-fffff80243b6cd25 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+51 (+0x07)
  148. [ 0f 1f 44 00 00:e8 da 63 2b 01 ]
  149. fffff80243b6cd6a-fffff80243b6cd6b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+9a (+0x49)
  150. [ 48 ff:4c 8b ]
  151. fffff80243b6cd71-fffff80243b6cd77 7 bytes - FLTMGR!DeleteStreamListCtrlCallback+a1 (+0x07)
  152. [ 0f 1f 44 00 00 48 ff:e8 da 5b 2b 01 4c 8b ]
  153. fffff80243b6cd7d-fffff80243b6cd81 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+ad (+0x0c)
  154. [ 0f 1f 44 00 00:e8 3e eb 38 01 ]
  155. 28 errors : !FLTMGR (fffff80243b6cd05-fffff80243b6cd81)
  156. MODULE_NAME: memory_corruption
  157.  
  158. IMAGE_NAME: memory_corruption
  159.  
  160. FOLLOWUP_NAME: memory_corruption
  161. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  162. MEMORY_CORRUPTOR: LARGE
  163. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  164. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  165. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  166. TARGET_TIME: 2020-06-28T05:17:32.000Z
  167. SUITE_MASK: 272
  168. PRODUCT_TYPE: 1
  169. USER_LCID: 0
  170. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  171. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  172. Followup: memory_corruption
  173.  
  174. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  175.  
  176. Mar 31 2013 - L1C63x64.sys - Qualcomm Atheros AR8151 or AR8152 NDIS 6.30 Gigabit Ethernet Controller driver http://www.qualcomm.com/drivers/
  177. Aug 08 2016 - iaLPSS2_UART2.sys - Intel(R) Serial IO UART driver http://www.intel.com/
  178. Aug 09 2016 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
  179. Apr 19 2018 - iaLPSS2i_GPIO2.sys - Intel(R) Serial IO driver http://www.intel.com/
  180. Apr 19 2018 - iaLPSS2i_I2C.sys - Intel(R) Serial IO I2C Host Controller driver http://www.intel.com/
  181. Apr 04 2019 - TeeDriverW8x64.sys - Intel Management Engine Interface driver https://downloadcenter.intel.com/
  182. Apr 25 2019 - mbae64.sys - Malwarebytes driver https://www.malwarebytes.com/
  183. May 05 2019 - ibtusb.sys - Intel(R) Wireless Bluetooth(R) Filter driver (Intel Corporation)
  184. May 12 2019 - Netwtw04.sys - Intel Wireless Wifi Link driver https://downloadcenter.intel.com/
  185. May 14 2019 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  186. May 17 2019 - IntcDAud.sys - Intel Display Audio Driver http://www.intel.com/
  187. Jul 15 2019 - iaStorAC.sys - Intel Rapid Storage Technology driver
  188. Sep 25 2019 - igdkmd64.sys - Intel HD graphics driver
  189. Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  190. Feb 19 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  191. Apr 15 2020 - farflt.sys - Malwarebytes Anti-RansomWare SDK http://www.malwarebytes.org/
  192. Apr 17 2020 - mbam.sys - Malwarebytes Anti-Malware https://www.malwarebytes.com/
  193. Apr 29 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  194. May 15 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  195. May 27 2020 - mwac.sys - Malwarebytes Web Access Control http://www.malwarebytes.org/
  196.  
  197. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  198.  
  199. Mapped memory image file: C:\ProgramData\dbg\sym\L1C63x64.sys\5158FBC522000\L1C63x64.sys
  200. Image path: \SystemRoot\System32\drivers\L1C63x64.sys
  201. Image name: L1C63x64.sys
  202. Search : https://www.google.com/search?q=L1C63x64.sys
  203. ADA Info : Qualcomm Atheros AR8151 or AR8152 NDIS 6.30 Gigabit Ethernet Controller driver http://www.qualcomm.com/drivers/
  204. Timestamp : Sun Mar 31 2013
  205. File version: 2.1.0.16
  206. Product version: 2.1.0.16
  207. File flags: 8 (Mask 3F) Private
  208. File OS: 40004 NT Win32
  209. File type: 3.6 Driver
  210. File date: 00000000.00000000
  211. CompanyName: Qualcomm Atheros Co., Ltd.
  212. ProductName: Qualcomm Atheros Ar81xx series PCI-E Gigabit Ethernet Controller
  213. InternalName: L1c63x64.sys
  214. OriginalFilename: L1c63x64.sys
  215. ProductVersion: 2.1.0.16
  216. FileVersion: 2.1.0.16
  217. FileDescription: Qualcomm Atheros Ar81xx series PCI-E Gigabit Ethernet Controller
  218. LegalCopyright: 2001-2012 Qualcomm Atheros Co., Ltd. All Rights Reserved.
  219.  
  220. Image path: \SystemRoot\System32\drivers\iaLPSS2_UART2.sys
  221. Image name: iaLPSS2_UART2.sys
  222. Search : https://www.google.com/search?q=iaLPSS2_UART2.sys
  223. ADA Info : Intel(R) Serial IO UART driver http://www.intel.com/
  224. Timestamp : Mon Aug 8 2016
  225.  
  226. Image path: \SystemRoot\system32\drivers\RTKVHD64.sys
  227. Image name: RTKVHD64.sys
  228. Search : https://www.google.com/search?q=RTKVHD64.sys
  229. ADA Info : Realtek Audio System driver https://www.realtek.com/en/
  230. Timestamp : Tue Aug 9 2016
  231.  
  232. Mapped memory image file: C:\ProgramData\dbg\sym\iaLPSS2i_GPIO2.sys\5AD84AF419000\iaLPSS2i_GPIO2.sys
  233. Image path: \SystemRoot\System32\drivers\iaLPSS2i_GPIO2.sys
  234. Image name: iaLPSS2i_GPIO2.sys
  235. Search : https://www.google.com/search?q=iaLPSS2i_GPIO2.sys
  236. ADA Info : Intel(R) Serial IO driver http://www.intel.com/
  237. Timestamp : Thu Apr 19 2018
  238. File version: 30.100.1816.3
  239. Product version: 30.100.1816.3
  240. File flags: 8 (Mask 3F) Private
  241. File OS: 40004 NT Win32
  242. File type: 3.7 Driver
  243. File date: 00000000.00000000
  244. CompanyName: Intel Corporation
  245. ProductName: Intel(R) Serial IO Driver
  246. InternalName: iaLPSS2i_GPIO2.sys
  247. OriginalFilename: iaLPSS2i_GPIO2.sys
  248. ProductVersion: 30.100.1816.3
  249. FileVersion: 30.100.1816.3
  250. FileDescription: Intel(R) Serial IO GPIO Driver v2
  251. LegalCopyright: Copyright © 2015, Intel Corporation.
  252.  
  253. Mapped memory image file: C:\ProgramData\dbg\sym\iaLPSS2i_I2C.sys\5AD84ADA2f000\iaLPSS2i_I2C.sys
  254. Image path: \SystemRoot\System32\drivers\iaLPSS2i_I2C.sys
  255. Image name: iaLPSS2i_I2C.sys
  256. Search : https://www.google.com/search?q=iaLPSS2i_I2C.sys
  257. ADA Info : Intel(R) Serial IO I2C Host Controller driver http://www.intel.com/
  258. Timestamp : Thu Apr 19 2018
  259. File version: 30.100.1816.3
  260. Product version: 30.100.1816.3
  261. File flags: 8 (Mask 3F) Private
  262. File OS: 40004 NT Win32
  263. File type: 3.7 Driver
  264. File date: 00000000.00000000
  265. CompanyName: Intel Corporation
  266. ProductName: Intel(R) Serial IO Driver
  267. InternalName: iaLPSS2i_I2C.sys
  268. OriginalFilename: iaLPSS2i_I2C.sys
  269. ProductVersion: 30.100.1816.3
  270. FileVersion: 30.100.1816.3
  271. FileDescription: Intel(R) Serial IO I2C Driver v2
  272. LegalCopyright: Copyright © 2015, Intel Corporation.
  273.  
  274. Image path: \SystemRoot\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys
  275. Image name: TeeDriverW8x64.sys
  276. Search : https://www.google.com/search?q=TeeDriverW8x64.sys
  277. ADA Info : Intel Management Engine Interface driver https://downloadcenter.intel.com/
  278. Timestamp : Thu Apr 4 2019
  279.  
  280. Image path: \??\C:\Windows\system32\drivers\mbae64.sys
  281. Image name: mbae64.sys
  282. Search : https://www.google.com/search?q=mbae64.sys
  283. ADA Info : Malwarebytes driver https://www.malwarebytes.com/
  284. Timestamp : Thu Apr 25 2019
  285.  
  286. Image path: \SystemRoot\System32\DriverStore\FileRepository\ibtusb.inf_amd64_00068a43b493b910\ibtusb.sys
  287. Image name: ibtusb.sys
  288. Search : https://www.google.com/search?q=ibtusb.sys
  289. ADA Info : Intel(R) Wireless Bluetooth(R) Filter driver (Intel Corporation)
  290. Timestamp : Sun May 5 2019
  291.  
  292. Image path: \SystemRoot\System32\drivers\Netwtw04.sys
  293. Image name: Netwtw04.sys
  294. Search : https://www.google.com/search?q=Netwtw04.sys
  295. ADA Info : Intel Wireless Wifi Link driver https://downloadcenter.intel.com/
  296. Timestamp : Sun May 12 2019
  297.  
  298. Image path: \SystemRoot\System32\drivers\UcmCxUcsiNvppc.sys
  299. Image name: UcmCxUcsiNvppc.sys
  300. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  301. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  302. Timestamp : Tue May 14 2019
  303.  
  304. Image path: \SystemRoot\System32\DriverStore\FileRepository\intcdaud.inf_amd64_0d54ec4feb82b9c1\IntcDAud.sys
  305. Image name: IntcDAud.sys
  306. Search : https://www.google.com/search?q=IntcDAud.sys
  307. ADA Info : Intel Display Audio Driver http://www.intel.com/
  308. Timestamp : Fri May 17 2019
  309.  
  310. Image path: \SystemRoot\System32\drivers\iaStorAC.sys
  311. Image name: iaStorAC.sys
  312. Search : https://www.google.com/search?q=iaStorAC.sys
  313. ADA Info : Intel Rapid Storage Technology driver
  314. Timestamp : Mon Jul 15 2019
  315.  
  316. Image path: \SystemRoot\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_38bfcb542ef4272e\igdkmd64.sys
  317. Image name: igdkmd64.sys
  318. Search : https://www.google.com/search?q=igdkmd64.sys
  319. ADA Info : Intel HD graphics driver
  320. Timestamp : Wed Sep 25 2019
  321.  
  322. Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
  323. Image name: mbamswissarmy.sys
  324. Search : https://www.google.com/search?q=mbamswissarmy.sys
  325. ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  326. Timestamp : Wed Nov 20 2019
  327.  
  328. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  329. Image name: nvhda64v.sys
  330. Search : https://www.google.com/search?q=nvhda64v.sys
  331. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  332. Timestamp : Wed Feb 19 2020
  333.  
  334. Image path: \SystemRoot\system32\DRIVERS\farflt.sys
  335. Image name: farflt.sys
  336. Search : https://www.google.com/search?q=farflt.sys
  337. ADA Info : Malwarebytes Anti-RansomWare SDK http://www.malwarebytes.org/
  338. Timestamp : Wed Apr 15 2020
  339.  
  340. Image path: \??\C:\Windows\system32\DRIVERS\mbam.sys
  341. Image name: mbam.sys
  342. Search : https://www.google.com/search?q=mbam.sys
  343. ADA Info : Malwarebytes Anti-Malware https://www.malwarebytes.com/
  344. Timestamp : Fri Apr 17 2020
  345.  
  346. Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
  347. Image name: MbamChameleon.sys
  348. Search : https://www.google.com/search?q=MbamChameleon.sys
  349. ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  350. Timestamp : Wed Apr 29 2020
  351.  
  352. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys
  353. Image name: nvlddmkm.sys
  354. Search : https://www.google.com/search?q=nvlddmkm.sys
  355. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  356. Timestamp : Fri May 15 2020
  357.  
  358. Image path: \SystemRoot\system32\DRIVERS\mwac.sys
  359. Image name: mwac.sys
  360. Search : https://www.google.com/search?q=mwac.sys
  361. ADA Info : Malwarebytes Web Access Control http://www.malwarebytes.org/
  362. Timestamp : Wed May 27 2020
  363.  
  364. ====================== Dump #1: MICROSOFT DRIVERS ======================
  365.  
  366. ACPI.sys ACPI Driver for NT (Microsoft)
  367. acpiex.sys ACPIEx Driver (Microsoft)
  368. acpipagr.sys ACPI Processor Aggregator Device driver (Microsoft)
  369. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  370. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  371. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  372. ahcache.sys Application Compatibility Cache (Microsoft)
  373. bam.sys BAM Kernal driver (Microsoft)
  374. BasicDisplay.sys Basic Display driver (Microsoft)
  375. BasicRender.sys Basic Render driver (Microsoft)
  376. Beep.SYS BEEP driver (Microsoft)
  377. bindflt.sys Windows Bind Filter driver (Microsoft)
  378. BOOTVID.dll VGA Boot Driver (Microsoft)
  379. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  380. BTHport.sys Bluetooth Bus driver (Microsoft)
  381. BTHUSB.sys Bluetooth Miniport driver (Microsoft)
  382. cdd.dll Canonical Display Driver (Microsoft)
  383. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  384. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  385. CI.dll Code Integrity Module (Microsoft)
  386. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  387. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  388. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  389. CLFS.SYS Common Log File System Driver (Microsoft)
  390. clipsp.sys CLIP Service (Microsoft)
  391. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  392. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  393. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  394. condrv.sys Console Driver (Microsoft)
  395. crashdmp.sys Crash Dump driver (Microsoft)
  396. csc.sys Windows Client Side Caching driver (Microsoft)
  397. dfsc.sys DFS Namespace Client Driver (Microsoft)
  398. disk.sys PnP Disk Driver (Microsoft)
  399. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  400. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  401. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  402. dump_iaStorAC.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  403. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  404. dxgmms2.sys DirectX Graphics MMS
  405. fastfat.SYS Fast FAT File System Driver (Microsoft)
  406. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  407. fileinfo.sys FileInfo Filter Driver (Microsoft)
  408. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  409. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  410. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  411. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  412. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  413. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  414. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  415. HIDCLASS.SYS Hid Class Library (Microsoft)
  416. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  417. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  418. HTTP.sys HTTP Protocol Stack (Microsoft)
  419. intelpep.sys Intel Power Engine Plugin (Microsoft)
  420. intelppm.sys Processor Device Driver (Microsoft)
  421. IntelTA.sys Intel Telemetry Driver
  422. iorate.sys I/O rate control Filter (Microsoft)
  423. kbdclass.sys Keyboard Class Driver (Microsoft)
  424. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  425. kd.dll Local Kernal Debugger (Microsoft)
  426. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  427. ks.sys Kernal CSA Library (Microsoft)
  428. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  429. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  430. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  431. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  432. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  433. mcupdate_GenuineIntel.dll Intel Microcode Update Library (Microsoft)
  434. mmcss.sys MMCSS Driver (Microsoft)
  435. monitor.sys Monitor Driver (Microsoft)
  436. mouclass.sys Mouse Class Driver (Microsoft)
  437. mouhid.sys HID Mouse Filter Driver (Microsoft)
  438. mountmgr.sys Mount Point Manager (Microsoft)
  439. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  440. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  441. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  442. Msfs.SYS Mailslot driver (Microsoft)
  443. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  444. msisadrv.sys ISA Driver (Microsoft)
  445. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  446. msquic.sys Windows QUIC Driver
  447. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  448. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  449. mssmbios.sys System Management BIOS driver (Microsoft)
  450. mup.sys Multiple UNC Provider driver (Microsoft)
  451. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  452. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  453. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  454. ndisuio.sys NDIS User mode I/O driver (Microsoft)
  455. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  456. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  457. NDProxy.sys NDIS Proxy driver (Microsoft)
  458. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  459. netbios.sys NetBIOS Interface driver (Microsoft)
  460. netbt.sys MBT Transport driver (Microsoft)
  461. NETIO.SYS Network I/O Subsystem (Microsoft)
  462. Npfs.SYS NPFS driver (Microsoft)
  463. npsvctrig.sys Named pipe service triggers (Microsoft)
  464. nsiproxy.sys NSI Proxy driver (Microsoft)
  465. Ntfs.sys NT File System Driver (Microsoft)
  466. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  467. ntosext.sys NTOS Extension Host driver (Microsoft)
  468. Null.SYS NULL Driver (Microsoft)
  469. nwifi.sys NativeWiFi Miniport Driver (Microsoft)
  470. pacer.sys QoS Packet Scheduler (Microsoft)
  471. partmgr.sys Partition driver (Microsoft)
  472. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  473. pcw.sys Performance Counter Driver (Microsoft)
  474. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  475. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  476. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  477. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  478. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  479. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  480. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  481. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  482. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  483. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  484. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  485. rdyboost.sys ReadyBoost Driver (Microsoft)
  486. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  487. SerCx2.sys Serial Class Extension V2 (Microsoft)
  488. serenum.sys Serial Port Enumerator (Microsoft)
  489. serial.sys Serial Device Driver
  490. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  491. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  492. spaceport.sys Storage Spaces driver (Microsoft)
  493. SpbCx.sys SPB Class Extension (Microsoft)
  494. srv2.sys Smb 2.0 Server driver (Microsoft)
  495. srvnet.sys Server Network driver (Microsoft)
  496. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  497. storqosflt.sys Storage QoS Filter driver (Microsoft)
  498. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  499. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  500. tcpip.sys TCP/IP Protocol driver (Microsoft)
  501. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  502. TDI.SYS TDI Wrapper driver (Microsoft)
  503. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  504. tm.sys Kernel Transaction Manager driver (Microsoft)
  505. tpm.sys Trusted Platform Module Device driver (Microsoft)
  506. UcmCx.sys USB Connector Manager KMDF Class Extension
  507. ucx01000.sys USB Controller Extension (Microsoft)
  508. UEFI.sys UEFI NT driver (Microsoft)
  509. umbus.sys User-Mode Bus Enumerator (Microsoft)
  510. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  511. USBD.SYS Universal Serial Bus Driver (Microsoft)
  512. UsbHub3.sys USB3 HUB driver (Microsoft)
  513. USBSTOR.SYS USB Mass Storage Class driver (Microsoft)
  514. USBXHCI.SYS USB XHCI driver (Microsoft)
  515. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  516. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  517. volmgr.sys Volume Manager Driver (Microsoft)
  518. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  519. volsnap.sys Volume Shadow Copy driver (Microsoft)
  520. volume.sys Volume driver (Microsoft)
  521. vwifibus.sys Virtual Wireless Bus driver (Microsoft)
  522. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  523. vwifimp.sys Virtual WiFi Miniport Driver (Microsoft)
  524. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  525. watchdog.sys Watchdog driver (Microsoft)
  526. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  527. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  528. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  529. wdiwifi.sys WDI Driver Framework driver (Microsoft)
  530. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  531. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  532. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  533. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  534. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  535. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  536. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  537. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  538. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  539. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  540. Wof.sys Windows Overlay Filter (Microsoft)
  541. WpdUpFltr.sys Portable Device Upper Class Filter driver (Microsoft)
  542. WppRecorder.sys WPP Trace Recorder (Microsoft)
  543. WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector driver (Microsoft)
  544.  
  545. ====================== Dump #1: UNLOADED MODULES =======================
  546.  
  547. fffff802`9fb10000 fffff802`9fb1f000 hiber_storpo
  548. fffff802`a0970000 fffff802`a1516000 hiber_iaStor
  549. fffff802`a1520000 fffff802`a153e000 hiber_dumpfv
  550. fffff802`9fb00000 fffff802`9fb0f000 hiber_storpo
  551. fffff802`a0b40000 fffff802`a16e6000 hiber_iaStor
  552. fffff802`a16f0000 fffff802`a170e000 hiber_dumpfv
  553. fffff802`5df30000 fffff802`5df3f000 dump_storpor
  554. fffff802`60240000 fffff802`60de6000 dump_iaStorA
  555. fffff802`5fe20000 fffff802`5fe3e000 dump_dumpfve
  556. fffff802`4a6a0000 fffff802`4a6bd000 EhStorClass.
  557. fffff802`5fda0000 fffff802`5fdbc000 dam.sys
  558. fffff802`49730000 fffff802`49739000 MbamElam.sys
  559. fffff802`4b210000 fffff802`4b220000 hwpolicy.sys
  560.  
  561. ====================== Dump #1: BIOS INFORMATION =======================
  562.  
  563. [SMBIOS Data Tables v2.8]
  564. [DMI Version - 0]
  565. [2.0 Calling Convention - No]
  566. [Table Size - 4631 bytes]
  567. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  568. Vendor Dell Inc.
  569. BIOS Version 1.1.11
  570. BIOS Starting Address Segment f000
  571. BIOS Release Date 03/05/2020
  572. BIOS ROM Size 800000
  573. BIOS Characteristics
  574. 07: - PCI Supported
  575. 09: - Plug and Play Supported
  576. 11: - Upgradeable FLASH BIOS
  577. 12: - BIOS Shadowing Supported
  578. 15: - CD-Boot Supported
  579. 16: - Selectable Boot Supported
  580. 19: - EDD Supported
  581. 23: - 1.2MB Floppy Supported
  582. 24: - 720KB Floppy Supported
  583. 25: - 2.88MB Floppy Supported
  584. 26: - Print Screen Device Supported
  585. 28: - Serial Services Supported
  586. 29: - Printer Services Supported
  587. 32: - BIOS Vendor Reserved
  588. 48: - System Vendor Reserved
  589. 49: - System Vendor Reserved
  590. 52: - System Vendor Reserved
  591. BIOS Characteristic Extensions
  592. 00: - ACPI Supported
  593. 01: - USB Legacy Supported
  594. 08: - BIOS Boot Specification Supported
  595. 09: - Fn-Key NET-Boot Supported
  596. 10: - Specification Reserved
  597. 11: - Specification Reserved
  598. BIOS Major Revision 1
  599. BIOS Minor Revision 1
  600. EC Firmware Major Revision 255
  601. EC Firmware Minor Revision 255
  602. [System Information (Type 1) - Length 27 - Handle 0001h]
  603. Manufacturer Dell Inc.
  604. Product Name XPS 8910
  605. Version 1.1.11
  606. UUID 00000000-0000-0000-0000-000000000000
  607. Wakeup Type Power Switch
  608. SKUNumber 072A
  609. Family XPS
  610. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  611. Manufacturer Dell Inc.
  612. Product 0WPMFG
  613. Version A00
  614. Feature Flags 09h
  615. -409880864: - -409880816: - ÷7!ü
  616. Location Default string
  617. Chassis Handle 0003h
  618. Board Type 0ah - Processor/Memory Module
  619. Number of Child Handles 0
  620. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  621. Manufacturer Dell Inc.
  622. Chassis Type Desktop
  623. Version Not Specified
  624. Bootup State Safe
  625. Power Supply State Safe
  626. Thermal State Safe
  627. Security Status None
  628. OEM Defined 0
  629. Height 0U
  630. Number of Power Cords 1
  631. Number of Contained Elements 0
  632. Contained Element Size 3
  633. [OEM Strings (Type 11) - Length 5 - Handle 0024h]
  634. Number of Strings 16
  635. 1 Dell System
  636. 2 1[072A]
  637. 3 3[3.3]
  638. 4 4[0001]
  639. 5 5[0003]
  640. 6 6[D0, D4, D8, DA, DE]
  641. 7 7[]
  642. 8 8[]
  643. 9 9[]
  644. 10 10[1.1.11]
  645. 11 11[]
  646. 12 12[]
  647. 13 13[PP4IL]
  648. 14 14[0]
  649. 15 15[8]
  650. 16 PR5633954179_1
  651. [Cache Information (Type 7) - Length 19 - Handle 0027h]
  652. Socket Designation L1 Cache
  653. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  654. Maximum Cache Size 0080h - 128K
  655. Installed Size 0080h - 128K
  656. Supported SRAM Type 0020h - Synchronous
  657. Current SRAM Type 0020h - Synchronous
  658. Cache Speed 0ns
  659. Error Correction Type ParitySingle-Bit ECC
  660. System Cache Type Data
  661. Associativity 8-way Set-Associative
  662. [Cache Information (Type 7) - Length 19 - Handle 0028h]
  663. Socket Designation L1 Cache
  664. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  665. Maximum Cache Size 0080h - 128K
  666. Installed Size 0080h - 128K
  667. Supported SRAM Type 0020h - Synchronous
  668. Current SRAM Type 0020h - Synchronous
  669. Cache Speed 0ns
  670. Error Correction Type ParitySingle-Bit ECC
  671. System Cache Type Instruction
  672. Associativity 8-way Set-Associative
  673. [Cache Information (Type 7) - Length 19 - Handle 0029h]
  674. Socket Designation L2 Cache
  675. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  676. Maximum Cache Size 0400h - 1024K
  677. Installed Size 0400h - 1024K
  678. Supported SRAM Type 0020h - Synchronous
  679. Current SRAM Type 0020h - Synchronous
  680. Cache Speed 0ns
  681. Error Correction Type Multi-Bit ECC
  682. System Cache Type Unified
  683. Associativity 4-way Set-Associative
  684. [Cache Information (Type 7) - Length 19 - Handle 002ah]
  685. Socket Designation L3 Cache
  686. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  687. Maximum Cache Size 2000h - 8192K
  688. Installed Size 2000h - 8192K
  689. Supported SRAM Type 0020h - Synchronous
  690. Current SRAM Type 0020h - Synchronous
  691. Cache Speed 0ns
  692. Error Correction Type Specification Reserved
  693. System Cache Type Unified
  694. Associativity 16-way Set-Associative
  695. [Processor Information (Type 4) - Length 48 - Handle 002bh]
  696. Socket Designation U3E1
  697. Processor Type Central Processor
  698. Processor Family c6h - Specification Reserved
  699. Processor Manufacturer Intel(R) Corporation
  700. Processor ID e3060500fffbebbf
  701. Processor Version Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
  702. Processor Voltage 8ch - 1.2V
  703. External Clock 100MHz
  704. Max Speed 8300MHz
  705. Current Speed 4000MHz
  706. Status Enabled Populated
  707. Processor Upgrade Other
  708. L1 Cache Handle 0028h
  709. L2 Cache Handle 0029h
  710. L3 Cache Handle 002ah
  711. [Physical Memory Array (Type 16) - Length 23 - Handle 002ch]
  712. Location 03h - SystemBoard/Motherboard
  713. Use 03h - System Memory
  714. Memory Error Correction 03h - None
  715. Maximum Capacity 67108864KB
  716. Number of Memory Devices 4
  717. [Memory Device (Type 17) - Length 40 - Handle 002dh]
  718. Physical Memory Array Handle 002ch
  719. Total Width 0 bits
  720. Data Width 0 bits
  721. Form Factor 09h - DIMM
  722. Device Locator ChannelA-DIMM0
  723. Bank Locator
  724. Memory Type 02h - Unknown
  725. Type Detail 0000h -
  726. Speed 0MHz
  727. [Memory Device (Type 17) - Length 40 - Handle 002eh]
  728. Physical Memory Array Handle 002ch
  729. Total Width 0 bits
  730. Data Width 0 bits
  731. Form Factor 09h - DIMM
  732. Device Locator ChannelA-DIMM1
  733. Bank Locator
  734. Memory Type 02h - Unknown
  735. Type Detail 0000h -
  736. Speed 0MHz
  737. [Memory Device (Type 17) - Length 40 - Handle 002fh]
  738. Physical Memory Array Handle 002ch
  739. Total Width 64 bits
  740. Data Width 64 bits
  741. Size 8192MB
  742. Form Factor 09h - DIMM
  743. Device Locator ChannelB-DIMM0
  744. Bank Locator
  745. Memory Type 1ah - Specification Reserved
  746. Type Detail 0080h - Synchronous
  747. Speed 2133MHz
  748. Manufacturer Micron
  749. Part Number 16ATF1G64AZ-2G1B1
  750. [Memory Device (Type 17) - Length 40 - Handle 0030h]
  751. Physical Memory Array Handle 002ch
  752. Total Width 64 bits
  753. Data Width 64 bits
  754. Size 8192MB
  755. Form Factor 09h - DIMM
  756. Device Locator ChannelB-DIMM1
  757. Bank Locator
  758. Memory Type 1ah - Specification Reserved
  759. Type Detail 0080h - Synchronous
  760. Speed 2133MHz
  761. Manufacturer Micron
  762. Part Number 16ATF1G64AZ-2G1B1
  763. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 0031h]
  764. Starting Address 00000000h
  765. Ending Address 00ffffffh
  766. Memory Array Handle 002ch
  767. Partition Width 02
  768. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0032h]
  769. Starting Address 00000000h
  770. Ending Address 007fffffh
  771. Memory Device Handle 002fh
  772. Mem Array Mapped Adr Handle 0031h
  773. Partition Row Position 01
  774. Interleave Position [None]
  775. Interleave Data Depth [None]
  776. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0033h]
  777. Starting Address 00800000h
  778. Ending Address 00ffffffh
  779. Memory Device Handle 0030h
  780. Mem Array Mapped Adr Handle 0031h
  781. Partition Row Position 01
  782. Interleave Position [None]
  783. Interleave Data Depth [None]
  784.  
  785. ========================== Dump #1: Extra #1 ===========================
  786.  
  787. 4: kd> !verifier
  788. Verify Flags Level 0x00000000
  789. STANDARD FLAGS:
  790. [X] (0x00000000) Automatic Checks
  791. [ ] (0x00000001) Special pool
  792. [ ] (0x00000002) Force IRQL checking
  793. [ ] (0x00000008) Pool tracking
  794. [ ] (0x00000010) I/O verification
  795. [ ] (0x00000020) Deadlock detection
  796. [ ] (0x00000080) DMA checking
  797. [ ] (0x00000100) Security checks
  798. [ ] (0x00000800) Miscellaneous checks
  799. [ ] (0x00020000) DDI compliance checking
  800. ADDITIONAL FLAGS:
  801. [ ] (0x00000004) Randomized low resources simulation
  802. [ ] (0x00000200) Force pending I/O requests
  803. [ ] (0x00000400) IRP logging
  804. [ ] (0x00002000) Invariant MDL checking for stack
  805. [ ] (0x00004000) Invariant MDL checking for driver
  806. [ ] (0x00008000) Power framework delay fuzzing
  807. [ ] (0x00010000) Port/miniport interface checking
  808. [ ] (0x00040000) Systematic low resources simulation
  809. [ ] (0x00080000) DDI compliance checking (additional)
  810. [ ] (0x00200000) NDIS/WIFI verification
  811. [ ] (0x00800000) Kernel synchronization delay fuzzing
  812. [ ] (0x01000000) VM switch verification
  813. [ ] (0x02000000) Code integrity checks
  814. [X] Indicates flag is enabled
  815. Summary of All Verifier Statistics
  816. RaiseIrqls 0x0
  817. AcquireSpinLocks 0x0
  818. Synch Executions 0x0
  819. Trims 0x0
  820. Pool Allocations Attempted 0x0
  821. Pool Allocations Succeeded 0x0
  822. Pool Allocations Succeeded SpecialPool 0x0
  823. Pool Allocations With NO TAG 0x0
  824. Pool Allocations Failed 0x0
  825. Current paged pool allocations 0x0 for 00000000 bytes
  826. Peak paged pool allocations 0x0 for 00000000 bytes
  827. Current nonpaged pool allocations 0x0 for 00000000 bytes
  828. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  829.  
  830. ========================== Dump #1: Extra #2 ===========================
  831.  
  832. 4: kd> !thread
  833. THREAD ffffc00c7bae2080 Cid 2adc.0c68 Teb: 000000fd31e52000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
  834. ffffc00c83a692e0 SynchronizationEvent
  835. Not impersonating
  836. GetUlongFromAddress: unable to read from fffff8024581143c
  837. Owning Process ffffc00c806d5080 Image: Wow.exe
  838. Attached Process N/A Image: N/A
  839. fffff78000000000: Unable to get shared data
  840. Wait Start TickCount 18108934
  841. Context Switch Count 282607 IdealProcessor: 0
  842. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  843. UserTime 00:00:00.000
  844. KernelTime 00:00:00.000
  845. Win32 Start Address 0x00007ffdbb4a928c
  846. Stack Init fffff98329f1fb90 Current fffff98329f1f5a0
  847. Base fffff98329f20000 Limit fffff98329f19000 Call 0000000000000000
  848. Priority 3 BasePriority 1 PriorityDecrement 2 IoPriority 2 PagePriority 5
  849. Child-SP RetAddr : Args to Child : Call Site
  850. fffff983`29f1f5e0 00000292`cc9d8e0c : ffff8b00`36940180 fffff802`4500d21f 00000000`00000010 00000000`00040217 : nt!KiSwapContext+0x76
  851. fffff983`29f1f720 ffff8b00`36940180 : fffff802`4500d21f 00000000`00000010 00000000`00040217 fffff983`29f1f750 : 0x00000292`cc9d8e0c
  852. fffff983`29f1f728 fffff802`4500d21f : 00000000`00000010 00000000`00040217 fffff983`29f1f750 00000000`00000018 : 0xffff8b00`36940180
  853. fffff983`29f1f730 00000000`00000000 : ffffc00c`7bae2180 00000000`00000002 ffff8b00`36940180 fffff802`44e2751d : nt!KiInsertTimerTable+0x1e406f
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!