Guest User

Untitled

a guest
Aug 3rd, 2020
112
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 26.76 KB | None | 0 0
  1. ========================== AUTO DUMP ANALYZER ==========================
  2. Auto Dump Analyzer
  3. Version: 0.91
  4. Time to analyze file(s): 00 hours and 00 minutes and 54 seconds
  5.  
  6. ================================= CPU ==================================
  7. COUNT: c
  8. MHZ: 3600
  9. VENDOR: AuthenticAMD
  10. FAMILY: 17
  11. MODEL: 1
  12. STEPPING: 1
  13.  
  14. ================================== OS ==================================
  15. Product: WinNt, suite: TerminalServer SingleUserTS Personal
  16. Built by: 19041.1.amd64fre.vb_release.191206-1406
  17. BUILD_VERSION: 10.0.19041.388 (WinBuild.160101.0800)
  18. BUILD: 19041
  19. SERVICEPACK: 388
  20. PLATFORM_TYPE: x64
  21. NAME: Windows 10
  22. EDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  23. BUILD_TIMESTAMP: unknown_date
  24. BUILDDATESTAMP: 160101.0800
  25. BUILDLAB: WinBuild
  26. BUILDOSVER: 10.0.19041.388
  27.  
  28. =============================== DEBUGGER ===============================
  29. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  30. Copyright (c) Microsoft Corporation. All rights reserved.
  31.  
  32. =============================== COMMENTS ===============================
  33. * Information gathered from different dump files may be different. If
  34. Windows updates between two dump files, two or more OS versions may
  35. be shown above.
  36. * Additional BIOS information was not included in the dump file(s). This
  37. can be caused by an outdated BIOS.
  38.  
  39. ========================================================================
  40. ======================= Dump #1: ANALYZE VERBOSE =======================
  41. ======================= File: 080320-8000-01.dmp =======================
  42. ========================================================================
  43.  
  44. Mini Kernel Dump File: Only registers and stack trace are available
  45. Windows 10 Kernel Version 19041 MP (12 procs) Free x64
  46. Kernel base = 0xfffff807`3ca00000 PsLoadedModuleList = 0xfffff807`3d62a310
  47. Debug session time: Sun Aug 2 12:51:57.385 2020 (UTC - 4:00)
  48. System Uptime: 0 days 6:10:52.037
  49.  
  50. BugCheck A, {38, 2, 0, fffff8073cc1a65c}
  51. Probably caused by : memory_corruption
  52. Followup: memory_corruption
  53.  
  54. IRQL_NOT_LESS_OR_EQUAL (a)
  55. An attempt was made to access a pageable (or completely invalid) address at an
  56. interrupt request level (IRQL) that is too high. This is usually
  57. caused by drivers using improper addresses.
  58. If a kernel debugger is available get the stack backtrace.
  59.  
  60. Arguments:
  61. Arg1: 0000000000000038, memory referenced
  62. Arg2: 0000000000000002, IRQL
  63. Arg3: 0000000000000000, bitfield :
  64. bit 0 : value 0 = read operation, 1 = write operation
  65. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  66. Arg4: fffff8073cc1a65c, address which referenced memory
  67.  
  68. Debugging Details:
  69. DUMP_CLASS: 1
  70. DUMP_QUALIFIER: 400
  71. DUMP_TYPE: 2
  72. READ_ADDRESS: fffff8073d6fa388: Unable to get MiVisibleState
  73. 0000000000000038
  74. CURRENT_IRQL: 2
  75. FAULTING_IP:
  76. nt!MiHandleTransitionFault+11c
  77. fffff807`3cc1a65c 418b4238 mov eax,dword ptr [r10+38h]
  78. CUSTOMER_CRASH_COUNT: 1
  79. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  80. BUGCHECK_STR: AV
  81.  
  82. PROCESS_NAME: svchost.exe
  83.  
  84. TRAP_FRAME: fffffa06a94bc450 -- (.trap 0xfffffa06a94bc450)
  85. NOTE: The trap frame does not contain all registers.
  86. Some register values may be zeroed or incorrect.
  87. rax=0000000000000000 rbx=0000000000000000 rcx=d00b134465500420
  88. rdx=00000000688caa00 rsi=0000000000000000 rdi=0000000000000000
  89. rip=fffff8073cc1a65c rsp=fffffa06a94bc5e0 rbp=0000000000000000
  90. r8=0000000000000000 r9=ffff9d8001f3c440 r10=0000000000000000
  91. r11=ffffd00b13446550 r12=0000000000000000 r13=0000000000000000
  92. r14=0000000000000000 r15=0000000000000000
  93. iopl=0 nv up ei ng nz ac po nc
  94. nt!MiHandleTransitionFault+0x11c:
  95. fffff807`3cc1a65c 418b4238 mov eax,dword ptr [r10+38h] ds:00000000`00000038=????????
  96. Resetting default scope
  97. LAST_CONTROL_TRANSFER: from fffff8073cdefa29 to fffff8073cdddb60
  98. STACK_TEXT:
  99. fffffa06`a94bc308 fffff807`3cdefa29 : 00000000`0000000a 00000000`00000038 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  100. fffffa06`a94bc310 fffff807`3cdebd29 : 00000000`00000000 00000000`00000001 ffffd00b`196d6980 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  101. fffffa06`a94bc450 fffff807`3cc1a65c : 0000024d`fec2f000 fffffa06`a94bc790 fffff807`3d650b40 ffff9d80`0a76c6a0 : nt!KiPageFault+0x469
  102. fffffa06`a94bc5e0 fffff807`3cc19c01 : fffffa06`a94bc880 fffffa06`a94bc920 00000000`00000000 fffff807`3ccb5400 : nt!MiHandleTransitionFault+0x11c
  103. fffffa06`a94bc660 fffff807`3cc11566 : fffffa06`a94bc880 fffff807`3cc15138 00000000`00000000 00000000`00000000 : nt!MiResolveTransitionFault+0x131
  104. fffffa06`a94bc720 fffff807`3cc146b5 : fffffa06`a94bc880 00000000`00000000 fffffa06`a94bc860 fffffa06`a94bca20 : nt!MiResolveProtoPteFault+0x1216
  105. fffffa06`a94bc820 fffff807`3cc12a89 : 00000000`00000100 00000000`00000003 00000000`c0000016 ffffd00b`196d6300 : nt!MiDispatchFault+0x3d5
  106. fffffa06`a94bc960 fffff807`3cdebc1e : 0000024d`fec22bb0 ffffd00b`00000000 ffffd00b`11d8eb80 ffffd00b`00000000 : nt!MmAccessFault+0x189
  107. fffffa06`a94bcb00 00007ffb`3c4f1c8e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e
  108. 0000004f`0a47f878 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`3c4f1c8e
  109. STACK_COMMAND: kb
  110. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  111. fffff8073cc156f9-fffff8073cc156fa 2 bytes - nt!MiResolvePrivateZeroFault+1f9
  112. [ d0 be:90 3e ]
  113. fffff8073cc156fc-fffff8073cc156fd 2 bytes - nt!MiResolvePrivateZeroFault+1fc (+0x03)
  114. [ fb f6:fa f4 ]
  115. fffff8073cc15771-fffff8073cc15772 2 bytes - nt!MiResolvePrivateZeroFault+271 (+0x75)
  116. [ d7 be:97 3e ]
  117. fffff8073cc15774-fffff8073cc15775 2 bytes - nt!MiResolvePrivateZeroFault+274 (+0x03)
  118. [ fb f6:fa f4 ]
  119. fffff8073cc19c48-fffff8073cc19c49 2 bytes - nt!MiResolveTransitionFault+178 (+0x44d4)
  120. [ d0 be:90 3e ]
  121. fffff8073cc19c4b-fffff8073cc19c4c 2 bytes - nt!MiResolveTransitionFault+17b (+0x03)
  122. [ fb f6:fa f4 ]
  123. fffff8073cc19c8d - nt!MiResolveTransitionFault+1bd (+0x42)
  124. [ f6:f4 ]
  125. fffff8073cc1a0b2 - nt!MiResolveTransitionFault+5e2 (+0x425)
  126. [ fa:9d ]
  127. fffff8073cc1a0d5 - nt!MiResolveTransitionFault+605 (+0x23)
  128. [ fa:9d ]
  129. fffff8073cc1a125-fffff8073cc1a126 2 bytes - nt!MiResolveTransitionFault+655 (+0x50)
  130. [ d0 be:90 3e ]
  131. fffff8073cc1a128-fffff8073cc1a129 2 bytes - nt!MiResolveTransitionFault+658 (+0x03)
  132. [ fb f6:fa f4 ]
  133. fffff8073cc1a132-fffff8073cc1a133 2 bytes - nt!MiResolveTransitionFault+662 (+0x0a)
  134. [ d7 be:97 3e ]
  135. fffff8073cc1a135-fffff8073cc1a136 2 bytes - nt!MiResolveTransitionFault+665 (+0x03)
  136. [ fb f6:fa f4 ]
  137. fffff8073cc1a1cf-fffff8073cc1a1d0 2 bytes - nt!MiResolveTransitionFault+6ff (+0x9a)
  138. [ d7 be:97 3e ]
  139. fffff8073cc1a1d2-fffff8073cc1a1d3 2 bytes - nt!MiResolveTransitionFault+702 (+0x03)
  140. [ fb f6:fa f4 ]
  141. fffff8073cc1a29e-fffff8073cc1a29f 2 bytes - nt!MiResolveTransitionFault+7ce (+0xcc)
  142. [ fb f6:fa f4 ]
  143. fffff8073cc1a2ad-fffff8073cc1a2af 3 bytes - nt!MiResolveTransitionFault+7dd (+0x0f)
  144. [ 68 df be:48 9f 3e ]
  145. fffff8073cc1a2b1-fffff8073cc1a2b2 2 bytes - nt!MiResolveTransitionFault+7e1 (+0x04)
  146. [ fb f6:fa f4 ]
  147. fffff8073cc1aa24 - nt!MiUnlinkPageFromList+94 (+0x773)
  148. [ fa:9d ]
  149. fffff8073cc1aba2 - nt!MiUnlinkPageFromList+212 (+0x17e)
  150. [ fa:9d ]
  151. fffff8073cc1ac2f - nt!MiUnlinkPageFromList+29f (+0x8d)
  152. [ fa:9d ]
  153. fffff8073cc1ac75 - nt!MiUnlinkPageFromList+2e5 (+0x46)
  154. [ fa:9d ]
  155. fffff8073cc1adf9 - nt!MiUnlinkPageFromList+469 (+0x184)
  156. [ fa:9d ]
  157. fffff8073cd84f3e - nt!MiFreeUltraMapping+32 (+0x16a145)
  158. [ a0:20 ]
  159. fffff8073cd84f40-fffff8073cd84f41 2 bytes - nt!MiFreeUltraMapping+34 (+0x02)
  160. [ fb f6:fa f4 ]
  161. 42 errors : !nt (fffff8073cc156f9-fffff8073cd84f41)
  162. MODULE_NAME: memory_corruption
  163.  
  164. IMAGE_NAME: memory_corruption
  165.  
  166. FOLLOWUP_NAME: memory_corruption
  167. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  168. MEMORY_CORRUPTOR: LARGE
  169. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  170. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  171. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  172. TARGET_TIME: 2020-08-02T16:51:57.000Z
  173. SUITE_MASK: 784
  174. PRODUCT_TYPE: 1
  175. USER_LCID: 0
  176. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  177. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  178. Followup: memory_corruption
  179.  
  180. ====================== Dump #1: 3RD PARTY DRIVERS ======================
  181.  
  182. Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  183. Jun 05 2017 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
  184. Apr 22 2019 - OCULUSUD.sys - Oculus VR Headset driver
  185. Jun 21 2019 - nvhda64v.sys - Nvidia HDMI Audio Device http://www.nvidia.com/
  186. Jul 24 2019 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
  187. Oct 02 2019 - nvlddmkm.sys - Nvidia Graphics Card driver http://www.nvidia.com/
  188. Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  189. May 26 2020 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  190.  
  191. ================== Dump #1: 3RD PARTY DRIVERS (FULL) ===================
  192.  
  193. Image path: \SystemRoot\System32\drivers\amdgpio3.sys
  194. Image name: amdgpio3.sys
  195. Search : https://www.google.com/search?q=amdgpio3.sys
  196. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  197. Timestamp : Mon Mar 14 2016
  198.  
  199. Image path: \SystemRoot\System32\drivers\amdpsp.sys
  200. Image name: amdpsp.sys
  201. Search : https://www.google.com/search?q=amdpsp.sys
  202. ADA Info : Advanced Micro Devices, Inc http://support.amd.com/
  203. Timestamp : Mon Jun 5 2017
  204.  
  205. Image path: \SystemRoot\System32\drivers\OCULUSUD.sys
  206. Image name: OCULUSUD.sys
  207. Search : https://www.google.com/search?q=OCULUSUD.sys
  208. ADA Info : Oculus VR Headset driver
  209. Timestamp : Mon Apr 22 2019
  210.  
  211. Image path: \SystemRoot\system32\drivers\nvhda64v.sys
  212. Image name: nvhda64v.sys
  213. Search : https://www.google.com/search?q=nvhda64v.sys
  214. ADA Info : Nvidia HDMI Audio Device http://www.nvidia.com/
  215. Timestamp : Fri Jun 21 2019
  216.  
  217. Image path: \SystemRoot\System32\drivers\AMDPCIDev.sys
  218. Image name: AMDPCIDev.sys
  219. Search : https://www.google.com/search?q=AMDPCIDev.sys
  220. ADA Info : Advanced Micro Devices PCI Device driver
  221. Timestamp : Wed Jul 24 2019
  222.  
  223. Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\nvlddmkm.sys
  224. Image name: nvlddmkm.sys
  225. Search : https://www.google.com/search?q=nvlddmkm.sys
  226. ADA Info : Nvidia Graphics Card driver http://www.nvidia.com/
  227. Timestamp : Wed Oct 2 2019
  228.  
  229. Image path: \SystemRoot\System32\drivers\amdgpio2.sys
  230. Image name: amdgpio2.sys
  231. Search : https://www.google.com/search?q=amdgpio2.sys
  232. ADA Info : AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
  233. Timestamp : Tue Jan 14 2020
  234.  
  235. Image path: \SystemRoot\System32\drivers\rt640x64.sys
  236. Image name: rt640x64.sys
  237. Search : https://www.google.com/search?q=rt640x64.sys
  238. ADA Info : Realtek NICDRV 8169 PCIe GBE Family Controller driver https://www.realtek.com/en/
  239. Timestamp : Tue May 26 2020
  240.  
  241. ====================== Dump #1: MICROSOFT DRIVERS ======================
  242.  
  243. ACPI.sys ACPI Driver for NT (Microsoft)
  244. acpiex.sys ACPIEx Driver (Microsoft)
  245. afd.sys Ancillary Function Driver for WinSock (Microsoft)
  246. afunix.sys AF_UNIX Socket Provider driver (Microsoft)
  247. AgileVpn.sys RAS Agil VPN Miniport Call Manager driver (Microsoft)
  248. ahcache.sys Application Compatibility Cache (Microsoft)
  249. amdppm.sys Processor Device Driver
  250. bam.sys BAM Kernal driver (Microsoft)
  251. BasicDisplay.sys Basic Display driver (Microsoft)
  252. BasicRender.sys Basic Render driver (Microsoft)
  253. Beep.SYS BEEP driver (Microsoft)
  254. bindflt.sys Windows Bind Filter driver (Microsoft)
  255. BOOTVID.dll VGA Boot Driver (Microsoft)
  256. bowser.sys NT Lan Manager Datagram Receiver Driver (Microsoft)
  257. cdd.dll Canonical Display Driver (Microsoft)
  258. cdrom.sys SCSI CD-ROM Driver (Microsoft)
  259. CEA.sys Event Aggregation Kernal Mode Library (Microsoft)
  260. CI.dll Code Integrity Module (Microsoft)
  261. CimFS.SYS Consumer IR Class Driver for eHome (Microsoft)
  262. CLASSPNP.SYS SCSI Class System Dll (Microsoft)
  263. cldflt.sys Cloud Files Mini Filter driver (Microsoft)
  264. CLFS.SYS Common Log File System Driver (Microsoft)
  265. clipsp.sys CLIP Service (Microsoft)
  266. cmimcext.sys Kernal Configuration Manager Initial Con. Driver (Microsoft)
  267. cng.sys Kernal Cryptography, Next Generation Driver (Microsoft)
  268. CompositeBus.sys Multi-Transport Composite Bus Enumerator (Microsoft)
  269. condrv.sys Console Driver (Microsoft)
  270. crashdmp.sys Crash Dump driver (Microsoft)
  271. dfsc.sys DFS Namespace Client Driver (Microsoft)
  272. disk.sys PnP Disk Driver (Microsoft)
  273. drmk.sys Digital Rights Management (DRM) driver (Microsoft)
  274. dump_diskdump.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  275. dump_dumpfve.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  276. dump_storahci.sys (Generic Description) dump_*.sys drivers usually provide disk access during a crash to write dump files.
  277. dxgkrnl.sys DirectX Graphics Kernal (Microsoft)
  278. dxgmms2.sys DirectX Graphics MMS
  279. EhStorClass.sys Enhanced Storage Class driver for IEEE... (Microsoft)
  280. fastfat.SYS Fast FAT File System Driver (Microsoft)
  281. filecrypt.sys Windows sandboxing and encryption filter (Microsoft)
  282. fileinfo.sys FileInfo Filter Driver (Microsoft)
  283. FLTMGR.SYS Filesystem Filter Manager (Microsoft)
  284. Fs_Rec.sys File System Recognizer Driver (Microsoft)
  285. fvevol.sys BitLocker Driver Encryption Driver (Microsoft)
  286. fwpkclnt.sys FWP/IPsec Kernal-Mode API (Microsoft)
  287. gpuenergydrv.sys GPU Energy Kernal Driver (Microsoft)
  288. hal.dll Hardware Abstraction Layer DLL (Microsoft)
  289. HDAudBus.sys High Definition Audio Bus Driver (Microsoft)
  290. HdAudio.sys High Definition Audio Function driver (Microsoft)
  291. HIDCLASS.SYS Hid Class Library (Microsoft)
  292. HIDPARSE.SYS Hid Parsing Library (Microsoft)
  293. hidusb.sys USB Miniport Driver for Input Devices (Microsoft)
  294. HTTP.sys HTTP Protocol Stack (Microsoft)
  295. intelpep.sys Intel Power Engine Plugin (Microsoft)
  296. IntelTA.sys Intel Telemetry Driver
  297. iorate.sys I/O rate control Filter (Microsoft)
  298. kbdclass.sys Keyboard Class Driver (Microsoft)
  299. kbdhid.sys HID Mouse Filter Driver or HID Keyboard Filter Driver (Microsoft)
  300. kd.dll Local Kernal Debugger (Microsoft)
  301. kdnic.sys Microsoft Kernel Debugger Network Miniport (Microsoft)
  302. ks.sys Kernal CSA Library (Microsoft)
  303. ksecdd.sys Kernel Security Support Provider Interface (Microsoft)
  304. ksecpkg.sys Kernel Security Support Provider Interface Packages (Microsoft)
  305. ksthunk.sys Kernal Streaming WOW Thunk Service (Microsoft)
  306. lltdio.sys Link-Layer Topology Mapper I/O Driver (Microsoft)
  307. luafv.sys LUA File Virtualization Filter Driver (Microsoft)
  308. mcupdate_AuthenticAMD.dll AMD Microcode Update Library (Microsoft)
  309. mmcss.sys MMCSS Driver (Microsoft)
  310. monitor.sys Monitor Driver (Microsoft)
  311. mouclass.sys Mouse Class Driver (Microsoft)
  312. mouhid.sys HID Mouse Filter Driver (Microsoft)
  313. mountmgr.sys Mount Point Manager (Microsoft)
  314. mpsdrv.sys Microsoft Protection Service Driver (Microsoft)
  315. mrxsmb.sys SMB MiniRedirector Wrapper and Engine (Microsoft)
  316. mrxsmb10.sys Longhorn SMB Downlevel SubRdr (Microsoft)
  317. mrxsmb20.sys Longhorn SMB 2.0 Redirector (Microsoft)
  318. Msfs.SYS Mailslot driver (Microsoft)
  319. msgpioclx.sys GPIO Class Extension Driver (Microsoft)
  320. msisadrv.sys ISA Driver (Microsoft)
  321. mslldp.sys Microsoft Link-Layer Discovery Protocol... (Microsoft)
  322. msquic.sys Windows QUIC Driver
  323. msrpc.sys Kernel Remote Procedure Call Provider (Microsoft)
  324. mssmbios.sys System Management BIOS driver (Microsoft)
  325. mup.sys Multiple UNC Provider driver (Microsoft)
  326. ndis.sys Network Driver Interface Specification (NDIS) driver (Microsoft)
  327. ndiscap.sys Microsoft NDIS Packet Capture Filter Driver
  328. ndistapi.sys NDIS 3.0 Connection Wrapper driver (Microsoft)
  329. NdisVirtualBus.sys Virtual Network Adapter Enumerator (Microsoft)
  330. ndiswan.sys MS PPP Framing Driver (Strong Encryption) Microsoft)
  331. NDProxy.sys NDIS Proxy driver (Microsoft)
  332. Ndu.sys Network Data Usage Monitoring driver (Microsoft)
  333. netbios.sys NetBIOS Interface driver (Microsoft)
  334. netbt.sys MBT Transport driver (Microsoft)
  335. NETIO.SYS Network I/O Subsystem (Microsoft)
  336. Npfs.SYS NPFS driver (Microsoft)
  337. npsvctrig.sys Named pipe service triggers (Microsoft)
  338. nsiproxy.sys NSI Proxy driver (Microsoft)
  339. Ntfs.sys NT File System Driver (Microsoft)
  340. ntkrnlmp.exe Windows NT operating system kernel (Microsoft)
  341. ntosext.sys NTOS Extension Host driver (Microsoft)
  342. Null.SYS NULL Driver (Microsoft)
  343. pacer.sys QoS Packet Scheduler (Microsoft)
  344. parport.sys Parallel Port Driver (Microsoft)
  345. partmgr.sys Partition driver (Microsoft)
  346. pci.sys NT Plug and Play PCI Enumerator (Microsoft)
  347. pcw.sys Performance Counter Driver (Microsoft)
  348. pdc.sys Power Dependency Coordinator Driver (Microsoft)
  349. peauth.sys Protected Environment Authentication and Authorization Export Driver (Microsoft)
  350. portcls.sys Class Driver for Port/Miniport Devices system driver (Microsoft)
  351. PSHED.dll Platform Specific Hardware Error driver (Microsoft)
  352. qwavedrv.sys Quality Windows Audio Video Experience (qWave) Support driver (Microsoft)
  353. rasl2tp.sys RAS L2TP Mini-port/Call-manager driver (Microsoft)
  354. raspppoe.sys RAS PPPoE Mini-port/Call manager driver (Microsoft)
  355. raspptp.sys Peer-to-Peer Tunneling Protocol (Microsoft)
  356. rassstp.sys RAS SSTP Miniport Call Manager driver (Microsoft)
  357. rdbss.sys Redirected Drive Buffering SubSystem driver (Microsoft)
  358. rdpbus.sys Microsoft RDP Bus Device driver (Microsoft)
  359. rdyboost.sys ReadyBoost Driver (Microsoft)
  360. rspndr.sys Link-Layer Topology Responder driver (Microsoft)
  361. serenum.sys Serial Port Enumerator (Microsoft)
  362. serial.sys Serial Device Driver
  363. SgrmAgent.sys System Guard Runtime Monitor Agent driver (Microsoft)
  364. SleepStudyHelper.sys Sleep Study Helper driver (Microsoft)
  365. spaceport.sys Storage Spaces driver (Microsoft)
  366. srv2.sys Smb 2.0 Server driver (Microsoft)
  367. srvnet.sys Server Network driver (Microsoft)
  368. storahci.sys MS AHCI Storport Miniport Driver (Microsoft)
  369. storport.sys Storage port driver for use with high-performance buses such as fibre channel buses and RAID adapters. (Microsoft)
  370. storqosflt.sys Storage QoS Filter driver (Microsoft)
  371. swenum.sys Plug and Play Software Device Enumerator (Microsoft)
  372. tbs.sys Export driver for kernel mode TPM API (Microsoft)
  373. tcpip.sys TCP/IP Protocol driver (Microsoft)
  374. tcpipreg.sys Microsoft Windows TCP/IP Registry Compatibility driver (Microsoft)
  375. TDI.SYS TDI Wrapper driver (Microsoft)
  376. tdx.sys NetIO Legacy TDI x-bit Support Driver (Microsoft)
  377. tm.sys Kernel Transaction Manager driver (Microsoft)
  378. ucx01000.sys USB Controller Extension (Microsoft)
  379. UEFI.sys UEFI NT driver (Microsoft)
  380. umbus.sys User-Mode Bus Enumerator (Microsoft)
  381. usbaudio.sys USB Audio Class Driver (Microsoft)
  382. usbccgp.sys USB Common Class Generic Parent Driver (Microsoft)
  383. USBD.SYS Universal Serial Bus Driver (Microsoft)
  384. UsbHub3.sys USB3 HUB driver (Microsoft)
  385. usbser.sys USB Serial driver (Microsoft)
  386. USBXHCI.SYS USB XHCI driver (Microsoft)
  387. vdrvroot.sys Virtual Drive Root Enumerator (Microsoft)
  388. Vid.sys Microsoft Hyper-V Virtualization Infrastructure Driver
  389. volmgr.sys Volume Manager Driver (Microsoft)
  390. volmgrx.sys Volume Manager Extension Driver (Microsoft)
  391. volsnap.sys Volume Shadow Copy driver (Microsoft)
  392. volume.sys Volume driver (Microsoft)
  393. vwififlt.sys Virtual WiFi Filter Driver (Microsoft)
  394. wanarp.sys MS Remote Access and Routing ARP driver (Microsoft)
  395. watchdog.sys Watchdog driver (Microsoft)
  396. wcifs.sys Windows Container Isolation FS Filter driver (Microsoft)
  397. Wdf01000.sys Kernel Mode Driver Framework Runtime (Microsoft)
  398. WdFilter.sys Microsoft Anti-malware file system filter driver (Microsoft)
  399. WDFLDR.SYS Kernel Mode Driver Framework Loader (Microsoft)
  400. WdNisDrv.sys Microsoft Network Realtime Inspection driver (Microsoft)
  401. werkernel.sys Windows Error Reporting Kernel driver (Microsoft)
  402. wfplwfs.sys WPF NDIS Lightweight Filter driver (Microsoft)
  403. win32k.sys Full/Desktop Multi-User Win32 driver (Microsoft)
  404. win32kbase.sys Base Win32k Kernel Driver (Microsoft)
  405. win32kfull.sys Full/Desktop Win32k Kernel Driver (Microsoft)
  406. WindowsTrustedRT.sys Windows Trusted Runtime Interface driver (Microsoft)
  407. WindowsTrustedRTProxy.sys Windows Trusted Runtime Service Proxy driver (Microsoft)
  408. winhvr.sys Windows Hypervisor Root Interface driver (Microsoft)
  409. wmiacpi.sys Windows Management Interface for ACPI (Microsoft)
  410. WMILIB.SYS WMILIB WMI support library DLL (Microsoft)
  411. Wof.sys Windows Overlay Filter (Microsoft)
  412. WppRecorder.sys WPP Trace Recorder (Microsoft)
  413.  
  414. ====================== Dump #1: UNLOADED MODULES =======================
  415.  
  416. fffff807`41ec0000 fffff807`41f1b000 WdFilter.sys
  417. fffff807`4ea30000 fffff807`4ea43000 WdNisDrv.sys
  418. fffff807`4a470000 fffff807`4a47f000 dump_storpor
  419. fffff807`4a4c0000 fffff807`4a4f3000 dump_storahc
  420. fffff807`4a520000 fffff807`4a53e000 dump_dumpfve
  421. fffff807`4a950000 fffff807`4a96c000 dam.sys
  422. fffff807`419a0000 fffff807`419b1000 WdBoot.sys
  423. fffff807`42a50000 fffff807`42a60000 hwpolicy.sys
  424.  
  425. ====================== Dump #1: BIOS INFORMATION =======================
  426.  
  427. sysinfo: could not find necessary interfaces.
  428. sysinfo: note that mssmbios.sys must be loaded (XPSP2+).
  429.  
  430. ========================== Dump #1: Extra #1 ===========================
  431.  
  432. 9: kd> !verifier
  433. Verify Flags Level 0x00000000
  434. STANDARD FLAGS:
  435. [X] (0x00000000) Automatic Checks
  436. [ ] (0x00000001) Special pool
  437. [ ] (0x00000002) Force IRQL checking
  438. [ ] (0x00000008) Pool tracking
  439. [ ] (0x00000010) I/O verification
  440. [ ] (0x00000020) Deadlock detection
  441. [ ] (0x00000080) DMA checking
  442. [ ] (0x00000100) Security checks
  443. [ ] (0x00000800) Miscellaneous checks
  444. [ ] (0x00020000) DDI compliance checking
  445. ADDITIONAL FLAGS:
  446. [ ] (0x00000004) Randomized low resources simulation
  447. [ ] (0x00000200) Force pending I/O requests
  448. [ ] (0x00000400) IRP logging
  449. [ ] (0x00002000) Invariant MDL checking for stack
  450. [ ] (0x00004000) Invariant MDL checking for driver
  451. [ ] (0x00008000) Power framework delay fuzzing
  452. [ ] (0x00010000) Port/miniport interface checking
  453. [ ] (0x00040000) Systematic low resources simulation
  454. [ ] (0x00080000) DDI compliance checking (additional)
  455. [ ] (0x00200000) NDIS/WIFI verification
  456. [ ] (0x00800000) Kernel synchronization delay fuzzing
  457. [ ] (0x01000000) VM switch verification
  458. [ ] (0x02000000) Code integrity checks
  459. [X] Indicates flag is enabled
  460. Summary of All Verifier Statistics
  461. RaiseIrqls 0x0
  462. AcquireSpinLocks 0x0
  463. Synch Executions 0x0
  464. Trims 0x0
  465. Pool Allocations Attempted 0x0
  466. Pool Allocations Succeeded 0x0
  467. Pool Allocations Succeeded SpecialPool 0x0
  468. Pool Allocations With NO TAG 0x0
  469. Pool Allocations Failed 0x0
  470. Current paged pool allocations 0x0 for 00000000 bytes
  471. Peak paged pool allocations 0x0 for 00000000 bytes
  472. Current nonpaged pool allocations 0x0 for 00000000 bytes
  473. Peak nonpaged pool allocations 0x0 for 00000000 bytes
  474.  
  475. ========================== Dump #1: Extra #2 ===========================
  476.  
  477. 9: kd> !thread
  478. THREAD ffffd00b10048080 Cid 09bc.3d00 Teb: 0000004f0a3f4000 Win32Thread: 0000000000000000 RUNNING on processor 9
  479. Not impersonating
  480. GetUlongFromAddress: unable to read from fffff8073d61143c
  481. Owning Process ffffd00b196d6300 Image: svchost.exe
  482. Attached Process N/A Image: N/A
  483. fffff78000000000: Unable to get shared data
  484. Wait Start TickCount 1424130
  485. Context Switch Count 6 IdealProcessor: 9
  486. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  487. UserTime 00:00:00.000
  488. KernelTime 00:00:00.000
  489. Win32 Start Address 0x00007ffb3c4620e0
  490. Stack Init fffffa06a94bcc90 Current fffffa06a94bc3c0
  491. Base fffffa06a94bd000 Limit fffffa06a94b7000 Call 0000000000000000
  492. Priority 8 BasePriority 8 PriorityDecrement 0 IoPriority 2 PagePriority 5
  493. Child-SP RetAddr : Args to Child : Call Site
  494. fffffa06`a94bc308 fffff807`3cdefa29 : 00000000`0000000a 00000000`00000038 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  495. fffffa06`a94bc310 fffff807`3cdebd29 : 00000000`00000000 00000000`00000001 ffffd00b`196d6980 00000000`00000000 : nt!KiBugCheckDispatch+0x69
  496. fffffa06`a94bc450 fffff807`3cc1a65c : 0000024d`fec2f000 fffffa06`a94bc790 fffff807`3d650b40 ffff9d80`0a76c6a0 : nt!KiPageFault+0x469 (TrapFrame @ fffffa06`a94bc450)
  497. fffffa06`a94bc5e0 fffff807`3cc19c01 : fffffa06`a94bc880 fffffa06`a94bc920 00000000`00000000 fffff807`3ccb5400 : nt!MiHandleTransitionFault+0x11c
  498. fffffa06`a94bc660 fffff807`3cc11566 : fffffa06`a94bc880 fffff807`3cc15138 00000000`00000000 00000000`00000000 : nt!MiResolveTransitionFault+0x131
  499. fffffa06`a94bc720 fffff807`3cc146b5 : fffffa06`a94bc880 00000000`00000000 fffffa06`a94bc860 fffffa06`a94bca20 : nt!MiResolveProtoPteFault+0x1216
  500. fffffa06`a94bc820 fffff807`3cc12a89 : 00000000`00000100 00000000`00000003 00000000`c0000016 ffffd00b`196d6300 : nt!MiDispatchFault+0x3d5
  501. fffffa06`a94bc960 fffff807`3cdebc1e : 0000024d`fec22bb0 ffffd00b`00000000 ffffd00b`11d8eb80 ffffd00b`00000000 : nt!MmAccessFault+0x189
  502. fffffa06`a94bcb00 00007ffb`3c4f1c8e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x35e (TrapFrame @ fffffa06`a94bcb00)
  503. 0000004f`0a47f878 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`3c4f1c8e
Add Comment
Please, Sign In to add comment