API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 27th, 2020
59
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 151.17 KB | None | 0 0
raw download clone embed print report
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 03 minutes and 24 seconds
  5.  
  6. ================================= BIOS =================================
  7. VENDOR: American Megatrends Inc.
  8. VERSION: P3.50
  9. DATE: 07/18/2019
  10.  
  11. ============================= MOTHERBOARD ==============================
  12. MANUFACTURER: ASRock
  13. PRODUCT: B450M Pro4
  14.  
  15. ================================= RAM ==================================
  16. Size Speed Manufacturer Part No.
  17. -------------- -------------- ------------------- ----------------------
  18. 0MHz Unknown Unknown
  19. 8192MB 2133MHz Unknown F4-3000C16-8GVRB
  20. 0MHz Unknown Unknown
  21. 8192MB 2133MHz Unknown F4-3000C16-8GVRB
  22.  
  23. ================================= CPU ==================================
  24. Processor Version: AMD Ryzen 5 2600 Six-Core Processor
  25. COUNT: c
  26. MHZ: 3394
  27. VENDOR: AuthenticAMD
  28. FAMILY: 17
  29. MODEL: 8
  30. STEPPING: 2
  31.  
  32. ================================== OS ==================================
  33. Product: WinNt, suite: TerminalServer SingleUserTS
  34. Built by: 19041.1.amd64fre.vb_release.191206-1406
  35. BUILD_VERSION: 10.0.19041.388 (WinBuild.160101.0800)
  36. BUILD: 19041
  37. SERVICEPACK: 388
  38. PLATFORM_TYPE: x64
  39. NAME: Windows 10
  40. EDITION: Windows 10 WinNt TerminalServer SingleUserTS
  41. BUILD_TIMESTAMP: unknown_date
  42. BUILDDATESTAMP: 160101.0800
  43. BUILDLAB: WinBuild
  44. BUILDOSVER: 10.0.19041.388
  45.  
  46. =============================== DEBUGGER ===============================
  47. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  48. Copyright (c) Microsoft Corporation. All rights reserved.
  49.  
  50. =============================== COMMENTS ===============================
  51. * Information gathered from different dump files may be different. If
  52. Windows updates between two dump files, two or more OS versions may
  53. be shown above.
  54. * If the user updates the BIOS between dump files, two or more versions
  55. and dates may be shown above.
  56. * More RAM information can be found below in a full BIOS section.
  57.  
  58. ========================================================================
  59. ======================= Dump #1: ANALYZE VERBOSE =======================
  60. ======================= File: 072720-7531-01.dmp =======================
  61. ========================================================================
  62.  
  63. Mini Kernel Dump File: Only registers and stack trace are available
  64. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  65. Kernel base = 0xfffff801`0b800000 PsLoadedModuleList = 0xfffff801`0c42a310
  66. Debug session time: Mon Jul 27 14:53:13.755 2020 (UTC - 4:00)
  67. System Uptime: 0 days 0:34:45.390
  68.  
  69. BugCheck 1A, {61941, 1ee1ec33898, d, fffffc8a7d27db00}
  70. Probably caused by : memory_corruption
  71. Followup: memory_corruption
  72.  
  73. MEMORY_MANAGEMENT (1a)
  74. # Any other values for parameter 1 must be individually examined.
  75.  
  76. Arguments:
  77. Arg1: 0000000000061941, The subtype of the bugcheck.
  78. Arg2: 000001ee1ec33898
  79. Arg3: 000000000000000d
  80. Arg4: fffffc8a7d27db00
  81.  
  82. Debugging Details:
  83. DUMP_CLASS: 1
  84. DUMP_QUALIFIER: 400
  85. DUMP_TYPE: 2
  86. BUGCHECK_STR: 0x1a_61941
  87. CUSTOMER_CRASH_COUNT: 1
  88. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  89.  
  90. PROCESS_NAME: firefox.exe
  91.  
  92. CURRENT_IRQL: 0
  93. LAST_CONTROL_TRANSFER: from fffff8010bc020a6 to fffff8010bbddb60
  94. STACK_TEXT:
  95. fffffc8a`7d27d958 fffff801`0bc020a6 : 00000000`0000001a 00000000`00061941 000001ee`1ec33898 00000000`0000000d : nt!KeBugCheckEx
  96. fffffc8a`7d27d960 fffff801`0bbebc1e : 000001ee`13e27001 ffff890f`e81e0080 00000000`00000000 ffff890f`e80ba080 : nt!MmAccessFault+0x1ef7a6
  97. fffffc8a`7d27db00 00007ff9`12d07e93 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
  98. 00000093`865f60e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`12d07e93
  99. STACK_COMMAND: kb
  100. CHKIMG_EXTENSION: !chkimg -lo 50 -d !win32kbase
  101. fffff39d2b02b164-fffff39d2b02b165 2 bytes - win32kbase!UserSessionSwitchLeaveCrit+94
  102. [ 48 ff:4c 8b ]
  103. fffff39d2b02b16b-fffff39d2b02b16e 4 bytes - win32kbase!UserSessionSwitchLeaveCrit+9b (+0x07)
  104. [ 0f 1f 44 00:e8 b0 a2 2b ]
  105. 6 errors : !win32kbase (fffff39d2b02b164-fffff39d2b02b16e)
  106. MODULE_NAME: memory_corruption
  107.  
  108. IMAGE_NAME: memory_corruption
  109.  
  110. FOLLOWUP_NAME: memory_corruption
  111. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  112. MEMORY_CORRUPTOR: LARGE
  113. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  114. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  115. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  116. TARGET_TIME: 2020-07-27T18:53:13.000Z
  117. SUITE_MASK: 272
  118. PRODUCT_TYPE: 1
  119. USER_LCID: 0
  120. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  121. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  122. Followup: memory_corruption
  123.  
  124. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  125.  
  126. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  127. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  128. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  129. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  130. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  131. Nov 16 2018 - logi_core_temp.sys - Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  132. Nov 20 2018 - logi_joy_bus_enum.sys - Logitech Joystick driver
  133. Nov 20 2018 - logi_joy_xlcore.sys - Logitech Joystick driver
  134. Mar 08 2019 - dokan1.sys - Dokan Project driver (ISLOG)
  135. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  136. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  137. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  138. Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  139. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  140. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  141. Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  142. Jan 30 2020 - tapmullvad0901.sys - TAP-Windows Virtual Network driver (The OpenVPN Project)
  143. Apr 20 2020 - logi_joy_vir_hid.sys - Logitech Joystick driver
  144. Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  145. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  146. Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  147.  
  148. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  149.  
  150. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  151. Image name: lvrs64.sys
  152. Search : https://www.google.com/search?q=lvrs64.sys
  153. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  154. Timestamp : Mon Oct 22 2012
  155.  
  156. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  157. Image name: lvuvc64.sys
  158. Search : https://www.google.com/search?q=lvuvc64.sys
  159. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  160. Timestamp : Mon Oct 22 2012
  161.  
  162. Image path: \SystemRoot\System32\drivers\amdgpio3.sys
  163. Image name: amdgpio3.sys
  164. Search : https://www.google.com/search?q=amdgpio3.sys
  165. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  166. Timestamp : Mon Mar 14 2016
  167.  
  168. Image path: \SystemRoot\system32\DRIVERS\amdpsp.sys
  169. Image name: amdpsp.sys
  170. Search : https://www.google.com/search?q=amdpsp.sys
  171. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  172. Timestamp : Mon Jun 5 2017
  173.  
  174. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  175. Image name: AMDPCIDev.sys
  176. Search : https://www.google.com/search?q=AMDPCIDev.sys
  177. ADA Info : Advanced Micro Devices PCI Device driver
  178. Timestamp : Thu Apr 12 2018
  179.  
  180. Image path: \??\C:\ProgramData\LGHUB\depots\57944\driver_cpu_temperature\logi_core_temp.sys
  181. Image name: logi_core_temp.sys
  182. Search : https://www.google.com/search?q=logi_core_temp.sys
  183. ADA Info : Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  184. Timestamp : Fri Nov 16 2018
  185.  
  186. Image path: \SystemRoot\system32\drivers\logi_joy_bus_enum.sys
  187. Image name: logi_joy_bus_enum.sys
  188. Search : https://www.google.com/search?q=logi_joy_bus_enum.sys
  189. ADA Info : Logitech Joystick driver
  190. Timestamp : Tue Nov 20 2018
  191.  
  192. Image path: \SystemRoot\system32\drivers\logi_joy_xlcore.sys
  193. Image name: logi_joy_xlcore.sys
  194. Search : https://www.google.com/search?q=logi_joy_xlcore.sys
  195. ADA Info : Logitech Joystick driver
  196. Timestamp : Tue Nov 20 2018
  197.  
  198. Image path: \SystemRoot\system32\DRIVERS\dokan1.sys
  199. Image name: dokan1.sys
  200. Search : https://www.google.com/search?q=dokan1.sys
  201. ADA Info : Dokan Project driver (ISLOG)
  202. Timestamp : Fri Mar 8 2019
  203.  
  204. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  205. Image name: nvvad64v.sys
  206. Search : https://www.google.com/search?q=nvvad64v.sys
  207. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  208. Timestamp : Thu Mar 14 2019
  209.  
  210. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  211. Image path: \SystemRoot\System32\drivers\rt640x64.sys
  212. Image name: rt640x64.sys
  213. Search : https://www.google.com/search?q=rt640x64.sys
  214. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  215. Timestamp : Fri May 24 2019
  216. File version: 9.1.410.2015
  217. Product version: 9.1.410.2015
  218. File flags: 8 (Mask 3F) Private
  219. File OS: 40004 NT Win32
  220. File type: 3.6 Driver
  221. File date: 00000000.00000000
  222. CompanyName: Realtek
  223. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  224. InternalName: rt640x64.sys
  225. OriginalFilename: rt640x64.sys
  226. ProductVersion: 9.001.0410.2015
  227. FileVersion: 9.001.0410.2015
  228. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  229. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  230.  
  231. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  232. Image name: amdgpio2.sys
  233. Search : https://www.google.com/search?q=amdgpio2.sys
  234. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  235. Timestamp : Sun Sep 29 2019
  236.  
  237. Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
  238. Image name: mbamswissarmy.sys
  239. Search : https://www.google.com/search?q=mbamswissarmy.sys
  240. ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  241. Timestamp : Wed Nov 20 2019
  242.  
  243. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  244. Image name: NvModuleTracker.sys
  245. Search : https://www.google.com/search?q=NvModuleTracker.sys
  246. ADA Info : NVIDIA Module Tracker driver
  247. Timestamp : Fri Nov 29 2019
  248.  
  249. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  250. Image name: nvvhci.sys
  251. Search : https://www.google.com/search?q=nvvhci.sys
  252. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  253. Timestamp : Fri Jan 10 2020
  254.  
  255. Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
  256. Image name: UcmCxUcsiNvppc.sys
  257. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  258. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  259. Timestamp : Sun Jan 26 2020
  260.  
  261. Image path: \SystemRoot\System32\drivers\tapmullvad0901.sys
  262. Image name: tapmullvad0901.sys
  263. Search : https://www.google.com/search?q=tapmullvad0901.sys
  264. ADA Info : TAP-Windows Virtual Network driver (The OpenVPN Project)
  265. Timestamp : Thu Jan 30 2020
  266.  
  267. Image path: \SystemRoot\system32\drivers\logi_joy_vir_hid.sys
  268. Image name: logi_joy_vir_hid.sys
  269. Search : https://www.google.com/search?q=logi_joy_vir_hid.sys
  270. ADA Info : Logitech Joystick driver
  271. Timestamp : Mon Apr 20 2020
  272.  
  273. Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
  274. Image name: MbamChameleon.sys
  275. Search : https://www.google.com/search?q=MbamChameleon.sys
  276. ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  277. Timestamp : Thu Jun 4 2020
  278.  
  279. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  280. Image name: nvhda64v.sys
  281. Search : https://www.google.com/search?q=nvhda64v.sys
  282. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  283. Timestamp : Tue Jun 9 2020
  284.  
  285. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\nvlddmkm.sys
  286. Image name: nvlddmkm.sys
  287. Search : https://www.google.com/search?q=nvlddmkm.sys
  288. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  289. Timestamp : Sun Jul 5 2020
  290.  
  291. ====================== Dump #1: MICROSOFT DRIVERS ======================
  292.  
  293. ACPI.sys ACPI Driver for NT (Microsoft)
  294. acpiex.sys ACPIEx Driver (Microsoft)
  295. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  296. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  297. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  298. ahcache.sys Application Compatibility Cache (Microsoft)
  299. amdppm.sys Processor Device Driver
  300. bam.sys BAM Kernal driver (Microsoft)
  301. BasicDisplay.sys Basic Display driver (Microsoft)
  302. BasicRender.sys Basic Render driver (Microsoft)
  303. Beep.SYS BEEP driver (Microsoft)
  304. bindflt.sys Windows Bind Filter driver (Microsoft)
  305. BOOTVID.dll VGA Boot Driver (Microsoft)
  306. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  307. cdd.dll Canonical Display Driver (Microsoft)
  308. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  309. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  310. CI.dll Code Integrity Module (Microsoft)
  311. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  312. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  313. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  314. CLFS.SYS Common Log File System Driver (Microsoft)
  315. clipsp.sys CLIP Service (Microsoft)
  316. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  317. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  318. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  319. condrv.sys Console Driver (Microsoft)
  320. crashdmp.sys Crash Dump driver (Microsoft)
  321. csc.sys Windows Client Side Caching driver (Microsoft)
  322. dc1-controller.sys KMDF driver for DC1 Controller
  323. DevAuthE.sys Xbox Device Authentication Driver
  324. dfsc.sys DFS Namespace Client Driver (Microsoft)
  325. disk.sys PnP Disk Driver (Microsoft)
  326. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  327. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  328. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  329. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  330. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  331. dxgmms2.sys DirectX Graphics MMS
  332. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  333. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  334. fileinfo.sys FileInfo Filter Driver (Microsoft)
  335. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  336. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  337. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  338. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  339. gameflt.sys Gaming Install Filter driver (Microsoft)
  340. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  341. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  342. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  343. HdAudio.sys High Definition Audio Function driver (Microsoft)
  344. HIDCLASS.SYS Hid Class Library (Microsoft)
  345. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  346. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  347. HTTP.sys HTTP Protocol Stack (Microsoft)
  348. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  349. intelpep.sys Intel Power Engine Plugin (Microsoft)
  350. IntelTA.sys Intel Telemetry Driver
  351. iorate.sys I/O rate control Filter (Microsoft)
  352. kbdclass.sys Keyboard Class Driver (Microsoft)
  353. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  354. kd.dll Local Kernal Debugger (Microsoft)
  355. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  356. ks.sys Kernal CSA Library (Microsoft)
  357. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  358. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  359. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  360. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  361. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  362. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  363. mmcss.sys MMCSS Driver (Microsoft)
  364. monitor.sys Monitor Driver (Microsoft)
  365. mouclass.sys Mouse Class Driver (Microsoft)
  366. mouhid.sys HID Mouse Filter Driver (Microsoft)
  367. mountmgr.sys Mount Point Manager (Microsoft)
  368. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  369. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  370. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  371. Msfs.SYS Mailslot driver (Microsoft)
  372. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  373. msisadrv.sys ISA Driver (Microsoft)
  374. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  375. msquic.sys Windows QUIC Driver
  376. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  377. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  378. mssmbios.sys System Management BIOS driver (Microsoft)
  379. mup.sys Multiple UNC Provider driver (Microsoft)
  380. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  381. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  382. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  383. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  384. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  385. NDProxy.sys NDIS Proxy driver (Microsoft)
  386. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  387. netbios.sys NetBIOS Interface driver (Microsoft)
  388. netbt.sys MBT Transport driver (Microsoft)
  389. NETIO.SYS Network I/O Subsystem (Microsoft)
  390. Npfs.SYS NPFS driver (Microsoft)
  391. npsvctrig.sys Named pipe service triggers (Microsoft)
  392. nsiproxy.sys NSI Proxy driver (Microsoft)
  393. Ntfs.sys NT File System Driver (Microsoft)
  394. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  395. ntosext.sys NTOS Extension Host driver (Microsoft)
  396. Null.SYS NULL Driver (Microsoft)
  397. pacer.sys QoS Packet Scheduler (Microsoft)
  398. partmgr.sys Partition driver (Microsoft)
  399. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  400. pcw.sys Performance Counter Driver (Microsoft)
  401. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  402. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  403. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  404. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  405. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  406. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  407. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  408. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  409. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  410. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  411. rdyboost.sys ReadyBoost Driver (Microsoft)
  412. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  413. serenum.sys Serial Port Enumerator (Microsoft)
  414. serial.sys Serial Device Driver
  415. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  416. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  417. spaceport.sys Storage Spaces driver (Microsoft)
  418. srv2.sys Smb 2.0 Server driver (Microsoft)
  419. srvnet.sys Server Network driver (Microsoft)
  420. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  421. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  422. storqosflt.sys Storage QoS Filter driver (Microsoft)
  423. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  424. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  425. tcpip.sys TCP/IP Protocol driver (Microsoft)
  426. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  427. TDI.SYS TDI Wrapper driver (Microsoft)
  428. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  429. tm.sys Kernel Transaction Manager driver (Microsoft)
  430. UcmCx.sys USB Connector Manager KMDF Class Extension
  431. ucx01000.sys USB Controller Extension (Microsoft)
  432. umbus.sys User-Mode Bus Enumerator (Microsoft)
  433. usbaudio.sys USB Audio Class Driver (Microsoft)
  434. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  435. USBD.SYS Universal Serial Bus Driver (Microsoft)
  436. UsbHub3.sys USB3 HUB driver (Microsoft)
  437. USBXHCI.SYS USB XHCI driver (Microsoft)
  438. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  439. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  440. volmgr.sys Volume Manager Driver (Microsoft)
  441. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  442. volsnap.sys Volume Shadow Copy driver (Microsoft)
  443. volume.sys Volume driver (Microsoft)
  444. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  445. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  446. watchdog.sys Watchdog driver (Microsoft)
  447. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  448. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  449. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  450. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  451. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  452. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  453. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  454. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  455. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  456. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  457. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  458. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  459. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  460. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  461. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  462. Wof.sys Windows Overlay Filter (Microsoft)
  463. WppRecorder.sys WPP Trace Recorder (Microsoft)
  464. xboxgip.sys Game Input Protocol Driver
  465. xinputhid.sys XINPUT filter driver for HID
  466. xvdd.sys XVD Disk driver (Microsoft)
  467.  
  468. ====================== Dump #1: UNLOADED MODULES =======================
  469.  
  470. fffff801`12270000 fffff801`12281000 MSKSSRV.sys
  471. fffff801`11770000 fffff801`1177f000 dump_storpor
  472. fffff801`117c0000 fffff801`117f3000 dump_storahc
  473. fffff801`10a20000 fffff801`10a3e000 dump_dumpfve
  474. fffff801`11440000 fffff801`1145c000 dam.sys
  475. fffff801`0f400000 fffff801`0f411000 WdBoot.sys
  476. fffff801`0f3f0000 fffff801`0f3f9000 MbamElam.sys
  477. fffff801`10480000 fffff801`10490000 hwpolicy.sys
  478.  
  479. ====================== Dump #1: BIOS INFORMATION =======================
  480.  
  481. [SMBIOS Data Tables v3.2]
  482. [DMI Version - 0]
  483. [2.0 Calling Convention - No]
  484. [Table Size - 1763 bytes]
  485. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  486. Vendor American Megatrends Inc.
  487. BIOS Version P3.50
  488. BIOS Starting Address Segment f000
  489. BIOS Release Date 07/18/2019
  490. BIOS ROM Size 1000000
  491. BIOS Characteristics
  492. 07: - PCI Supported
  493. 11: - Upgradeable FLASH BIOS
  494. 12: - BIOS Shadowing Supported
  495. 15: - CD-Boot Supported
  496. 16: - Selectable Boot Supported
  497. 17: - BIOS ROM Socketed
  498. 19: - EDD Supported
  499. 23: - 1.2MB Floppy Supported
  500. 24: - 720KB Floppy Supported
  501. 25: - 2.88MB Floppy Supported
  502. 26: - Print Screen Device Supported
  503. 27: - Keyboard Services Supported
  504. 28: - Serial Services Supported
  505. 29: - Printer Services Supported
  506. 32: - BIOS Vendor Reserved
  507. BIOS Characteristic Extensions
  508. 00: - ACPI Supported
  509. 01: - USB Legacy Supported
  510. 08: - BIOS Boot Specification Supported
  511. 10: - Specification Reserved
  512. 11: - Specification Reserved
  513. BIOS Major Revision 5
  514. BIOS Minor Revision 14
  515. EC Firmware Major Revision 255
  516. EC Firmware Minor Revision 255
  517. [System Information (Type 1) - Length 27 - Handle 0001h]
  518. UUID 00000000-0000-0000-0000-000000000000
  519. Wakeup Type Power Switch
  520. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  521. Manufacturer ASRock
  522. Product B450M Pro4
  523. Version
  524. Feature Flags 09h
  525. 810202848: - 810202896: - «?uþ
  526. Location
  527. Chassis Handle 0003h
  528. Board Type 0ah - Processor/Memory Module
  529. Number of Child Handles 0
  530. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  531. Chassis Type Desktop
  532. Bootup State Safe
  533. Power Supply State Safe
  534. Thermal State Safe
  535. Security Status None
  536. OEM Defined 0
  537. Height 0U
  538. Number of Power Cords 1
  539. Number of Contained Elements 0
  540. Contained Element Size 3
  541. [OEM Strings (Type 11) - Length 5 - Handle 0008h]
  542. Number of Strings 1
  543. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000bh]
  544. [Physical Memory Array (Type 16) - Length 23 - Handle 000ch]
  545. Location 03h - SystemBoard/Motherboard
  546. Use 03h - System Memory
  547. Memory Error Correction 03h - None
  548. Maximum Capacity 134217728KB
  549. Memory Error Inf Handle 000bh
  550. Number of Memory Devices 4
  551. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000dh]
  552. Starting Address 00000000h
  553. Ending Address 00ffffffh
  554. Memory Array Handle 000ch
  555. Partition Width 02
  556. [Cache Information (Type 7) - Length 27 - Handle 000eh]
  557. Socket Designation L1 - Cache
  558. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  559. Maximum Cache Size 0240h - 576K
  560. Installed Size 0240h - 576K
  561. Supported SRAM Type 0010h - Pipeline-Burst
  562. Current SRAM Type 0010h - Pipeline-Burst
  563. Cache Speed 1ns
  564. Error Correction Type Specification Reserved
  565. System Cache Type Unified
  566. Associativity 8-way Set-Associative
  567. [Cache Information (Type 7) - Length 27 - Handle 000fh]
  568. Socket Designation L2 - Cache
  569. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  570. Maximum Cache Size 0c00h - 3072K
  571. Installed Size 0c00h - 3072K
  572. Supported SRAM Type 0010h - Pipeline-Burst
  573. Current SRAM Type 0010h - Pipeline-Burst
  574. Cache Speed 1ns
  575. Error Correction Type Specification Reserved
  576. System Cache Type Unified
  577. Associativity 8-way Set-Associative
  578. [Cache Information (Type 7) - Length 27 - Handle 0010h]
  579. Socket Designation L3 - Cache
  580. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  581. Maximum Cache Size 4000h - 16384K
  582. Installed Size 4000h - 16384K
  583. Supported SRAM Type 0010h - Pipeline-Burst
  584. Current SRAM Type 0010h - Pipeline-Burst
  585. Cache Speed 1ns
  586. Error Correction Type Specification Reserved
  587. System Cache Type Unified
  588. Associativity 16-way Set-Associative
  589. [Processor Information (Type 4) - Length 48 - Handle 0011h]
  590. Socket Designation AM4
  591. Processor Type Central Processor
  592. Processor Family 6bh - Specification Reserved
  593. Processor Manufacturer Advanced Micro Devices, Inc.
  594. Processor ID 820f8000fffb8b17
  595. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  596. Processor Voltage 8bh - 1.1V
  597. External Clock 100MHz
  598. Max Speed 3900MHz
  599. Current Speed 3400MHz
  600. Status Enabled Populated
  601. Processor Upgrade Specification Reserved
  602. L1 Cache Handle 000eh
  603. L2 Cache Handle 000fh
  604. L3 Cache Handle 0010h
  605. Part Number Unknown
  606. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0012h]
  607. [Memory Device (Type 17) - Length 84 - Handle 0013h]
  608. Physical Memory Array Handle 000ch
  609. Memory Error Info Handle 0012h
  610. Form Factor 02h - Unknown
  611. Device Locator DIMM 0
  612. Bank Locator P0 CHANNEL A
  613. Memory Type 02h - Unknown
  614. Type Detail 0004h - Unknown
  615. Speed 0MHz
  616. Manufacturer Unknown
  617. Part Number Unknown
  618. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  619. [Memory Device (Type 17) - Length 84 - Handle 0015h]
  620. Physical Memory Array Handle 000ch
  621. Memory Error Info Handle 0014h
  622. Total Width 64 bits
  623. Data Width 64 bits
  624. Size 8192MB
  625. Form Factor 09h - DIMM
  626. Device Locator DIMM 1
  627. Bank Locator P0 CHANNEL A
  628. Memory Type 1ah - Specification Reserved
  629. Type Detail 4080h - Synchronous
  630. Speed 2133MHz
  631. Manufacturer Unknown
  632. Part Number F4-3000C16-8GVRB
  633. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  634. Starting Address 00000000h
  635. Ending Address 00ffffffh
  636. Memory Device Handle 0015h
  637. Mem Array Mapped Adr Handle 000dh
  638. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0017h]
  639. [Memory Device (Type 17) - Length 84 - Handle 0018h]
  640. Physical Memory Array Handle 000ch
  641. Memory Error Info Handle 0017h
  642. Form Factor 02h - Unknown
  643. Device Locator DIMM 0
  644. Bank Locator P0 CHANNEL B
  645. Memory Type 02h - Unknown
  646. Type Detail 0004h - Unknown
  647. Speed 0MHz
  648. Manufacturer Unknown
  649. Part Number Unknown
  650. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0019h]
  651. [Memory Device (Type 17) - Length 84 - Handle 001ah]
  652. Physical Memory Array Handle 000ch
  653. Memory Error Info Handle 0019h
  654. Total Width 64 bits
  655. Data Width 64 bits
  656. Size 8192MB
  657. Form Factor 09h - DIMM
  658. Device Locator DIMM 1
  659. Bank Locator P0 CHANNEL B
  660. Memory Type 1ah - Specification Reserved
  661. Type Detail 4080h - Synchronous
  662. Speed 2133MHz
  663. Manufacturer Unknown
  664. Part Number F4-3000C16-8GVRB
  665. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  666. Starting Address 00000000h
  667. Ending Address 00ffffffh
  668. Memory Device Handle 001ah
  669. Mem Array Mapped Adr Handle 000dh
  670.  
  671. ========================== Dump #1: Extra #1 ===========================
  672.  
  673. 4: kd> !verifier
  674. Verify Flags Level 0x00000000
  675. STANDARD FLAGS:
  676. [X] (0x00000000) Automatic Checks
  677. [ ] (0x00000001) Special pool
  678. [ ] (0x00000002) Force IRQL checking
  679. [ ] (0x00000008) Pool tracking
  680. [ ] (0x00000010) I/O verification
  681. [ ] (0x00000020) Deadlock detection
  682. [ ] (0x00000080) DMA checking
  683. [ ] (0x00000100) Security checks
  684. [ ] (0x00000800) Miscellaneous checks
  685. [ ] (0x00020000) DDI compliance checking
  686. ADDITIONAL FLAGS:
  687. [ ] (0x00000004) Randomized low resources simulation
  688. [ ] (0x00000200) Force pending I/O requests
  689. [ ] (0x00000400) IRP logging
  690. [ ] (0x00002000) Invariant MDL checking for stack
  691. [ ] (0x00004000) Invariant MDL checking for driver
  692. [ ] (0x00008000) Power framework delay fuzzing
  693. [ ] (0x00010000) Port/miniport interface checking
  694. [ ] (0x00040000) Systematic low resources simulation
  695. [ ] (0x00080000) DDI compliance checking (additional)
  696. [ ] (0x00200000) NDIS/WIFI verification
  697. [ ] (0x00800000) Kernel synchronization delay fuzzing
  698. [ ] (0x01000000) VM switch verification
  699. [ ] (0x02000000) Code integrity checks
  700. [X] Indicates flag is enabled
  701. Summary of All Verifier Statistics
  702. RaiseIrqls 0x0
  703. AcquireSpinLocks 0x0
  704. Synch Executions 0x0
  705. Trims 0x0
  706. Pool Allocations Attempted 0x0
  707. Pool Allocations Succeeded 0x0
  708. Pool Allocations Succeeded SpecialPool 0x0
  709. Pool Allocations With NO TAG 0x0
  710. Pool Allocations Failed 0x0
  711. Current paged pool allocations 0x0 for 00000000 bytes
  712. Peak paged pool allocations 0x0 for 00000000 bytes
  713. Current nonpaged pool allocations 0x0 for 00000000 bytes
  714. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  715.  
  716. ========================== Dump #1: Extra #2 ===========================
  717.  
  718. 4: kd> !thread
  719. THREAD ffff890fe80ba080 Cid 1804.2638 Teb: 0000009385c14000 Win32Thread: ffff890fe8e5d5e0 RUNNING on processor 4
  720. Not impersonating
  721. GetUlongFromAddress: unable to read from fffff8010c41143c
  722. Owning Process ffff890fe6d1d080 Image: firefox.exe
  723. Attached Process N/A Image: N/A
  724. fffff78000000000: Unable to get shared data
  725. Wait Start TickCount 133464
  726. Context Switch Count 960331 IdealProcessor: 2
  727. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  728. UserTime 00:00:00.000
  729. KernelTime 00:00:00.000
  730. Win32 Start Address 0x00007ff7e7888ea0
  731. Stack Init fffffc8a7d27dc90 Current fffffc8a7d27d310
  732. Base fffffc8a7d27e000 Limit fffffc8a7d278000 Call 0000000000000000
  733. Priority 12 BasePriority 8 PriorityDecrement 2 IoPriority 2 PagePriority 5
  734. Child-SP RetAddr : Args to Child : Call Site
  735. fffffc8a`7d27d958 fffff801`0bc020a6 : 00000000`0000001a 00000000`00061941 000001ee`1ec33898 00000000`0000000d : nt!KeBugCheckEx
  736. fffffc8a`7d27d960 fffff801`0bbebc1e : 000001ee`13e27001 ffff890f`e81e0080 00000000`00000000 ffff890f`e80ba080 : nt!MmAccessFault+0x1ef7a6
  737. fffffc8a`7d27db00 00007ff9`12d07e93 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e (TrapFrame @ fffffc8a`7d27db00)
  738. 00000093`865f60e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`12d07e93
  739.  
  740.  
  741. ========================================================================
  742. ======================= Dump #2: ANALYZE VERBOSE =======================
  743. ======================= File: 072720-7265-01.dmp =======================
  744. ========================================================================
  745.  
  746. Mini Kernel Dump File: Only registers and stack trace are available
  747. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  748. Kernel base = 0xfffff802`3b800000 PsLoadedModuleList = 0xfffff802`3c42a310
  749. Debug session time: Mon Jul 27 14:58:46.541 2020 (UTC - 4:00)
  750. System Uptime: 0 days 0:05:02.175
  751.  
  752. BugCheck 50, {ffffb43fcd347d58, 0, fffff8023c0e926e, 2}
  753. Could not read faulting driver name
  754. *** WARNING: Unable to verify timestamp for win32k.sys
  755. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  756. Probably caused by : memory_corruption
  757. Followup: memory_corruption
  758.  
  759. PAGE_FAULT_IN_NONPAGED_AREA (50)
  760. Invalid system memory was referenced. This cannot be protected by try-except.
  761. Typically the address is just plain bad or it is pointing at freed memory.
  762.  
  763. Arguments:
  764. Arg1: ffffb43fcd347d58, memory referenced.
  765. Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
  766. Arg3: fffff8023c0e926e, If non-zero, the instruction address which referenced the bad memory
  767. address.
  768. Arg4: 0000000000000002, (reserved)
  769.  
  770. Debugging Details:
  771. Could not read faulting driver name
  772. DUMP_CLASS: 1
  773. DUMP_QUALIFIER: 400
  774. DUMP_TYPE: 2
  775. READ_ADDRESS: fffff8023c4fa388: Unable to get MiVisibleState
  776. ffffb43fcd347d58
  777. FAULTING_IP:
  778. nt!ObpCaptureHandleInformation+8e
  779. fffff802`3c0e926e 410fb64118 movzx eax,byte ptr [r9+18h]
  780. MM_INTERNAL_CODE: 2
  781. CUSTOMER_CRASH_COUNT: 1
  782. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  783. BUGCHECK_STR: AV
  784.  
  785. PROCESS_NAME: steam.exe
  786.  
  787. CURRENT_IRQL: 0
  788. TRAP_FRAME: ffffc80063595150 -- (.trap 0xffffc80063595150)
  789. NOTE: The trap frame does not contain all registers.
  790. Some register values may be zeroed or incorrect.
  791. rax=00ffffb43fcd347d rbx=0000000000000000 rcx=000000000000007d
  792. rdx=ffffb43fcd347d70 rsi=0000000000000000 rdi=0000000000000000
  793. rip=fffff8023c0e926e rsp=ffffc800635952e8 rbp=ffff9e82d5547b40
  794. r8=0000000000000000 r9=ffffb43fcd347d40 r10=00000000000ed020
  795. r11=ffffc80063595330 r12=0000000000000000 r13=0000000000000000
  796. r14=0000000000000000 r15=0000000000000000
  797. iopl=0 nv up ei pl nz ac po nc
  798. nt!ObpCaptureHandleInformation+0x8e:
  799. fffff802`3c0e926e 410fb64118 movzx eax,byte ptr [r9+18h] ds:ffffb43f`cd347d58=??
  800. Resetting default scope
  801. LAST_CONTROL_TRANSFER: from fffff8023bc35d15 to fffff8023bbddb60
  802. STACK_TEXT:
  803. ffffc800`63594ea8 fffff802`3bc35d15 : 00000000`00000050 ffffb43f`cd347d58 00000000`00000000 ffffc800`63595150 : nt!KeBugCheckEx
  804. ffffc800`63594eb0 fffff802`3ba12d00 : 00000000`00000000 00000000`00000000 ffffc800`635951d0 00000000`00000000 : nt!MiSystemFault+0x1ad5c5
  805. ffffc800`63594fb0 fffff802`3bbebc1e : ffff9e82`d4fff6d0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x400
  806. ffffc800`63595150 fffff802`3c0e926e : fffff802`3c159011 00000000`00000780 00000000`00000000 ffffb48f`00000000 : nt!KiPageFault+0x35e
  807. ffffc800`635952e8 fffff802`3c159011 : 00000000`00000780 00000000`00000000 ffffb48f`00000000 fffff802`3baca812 : nt!ObpCaptureHandleInformation+0x8e
  808. ffffc800`635952f0 fffff802`3c0e9165 : fffff802`3c0e91e0 ffff9e82`d5547b58 00000000`0017fffc ffffc800`63595434 : nt!ExpSnapShotHandleTables+0x131
  809. ffffc800`63595380 fffff802`3c1567a1 : ffffc800`63595434 00000000`000ed020 00000000`0017fffc 00000000`00000000 : nt!ObGetHandleInformation+0x39
  810. ffffc800`635953c0 fffff802`3bfe32aa : 00000000`010fd050 00000000`00020000 ffffde80`ba200050 ffffb48f`cd55e010 : nt!ExpGetHandleInformation+0x5d
  811. ffffc800`63595400 fffff802`3bdfb6a7 : 00000000`00000002 00000000`00018002 00000000`00000001 00000000`00180010 : nt!ExpQuerySystemInformation+0x1e7aba
  812. ffffc800`63595ac0 fffff802`3bbef478 : ffffb48f`cdae0000 00000000`00000000 ffffc800`63595b80 ffffffff`ff676980 : nt!NtQuerySystemInformation+0x37
  813. ffffc800`63595b00 00007ff9`abceb454 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
  814. 00000000`0af4e5f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`abceb454
  815. STACK_COMMAND: kb
  816. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  817. fffff8023ba13655-fffff8023ba1365a 6 bytes - nt!MiUserFault+675
  818. [ 68 df be 7d fb f6:10 2f 5e bc 78 f1 ]
  819. fffff8023ba13679-fffff8023ba1367d 5 bytes - nt!MiUserFault+699 (+0x24)
  820. [ d0 be 7d fb f6:20 5e bc 78 f1 ]
  821. fffff8023ba13694-fffff8023ba13698 5 bytes - nt!MiUserFault+6b4 (+0x1b)
  822. [ d7 be 7d fb f6:27 5e bc 78 f1 ]
  823. fffff8023ba156f9-fffff8023ba156fd 5 bytes - nt!MiResolvePrivateZeroFault+1f9 (+0x2065)
  824. [ d0 be 7d fb f6:20 5e bc 78 f1 ]
  825. fffff8023ba15771-fffff8023ba15775 5 bytes - nt!MiResolvePrivateZeroFault+271 (+0x78)
  826. [ d7 be 7d fb f6:27 5e bc 78 f1 ]
  827. fffff8023babbbad-fffff8023babbbae 2 bytes - nt!MiFlushTbAsNeeded+16d (+0xa643c)
  828. [ 80 f6:00 f1 ]
  829. fffff8023babbbfc-fffff8023babbbfd 2 bytes - nt!MiFlushTbAsNeeded+1bc (+0x4f)
  830. [ 80 f6:00 f1 ]
  831. fffff8023bb84f3e-fffff8023bb84f41 4 bytes - nt!MiFreeUltraMapping+32 (+0xc9342)
  832. [ a0 7d fb f6:40 bc 78 f1 ]
  833. fffff8023bbdf6d8-fffff8023bbdf6d9 2 bytes - nt!KiInterruptDispatch+b8 (+0x5a79a)
  834. [ 48 ff:4c 8b ]
  835. fffff8023bbdf6df-fffff8023bbdf6e2 4 bytes - nt!KiInterruptDispatch+bf (+0x07)
  836. [ 0f 1f 44 00:e8 3c 5d 64 ]
  837. fffff8023bc35dc9-fffff8023bc35dca 2 bytes - nt!MiSystemFault+1ad679 (+0x566ea)
  838. [ 80 f6:00 f1 ]
  839. fffff8023bc35ddf-fffff8023bc35de0 2 bytes - nt!MiSystemFault+1ad68f (+0x16)
  840. [ ff f6:7f f1 ]
  841. fffff8023bdfb6d5-fffff8023bdfb6d9 5 bytes - nt!NtQuerySystemInformation+65
  842. [ ff e2 cc cc cc:e8 06 9a 42 00 ]
  843. 49 errors : !nt (fffff8023ba13655-fffff8023bdfb6d9)
  844. MODULE_NAME: memory_corruption
  845.  
  846. IMAGE_NAME: memory_corruption
  847.  
  848. FOLLOWUP_NAME: memory_corruption
  849. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  850. MEMORY_CORRUPTOR: LARGE
  851. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  852. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  853. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  854. TARGET_TIME: 2020-07-27T18:58:46.000Z
  855. SUITE_MASK: 272
  856. PRODUCT_TYPE: 1
  857. USER_LCID: 0
  858. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  859. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  860. Followup: memory_corruption
  861.  
  862. ====================== Dump #2: 3RD PARTY DRIVERS ======================
  863.  
  864. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  865. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  866. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  867. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  868. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  869. Nov 16 2018 - logi_core_temp.sys - Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  870. Nov 20 2018 - logi_joy_bus_enum.sys - Logitech Joystick driver
  871. Nov 20 2018 - logi_joy_xlcore.sys - Logitech Joystick driver
  872. Mar 08 2019 - dokan1.sys - Dokan Project driver (ISLOG)
  873. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  874. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  875. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  876. Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  877. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  878. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  879. Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  880. Jan 30 2020 - tapmullvad0901.sys - TAP-Windows Virtual Network driver (The OpenVPN Project)
  881. Apr 20 2020 - logi_joy_vir_hid.sys - Logitech Joystick driver
  882. Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  883. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  884. Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  885.  
  886. ================== Dump #2: 3RD PARTY DRIVERS (FULL) ===================
  887.  
  888. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  889. Image name: lvrs64.sys
  890. Search : https://www.google.com/search?q=lvrs64.sys
  891. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  892. Timestamp : Mon Oct 22 2012
  893.  
  894. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  895. Image name: lvuvc64.sys
  896. Search : https://www.google.com/search?q=lvuvc64.sys
  897. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  898. Timestamp : Mon Oct 22 2012
  899.  
  900. Image path: \SystemRoot\System32\drivers\amdgpio3.sys
  901. Image name: amdgpio3.sys
  902. Search : https://www.google.com/search?q=amdgpio3.sys
  903. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  904. Timestamp : Mon Mar 14 2016
  905.  
  906. Image path: \SystemRoot\system32\DRIVERS\amdpsp.sys
  907. Image name: amdpsp.sys
  908. Search : https://www.google.com/search?q=amdpsp.sys
  909. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  910. Timestamp : Mon Jun 5 2017
  911.  
  912. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  913. Image name: AMDPCIDev.sys
  914. Search : https://www.google.com/search?q=AMDPCIDev.sys
  915. ADA Info : Advanced Micro Devices PCI Device driver
  916. Timestamp : Thu Apr 12 2018
  917.  
  918. Image path: \??\C:\ProgramData\LGHUB\depots\57944\driver_cpu_temperature\logi_core_temp.sys
  919. Image name: logi_core_temp.sys
  920. Search : https://www.google.com/search?q=logi_core_temp.sys
  921. ADA Info : Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  922. Timestamp : Fri Nov 16 2018
  923.  
  924. Image path: \SystemRoot\system32\drivers\logi_joy_bus_enum.sys
  925. Image name: logi_joy_bus_enum.sys
  926. Search : https://www.google.com/search?q=logi_joy_bus_enum.sys
  927. ADA Info : Logitech Joystick driver
  928. Timestamp : Tue Nov 20 2018
  929.  
  930. Image path: \SystemRoot\system32\drivers\logi_joy_xlcore.sys
  931. Image name: logi_joy_xlcore.sys
  932. Search : https://www.google.com/search?q=logi_joy_xlcore.sys
  933. ADA Info : Logitech Joystick driver
  934. Timestamp : Tue Nov 20 2018
  935.  
  936. Image path: \SystemRoot\system32\DRIVERS\dokan1.sys
  937. Image name: dokan1.sys
  938. Search : https://www.google.com/search?q=dokan1.sys
  939. ADA Info : Dokan Project driver (ISLOG)
  940. Timestamp : Fri Mar 8 2019
  941.  
  942. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  943. Image name: nvvad64v.sys
  944. Search : https://www.google.com/search?q=nvvad64v.sys
  945. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  946. Timestamp : Thu Mar 14 2019
  947.  
  948. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  949. Image path: \SystemRoot\System32\drivers\rt640x64.sys
  950. Image name: rt640x64.sys
  951. Search : https://www.google.com/search?q=rt640x64.sys
  952. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  953. Timestamp : Fri May 24 2019
  954. File version: 9.1.410.2015
  955. Product version: 9.1.410.2015
  956. File flags: 8 (Mask 3F) Private
  957. File OS: 40004 NT Win32
  958. File type: 3.6 Driver
  959. File date: 00000000.00000000
  960. CompanyName: Realtek
  961. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  962. InternalName: rt640x64.sys
  963. OriginalFilename: rt640x64.sys
  964. ProductVersion: 9.001.0410.2015
  965. FileVersion: 9.001.0410.2015
  966. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  967. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  968.  
  969. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  970. Image name: amdgpio2.sys
  971. Search : https://www.google.com/search?q=amdgpio2.sys
  972. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  973. Timestamp : Sun Sep 29 2019
  974.  
  975. Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
  976. Image name: mbamswissarmy.sys
  977. Search : https://www.google.com/search?q=mbamswissarmy.sys
  978. ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  979. Timestamp : Wed Nov 20 2019
  980.  
  981. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  982. Image name: NvModuleTracker.sys
  983. Search : https://www.google.com/search?q=NvModuleTracker.sys
  984. ADA Info : NVIDIA Module Tracker driver
  985. Timestamp : Fri Nov 29 2019
  986.  
  987. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  988. Image name: nvvhci.sys
  989. Search : https://www.google.com/search?q=nvvhci.sys
  990. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  991. Timestamp : Fri Jan 10 2020
  992.  
  993. Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
  994. Image name: UcmCxUcsiNvppc.sys
  995. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  996. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  997. Timestamp : Sun Jan 26 2020
  998.  
  999. Image path: \SystemRoot\System32\drivers\tapmullvad0901.sys
  1000. Image name: tapmullvad0901.sys
  1001. Search : https://www.google.com/search?q=tapmullvad0901.sys
  1002. ADA Info : TAP-Windows Virtual Network driver (The OpenVPN Project)
  1003. Timestamp : Thu Jan 30 2020
  1004.  
  1005. Image path: \SystemRoot\system32\drivers\logi_joy_vir_hid.sys
  1006. Image name: logi_joy_vir_hid.sys
  1007. Search : https://www.google.com/search?q=logi_joy_vir_hid.sys
  1008. ADA Info : Logitech Joystick driver
  1009. Timestamp : Mon Apr 20 2020
  1010.  
  1011. Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
  1012. Image name: MbamChameleon.sys
  1013. Search : https://www.google.com/search?q=MbamChameleon.sys
  1014. ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  1015. Timestamp : Thu Jun 4 2020
  1016.  
  1017. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1018. Image name: nvhda64v.sys
  1019. Search : https://www.google.com/search?q=nvhda64v.sys
  1020. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1021. Timestamp : Tue Jun 9 2020
  1022.  
  1023. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\nvlddmkm.sys
  1024. Image name: nvlddmkm.sys
  1025. Search : https://www.google.com/search?q=nvlddmkm.sys
  1026. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1027. Timestamp : Sun Jul 5 2020
  1028.  
  1029. ====================== Dump #2: MICROSOFT DRIVERS ======================
  1030.  
  1031. ACPI.sys ACPI Driver for NT (Microsoft)
  1032. acpiex.sys ACPIEx Driver (Microsoft)
  1033. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1034. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1035. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1036. ahcache.sys Application Compatibility Cache (Microsoft)
  1037. amdppm.sys Processor Device Driver
  1038. bam.sys BAM Kernal driver (Microsoft)
  1039. BasicDisplay.sys Basic Display driver (Microsoft)
  1040. BasicRender.sys Basic Render driver (Microsoft)
  1041. Beep.SYS BEEP driver (Microsoft)
  1042. bindflt.sys Windows Bind Filter driver (Microsoft)
  1043. BOOTVID.dll VGA Boot Driver (Microsoft)
  1044. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1045. cdd.dll Canonical Display Driver (Microsoft)
  1046. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1047. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1048. CI.dll Code Integrity Module (Microsoft)
  1049. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1050. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1051. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1052. CLFS.SYS Common Log File System Driver (Microsoft)
  1053. clipsp.sys CLIP Service (Microsoft)
  1054. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1055. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1056. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1057. condrv.sys Console Driver (Microsoft)
  1058. crashdmp.sys Crash Dump driver (Microsoft)
  1059. csc.sys Windows Client Side Caching driver (Microsoft)
  1060. dc1-controller.sys KMDF driver for DC1 Controller
  1061. DevAuthE.sys Xbox Device Authentication Driver
  1062. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1063. disk.sys PnP Disk Driver (Microsoft)
  1064. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1065. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1066. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1067. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1068. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1069. dxgmms2.sys DirectX Graphics MMS
  1070. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  1071. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1072. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1073. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1074. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1075. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1076. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1077. gameflt.sys Gaming Install Filter driver (Microsoft)
  1078. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1079. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1080. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1081. HdAudio.sys High Definition Audio Function driver (Microsoft)
  1082. HIDCLASS.SYS Hid Class Library (Microsoft)
  1083. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1084. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1085. HTTP.sys HTTP Protocol Stack (Microsoft)
  1086. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  1087. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1088. IntelTA.sys Intel Telemetry Driver
  1089. iorate.sys I/O rate control Filter (Microsoft)
  1090. kbdclass.sys Keyboard Class Driver (Microsoft)
  1091. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1092. kd.dll Local Kernal Debugger (Microsoft)
  1093. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1094. ks.sys Kernal CSA Library (Microsoft)
  1095. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1096. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1097. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1098. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1099. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1100. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  1101. mmcss.sys MMCSS Driver (Microsoft)
  1102. monitor.sys Monitor Driver (Microsoft)
  1103. mouclass.sys Mouse Class Driver (Microsoft)
  1104. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1105. mountmgr.sys Mount Point Manager (Microsoft)
  1106. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1107. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1108. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1109. Msfs.SYS Mailslot driver (Microsoft)
  1110. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1111. msisadrv.sys ISA Driver (Microsoft)
  1112. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1113. msquic.sys Windows QUIC Driver
  1114. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1115. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1116. mssmbios.sys System Management BIOS driver (Microsoft)
  1117. mup.sys Multiple UNC Provider driver (Microsoft)
  1118. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1119. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1120. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1121. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1122. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1123. NDProxy.sys NDIS Proxy driver (Microsoft)
  1124. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1125. netbios.sys NetBIOS Interface driver (Microsoft)
  1126. netbt.sys MBT Transport driver (Microsoft)
  1127. NETIO.SYS Network I/O Subsystem (Microsoft)
  1128. Npfs.SYS NPFS driver (Microsoft)
  1129. npsvctrig.sys Named pipe service triggers (Microsoft)
  1130. nsiproxy.sys NSI Proxy driver (Microsoft)
  1131. Ntfs.sys NT File System Driver (Microsoft)
  1132. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1133. ntosext.sys NTOS Extension Host driver (Microsoft)
  1134. Null.SYS NULL Driver (Microsoft)
  1135. pacer.sys QoS Packet Scheduler (Microsoft)
  1136. partmgr.sys Partition driver (Microsoft)
  1137. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1138. pcw.sys Performance Counter Driver (Microsoft)
  1139. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1140. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1141. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1142. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1143. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1144. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1145. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1146. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1147. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1148. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1149. rdyboost.sys ReadyBoost Driver (Microsoft)
  1150. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1151. serenum.sys Serial Port Enumerator (Microsoft)
  1152. serial.sys Serial Device Driver
  1153. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1154. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1155. spaceport.sys Storage Spaces driver (Microsoft)
  1156. srv2.sys Smb 2.0 Server driver (Microsoft)
  1157. srvnet.sys Server Network driver (Microsoft)
  1158. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1159. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1160. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1161. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1162. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1163. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1164. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1165. TDI.SYS TDI Wrapper driver (Microsoft)
  1166. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1167. tm.sys Kernel Transaction Manager driver (Microsoft)
  1168. UcmCx.sys USB Connector Manager KMDF Class Extension
  1169. ucx01000.sys USB Controller Extension (Microsoft)
  1170. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1171. usbaudio.sys USB Audio Class Driver (Microsoft)
  1172. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1173. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1174. UsbHub3.sys USB3 HUB driver (Microsoft)
  1175. USBXHCI.SYS USB XHCI driver (Microsoft)
  1176. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1177. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1178. volmgr.sys Volume Manager Driver (Microsoft)
  1179. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1180. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1181. volume.sys Volume driver (Microsoft)
  1182. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1183. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1184. watchdog.sys Watchdog driver (Microsoft)
  1185. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1186. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1187. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1188. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1189. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1190. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1191. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1192. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1193. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1194. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1195. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1196. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1197. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1198. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1199. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1200. Wof.sys Windows Overlay Filter (Microsoft)
  1201. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1202. xboxgip.sys Game Input Protocol Driver
  1203. xinputhid.sys XINPUT filter driver for HID
  1204. xvdd.sys XVD Disk driver (Microsoft)
  1205.  
  1206. ====================== Dump #2: UNLOADED MODULES =======================
  1207.  
  1208. fffff802`83980000 fffff802`83991000 MSKSSRV.sys
  1209. fffff802`3ea00000 fffff802`3ea0f000 dump_storpor
  1210. fffff802`3ea50000 fffff802`3ea83000 dump_storahc
  1211. fffff802`3eab0000 fffff802`3eace000 dump_dumpfve
  1212. fffff802`3f4d0000 fffff802`3f4ec000 dam.sys
  1213. fffff802`3d400000 fffff802`3d411000 WdBoot.sys
  1214. fffff802`3d3f0000 fffff802`3d3f9000 MbamElam.sys
  1215. fffff802`3e480000 fffff802`3e490000 hwpolicy.sys
  1216.  
  1217. ====================== Dump #2: BIOS INFORMATION =======================
  1218.  
  1219. [SMBIOS Data Tables v3.2]
  1220. [DMI Version - 0]
  1221. [2.0 Calling Convention - No]
  1222. [Table Size - 1763 bytes]
  1223. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  1224. Vendor American Megatrends Inc.
  1225. BIOS Version P3.50
  1226. BIOS Starting Address Segment f000
  1227. BIOS Release Date 07/18/2019
  1228. BIOS ROM Size 1000000
  1229. BIOS Characteristics
  1230. 07: - PCI Supported
  1231. 11: - Upgradeable FLASH BIOS
  1232. 12: - BIOS Shadowing Supported
  1233. 15: - CD-Boot Supported
  1234. 16: - Selectable Boot Supported
  1235. 17: - BIOS ROM Socketed
  1236. 19: - EDD Supported
  1237. 23: - 1.2MB Floppy Supported
  1238. 24: - 720KB Floppy Supported
  1239. 25: - 2.88MB Floppy Supported
  1240. 26: - Print Screen Device Supported
  1241. 27: - Keyboard Services Supported
  1242. 28: - Serial Services Supported
  1243. 29: - Printer Services Supported
  1244. 32: - BIOS Vendor Reserved
  1245. BIOS Characteristic Extensions
  1246. 00: - ACPI Supported
  1247. 01: - USB Legacy Supported
  1248. 08: - BIOS Boot Specification Supported
  1249. 10: - Specification Reserved
  1250. 11: - Specification Reserved
  1251. BIOS Major Revision 5
  1252. BIOS Minor Revision 14
  1253. EC Firmware Major Revision 255
  1254. EC Firmware Minor Revision 255
  1255. [System Information (Type 1) - Length 27 - Handle 0001h]
  1256. UUID 00000000-0000-0000-0000-000000000000
  1257. Wakeup Type Power Switch
  1258. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  1259. Manufacturer ASRock
  1260. Product B450M Pro4
  1261. Version
  1262. Feature Flags 09h
  1263. 855422688: - 855422736: - «?uþ
  1264. Location
  1265. Chassis Handle 0003h
  1266. Board Type 0ah - Processor/Memory Module
  1267. Number of Child Handles 0
  1268. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  1269. Chassis Type Desktop
  1270. Bootup State Safe
  1271. Power Supply State Safe
  1272. Thermal State Safe
  1273. Security Status None
  1274. OEM Defined 0
  1275. Height 0U
  1276. Number of Power Cords 1
  1277. Number of Contained Elements 0
  1278. Contained Element Size 3
  1279. [OEM Strings (Type 11) - Length 5 - Handle 0008h]
  1280. Number of Strings 1
  1281. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000bh]
  1282. [Physical Memory Array (Type 16) - Length 23 - Handle 000ch]
  1283. Location 03h - SystemBoard/Motherboard
  1284. Use 03h - System Memory
  1285. Memory Error Correction 03h - None
  1286. Maximum Capacity 134217728KB
  1287. Memory Error Inf Handle 000bh
  1288. Number of Memory Devices 4
  1289. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000dh]
  1290. Starting Address 00000000h
  1291. Ending Address 00ffffffh
  1292. Memory Array Handle 000ch
  1293. Partition Width 02
  1294. [Cache Information (Type 7) - Length 27 - Handle 000eh]
  1295. Socket Designation L1 - Cache
  1296. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  1297. Maximum Cache Size 0240h - 576K
  1298. Installed Size 0240h - 576K
  1299. Supported SRAM Type 0010h - Pipeline-Burst
  1300. Current SRAM Type 0010h - Pipeline-Burst
  1301. Cache Speed 1ns
  1302. Error Correction Type Specification Reserved
  1303. System Cache Type Unified
  1304. Associativity 8-way Set-Associative
  1305. [Cache Information (Type 7) - Length 27 - Handle 000fh]
  1306. Socket Designation L2 - Cache
  1307. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  1308. Maximum Cache Size 0c00h - 3072K
  1309. Installed Size 0c00h - 3072K
  1310. Supported SRAM Type 0010h - Pipeline-Burst
  1311. Current SRAM Type 0010h - Pipeline-Burst
  1312. Cache Speed 1ns
  1313. Error Correction Type Specification Reserved
  1314. System Cache Type Unified
  1315. Associativity 8-way Set-Associative
  1316. [Cache Information (Type 7) - Length 27 - Handle 0010h]
  1317. Socket Designation L3 - Cache
  1318. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  1319. Maximum Cache Size 4000h - 16384K
  1320. Installed Size 4000h - 16384K
  1321. Supported SRAM Type 0010h - Pipeline-Burst
  1322. Current SRAM Type 0010h - Pipeline-Burst
  1323. Cache Speed 1ns
  1324. Error Correction Type Specification Reserved
  1325. System Cache Type Unified
  1326. Associativity 16-way Set-Associative
  1327. [Processor Information (Type 4) - Length 48 - Handle 0011h]
  1328. Socket Designation AM4
  1329. Processor Type Central Processor
  1330. Processor Family 6bh - Specification Reserved
  1331. Processor Manufacturer Advanced Micro Devices, Inc.
  1332. Processor ID 820f8000fffb8b17
  1333. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  1334. Processor Voltage 8bh - 1.1V
  1335. External Clock 100MHz
  1336. Max Speed 3900MHz
  1337. Current Speed 3400MHz
  1338. Status Enabled Populated
  1339. Processor Upgrade Specification Reserved
  1340. L1 Cache Handle 000eh
  1341. L2 Cache Handle 000fh
  1342. L3 Cache Handle 0010h
  1343. Part Number Unknown
  1344. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0012h]
  1345. [Memory Device (Type 17) - Length 84 - Handle 0013h]
  1346. Physical Memory Array Handle 000ch
  1347. Memory Error Info Handle 0012h
  1348. Form Factor 02h - Unknown
  1349. Device Locator DIMM 0
  1350. Bank Locator P0 CHANNEL A
  1351. Memory Type 02h - Unknown
  1352. Type Detail 0004h - Unknown
  1353. Speed 0MHz
  1354. Manufacturer Unknown
  1355. Part Number Unknown
  1356. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  1357. [Memory Device (Type 17) - Length 84 - Handle 0015h]
  1358. Physical Memory Array Handle 000ch
  1359. Memory Error Info Handle 0014h
  1360. Total Width 64 bits
  1361. Data Width 64 bits
  1362. Size 8192MB
  1363. Form Factor 09h - DIMM
  1364. Device Locator DIMM 1
  1365. Bank Locator P0 CHANNEL A
  1366. Memory Type 1ah - Specification Reserved
  1367. Type Detail 4080h - Synchronous
  1368. Speed 2133MHz
  1369. Manufacturer Unknown
  1370. Part Number F4-3000C16-8GVRB
  1371. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  1372. Starting Address 00000000h
  1373. Ending Address 00ffffffh
  1374. Memory Device Handle 0015h
  1375. Mem Array Mapped Adr Handle 000dh
  1376. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0017h]
  1377. [Memory Device (Type 17) - Length 84 - Handle 0018h]
  1378. Physical Memory Array Handle 000ch
  1379. Memory Error Info Handle 0017h
  1380. Form Factor 02h - Unknown
  1381. Device Locator DIMM 0
  1382. Bank Locator P0 CHANNEL B
  1383. Memory Type 02h - Unknown
  1384. Type Detail 0004h - Unknown
  1385. Speed 0MHz
  1386. Manufacturer Unknown
  1387. Part Number Unknown
  1388. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0019h]
  1389. [Memory Device (Type 17) - Length 84 - Handle 001ah]
  1390. Physical Memory Array Handle 000ch
  1391. Memory Error Info Handle 0019h
  1392. Total Width 64 bits
  1393. Data Width 64 bits
  1394. Size 8192MB
  1395. Form Factor 09h - DIMM
  1396. Device Locator DIMM 1
  1397. Bank Locator P0 CHANNEL B
  1398. Memory Type 1ah - Specification Reserved
  1399. Type Detail 4080h - Synchronous
  1400. Speed 2133MHz
  1401. Manufacturer Unknown
  1402. Part Number F4-3000C16-8GVRB
  1403. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  1404. Starting Address 00000000h
  1405. Ending Address 00ffffffh
  1406. Memory Device Handle 001ah
  1407. Mem Array Mapped Adr Handle 000dh
  1408.  
  1409. ========================== Dump #2: Extra #1 ===========================
  1410.  
  1411. 3: kd> !verifier
  1412. Verify Flags Level 0x00000000
  1413. STANDARD FLAGS:
  1414. [X] (0x00000000) Automatic Checks
  1415. [ ] (0x00000001) Special pool
  1416. [ ] (0x00000002) Force IRQL checking
  1417. [ ] (0x00000008) Pool tracking
  1418. [ ] (0x00000010) I/O verification
  1419. [ ] (0x00000020) Deadlock detection
  1420. [ ] (0x00000080) DMA checking
  1421. [ ] (0x00000100) Security checks
  1422. [ ] (0x00000800) Miscellaneous checks
  1423. [ ] (0x00020000) DDI compliance checking
  1424. ADDITIONAL FLAGS:
  1425. [ ] (0x00000004) Randomized low resources simulation
  1426. [ ] (0x00000200) Force pending I/O requests
  1427. [ ] (0x00000400) IRP logging
  1428. [ ] (0x00002000) Invariant MDL checking for stack
  1429. [ ] (0x00004000) Invariant MDL checking for driver
  1430. [ ] (0x00008000) Power framework delay fuzzing
  1431. [ ] (0x00010000) Port/miniport interface checking
  1432. [ ] (0x00040000) Systematic low resources simulation
  1433. [ ] (0x00080000) DDI compliance checking (additional)
  1434. [ ] (0x00200000) NDIS/WIFI verification
  1435. [ ] (0x00800000) Kernel synchronization delay fuzzing
  1436. [ ] (0x01000000) VM switch verification
  1437. [ ] (0x02000000) Code integrity checks
  1438. [X] Indicates flag is enabled
  1439. Summary of All Verifier Statistics
  1440. RaiseIrqls 0x0
  1441. AcquireSpinLocks 0x0
  1442. Synch Executions 0x0
  1443. Trims 0x0
  1444. Pool Allocations Attempted 0x0
  1445. Pool Allocations Succeeded 0x0
  1446. Pool Allocations Succeeded SpecialPool 0x0
  1447. Pool Allocations With NO TAG 0x0
  1448. Pool Allocations Failed 0x0
  1449. Current paged pool allocations 0x0 for 00000000 bytes
  1450. Peak paged pool allocations 0x0 for 00000000 bytes
  1451. Current nonpaged pool allocations 0x0 for 00000000 bytes
  1452. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  1453.  
  1454. ========================== Dump #2: Extra #2 ===========================
  1455.  
  1456. 3: kd> !thread
  1457. THREAD ffffb48fcdaec080 Cid 2638.37ac Teb: 0000000000bc7000 Win32Thread: ffffb48fcdabf7b0 RUNNING on processor 3
  1458. Not impersonating
  1459. GetUlongFromAddress: unable to read from fffff8023c41143c
  1460. Owning Process ffffb48fcb4de2c0 Image: steam.exe
  1461. Attached Process N/A Image: N/A
  1462. fffff78000000000: Unable to get shared data
  1463. Wait Start TickCount 19274
  1464. Context Switch Count 340 IdealProcessor: 3
  1465. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  1466. UserTime 00:00:00.000
  1467. KernelTime 00:00:00.000
  1468. Win32 Start Address 0x000000006c01e5e0
  1469. Stack Init ffffc80063595c90 Current ffffc800635956a0
  1470. Base ffffc80063596000 Limit ffffc80063590000 Call 0000000000000000
  1471. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  1472. Child-SP RetAddr : Args to Child : Call Site
  1473. ffffc800`63594ea8 fffff802`3bc35d15 : 00000000`00000050 ffffb43f`cd347d58 00000000`00000000 ffffc800`63595150 : nt!KeBugCheckEx
  1474. ffffc800`63594eb0 fffff802`3ba12d00 : 00000000`00000000 00000000`00000000 ffffc800`635951d0 00000000`00000000 : nt!MiSystemFault+0x1ad5c5
  1475. ffffc800`63594fb0 fffff802`3bbebc1e : ffff9e82`d4fff6d0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x400
  1476. ffffc800`63595150 fffff802`3c0e926e : fffff802`3c159011 00000000`00000780 00000000`00000000 ffffb48f`00000000 : nt!KiPageFault+0x35e (TrapFrame @ ffffc800`63595150)
  1477. ffffc800`635952e8 fffff802`3c159011 : 00000000`00000780 00000000`00000000 ffffb48f`00000000 fffff802`3baca812 : nt!ObpCaptureHandleInformation+0x8e
  1478. ffffc800`635952f0 fffff802`3c0e9165 : fffff802`3c0e91e0 ffff9e82`d5547b58 00000000`0017fffc ffffc800`63595434 : nt!ExpSnapShotHandleTables+0x131
  1479. ffffc800`63595380 fffff802`3c1567a1 : ffffc800`63595434 00000000`000ed020 00000000`0017fffc 00000000`00000000 : nt!ObGetHandleInformation+0x39
  1480. ffffc800`635953c0 fffff802`3bfe32aa : 00000000`010fd050 00000000`00020000 ffffde80`ba200050 ffffb48f`cd55e010 : nt!ExpGetHandleInformation+0x5d
  1481. ffffc800`63595400 fffff802`3bdfb6a7 : 00000000`00000002 00000000`00018002 00000000`00000001 00000000`00180010 : nt!ExpQuerySystemInformation+0x1e7aba
  1482. ffffc800`63595ac0 fffff802`3bbef478 : ffffb48f`cdae0000 00000000`00000000 ffffc800`63595b80 ffffffff`ff676980 : nt!NtQuerySystemInformation+0x37
  1483. ffffc800`63595b00 00007ff9`abceb454 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28 (TrapFrame @ ffffc800`63595b00)
  1484. 00000000`0af4e5f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff9`abceb454
  1485.  
  1486.  
  1487. ========================================================================
  1488. ======================= Dump #3: ANALYZE VERBOSE =======================
  1489. ======================= File: 072720-6890-01.dmp =======================
  1490. ========================================================================
  1491.  
  1492. Mini Kernel Dump File: Only registers and stack trace are available
  1493. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  1494. Kernel base = 0xfffff803`1bc00000 PsLoadedModuleList = 0xfffff803`1c82a310
  1495. Debug session time: Mon Jul 27 14:17:54.047 2020 (UTC - 4:00)
  1496. System Uptime: 2 days 2:07:55.754
  1497.  
  1498. BugCheck 3B, {c0000005, fffff8031bfef5d7, ffffc48050ca8920, 0}
  1499. Probably caused by : memory_corruption
  1500. Followup: memory_corruption
  1501.  
  1502. SYSTEM_SERVICE_EXCEPTION (3b)
  1503. An exception happened while executing a system service routine.
  1504.  
  1505. Arguments:
  1506. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  1507. Arg2: fffff8031bfef5d7, Address of the instruction which caused the bugcheck
  1508. Arg3: ffffc48050ca8920, Address of the context record for the exception that caused the bugcheck
  1509. Arg4: 0000000000000000, zero.
  1510.  
  1511. Debugging Details:
  1512. DUMP_CLASS: 1
  1513. DUMP_QUALIFIER: 400
  1514. DUMP_TYPE: 2
  1515. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  1516. FAULTING_IP:
  1517. nt!KiSystemServiceExit+157
  1518. fffff803`1bfef5d7 0fae55ac ldmxcsr dword ptr [rbp-54h]
  1519. CONTEXT: ffffc48050ca8920 -- (.cxr 0xffffc48050ca8920)
  1520. rax=0000000000000101 rbx=0000000000000000 rcx=ffffdb05521a3080
  1521. rdx=0000000000000000 rsi=0000000000000000 rdi=000001e876a20f28
  1522. rip=fffff8031bfef5d7 rsp=ffffc301897c4b00 rbp=ffffc301897c4b80
  1523. r8=0000000000000001 r9=00000000000000eb r10=0000000000000000
  1524. r11=ffffdb05521a3080 r12=0000004dedb0f1f0 r13=0000000000000000
  1525. r14=0000004dedb0f178 r15=000001e876a20f60
  1526. iopl=0 nv up di pl zr na po nc
  1527. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050046
  1528. nt!KiSystemServiceExit+0x157:
  1529. fffff803`1bfef5d7 0fae55ac ldmxcsr dword ptr [rbp-54h] ss:0018:ffffc301`897c4b2c=00001fa0
  1530. Resetting default scope
  1531. CUSTOMER_CRASH_COUNT: 1
  1532. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1533. BUGCHECK_STR: 0x3B
  1534.  
  1535. PROCESS_NAME: firefox.exe
  1536.  
  1537. CURRENT_IRQL: 0
  1538. BAD_STACK_POINTER: ffffc48050ca8018
  1539. LAST_CONTROL_TRANSFER: from 00007ff87b26e784 to fffff8031bfef5d7
  1540. STACK_TEXT:
  1541. ffffc301`897c4b00 00007ff8`7b26e784 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x157
  1542. 0000004d`edb0f148 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`7b26e784
  1543. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  1544. fffff8031bf84f3e-fffff8031bf84f41 4 bytes - nt!MiFreeUltraMapping+32
  1545. [ a0 7d fb f6:80 2f 5f be ]
  1546. fffff8031bfeef61-fffff8031bfeef65 5 bytes - nt!KiServiceInternal+61 (+0x6a023)
  1547. [ 41 ff e3 cc cc:e8 9a 62 63 00 ]
  1548. fffff8031bfef3da-fffff8031bfef3de 5 bytes - nt!KiSystemServiceGdiTebAccess+93 (+0x479)
  1549. [ 41 ff e3 cc cc:e8 21 5e 63 00 ]
  1550. fffff8031bfef473-fffff8031bfef476 4 bytes - nt!KiSystemServiceCopyEnd+23 (+0x99)
  1551. [ ff d0 0f 1f:e8 68 5e 63 ]
  1552. fffff8031bfef951-fffff8031bfef954 4 bytes - nt!KiSystemServiceExitPico+25c (+0x4de)
  1553. [ ff d0 0f 1f:e8 8a 59 63 ]
  1554. fffff8031bfef9ac-fffff8031bfef9af 4 bytes - nt!KiSystemServiceExitPico+2b7 (+0x5b)
  1555. [ ff d0 0f 1f:e8 2f 59 63 ]
  1556. 26 errors : !nt (fffff8031bf84f3e-fffff8031bfef9af)
  1557. MODULE_NAME: memory_corruption
  1558.  
  1559. IMAGE_NAME: memory_corruption
  1560.  
  1561. FOLLOWUP_NAME: memory_corruption
  1562. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1563. MEMORY_CORRUPTOR: LARGE
  1564. STACK_COMMAND: .cxr 0xffffc48050ca8920 ; kb
  1565. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1566. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1567. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1568. TARGET_TIME: 2020-07-27T18:17:54.000Z
  1569. SUITE_MASK: 272
  1570. PRODUCT_TYPE: 1
  1571. USER_LCID: 0
  1572. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1573. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1574. Followup: memory_corruption
  1575.  
  1576. ====================== Dump #3: 3RD PARTY DRIVERS ======================
  1577.  
  1578. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  1579. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  1580. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1581. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  1582. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  1583. Nov 16 2018 - logi_core_temp.sys - Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  1584. Nov 20 2018 - logi_joy_bus_enum.sys - Logitech Joystick driver
  1585. Nov 20 2018 - logi_joy_xlcore.sys - Logitech Joystick driver
  1586. Mar 08 2019 - dokan1.sys - Dokan Project driver (ISLOG)
  1587. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  1588. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1589. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1590. Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  1591. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  1592. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1593. Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  1594. Jan 30 2020 - tapmullvad0901.sys - TAP-Windows Virtual Network driver (The OpenVPN Project)
  1595. Apr 20 2020 - logi_joy_vir_hid.sys - Logitech Joystick driver
  1596. Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  1597. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  1598. Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  1599.  
  1600. ================== Dump #3: 3RD PARTY DRIVERS (FULL) ===================
  1601.  
  1602. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  1603. Image name: lvrs64.sys
  1604. Search : https://www.google.com/search?q=lvrs64.sys
  1605. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  1606. Timestamp : Mon Oct 22 2012
  1607.  
  1608. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  1609. Image name: lvuvc64.sys
  1610. Search : https://www.google.com/search?q=lvuvc64.sys
  1611. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  1612. Timestamp : Mon Oct 22 2012
  1613.  
  1614. Image path: \SystemRoot\System32\drivers\amdgpio3.sys
  1615. Image name: amdgpio3.sys
  1616. Search : https://www.google.com/search?q=amdgpio3.sys
  1617. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1618. Timestamp : Mon Mar 14 2016
  1619.  
  1620. Image path: \SystemRoot\system32\DRIVERS\amdpsp.sys
  1621. Image name: amdpsp.sys
  1622. Search : https://www.google.com/search?q=amdpsp.sys
  1623. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  1624. Timestamp : Mon Jun 5 2017
  1625.  
  1626. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  1627. Image name: AMDPCIDev.sys
  1628. Search : https://www.google.com/search?q=AMDPCIDev.sys
  1629. ADA Info : Advanced Micro Devices PCI Device driver
  1630. Timestamp : Thu Apr 12 2018
  1631.  
  1632. Image path: \??\C:\ProgramData\LGHUB\depots\57944\driver_cpu_temperature\logi_core_temp.sys
  1633. Image name: logi_core_temp.sys
  1634. Search : https://www.google.com/search?q=logi_core_temp.sys
  1635. ADA Info : Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  1636. Timestamp : Fri Nov 16 2018
  1637.  
  1638. Image path: \SystemRoot\system32\drivers\logi_joy_bus_enum.sys
  1639. Image name: logi_joy_bus_enum.sys
  1640. Search : https://www.google.com/search?q=logi_joy_bus_enum.sys
  1641. ADA Info : Logitech Joystick driver
  1642. Timestamp : Tue Nov 20 2018
  1643.  
  1644. Image path: \SystemRoot\system32\drivers\logi_joy_xlcore.sys
  1645. Image name: logi_joy_xlcore.sys
  1646. Search : https://www.google.com/search?q=logi_joy_xlcore.sys
  1647. ADA Info : Logitech Joystick driver
  1648. Timestamp : Tue Nov 20 2018
  1649.  
  1650. Image path: \SystemRoot\system32\DRIVERS\dokan1.sys
  1651. Image name: dokan1.sys
  1652. Search : https://www.google.com/search?q=dokan1.sys
  1653. ADA Info : Dokan Project driver (ISLOG)
  1654. Timestamp : Fri Mar 8 2019
  1655.  
  1656. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  1657. Image name: nvvad64v.sys
  1658. Search : https://www.google.com/search?q=nvvad64v.sys
  1659. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  1660. Timestamp : Thu Mar 14 2019
  1661.  
  1662. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  1663. Image path: \SystemRoot\System32\drivers\rt640x64.sys
  1664. Image name: rt640x64.sys
  1665. Search : https://www.google.com/search?q=rt640x64.sys
  1666. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  1667. Timestamp : Fri May 24 2019
  1668. File version: 9.1.410.2015
  1669. Product version: 9.1.410.2015
  1670. File flags: 8 (Mask 3F) Private
  1671. File OS: 40004 NT Win32
  1672. File type: 3.6 Driver
  1673. File date: 00000000.00000000
  1674. CompanyName: Realtek
  1675. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  1676. InternalName: rt640x64.sys
  1677. OriginalFilename: rt640x64.sys
  1678. ProductVersion: 9.001.0410.2015
  1679. FileVersion: 9.001.0410.2015
  1680. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  1681. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  1682.  
  1683. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  1684. Image name: amdgpio2.sys
  1685. Search : https://www.google.com/search?q=amdgpio2.sys
  1686. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  1687. Timestamp : Sun Sep 29 2019
  1688.  
  1689. Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
  1690. Image name: mbamswissarmy.sys
  1691. Search : https://www.google.com/search?q=mbamswissarmy.sys
  1692. ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  1693. Timestamp : Wed Nov 20 2019
  1694.  
  1695. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  1696. Image name: NvModuleTracker.sys
  1697. Search : https://www.google.com/search?q=NvModuleTracker.sys
  1698. ADA Info : NVIDIA Module Tracker driver
  1699. Timestamp : Fri Nov 29 2019
  1700.  
  1701. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  1702. Image name: nvvhci.sys
  1703. Search : https://www.google.com/search?q=nvvhci.sys
  1704. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  1705. Timestamp : Fri Jan 10 2020
  1706.  
  1707. Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
  1708. Image name: UcmCxUcsiNvppc.sys
  1709. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  1710. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  1711. Timestamp : Sun Jan 26 2020
  1712.  
  1713. Image path: \SystemRoot\System32\drivers\tapmullvad0901.sys
  1714. Image name: tapmullvad0901.sys
  1715. Search : https://www.google.com/search?q=tapmullvad0901.sys
  1716. ADA Info : TAP-Windows Virtual Network driver (The OpenVPN Project)
  1717. Timestamp : Thu Jan 30 2020
  1718.  
  1719. Image path: \SystemRoot\system32\drivers\logi_joy_vir_hid.sys
  1720. Image name: logi_joy_vir_hid.sys
  1721. Search : https://www.google.com/search?q=logi_joy_vir_hid.sys
  1722. ADA Info : Logitech Joystick driver
  1723. Timestamp : Mon Apr 20 2020
  1724.  
  1725. Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
  1726. Image name: MbamChameleon.sys
  1727. Search : https://www.google.com/search?q=MbamChameleon.sys
  1728. ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  1729. Timestamp : Thu Jun 4 2020
  1730.  
  1731. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  1732. Image name: nvhda64v.sys
  1733. Search : https://www.google.com/search?q=nvhda64v.sys
  1734. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  1735. Timestamp : Tue Jun 9 2020
  1736.  
  1737. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\nvlddmkm.sys
  1738. Image name: nvlddmkm.sys
  1739. Search : https://www.google.com/search?q=nvlddmkm.sys
  1740. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  1741. Timestamp : Sun Jul 5 2020
  1742.  
  1743. ====================== Dump #3: MICROSOFT DRIVERS ======================
  1744.  
  1745. ACPI.sys ACPI Driver for NT (Microsoft)
  1746. acpiex.sys ACPIEx Driver (Microsoft)
  1747. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  1748. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  1749. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  1750. ahcache.sys Application Compatibility Cache (Microsoft)
  1751. amdppm.sys Processor Device Driver
  1752. bam.sys BAM Kernal driver (Microsoft)
  1753. BasicDisplay.sys Basic Display driver (Microsoft)
  1754. BasicRender.sys Basic Render driver (Microsoft)
  1755. Beep.SYS BEEP driver (Microsoft)
  1756. bindflt.sys Windows Bind Filter driver (Microsoft)
  1757. BOOTVID.dll VGA Boot Driver (Microsoft)
  1758. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  1759. cdd.dll Canonical Display Driver (Microsoft)
  1760. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  1761. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  1762. CI.dll Code Integrity Module (Microsoft)
  1763. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  1764. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  1765. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  1766. CLFS.SYS Common Log File System Driver (Microsoft)
  1767. clipsp.sys CLIP Service (Microsoft)
  1768. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  1769. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  1770. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  1771. condrv.sys Console Driver (Microsoft)
  1772. crashdmp.sys Crash Dump driver (Microsoft)
  1773. csc.sys Windows Client Side Caching driver (Microsoft)
  1774. dc1-controller.sys KMDF driver for DC1 Controller
  1775. DevAuthE.sys Xbox Device Authentication Driver
  1776. dfsc.sys DFS Namespace Client Driver (Microsoft)
  1777. disk.sys PnP Disk Driver (Microsoft)
  1778. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  1779. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1780. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1781. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  1782. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  1783. dxgmms2.sys DirectX Graphics MMS
  1784. fastfat.SYS Fast FAT File System Driver (Microsoft)
  1785. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  1786. fileinfo.sys FileInfo Filter Driver (Microsoft)
  1787. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  1788. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  1789. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  1790. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  1791. gameflt.sys Gaming Install Filter driver (Microsoft)
  1792. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  1793. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  1794. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  1795. HdAudio.sys High Definition Audio Function driver (Microsoft)
  1796. HIDCLASS.SYS Hid Class Library (Microsoft)
  1797. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  1798. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  1799. HTTP.sys HTTP Protocol Stack (Microsoft)
  1800. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  1801. intelpep.sys Intel Power Engine Plugin (Microsoft)
  1802. IntelTA.sys Intel Telemetry Driver
  1803. iorate.sys I/O rate control Filter (Microsoft)
  1804. kbdclass.sys Keyboard Class Driver (Microsoft)
  1805. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  1806. kd.dll Local Kernal Debugger (Microsoft)
  1807. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  1808. ks.sys Kernal CSA Library (Microsoft)
  1809. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  1810. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  1811. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  1812. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  1813. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  1814. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  1815. mmcss.sys MMCSS Driver (Microsoft)
  1816. monitor.sys Monitor Driver (Microsoft)
  1817. mouclass.sys Mouse Class Driver (Microsoft)
  1818. mouhid.sys HID Mouse Filter Driver (Microsoft)
  1819. mountmgr.sys Mount Point Manager (Microsoft)
  1820. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  1821. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  1822. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  1823. Msfs.SYS Mailslot driver (Microsoft)
  1824. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  1825. msisadrv.sys ISA Driver (Microsoft)
  1826. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  1827. msquic.sys Windows QUIC Driver
  1828. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  1829. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  1830. mssmbios.sys System Management BIOS driver (Microsoft)
  1831. mup.sys Multiple UNC Provider driver (Microsoft)
  1832. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  1833. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  1834. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  1835. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  1836. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  1837. NDProxy.sys NDIS Proxy driver (Microsoft)
  1838. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  1839. netbios.sys NetBIOS Interface driver (Microsoft)
  1840. netbt.sys MBT Transport driver (Microsoft)
  1841. NETIO.SYS Network I/O Subsystem (Microsoft)
  1842. Npfs.SYS NPFS driver (Microsoft)
  1843. npsvctrig.sys Named pipe service triggers (Microsoft)
  1844. nsiproxy.sys NSI Proxy driver (Microsoft)
  1845. Ntfs.sys NT File System Driver (Microsoft)
  1846. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  1847. ntosext.sys NTOS Extension Host driver (Microsoft)
  1848. Null.SYS NULL Driver (Microsoft)
  1849. pacer.sys QoS Packet Scheduler (Microsoft)
  1850. partmgr.sys Partition driver (Microsoft)
  1851. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  1852. pcw.sys Performance Counter Driver (Microsoft)
  1853. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  1854. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  1855. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  1856. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  1857. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  1858. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  1859. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  1860. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  1861. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  1862. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  1863. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  1864. rdpvideominiport.sys RDP Video Miniport driver (Microsoft)
  1865. rdyboost.sys ReadyBoost Driver (Microsoft)
  1866. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  1867. serenum.sys Serial Port Enumerator (Microsoft)
  1868. serial.sys Serial Device Driver
  1869. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  1870. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  1871. spaceport.sys Storage Spaces driver (Microsoft)
  1872. srv2.sys Smb 2.0 Server driver (Microsoft)
  1873. srvnet.sys Server Network driver (Microsoft)
  1874. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  1875. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  1876. storqosflt.sys Storage QoS Filter driver (Microsoft)
  1877. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  1878. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  1879. tcpip.sys TCP/IP Protocol driver (Microsoft)
  1880. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  1881. TDI.SYS TDI Wrapper driver (Microsoft)
  1882. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  1883. tm.sys Kernel Transaction Manager driver (Microsoft)
  1884. UcmCx.sys USB Connector Manager KMDF Class Extension
  1885. ucx01000.sys USB Controller Extension (Microsoft)
  1886. umbus.sys User-Mode Bus Enumerator (Microsoft)
  1887. usbaudio.sys USB Audio Class Driver (Microsoft)
  1888. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  1889. USBD.SYS Universal Serial Bus Driver (Microsoft)
  1890. UsbHub3.sys USB3 HUB driver (Microsoft)
  1891. USBXHCI.SYS USB XHCI driver (Microsoft)
  1892. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  1893. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  1894. volmgr.sys Volume Manager Driver (Microsoft)
  1895. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  1896. volsnap.sys Volume Shadow Copy driver (Microsoft)
  1897. volume.sys Volume driver (Microsoft)
  1898. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  1899. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  1900. watchdog.sys Watchdog driver (Microsoft)
  1901. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  1902. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  1903. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  1904. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  1905. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  1906. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  1907. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  1908. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  1909. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  1910. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  1911. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  1912. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  1913. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  1914. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  1915. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  1916. Wof.sys Windows Overlay Filter (Microsoft)
  1917. WppRecorder.sys WPP Trace Recorder (Microsoft)
  1918. xboxgip.sys Game Input Protocol Driver
  1919. xinputhid.sys XINPUT filter driver for HID
  1920. xvdd.sys XVD Disk driver (Microsoft)
  1921.  
  1922. ====================== Dump #3: UNLOADED MODULES =======================
  1923.  
  1924. fffff803`67860000 fffff803`67871000 MSKSSRV.sys
  1925. fffff803`678e0000 fffff803`678f1000 MpKslDrv.sys
  1926. fffff803`67840000 fffff803`67851000 MSKSSRV.sys
  1927. fffff803`19d30000 fffff803`19d44000 xinputhid.sy
  1928. fffff803`677b0000 fffff803`677bf000 hiber_storpo
  1929. fffff803`677c0000 fffff803`677f3000 hiber_storah
  1930. fffff803`67800000 fffff803`6781e000 hiber_dumpfv
  1931. fffff803`67600000 fffff803`677a3000 EasyAntiChea
  1932. fffff803`67600000 fffff803`677a3000 EasyAntiChea
  1933. fffff803`67730000 fffff803`678d3000 EasyAntiChea
  1934. fffff803`19cf0000 fffff803`19d01000 MpKslDrv.sys
  1935. fffff803`19b80000 fffff803`19b91000 MSKSSRV.sys
  1936. fffff803`19f70000 fffff803`19f81000 MSKSSRV.sys
  1937. fffff803`19d30000 fffff803`19d44000 xinputhid.sy
  1938. fffff803`19f70000 fffff803`19f7f000 hiber_storpo
  1939. fffff803`19c80000 fffff803`19cb3000 hiber_storah
  1940. fffff803`19cc0000 fffff803`19cde000 hiber_dumpfv
  1941. fffff803`1b590000 fffff803`1b733000 EasyAntiChea
  1942. fffff803`19f60000 fffff803`19f86000 USBSTOR.SYS
  1943. fffff803`19ce0000 fffff803`19cef000 WpdUpFltr.sy
  1944. fffff803`19c80000 fffff803`19cd5000 WUDFRd.sys
  1945. fffff803`207d0000 fffff803`207ed000 EhStorClass.
  1946. fffff803`19cf0000 fffff803`19d07000 dc1-controll
  1947. fffff803`19d10000 fffff803`19d24000 xinputhid.sy
  1948. fffff803`23550000 fffff803`23567000 dc1-controll
  1949. fffff803`19c80000 fffff803`19c8f000 hiber_storpo
  1950. fffff803`19c90000 fffff803`19cc3000 hiber_storah
  1951. fffff803`19cd0000 fffff803`19cee000 hiber_dumpfv
  1952. fffff803`238b0000 fffff803`238c4000 xinputhid.sy
  1953. fffff803`1f770000 fffff803`1f781000 MpKsl83e05df
  1954. fffff803`1f5c0000 fffff803`1f763000 EasyAntiChea
  1955. fffff803`19bc0000 fffff803`19bd1000 MSKSSRV.sys
  1956. fffff803`22770000 fffff803`22781000 MpKslDrv.sys
  1957. fffff803`23400000 fffff803`23455000 lvrs64.sys
  1958. fffff803`23dc0000 fffff803`23df8000 usbaudio.sys
  1959. fffff803`23930000 fffff803`23db9000 lvuvc64.sys
  1960. fffff803`19b80000 fffff803`19b91000 MSKSSRV.sys
  1961. fffff803`23890000 fffff803`238a1000 MSKSSRV.sys
  1962. fffff803`21b90000 fffff803`21b9f000 dump_storpor
  1963. fffff803`21a00000 fffff803`21a33000 dump_storahc
  1964. fffff803`21a60000 fffff803`21a7e000 dump_dumpfve
  1965. fffff803`227d0000 fffff803`227ec000 dam.sys
  1966. fffff803`20400000 fffff803`20411000 WdBoot.sys
  1967. fffff803`203f0000 fffff803`203f9000 MbamElam.sys
  1968. fffff803`21480000 fffff803`21490000 hwpolicy.sys
  1969.  
  1970. ====================== Dump #3: BIOS INFORMATION =======================
  1971.  
  1972. [SMBIOS Data Tables v3.2]
  1973. [DMI Version - 0]
  1974. [2.0 Calling Convention - No]
  1975. [Table Size - 1763 bytes]
  1976. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  1977. Vendor American Megatrends Inc.
  1978. BIOS Version P3.50
  1979. BIOS Starting Address Segment f000
  1980. BIOS Release Date 07/18/2019
  1981. BIOS ROM Size 1000000
  1982. BIOS Characteristics
  1983. 07: - PCI Supported
  1984. 11: - Upgradeable FLASH BIOS
  1985. 12: - BIOS Shadowing Supported
  1986. 15: - CD-Boot Supported
  1987. 16: - Selectable Boot Supported
  1988. 17: - BIOS ROM Socketed
  1989. 19: - EDD Supported
  1990. 23: - 1.2MB Floppy Supported
  1991. 24: - 720KB Floppy Supported
  1992. 25: - 2.88MB Floppy Supported
  1993. 26: - Print Screen Device Supported
  1994. 27: - Keyboard Services Supported
  1995. 28: - Serial Services Supported
  1996. 29: - Printer Services Supported
  1997. 32: - BIOS Vendor Reserved
  1998. BIOS Characteristic Extensions
  1999. 00: - ACPI Supported
  2000. 01: - USB Legacy Supported
  2001. 08: - BIOS Boot Specification Supported
  2002. 10: - Specification Reserved
  2003. 11: - Specification Reserved
  2004. BIOS Major Revision 5
  2005. BIOS Minor Revision 14
  2006. EC Firmware Major Revision 255
  2007. EC Firmware Minor Revision 255
  2008. [System Information (Type 1) - Length 27 - Handle 0001h]
  2009. UUID 00000000-0000-0000-0000-000000000000
  2010. Wakeup Type Power Switch
  2011. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2012. Manufacturer ASRock
  2013. Product B450M Pro4
  2014. Version
  2015. Feature Flags 09h
  2016. 855422688: - 855422736: - «?uþ
  2017. Location
  2018. Chassis Handle 0003h
  2019. Board Type 0ah - Processor/Memory Module
  2020. Number of Child Handles 0
  2021. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2022. Chassis Type Desktop
  2023. Bootup State Safe
  2024. Power Supply State Safe
  2025. Thermal State Safe
  2026. Security Status None
  2027. OEM Defined 0
  2028. Height 0U
  2029. Number of Power Cords 1
  2030. Number of Contained Elements 0
  2031. Contained Element Size 3
  2032. [OEM Strings (Type 11) - Length 5 - Handle 0008h]
  2033. Number of Strings 1
  2034. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000bh]
  2035. [Physical Memory Array (Type 16) - Length 23 - Handle 000ch]
  2036. Location 03h - SystemBoard/Motherboard
  2037. Use 03h - System Memory
  2038. Memory Error Correction 03h - None
  2039. Maximum Capacity 134217728KB
  2040. Memory Error Inf Handle 000bh
  2041. Number of Memory Devices 4
  2042. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000dh]
  2043. Starting Address 00000000h
  2044. Ending Address 00ffffffh
  2045. Memory Array Handle 000ch
  2046. Partition Width 02
  2047. [Cache Information (Type 7) - Length 27 - Handle 000eh]
  2048. Socket Designation L1 - Cache
  2049. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2050. Maximum Cache Size 0240h - 576K
  2051. Installed Size 0240h - 576K
  2052. Supported SRAM Type 0010h - Pipeline-Burst
  2053. Current SRAM Type 0010h - Pipeline-Burst
  2054. Cache Speed 1ns
  2055. Error Correction Type Specification Reserved
  2056. System Cache Type Unified
  2057. Associativity 8-way Set-Associative
  2058. [Cache Information (Type 7) - Length 27 - Handle 000fh]
  2059. Socket Designation L2 - Cache
  2060. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2061. Maximum Cache Size 0c00h - 3072K
  2062. Installed Size 0c00h - 3072K
  2063. Supported SRAM Type 0010h - Pipeline-Burst
  2064. Current SRAM Type 0010h - Pipeline-Burst
  2065. Cache Speed 1ns
  2066. Error Correction Type Specification Reserved
  2067. System Cache Type Unified
  2068. Associativity 8-way Set-Associative
  2069. [Cache Information (Type 7) - Length 27 - Handle 0010h]
  2070. Socket Designation L3 - Cache
  2071. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2072. Maximum Cache Size 4000h - 16384K
  2073. Installed Size 4000h - 16384K
  2074. Supported SRAM Type 0010h - Pipeline-Burst
  2075. Current SRAM Type 0010h - Pipeline-Burst
  2076. Cache Speed 1ns
  2077. Error Correction Type Specification Reserved
  2078. System Cache Type Unified
  2079. Associativity 16-way Set-Associative
  2080. [Processor Information (Type 4) - Length 48 - Handle 0011h]
  2081. Socket Designation AM4
  2082. Processor Type Central Processor
  2083. Processor Family 6bh - Specification Reserved
  2084. Processor Manufacturer Advanced Micro Devices, Inc.
  2085. Processor ID 820f8000fffb8b17
  2086. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  2087. Processor Voltage 8bh - 1.1V
  2088. External Clock 100MHz
  2089. Max Speed 3900MHz
  2090. Current Speed 3400MHz
  2091. Status Enabled Populated
  2092. Processor Upgrade Specification Reserved
  2093. L1 Cache Handle 000eh
  2094. L2 Cache Handle 000fh
  2095. L3 Cache Handle 0010h
  2096. Part Number Unknown
  2097. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0012h]
  2098. [Memory Device (Type 17) - Length 84 - Handle 0013h]
  2099. Physical Memory Array Handle 000ch
  2100. Memory Error Info Handle 0012h
  2101. Form Factor 02h - Unknown
  2102. Device Locator DIMM 0
  2103. Bank Locator P0 CHANNEL A
  2104. Memory Type 02h - Unknown
  2105. Type Detail 0004h - Unknown
  2106. Speed 0MHz
  2107. Manufacturer Unknown
  2108. Part Number Unknown
  2109. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  2110. [Memory Device (Type 17) - Length 84 - Handle 0015h]
  2111. Physical Memory Array Handle 000ch
  2112. Memory Error Info Handle 0014h
  2113. Total Width 64 bits
  2114. Data Width 64 bits
  2115. Size 8192MB
  2116. Form Factor 09h - DIMM
  2117. Device Locator DIMM 1
  2118. Bank Locator P0 CHANNEL A
  2119. Memory Type 1ah - Specification Reserved
  2120. Type Detail 4080h - Synchronous
  2121. Speed 2133MHz
  2122. Manufacturer Unknown
  2123. Part Number F4-3000C16-8GVRB
  2124. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  2125. Starting Address 00000000h
  2126. Ending Address 00ffffffh
  2127. Memory Device Handle 0015h
  2128. Mem Array Mapped Adr Handle 000dh
  2129. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0017h]
  2130. [Memory Device (Type 17) - Length 84 - Handle 0018h]
  2131. Physical Memory Array Handle 000ch
  2132. Memory Error Info Handle 0017h
  2133. Form Factor 02h - Unknown
  2134. Device Locator DIMM 0
  2135. Bank Locator P0 CHANNEL B
  2136. Memory Type 02h - Unknown
  2137. Type Detail 0004h - Unknown
  2138. Speed 0MHz
  2139. Manufacturer Unknown
  2140. Part Number Unknown
  2141. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0019h]
  2142. [Memory Device (Type 17) - Length 84 - Handle 001ah]
  2143. Physical Memory Array Handle 000ch
  2144. Memory Error Info Handle 0019h
  2145. Total Width 64 bits
  2146. Data Width 64 bits
  2147. Size 8192MB
  2148. Form Factor 09h - DIMM
  2149. Device Locator DIMM 1
  2150. Bank Locator P0 CHANNEL B
  2151. Memory Type 1ah - Specification Reserved
  2152. Type Detail 4080h - Synchronous
  2153. Speed 2133MHz
  2154. Manufacturer Unknown
  2155. Part Number F4-3000C16-8GVRB
  2156. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  2157. Starting Address 00000000h
  2158. Ending Address 00ffffffh
  2159. Memory Device Handle 001ah
  2160. Mem Array Mapped Adr Handle 000dh
  2161.  
  2162. ========================== Dump #3: Extra #1 ===========================
  2163.  
  2164. 7: kd> !verifier
  2165. Verify Flags Level 0x00000000
  2166. STANDARD FLAGS:
  2167. [X] (0x00000000) Automatic Checks
  2168. [ ] (0x00000001) Special pool
  2169. [ ] (0x00000002) Force IRQL checking
  2170. [ ] (0x00000008) Pool tracking
  2171. [ ] (0x00000010) I/O verification
  2172. [ ] (0x00000020) Deadlock detection
  2173. [ ] (0x00000080) DMA checking
  2174. [ ] (0x00000100) Security checks
  2175. [ ] (0x00000800) Miscellaneous checks
  2176. [ ] (0x00020000) DDI compliance checking
  2177. ADDITIONAL FLAGS:
  2178. [ ] (0x00000004) Randomized low resources simulation
  2179. [ ] (0x00000200) Force pending I/O requests
  2180. [ ] (0x00000400) IRP logging
  2181. [ ] (0x00002000) Invariant MDL checking for stack
  2182. [ ] (0x00004000) Invariant MDL checking for driver
  2183. [ ] (0x00008000) Power framework delay fuzzing
  2184. [ ] (0x00010000) Port/miniport interface checking
  2185. [ ] (0x00040000) Systematic low resources simulation
  2186. [ ] (0x00080000) DDI compliance checking (additional)
  2187. [ ] (0x00200000) NDIS/WIFI verification
  2188. [ ] (0x00800000) Kernel synchronization delay fuzzing
  2189. [ ] (0x01000000) VM switch verification
  2190. [ ] (0x02000000) Code integrity checks
  2191. [X] Indicates flag is enabled
  2192. Summary of All Verifier Statistics
  2193. RaiseIrqls 0x0
  2194. AcquireSpinLocks 0x0
  2195. Synch Executions 0x0
  2196. Trims 0x0
  2197. Pool Allocations Attempted 0x0
  2198. Pool Allocations Succeeded 0x0
  2199. Pool Allocations Succeeded SpecialPool 0x0
  2200. Pool Allocations With NO TAG 0x0
  2201. Pool Allocations Failed 0x0
  2202. Current paged pool allocations 0x0 for 00000000 bytes
  2203. Peak paged pool allocations 0x0 for 00000000 bytes
  2204. Current nonpaged pool allocations 0x0 for 00000000 bytes
  2205. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  2206.  
  2207. ========================== Dump #3: Extra #2 ===========================
  2208.  
  2209. 7: kd> !thread
  2210. THREAD ffffdb05521a3080 Cid 1fe0.09b8 Teb: 0000004de86e4000 Win32Thread: 0000000000000000 RUNNING on processor 7
  2211. Not impersonating
  2212. GetUlongFromAddress: unable to read from fffff8031c81143c
  2213. Owning Process ffffdb05560a9080 Image: firefox.exe
  2214. Attached Process N/A Image: N/A
  2215. fffff78000000000: Unable to get shared data
  2216. Wait Start TickCount 11550447
  2217. Context Switch Count 174722 IdealProcessor: 7
  2218. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2219. UserTime 00:00:00.000
  2220. KernelTime 00:00:00.000
  2221. Win32 Start Address 0x00007ff879011500
  2222. Stack Init ffffc301897c4c90 Current ffffc301897c47a0
  2223. Base ffffc301897c5000 Limit ffffc301897bf000 Call 0000000000000000
  2224. Priority 9 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  2225. Child-SP RetAddr : Args to Child : Call Site
  2226. ffffc480`50ca8018 fffff803`1bfefa29 : 00000000`0000003b 00000000`c0000005 fffff803`1bfef5d7 ffffc480`50ca8920 : nt!KeBugCheckEx
  2227. ffffc480`50ca8020 fffff803`1bfeee7c : ffffc301`8aea0618 fffff803`1bce6904 ffffc480`50ca8210 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  2228. ffffc480`50ca8160 fffff803`1bfe6a22 : fffff803`1bfeee00 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceHandler+0x7c
  2229. ffffc480`50ca81a0 fffff803`1be32fd7 : ffffc480`50ca8710 00000000`00000000 ffffc480`50ca8920 fffff803`1bfef5d7 : nt!RtlpExecuteHandlerForException+0x12
  2230. ffffc480`50ca81d0 fffff803`1be7b246 : ffffc301`897c48c8 ffffc480`50ca8e20 ffffc301`897c48c8 000001e8`76a20f28 : nt!RtlDispatchException+0x297
  2231. ffffc480`50ca88f0 fffff803`1bfde9f2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x186
  2232. ffffc480`50ca8fb0 fffff803`1bfde9c0 : fffff803`1bfefb65 ffffc480`50c88180 fffff803`1bfe4d72 000f8067`bcbbbdff : nt!KxExceptionDispatchOnExceptionStack+0x12 (TrapFrame @ ffffc480`50ca8e70)
  2233. ffffc301`897c4788 fffff803`1bfefb65 : ffffc480`50c88180 fffff803`1bfe4d72 000f8067`bcbbbdff fffff803`00000001 : nt!KiExceptionDispatchOnExceptionStackContinue
  2234. ffffc301`897c4790 fffff803`1bfeb8a0 : 00000000`00000000 fffff803`199bba20 fffff803`199b7ac0 00000000`00000000 : nt!KiExceptionDispatch+0x125
  2235. ffffc301`897c4970 fffff803`1bfef5d7 : ffffdb05`521a3080 ffffc301`897c4b10 ffffffff`dc3cba00 00000000`00000000 : nt!KiGeneralProtectionFault+0x320 (TrapFrame @ ffffc301`897c4970)
  2236. ffffc301`897c4b00 00007ff8`7b26e784 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x157 (TrapFrame @ ffffc301`897c4b00)
  2237. 0000004d`edb0f148 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`7b26e784
  2238.  
  2239.  
  2240. ========================================================================
  2241. ======================= Dump #4: ANALYZE VERBOSE =======================
  2242. ======================= File: 072420-7640-01.dmp =======================
  2243. ========================================================================
  2244.  
  2245. Mini Kernel Dump File: Only registers and stack trace are available
  2246. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  2247. Kernel base = 0xfffff802`17600000 PsLoadedModuleList = 0xfffff802`1822a310
  2248. Debug session time: Fri Jul 24 12:41:09.396 2020 (UTC - 4:00)
  2249. System Uptime: 0 days 0:27:56.030
  2250.  
  2251. BugCheck D1, {0, e, 0, fffff8021e240104}
  2252. *** WARNING: Unable to verify timestamp for nvlddmkm.sys
  2253. *** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
  2254. *** WARNING: Unable to verify timestamp for win32k.sys
  2255. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  2256. Probably caused by : memory_corruption
  2257. Followup: memory_corruption
  2258.  
  2259. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  2260. An attempt was made to access a pageable (or completely invalid) address at an
  2261. interrupt request level (IRQL) that is too high. This is usually
  2262. caused by drivers using improper addresses.
  2263. If kernel debugger is available get stack backtrace.
  2264.  
  2265. Arguments:
  2266. Arg1: 0000000000000000, memory referenced
  2267. Arg2: 000000000000000e, IRQL
  2268. Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
  2269. Arg4: fffff8021e240104, address which referenced memory
  2270.  
  2271. Debugging Details:
  2272. DUMP_CLASS: 1
  2273. DUMP_QUALIFIER: 400
  2274. DUMP_TYPE: 2
  2275. READ_ADDRESS: fffff802182fa388: Unable to get MiVisibleState
  2276. 0000000000000000
  2277. CURRENT_IRQL: e
  2278. FAULTING_IP:
  2279. nvlddmkm+20104
  2280. fffff802`1e240104 482b11 sub rdx,qword ptr [rcx]
  2281. CUSTOMER_CRASH_COUNT: 1
  2282. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  2283. BUGCHECK_STR: AV
  2284.  
  2285. PROCESS_NAME: System
  2286.  
  2287. TRAP_FRAME: fffff8021ac79400 -- (.trap 0xfffff8021ac79400)
  2288. NOTE: The trap frame does not contain all registers.
  2289. Some register values may be zeroed or incorrect.
  2290. rax=fffff8021ea701c8 rbx=0000000000000000 rcx=0000000000000000
  2291. rdx=fffff8021ac79710 rsi=0000000000000000 rdi=0000000000000000
  2292. rip=fffff8021e240104 rsp=fffff8021ac79590 rbp=fffff8021ac79710
  2293. r8=0000000000000001 r9=ffffd68ddd0eb000 r10=0000000000000001
  2294. r11=ffff707fbc000000 r12=0000000000000000 r13=0000000000000000
  2295. r14=0000000000000000 r15=0000000000000000
  2296. iopl=0 nv up ei ng nz ac po cy
  2297. nvlddmkm+0x20104:
  2298. fffff802`1e240104 482b11 sub rdx,qword ptr [rcx] ds:00000000`00000000=????????????????
  2299. Resetting default scope
  2300. LAST_CONTROL_TRANSFER: from fffff802179efa29 to fffff802179ddb60
  2301. STACK_TEXT:
  2302. fffff802`1ac792b8 fffff802`179efa29 : 00000000`0000000a 00000000`00000000 00000000`0000000e 00000000`00000000 : nt!KeBugCheckEx
  2303. fffff802`1ac792c0 fffff802`179ebd29 : fffff802`1ac79800 ffffd68d`dd122000 fffff802`1ea1fa64 ffffd68d`dd122000 : nt!KiBugCheckDispatch+0x69
  2304. fffff802`1ac79400 fffff802`1e240104 : fffff802`1e239e9f fffff802`1e23278b fffff802`1ac795d0 fffff802`1783aad9 : nt!KiPageFault+0x469
  2305. fffff802`1ac79590 fffff802`1e239e9f : fffff802`1e23278b fffff802`1ac795d0 fffff802`1783aad9 00000000`00000000 : nvlddmkm+0x20104
  2306. fffff802`1ac79598 fffff802`1e23278b : fffff802`1ac795d0 fffff802`1783aad9 00000000`00000000 00000000`00000000 : nvlddmkm+0x19e9f
  2307. fffff802`1ac795a0 fffff802`1ac795d0 : fffff802`1783aad9 00000000`00000000 00000000`00000000 ffffd68d`df2c4000 : nvlddmkm+0x1278b
  2308. fffff802`1ac795a8 fffff802`1783aad9 : 00000000`00000000 00000000`00000000 ffffd68d`df2c4000 fffff802`1e231798 : 0xfffff802`1ac795d0
  2309. fffff802`1ac795b0 00000000`00000000 : 00000000`00000000 fffff802`1e9f827d ffffd68d`dd0eb000 fffff802`1ac79770 : nt!EtwpLogKernelEvent+0x249
  2310. STACK_COMMAND: kb
  2311. CHKIMG_EXTENSION: !chkimg -lo 50 -d !FLTMGR
  2312. fffff80213e0cd05-fffff80213e0cd06 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+35
  2313. [ 48 ff:4c 8b ]
  2314. fffff80213e0cd0c - FLTMGR!DeleteStreamListCtrlCallback+3c (+0x07)
  2315. [ 0f:e8 ]
  2316. fffff80213e0cd0e-fffff80213e0cd10 3 bytes - FLTMGR!DeleteStreamListCtrlCallback+3e (+0x02)
  2317. [ 44 00 00:5b b0 03 ]
  2318. fffff80213e0cd1a-fffff80213e0cd1b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+4a (+0x0c)
  2319. [ 48 ff:4c 8b ]
  2320. fffff80213e0cd21-fffff80213e0cd25 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+51 (+0x07)
  2321. [ 0f 1f 44 00 00:e8 fa 63 a1 03 ]
  2322. fffff80213e0cd6a-fffff80213e0cd6b 2 bytes - FLTMGR!DeleteStreamListCtrlCallback+9a (+0x49)
  2323. [ 48 ff:4c 8b ]
  2324. fffff80213e0cd71-fffff80213e0cd77 7 bytes - FLTMGR!DeleteStreamListCtrlCallback+a1 (+0x07)
  2325. [ 0f 1f 44 00 00 48 ff:e8 fa 5b a1 03 4c 8b ]
  2326. fffff80213e0cd7d-fffff80213e0cd81 5 bytes - FLTMGR!DeleteStreamListCtrlCallback+ad (+0x0c)
  2327. [ 0f 1f 44 00 00:e8 5e eb ae 03 ]
  2328. 27 errors : !FLTMGR (fffff80213e0cd05-fffff80213e0cd81)
  2329. MODULE_NAME: memory_corruption
  2330.  
  2331. IMAGE_NAME: memory_corruption
  2332.  
  2333. FOLLOWUP_NAME: memory_corruption
  2334. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  2335. MEMORY_CORRUPTOR: LARGE
  2336. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2337. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  2338. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  2339. TARGET_TIME: 2020-07-24T16:41:09.000Z
  2340. SUITE_MASK: 272
  2341. PRODUCT_TYPE: 1
  2342. USER_LCID: 0
  2343. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  2344. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  2345. Followup: memory_corruption
  2346.  
  2347. ====================== Dump #4: 3RD PARTY DRIVERS ======================
  2348.  
  2349. Oct 22 2012 - lvrs64.sys - Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  2350. Oct 22 2012 - lvuvc64.sys - Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  2351. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2352. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  2353. Apr 12 2018 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  2354. Nov 16 2018 - logi_core_temp.sys - Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  2355. Nov 20 2018 - logi_joy_bus_enum.sys - Logitech Joystick driver
  2356. Nov 20 2018 - logi_joy_xlcore.sys - Logitech Joystick driver
  2357. Mar 08 2019 - dokan1.sys - Dokan Project driver (ISLOG)
  2358. Mar 14 2019 - nvvad64v.sys - Nvidia Virtual Audio driver http://www.nvidia.com/
  2359. May 24 2019 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  2360. Sep 29 2019 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2361. Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  2362. Nov 29 2019 - NvModuleTracker.sys - NVIDIA Module Tracker driver
  2363. Jan 10 2020 - nvvhci.sys - Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2364. Jan 26 2020 - UcmCxUcsiNvppc.sys - NVIDIA USB Type-C Port Policy Controller driver
  2365. Jan 30 2020 - tapmullvad0901.sys - TAP-Windows Virtual Network driver (The OpenVPN Project)
  2366. Apr 20 2020 - logi_joy_vir_hid.sys - Logitech Joystick driver
  2367. Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  2368. Jun 09 2020 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  2369. Jul 05 2020 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  2370.  
  2371. ================== Dump #4: 3RD PARTY DRIVERS (FULL) ===================
  2372.  
  2373. Image path: \SystemRoot\system32\DRIVERS\lvrs64.sys
  2374. Image name: lvrs64.sys
  2375. Search : https://www.google.com/search?q=lvrs64.sys
  2376. ADA Info : Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
  2377. Timestamp : Mon Oct 22 2012
  2378.  
  2379. Image path: \SystemRoot\system32\DRIVERS\lvuvc64.sys
  2380. Image name: lvuvc64.sys
  2381. Search : https://www.google.com/search?q=lvuvc64.sys
  2382. ADA Info : Logitech USB Video Class Driver (WebCam) http://support.logitech.com/
  2383. Timestamp : Mon Oct 22 2012
  2384.  
  2385. Image path: \SystemRoot\System32\drivers\amdgpio3.sys
  2386. Image name: amdgpio3.sys
  2387. Search : https://www.google.com/search?q=amdgpio3.sys
  2388. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2389. Timestamp : Mon Mar 14 2016
  2390.  
  2391. Image path: \SystemRoot\system32\DRIVERS\amdpsp.sys
  2392. Image name: amdpsp.sys
  2393. Search : https://www.google.com/search?q=amdpsp.sys
  2394. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  2395. Timestamp : Mon Jun 5 2017
  2396.  
  2397. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  2398. Image name: AMDPCIDev.sys
  2399. Search : https://www.google.com/search?q=AMDPCIDev.sys
  2400. ADA Info : Advanced Micro Devices PCI Device driver
  2401. Timestamp : Thu Apr 12 2018
  2402.  
  2403. Image path: \??\C:\ProgramData\LGHUB\depots\57944\driver_cpu_temperature\logi_core_temp.sys
  2404. Image name: logi_core_temp.sys
  2405. Search : https://www.google.com/search?q=logi_core_temp.sys
  2406. ADA Info : Logitech G HUB driver https://support.logitech.com/en_us/software/lghub
  2407. Timestamp : Fri Nov 16 2018
  2408.  
  2409. Image path: \SystemRoot\system32\drivers\logi_joy_bus_enum.sys
  2410. Image name: logi_joy_bus_enum.sys
  2411. Search : https://www.google.com/search?q=logi_joy_bus_enum.sys
  2412. ADA Info : Logitech Joystick driver
  2413. Timestamp : Tue Nov 20 2018
  2414.  
  2415. Image path: \SystemRoot\system32\drivers\logi_joy_xlcore.sys
  2416. Image name: logi_joy_xlcore.sys
  2417. Search : https://www.google.com/search?q=logi_joy_xlcore.sys
  2418. ADA Info : Logitech Joystick driver
  2419. Timestamp : Tue Nov 20 2018
  2420.  
  2421. Image path: \SystemRoot\system32\DRIVERS\dokan1.sys
  2422. Image name: dokan1.sys
  2423. Search : https://www.google.com/search?q=dokan1.sys
  2424. ADA Info : Dokan Project driver (ISLOG)
  2425. Timestamp : Fri Mar 8 2019
  2426.  
  2427. Image path: \SystemRoot\system32\drivers\nvvad64v.sys
  2428. Image name: nvvad64v.sys
  2429. Search : https://www.google.com/search?q=nvvad64v.sys
  2430. ADA Info : Nvidia Virtual Audio driver http://www.nvidia.com/
  2431. Timestamp : Thu Mar 14 2019
  2432.  
  2433. Mapped memory image file: C:\ProgramData\dbg\sym\rt640x64.sys\5CE7AF86ad000\rt640x64.sys
  2434. Image path: \SystemRoot\System32\drivers\rt640x64.sys
  2435. Image name: rt640x64.sys
  2436. Search : https://www.google.com/search?q=rt640x64.sys
  2437. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  2438. Timestamp : Fri May 24 2019
  2439. File version: 9.1.410.2015
  2440. Product version: 9.1.410.2015
  2441. File flags: 8 (Mask 3F) Private
  2442. File OS: 40004 NT Win32
  2443. File type: 3.6 Driver
  2444. File date: 00000000.00000000
  2445. CompanyName: Realtek
  2446. ProductName: Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
  2447. InternalName: rt640x64.sys
  2448. OriginalFilename: rt640x64.sys
  2449. ProductVersion: 9.001.0410.2015
  2450. FileVersion: 9.001.0410.2015
  2451. FileDescription: Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
  2452. LegalCopyright: Copyright (C) 2019 Realtek Semiconductor Corporation. All Right Reserved.
  2453.  
  2454. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  2455. Image name: amdgpio2.sys
  2456. Search : https://www.google.com/search?q=amdgpio2.sys
  2457. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  2458. Timestamp : Sun Sep 29 2019
  2459.  
  2460. Image path: \SystemRoot\System32\Drivers\mbamswissarmy.sys
  2461. Image name: mbamswissarmy.sys
  2462. Search : https://www.google.com/search?q=mbamswissarmy.sys
  2463. ADA Info : MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
  2464. Timestamp : Wed Nov 20 2019
  2465.  
  2466. Image path: \SystemRoot\System32\drivers\NvModuleTracker.sys
  2467. Image name: NvModuleTracker.sys
  2468. Search : https://www.google.com/search?q=NvModuleTracker.sys
  2469. ADA Info : NVIDIA Module Tracker driver
  2470. Timestamp : Fri Nov 29 2019
  2471.  
  2472. Image path: \SystemRoot\System32\drivers\nvvhci.sys
  2473. Image name: nvvhci.sys
  2474. Search : https://www.google.com/search?q=nvvhci.sys
  2475. ADA Info : Nvidia Virtual USB Host Controller driver http://www.nvidia.com/
  2476. Timestamp : Fri Jan 10 2020
  2477.  
  2478. Image path: \SystemRoot\System32\DriverStore\FileRepository\nvppc.inf_amd64_0f22333f160a8f42\UcmCxUcsiNvppc.sys
  2479. Image name: UcmCxUcsiNvppc.sys
  2480. Search : https://www.google.com/search?q=UcmCxUcsiNvppc.sys
  2481. ADA Info : NVIDIA USB Type-C Port Policy Controller driver
  2482. Timestamp : Sun Jan 26 2020
  2483.  
  2484. Image path: \SystemRoot\System32\drivers\tapmullvad0901.sys
  2485. Image name: tapmullvad0901.sys
  2486. Search : https://www.google.com/search?q=tapmullvad0901.sys
  2487. ADA Info : TAP-Windows Virtual Network driver (The OpenVPN Project)
  2488. Timestamp : Thu Jan 30 2020
  2489.  
  2490. Image path: \SystemRoot\system32\drivers\logi_joy_vir_hid.sys
  2491. Image name: logi_joy_vir_hid.sys
  2492. Search : https://www.google.com/search?q=logi_joy_vir_hid.sys
  2493. ADA Info : Logitech Joystick driver
  2494. Timestamp : Mon Apr 20 2020
  2495.  
  2496. Image path: \SystemRoot\System32\Drivers\MbamChameleon.sys
  2497. Image name: MbamChameleon.sys
  2498. Search : https://www.google.com/search?q=MbamChameleon.sys
  2499. ADA Info : Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
  2500. Timestamp : Thu Jun 4 2020
  2501.  
  2502. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  2503. Image name: nvhda64v.sys
  2504. Search : https://www.google.com/search?q=nvhda64v.sys
  2505. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  2506. Timestamp : Tue Jun 9 2020
  2507.  
  2508. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_edab19158bdd0d0a\nvlddmkm.sys
  2509. Image name: nvlddmkm.sys
  2510. Search : https://www.google.com/search?q=nvlddmkm.sys
  2511. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  2512. Timestamp : Sun Jul 5 2020
  2513.  
  2514. ====================== Dump #4: MICROSOFT DRIVERS ======================
  2515.  
  2516. ACPI.sys ACPI Driver for NT (Microsoft)
  2517. acpiex.sys ACPIEx Driver (Microsoft)
  2518. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  2519. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  2520. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  2521. ahcache.sys Application Compatibility Cache (Microsoft)
  2522. amdppm.sys Processor Device Driver
  2523. bam.sys BAM Kernal driver (Microsoft)
  2524. BasicDisplay.sys Basic Display driver (Microsoft)
  2525. BasicRender.sys Basic Render driver (Microsoft)
  2526. Beep.SYS BEEP driver (Microsoft)
  2527. bindflt.sys Windows Bind Filter driver (Microsoft)
  2528. BOOTVID.dll VGA Boot Driver (Microsoft)
  2529. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  2530. cdd.dll Canonical Display Driver (Microsoft)
  2531. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  2532. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  2533. CI.dll Code Integrity Module (Microsoft)
  2534. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  2535. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  2536. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  2537. CLFS.SYS Common Log File System Driver (Microsoft)
  2538. clipsp.sys CLIP Service (Microsoft)
  2539. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  2540. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  2541. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  2542. condrv.sys Console Driver (Microsoft)
  2543. crashdmp.sys Crash Dump driver (Microsoft)
  2544. csc.sys Windows Client Side Caching driver (Microsoft)
  2545. dc1-controller.sys KMDF driver for DC1 Controller
  2546. DevAuthE.sys Xbox Device Authentication Driver
  2547. dfsc.sys DFS Namespace Client Driver (Microsoft)
  2548. disk.sys PnP Disk Driver (Microsoft)
  2549. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  2550. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2551. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2552. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  2553. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  2554. dxgmms2.sys DirectX Graphics MMS
  2555. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  2556. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  2557. fileinfo.sys FileInfo Filter Driver (Microsoft)
  2558. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  2559. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  2560. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  2561. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  2562. gameflt.sys Gaming Install Filter driver (Microsoft)
  2563. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  2564. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  2565. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  2566. HdAudio.sys High Definition Audio Function driver (Microsoft)
  2567. HIDCLASS.SYS Hid Class Library (Microsoft)
  2568. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  2569. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  2570. HTTP.sys HTTP Protocol Stack (Microsoft)
  2571. i8042prt.sys i8042 Keyboard / PS/2 Mouse driver (Microsoft)
  2572. intelpep.sys Intel Power Engine Plugin (Microsoft)
  2573. IntelTA.sys Intel Telemetry Driver
  2574. iorate.sys I/O rate control Filter (Microsoft)
  2575. kbdclass.sys Keyboard Class Driver (Microsoft)
  2576. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  2577. kd.dll Local Kernal Debugger (Microsoft)
  2578. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  2579. ks.sys Kernal CSA Library (Microsoft)
  2580. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  2581. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  2582. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  2583. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  2584. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  2585. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  2586. mmcss.sys MMCSS Driver (Microsoft)
  2587. monitor.sys Monitor Driver (Microsoft)
  2588. mouclass.sys Mouse Class Driver (Microsoft)
  2589. mouhid.sys HID Mouse Filter Driver (Microsoft)
  2590. mountmgr.sys Mount Point Manager (Microsoft)
  2591. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  2592. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  2593. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  2594. Msfs.SYS Mailslot driver (Microsoft)
  2595. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  2596. msisadrv.sys ISA Driver (Microsoft)
  2597. MSKSSRV.sys MS KS Server driver
  2598. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  2599. msquic.sys Windows QUIC Driver
  2600. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  2601. mssecflt.sys Microsoft Security Events Component file system filter driver (Microsoft)
  2602. mssmbios.sys System Management BIOS driver (Microsoft)
  2603. mup.sys Multiple UNC Provider driver (Microsoft)
  2604. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  2605. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  2606. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  2607. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  2608. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  2609. NDProxy.sys NDIS Proxy driver (Microsoft)
  2610. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  2611. netbios.sys NetBIOS Interface driver (Microsoft)
  2612. netbt.sys MBT Transport driver (Microsoft)
  2613. NETIO.SYS Network I/O Subsystem (Microsoft)
  2614. Npfs.SYS NPFS driver (Microsoft)
  2615. npsvctrig.sys Named pipe service triggers (Microsoft)
  2616. nsiproxy.sys NSI Proxy driver (Microsoft)
  2617. Ntfs.sys NT File System Driver (Microsoft)
  2618. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  2619. ntosext.sys NTOS Extension Host driver (Microsoft)
  2620. Null.SYS NULL Driver (Microsoft)
  2621. pacer.sys QoS Packet Scheduler (Microsoft)
  2622. partmgr.sys Partition driver (Microsoft)
  2623. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  2624. pcw.sys Performance Counter Driver (Microsoft)
  2625. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  2626. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  2627. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  2628. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  2629. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  2630. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  2631. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  2632. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  2633. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  2634. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  2635. rdyboost.sys ReadyBoost Driver (Microsoft)
  2636. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  2637. serenum.sys Serial Port Enumerator (Microsoft)
  2638. serial.sys Serial Device Driver
  2639. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  2640. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  2641. spaceport.sys Storage Spaces driver (Microsoft)
  2642. srv2.sys Smb 2.0 Server driver (Microsoft)
  2643. srvnet.sys Server Network driver (Microsoft)
  2644. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  2645. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  2646. storqosflt.sys Storage QoS Filter driver (Microsoft)
  2647. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  2648. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  2649. tcpip.sys TCP/IP Protocol driver (Microsoft)
  2650. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  2651. TDI.SYS TDI Wrapper driver (Microsoft)
  2652. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  2653. tm.sys Kernel Transaction Manager driver (Microsoft)
  2654. UcmCx.sys USB Connector Manager KMDF Class Extension
  2655. ucx01000.sys USB Controller Extension (Microsoft)
  2656. umbus.sys User-Mode Bus Enumerator (Microsoft)
  2657. usbaudio.sys USB Audio Class Driver (Microsoft)
  2658. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  2659. USBD.SYS Universal Serial Bus Driver (Microsoft)
  2660. UsbHub3.sys USB3 HUB driver (Microsoft)
  2661. USBXHCI.SYS USB XHCI driver (Microsoft)
  2662. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  2663. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  2664. volmgr.sys Volume Manager Driver (Microsoft)
  2665. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  2666. volsnap.sys Volume Shadow Copy driver (Microsoft)
  2667. volume.sys Volume driver (Microsoft)
  2668. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  2669. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  2670. watchdog.sys Watchdog driver (Microsoft)
  2671. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  2672. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  2673. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  2674. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  2675. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  2676. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  2677. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  2678. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  2679. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  2680. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  2681. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  2682. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  2683. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  2684. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  2685. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  2686. Wof.sys Windows Overlay Filter (Microsoft)
  2687. WppRecorder.sys WPP Trace Recorder (Microsoft)
  2688. xboxgip.sys Game Input Protocol Driver
  2689. xinputhid.sys XINPUT filter driver for HID
  2690. xvdd.sys XVD Disk driver (Microsoft)
  2691.  
  2692. ====================== Dump #4: UNLOADED MODULES =======================
  2693.  
  2694. fffff802`1c8e0000 fffff802`1c8f1000 MSKSSRV.sys
  2695. fffff802`1b3f0000 fffff802`1b3ff000 dump_storpor
  2696. fffff802`1ae40000 fffff802`1ae73000 dump_storahc
  2697. fffff802`1aea0000 fffff802`1aebe000 dump_dumpfve
  2698. fffff802`1b900000 fffff802`1b91c000 dam.sys
  2699. fffff802`19800000 fffff802`19811000 WdBoot.sys
  2700. fffff802`197f0000 fffff802`197f9000 MbamElam.sys
  2701. fffff802`1a880000 fffff802`1a890000 hwpolicy.sys
  2702.  
  2703. ====================== Dump #4: BIOS INFORMATION =======================
  2704.  
  2705. [SMBIOS Data Tables v3.2]
  2706. [DMI Version - 0]
  2707. [2.0 Calling Convention - No]
  2708. [Table Size - 1763 bytes]
  2709. [BIOS Information (Type 0) - Length 26 - Handle 0000h]
  2710. Vendor American Megatrends Inc.
  2711. BIOS Version P3.50
  2712. BIOS Starting Address Segment f000
  2713. BIOS Release Date 07/18/2019
  2714. BIOS ROM Size 1000000
  2715. BIOS Characteristics
  2716. 07: - PCI Supported
  2717. 11: - Upgradeable FLASH BIOS
  2718. 12: - BIOS Shadowing Supported
  2719. 15: - CD-Boot Supported
  2720. 16: - Selectable Boot Supported
  2721. 17: - BIOS ROM Socketed
  2722. 19: - EDD Supported
  2723. 23: - 1.2MB Floppy Supported
  2724. 24: - 720KB Floppy Supported
  2725. 25: - 2.88MB Floppy Supported
  2726. 26: - Print Screen Device Supported
  2727. 27: - Keyboard Services Supported
  2728. 28: - Serial Services Supported
  2729. 29: - Printer Services Supported
  2730. 32: - BIOS Vendor Reserved
  2731. BIOS Characteristic Extensions
  2732. 00: - ACPI Supported
  2733. 01: - USB Legacy Supported
  2734. 08: - BIOS Boot Specification Supported
  2735. 10: - Specification Reserved
  2736. 11: - Specification Reserved
  2737. BIOS Major Revision 5
  2738. BIOS Minor Revision 14
  2739. EC Firmware Major Revision 255
  2740. EC Firmware Minor Revision 255
  2741. [System Information (Type 1) - Length 27 - Handle 0001h]
  2742. UUID 00000000-0000-0000-0000-000000000000
  2743. Wakeup Type Power Switch
  2744. [BaseBoard Information (Type 2) - Length 15 - Handle 0002h]
  2745. Manufacturer ASRock
  2746. Product B450M Pro4
  2747. Version
  2748. Feature Flags 09h
  2749. 855422688: - 855422736: - «?uþ
  2750. Location
  2751. Chassis Handle 0003h
  2752. Board Type 0ah - Processor/Memory Module
  2753. Number of Child Handles 0
  2754. [System Enclosure (Type 3) - Length 22 - Handle 0003h]
  2755. Chassis Type Desktop
  2756. Bootup State Safe
  2757. Power Supply State Safe
  2758. Thermal State Safe
  2759. Security Status None
  2760. OEM Defined 0
  2761. Height 0U
  2762. Number of Power Cords 1
  2763. Number of Contained Elements 0
  2764. Contained Element Size 3
  2765. [OEM Strings (Type 11) - Length 5 - Handle 0008h]
  2766. Number of Strings 1
  2767. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 000bh]
  2768. [Physical Memory Array (Type 16) - Length 23 - Handle 000ch]
  2769. Location 03h - SystemBoard/Motherboard
  2770. Use 03h - System Memory
  2771. Memory Error Correction 03h - None
  2772. Maximum Capacity 134217728KB
  2773. Memory Error Inf Handle 000bh
  2774. Number of Memory Devices 4
  2775. [Memory Array Mapped Address (Type 19) - Length 31 - Handle 000dh]
  2776. Starting Address 00000000h
  2777. Ending Address 00ffffffh
  2778. Memory Array Handle 000ch
  2779. Partition Width 02
  2780. [Cache Information (Type 7) - Length 27 - Handle 000eh]
  2781. Socket Designation L1 - Cache
  2782. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  2783. Maximum Cache Size 0240h - 576K
  2784. Installed Size 0240h - 576K
  2785. Supported SRAM Type 0010h - Pipeline-Burst
  2786. Current SRAM Type 0010h - Pipeline-Burst
  2787. Cache Speed 1ns
  2788. Error Correction Type Specification Reserved
  2789. System Cache Type Unified
  2790. Associativity 8-way Set-Associative
  2791. [Cache Information (Type 7) - Length 27 - Handle 000fh]
  2792. Socket Designation L2 - Cache
  2793. Cache Configuration 0181h - WB Enabled Int NonSocketed L2
  2794. Maximum Cache Size 0c00h - 3072K
  2795. Installed Size 0c00h - 3072K
  2796. Supported SRAM Type 0010h - Pipeline-Burst
  2797. Current SRAM Type 0010h - Pipeline-Burst
  2798. Cache Speed 1ns
  2799. Error Correction Type Specification Reserved
  2800. System Cache Type Unified
  2801. Associativity 8-way Set-Associative
  2802. [Cache Information (Type 7) - Length 27 - Handle 0010h]
  2803. Socket Designation L3 - Cache
  2804. Cache Configuration 0182h - WB Enabled Int NonSocketed L3
  2805. Maximum Cache Size 4000h - 16384K
  2806. Installed Size 4000h - 16384K
  2807. Supported SRAM Type 0010h - Pipeline-Burst
  2808. Current SRAM Type 0010h - Pipeline-Burst
  2809. Cache Speed 1ns
  2810. Error Correction Type Specification Reserved
  2811. System Cache Type Unified
  2812. Associativity 16-way Set-Associative
  2813. [Processor Information (Type 4) - Length 48 - Handle 0011h]
  2814. Socket Designation AM4
  2815. Processor Type Central Processor
  2816. Processor Family 6bh - Specification Reserved
  2817. Processor Manufacturer Advanced Micro Devices, Inc.
  2818. Processor ID 820f8000fffb8b17
  2819. Processor Version AMD Ryzen 5 2600 Six-Core Processor
  2820. Processor Voltage 8bh - 1.1V
  2821. External Clock 100MHz
  2822. Max Speed 3900MHz
  2823. Current Speed 3400MHz
  2824. Status Enabled Populated
  2825. Processor Upgrade Specification Reserved
  2826. L1 Cache Handle 000eh
  2827. L2 Cache Handle 000fh
  2828. L3 Cache Handle 0010h
  2829. Part Number Unknown
  2830. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0012h]
  2831. [Memory Device (Type 17) - Length 84 - Handle 0013h]
  2832. Physical Memory Array Handle 000ch
  2833. Memory Error Info Handle 0012h
  2834. Form Factor 02h - Unknown
  2835. Device Locator DIMM 0
  2836. Bank Locator P0 CHANNEL A
  2837. Memory Type 02h - Unknown
  2838. Type Detail 0004h - Unknown
  2839. Speed 0MHz
  2840. Manufacturer Unknown
  2841. Part Number Unknown
  2842. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0014h]
  2843. [Memory Device (Type 17) - Length 84 - Handle 0015h]
  2844. Physical Memory Array Handle 000ch
  2845. Memory Error Info Handle 0014h
  2846. Total Width 64 bits
  2847. Data Width 64 bits
  2848. Size 8192MB
  2849. Form Factor 09h - DIMM
  2850. Device Locator DIMM 1
  2851. Bank Locator P0 CHANNEL A
  2852. Memory Type 1ah - Specification Reserved
  2853. Type Detail 4080h - Synchronous
  2854. Speed 2133MHz
  2855. Manufacturer Unknown
  2856. Part Number F4-3000C16-8GVRB
  2857. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 0016h]
  2858. Starting Address 00000000h
  2859. Ending Address 00ffffffh
  2860. Memory Device Handle 0015h
  2861. Mem Array Mapped Adr Handle 000dh
  2862. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0017h]
  2863. [Memory Device (Type 17) - Length 84 - Handle 0018h]
  2864. Physical Memory Array Handle 000ch
  2865. Memory Error Info Handle 0017h
  2866. Form Factor 02h - Unknown
  2867. Device Locator DIMM 0
  2868. Bank Locator P0 CHANNEL B
  2869. Memory Type 02h - Unknown
  2870. Type Detail 0004h - Unknown
  2871. Speed 0MHz
  2872. Manufacturer Unknown
  2873. Part Number Unknown
  2874. [32Bit Memory Error Information (Type 18) - Length 23 - Handle 0019h]
  2875. [Memory Device (Type 17) - Length 84 - Handle 001ah]
  2876. Physical Memory Array Handle 000ch
  2877. Memory Error Info Handle 0019h
  2878. Total Width 64 bits
  2879. Data Width 64 bits
  2880. Size 8192MB
  2881. Form Factor 09h - DIMM
  2882. Device Locator DIMM 1
  2883. Bank Locator P0 CHANNEL B
  2884. Memory Type 1ah - Specification Reserved
  2885. Type Detail 4080h - Synchronous
  2886. Speed 2133MHz
  2887. Manufacturer Unknown
  2888. Part Number F4-3000C16-8GVRB
  2889. [Memory Device Mapped Address (Type 20) - Length 35 - Handle 001bh]
  2890. Starting Address 00000000h
  2891. Ending Address 00ffffffh
  2892. Memory Device Handle 001ah
  2893. Mem Array Mapped Adr Handle 000dh
  2894.  
  2895. ========================== Dump #4: Extra #1 ===========================
  2896.  
  2897. 0: kd> !verifier
  2898. Verify Flags Level 0x00000000
  2899. STANDARD FLAGS:
  2900. [X] (0x00000000) Automatic Checks
  2901. [ ] (0x00000001) Special pool
  2902. [ ] (0x00000002) Force IRQL checking
  2903. [ ] (0x00000008) Pool tracking
  2904. [ ] (0x00000010) I/O verification
  2905. [ ] (0x00000020) Deadlock detection
  2906. [ ] (0x00000080) DMA checking
  2907. [ ] (0x00000100) Security checks
  2908. [ ] (0x00000800) Miscellaneous checks
  2909. [ ] (0x00020000) DDI compliance checking
  2910. ADDITIONAL FLAGS:
  2911. [ ] (0x00000004) Randomized low resources simulation
  2912. [ ] (0x00000200) Force pending I/O requests
  2913. [ ] (0x00000400) IRP logging
  2914. [ ] (0x00002000) Invariant MDL checking for stack
  2915. [ ] (0x00004000) Invariant MDL checking for driver
  2916. [ ] (0x00008000) Power framework delay fuzzing
  2917. [ ] (0x00010000) Port/miniport interface checking
  2918. [ ] (0x00040000) Systematic low resources simulation
  2919. [ ] (0x00080000) DDI compliance checking (additional)
  2920. [ ] (0x00200000) NDIS/WIFI verification
  2921. [ ] (0x00800000) Kernel synchronization delay fuzzing
  2922. [ ] (0x01000000) VM switch verification
  2923. [ ] (0x02000000) Code integrity checks
  2924. [X] Indicates flag is enabled
  2925. Summary of All Verifier Statistics
  2926. RaiseIrqls 0x0
  2927. AcquireSpinLocks 0x0
  2928. Synch Executions 0x0
  2929. Trims 0x0
  2930. Pool Allocations Attempted 0x0
  2931. Pool Allocations Succeeded 0x0
  2932. Pool Allocations Succeeded SpecialPool 0x0
  2933. Pool Allocations With NO TAG 0x0
  2934. Pool Allocations Failed 0x0
  2935. Current paged pool allocations 0x0 for 00000000 bytes
  2936. Peak paged pool allocations 0x0 for 00000000 bytes
  2937. Current nonpaged pool allocations 0x0 for 00000000 bytes
  2938. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  2939.  
  2940. ========================== Dump #4: Extra #2 ===========================
  2941.  
  2942. 0: kd> !thread
  2943. THREAD fffff80218326600 Cid 0000.0000 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 0
  2944. Not impersonating
  2945. GetUlongFromAddress: unable to read from fffff8021821143c
  2946. Owning Process fffff80218323a00 Image: System Process
  2947. Attached Process ffffd68dd807f040 Image: System
  2948. fffff78000000000: Unable to get shared data
  2949. Wait Start TickCount 107265
  2950. Context Switch Count 4382798 IdealProcessor: 0
  2951. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  2952. UserTime 00:00:00.000
  2953. KernelTime 00:00:00.000
  2954. Win32 Start Address nt!KiIdleLoop (0xfffff802179e1630)
  2955. Stack Init fffff8021ac6bc90 Current fffff8021ac6bc20
  2956. Base fffff8021ac6c000 Limit fffff8021ac66000 Call 0000000000000000
  2957. Priority 0 BasePriority 0 PriorityDecrement 0 IoPriority 0 PagePriority 5
  2958. Child-SP RetAddr : Args to Child : Call Site
  2959. fffff802`1ac792b8 fffff802`179efa29 : 00000000`0000000a 00000000`00000000 00000000`0000000e 00000000`00000000 : nt!KeBugCheckEx
  2960. fffff802`1ac792c0 fffff802`179ebd29 : fffff802`1ac79800 ffffd68d`dd122000 fffff802`1ea1fa64 ffffd68d`dd122000 : nt!KiBugCheckDispatch+0x69
  2961. fffff802`1ac79400 fffff802`1e240104 : fffff802`1e239e9f fffff802`1e23278b fffff802`1ac795d0 fffff802`1783aad9 : nt!KiPageFault+0x469 (TrapFrame @ fffff802`1ac79400)
  2962. fffff802`1ac79590 fffff802`1e239e9f : fffff802`1e23278b fffff802`1ac795d0 fffff802`1783aad9 00000000`00000000 : nvlddmkm+0x20104
  2963. fffff802`1ac79598 fffff802`1e23278b : fffff802`1ac795d0 fffff802`1783aad9 00000000`00000000 00000000`00000000 : nvlddmkm+0x19e9f
  2964. fffff802`1ac795a0 fffff802`1ac795d0 : fffff802`1783aad9 00000000`00000000 00000000`00000000 ffffd68d`df2c4000 : nvlddmkm+0x1278b
  2965. fffff802`1ac795a8 fffff802`1783aad9 : 00000000`00000000 00000000`00000000 ffffd68d`df2c4000 fffff802`1e231798 : 0xfffff802`1ac795d0
  2966. fffff802`1ac795b0 00000000`00000000 : 00000000`00000000 fffff802`1e9f827d ffffd68d`dd0eb000 fffff802`1ac79770 : nt!EtwpLogKernelEvent+0x249
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!