KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff888d200f290, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff888d200f1e8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
TRAP_FRAME: fffff888d200f290 -- (.trap 0xfffff888d200f290)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffbb88ce5e0420 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8011c6b08e0 rsp=fffff888d200f420 rbp=ffffbb88d785d040
r8=0000000000000001 r9=0000000000000002 r10=ffffbb88c6e3d100
r11=ffffcb81f4e95180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KiExitDispatcher+0x160:
fffff801`1c6b08e0 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff888d200f1e8 -- (.exr 0xfffff888d200f1e8)
ExceptionAddress: fffff8011c6b08e0 (nt!KiExitDispatcher+0x0000000000000160)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) x86fre
EXCEPTION_STR: 0x0
LAST_CONTROL_TRANSFER: from fffff8011c7d4829 to fffff8011c7c2990
STACK_TEXT:
fffff888`d200ef68 fffff801`1c7d4829 : 00000000`00000139 00000000`00000003 fffff888`d200f290 fffff888`d200f1e8 : nt!KeBugCheckEx
fffff888`d200ef70 fffff801`1c7d4c50 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff888`d200f0b0 fffff801`1c7d2fe3 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff888`d200f400 : nt!KiFastFailDispatch+0xd0
fffff888`d200f290 fffff801`1c6b08e0 : 00000000`00000000 fffff888`d200f4c1 ffffcb81`f4e95180 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x323
fffff888`d200f420 fffff801`1c6c5f9d : ffffbb88`ce5e0418 00000000`00000200 ffffcb81`f4e95101 fffff801`1c96e06d : nt!KiExitDispatcher+0x160
fffff888`d200f480 fffff801`1a2eaaf7 : 00000000`00001800 ffffbb88`db3240a8 00000000`0000008f ffffcb81`00000002 : nt!KeInsertQueueApc+0x14d
fffff888`d200f520 00000000`00001800 : ffffbb88`db3240a8 00000000`0000008f ffffcb81`00000002 00000000`00000000 : BEDaisy+0x2eaaf7
fffff888`d200f528 ffffbb88`db3240a8 : 00000000`0000008f ffffcb81`00000002 00000000`00000000 00000000`00000000 : 0x1800
fffff888`d200f530 00000000`0000008f : ffffcb81`00000002 00000000`00000000 00000000`00000000 ffffcb81`f4e95100 : 0xffffbb88`db3240a8
fffff888`d200f538 ffffcb81`00000002 : 00000000`00000000 00000000`00000000 ffffcb81`f4e95100 00000000`00000000 : 0x8f
fffff888`d200f540 00000000`00000000 : 00000000`00000000 ffffcb81`f4e95100 00000000`00000000 ffffbb88`d8245101 : 0xffffcb81`00000002
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !HTTP
fffff8011a4e6546-fffff8011a4e6547 2 bytes - HTTP!UlpScavengerThread+146
[ 48 ff:4c 8b ]
fffff8011a4e654d-fffff8011a4e6551 5 bytes - HTTP!UlpScavengerThread+14d (+0x07)
[ 0f 1f 44 00 00:e8 ce eb 24 02 ]
fffff8011a4e655e-fffff8011a4e655f 2 bytes - HTTP!UlpScavengerThread+15e (+0x11)
[ 48 ff:4c 8b ]
fffff8011a4e6565-fffff8011a4e6569 5 bytes - HTTP!UlpScavengerThread+165 (+0x07)
[ 0f 1f 44 00 00:e8 a6 06 1c 02 ]
fffff8011a4e657f-fffff8011a4e6580 2 bytes - HTTP!UlpScavengerThread+17f (+0x1a)
[ 48 ff:4c 8b ]
fffff8011a4e6586-fffff8011a4e658a 5 bytes - HTTP!UlpScavengerThread+186 (+0x07)
[ 0f 1f 44 00 00:e8 15 07 1c 02 ]
fffff8011a4e65e7-fffff8011a4e65e8 2 bytes - HTTP!UlpScavengerThread+1e7 (+0x61)
[ 48 ff:4c 8b ]
fffff8011a4e65ee-fffff8011a4e65f2 5 bytes - HTTP!UlpScavengerThread+1ee (+0x07)
[ 0f 1f 44 00 00:e8 cd f5 20 02 ]
28 errors : !HTTP (fffff8011a4e6546-fffff8011a4e65f2)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
BUCKET_ID: MEMORY_CORRUPTION_LARGE
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_large
FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
Followup: memory_corruption
---------
2: kd> lm
start end module name
ffff8998`d6710000 ffff8998`d679c000 win32k T (no symbols)
ffff8998`d6800000 ffff8998`d6aa5000 win32kbase (deferred)
ffff8998`d6b00000 ffff8998`d6b48000 cdd (deferred)
ffff8998`d77e0000 ffff8998`d7b82000 win32kfull (deferred)
fffff801`1a000000 fffff801`1a2f3000 BEDaisy T (no symbols)
fffff801`1a300000 fffff801`1a312000 hidusb (deferred)
fffff801`1a320000 fffff801`1a331000 kbdhid (deferred)
fffff801`1a340000 fffff801`1a350000 MSKSSRV (deferred)
fffff801`1a3c0000 fffff801`1a3cd000 rdpvideominiport (deferred)
fffff801`1a4d0000 fffff801`1a614000 HTTP (pdb symbols) C:\Program Files\Windows Kits\8.1\Debuggers\x86\sym\http.pdb\9C657CE698ABF88A00A07F6654473AE81\http.pdb
fffff801`1a650000 fffff801`1a65e000 dump_diskdump (deferred)
fffff801`1a680000 fffff801`1a69d000 dump_dumpfve (deferred)
fffff801`1c600000 fffff801`1d0b5000 nt (pdb symbols) C:\Program Files\Windows Kits\8.1\Debuggers\x86\sym\ntkrnlmp.pdb\37692615609E73CA069E65B06B532BB41\ntkrnlmp.pdb
fffff801`1d0b5000 fffff801`1d159000 hal (deferred)
fffff801`1e200000 fffff801`1e20b000 kd (deferred)
fffff801`1e210000 fffff801`1e45c000 mcupdate_GenuineIntel (deferred)
fffff801`1e460000 fffff801`1e471000 werkernel (deferred)
fffff801`1e480000 fffff801`1e4a9000 ksecdd (deferred)
fffff801`1e4b0000 fffff801`1e510000 msrpc (deferred)
fffff801`1e520000 fffff801`1e547000 tm (deferred)
fffff801`1e550000 fffff801`1e5b8000 CLFS (deferred)
fffff801`1e5c0000 fffff801`1e5da000 PSHED (deferred)
fffff801`1e5e0000 fffff801`1e5eb000 BOOTVID (deferred)
fffff801`1e5f0000 fffff801`1e5fe000 cmimcext (deferred)
fffff801`1e600000 fffff801`1e705000 clipsp (deferred)
fffff801`1e710000 fffff801`1e781000 FLTMGR (deferred)
fffff801`1e790000 fffff801`1e79c000 ntosext (deferred)
fffff801`1e7a0000 fffff801`1e87e000 CI (deferred)
fffff801`1e880000 fffff801`1e93c000 cng (deferred)
fffff801`1e940000 fffff801`1ea15000 Wdf01000 (deferred)
fffff801`1ea20000 fffff801`1ea33000 WDFLDR (deferred)
fffff801`1ea40000 fffff801`1ea4f000 SleepStudyHelper (deferred)
fffff801`1ea50000 fffff801`1ea60000 WppRecorder (deferred)
fffff801`1ea70000 fffff801`1ea95000 acpiex (deferred)
fffff801`1eaa0000 fffff801`1eaba000 SgrmAgent (deferred)
fffff801`1eac0000 fffff801`1eb8c000 ACPI (deferred)
fffff801`1eb90000 fffff801`1eb9c000 WMILIB (deferred)
fffff801`1eba0000 fffff801`1ebab000 msisadrv (deferred)
fffff801`1ebb0000 fffff801`1ec1f000 pci (deferred)
fffff801`1ec20000 fffff801`1ec60000 tpm (deferred)
fffff801`1ec70000 fffff801`1eccb000 intelpep (deferred)
fffff801`1ecd0000 fffff801`1ece7000 WindowsTrustedRT (deferred)
fffff801`1ecf0000 fffff801`1ecfb000 WindowsTrustedRTProxy (deferred)
fffff801`1ed00000 fffff801`1ed15000 pcw (deferred)
fffff801`1ed20000 fffff801`1ed33000 vdrvroot (deferred)
fffff801`1ed40000 fffff801`1ed73000 pdc (deferred)
fffff801`1ed80000 fffff801`1ed99000 CEA (deferred)
fffff801`1eda0000 fffff801`1edd0000 partmgr (deferred)
fffff801`1ede0000 fffff801`1ee85000 spaceport (deferred)
fffff801`1ee90000 fffff801`1eeaa000 volmgr (deferred)
fffff801`1eeb0000 fffff801`1ef13000 volmgrx (deferred)
fffff801`1ef20000 fffff801`1ef3f000 mountmgr (deferred)
fffff801`1ef40000 fffff801`1fac1000 iaStorAC (deferred)
fffff801`1fad0000 fffff801`1fb72000 storport (deferred)
fffff801`1fb80000 fffff801`1fb9b000 EhStorClass (deferred)
fffff801`1fba0000 fffff801`1fbba000 fileinfo (deferred)
fffff801`1fbc0000 fffff801`1fbfd000 Wof (deferred)
fffff801`1fc00000 fffff801`1fc0d000 Fs_Rec (deferred)
fffff801`1fc10000 fffff801`1fd81000 ndis (deferred)
fffff801`1fd90000 fffff801`2002d000 Ntfs (deferred)
fffff801`20030000 fffff801`200c4000 NETIO (deferred)
fffff801`200d0000 fffff801`20102000 ksecpkg (deferred)
fffff801`20110000 fffff801`203f9000 tcpip (deferred)
fffff801`20400000 fffff801`2047a000 fwpkclnt (deferred)
fffff801`20480000 fffff801`204b0000 wfplwfs (deferred)
fffff801`204c0000 fffff801`20589000 fvevol (deferred)
fffff801`20590000 fffff801`2059b000 volume (deferred)
fffff801`205a0000 fffff801`2060d000 volsnap (deferred)
fffff801`20610000 fffff801`2065e000 rdyboost (deferred)
fffff801`20660000 fffff801`20686000 mup (deferred)
fffff801`20690000 fffff801`206a2000 iorate (deferred)
fffff801`206d0000 fffff801`206ec000 disk (deferred)
fffff801`206f0000 fffff801`2075b000 CLASSPNP (deferred)
fffff801`33600000 fffff801`33d33000 RTKVHD64 (deferred)
fffff801`33d40000 fffff801`33d93000 srvnet (deferred)
fffff801`33da0000 fffff801`33e76000 peauth (deferred)
fffff801`33e80000 fffff801`33f45000 srv2 (deferred)
fffff801`33f50000 fffff801`33f77000 AgileVpn (deferred)
fffff801`33f80000 fffff801`33fa2000 rasl2tp (deferred)
fffff801`33fb0000 fffff801`33fd0000 raspptp (deferred)
fffff801`33fe0000 fffff801`33ffc000 raspppoe (deferred)
fffff801`34030000 fffff801`3404d000 crashdmp (deferred)
fffff801`34050000 fffff801`3408a000 ndiswan (deferred)
fffff801`34090000 fffff801`340a3000 vwifimp (deferred)
fffff801`34e00000 fffff801`34f64000 bthport (deferred)
fffff801`34f70000 fffff801`34f96000 bthpan (deferred)
fffff801`34fa0000 fffff801`35b21000 dump_iaStorAC (deferred)
fffff801`35b30000 fffff801`35c0a000 dxgmms2 (deferred)
fffff801`35c10000 fffff801`35c28000 monitor (deferred)
fffff801`35c30000 fffff801`35c4d000 rassstp (deferred)
fffff801`35c60000 fffff801`35c97000 wcifs (deferred)
fffff801`35ca0000 fffff801`35d17000 cldflt (deferred)
fffff801`35d20000 fffff801`35d3a000 storqosflt (deferred)
fffff801`35d40000 fffff801`35d54000 mmcss (deferred)
fffff801`35d60000 fffff801`35d73000 condrv (deferred)
fffff801`35d80000 fffff801`35d98000 lltdio (deferred)
fffff801`35da0000 fffff801`35dbb000 rspndr (deferred)
fffff801`35dc0000 fffff801`35ddd000 wanarp (deferred)
fffff801`35de0000 fffff801`35df9000 mslldp (deferred)
fffff801`35e00000 fffff801`35e18000 ndisuio (deferred)
fffff801`35e20000 fffff801`35ed2000 nwifi (deferred)
fffff801`35ee0000 fffff801`35f05000 bowser (deferred)
fffff801`35f10000 fffff801`35f2a000 mpsdrv (deferred)
fffff801`35f30000 fffff801`35f68000 winquic (deferred)
fffff801`35f70000 fffff801`35fff000 mrxsmb (deferred)
fffff801`36000000 fffff801`36045000 mrxsmb20 (deferred)
fffff801`36050000 fffff801`36091000 NDProxy (deferred)
fffff801`360a0000 fffff801`3612d000 Vid (deferred)
fffff801`36130000 fffff801`36145000 CAD (deferred)
fffff801`36150000 fffff801`361aa000 BstkDrv_bgp (deferred)
fffff801`361b0000 fffff801`361d7000 Ndu (deferred)
fffff801`361e0000 fffff801`361f4000 tcpipreg (deferred)
fffff801`36220000 fffff801`3673f000 vgk (deferred)
fffff801`36740000 fffff801`36770000 cdrom (deferred)
fffff801`36780000 fffff801`36795000 filecrypt (deferred)
fffff801`367a0000 fffff801`367ae000 tbs (deferred)
fffff801`367b0000 fffff801`367ba000 Null (deferred)
fffff801`367c0000 fffff801`367ca000 Beep (deferred)
fffff801`367d0000 fffff801`36b41000 dxgkrnl (deferred)
fffff801`36b50000 fffff801`36b66000 watchdog (deferred)
fffff801`36b70000 fffff801`36b86000 BasicDisplay (deferred)
fffff801`36b90000 fffff801`36ba1000 BasicRender (deferred)
fffff801`36bb0000 fffff801`36bcc000 Npfs (deferred)
fffff801`36bd0000 fffff801`36be1000 Msfs (deferred)
fffff801`36bf0000 fffff801`36c16000 tdx (deferred)
fffff801`36c20000 fffff801`36c30000 TDI (deferred)
fffff801`36c40000 fffff801`36c99000 netbt (deferred)
fffff801`36ca0000 fffff801`36cb3000 afunix (deferred)
fffff801`36cc0000 fffff801`36d67000 afd (deferred)
fffff801`36d70000 fffff801`36d8a000 vwififlt (deferred)
fffff801`36d90000 fffff801`36dbb000 pacer (deferred)
fffff801`36dc0000 fffff801`36dd4000 netbios (deferred)
fffff801`36de0000 fffff801`36e5b000 rdbss (deferred)
fffff801`36e60000 fffff801`36e72000 nsiproxy (deferred)
fffff801`36e80000 fffff801`36e8d000 npsvctrig (deferred)
fffff801`36e90000 fffff801`36ea0000 mssmbios (deferred)
fffff801`36eb0000 fffff801`36eba000 gpuenergydrv (deferred)
fffff801`36ec0000 fffff801`36eec000 dfsc (deferred)
fffff801`36ef0000 fffff801`36f05000 umbus (deferred)
fffff801`36f10000 fffff801`36f7b000 fastfat (deferred)
fffff801`36f80000 fffff801`36f96000 bam (deferred)
fffff801`36fa0000 fffff801`36fef000 ahcache (deferred)
fffff801`36ff0000 fffff801`3700f000 winhvr (deferred)
fffff801`37010000 fffff801`37021000 CompositeBus (deferred)
fffff801`37030000 fffff801`3703d000 kdnic (deferred)
fffff801`39600000 fffff801`3962f000 iaLPSS2_I2C (deferred)
fffff801`39630000 fffff801`3964a000 SpbCx (deferred)
fffff801`39650000 fffff801`3968b000 TeeDriverW8x64 (deferred)
fffff801`39690000 fffff801`396ca000 rfcomm (deferred)
fffff801`396d0000 fffff801`396f2000 BthEnum (deferred)
fffff801`39700000 fffff801`3b0fb000 igdkmd64 (deferred)
fffff801`3b100000 fffff801`3b189000 USBXHCI (deferred)
fffff801`3b190000 fffff801`3b1d1000 ucx01000 (deferred)
fffff801`3b1f0000 fffff801`3b1ff000 ndistapi (deferred)
fffff801`3b200000 fffff801`3b30d000 rt640x64 (deferred)
fffff801`3b310000 fffff801`3b599000 Qcamain10x64 (deferred)
fffff801`3b5a0000 fffff801`3b68a000 wdiwifi (deferred)
fffff801`3b690000 fffff801`3b69e000 vwifibus (deferred)
fffff801`3b6a0000 fffff801`3b6c3000 i8042prt (deferred)
fffff801`3b6d0000 fffff801`3b6e4000 kbdclass (deferred)
fffff801`3b6f0000 fffff801`3b6ff000 CmBatt (deferred)
fffff801`3b700000 fffff801`3b710000 BATTC (deferred)
fffff801`3b720000 fffff801`3b742000 HDAudBus (deferred)
fffff801`3b750000 fffff801`3b7b7000 portcls (deferred)
fffff801`3b7c0000 fffff801`3b7e1000 drmk (deferred)
fffff801`3b7f0000 fffff801`3b868000 ks (deferred)
fffff801`3b870000 fffff801`3b889000 iaLPSS2_GPIO2 (deferred)
fffff801`3b890000 fffff801`3b8c0000 msgpioclx (deferred)
fffff801`3b8d0000 fffff801`3b8dc000 wmiacpi (deferred)
fffff801`3b8e0000 fffff801`3b91e000 intelppm (deferred)
fffff801`3b920000 fffff801`3b92b000 acpipagr (deferred)
fffff801`3b930000 fffff801`3b93a000 AcerAirplaneModeController (deferred)
fffff801`3b940000 fffff801`3b94b000 mshidkmdf (deferred)
fffff801`3b950000 fffff801`3b98b000 HIDCLASS (deferred)
fffff801`3b990000 fffff801`3b9a3000 HIDPARSE (deferred)
fffff801`3b9b0000 fffff801`3b9be000 UEFI (deferred)
fffff801`3b9c0000 fffff801`3b9cd000 NdisVirtualBus (deferred)
fffff801`3b9d0000 fffff801`3b9dc000 swenum (deferred)
fffff801`3b9e0000 fffff801`3b9ee000 rdpbus (deferred)
fffff801`3b9f0000 fffff801`3ba90000 UsbHub3 (deferred)
fffff801`3baa0000 fffff801`3baae000 USBD (deferred)
fffff801`3bab0000 fffff801`3babf000 ksthunk (deferred)
fffff801`3bac0000 fffff801`3bb15000 IntcDAud (deferred)
fffff801`3bb20000 fffff801`3bb35000 hidi2c (deferred)
fffff801`3bb40000 fffff801`3bb77000 ETDI2C (deferred)
fffff801`3bb80000 fffff801`3bb90000 mouhid (deferred)
fffff801`3bba0000 fffff801`3bbb3000 mouclass (deferred)
fffff801`3bbc0000 fffff801`3bbcc000 MTConfig (deferred)
fffff801`3bbd0000 fffff801`3bbe3000 btfilter (deferred)
fffff801`3bbf0000 fffff801`3bc0f000 BTHUSB (deferred)
fffff801`3bc10000 fffff801`3bc43000 usbccgp (deferred)
fffff801`3bc60000 fffff801`3bcaf000 usbvideo (deferred)
fffff801`3bcd0000 fffff801`3d4d3000 nvlddmkm (deferred)
fffff801`3d4e0000 fffff801`3d5bc000 RtsPer (deferred)
fffff801`3d5e0000 fffff801`3d5fe000 Microsoft_Bluetooth_Legacy_LEEnumerator (deferred)
Unloaded modules:
fffff801`1a000000 fffff801`1a2f4000 BEDaisy.sys
fffff801`1a420000 fffff801`1a433000 hidusb.sys
fffff801`1a440000 fffff801`1a452000 kbdhid.sys
fffff801`1a490000 fffff801`1a49f000 dump_storpor
fffff801`34fa0000 fffff801`35b22000 dump_iaStorA
fffff801`1a620000 fffff801`1a63e000 dump_dumpfve
fffff801`3b1e0000 fffff801`3b1ef000 dump_storpor
fffff801`34fa0000 fffff801`35b22000 dump_iaStorA
fffff801`36200000 fffff801`3621e000 dump_dumpfve
fffff801`1a460000 fffff801`1a471000 MSKSSRV.sys
fffff801`3bcb0000 fffff801`3bcc3000 hidusb.sys
fffff801`3d5c0000 fffff801`3d5d2000 kbdhid.sys
fffff801`1a400000 fffff801`1a411000 MSKSSRV.sys
fffff801`1a3e0000 fffff801`1a3f1000 MSKSSRV.sys
fffff801`1a3d0000 fffff801`1a3df000 hiber_storpo
fffff801`1b9c0000 fffff801`1c542000 hiber_iaStor
fffff801`1c550000 fffff801`1c56e000 hiber_dumpfv
fffff801`1a370000 fffff801`1a382000 nvvad64v.sys
fffff801`1a390000 fffff801`1a39e000 NvModuleTrac
fffff801`1a3a0000 fffff801`1a3b1000 nvvhci.sys
fffff801`1a350000 fffff801`1a361000 nvvhci.sys
fffff801`1a340000 fffff801`1a34e000 NvModuleTrac
fffff801`1a320000 fffff801`1a332000 nvvad64v.sys
fffff801`1a300000 fffff801`1a311000 MSKSSRV.sys
fffff801`1a000000 fffff801`1a2f4000 BEDaisy.sys
fffff801`340b0000 fffff801`340c1000 MSKSSRV.sys
fffff801`35d60000 fffff801`35d71000 MSKSSRV.sys
fffff801`35c30000 fffff801`35c5b000 luafv.sys
fffff801`34060000 fffff801`3406f000 dump_storpor
fffff801`37050000 fffff801`37bd2000 dump_iaStorA
fffff801`36200000 fffff801`3621e000 dump_dumpfve
fffff801`3bc50000 fffff801`3bc5c000 WdmCompanion
fffff801`36ef0000 fffff801`36f0e000 dam.sys
fffff801`206b0000 fffff801`206c1000 hwpolicy.sys