Jump to content
ExittheLemming

BSOD netio.sys driver failure

Recommended Posts

After a recent Windows update I had an initial issue with error 52 being returned on the drivers for two CD/DVDROMS failing the digital signature verification
So I had to delete USB lower and upper filter entries via reg edit and
disable driver signature enforcement (to enable both the CD/DVD ROM Drives)

I then ran into BSOD screens every 48 hours or so
Bluescreenview reports the last 4 BSOD's returned as 'DRIVER_IRQL_NOTLESS_OR_EQUAL'
driver failed was netio.sys
BSOD fixes attempted:
All Windows 10 64 bit updates installed
No driver conflicts reported by Device manager
Windows Memory Diagnostic Tool reports no errors
removed old pageing file and created a new one

Your staff member 'AdvancedSet Up' has now confirmed there are no signs of malware on my system and suggested I explore a solution via the dedicated BSOD forum

Hope you can assist

Many thanks

perfmon report.zip

SysnativeFileCollectionApp.zip

Share this post


Link to post
Share on other sites

Not at my computer now, but would suggest that you run Driver Verifier according to these instructions: http://www.carrona.org/verifier.html

 

let the system crash at least 3 times - so we can be sure to capture the verifier dump files

Share this post


Link to post
Share on other sites
Posted (edited)

Hi. . .

Where did you see the Microsoft networking driver netio.sys in the dump?  I see no reference to it in Windbg (except for loaded drivers, which is normal).

The process running at the time of the BSOD:

PROCESS_NAME:  MBAMService.ex

That is a Malwarebytes service.

The probable cause of the BSOD:

Probably caused by : memory_corruption

"memory corruption" could refer to anything.  If you dig deeper into the log from Windbg, a Malwarebytes driver is actually listed as the probable cause of the lone BSOD - as it is the only 3rd party driver listed on the stack. This is the driver that is specifically mentioned:

mwac.sys     Wed May 16 09:52:49 2018 (5AFC37B1)

https://www.sysnative.com/drivers/driver.php?id=mwac.sys

Are you running the most recent version of Malwarebytes?

Seeing as netio.sys was mentioned, which is a Microsoft Windows OS networking related driver, it is possible that Malwarebytes is an innocent bystander here and the real culprit MAY be your networking driver. I have seen many times before a situation that occurs where a security program like MBAM is mentioned in a BSOD kernel memory dump, but it was "phoning home" at the time; the wifi or Ethernet driver was outdated; because of being outdated, it did not "play nice" with Microsoft's networking drivers; a BSOD occurred and named the security app when in fact the 3rd party networking driver (wifi or Ethernet) was the actual cause of the BSOD. This scenario could be occurring here; not sure.

The Sysnative zip file files tell me that you're accessing the Internet via your Realtek PCIe GBE Family Controller (Ethernet). This is the driver that is installed for your Ethernet:

rt640x64.sys Thu Dec 22 21:52:09 2016 (585C9159)

The timestamp is December 2016, making the driver ~1.5 years old. That is very old for a 3rd party networking driver. I recommend that you update it. 

Go directly to Realtek for the driver update - https://www.sysnative.com/drivers/driver.php?id=rt640x64.sys

So, first - make sure that the most recent version of Malwarebytes is installed; (2) Update your Ethernet driver.

After those items are done, use your system as normal and see if the BSOD epidemic is over or continues.

Regards. . .

jcgriff2

EDIT: Please follow usasma's advice regarding Driver Verifier.

Edited by jcgriff2

Share this post


Link to post
Share on other sites

@ usasma - Sorry, John -- I posted just 3 minutes after you and didn't see your post prior to submission.

John

Share this post


Link to post
Share on other sites

Many thanks for the responses. I updated my ethernet adapter driver as instructed and confirmed that my version of Malwarebytes is currently at 3.5.1.2522. Will monitor for crashes in the interim

Share this post


Link to post
Share on other sites

Yes - but you may notice some slowness on your system.

Regards. . .

jcgriff2

Share this post


Link to post
Share on other sites

If you make a bunch of changes to the system, it'd be prudent to wait and see if the BSOD's are fixed or not (before running Driver Verifier).

Driver Verifier is designed to stress drivers.  If the drivers have problems, they will crash to a BSOD.
The memory dump "should" contain identifying information about the driver that crashed.

It may make the system slower, and because it's supposed to crash the system I'd suggest saving your work frequently.

I suggested Driver Verifier because it's frequently needed when we see a Driver_IRQL type of BSOD

BlueScreenView had some issues with 64 bit memory spaces in memory dumps.  As such it may mis-identify the responsible driver at times.
I spoke with the author about this several years ago.  Repairing the mis-identified driver won't hurt anything - and may even help.

Why are there so many disabled devices in the Perfmon report (mostly audio devices)?
Were you having audio problems?

Intel(R) Rapid Storage Technology (IRST) has an error in the PerfMon Report.  I'd suggest updating this driver from the HP support site for your model.  If the installer gives the option of Repairing, please select that.

Next, use the HP Support Assistant to ensure that your system is fully updated.

You can also get the latest version of the Realtek PCIe GBE (wired ethernet) driver from http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

FYI - most often when MalwareBytes is blamed in a BSOD; it's actually another, older driver that's causing the MalwareBytes driver to crash.

Your UEFI/BIOS (version F.38) dates from 2017.  Please check at the HP support website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a more recent update.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).
 

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

Lot's of audio programs in the Program Groups section of MSINFO32.
USB audio often has driver problems in Windows systems.
I'd ensure that each of the audio programs are updated to the latest version and also ensure that they are compatible w/the latest version of W10.
 
In particular, it seems that this driver is very old - please ensure that it's updated to a version that's known to be compatible w/the latest version of W10.
If not available, then uninstall the program that it's associated with.
bomebus.sys                                   Thu Jun 26 04:52:15 2014 (53ABDF3F)
Bome\'s MIDI Bus Enumerator http://www.bome.com/products/miditranslator/overview/win
http://www.carrona.org/drivers/driver.php?id=bomebus.sys
 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Fri Jul  6 03:35:07.318 2018 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\070618-36390-01.dmp]
Windows 10 Kernel Version 17134 MP (8 procs) Free x64
Built by: 17134.1.amd64fre.rs4_release.180410-1804
System Uptime:3 days 18:01:09.215
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by :memory_corruption
BugCheck D1, {50, 2, 0, fffff801b4947304}
BugCheck Info: DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
Arguments:
Arg1: 0000000000000050, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff801b4947304, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  MBAMService.exe
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE_32
CPUID:        "Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz"
MaxSpeed:     2600
CurrentSpeed: 2592
  BIOS Version                  F.38
  BIOS Release Date             05/24/2017
  Manufacturer                  HP
  Product Name                  OMEN by HP Laptop
  Baseboard Product             825B
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
 


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:
**************************Fri Jul  6 03:35:07.318 2018 (UTC - 4:00)**************************
DevAuthE.sys                                  Thu Aug 12 04:11:43 1971 (0307A53F)
xinputhid.sys                                 Tue Sep  1 23:44:29 2009 (4A9DEA1D)
SgrmAgent.sys                                 Thu Feb  2 09:30:36 2012 (4F2A9E0C)
bomebus.sys                                   Thu Jun 26 04:52:15 2014 (53ABDF3F)
dptf_cpu.sys                                  Wed Aug 10 14:43:11 2016 (57AB75BF)
esif_lf.sys                                   Wed Aug 10 14:43:26 2016 (57AB75CE)
ctxusbm.sys                                   Mon Aug 29 09:14:23 2016 (57C4352F)
iaStorA.sys                                   Tue Sep 13 10:45:46 2016 (57D8111A)
iLokDrvr.sys                                  Mon Dec 12 17:33:49 2016 (584F25CD)
rt640x64.sys                                  Thu Dec 22 21:52:09 2016 (585C9159)
afunix.sys                                    Tue Apr 18 10:12:59 2017 (58F61EEB)
iaLPSS2i_I2C.sys                              Wed Jun 14 00:00:59 2017 (5940B4FB)
TeeDriverW8x64.sys                            Tue Oct  3 02:21:38 2017 (59D32C72)
igdkmd64.sys                                  Tue Oct 17 21:39:02 2017 (59E6B0B6)
hpdskflt.sys                                  Sun Nov 19 23:26:13 2017 (5A125965)
Accelerometer.sys                             Sun Nov 19 23:26:28 2017 (5A125974)
ibtusb.sys                                    Tue Dec  5 23:53:12 2017 (5A2777B8)
SynTP.sys                                     Fri Feb 23 18:39:17 2018 (5A90A625)
Smb_driver_Intel.sys                          Fri Feb 23 18:44:42 2018 (5A90A76A)
mbamswissarmy.sys                             Wed Mar  7 10:54:57 2018 (5AA00B51)
nvlddmkm.sys                                  Wed Mar  7 11:58:19 2018 (5AA01A2B)
Netwtw04.sys                                  Wed Mar 14 08:51:04 2018 (5AA91AB8)
WRkrn.sys                                     Mon Mar 19 13:39:19 2018 (5AAFF5C7)
mbae64.sys                                    Tue Mar 27 11:15:46 2018 (5ABA6022)
audientusbaudio.sys                           Wed Mar 28 06:19:23 2018 (5ABB6C2B)
audientusbaudioks.sys                         Wed Mar 28 06:19:58 2018 (5ABB6C4E)
wrUrlFlt.sys                                  Wed Mar 28 07:35:20 2018 (5ABB7DF8)
mbam.sys                                      Sat Apr  7 14:55:35 2018 (5AC91427)
MbamChameleon.sys                             Wed Apr 25 15:39:20 2018 (5AE0D968)
IntcDAud.sys                                  Mon May  7 07:03:23 2018 (5AF0327B)
WirelessButtonDriver64.sys                    Thu May 10 02:56:38 2018 (5AF3ED26)
farflt.sys                                    Mon May 14 11:15:27 2018 (5AF9A80F)
mwac.sys                                      Wed May 16 09:52:49 2018 (5AFC37B1)
dc1-controller.sys                            Fri Jan 11 13:42:33 2019 (5C38E399)
xboxgip.sys                                   Thu Mar 21 06:51:40 2030 (714497BC)
intelppm.sys                                  ***** Invalid 2019 Invalid 2019 Invalid
 


http://www.carrona.org/drivers/driver.php?id=DevAuthE.sys
http://www.carrona.org/drivers/driver.php?id=xinputhid.sys
SgrmAgent.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=bomebus.sys
http://www.carrona.org/drivers/driver.php?id=dptf_cpu.sys
http://www.carrona.org/drivers/driver.php?id=esif_lf.sys
http://www.carrona.org/drivers/driver.php?id=ctxusbm.sys
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=iLokDrvr.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
afunix.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaLPSS2i_I2C.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=hpdskflt.sys
http://www.carrona.org/drivers/driver.php?id=Accelerometer.sys
http://www.carrona.org/drivers/driver.php?id=ibtusb.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
http://www.carrona.org/drivers/driver.php?id=mbamswissarmy.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
Netwtw04.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=WRkrn.sys
http://www.carrona.org/drivers/driver.php?id=mbae64.sys
audientusbaudio.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
audientusbaudioks.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=wrUrlFlt.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=MbamChameleon.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=WirelessButtonDriver64.sys
http://www.carrona.org/drivers/driver.php?id=farflt.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys
http://www.carrona.org/drivers/driver.php?id=dc1-controller.sys
http://www.carrona.org/drivers/driver.php?id=xboxgip.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys

 

Share this post


Link to post
Share on other sites

Appreciate the info, thanks

I have checked for any Windows updates manually and am advised I am completely up to date

I don't use the BOME MIDI utility any longer so have uninstalled that completely

There was a BIOS update dated 29/6/18 available on the HP Support site so I downloaded and installed that successfully (although it begs the question : why wasn't I prompted to do so earlier by the HP Support Assistance software?)

I have also updated the Intel(R) Rapid Storage Technology driver successfully

Notwithstanding the foregoing, HP Support Assistant reports there are no more available updates

I disabled all my on board audio devices on the recommendation of several computer musicians who, like myself, use an external usb sound-card for music production and they advised that this would reduce latency and avoid audio glitches. (Though this might be a case of 'chinese whispers' creating a new urban myth...?)

Hope this helps

Share this post


Link to post
Share on other sites
Posted (edited)
18 hours ago, ExittheLemming said:

There was a BIOS update dated 29/6/18 available on the HP Support site so I downloaded and installed that successfully (although it begs the question : why wasn't I prompted to do so earlier by the HP Support Assistance software?)

Very good question.

Most of my laptop purchases during the last ~12 years have been HP and Fujitsu.

I  have been involved with the back-end of Windows since Vista (~2007) and have yet to see any OEM Support Assistance software (like the HP Support Assistance software you have) actually work as described and notify me of BIOS or driver updates. Since ~2011, I just uninstall the software when setting up a newly purchased system and perform periodic manual checks for updates at the OEM's support site.

The primary drivers that should be checked for updates are video, wifi, Ethernet, storage and audio. All of these are "3rd party" drivers (non-Microsoft).  The balance of drivers found in Device Manager (devmgmt.msc) are updated via Windows Updates as they are Microsoft Windows OS related drivers. Sometimes, video driver updates (specifically NVIDIA) do come in via Windows Updates.

Check your system manufacturer's site first for driver updates. Then, manually check each driver that I mentioned for updates, which is very easy to do with usasma's Driver Reference Table (DRT). The easiest way to find the driver update site is to obtain the driver name in Device Manager (devmgmt.msc) -- like rt640x64.sys that I listed for your Ethernet device; search the DRT for the driver ( http://www.carrona.org/dvrref.php ); click on the URL for the update site. The automated driver update apps that you find littering the Internet really do not work. It takes only a few minutes to check each driver manually.

If you do get another BSOD, please rerun the Sysnative app contained in the BSOD Posting Instructions and attach the resulting zip file. Hopefully, this won't be necessary.

Regards. . .

jcgriff2

Edited by jcgriff2

Share this post


Link to post
Share on other sites

Why weren't you prompted by the Support Assistant to download a BIOS update?
Well, first there's the debate between technicians about updating the BIOS.  Some believe it's not necessary, while others believe it is.
IMO it is necessary simply because the newer BIOS's (UEFI's) communicate more with the OS than previously.
At work I update the BIOS's on all W8 and W10 systems.  I carefully choose whether to update the BIOS on W7 and earlier systems based on the problems that the system is having.

I've been working on computers since the days of DOS, and have been employed as a technician since the days of XP.
I've witnessed the OEM updater software improving over the years.  HP, Dell, and Lenovo currenty have the best updaters IMO - but they are far from perfect.
They're also affected by their ability to obtain updates released by the device developers (Intel, AMD, Realtek, etc)
At work we manually update the BIOS, and let Windows Update and the OEM updaters handle the rest of the updates.

You can manually check for updates as jcgriff2 states - but that's beyond what most users want to do with their systems.
That's why we set Windows Updates and OEM Updates to work automatically on systems at work.
You'll notice that quite a few of the drivers that the OEM uses (such as HP) are customized after they get them from the developer.
If you use these customized features, then you'll need to get the drivers from HP.
If you don't use the customized features, then you can get them from the developers support site (if available).

Next, Windows Update is becoming a much more important source of driver updates as manufacturers and developers are providing driver packages to Microsoft on a more regular basis.  It's such a good program (IMO) that the OEM's will refer you to Windows Update if they don't want to provide the drivers themselves.

Finally, I've seen this sort of work done with USB audio cards in the past.
There's 2 sets of problems that you have to be aware of:

1)  That USB audio cards are touchy when it comes to software.  Using outdated software can cause many different problems - so it's important to keep ALL audio programs updated (such as the BOME MIDI utility).  If not, then you'll end up having problems that will blame the USB drivers or the USB audio drivers

2)  Any devices that are disabled in Device Manager will still load their drivers when Windows starts.  Later on in the startup process, the drivers will be disabled - but still occupy memory and can be interacted with (in a limited way since they are disabled).  The point here is that these drivers can still cause problems (we've seen BSOD's caused by disable drivers in the past) and you need to continue to update them also - or you may find yourself having problems due to the disable drivers.

Good luck!

Share this post


Link to post
Share on other sites

Many thanks to both usasma and jcgriff2 for the valuable advice and assistance.

Lots to digest there. Point taken re the need to keep even disabled drivers up to date and the very limited capabilities of the HP Support Assistant software. I have updated all my on-board audio drivers and re-enabled same via Device Manager on my laptop (as disabling them provided precisely squat improvement in audio round-trip latency) Similarly, my video, wifi, Ethernet and storage drivers, where available, have now been updated. No further BSOD's to date but will monitor accordingly.

 

Share this post


Link to post
Share on other sites

Got a BSOD at 09:45 pm today so have created a System Restore Point and will run Driver Verifier now for at least 24 hours to see if this can isolate the cause etc, Will post dump file from c:\windows\minidump, and zip it up & attach to next post

Share this post


Link to post
Share on other sites

Run the Sysnative app in the BSOD Posting Instructions again so we can get the most recent dump.

https://forums.malwarebytes.com/topic/170037-blue-screen-of-death-bsod-posting-instructions-windows/

Regards. . .

jcgriff2

Share this post


Link to post
Share on other sites

Hi. . .

The latest lone dump lists the same Malwarebytes driver as I listed in post #3 - mwac.sys.

The bugcheck was the same - 0xd1

Keep Driver Verifier running. Hopefully, it will flag a 3rd party driver.

Regards. . .

jcgriff2

 


Microsoft (R) Windows Debugger Version 10.0.10075.9 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\PalmDesert\AppData\Local\Temp\Temp1_SysnativeFileCollectionApp.zip\071118-57734-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 10 Kernel Version 17134 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 17134.1.amd64fre.rs4_release.180410-1804
Machine Name:
Kernel base = 0xfffff803`cb61c000 PsLoadedModuleList = 0xfffff803`cb9d61f0
Debug session time: Wed Jul 11 07:45:57.374 2018 (UTC - 4:00)
System Uptime: 0 days 4:06:09.272
Loading Kernel Symbols
...............................................................
................................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
................
No .natvis files found at C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\Visualizers.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {50, 2, 0, fffff80e19a17304}

*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by : memory_corruption

Followup:     memory_corruption
---------

Processing initial command '!analyze -v;r;kv;lmtn;lmtsmn;.bugcheck'
4: kd> !analyze -v;r;kv;lmtn;lmtsmn;.bugcheck
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000050, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80e19a17304, address which referenced memory

Debugging Details:
------------------


SYSTEM_SKU:  X5P71PA#ABG

SYSTEM_VERSION:  Type1ProductConfigId

BIOS_DATE:  06/22/2018

BASEBOARD_PRODUCT:  825B

BASEBOARD_VERSION:  82.39

BUGCHECK_P1: 50

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff80e19a17304

READ_ADDRESS: fffff803cba76388: Unable to get MiVisibleState
 0000000000000050 

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!StreamInvokeCalloutAndNormalizeAction+214
fffff80e`19a17304 4183795003      cmp     dword ptr [r9+50h],3

CPU_COUNT: 8

CPU_MHZ: a20

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 5e

CPU_STEPPING: 3

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  AV

PROCESS_NAME:  MBAMService.ex

ANALYSIS_VERSION: 10.0.10075.9 amd64fre

TRAP_FRAME:  ffffc687dca46510 -- (.trap 0xffffc687dca46510)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000001001 rbx=0000000000000000 rcx=ffffd98288d13000
rdx=0000000000001001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80e19a17304 rsp=ffffc687dca466a0 rbp=ffffc687dca46729
 r8=0000000000014e15  r9=0000000000000000 r10=0000000000000116
r11=0000000000003000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!StreamInvokeCalloutAndNormalizeAction+0x214:
fffff80e`19a17304 4183795003      cmp     dword ptr [r9+50h],3 ds:00000000`00000050=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff803cb7c4f69 to fffff803cb7b4430

STACK_TEXT:  
ffffc687`dca463c8 fffff803`cb7c4f69 : 00000000`0000000a 00000000`00000050 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffc687`dca463d0 fffff803`cb7c1be5 : ffffc687`dca467f8 ffffc687`dca46ba8 ffffd982`7e89c4c0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffc687`dca46510 fffff80e`19a17304 : ffffc687`dca46828 ffffc687`dca46729 ffffc687`dca467f8 00000000`00000000 : nt!KiPageFault+0x425
ffffc687`dca466a0 fffff80e`19a16d03 : ffffd982`88d13000 ffffd982`88d13010 ffffc687`dca46ba8 ffffd982`88d130e0 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x214
ffffc687`dca46780 fffff80e`19a16639 : ffffd982`7f7a0014 fffff80e`1f5f4d7c 00000000`00000000 ffffd982`8a2e0260 : NETIO!StreamProcessCallout+0x2c7
ffffc687`dca468b0 fffff80e`19a15087 : 00000000`00000014 ffffd982`8a2e0260 ffffd982`89e3a4b0 ffffc687`dca470a0 : NETIO!ProcessCallout+0x9d9
ffffc687`dca46a40 fffff80e`19a12d88 : 00000000`00000005 00000000`00000000 ffffd982`7f780a00 00000000`00000000 : NETIO!ArbitrateAndEnforce+0x4a7
ffffc687`dca46c30 fffff80e`19a54870 : 00000000`00000002 fffff80e`19bf1361 00000410`000010e4 00000000`00002e94 : NETIO!KfdClassify+0x2f8
ffffc687`dca47050 fffff80e`19a542ba : 00000000`00000000 ffffc687`dca471f1 00000000`00000368 00000000`00000000 : NETIO!StreamInternalClassify+0x104
ffffc687`dca47170 fffff80e`19a511db : 00000000`00000014 ffffd982`89e3a300 00000000`00000000 ffffd982`7ef5c6f0 : NETIO!StreamInject+0x23a
ffffc687`dca47240 fffff80e`19c0893d : ffffd982`89e3a300 00000000`00000137 00000000`00000000 ffffd982`00010000 : NETIO!FwppStreamInject+0x13b
ffffc687`dca472d0 fffff80e`1a89915b : ffffd982`7eddfcc0 fffff80e`1a8a1880 ffffd982`7f0d3d20 ffffc687`dca47620 : fwpkclnt!FwpsStreamInjectAsync0+0xfd
ffffc687`dca47330 ffffd982`7eddfcc0 : fffff80e`1a8a1880 ffffd982`7f0d3d20 ffffc687`dca47620 ffffc687`00000137 : mwac+0x915b
ffffc687`dca47338 fffff80e`1a8a1880 : ffffd982`7f0d3d20 ffffc687`dca47620 ffffc687`00000137 00000000`00000014 : 0xffffd982`7eddfcc0
ffffc687`dca47340 ffffd982`7f0d3d20 : ffffc687`dca47620 ffffc687`00000137 00000000`00000014 00000000`00010000 : mwac+0x11880
ffffc687`dca47348 ffffc687`dca47620 : ffffc687`00000137 00000000`00000014 00000000`00010000 ffffd982`7ef5c6f0 : 0xffffd982`7f0d3d20
ffffc687`dca47350 ffffc687`00000137 : 00000000`00000014 00000000`00010000 ffffd982`7ef5c6f0 00000000`00000368 : 0xffffc687`dca47620
ffffc687`dca47358 00000000`00000014 : 00000000`00010000 ffffd982`7ef5c6f0 00000000`00000368 fffff80e`1a899394 : 0xffffc687`00000137
ffffc687`dca47360 00000000`00010000 : ffffd982`7ef5c6f0 00000000`00000368 fffff80e`1a899394 00000000`00000000 : 0x14
ffffc687`dca47368 ffffd982`7ef5c6f0 : 00000000`00000368 fffff80e`1a899394 00000000`00000000 ffffc687`dca47380 : 0x10000
ffffc687`dca47370 00000000`00000368 : fffff80e`1a899394 00000000`00000000 ffffc687`dca47380 00000000`00000000 : 0xffffd982`7ef5c6f0
ffffc687`dca47378 fffff80e`1a899394 : 00000000`00000000 ffffc687`dca47380 00000000`00000000 ffffd982`7eddfd50 : 0x368
ffffc687`dca47380 00000000`00000000 : ffffc687`dca47380 00000000`00000000 ffffd982`7eddfd50 ffffd982`7e7a9700 : mwac+0x9394


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -db !nt
13 errors : !nt (fffff803cb911392-fffff803cb9113b1)
fffff803cb911390  00  00 *80 *7f *ff  ff  ff  4c  03  c1  49  b9  00 *e0 *df *bf .......L..I.....
fffff803cb9113a0 *7f *ff  ff  ff  49  8b  08  49  8b  c1  49  bb  f8 *e7 *df *bf ....I..I..I.....
fffff803cb9113b0 *7f *ff  ff  ff  4c  3b  c0  0f  83  14  01  00  00  84  c9  0f ....L;..........

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_32

FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE_32

BUCKET_ID:  MEMORY_CORRUPTION_LARGE_32

PRIMARY_PROBLEM_CLASS:  MEMORY_CORRUPTION_LARGE_32

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:memory_corruption_large_32

FAILURE_ID_HASH:  {8f482df0-6cb7-502d-3bf6-ac850e6d1520}

Followup:     memory_corruption
---------

rax=ffffc687dca464d0 rbx=ffffc687dca46828 rcx=000000000000000a
rdx=0000000000000050 rsi=ffffc687dca467f8 rdi=ffffd98288d130e0
rip=fffff803cb7b4430 rsp=ffffc687dca463c8 rbp=ffffc687dca46590
 r8=0000000000000002  r9=0000000000000000 r10=fffff80e19a17304
r11=0000000000003000 r12=ffffc687dca46ba8 r13=fffff80e19a70000
r14=0000000000000000 r15=0000000000001000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000282
nt!KeBugCheckEx:
fffff803`cb7b4430 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffc687`dca463d0=000000000000000a
 # Child-SP          RetAddr           : Args to Child                                                           : Call Site
00 ffffc687`dca463c8 fffff803`cb7c4f69 : 00000000`0000000a 00000000`00000050 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
01 ffffc687`dca463d0 fffff803`cb7c1be5 : ffffc687`dca467f8 ffffc687`dca46ba8 ffffd982`7e89c4c0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
02 ffffc687`dca46510 fffff80e`19a17304 : ffffc687`dca46828 ffffc687`dca46729 ffffc687`dca467f8 00000000`00000000 : nt!KiPageFault+0x425 (TrapFrame @ ffffc687`dca46510)
03 ffffc687`dca466a0 fffff80e`19a16d03 : ffffd982`88d13000 ffffd982`88d13010 ffffc687`dca46ba8 ffffd982`88d130e0 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x214
04 ffffc687`dca46780 fffff80e`19a16639 : ffffd982`7f7a0014 fffff80e`1f5f4d7c 00000000`00000000 ffffd982`8a2e0260 : NETIO!StreamProcessCallout+0x2c7
05 ffffc687`dca468b0 fffff80e`19a15087 : 00000000`00000014 ffffd982`8a2e0260 ffffd982`89e3a4b0 ffffc687`dca470a0 : NETIO!ProcessCallout+0x9d9
06 ffffc687`dca46a40 fffff80e`19a12d88 : 00000000`00000005 00000000`00000000 ffffd982`7f780a00 00000000`00000000 : NETIO!ArbitrateAndEnforce+0x4a7
07 ffffc687`dca46c30 fffff80e`19a54870 : 00000000`00000002 fffff80e`19bf1361 00000410`000010e4 00000000`00002e94 : NETIO!KfdClassify+0x2f8
08 ffffc687`dca47050 fffff80e`19a542ba : 00000000`00000000 ffffc687`dca471f1 00000000`00000368 00000000`00000000 : NETIO!StreamInternalClassify+0x104
09 ffffc687`dca47170 fffff80e`19a511db : 00000000`00000014 ffffd982`89e3a300 00000000`00000000 ffffd982`7ef5c6f0 : NETIO!StreamInject+0x23a
0a ffffc687`dca47240 fffff80e`19c0893d : ffffd982`89e3a300 00000000`00000137 00000000`00000000 ffffd982`00010000 : NETIO!FwppStreamInject+0x13b
0b ffffc687`dca472d0 fffff80e`1a89915b : ffffd982`7eddfcc0 fffff80e`1a8a1880 ffffd982`7f0d3d20 ffffc687`dca47620 : fwpkclnt!FwpsStreamInjectAsync0+0xfd
0c ffffc687`dca47330 ffffd982`7eddfcc0 : fffff80e`1a8a1880 ffffd982`7f0d3d20 ffffc687`dca47620 ffffc687`00000137 : mwac+0x915b
0d ffffc687`dca47338 fffff80e`1a8a1880 : ffffd982`7f0d3d20 ffffc687`dca47620 ffffc687`00000137 00000000`00000014 : 0xffffd982`7eddfcc0
0e ffffc687`dca47340 ffffd982`7f0d3d20 : ffffc687`dca47620 ffffc687`00000137 00000000`00000014 00000000`00010000 : mwac+0x11880
0f ffffc687`dca47348 ffffc687`dca47620 : ffffc687`00000137 00000000`00000014 00000000`00010000 ffffd982`7ef5c6f0 : 0xffffd982`7f0d3d20
10 ffffc687`dca47350 ffffc687`00000137 : 00000000`00000014 00000000`00010000 ffffd982`7ef5c6f0 00000000`00000368 : 0xffffc687`dca47620
11 ffffc687`dca47358 00000000`00000014 : 00000000`00010000 ffffd982`7ef5c6f0 00000000`00000368 fffff80e`1a899394 : 0xffffc687`00000137
12 ffffc687`dca47360 00000000`00010000 : ffffd982`7ef5c6f0 00000000`00000368 fffff80e`1a899394 00000000`00000000 : 0x14
13 ffffc687`dca47368 ffffd982`7ef5c6f0 : 00000000`00000368 fffff80e`1a899394 00000000`00000000 ffffc687`dca47380 : 0x10000
14 ffffc687`dca47370 00000000`00000368 : fffff80e`1a899394 00000000`00000000 ffffc687`dca47380 00000000`00000000 : 0xffffd982`7ef5c6f0
15 ffffc687`dca47378 fffff80e`1a899394 : 00000000`00000000 ffffc687`dca47380 00000000`00000000 ffffd982`7eddfd50 : 0x368
16 ffffc687`dca47380 00000000`00000000 : ffffc687`dca47380 00000000`00000000 ffffd982`7eddfd50 ffffd982`7e7a9700 : mwac+0x9394
start             end                 module name
ffffedc9`6b600000 ffffedc9`6b990000   win32kfull win32kfull.sys ***** Invalid (8479EB66)
ffffedc9`6ba50000 ffffedc9`6bacc000   win32k   win32k.sys   Sun Jun 24 04:43:35 2001 (3B35A837)
ffffedc9`6bd80000 ffffedc9`6bfb4000   win32kbase win32kbase.sys ***** Invalid (C6F4F285)
ffffedc9`6bfc0000 ffffedc9`6bfff000   cdd      cdd.dll      unavailable (00000000)
fffff803`cb61c000 fffff803`cbf7d000   nt       ntkrnlmp.exe Fri Jul 06 02:57:56 2018 (5B3F12F4)
fffff803`cbf7d000 fffff803`cc009000   hal      hal.dll      Tue Apr 05 17:12:34 2005 (4252FF42)
fffff803`cc200000 fffff803`cc20b000   kd       kd.dll       ***** Invalid (FC97B795)
fffff80e`18a00000 fffff80e`18a24000   tm       tm.sys       ***** Invalid (DA2D5B6C)
fffff80e`18a30000 fffff80e`18a47000   PSHED    PSHED.dll    ***** Invalid (FCF5BFC7)
fffff80e`18a50000 fffff80e`18a5b000   BOOTVID  BOOTVID.dll  ***** Invalid (A81902E1)
fffff80e`18a60000 fffff80e`18ac9000   FLTMGR   FLTMGR.SYS   ***** Invalid (8801E691)
fffff80e`18ad0000 fffff80e`18af3000   acpiex   acpiex.sys   ***** Invalid (A0DBA1E7)
fffff80e`18b60000 fffff80e`18cb9000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Wed Dec 27 11:18:02 2034 (7A3D793A)
fffff80e`18cc0000 fffff80e`18d20000   msrpc    msrpc.sys    ***** Invalid (D522F4A7)
fffff80e`18d20000 fffff80e`18d4a000   ksecdd   ksecdd.sys   ***** Invalid (E28CCD99)
fffff80e`18d50000 fffff80e`18d61000   werkernel werkernel.sys Tue Apr 29 07:25:50 1980 (136C293E)
fffff80e`18d70000 fffff80e`18dd4000   CLFS     CLFS.SYS     ***** Invalid (FF43C502)
fffff80e`18e00000 fffff80e`18eb2000   cng      cng.sys      ***** Invalid (9A741A9D)
fffff80e`18ec0000 fffff80e`18fa4000   Wdf01000 Wdf01000.sys ***** Invalid (BD4591F4)
fffff80e`18fb0000 fffff80e`18fc3000   WDFLDR   WDFLDR.SYS   Thu Jul 26 22:22:47 2012 (5011FB77)
fffff80e`18fd0000 fffff80e`190d2000   clipsp   clipsp.sys   Wed Apr 11 00:05:31 2018 (5ACD898B)
fffff80e`190e0000 fffff80e`190ee000   cmimcext cmimcext.sys Wed Jul 02 11:10:18 1986 (1F09445A)
fffff80e`190f0000 fffff80e`190fc000   ntosext  ntosext.sys  Wed May 17 13:41:19 1972 (0477FD3F)
fffff80e`19100000 fffff80e`191b5000   CI       CI.dll       ***** Invalid (CFB9E6DF)
fffff80e`191c0000 fffff80e`191ce000   WppRecorder WppRecorder.sys Sun Jun 28 19:29:10 2009 (4A47FCC6)
fffff80e`191d0000 fffff80e`191df000   SleepStudyHelper SleepStudyHelper.sys Wed Dec 13 11:00:17 2017 (5A314E91)
fffff80e`191e0000 fffff80e`191f5000   SgrmAgent SgrmAgent.sys Thu Feb 02 09:30:36 2012 (4F2A9E0C)
fffff80e`19200000 fffff80e`1923d000   tpm      tpm.sys      ***** Invalid (840D39AF)
fffff80e`19240000 fffff80e`1926f000   intelpep intelpep.sys Mon Jan 07 04:28:21 2019 (5C331BB5)
fffff80e`19270000 fffff80e`19286000   WindowsTrustedRT WindowsTrustedRT.sys ***** Invalid (C5D5EE17)
fffff80e`19290000 fffff80e`1929b000   WindowsTrustedRTProxy WindowsTrustedRTProxy.sys Fri Apr 27 06:41:18 2001 (3AE94CCE)
fffff80e`192a0000 fffff80e`192b4000   pcw      pcw.sys      Thu Apr 16 09:50:38 2026 (69E0E92E)
fffff80e`192c0000 fffff80e`192d2000   vdrvroot vdrvroot.sys Wed Nov 28 00:36:24 2035 (7BF7DAD8)
fffff80e`192e0000 fffff80e`19308000   pdc      pdc.sys      ***** Invalid (E1E24B35)
fffff80e`19310000 fffff80e`19329000   CEA      CEA.sys      Wed Sep 16 01:57:44 1987 (214E2858)
fffff80e`19330000 fffff80e`1935d000   partmgr  partmgr.sys  Wed Jan 13 15:45:53 2021 (5FFF5C01)
fffff80e`19360000 fffff80e`193f9000   spaceport spaceport.sys Mon May 10 07:17:48 2004 (409F64DC)
fffff80e`19400000 fffff80e`19419000   volmgr   volmgr.sys   ***** Invalid (A6ED6AB7)
fffff80e`19420000 fffff80e`1947e000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff80e`19480000 fffff80e`1949e000   mountmgr mountmgr.sys Sun Jul 11 01:36:45 2010 (4C39586D)
fffff80e`194a0000 fffff80e`19743000   tcpip    tcpip.sys    ***** Invalid (E2BB1032)
fffff80e`19750000 fffff80e`1975b000   hpdskflt hpdskflt.sys Sun Nov 19 23:26:13 2017 (5A125965)
fffff80e`19760000 fffff80e`1976b000   volume   volume.sys   ***** Invalid (BBE7F72B)
fffff80e`19770000 fffff80e`197d7000   volsnap  volsnap.sys  ***** Invalid (BC6DEACD)
fffff80e`197e0000 fffff80e`1982c000   rdyboost rdyboost.sys Thu Oct 21 21:19:40 1971 (0364DF2C)
fffff80e`19830000 fffff80e`19854000   mup      mup.sys      ***** Invalid (84DBF4DF)
fffff80e`19860000 fffff80e`19871000   iorate   iorate.sys   ***** Invalid (9B6D3859)
fffff80e`198a0000 fffff80e`19945000   ACPI     ACPI.sys     ***** Invalid (A0D961E5)
fffff80e`19950000 fffff80e`1995c000   WMILIB   WMILIB.SYS   Sun Jul 20 15:38:32 2008 (48839438)
fffff80e`19960000 fffff80e`1996b000   msisadrv msisadrv.sys Sat Apr 18 20:48:50 1970 (008E6D72)
fffff80e`19970000 fffff80e`199d0000   pci      pci.sys      ***** Invalid (DD60CB9A)
fffff80e`199d0000 fffff80e`199ec000   disk     disk.sys     Thu Aug 03 10:40:22 1989 (24D85956)
fffff80e`19a00000 fffff80e`19a89000   NETIO    NETIO.SYS    Fri Jul 29 13:31:39 2022 (62E4197B)
fffff80e`19a90000 fffff80e`19bd1000   NDIS     NDIS.SYS     Sat Jul 29 14:07:48 2034 (79768074)
fffff80e`19be0000 fffff80e`19bf0000   TDI      TDI.SYS      ***** Invalid (814E4748)
fffff80e`19bf0000 fffff80e`19c66000   fwpkclnt fwpkclnt.sys Thu Nov 08 04:04:48 1990 (27391FB0)
fffff80e`19c70000 fffff80e`19ecb000   Ntfs     Ntfs.sys     Wed May 15 14:13:02 1991 (28317A2E)
fffff80e`19ed0000 fffff80e`19edd000   Fs_Rec   Fs_Rec.sys   Wed Oct 13 15:09:20 1971 (0359FC60)
fffff80e`19ee0000 fffff80e`19f10000   ksecpkg  ksecpkg.sys  Tue Oct 27 23:16:33 2026 (6AE16911)
fffff80e`19f10000 fffff80e`19f3d000   wfplwfs  wfplwfs.sys  Sat Feb 09 21:18:15 2030 (7110B4E7)
fffff80e`19f40000 fffff80e`19ffc000   fvevol   fvevol.sys   Fri Mar 29 22:47:16 2030 (715003B4)
fffff80e`1a000000 fffff80e`1a4cf000   iaStorA  iaStorA.sys  Tue Sep 13 10:45:46 2016 (57D8111A)
fffff80e`1a4d0000 fffff80e`1a55f000   storport storport.sys Sat Oct 05 11:15:35 2024 (67015817)
fffff80e`1a580000 fffff80e`1a59a000   fileinfo fileinfo.sys ***** Invalid (D50D6775)
fffff80e`1a5a0000 fffff80e`1a5db000   Wof      Wof.sys      Mon Sep 29 09:47:10 2036 (7D8BB8DE)
fffff80e`1a5e0000 fffff80e`1a5fe000   WRkrn    WRkrn.sys    Mon Mar 19 13:39:19 2018 (5AAFF5C7)
fffff80e`1a600000 fffff80e`1a61b000   crashdmp crashdmp.sys Tue Jul 11 02:42:25 2028 (6E159E51)
fffff80e`1a620000 fffff80e`1a6e0000   peauth   peauth.sys   Thu Sep 11 22:56:58 2036 (7D74B6FA)
fffff80e`1a6e0000 fffff80e`1a6f6000   NDProxy  NDProxy.sys  Fri Aug 10 19:19:33 2018 (5B6E1D85)
fffff80e`1a700000 fffff80e`1a727000   AgileVpn AgileVpn.sys ***** Invalid (B96F50A5)
fffff80e`1a730000 fffff80e`1a750000   rasl2tp  rasl2tp.sys  ***** Invalid (D79956B1)
fffff80e`1a750000 fffff80e`1a76f000   raspptp  raspptp.sys  ***** Invalid (DEE494F8)
fffff80e`1a770000 fffff80e`1a78b000   raspppoe raspppoe.sys ***** Invalid (D6217902)
fffff80e`1a790000 fffff80e`1a7c7000   ndiswan  ndiswan.sys  Tue Aug 11 17:51:57 1987 (211F91FD)
fffff80e`1a7d0000 fffff80e`1a7e2000   vwifimp  vwifimp.sys  Thu Apr 11 12:37:15 1991 (280490BB)
fffff80e`1a7f0000 fffff80e`1a830000   mbamswissarmy mbamswissarmy.sys Wed Mar 07 10:54:57 2018 (5AA00B51)
fffff80e`1a860000 fffff80e`1a87d000   farflt   farflt.sys   Mon May 14 11:15:27 2018 (5AF9A80F)
fffff80e`1a880000 fffff80e`1a88d000   mbam     mbam.sys     Sat Apr 07 14:55:35 2018 (5AC91427)
fffff80e`1a890000 fffff80e`1a8b1000   mwac     mwac.sys     Wed May 16 09:52:49 2018 (5AFC37B1)
fffff80e`1ab10000 fffff80e`1ab97000   nwifi    nwifi.sys    ***** Invalid (B0BE7268)
fffff80e`1aba0000 fffff80e`1aca2000   HTTP     HTTP.sys     ***** Invalid (A9BB6161)
fffff80e`1acb0000 fffff80e`1acf8000   srvnet   srvnet.sys   ***** Invalid (F2156005)
fffff80e`1ad00000 fffff80e`1adbc000   srv2     srv2.sys     Thu Dec 15 12:59:17 1977 (0EF6D275)
fffff80e`1adc0000 fffff80e`1ade1000   bowser   bowser.sys   Fri Mar 28 15:00:24 2008 (47ED4048)
fffff80e`1adf0000 fffff80e`1ae72000   mrxsmb   mrxsmb.sys   Tue Apr 27 15:31:30 2010 (4BD73B92)
fffff80e`1ae80000 fffff80e`1aebd000   mrxsmb20 mrxsmb20.sys ***** Invalid (EC01DE9F)
fffff80e`1aec0000 fffff80e`1aee7000   Ndu      Ndu.sys      ***** Invalid (9D155C46)
fffff80e`1af70000 fffff80e`1afdb000   CLASSPNP CLASSPNP.SYS ***** Invalid (E3348094)
fffff80e`1b200000 fffff80e`1b213000   tcpipreg tcpipreg.sys Fri Aug 03 03:02:15 2029 (701528F7)
fffff80e`1b220000 fffff80e`1b24e000   cdrom    cdrom.sys    Mon Jul 31 02:59:18 1978 (1022CDC6)
fffff80e`1b250000 fffff80e`1b264000   filecrypt filecrypt.sys ***** Invalid (BDE52434)
fffff80e`1b270000 fffff80e`1b27d000   tbs      tbs.sys      ***** Invalid (81533658)
fffff80e`1b280000 fffff80e`1b28a000   Null     Null.SYS     Mon Jun 30 01:17:31 2031 (73AAA46B)
fffff80e`1b290000 fffff80e`1b29a000   Beep     Beep.SYS     ***** Invalid (E3C311B5)
fffff80e`1b2a0000 fffff80e`1b2c6000   ctxusbm  ctxusbm.sys  Mon Aug 29 09:14:23 2016 (57C4352F)
fffff80e`1b2d0000 fffff80e`1b587000   dxgkrnl  dxgkrnl.sys  ***** Invalid (984AD74D)
fffff80e`1b590000 fffff80e`1b5a4000   watchdog watchdog.sys Thu Aug 23 04:44:31 2029 (702F9EEF)
fffff80e`1b5b0000 fffff80e`1b5ca000   vmbkmclr vmbkmclr.sys ***** Invalid (D822A885)
fffff80e`1b5d0000 fffff80e`1b5e6000   BasicDisplay BasicDisplay.sys Wed Jul 13 00:57:10 1988 (22DAEDA6)
fffff80e`1b5f0000 fffff80e`1b600000   BasicRender BasicRender.sys Thu Jun 10 03:53:52 1999 (375F6F10)
fffff80e`1b600000 fffff80e`1b61b000   Npfs     Npfs.SYS     ***** Invalid (927DEFE8)
fffff80e`1b620000 fffff80e`1b630000   Msfs     Msfs.SYS     ***** Invalid (BD01B948)
fffff80e`1b630000 fffff80e`1b653000   tdx      tdx.sys      ***** Invalid (9F3F7265)
fffff80e`1b660000 fffff80e`1b6b4000   netbt    netbt.sys    ***** Invalid (CA7943CA)
fffff80e`1b6c0000 fffff80e`1b6d3000   afunix   afunix.sys   Tue Apr 18 10:12:59 2017 (58F61EEB)
fffff80e`1b6e0000 fffff80e`1b77e000   afd      afd.sys      ***** Invalid (E5C2C597)
fffff80e`1b780000 fffff80e`1b79a000   vwififlt vwififlt.sys ***** Invalid (E4E7506A)
fffff80e`1b7a0000 fffff80e`1b7c9000   pacer    pacer.sys    ***** Invalid (89D4206A)
fffff80e`1b7d0000 fffff80e`1b7e2000   netbios  netbios.sys  ***** Invalid (DBD51B1C)
fffff80e`1b7f0000 fffff80e`1b866000   rdbss    rdbss.sys    ***** Invalid (9FD233A8)
fffff80e`1b870000 fffff80e`1b882000   nsiproxy nsiproxy.sys ***** Invalid (DC8AB40C)
fffff80e`1b890000 fffff80e`1b89d000   npsvctrig npsvctrig.sys ***** Invalid (E9804B86)
fffff80e`1b8a0000 fffff80e`1b8af000   mssmbios mssmbios.sys ***** Invalid (B89DA2EF)
fffff80e`1b8b0000 fffff80e`1b8ba000   gpuenergydrv gpuenergydrv.sys ***** Invalid (A5E021DD)
fffff80e`1b8c0000 fffff80e`1b8e6000   mbae64   mbae64.sys   Tue Mar 27 11:15:46 2018 (5ABA6022)
fffff80e`1b8f0000 fffff80e`1b919000   dfsc     dfsc.sys     ***** Invalid (C86C4181)
fffff80e`1b920000 fffff80e`1b93b000   rassstp  rassstp.sys  ***** Invalid (CD5601B9)
fffff80e`1b940000 fffff80e`1b9a0000   fastfat  fastfat.SYS  Tue May 21 17:53:07 1991 (283996C3)
fffff80e`1b9a0000 fffff80e`1b9b4000   bam      bam.sys      ***** Invalid (F0EF718F)
fffff80e`1b9c0000 fffff80e`1ba05000   ahcache  ahcache.sys  ***** Invalid (AAB4C5E7)
fffff80e`1ba10000 fffff80e`1ba21000   CompositeBus CompositeBus.sys ***** Invalid (E21758C8)
fffff80e`1ba30000 fffff80e`1ba3d000   kdnic    kdnic.sys    Thu Sep 21 16:45:00 2028 (6E754FCC)
fffff80e`1ba40000 fffff80e`1ba55000   umbus    umbus.sys    Thu Mar 01 03:22:35 1973 (05F32A4B)
fffff80e`1ba60000 fffff80e`1ba75000   CAD      CAD.sys      ***** Invalid (D320A237)
fffff80e`1ba80000 fffff80e`1bf4f000   dump_iaStorA dump_iaStorA.sys Tue Sep 13 10:45:46 2016 (57D8111A)
fffff80e`1bf50000 fffff80e`1bf78000   wcifs    wcifs.sys    Mon Dec 16 20:40:30 2024 (6760D68E)
fffff80e`1bf80000 fffff80e`1bfee000   cldflt   cldflt.sys   Mon May 16 22:25:49 2005 (4289562D)
fffff80e`1bff0000 fffff80e`1c009000   storqosflt storqosflt.sys Wed Jan 05 12:54:03 2011 (4D24B03B)
fffff80e`1c010000 fffff80e`1c041000   MbamChameleon MbamChameleon.sys Wed Apr 25 15:39:20 2018 (5AE0D968)
fffff80e`1c520000 fffff80e`1c536000   lltdio   lltdio.sys   Tue Oct 19 06:57:28 2010 (4CBD7998)
fffff80e`1c540000 fffff80e`1c55a000   mslldp   mslldp.sys   Thu Apr 05 07:37:22 1979 (116A02F2)
fffff80e`1c560000 fffff80e`1c57b000   wanarp   wanarp.sys   ***** Invalid (D8D929B9)
fffff80e`1c580000 fffff80e`1c59a000   rspndr   rspndr.sys   ***** Invalid (9EF4AC0E)
fffff80e`1c5a0000 fffff80e`1c5b6000   ndisuio  ndisuio.sys  ***** Invalid (F3C01832)
fffff80e`1c5c0000 fffff80e`1c5d2000   condrv   condrv.sys   ***** Invalid (80BAEE40)
fffff80e`1c5e0000 fffff80e`1c5f9000   mpsdrv   mpsdrv.sys   Mon Jan 30 23:13:48 2023 (63D8957C)
fffff80e`1d800000 fffff80e`1dd83000   RTKVHD64 RTKVHD64.sys Tue Dec 20 05:28:35 2016 (585907D3)
fffff80e`1dd90000 fffff80e`1de2a000   IntcDAud IntcDAud.sys Mon May 07 07:03:23 2018 (5AF0327B)
fffff80e`1de30000 fffff80e`1df3c000   bthport  bthport.sys  Sun Nov 07 17:32:02 2010 (4CD728E2)
fffff80e`1df40000 fffff80e`1df53000   mmcss    mmcss.sys    Thu Feb 09 07:38:08 2017 (589C62B0)
fffff80e`1df60000 fffff80e`1df6f000   ndistapi ndistapi.sys Sun Apr 12 21:29:09 1970 (00868DE5)
fffff80e`1df70000 fffff80e`1dfbc000   usbvideo usbvideo.sys Tue Apr 05 17:46:58 1988 (225955D2)
fffff80e`1dfc0000 fffff80e`1dfe7000   luafv    luafv.sys    ***** Invalid (8A309BD4)
fffff80e`1dff0000 fffff80e`1dffb000   iLokDrvr iLokDrvr.sys Mon Dec 12 17:33:49 2016 (584F25CD)
fffff80e`1e000000 fffff80e`1e016000   dc1_controller dc1-controller.sys Fri Jan 11 13:42:33 2019 (5C38E399)
fffff80e`1e020000 fffff80e`1e148000   xboxgip  xboxgip.sys  Thu Mar 21 06:51:40 2030 (714497BC)
fffff80e`1e150000 fffff80e`1e163000   DevAuthE DevAuthE.sys Thu Aug 12 04:11:43 1971 (0307A53F)
fffff80e`1e170000 fffff80e`1e18b000   Microsoft_Bluetooth_Legacy_LEEnumerator Microsoft.Bluetooth.Legacy.LEEnumerator.sys Tue Nov 08 20:45:20 2033 (781C3130)
fffff80e`1e190000 fffff80e`1e1c6000   rfcomm   rfcomm.sys   ***** Invalid (B948614F)
fffff80e`1e1d0000 fffff80e`1e1f1000   BthEnum  BthEnum.sys  ***** Invalid (981E3A29)
fffff80e`1e200000 fffff80e`1e226000   bthpan   bthpan.sys   Tue Apr 09 20:48:19 2024 (6615E1D3)
fffff80e`1e230000 fffff80e`1e25b000   usbaudio usbaudio.sys ***** Invalid (B91768BD)
fffff80e`1e260000 fffff80e`1e326000   dxgmms2  dxgmms2.sys  ***** Invalid (84B4E417)
fffff80e`1e330000 fffff80e`1e341000   monitor  monitor.sys  ***** Invalid (8CE3B5D7)
fffff80e`1e360000 fffff80e`1e36f000   dump_diskdump dump_diskdump.sys Tue Jul 21 20:29:19 1992 (2A6CABDF)
fffff80e`1e390000 fffff80e`1e3ad000   dump_dumpfve dump_dumpfve.sys Thu Feb 20 22:54:47 1992 (29A47807)
fffff80e`1e3b0000 fffff80e`1e409000   esif_lf  esif_lf.sys  Wed Aug 10 14:43:26 2016 (57AB75CE)
fffff80e`1e410000 fffff80e`1e458000   WUDFRd   WUDFRd.sys   ***** Invalid (873FAAC2)
fffff80e`1e470000 fffff80e`1f52b000   nvlddmkm nvlddmkm.sys Sun Jun 24 11:38:02 2018 (5B2FBADA)
fffff80e`1f530000 fffff80e`1f5be000   UsbHub3  UsbHub3.sys  Thu Dec 09 19:31:51 2004 (41B8EE77)
fffff80e`1f5c0000 fffff80e`1f5d3000   xinputhid xinputhid.sys Tue Sep 01 23:44:29 2009 (4A9DEA1D)
fffff80e`1f5e0000 fffff80e`1f5ed000   WpdUpFltr WpdUpFltr.sys Fri Jun 07 12:53:41 2030 (71ABC195)
fffff80e`1f5f0000 fffff80e`1f5fe000   wrUrlFlt wrUrlFlt.sys Wed Mar 28 07:35:20 2018 (5ABB7DF8)
fffff80e`1f600000 fffff80e`1f65a000   audientusbaudio audientusbaudio.sys Wed Mar 28 06:19:23 2018 (5ABB6C2B)
fffff80e`1f660000 fffff80e`1f68f000   usbccgp  usbccgp.sys  ***** Invalid (8237B6CE)
fffff80e`1f690000 fffff80e`1f6b2000   ibtusb   ibtusb.sys   Tue Dec 05 23:53:12 2017 (5A2777B8)
fffff80e`1f6c0000 fffff80e`1f6d0000   audientusbaudioks audientusbaudioks.sys Wed Mar 28 06:19:58 2018 (5ABB6C4E)
fffff80e`1f6d0000 fffff80e`1ff4a000   Netwtw04 Netwtw04.sys Wed Mar 14 08:51:04 2018 (5AA91AB8)
fffff80e`1ff50000 fffff80e`20016000   wdiwifi  wdiwifi.sys  Sun Jan 17 01:51:48 1988 (21F05D84)
fffff80e`20020000 fffff80e`2002e000   vwifibus vwifibus.sys ***** Invalid (F93718A7)
fffff80e`20030000 fffff80e`2013d000   rt640x64 rt640x64.sys Fri May 11 02:07:38 2018 (5AF5332A)
fffff80e`20140000 fffff80e`2015f000   i8042prt i8042prt.sys Wed Nov 26 05:24:15 1975 (0B19A2CF)
fffff80e`20160000 fffff80e`2021c000   SynTP    SynTP.sys    Fri Feb 23 18:39:17 2018 (5A90A625)
fffff80e`20220000 fffff80e`2022e000   USBD     USBD.SYS     ***** Invalid (A9E461EC)
fffff80e`20230000 fffff80e`20243000   HIDPARSE HIDPARSE.SYS Sun Sep 04 15:19:34 2033 (77C62546)
fffff80e`20250000 fffff80e`20263000   kbdclass kbdclass.sys Sat May 22 14:26:35 2021 (60A94CDB)
fffff80e`20270000 fffff80e`20281000   mouclass mouclass.sys ***** Invalid (EC0AC493)
fffff80e`20290000 fffff80e`202ad000   HDAudBus HDAudBus.sys ***** Invalid (A500E2B9)
fffff80e`202b0000 fffff80e`20314000   portcls  portcls.sys  Fri Jan 14 22:16:13 1977 (0D3DAE7D)
fffff80e`20320000 fffff80e`20341000   drmk     drmk.sys     Mon Nov 04 00:43:10 2019 (5DBFBA6E)
fffff80e`20350000 fffff80e`203bb000   ks       ks.sys       ***** Invalid (CEE0FD48)
fffff80e`203c0000 fffff80e`203cf000   Smb_driver_Intel Smb_driver_Intel.sys Fri Feb 23 18:44:42 2018 (5A90A76A)
fffff80e`203d0000 fffff80e`203de000   Accelerometer Accelerometer.sys Sun Nov 19 23:26:28 2017 (5A125974)
fffff80e`203e0000 fffff80e`203ea000   WirelessButtonDriver64 WirelessButtonDriver64.sys Thu May 10 02:56:38 2018 (5AF3ED26)
fffff80e`203f0000 fffff80e`203fb000   mshidkmdf mshidkmdf.sys ***** Invalid (ACA4E8CA)
fffff80e`20400000 fffff80e`20433000   HIDCLASS HIDCLASS.SYS ***** Invalid (CAEE9942)
fffff80e`20440000 fffff80e`2044c000   wmiacpi  wmiacpi.sys  ***** Invalid (953BFBDD)
fffff80e`20450000 fffff80e`2045f000   CmBatt   CmBatt.sys   Sun Dec 16 09:53:00 1984 (1C2303CC)
fffff80e`20460000 fffff80e`20470000   BATTC    BATTC.SYS    Mon Jan 10 09:24:50 2000 (3879EBB2)
fffff80e`20470000 fffff80e`204ad000   intelppm intelppm.sys ***** Invalid (E0024307)
fffff80e`204b0000 fffff80e`204bb000   acpipagr acpipagr.sys Thu Jan 22 09:32:07 2037 (7E235FE7)
fffff80e`204c0000 fffff80e`204cd000   NdisVirtualBus NdisVirtualBus.sys ***** Invalid (9BCAE864)
fffff80e`204d0000 fffff80e`204dc000   swenum   swenum.sys   Thu Feb 03 21:15:43 1994 (2D51AFCF)
fffff80e`204e0000 fffff80e`204ee000   rdpbus   rdpbus.sys   Thu Aug 14 19:47:33 2031 (73E6FC15)
fffff80e`204f0000 fffff80e`204ff000   ksthunk  ksthunk.sys  ***** Invalid (EFF99365)
fffff80e`20500000 fffff80e`2051c000   BTHUSB   BTHUSB.sys   ***** Invalid (C99ECBDD)
fffff80e`20520000 fffff80e`21203000   igdkmd64 igdkmd64.sys Tue Oct 17 21:39:02 2017 (59E6B0B6)
fffff80e`21210000 fffff80e`21223000   dptf_cpu dptf_cpu.sys Wed Aug 10 14:43:11 2016 (57AB75BF)
fffff80e`21230000 fffff80e`2129f000   USBXHCI  USBXHCI.SYS  Mon Jun 22 10:03:04 1987 (20DD3918)
fffff80e`212a0000 fffff80e`212dc000   ucx01000 ucx01000.sys ***** Invalid (F946307A)
fffff80e`212e0000 fffff80e`21305000   USBSTOR  USBSTOR.SYS  Fri Jul 04 19:28:56 1975 (0A5B3138)
fffff80e`21310000 fffff80e`2133f000   iaLPSS2i_I2C iaLPSS2i_I2C.sys Wed Jun 14 00:00:59 2017 (5940B4FB)
fffff80e`21340000 fffff80e`21359000   SpbCx    SpbCx.sys    Sat Mar 18 14:41:45 1995 (2F6B2969)
fffff80e`21360000 fffff80e`21394000   TeeDriverW8x64 TeeDriverW8x64.sys Sun Nov 19 06:39:59 2017 (5A116D8F)
fffff80e`213a0000 fffff80e`213b8000   uaspstor uaspstor.sys Thu Jul 10 18:51:05 2003 (3F0DEDD9)
fffff80e`213c0000 fffff80e`213d2000   hidusb   hidusb.sys   Fri Jun 25 01:22:47 2027 (6C1DEEA7)
fffff80e`213e0000 fffff80e`213ef000   mouhid   mouhid.sys   ***** Invalid (81B3C45F)
fffff80e`213f0000 fffff80e`213fd000   UEFI     UEFI.sys     Tue May 15 08:09:49 2029 (6FABF90D)

Unloaded modules:
fffff80e`1e460000 fffff80e`1e470000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff80e`1a830000 fffff80e`1a851000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00021000
fffff80e`1e460000 fffff80e`1e470000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff80e`1a630000 fffff80e`1a63f000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff80e`1c100000 fffff80e`1c5cf000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  004CF000
fffff80e`1b200000 fffff80e`1b21d000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001D000
fffff80e`1df60000 fffff80e`1df6b000   WdmCompanion
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff80e`1dfc0000 fffff80e`1dfe5000   WudfPf.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff80e`1df40000 fffff80e`1df5c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff80e`1a560000 fffff80e`1a57c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff80e`1f600000 fffff80e`1f6c1000   RtsPer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  000C1000
fffff80e`204c0000 fffff80e`20519000   esif_lf.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00059000
fffff80e`213a0000 fffff80e`213e8000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00048000
fffff80e`212e0000 fffff80e`21305000   WudfPf.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff80e`1b920000 fffff80e`1b93b000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff80e`19880000 fffff80e`1988f000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
start             end                 module name
fffff80e`203d0000 fffff80e`203de000   Accelerometer Accelerometer.sys Sun Nov 19 23:26:28 2017 (5A125974)
fffff80e`198a0000 fffff80e`19945000   ACPI     ACPI.sys     ***** Invalid (A0D961E5)
fffff80e`18ad0000 fffff80e`18af3000   acpiex   acpiex.sys   ***** Invalid (A0DBA1E7)
fffff80e`204b0000 fffff80e`204bb000   acpipagr acpipagr.sys Thu Jan 22 09:32:07 2037 (7E235FE7)
fffff80e`1b6e0000 fffff80e`1b77e000   afd      afd.sys      ***** Invalid (E5C2C597)
fffff80e`1b6c0000 fffff80e`1b6d3000   afunix   afunix.sys   Tue Apr 18 10:12:59 2017 (58F61EEB)
fffff80e`1a700000 fffff80e`1a727000   AgileVpn AgileVpn.sys ***** Invalid (B96F50A5)
fffff80e`1b9c0000 fffff80e`1ba05000   ahcache  ahcache.sys  ***** Invalid (AAB4C5E7)
fffff80e`1f600000 fffff80e`1f65a000   audientusbaudio audientusbaudio.sys Wed Mar 28 06:19:23 2018 (5ABB6C2B)
fffff80e`1f6c0000 fffff80e`1f6d0000   audientusbaudioks audientusbaudioks.sys Wed Mar 28 06:19:58 2018 (5ABB6C4E)
fffff80e`1b9a0000 fffff80e`1b9b4000   bam      bam.sys      ***** Invalid (F0EF718F)
fffff80e`1b5d0000 fffff80e`1b5e6000   BasicDisplay BasicDisplay.sys Wed Jul 13 00:57:10 1988 (22DAEDA6)
fffff80e`1b5f0000 fffff80e`1b600000   BasicRender BasicRender.sys Thu Jun 10 03:53:52 1999 (375F6F10)
fffff80e`20460000 fffff80e`20470000   BATTC    BATTC.SYS    Mon Jan 10 09:24:50 2000 (3879EBB2)
fffff80e`1b290000 fffff80e`1b29a000   Beep     Beep.SYS     ***** Invalid (E3C311B5)
fffff80e`18a50000 fffff80e`18a5b000   BOOTVID  BOOTVID.dll  ***** Invalid (A81902E1)
fffff80e`1adc0000 fffff80e`1ade1000   bowser   bowser.sys   Fri Mar 28 15:00:24 2008 (47ED4048)
fffff80e`1e1d0000 fffff80e`1e1f1000   BthEnum  BthEnum.sys  ***** Invalid (981E3A29)
fffff80e`1e200000 fffff80e`1e226000   bthpan   bthpan.sys   Tue Apr 09 20:48:19 2024 (6615E1D3)
fffff80e`1de30000 fffff80e`1df3c000   bthport  bthport.sys  Sun Nov 07 17:32:02 2010 (4CD728E2)
fffff80e`20500000 fffff80e`2051c000   BTHUSB   BTHUSB.sys   ***** Invalid (C99ECBDD)
fffff80e`1ba60000 fffff80e`1ba75000   CAD      CAD.sys      ***** Invalid (D320A237)
ffffedc9`6bfc0000 ffffedc9`6bfff000   cdd      cdd.dll      unavailable (00000000)
fffff80e`1b220000 fffff80e`1b24e000   cdrom    cdrom.sys    Mon Jul 31 02:59:18 1978 (1022CDC6)
fffff80e`19310000 fffff80e`19329000   CEA      CEA.sys      Wed Sep 16 01:57:44 1987 (214E2858)
fffff80e`19100000 fffff80e`191b5000   CI       CI.dll       ***** Invalid (CFB9E6DF)
fffff80e`1af70000 fffff80e`1afdb000   CLASSPNP CLASSPNP.SYS ***** Invalid (E3348094)
fffff80e`1bf80000 fffff80e`1bfee000   cldflt   cldflt.sys   Mon May 16 22:25:49 2005 (4289562D)
fffff80e`18d70000 fffff80e`18dd4000   CLFS     CLFS.SYS     ***** Invalid (FF43C502)
fffff80e`18fd0000 fffff80e`190d2000   clipsp   clipsp.sys   Wed Apr 11 00:05:31 2018 (5ACD898B)
fffff80e`20450000 fffff80e`2045f000   CmBatt   CmBatt.sys   Sun Dec 16 09:53:00 1984 (1C2303CC)
fffff80e`190e0000 fffff80e`190ee000   cmimcext cmimcext.sys Wed Jul 02 11:10:18 1986 (1F09445A)
fffff80e`18e00000 fffff80e`18eb2000   cng      cng.sys      ***** Invalid (9A741A9D)
fffff80e`1ba10000 fffff80e`1ba21000   CompositeBus CompositeBus.sys ***** Invalid (E21758C8)
fffff80e`1c5c0000 fffff80e`1c5d2000   condrv   condrv.sys   ***** Invalid (80BAEE40)
fffff80e`1a600000 fffff80e`1a61b000   crashdmp crashdmp.sys Tue Jul 11 02:42:25 2028 (6E159E51)
fffff80e`1b2a0000 fffff80e`1b2c6000   ctxusbm  ctxusbm.sys  Mon Aug 29 09:14:23 2016 (57C4352F)
fffff80e`1e000000 fffff80e`1e016000   dc1_controller dc1-controller.sys Fri Jan 11 13:42:33 2019 (5C38E399)
fffff80e`1e150000 fffff80e`1e163000   DevAuthE DevAuthE.sys Thu Aug 12 04:11:43 1971 (0307A53F)
fffff80e`1b8f0000 fffff80e`1b919000   dfsc     dfsc.sys     ***** Invalid (C86C4181)
fffff80e`199d0000 fffff80e`199ec000   disk     disk.sys     Thu Aug 03 10:40:22 1989 (24D85956)
fffff80e`21210000 fffff80e`21223000   dptf_cpu dptf_cpu.sys Wed Aug 10 14:43:11 2016 (57AB75BF)
fffff80e`20320000 fffff80e`20341000   drmk     drmk.sys     Mon Nov 04 00:43:10 2019 (5DBFBA6E)
fffff80e`1e360000 fffff80e`1e36f000   dump_diskdump dump_diskdump.sys Tue Jul 21 20:29:19 1992 (2A6CABDF)
fffff80e`1e390000 fffff80e`1e3ad000   dump_dumpfve dump_dumpfve.sys Thu Feb 20 22:54:47 1992 (29A47807)
fffff80e`1ba80000 fffff80e`1bf4f000   dump_iaStorA dump_iaStorA.sys Tue Sep 13 10:45:46 2016 (57D8111A)
fffff80e`1b2d0000 fffff80e`1b587000   dxgkrnl  dxgkrnl.sys  ***** Invalid (984AD74D)
fffff80e`1e260000 fffff80e`1e326000   dxgmms2  dxgmms2.sys  ***** Invalid (84B4E417)
fffff80e`1e3b0000 fffff80e`1e409000   esif_lf  esif_lf.sys  Wed Aug 10 14:43:26 2016 (57AB75CE)
fffff80e`1a860000 fffff80e`1a87d000   farflt   farflt.sys   Mon May 14 11:15:27 2018 (5AF9A80F)
fffff80e`1b940000 fffff80e`1b9a0000   fastfat  fastfat.SYS  Tue May 21 17:53:07 1991 (283996C3)
fffff80e`1b250000 fffff80e`1b264000   filecrypt filecrypt.sys ***** Invalid (BDE52434)
fffff80e`1a580000 fffff80e`1a59a000   fileinfo fileinfo.sys ***** Invalid (D50D6775)
fffff80e`18a60000 fffff80e`18ac9000   FLTMGR   FLTMGR.SYS   ***** Invalid (8801E691)
fffff80e`19ed0000 fffff80e`19edd000   Fs_Rec   Fs_Rec.sys   Wed Oct 13 15:09:20 1971 (0359FC60)
fffff80e`19f40000 fffff80e`19ffc000   fvevol   fvevol.sys   Fri Mar 29 22:47:16 2030 (715003B4)
fffff80e`19bf0000 fffff80e`19c66000   fwpkclnt fwpkclnt.sys Thu Nov 08 04:04:48 1990 (27391FB0)
fffff80e`1b8b0000 fffff80e`1b8ba000   gpuenergydrv gpuenergydrv.sys ***** Invalid (A5E021DD)
fffff803`cbf7d000 fffff803`cc009000   hal      hal.dll      Tue Apr 05 17:12:34 2005 (4252FF42)
fffff80e`20290000 fffff80e`202ad000   HDAudBus HDAudBus.sys ***** Invalid (A500E2B9)
fffff80e`20400000 fffff80e`20433000   HIDCLASS HIDCLASS.SYS ***** Invalid (CAEE9942)
fffff80e`20230000 fffff80e`20243000   HIDPARSE HIDPARSE.SYS Sun Sep 04 15:19:34 2033 (77C62546)
fffff80e`213c0000 fffff80e`213d2000   hidusb   hidusb.sys   Fri Jun 25 01:22:47 2027 (6C1DEEA7)
fffff80e`19750000 fffff80e`1975b000   hpdskflt hpdskflt.sys Sun Nov 19 23:26:13 2017 (5A125965)
fffff80e`1aba0000 fffff80e`1aca2000   HTTP     HTTP.sys     ***** Invalid (A9BB6161)
fffff80e`20140000 fffff80e`2015f000   i8042prt i8042prt.sys Wed Nov 26 05:24:15 1975 (0B19A2CF)
fffff80e`21310000 fffff80e`2133f000   iaLPSS2i_I2C iaLPSS2i_I2C.sys Wed Jun 14 00:00:59 2017 (5940B4FB)
fffff80e`1a000000 fffff80e`1a4cf000   iaStorA  iaStorA.sys  Tue Sep 13 10:45:46 2016 (57D8111A)
fffff80e`1f690000 fffff80e`1f6b2000   ibtusb   ibtusb.sys   Tue Dec 05 23:53:12 2017 (5A2777B8)
fffff80e`20520000 fffff80e`21203000   igdkmd64 igdkmd64.sys Tue Oct 17 21:39:02 2017 (59E6B0B6)
fffff80e`1dff0000 fffff80e`1dffb000   iLokDrvr iLokDrvr.sys Mon Dec 12 17:33:49 2016 (584F25CD)
fffff80e`1dd90000 fffff80e`1de2a000   IntcDAud IntcDAud.sys Mon May 07 07:03:23 2018 (5AF0327B)
fffff80e`19240000 fffff80e`1926f000   intelpep intelpep.sys Mon Jan 07 04:28:21 2019 (5C331BB5)
fffff80e`20470000 fffff80e`204ad000   intelppm intelppm.sys ***** Invalid (E0024307)
fffff80e`19860000 fffff80e`19871000   iorate   iorate.sys   ***** Invalid (9B6D3859)
fffff80e`20250000 fffff80e`20263000   kbdclass kbdclass.sys Sat May 22 14:26:35 2021 (60A94CDB)
fffff803`cc200000 fffff803`cc20b000   kd       kd.dll       ***** Invalid (FC97B795)
fffff80e`1ba30000 fffff80e`1ba3d000   kdnic    kdnic.sys    Thu Sep 21 16:45:00 2028 (6E754FCC)
fffff80e`20350000 fffff80e`203bb000   ks       ks.sys       ***** Invalid (CEE0FD48)
fffff80e`18d20000 fffff80e`18d4a000   ksecdd   ksecdd.sys   ***** Invalid (E28CCD99)
fffff80e`19ee0000 fffff80e`19f10000   ksecpkg  ksecpkg.sys  Tue Oct 27 23:16:33 2026 (6AE16911)
fffff80e`204f0000 fffff80e`204ff000   ksthunk  ksthunk.sys  ***** Invalid (EFF99365)
fffff80e`1c520000 fffff80e`1c536000   lltdio   lltdio.sys   Tue Oct 19 06:57:28 2010 (4CBD7998)
fffff80e`1dfc0000 fffff80e`1dfe7000   luafv    luafv.sys    ***** Invalid (8A309BD4)
fffff80e`1b8c0000 fffff80e`1b8e6000   mbae64   mbae64.sys   Tue Mar 27 11:15:46 2018 (5ABA6022)
fffff80e`1a880000 fffff80e`1a88d000   mbam     mbam.sys     Sat Apr 07 14:55:35 2018 (5AC91427)
fffff80e`1c010000 fffff80e`1c041000   MbamChameleon MbamChameleon.sys Wed Apr 25 15:39:20 2018 (5AE0D968)
fffff80e`1a7f0000 fffff80e`1a830000   mbamswissarmy mbamswissarmy.sys Wed Mar 07 10:54:57 2018 (5AA00B51)
fffff80e`18b60000 fffff80e`18cb9000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Wed Dec 27 11:18:02 2034 (7A3D793A)
fffff80e`1e170000 fffff80e`1e18b000   Microsoft_Bluetooth_Legacy_LEEnumerator Microsoft.Bluetooth.Legacy.LEEnumerator.sys Tue Nov 08 20:45:20 2033 (781C3130)
fffff80e`1df40000 fffff80e`1df53000   mmcss    mmcss.sys    Thu Feb 09 07:38:08 2017 (589C62B0)
fffff80e`1e330000 fffff80e`1e341000   monitor  monitor.sys  ***** Invalid (8CE3B5D7)
fffff80e`20270000 fffff80e`20281000   mouclass mouclass.sys ***** Invalid (EC0AC493)
fffff80e`213e0000 fffff80e`213ef000   mouhid   mouhid.sys   ***** Invalid (81B3C45F)
fffff80e`19480000 fffff80e`1949e000   mountmgr mountmgr.sys Sun Jul 11 01:36:45 2010 (4C39586D)
fffff80e`1c5e0000 fffff80e`1c5f9000   mpsdrv   mpsdrv.sys   Mon Jan 30 23:13:48 2023 (63D8957C)
fffff80e`1adf0000 fffff80e`1ae72000   mrxsmb   mrxsmb.sys   Tue Apr 27 15:31:30 2010 (4BD73B92)
fffff80e`1ae80000 fffff80e`1aebd000   mrxsmb20 mrxsmb20.sys ***** Invalid (EC01DE9F)
fffff80e`1b620000 fffff80e`1b630000   Msfs     Msfs.SYS     ***** Invalid (BD01B948)
fffff80e`203f0000 fffff80e`203fb000   mshidkmdf mshidkmdf.sys ***** Invalid (ACA4E8CA)
fffff80e`19960000 fffff80e`1996b000   msisadrv msisadrv.sys Sat Apr 18 20:48:50 1970 (008E6D72)
fffff80e`1c540000 fffff80e`1c55a000   mslldp   mslldp.sys   Thu Apr 05 07:37:22 1979 (116A02F2)
fffff80e`18cc0000 fffff80e`18d20000   msrpc    msrpc.sys    ***** Invalid (D522F4A7)
fffff80e`1b8a0000 fffff80e`1b8af000   mssmbios mssmbios.sys ***** Invalid (B89DA2EF)
fffff80e`19830000 fffff80e`19854000   mup      mup.sys      ***** Invalid (84DBF4DF)
fffff80e`1a890000 fffff80e`1a8b1000   mwac     mwac.sys     Wed May 16 09:52:49 2018 (5AFC37B1)
fffff80e`19a90000 fffff80e`19bd1000   NDIS     NDIS.SYS     Sat Jul 29 14:07:48 2034 (79768074)
fffff80e`1df60000 fffff80e`1df6f000   ndistapi ndistapi.sys Sun Apr 12 21:29:09 1970 (00868DE5)
fffff80e`1c5a0000 fffff80e`1c5b6000   ndisuio  ndisuio.sys  ***** Invalid (F3C01832)
fffff80e`204c0000 fffff80e`204cd000   NdisVirtualBus NdisVirtualBus.sys ***** Invalid (9BCAE864)
fffff80e`1a790000 fffff80e`1a7c7000   ndiswan  ndiswan.sys  Tue Aug 11 17:51:57 1987 (211F91FD)
fffff80e`1a6e0000 fffff80e`1a6f6000   NDProxy  NDProxy.sys  Fri Aug 10 19:19:33 2018 (5B6E1D85)
fffff80e`1aec0000 fffff80e`1aee7000   Ndu      Ndu.sys      ***** Invalid (9D155C46)
fffff80e`1b7d0000 fffff80e`1b7e2000   netbios  netbios.sys  ***** Invalid (DBD51B1C)
fffff80e`1b660000 fffff80e`1b6b4000   netbt    netbt.sys    ***** Invalid (CA7943CA)
fffff80e`19a00000 fffff80e`19a89000   NETIO    NETIO.SYS    Fri Jul 29 13:31:39 2022 (62E4197B)
fffff80e`1f6d0000 fffff80e`1ff4a000   Netwtw04 Netwtw04.sys Wed Mar 14 08:51:04 2018 (5AA91AB8)
fffff80e`1b600000 fffff80e`1b61b000   Npfs     Npfs.SYS     ***** Invalid (927DEFE8)
fffff80e`1b890000 fffff80e`1b89d000   npsvctrig npsvctrig.sys ***** Invalid (E9804B86)
fffff80e`1b870000 fffff80e`1b882000   nsiproxy nsiproxy.sys ***** Invalid (DC8AB40C)
fffff803`cb61c000 fffff803`cbf7d000   nt       ntkrnlmp.exe Fri Jul 06 02:57:56 2018 (5B3F12F4)
fffff80e`19c70000 fffff80e`19ecb000   Ntfs     Ntfs.sys     Wed May 15 14:13:02 1991 (28317A2E)
fffff80e`190f0000 fffff80e`190fc000   ntosext  ntosext.sys  Wed May 17 13:41:19 1972 (0477FD3F)
fffff80e`1b280000 fffff80e`1b28a000   Null     Null.SYS     Mon Jun 30 01:17:31 2031 (73AAA46B)
fffff80e`1e470000 fffff80e`1f52b000   nvlddmkm nvlddmkm.sys Sun Jun 24 11:38:02 2018 (5B2FBADA)
fffff80e`1ab10000 fffff80e`1ab97000   nwifi    nwifi.sys    ***** Invalid (B0BE7268)
fffff80e`1b7a0000 fffff80e`1b7c9000   pacer    pacer.sys    ***** Invalid (89D4206A)
fffff80e`19330000 fffff80e`1935d000   partmgr  partmgr.sys  Wed Jan 13 15:45:53 2021 (5FFF5C01)
fffff80e`19970000 fffff80e`199d0000   pci      pci.sys      ***** Invalid (DD60CB9A)
fffff80e`192a0000 fffff80e`192b4000   pcw      pcw.sys      Thu Apr 16 09:50:38 2026 (69E0E92E)
fffff80e`192e0000 fffff80e`19308000   pdc      pdc.sys      ***** Invalid (E1E24B35)
fffff80e`1a620000 fffff80e`1a6e0000   peauth   peauth.sys   Thu Sep 11 22:56:58 2036 (7D74B6FA)
fffff80e`202b0000 fffff80e`20314000   portcls  portcls.sys  Fri Jan 14 22:16:13 1977 (0D3DAE7D)
fffff80e`18a30000 fffff80e`18a47000   PSHED    PSHED.dll    ***** Invalid (FCF5BFC7)
fffff80e`1a730000 fffff80e`1a750000   rasl2tp  rasl2tp.sys  ***** Invalid (D79956B1)
fffff80e`1a770000 fffff80e`1a78b000   raspppoe raspppoe.sys ***** Invalid (D6217902)
fffff80e`1a750000 fffff80e`1a76f000   raspptp  raspptp.sys  ***** Invalid (DEE494F8)
fffff80e`1b920000 fffff80e`1b93b000   rassstp  rassstp.sys  ***** Invalid (CD5601B9)
fffff80e`1b7f0000 fffff80e`1b866000   rdbss    rdbss.sys    ***** Invalid (9FD233A8)
fffff80e`204e0000 fffff80e`204ee000   rdpbus   rdpbus.sys   Thu Aug 14 19:47:33 2031 (73E6FC15)
fffff80e`197e0000 fffff80e`1982c000   rdyboost rdyboost.sys Thu Oct 21 21:19:40 1971 (0364DF2C)
fffff80e`1e190000 fffff80e`1e1c6000   rfcomm   rfcomm.sys   ***** Invalid (B948614F)
fffff80e`1c580000 fffff80e`1c59a000   rspndr   rspndr.sys   ***** Invalid (9EF4AC0E)
fffff80e`20030000 fffff80e`2013d000   rt640x64 rt640x64.sys Fri May 11 02:07:38 2018 (5AF5332A)
fffff80e`1d800000 fffff80e`1dd83000   RTKVHD64 RTKVHD64.sys Tue Dec 20 05:28:35 2016 (585907D3)
fffff80e`191e0000 fffff80e`191f5000   SgrmAgent SgrmAgent.sys Thu Feb 02 09:30:36 2012 (4F2A9E0C)
fffff80e`191d0000 fffff80e`191df000   SleepStudyHelper SleepStudyHelper.sys Wed Dec 13 11:00:17 2017 (5A314E91)
fffff80e`203c0000 fffff80e`203cf000   Smb_driver_Intel Smb_driver_Intel.sys Fri Feb 23 18:44:42 2018 (5A90A76A)
fffff80e`19360000 fffff80e`193f9000   spaceport spaceport.sys Mon May 10 07:17:48 2004 (409F64DC)
fffff80e`21340000 fffff80e`21359000   SpbCx    SpbCx.sys    Sat Mar 18 14:41:45 1995 (2F6B2969)
fffff80e`1ad00000 fffff80e`1adbc000   srv2     srv2.sys     Thu Dec 15 12:59:17 1977 (0EF6D275)
fffff80e`1acb0000 fffff80e`1acf8000   srvnet   srvnet.sys   ***** Invalid (F2156005)
fffff80e`1a4d0000 fffff80e`1a55f000   storport storport.sys Sat Oct 05 11:15:35 2024 (67015817)
fffff80e`1bff0000 fffff80e`1c009000   storqosflt storqosflt.sys Wed Jan 05 12:54:03 2011 (4D24B03B)
fffff80e`204d0000 fffff80e`204dc000   swenum   swenum.sys   Thu Feb 03 21:15:43 1994 (2D51AFCF)
fffff80e`20160000 fffff80e`2021c000   SynTP    SynTP.sys    Fri Feb 23 18:39:17 2018 (5A90A625)
fffff80e`1b270000 fffff80e`1b27d000   tbs      tbs.sys      ***** Invalid (81533658)
fffff80e`194a0000 fffff80e`19743000   tcpip    tcpip.sys    ***** Invalid (E2BB1032)
fffff80e`1b200000 fffff80e`1b213000   tcpipreg tcpipreg.sys Fri Aug 03 03:02:15 2029 (701528F7)
fffff80e`19be0000 fffff80e`19bf0000   TDI      TDI.SYS      ***** Invalid (814E4748)
fffff80e`1b630000 fffff80e`1b653000   tdx      tdx.sys      ***** Invalid (9F3F7265)
fffff80e`21360000 fffff80e`21394000   TeeDriverW8x64 TeeDriverW8x64.sys Sun Nov 19 06:39:59 2017 (5A116D8F)
fffff80e`18a00000 fffff80e`18a24000   tm       tm.sys       ***** Invalid (DA2D5B6C)
fffff80e`19200000 fffff80e`1923d000   tpm      tpm.sys      ***** Invalid (840D39AF)
fffff80e`213a0000 fffff80e`213b8000   uaspstor uaspstor.sys Thu Jul 10 18:51:05 2003 (3F0DEDD9)
fffff80e`212a0000 fffff80e`212dc000   ucx01000 ucx01000.sys ***** Invalid (F946307A)
fffff80e`213f0000 fffff80e`213fd000   UEFI     UEFI.sys     Tue May 15 08:09:49 2029 (6FABF90D)
fffff80e`1ba40000 fffff80e`1ba55000   umbus    umbus.sys    Thu Mar 01 03:22:35 1973 (05F32A4B)
fffff80e`1e230000 fffff80e`1e25b000   usbaudio usbaudio.sys ***** Invalid (B91768BD)
fffff80e`1f660000 fffff80e`1f68f000   usbccgp  usbccgp.sys  ***** Invalid (8237B6CE)
fffff80e`20220000 fffff80e`2022e000   USBD     USBD.SYS     ***** Invalid (A9E461EC)
fffff80e`1f530000 fffff80e`1f5be000   UsbHub3  UsbHub3.sys  Thu Dec 09 19:31:51 2004 (41B8EE77)
fffff80e`212e0000 fffff80e`21305000   USBSTOR  USBSTOR.SYS  Fri Jul 04 19:28:56 1975 (0A5B3138)
fffff80e`1df70000 fffff80e`1dfbc000   usbvideo usbvideo.sys Tue Apr 05 17:46:58 1988 (225955D2)
fffff80e`21230000 fffff80e`2129f000   USBXHCI  USBXHCI.SYS  Mon Jun 22 10:03:04 1987 (20DD3918)
fffff80e`192c0000 fffff80e`192d2000   vdrvroot vdrvroot.sys Wed Nov 28 00:36:24 2035 (7BF7DAD8)
fffff80e`1b5b0000 fffff80e`1b5ca000   vmbkmclr vmbkmclr.sys ***** Invalid (D822A885)
fffff80e`19400000 fffff80e`19419000   volmgr   volmgr.sys   ***** Invalid (A6ED6AB7)
fffff80e`19420000 fffff80e`1947e000   volmgrx  volmgrx.sys  unavailable (00000000)
fffff80e`19770000 fffff80e`197d7000   volsnap  volsnap.sys  ***** Invalid (BC6DEACD)
fffff80e`19760000 fffff80e`1976b000   volume   volume.sys   ***** Invalid (BBE7F72B)
fffff80e`20020000 fffff80e`2002e000   vwifibus vwifibus.sys ***** Invalid (F93718A7)
fffff80e`1b780000 fffff80e`1b79a000   vwififlt vwififlt.sys ***** Invalid (E4E7506A)
fffff80e`1a7d0000 fffff80e`1a7e2000   vwifimp  vwifimp.sys  Thu Apr 11 12:37:15 1991 (280490BB)
fffff80e`1c560000 fffff80e`1c57b000   wanarp   wanarp.sys   ***** Invalid (D8D929B9)
fffff80e`1b590000 fffff80e`1b5a4000   watchdog watchdog.sys Thu Aug 23 04:44:31 2029 (702F9EEF)
fffff80e`1bf50000 fffff80e`1bf78000   wcifs    wcifs.sys    Mon Dec 16 20:40:30 2024 (6760D68E)
fffff80e`18ec0000 fffff80e`18fa4000   Wdf01000 Wdf01000.sys ***** Invalid (BD4591F4)
fffff80e`18fb0000 fffff80e`18fc3000   WDFLDR   WDFLDR.SYS   Thu Jul 26 22:22:47 2012 (5011FB77)
fffff80e`1ff50000 fffff80e`20016000   wdiwifi  wdiwifi.sys  Sun Jan 17 01:51:48 1988 (21F05D84)
fffff80e`18d50000 fffff80e`18d61000   werkernel werkernel.sys Tue Apr 29 07:25:50 1980 (136C293E)
fffff80e`19f10000 fffff80e`19f3d000   wfplwfs  wfplwfs.sys  Sat Feb 09 21:18:15 2030 (7110B4E7)
ffffedc9`6ba50000 ffffedc9`6bacc000   win32k   win32k.sys   Sun Jun 24 04:43:35 2001 (3B35A837)
ffffedc9`6bd80000 ffffedc9`6bfb4000   win32kbase win32kbase.sys ***** Invalid (C6F4F285)
ffffedc9`6b600000 ffffedc9`6b990000   win32kfull win32kfull.sys ***** Invalid (8479EB66)
fffff80e`19270000 fffff80e`19286000   WindowsTrustedRT WindowsTrustedRT.sys ***** Invalid (C5D5EE17)
fffff80e`19290000 fffff80e`1929b000   WindowsTrustedRTProxy WindowsTrustedRTProxy.sys Fri Apr 27 06:41:18 2001 (3AE94CCE)
fffff80e`203e0000 fffff80e`203ea000   WirelessButtonDriver64 WirelessButtonDriver64.sys Thu May 10 02:56:38 2018 (5AF3ED26)
fffff80e`20440000 fffff80e`2044c000   wmiacpi  wmiacpi.sys  ***** Invalid (953BFBDD)
fffff80e`19950000 fffff80e`1995c000   WMILIB   WMILIB.SYS   Sun Jul 20 15:38:32 2008 (48839438)
fffff80e`1a5a0000 fffff80e`1a5db000   Wof      Wof.sys      Mon Sep 29 09:47:10 2036 (7D8BB8DE)
fffff80e`1f5e0000 fffff80e`1f5ed000   WpdUpFltr WpdUpFltr.sys Fri Jun 07 12:53:41 2030 (71ABC195)
fffff80e`191c0000 fffff80e`191ce000   WppRecorder WppRecorder.sys Sun Jun 28 19:29:10 2009 (4A47FCC6)
fffff80e`1a5e0000 fffff80e`1a5fe000   WRkrn    WRkrn.sys    Mon Mar 19 13:39:19 2018 (5AAFF5C7)
fffff80e`1f5f0000 fffff80e`1f5fe000   wrUrlFlt wrUrlFlt.sys Wed Mar 28 07:35:20 2018 (5ABB7DF8)
fffff80e`1e410000 fffff80e`1e458000   WUDFRd   WUDFRd.sys   ***** Invalid (873FAAC2)
fffff80e`1e020000 fffff80e`1e148000   xboxgip  xboxgip.sys  Thu Mar 21 06:51:40 2030 (714497BC)
fffff80e`1f5c0000 fffff80e`1f5d3000   xinputhid xinputhid.sys Tue Sep 01 23:44:29 2009 (4A9DEA1D)

Unloaded modules:
fffff80e`1e460000 fffff80e`1e470000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff80e`1a830000 fffff80e`1a851000   mwac.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00021000
fffff80e`1e460000 fffff80e`1e470000   MSKSSRV.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff80e`1a630000 fffff80e`1a63f000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
fffff80e`1c100000 fffff80e`1c5cf000   dump_iaStorA
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  004CF000
fffff80e`1b200000 fffff80e`1b21d000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001D000
fffff80e`1df60000 fffff80e`1df6b000   WdmCompanion
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff80e`1dfc0000 fffff80e`1dfe5000   WudfPf.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff80e`1df40000 fffff80e`1df5c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff80e`1a560000 fffff80e`1a57c000   EhStorClass.
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001C000
fffff80e`1f600000 fffff80e`1f6c1000   RtsPer.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  000C1000
fffff80e`204c0000 fffff80e`20519000   esif_lf.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00059000
fffff80e`213a0000 fffff80e`213e8000   WUDFRd.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00048000
fffff80e`212e0000 fffff80e`21305000   WudfPf.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00025000
fffff80e`1b920000 fffff80e`1b93b000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
fffff80e`19880000 fffff80e`1988f000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000F000
Bugcheck code 000000D1
Arguments 00000000`00000050 00000000`00000002 00000000`00000000 fffff80e`19a17304

 

Share this post


Link to post
Share on other sites

Had my first BSOD since running Driver Verifier but am unable zip the .dmp file from the Windows folder (7-Zip says that 'Access is denied') When I check the security levels for that folder they state that I have full read and write access. Also, when my system rebooted, I lost my taskbar at the bottom of the screen

Share this post


Link to post
Share on other sites

Please accept my apologies for mucking you about. Finally managed to zip the dmp file as per attached. I have only had the one BSOD since I started running Driver Verifier. However, I do notice that upon rebooting I sometimes have a taskbar with quick access icons, and other times not....?

071218-52140-01.zip

Share this post


Link to post
Share on other sites

Sorry for the delay in responding.  The wife broke her ankle and I've had to take over her chores at the barn for a while.

Only 1 of the memory dumps was an actual Verifier enabled dump - but they all blamed the same thing - NETIO.sys
There's traces of a MalwareBytes driver in the stack text, but it also has unidentified addresses/functions - which may be the actual cause.
It's also possible that this could be a hardware issue.
Unfortunately, that makes things very difficult to troubleshoot.

I'd start by removing all the XBox stuff - as those drivers are older and are known to be a bit quirky at times.
I also wonder about the USB audio stuff (their drivers tend to be a bit quirky also).  I'd suggest temporarily removing all of it to see if that helps.
 

Then the easiest route would be to:
1) perform these free hardware diagnostics:  http://www.carrona.org/hwdiag.html
2) then try a clean boot ( Perform a Clean Boot:  http://www.thewindowsclub.com/what-is-clean-boot-state-in-windows  )

If that stops the problem, then re-enable things a few at a time until you figure out what's causing it.
Then uninstall the problem program (from Start...Settings...Apps...Apps & Features - if you don't find it there, check the right sidebar for Programs and Features and see if you can remove it from there).

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Sat Jul 14 22:04:15.362 2018 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\071518-79109-01.dmp]
Windows 10 Kernel Version 17134 MP (8 procs) Free x64
Built by: 17134.1.amd64fre.rs4_release.180410-1804
System Uptime:0 days 0:11:14.337
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by :NETIO.SYS ( NETIO!StreamInvokeCalloutAndNormalizeAction+214 )
BugCheck D1, {50, 2, 0, fffff808e8dd7304}
BugCheck Info: DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
Arguments:
Arg1: 0000000000000050, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff808e8dd7304, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  MBAMService.exe
FAILURE_BUCKET_ID: AV_VRF_NETIO!StreamInvokeCalloutAndNormalizeAction
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Jul 14 21:51:33.845 2018 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\071518-88890-01.dmp]
Windows 10 Kernel Version 17134 MP (8 procs) Free x64
Built by: 17134.1.amd64fre.rs4_release.180410-1804
System Uptime:0 days 20:24:01.814
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by :memory_corruption
BugCheck D1, {50, 2, 0, fffff80a15817304}
BugCheck Info: DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
Arguments:
Arg1: 0000000000000050, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80a15817304, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  MBAMService.exe
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jul 12 06:48:07.070 2018 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\071218-52140-01.dmp]
Windows 10 Kernel Version 17134 MP (8 procs) Free x64
Built by: 17134.1.amd64fre.rs4_release.180410-1804
System Uptime:0 days 22:39:28.317
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by :NETIO.SYS ( NETIO!StreamInvokeCalloutAndNormalizeAction+5c )
BugCheck D1, {8, 2, 0, fffff8043b36714c}
BugCheck Info: DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8043b36714c, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME:  MBAMService.exe
FAILURE_BUCKET_ID: AV_VRF_NETIO!StreamInvokeCalloutAndNormalizeAction
CPUID:        "Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz"
MaxSpeed:     2600
CurrentSpeed: 2592
  BIOS Version                  F.48
  BIOS Release Date             06/22/2018
  Manufacturer                  HP
  Product Name                  OMEN by HP Laptop
  Baseboard Product             825B
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
 


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:
**************************Sat Jul 14 22:04:15.362 2018 (UTC - 4:00)**************************
DevAuthE.sys                                  Thu Aug 12 04:11:43 1971 (0307A53F)
xinputhid.sys                                 Tue Sep  1 23:44:29 2009 (4A9DEA1D)
SgrmAgent.sys                                 Thu Feb  2 09:30:36 2012 (4F2A9E0C)
dptf_cpu.sys                                  Wed Aug 10 14:43:11 2016 (57AB75BF)
esif_lf.sys                                   Wed Aug 10 14:43:26 2016 (57AB75CE)
ctxusbm.sys                                   Mon Aug 29 09:14:23 2016 (57C4352F)
teVirtualMIDI64.sys                           Wed Aug 31 05:56:57 2016 (57C6A9E9)
iaStorA.sys                                   Tue Sep 13 10:45:46 2016 (57D8111A)
iLokDrvr.sys                                  Mon Dec 12 17:33:49 2016 (584F25CD)
RTKVHD64.sys                                  Tue Dec 20 05:28:35 2016 (585907D3)
afunix.sys                                    Tue Apr 18 10:12:59 2017 (58F61EEB)
iaLPSS2i_I2C.sys                              Wed Jun 14 00:00:59 2017 (5940B4FB)
igdkmd64.sys                                  Tue Oct 17 21:39:02 2017 (59E6B0B6)
TeeDriverW8x64.sys                            Sun Nov 19 06:39:59 2017 (5A116D8F)
hpdskflt.sys                                  Sun Nov 19 23:26:13 2017 (5A125965)
Accelerometer.sys                             Sun Nov 19 23:26:28 2017 (5A125974)
ibtusb.sys                                    Tue Dec  5 23:53:12 2017 (5A2777B8)
SynTP.sys                                     Fri Feb 23 18:39:17 2018 (5A90A625)
Smb_driver_Intel.sys                          Fri Feb 23 18:44:42 2018 (5A90A76A)
mbamswissarmy.sys                             Wed Mar  7 10:54:57 2018 (5AA00B51)
Netwtw04.sys                                  Wed Mar 14 08:51:04 2018 (5AA91AB8)
WRkrn.sys                                     Mon Mar 19 13:39:19 2018 (5AAFF5C7)
paeusbaudio.sys                               Thu Mar 22 02:51:10 2018 (5AB3525E)
paeusbaudioks.sys                             Thu Mar 22 02:51:41 2018 (5AB3527D)
wrUrlFlt.sys                                  Wed Mar 28 07:35:20 2018 (5ABB7DF8)
WirelessButtonDriver64.sys                    Thu May 10 02:56:38 2018 (5AF3ED26)
rt640x64.sys                                  Fri May 11 02:07:38 2018 (5AF5332A)
mbam.sys                                      Thu May 24 03:32:55 2018 (5B066AA7)
mbae64.sys                                    Wed May 30 07:20:29 2018 (5B0E88FD)
MbamChameleon.sys                             Thu Jun 14 17:21:45 2018 (5B22DC69)
farflt.sys                                    Thu Jun 14 18:32:25 2018 (5B22ECF9)
nvlddmkm.sys                                  Sun Jun 24 11:38:02 2018 (5B2FBADA)
mwac.sys                                      Tue Jul  3 14:20:18 2018 (5B3BBE62)
dc1-controller.sys                            Fri Jan 11 13:42:33 2019 (5C38E399)
xboxgip.sys                                   Thu Mar 21 06:51:40 2030 (714497BC)
intelppm.sys                                  ***** Invalid 2019 Invalid 2019 Invalid
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jul 12 06:48:07.070 2018 (UTC - 4:00)**************************
mbae64.sys                                    Tue Mar 27 11:15:46 2018 (5ABA6022)
audientusbaudio.sys                           Wed Mar 28 06:19:23 2018 (5ABB6C2B)
audientusbaudioks.sys                         Wed Mar 28 06:19:58 2018 (5ABB6C4E)
mbam.sys                                      Sat Apr  7 14:55:35 2018 (5AC91427)
MbamChameleon.sys                             Wed Apr 25 15:39:20 2018 (5AE0D968)
IntcDAud.sys                                  Mon May  7 07:03:23 2018 (5AF0327B)
farflt.sys                                    Mon May 14 11:15:27 2018 (5AF9A80F)
mwac.sys                                      Wed May 16 09:52:49 2018 (5AFC37B1)
 


http://www.carrona.org/drivers/driver.php?id=DevAuthE.sys
http://www.carrona.org/drivers/driver.php?id=xinputhid.sys
SgrmAgent.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=dptf_cpu.sys
http://www.carrona.org/drivers/driver.php?id=esif_lf.sys
http://www.carrona.org/drivers/driver.php?id=ctxusbm.sys
teVirtualMIDI64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=iLokDrvr.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
afunix.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaLPSS2i_I2C.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=hpdskflt.sys
http://www.carrona.org/drivers/driver.php?id=Accelerometer.sys
http://www.carrona.org/drivers/driver.php?id=ibtusb.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
http://www.carrona.org/drivers/driver.php?id=mbamswissarmy.sys
Netwtw04.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=WRkrn.sys
paeusbaudio.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
paeusbaudioks.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=wrUrlFlt.sys
http://www.carrona.org/drivers/driver.php?id=WirelessButtonDriver64.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=mbae64.sys
http://www.carrona.org/drivers/driver.php?id=MbamChameleon.sys
http://www.carrona.org/drivers/driver.php?id=farflt.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys
http://www.carrona.org/drivers/driver.php?id=dc1-controller.sys
http://www.carrona.org/drivers/driver.php?id=xboxgip.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=mbae64.sys
audientusbaudio.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
audientusbaudioks.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=MbamChameleon.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=farflt.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.