Microsoft (R) Windows Debugger Version 10.0.17763.132 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\michal01\Downloads\MEMORY (2).DMP]
Kernel Summary Dump File: Kernel address space is available, User address space may not be available.
************* Path validation summary **************
Response Time (ms) Location
Deferred SRV*
Symbol search path is: SRV*
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.24408.x86fre.win7sp1_ldr_escrow.190320-1700
Machine Name:
Kernel base = 0x83240000 PsLoadedModuleList = 0x83396730
Debug session time: Thu May 16 19:44:30.390 2019 (UTC + 2:00)
System Uptime: 0 days 0:00:13.670
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, 8c7c8d20, 8c7c8e8c, 83467030}
Probably caused by : ntkrpamp.exe ( nt!PspCatchCriticalBreak+71 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 00000003, Process
Arg2: 8c7c8d20, Terminating object
Arg3: 8c7c8e8c, Process image file name
Arg4: 83467030, Explanatory message (ascii)
Debugging Details:
------------------
KEY_VALUES_STRING: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 401
BUILD_VERSION_STRING: 7601.24408.x86fre.win7sp1_ldr_escrow.190320-1700
SYSTEM_MANUFACTURER: LENOVO
SYSTEM_PRODUCT_NAME: 20E2CTO1WW
SYSTEM_SKU: LENOVO_MT_20E2_BU_Think_FM_ThinkPad W550s
SYSTEM_VERSION: ThinkPad W550s
BIOS_VENDOR: LENOVO
BIOS_VERSION: N11ET46W (1.22 )
BIOS_DATE: 06/06/2018
BASEBOARD_MANUFACTURER: LENOVO
BASEBOARD_PRODUCT: 20E2CTO1WW
BASEBOARD_VERSION: SDK0J40697 WIN
DUMP_TYPE: 1
BUGCHECK_P1: 3
BUGCHECK_P2: ffffffff8c7c8d20
BUGCHECK_P3: ffffffff8c7c8e8c
BUGCHECK_P4: ffffffff83467030
PROCESS_NAME: wininit.exe
CRITICAL_PROCESS: wininit.exe
EXCEPTION_CODE: (Win32) 0x2 (2) - The system cannot find the file specified.
ERROR_CODE: (NTSTATUS) 0x2 - STATUS_WAIT_2
CPU_COUNT: 4
CPU_MHZ: a22
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3d
CPU_STEPPING: 4
CPU_MICROCODE: 6,3d,4,0 (F,M,S,R) SIG: 2B'00000000 (cache) 2B'00000000 (init)
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xF4
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: MICHAL
ANALYSIS_SESSION_TIME: 05-18-2019 16:55:46.0519
ANALYSIS_VERSION: 10.0.17763.132 amd64fre
LAST_CONTROL_TRANSFER: from 8352f415 to 83322de8
STACK_TEXT:
949d6b9c 8352f415 000000f4 00000003 8c7c8d20 nt!KeBugCheckEx+0x1e
949d6bc0 834aad37 83467030 8c7c8e8c 8c7c8d20 nt!PspCatchCriticalBreak+0x71
949d6bf0 834aab21 8c7c8d20 8c7bcd48 00000002 nt!PspTerminateAllThreads+0x2d
949d6c24 83280a8a 00000000 00000002 0007fce0 nt!NtTerminateProcess+0xcd
949d6c24 77b36c04 00000000 00000002 0007fce0 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007fce0 00000000 00000000 00000000 00000000 0x77b36c04
THREAD_SHA1_HASH_MOD_FUNC: d712f50ca072f1612c7a4fd1bf3073f1e303157e
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: c57df90cf8d74f01cf0eea84924e099644f4f501
THREAD_SHA1_HASH_MOD: f08ac56120cad14894587db086f77ce277bfae84
FOLLOWUP_IP:
nt!PspCatchCriticalBreak+71
8352f415 cc int 3
FAULT_INSTR_CODE: c2c95bcc
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!PspCatchCriticalBreak+71
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5c92eac5
IMAGE_VERSION: 6.1.7601.24408
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: 0xF4_wininit.exe_BUGCHECK_CRITICAL_PROCESS_2_nt!PspCatchCriticalBreak+71
BUCKET_ID: 0xF4_wininit.exe_BUGCHECK_CRITICAL_PROCESS_2_nt!PspCatchCriticalBreak+71
PRIMARY_PROBLEM_CLASS: 0xF4_wininit.exe_BUGCHECK_CRITICAL_PROCESS_2_nt!PspCatchCriticalBreak+71
TARGET_TIME: 2019-05-16T17:44:30.000Z
OSBUILD: 7601
OSSERVICEPACK: 1000
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x86
OSNAME: Windows 7
OSEDITION: Windows 7 WinNt (Service Pack 1) TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2019-03-21 02:37:09
BUILDDATESTAMP_STR: 190320-1700
BUILDLAB_STR: win7sp1_ldr_escrow
BUILDOSVER_STR: 6.1.7601.24408.x86fre.win7sp1_ldr_escrow.190320-1700
ANALYSIS_SESSION_ELAPSED_TIME: cb4
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xf4_wininit.exe_bugcheck_critical_process_2_nt!pspcatchcriticalbreak+71
FAILURE_ID_HASH: {dc90cda4-a9a8-f3cd-3551-02f1851f1be1}
Followup: MachineOwner
---------
0: kd> .load pde
=========================================================================================
PDE v11.3 - Copyright 2017 Andrew Richards
=========================================================================================
0: kd> !dpx
Start memory scan : 0x949d6b80 ($csp)
End memory scan : 0x949d7000 (Kernel Stack Base)
VirtualToOffset: 80b96120 not properly sign extended
VirtualToOffset: 80b96120 not properly sign extended
VirtualToOffset: 83384910 not properly sign extended
VirtualToOffset: 83384910 not properly sign extended
VirtualToOffset: 949d6b9c not properly sign extended
VirtualToOffset: 949d6b9c not properly sign extended
VirtualToOffset: 83322de8 not properly sign extended
VirtualToOffset: 83322de8 not properly sign extended
VirtualToOffset: 949d6b80 not properly sign extended
VirtualToOffset: 949d6b80 not properly sign extended
VirtualToOffset: fffe0ff0 not properly sign extended
VirtualToOffset: fffe0ff0 not properly sign extended
VirtualToOffset: 80010031 not properly sign extended
VirtualToOffset: 80010031 not properly sign extended
VirtualToOffset: 92acc056 not properly sign extended
VirtualToOffset: 92acc056 not properly sign extended
VirtualToOffset: 9d970140 not properly sign extended
VirtualToOffset: 9d970140 not properly sign extended
cr3 : 0x9d970140 : !du "I.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252|"
VirtualToOffset: 80b93800 not properly sign extended
VirtualToOffset: 80b93800 not properly sign extended
VirtualToOffset: 80b93000 not properly sign extended
VirtualToOffset: 80b93000 not properly sign extended
0x949d6b8c : 0x8c7c8e8c : !da "wininit.exe"
0x949d6b90 : 0x83467030 : !da ""Terminating critical process 0x%p (%s).""
0x949d6ba0 : 0x8352f415 : nt!PspCatchCriticalBreak+0x71
0x949d6bb0 : 0x8c7c8e8c : !da "wininit.exe"
0x949d6bb4 : 0x83467030 : !da ""Terminating critical process 0x%p (%s).""
0x949d6bc4 : 0x834aad37 : nt!PspTerminateAllThreads+0x2d
0x949d6bc8 : 0x83467030 : !da ""Terminating critical process 0x%p (%s).""
0x949d6bcc : 0x8c7c8e8c : !da "wininit.exe"
0x949d6bf4 : 0x834aab21 : nt!NtTerminateProcess+0xcd
0x949d6c10 : 0x834aaa54 : nt!NtTerminateProcess
0x949d6c28 : 0x83280a8a : nt!KiSystemServicePostCall
0: kd> !process 8c7c8d20
PROCESS 8c7c8d20 SessionId: 0 Cid: 0524 Peb: 7ffdf000 ParentCid: 0258
DirBase: 9d970140 ObjectTable: 9aa154c8 HandleCount: 60.
Image: wininit.exe
VadRoot 9ad48d98 Vads 51 Clone 0 Private 182. Modified 0. Locked 0.
DeviceMap 8ba07e38
Token 9ab4ed30
ElapsedTime 00:00:01.185
UserTime 00:00:00.000
KernelTime 00:00:00.000
QuotaPoolUsage[PagedPool] 63500
QuotaPoolUsage[NonPagedPool] 3212
Working Set Sizes (now,min,max) (771, 50, 345) (3084KB, 200KB, 1380KB)
PeakWorkingSetSize 771
VirtualSize 29 Mb
PeakVirtualSize 45 Mb
PageFaultCount 957
MemoryPriority BACKGROUND
BasePriority 13
CommitCharge 250
THREAD 8c7bcd48 Cid 0524.0528 Teb: 7ffde000 Win32Thread: ffb7b908 RUNNING on processor 0
Not impersonating
DeviceMap 8ba07e38
Owning Process 8c7c8d20 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 876 Ticks: 0
Context Switch Count 527 IdealProcessor: 3
UserTime 00:00:00.015
KernelTime 00:00:00.062
Win32 Start Address 0x005c4dc8
Stack Init 949d6ed0 Current 949d6628 Base 949d7000 Limit 949d4000 Call 00000000
Priority 15 BasePriority 15 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr
949d6b9c 8352f415 nt!KeBugCheckEx+0x1e
949d6bc0 834aad37 nt!PspCatchCriticalBreak+0x71
949d6bf0 834aab21 nt!PspTerminateAllThreads+0x2d
949d6c24 83280a8a nt!NtTerminateProcess+0xcd
949d6c24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 949d6c34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0007fce0 00000000 0x77b36c04
THREAD 8c7c6460 Cid 0524.0538 Teb: 7ffdd000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode Alertable
9b1fd3c0 QueueObject
Not impersonating
DeviceMap 8ba07e38
Owning Process 8c7c8d20 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 809 Ticks: 67 (0:00:00:01.045)
Context Switch Count 3 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x77b20287
Stack Init 8e36aed0 Current 8e36aa60 Base 8e36b000 Limit 8e368000 Call 00000000
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr
8e36aa78 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
8e36aab0 832aa6cb nt!KiSwapThread+0x266
8e36aad8 832ab3bd nt!KiCommitThreadWait+0x1df
8e36ab38 83477281 nt!KeRemoveQueueEx+0x4f8
8e36ab90 832c0c77 nt!IoRemoveIoCompletion+0x2e
8e36ac24 83280a8a nt!NtWaitForWorkViaWorkerFactory+0x1a1
8e36ac24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 8e36ac34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0055fb24 00000000 0x77b36c04
THREAD 8c7dbad8 Cid 0524.053c Teb: 7ffdc000 Win32Thread: 00000000 WAIT: (DelayExecution) UserMode Non-Alertable
9b1fd3c0 QueueObject
Not impersonating
DeviceMap 8ba07e38
Owning Process 8c7c8d20 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 808 Ticks: 68 (0:00:00:01.060)
Context Switch Count 4 IdealProcessor: 3
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x77b20287
Stack Init 9103ced0 Current 9103cb08 Base 9103d000 Limit 9103a000 Call 00000000
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr
9103cb20 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
9103cb58 832aa6cb nt!KiSwapThread+0x266
9103cb80 832aa3a9 nt!KiCommitThreadWait+0x1df
9103cbd8 83477f53 nt!KeDelayExecutionThread+0x2aa
9103cc24 83280a8a nt!NtDelayExecution+0x8d
9103cc24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 9103cc34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
004ef7d8 00000000 0x77b36c04
THREAD 8c7bdd48 Cid 0524.0550 Teb: 7ffdb000 Win32Thread: 00000000 WAIT: (WrLpcReceive) UserMode Non-Alertable
8c7bdf7c Semaphore Limit 0x1
Not impersonating
DeviceMap 8ba07e38
Owning Process 8c7c8d20 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 808 Ticks: 68 (0:00:00:01.060)
Context Switch Count 3 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x005c30a6
Stack Init 949eded0 Current 949eda00 Base 949ee000 Limit 949eb000 Call 00000000
Priority 14 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr
949eda18 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
949eda50 832aa6cb nt!KiSwapThread+0x266
949eda78 832a3e4f nt!KiCommitThreadWait+0x1df
949edaf4 834856f2 nt!KeWaitForSingleObject+0x393
949edb28 83487eaa nt!AlpcpReceiveMessagePort+0x421
949edb94 83487ccc nt!AlpcpReceiveLegacyMessage+0x197
949edc00 8348805d nt!NtReplyWaitReceivePortEx+0x10e
949edc1c 83280a8a nt!NtReplyWaitReceivePort+0x18
949edc1c 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 949edc34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0062fb04 00000000 0x77b36c04
THREAD 86e3e618 Cid 0524.0554 Teb: 7ffda000 Win32Thread: 00000000 WAIT: (UserRequest) UserMode Alertable
8c7c7ca0 SynchronizationTimer
8742a220 SynchronizationTimer
8c7bdc80 SynchronizationTimer
8c7e7ce8 ProcessObject
Not impersonating
DeviceMap 8ba07e38
Owning Process 8c7c8d20 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 811 Ticks: 65 (0:00:00:01.014)
Context Switch Count 4 IdealProcessor: 3
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x77b1fbbf
Stack Init 949f5ed0 Current 949f5648 Base 949f6000 Limit 949f3000 Call 00000000
Priority 15 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr
949f5660 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
949f5698 832aa6cb nt!KiSwapThread+0x266
949f56c0 832a64b4 nt!KiCommitThreadWait+0x1df
949f583c 83477cec nt!KeWaitForMultipleObjects+0x535
949f5ac8 83477a59 nt!ObpWaitForMultipleObjects+0x262
949f5c18 83280a8a nt!NtWaitForMultipleObjects+0xcd
949f5c18 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 949f5c34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0083fc30 00000000 0x77b36c04
THREAD 86e3a030 Cid 0524.0560 Teb: 7ffd9000 Win32Thread: 00000000 WAIT: (WrQueue) UserMode Alertable
9b1fd3c0 QueueObject
Not impersonating
DeviceMap 8ba07e38
Owning Process 8c7c8d20 Image: wininit.exe
Attached Process N/A Image: N/A
Wait Start TickCount 809 Ticks: 67 (0:00:00:01.045)
Context Switch Count 1 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x77b20287
Stack Init 94bb5ed0 Current 94bb5a60 Base 94bb6000 Limit 94bb3000 Call 00000000
Priority 13 BasePriority 13 PriorityDecrement 0 IoPriority 2 PagePriority 5
ChildEBP RetAddr
94bb5a78 832ab86d nt!KiSwapContext+0x26 (FPO: [Uses EBP] [0,0,4])
94bb5ab0 832aa6cb nt!KiSwapThread+0x266
94bb5ad8 832ab3bd nt!KiCommitThreadWait+0x1df
94bb5b38 83477281 nt!KeRemoveQueueEx+0x4f8
94bb5b90 832c0c77 nt!IoRemoveIoCompletion+0x2e
94bb5c24 83280a8a nt!NtWaitForWorkViaWorkerFactory+0x1a1
94bb5c24 77b36c04 nt!KiSystemServicePostCall (FPO: [0,3] TrapFrame @ 94bb5c34)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0066fe44 00000000 0x77b36c04
0: kd> !process 8c7c8e8c
TYPE mismatch for process object at 8c7c8e8c
0: kd> !vm
Page File: \??\C:\pagefile.sys
Current: 2604844 Kb Free Space: 2604840 Kb
Minimum: 2604844 Kb Maximum: 7814532 Kb
Physical Memory: 651211 ( 2604844 Kb)
Available Pages: 342456 ( 1369824 Kb)
ResAvail Pages: 377464 ( 1509856 Kb)
Locked IO Pages: 0 ( 0 Kb)
Free System PTEs: 307754 ( 1231016 Kb)
Modified Pages: 1584 ( 6336 Kb)
Modified PF Pages: 1570 ( 6280 Kb)
Modified No Write Pages: 0 ( 0 Kb)
NonPagedPool Usage: 18089 ( 72356 Kb)
NonPagedPool Max: 478360 ( 1913440 Kb)
PagedPool 0: 29501 ( 118004 Kb)
PagedPool 1: 1244 ( 4976 Kb)
PagedPool 2: 0 ( 0 Kb)
PagedPool 3: 0 ( 0 Kb)
PagedPool 4: 20 ( 80 Kb)
PagedPool Usage: 30765 ( 123060 Kb)
PagedPool Maximum: 523264 ( 2093056 Kb)
Processor Commit: 618 ( 2472 Kb)
Session Commit: 2364 ( 9456 Kb)
Syspart SharedCommit 0
Shared Commit: 3580 ( 14320 Kb)
Special Pool: 0 ( 0 Kb)
Kernel Stacks: 741 ( 2964 Kb)
Pages For MDLs: 228357 ( 913428 Kb)
Pages For AWE: 0 ( 0 Kb)
NonPagedPool Commit: 0 ( 0 Kb)
PagedPool Commit: 30802 ( 123208 Kb)
Driver Commit: 7739 ( 30956 Kb)
Boot Commit: 0 ( 0 Kb)
System PageTables: 0 ( 0 Kb)
VAD/PageTable Bitmaps: 17 ( 68 Kb)
ProcessLockedFilePages: 0 ( 0 Kb)
Pagefile Hash Pages: 0 ( 0 Kb)
Sum System Commit: 274218 ( 1096872 Kb)
Total Private: 5669 ( 22676 Kb)
Misc/Transient Commit: 32392 ( 129568 Kb)
Committed pages: 312279 ( 1249116 Kb)
Commit limit: 1302005 ( 5208020 Kb)
Pid ImageName Commit SharedCommit Debt
52c csrss.exe 18616 Kb 0 Kb 0 Kb
558 services.exe 1360 Kb 0 Kb 0 Kb
2d0 csrss.exe 1148 Kb 0 Kb 0 Kb
524 wininit.exe 1000 Kb 0 Kb 0 Kb
1cc smss.exe 376 Kb 0 Kb 0 Kb
51c smss.exe 124 Kb 0 Kb 0 Kb
4 System 52 Kb 0 Kb 0 Kb
0: kd> !poolused 2
....
Sorting by NonPaged Pool Consumed
NonPaged Paged
Tag Allocs Used Allocs Used
btmh 126 15313112 8 576 UNKNOWN pooltag 'btmh', please update pooltag.txt
EtwB 109 13490200 4 262144 Etw Buffer , Binary: nt!etw
smNp 2053 8409088 0 0 ReadyBoost store node pool allocations , Binary: nt!store or rdyboost.sys
IWA1 2 4268032 0 0 UNKNOWN pooltag 'IWA1', please update pooltag.txt
SynT 474 3836888 184 14960 UNKNOWN pooltag 'SynT', please update pooltag.txt
smBt 837 3428352 0 0 ReadyBoost various B+Tree allocations , Binary: nt!store or rdyboost.sys
Pool 5 2197064 0 0 Pool tables, etc.
Mdl 186 2081576 0 0 Io, Mdls
Cont 243 1253520 0 0 Contiguous physical memory allocations for device drivers
Mmdi 6804 1185432 0 0 MDLs for physical memory allocations , Binary: nt!mm
IWBy 1 1048576 0 0 UNKNOWN pooltag 'IWBy', please update pooltag.txt
KCNw 38 1040448 0 0 UNKNOWN pooltag 'KCNw', please update pooltag.txt
Ixxx 19 1028128 0 0 UNKNOWN pooltag 'Ixxx', please update pooltag.txt
IWBX 3 910472 0 0 UNKNOWN pooltag 'IWBX', please update pooltag.txt
@MP 165 835144 6 270496 (Intel video driver) Miniport related memory
IWCp 31 562424 0 0 UNKNOWN pooltag 'IWCp', please update pooltag.txt
RTLG 1 524288 0 0 UNKNOWN pooltag 'RTLG', please update pooltag.txt
AmlH 8 524288 0 0 ACPI AMLI Pooltags
IU3C 1 483328 2 48 IIS Utility Driver
IWCo 31 437496 0 0 UNKNOWN pooltag 'IWCo', please update pooltag.txt
Devi 496 419480 0 0 Device objects
Mm 9 333568 3 88 general Mm Allocations , Binary: nt!mm
@GMM 57 323064 0 0 (Intel video driver) Memory manager
smPr 1 315392 0 0 ReadyBoot population ranges , Binary: rdyboost.sys
CDmp 13 289272 0 0 Crashdump driver , Binary: crashdmp.sys
HTab 275 282816 0 0 Hash Table pool
VHAL 14 271704 0 0 UNKNOWN pooltag 'VHAL', please update pooltag.txt
:PRQ 1 241664 0 0 UNKNOWN pooltag ':PRQ', please update pooltag.txt
smMR 1 221184 0 0 ReadyBoot multi-read ranges , Binary: rdyboost.sys
@SB 674 211344 0 0 (Intel video driver) Soft BIOS
NtFs 9 207144 879 88448 StrucSup.c , Binary: ntfs.sys
IWBG 1 204800 0 0 UNKNOWN pooltag 'IWBG', please update pooltag.txt
CcPB 6 196608 0 0 Prefetcher trace buffer , Binary: nt!ccpf
IPRT 522 172104 0 0 UNKNOWN pooltag 'IPRT', please update pooltag.txt
EtwG 425 163200 0 0 Etw Guid , Binary: nt!etw
smPi 1 159744 0 0 ReadyBoot population ranges index , Binary: rdyboost.sys
smPl 1 159744 0 0 ReadyBoot pended IRP lists , Binary: rdyboost.sys
Ntfx 846 146016 0 0 General Allocation , Binary: ntfs.sys
btma 27 140384 4 288 UNKNOWN pooltag 'btma', please update pooltag.txt
ViMm 55 139560 60 146528 Video memory manager , Binary: dxgkrnl.sys
IW3i 1 135168 0 0 UNKNOWN pooltag 'IW3i', please update pooltag.txt
Thre 184 134416 0 0 Thread objects , Binary: nt!ps
CcVa 2 131088 0 0 Cache Manager Initial array of Vacbs , Binary: nt!cc
IWBp 1 131072 0 0 UNKNOWN pooltag 'IWBp', please update pooltag.txt
Tcpt 33 130472 0 0 TCP Timers , Binary: tcpip.sys
AWO0 4 114240 0 0 UNKNOWN pooltag 'AWO0', please update pooltag.txt
IU3B 185 113328 0 0 IIS Utility Driver
File 640 112000 0 0 File objects
IWA3 1 110592 0 0 UNKNOWN pooltag 'IWA3', please update pooltag.txt
IWBH 2 104480 0 0 UNKNOWN pooltag 'IWBH', please update pooltag.txt
:HAT 4 98528 0 0 UNKNOWN pooltag ':HAT', please update pooltag.txt
Irp 255 91816 0 0 Io, IRP packets
ViSh 120 91248 0 0 Video scheduler , Binary: dxgkrnl.sys
FxLg 21 86016 0 0 KMDF IFR log tag , Binary: wdf01000.sys
DMM@ 21 84880 1 16 UNKNOWN pooltag 'DMM@', please update pooltag.txt
smSt 3 83928 0 0 ReadyBoost various store allocations , Binary: nt!store or rdyboost.sys
AmlC 10 81920 0 0 ACPI AMLI Pooltags
IWGw 1 81920 0 0 UNKNOWN pooltag 'IWGw', please update pooltag.txt
Lfsr 5 81920 0 0 UNKNOWN pooltag 'Lfsr', please update pooltag.txt
smRg 1 81920 0 0 ReadyBoost in-memory store region array , Binary: nt!store or rdyboost.sys
MmIo 60 80896 0 0 IO space mapping trackers , Binary: nt!mm
Dnod 196 78400 0 0 Device node structure
IPrq 13 76376 0 0 IP Request Control data , Binary: tcpip.sys
Ntfi 240 71040 0 0 IRP_CONTEXT , Binary: ntfs.sys
niJr 1 69632 0 0 UNKNOWN pooltag 'niJr', please update pooltag.txt
CcSc 183 65880 0 0 Cache Manager Shared Cache Map , Binary: nt!cc
VoSb 4 65536 0 0 Buffer allocations , Binary: volsnap.sys
IWJc 1 65536 0 0 UNKNOWN pooltag 'IWJc', please update pooltag.txt
AzAd 67 62576 0 0 HD Audio Class Driver (AzPcAudDev) , Binary: HDAudio.sys
DFsK 1 60008 0 0 UNKNOWN pooltag 'DFsK', please update pooltag.txt
NDif 51 59120 0 0 NDIS_TAG_IF , Binary: ndis.sys
Cngb 666 58632 0 0 CNG kmode crypto pool tag , Binary: ksecdd.sys
FMsl 557 57928 0 0 STREAM_LIST_CTRL structure , Binary: fltmgr.sys
SbM. 73 57088 0 0 UNKNOWN pooltag ' SbM', please update pooltag.txt
MmCa 374 55632 0 0 Mm control areas for mapped files , Binary: nt!mm
WfpS 2 53824 0 0 WFP startup , Binary: netio.sys
usbp 61 53360 1 48 UNKNOWN pooltag 'usbp', please update pooltag.txt
MmCi 163 51336 0 0 Mm control areas for images , Binary: nt!mm
WPLg 24 49824 0 0 UNKNOWN pooltag 'WPLg', please update pooltag.txt
AcpD 125 47216 0 0 ACPI device data , Binary: acpi.sys
Hal 57 44152 1 136 Hardware Abstraction Layer , Binary: hal.dll
Driv 189 42768 0 0 Driver objects
IWkR 31 42160 0 0 UNKNOWN pooltag 'IWkR', please update pooltag.txt
WfpC 2 41008 0 0 WFP callouts , Binary: netio.sys
IrbL 52 39520 0 0 UNKNOWN pooltag 'IrbL', please update pooltag.txt
GZrl 229 37088 94 20200 UNKNOWN pooltag 'GZrl', please update pooltag.txt
IdeP 26 36296 0 0 atapi IDE
UsbC 24 34808 0 0 UNKNOWN pooltag 'UsbC', please update pooltag.txt
CPnp 129 34056 0 0 ClassPnP transfer packets , Binary: classpnp.sys
IWJQ 16 32896 0 0 UNKNOWN pooltag 'IWJQ', please update pooltag.txt
Tdx 4 32840 0 0 TDX Generic Buffers (Address, Entity information, Interface change allocations) , Binary: tdx.sys
VmBu 1 32768 0 0 I/O buffers , Binary: volmgrx.sys
AzBD 40 31616 0 0 UNKNOWN pooltag 'AzBD', please update pooltag.txt
IWAm 2 31536 0 0 UNKNOWN pooltag 'IWAm', please update pooltag.txt
CcVl 30 30688 0 0 Cache Manager Vacb Level structures (large streams) , Binary: nt!cc
ClfC 6 30384 0 0 CLFS Log physical FCB lookaside list , Binary: clfs.sys
UHUB 39 30160 3 272 Universal Serial Bus Hub
AzMD 9 29880 0 0 UNKNOWN pooltag 'AzMD', please update pooltag.txt
inte 141 28216 5 328 UNKNOWN pooltag 'inte', please update pooltag.txt
ClfB 6 26592 0 0 CLFS Log base file lookaside list , Binary: clfs.sys
Io 682 25944 5 224 general IO allocations , Binary: nt!io
NDam 33 25800 0 0 NdisAllocateMemory , Binary: ndis.sys
AzWd 69 25616 0 0 HD Audio Class Driver (AzWidget) , Binary: HDAudio.sys
#EVL 533 25584 0 0 UNKNOWN pooltag '#EVL', please update pooltag.txt
IU3X 18 25056 0 0 IIS Utility Driver
IWGg 1 24416 0 0 UNKNOWN pooltag 'IWGg', please update pooltag.txt
IWGa 1 23904 0 0 UNKNOWN pooltag 'IWGa', please update pooltag.txt
smVr 142 23856 0 0 ReadyBoost allocations , Binary: nt!store or rdyboost.sys
@GMf 16 23424 0 0 UNKNOWN pooltag '@GMf', please update pooltag.txt
NDmo 16 23168 0 0 NDIS_TAG_M_OPEN_BLK , Binary: ndis.sys
TcHT 32 22784 0 0 TCP Hash Tables , Binary: tcpip.sys
IWDM 1 22752 0 0 UNKNOWN pooltag 'IWDM', please update pooltag.txt
NDw1 10 22368 0 0 NDIS_TAG_WMI_GUID_TO_OID , Binary: ndis.sys
DxgK 23 22168 28 456384 Vista display driver support , Binary: dxgkrnl.sys
MmLd 172 22096 0 0 Mm load module database , Binary: nt!mm
@PC 31 21456 0 0 UNKNOWN pooltag '@PC ', please update pooltag.txt
EtwR 203 21368 0 0 Etw KM RegEntry , Binary: nt!etw
SMBi 16 20912 1 128 UNKNOWN pooltag 'SMBi', please update pooltag.txt
RhHi 1 20496 0 0 Reference History Pool , Binary: tcpip.sys
InPP 2 20176 0 0 Inet Port pool , Binary: tcpip.sys
GZul 110 20128 170 27032 UNKNOWN pooltag 'GZul', please update pooltag.txt
fbDm 191 19720 0 0 UNKNOWN pooltag 'fbDm', please update pooltag.txt
LEqd 90 19632 9 1944 UNKNOWN pooltag 'LEqd', please update pooltag.txt
FMic 27 19152 0 0 IRP_CTRL structure , Binary: fltmgr.sys
IWCJ 1 18800 0 0 UNKNOWN pooltag 'IWCJ', please update pooltag.txt
IWGq 1 18096 0 0 UNKNOWN pooltag 'IWGq', please update pooltag.txt
IU3P 53 18032 3 368 IIS Utility Driver
PciB 31 17184 16 1632 PnP pci bus enumerator , Binary: pci.sys
Fsb 44 16896 0 0 Fixed-Size Block pool , Binary: netio.sys
MmHt 2 16656 0 0 session space PTE data , Binary: nt!mm
PnpI 196 16552 0 0 PNPMGR instance path , Binary: nt!pnp
InPa 2 16416 0 0 Inet Port Assignments , Binary: tcpip.sys
InPA 512 16384 0 0 Inet Port Assignment Arrays , Binary: tcpip.sys
#HAT 1 16384 0 0 UNKNOWN pooltag '#HAT', please update pooltag.txt
^HAT 1 16384 0 0 UNKNOWN pooltag '^HAT', please update pooltag.txt
KeIn 4 16384 0 0 UNKNOWN pooltag 'KeIn', please update pooltag.txt
dFVE 1 16384 0 0 Full Volume Encryption crash dump filter (Bitlocker Drive Encryption) , Binary: dumpfve.sys
:MDL 1 16352 0 0 UNKNOWN pooltag ':MDL', please update pooltag.txt
@GMo 11 16104 0 0 UNKNOWN pooltag '@GMo', please update pooltag.txt
smRW 1 15544 0 0 ReadyBoot read-after-write ranges , Binary: rdyboost.sys
MEI. 87 15488 5 416 UNKNOWN pooltag ' MEI', please update pooltag.txt
VWFF 6 14992 0 0 Virtual Wi-Fi Filter Driver (object allocation) , Binary: vwififlt.sys
Ntft 40 14720 0 0 SCB (Prerestart) , Binary: ntfs.sys
Uwrp 14 14608 0 0 UNKNOWN pooltag 'Uwrp', please update pooltag.txt
IWJJ 15 14496 0 0 UNKNOWN pooltag 'IWJJ', please update pooltag.txt
#HFI 1 14464 0 0 UNKNOWN pooltag '#HFI', please update pooltag.txt
Whea 8 14384 0 0 UNKNOWN pooltag 'Whea', please update pooltag.txt
IWBz 1 14232 0 0 UNKNOWN pooltag 'IWBz', please update pooltag.txt
HDAu 85 13928 23 4680 UNKNOWN pooltag 'HDAu', please update pooltag.txt
IWCn 31 13640 0 0 UNKNOWN pooltag 'IWCn', please update pooltag.txt
Gsem 168 13376 0 0 Gdi Semaphores
LHid 45 13008 6 632 UNKNOWN pooltag 'LHid', please update pooltag.txt
FMis 28 12832 0 0 FLT_INSTANCE structure , Binary: fltmgr.sys
IBM 7 12816 1 128 UNKNOWN pooltag ' IBM', please update pooltag.txt
MiSc 64 12800 0 0 UNKNOWN pooltag 'MiSc', please update pooltag.txt
Scbf 17 12648 0 0 Mass storage driver tags
MuoC 6 12168 0 0 UNKNOWN pooltag 'MuoC', please update pooltag.txt
CcBc 84 12096 0 0 Cache Manager Bcb from pool , Binary: nt!cc
ObCi 209 11704 0 0 captured information for ObCreateObject , Binary: nt!ob
NDqu 10 11600 0 0 NDIS_TAG_QUEUE , Binary: ndis.sys
IWD8 1 11320 0 0 UNKNOWN pooltag 'IWD8', please update pooltag.txt
IWDc 1 10952 0 0 UNKNOWN pooltag 'IWDc', please update pooltag.txt
IntO 91 10920 0 0 UNKNOWN pooltag 'IntO', please update pooltag.txt
IWFH 1 10880 0 0 UNKNOWN pooltag 'IWFH', please update pooltag.txt
#KTP 455 10864 0 0 UNKNOWN pooltag '#KTP', please update pooltag.txt
Wmip 270 10800 412 43336 Wmi General purpose allocation
AzDH 9 10800 0 0 UNKNOWN pooltag 'AzDH', please update pooltag.txt
IWxa 18 10656 0 0 UNKNOWN pooltag 'IWxa', please update pooltag.txt
Wdog 11 10456 2 48 Watchdog object/context allocation , Binary: watchdog.sys
IWEC 1 10368 0 0 UNKNOWN pooltag 'IWEC', please update pooltag.txt
IWC9 1 10272 0 0 UNKNOWN pooltag 'IWC9', please update pooltag.txt
IWBo 1 10248 0 0 UNKNOWN pooltag 'IWBo', please update pooltag.txt
IWBn 1 10248 0 0 UNKNOWN pooltag 'IWBn', please update pooltag.txt
IWBb 1 10240 0 0 UNKNOWN pooltag 'IWBb', please update pooltag.txt
IWBx 1 10240 0 0 UNKNOWN pooltag 'IWBx', please update pooltag.txt
DtrV 34 10232 0 0 UNKNOWN pooltag 'DtrV', please update pooltag.txt
tvEm 9 10192 0 0 UNKNOWN pooltag 'tvEm', please update pooltag.txt
ibtu 45 10104 1 128 UNKNOWN pooltag 'ibtu', please update pooltag.txt
#HTM 140 10080 0 0 UNKNOWN pooltag '#HTM', please update pooltag.txt
HidC 75 9984 10 880 HID Class driver , Binary: hidclass.sys
AZ16 9 9936 0 0 UNKNOWN pooltag 'AZ16', please update pooltag.txt
IWBF 1 9888 0 0 UNKNOWN pooltag 'IWBF', please update pooltag.txt
Dcdd 25 9808 0 0 Canonical display driver , Binary: cdd.dll
iusb 95 9720 3 264 UNKNOWN pooltag 'iusb', please update pooltag.txt
FMct 28 9632 0 0 TRACK_COMPLETION_NODES structure , Binary: fltmgr.sys
IWfs 1 9616 0 0 UNKNOWN pooltag 'IWfs', please update pooltag.txt
FMrr 56 9600 0 0 Per-processor Cache-aware rundown ref structure , Binary: fltmgr.sys
WfTi 22 9592 0 0 WFP timer
RxIr 9 9576 0 0 RDBSS RxContext , Binary: rdbss.sys
LMou 42 9480 6 648 UNKNOWN pooltag 'LMou', please update pooltag.txt
smVR 1 9400 0 0 ReadyBoost allocations , Binary: nt!store or rdyboost.sys
AfdE 15 9384 0 0 Afd endpoint structure , Binary: afd.sys
IWEO 1 9352 0 0 UNKNOWN pooltag 'IWEO', please update pooltag.txt
EtwL 13 9344 0 0 Etw LoggerContext , Binary: nt!etw
FSrt 60 9296 12 8736 File System Run Time allocations (DO NOT USE!) , Binary: nt!fsrtl
Mmdl 3 9240 0 0 Mm Mdls for flushes , Binary: nt!mm
IW2P 18 9072 0 0 UNKNOWN pooltag 'IW2P', please update pooltag.txt
CcVp 25 9024 0 0 Cache Manager Array of Vacb pointers for a cached stream , Binary: nt!cc
IWA8 1 8968 0 0 UNKNOWN pooltag 'IWA8', please update pooltag.txt
IWBA 1 8824 0 0 UNKNOWN pooltag 'IWBA', please update pooltag.txt
@GMa 6 8784 0 0 UNKNOWN pooltag '@GMa', please update pooltag.txt
IWEN 1 8768 0 0 UNKNOWN pooltag 'IWEN', please update pooltag.txt
IWEe 91 8736 0 0 UNKNOWN pooltag 'IWEe', please update pooltag.txt
Vad 121 8712 0 0 Mm virtual address descriptors , Binary: nt!mm
IWGQ 1 8504 0 0 UNKNOWN pooltag 'IWGQ', please update pooltag.txt
ObjT 42 8400 0 0 object type objects , Binary: nt!ob
NDpp 4 8352 0 0 packet pool , Binary: ndis.sys
VfAT 172 8280 0 0 Verifier AVL trees , Binary: nt!Vf
EtwQ 1 8192 0 0 UNKNOWN pooltag 'EtwQ', please update pooltag.txt
Ipur 2 8192 0 0 IP Unicast Routes , Binary: tcpip.sys
PPMi 8 8192 0 0 Kernel Processor Power Management Idle States. , Binary: nt!po
#ELC 1 8192 0 0 UNKNOWN pooltag '#ELC', please update pooltag.txt
moni 43 8096 3 224 UNKNOWN pooltag 'moni', please update pooltag.txt
FxDr 24 8048 1 128 KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable. , Binary: wdf01000.sys
MmDb 47 7968 0 0 NtMapViewOfSection service , Binary: nt!mm
FMvo 6 7952 0 0 FLT_VOLUME structure , Binary: fltmgr.sys
IWCI 1 7936 0 0 UNKNOWN pooltag 'IWCI', please update pooltag.txt
WmiR 123 7872 0 0 Wmi Registration info blocks
SmbD 52 7728 4 296 SMB miniredirector allocations , Binary: mrxsmb.sys
TTEC 1 7688 0 0 UNKNOWN pooltag 'TTEC', please update pooltag.txt
AleE 20 7528 0 0 ALE endpoint context , Binary: tcpip.sys
AleP 23 7464 0 0 ALE process image path , Binary: tcpip.sys
HCIT 14 7392 1 128 Bluetooth port driver (HCI) , Binary: bthport.sys
@GMe 5 7320 0 0 UNKNOWN pooltag '@GMe', please update pooltag.txt
IWDK 1 7304 0 0 UNKNOWN pooltag 'IWDK', please update pooltag.txt
ALPC 23 7240 0 0 ALPC port objects , Binary: nt!alpc
TcpI 10 7104 0 0 TCP ISN buffers , Binary: tcpip.sys
Clfs 109 7048 34 225872 CLFS General buffer, or owner page lookaside list , Binary: clfs.sys
MmSc 97 6984 0 0 subsections used to map data files , Binary: nt!mm
Etwp 4 6944 0 0 Etw TracingBlock , Binary: nt!etw
IWXa 143 6864 0 0 UNKNOWN pooltag 'IWXa', please update pooltag.txt
IWqD 18 6768 0 0 UNKNOWN pooltag 'IWqD', please update pooltag.txt
IW0k 18 6768 0 0 UNKNOWN pooltag 'IW0k', please update pooltag.txt
IWv6 1 6760 0 0 UNKNOWN pooltag 'IWv6', please update pooltag.txt
ReTa 203 6656 0 0 Resource Extended Table
TPM. 31 6496 4 272 UNKNOWN pooltag ' TPM', please update pooltag.txt
IWIt 90 6480 0 0 UNKNOWN pooltag 'IWIt', please update pooltag.txt
IWTv 1 6424 0 0 UNKNOWN pooltag 'IWTv', please update pooltag.txt
IWHk 1 6376 0 0 UNKNOWN pooltag 'IWHk', please update pooltag.txt
Ntfn 75 6336 0 0 SCB_NONPAGED , Binary: ntfs.sys
PmPE 8 6336 0 0 Partition Manager partition entry , Binary: partmgr.sys
IWDE 1 6336 0 0 UNKNOWN pooltag 'IWDE', please update pooltag.txt
FIcv 10 6320 0 0 FileInfo FS-filter Volume Context , Binary: fileinfo.sys
IWCz 1 6152 0 0 UNKNOWN pooltag 'IWCz', please update pooltag.txt
IWC1 1 6152 0 0 UNKNOWN pooltag 'IWC1', please update pooltag.txt
IWOm 1 6128 0 0 UNKNOWN pooltag 'IWOm', please update pooltag.txt
Prcr 28 5984 4 4128 Processr driver allocations , Binary: processr.sys
Pcsb 4 5952 0 0 PACER Send Buffers , Binary: pacer.sys
4321 4 5952 0 0 UNKNOWN pooltag '4321', please update pooltag.txt
NDco 28 5872 0 0 NDIS_TAG_CO , Binary: ndis.sys
Iptt 18 5856 0 0 IP Timer Tables , Binary: tcpip.sys
IWzQ 1 5840 0 0 UNKNOWN pooltag 'IWzQ', please update pooltag.txt
Even 96 5808 0 0 Event objects
IWGU 1 5784 0 0 UNKNOWN pooltag 'IWGU', please update pooltag.txt
FMfc 51 5712 0 0 FLTMGR_FILE_OBJECT_CONTEXT structure , Binary: fltmgr.sys
NDan 48 5504 0 0 adapter name , Binary: ndis.sys
Proc 7 5456 0 0 Process objects , Binary: nt!ps
Ntff 22 5456 511 457856 FCB_DATA , Binary: ntfs.sys
TmRm 14 5376 0 0 Tm KRESOURCEMANAGER object , Binary: nt!tm
#TLQ 224 5376 0 0 UNKNOWN pooltag '#TLQ', please update pooltag.txt
ClfE 28 5376 0 0 CLFS Log CCB lookaside list , Binary: clfs.sys
IU3M 167 5344 0 0 IIS Utility Driver
HidP 20 5216 0 0 HID Parser , Binary: hidparse.sys
vwif 33 5104 2 192 UNKNOWN pooltag 'vwif', please update pooltag.txt
ND 40 5064 1 128 general NDIS allocations , Binary: ndis.sys
TPOP 2 5008 0 0 UNKNOWN pooltag 'TPOP', please update pooltag.txt
KbdC 5 4960 0 0 Keyboard Class Driver , Binary: kbdclass.sys
ETOF 28 4952 0 0 UNKNOWN pooltag 'ETOF', please update pooltag.txt
NDfb 9 4752 0 0 NDIS_TAG_LWFILTER_BLOCK , Binary: ndis.sys
IWBS 9 4752 0 0 UNKNOWN pooltag 'IWBS', please update pooltag.txt
NDoa 9 4680 0 0 NDIS_TAG_OID_ARRAY , Binary: ndis.sys
Nhfs 2 4664 0 0 NetIO Hash Function State Data , Binary: tcpip.sys
HdCl 10 4608 2 240 HID Client Sample Driver
IU3H 27 4576 2 4224 IIS Utility Driver
Ioin 25 4520 0 0 Io interrupts
IWAl 2 4512 0 0 UNKNOWN pooltag 'IWAl', please update pooltag.txt
ClfD 10 4480 0 0 CLFS Log virtual FCB lookaside list , Binary: clfs.sys
TDIk 2 4480 0 0 TDI resource
umbu 21 4456 4 280 UNKNOWN pooltag 'umbu', please update pooltag.txt
IWXb 91 4368 0 0 UNKNOWN pooltag 'IWXb', please update pooltag.txt
vdrv 20 4328 3 272 UNKNOWN pooltag 'vdrv', please update pooltag.txt
ScPC 2 4304 0 0 reset bus code
IWLA 1 4264 0 0 UNKNOWN pooltag 'IWLA', please update pooltag.txt
TmTm 7 4200 0 0 Tm KTRANSACTIONMANAGER object , Binary: nt!tm
Txrn 5 4200 0 0 TXF_NONPAGED_RMCB , Binary: ntfs.sys
GZci 10 4160 0 0 UNKNOWN pooltag 'GZci', please update pooltag.txt
MmSi 173 4152 0 0 Control area security image stubs , Binary: nt!mm
CCsw 4 4128 0 0 UNKNOWN pooltag 'CCsw', please update pooltag.txt
I6ua 1 4096 0 0 IPv6 Local Unicast Addresses , Binary: tcpip.sys
I6ai 1 4096 0 0 IPv6 Local Address Identifiers , Binary: tcpip.sys
InF2 1 4096 0 0 Inet Generic Fixed Size Block pool 2 , Binary: tcpip.sys
I4ua 1 4096 0 0 IPv4 Local Unicast Addresses , Binary: tcpip.sys
Plcl 1 4096 0 0 Cache aware pushlock entry. One per processor
AWP0 1 4096 0 0 UNKNOWN pooltag 'AWP0', please update pooltag.txt
I4ba 1 4096 0 0 IPv4 Local Broadcast Addresses , Binary: tcpip.sys
I4ai 1 4096 0 0 IPv4 Local Address Identifiers , Binary: tcpip.sys
CcZe 1 4096 0 0 Cache Manager Buffer of Zeros , Binary: nt!cc
IWC0 7 4088 0 0 UNKNOWN pooltag 'IWC0', please update pooltag.txt
NtFL 12 4072 25 1000 LogSup.c , Binary: ntfs.sys
:PRT 1 4000 0 0 UNKNOWN pooltag ':PRT', please update pooltag.txt
msis 20 3960 3 240 UNKNOWN pooltag 'msis', please update pooltag.txt
8042 4 3944 0 0 PS/2 keyboard and mouse , Binary: i8042prt.sys
Comp 20 3936 1 144 UNKNOWN pooltag 'Comp', please update pooltag.txt
IWD5 1 3928 0 0 UNKNOWN pooltag 'IWD5', please update pooltag.txt
AleS 8 3744 0 0 ALE token info , Binary: tcpip.sys
NMRb 52 3744 0 0 Network Module Registrar Bindings , Binary: tcpip.sys
Flng 4 3696 0 0 Framing Layer Generic Buffers (Tunnel/Port change notifications, ACLs) , Binary: tcpip.sys
#HRL 142 3664 0 0 UNKNOWN pooltag '#HRL', please update pooltag.txt
NMRm 57 3648 0 0 Network Module Registrar Modules , Binary: tcpip.sys
Gemm 17 3624 3 240 UNKNOWN pooltag 'Gemm', please update pooltag.txt
AcpS 86 3592 1 32 ACPI string data , Binary: acpi.sys
MmIn 16 3584 0 0 Mm inpaged io structures , Binary: nt!mm
IWAy 2 3376 0 0 UNKNOWN pooltag 'IWAy', please update pooltag.txt
IWkw 1 3336 0 0 UNKNOWN pooltag 'IWkw', please update pooltag.txt
ReSe 104 3328 0 0 Resource Semaphore
PnpV 52 3328 0 0 PNPMGR notify entry loc , Binary: nt!pnp
GZdp 1 3280 0 0 UNKNOWN pooltag 'GZdp', please update pooltag.txt
TcWS 1 3272 0 0 TCP Window Scaling Diagnostics , Binary: tcpip.sys
IWEG 1 3208 0 0 UNKNOWN pooltag 'IWEG', please update pooltag.txt
Fwpp 18 3200 3 12424 Windows Filtering Platform export driver. , Binary: fwpkclnt.sys
AlPi 14 3200 0 0 ALE peer info , Binary: tcpip.sys
#STX 30 3120 0 0 UNKNOWN pooltag '#STX', please update pooltag.txt
Hcac 5 3080 2 688 UNKNOWN pooltag 'Hcac', please update pooltag.txt
IWI6 1 3064 0 0 UNKNOWN pooltag 'IWI6', please update pooltag.txt
PXb. 5 3040 0 0 UNKNOWN pooltag ' PXb', please update pooltag.txt
PX3. 5 3000 0 0 UNKNOWN pooltag ' PX3', please update pooltag.txt
StBn 3 3000 0 0 UNKNOWN pooltag 'StBn', please update pooltag.txt
NDpb 7 3000 0 0 protocol block , Binary: ndis.sys
NDnd 2 2976 0 0 NDIS_TAG_POOL_NDIS , Binary: ndis.sys
TRWp 2 2976 0 0 UNKNOWN pooltag 'TRWp', please update pooltag.txt
IWl0 12 2976 0 0 UNKNOWN pooltag 'IWl0', please update pooltag.txt
NSIr 40 2952 0 0 NSI Generic Buffers , Binary: nsi.dll
IWJt 8 2920 0 0 UNKNOWN pooltag 'IWJt', please update pooltag.txt
VfIT 154 2920 0 0 Verifier Import Address Table information , Binary: nt!Vf
cppD 121 2904 0 0 UNKNOWN pooltag 'cppD', please update pooltag.txt
IWA7 6 2864 0 0 UNKNOWN pooltag 'IWA7', please update pooltag.txt
NDst 18 2856 0 0 NDIS_TAG_STRING , Binary: ndis.sys
IWHI 1 2832 0 0 UNKNOWN pooltag 'IWHI', please update pooltag.txt
IWBC 21 2816 0 0 UNKNOWN pooltag 'IWBC', please update pooltag.txt
IWBY 3 2808 0 0 UNKNOWN pooltag 'IWBY', please update pooltag.txt
IWEn 1 2608 0 0 UNKNOWN pooltag 'IWEn', please update pooltag.txt
Io.. 4 2592 0 0 UNKNOWN pooltag ' Io', please update pooltag.txt
NDpf 11 2552 0 0 NDIS_TAG_FILTER , Binary: ndis.sys
FMfl 5 2512 0 0 FLT_FILTER structure , Binary: fltmgr.sys
IWAq 62 2480 0 0 UNKNOWN pooltag 'IWAq', please update pooltag.txt
FstB 3 2472 0 0 ntos\fstub
MT02 1 2432 0 0 UNKNOWN pooltag 'MT02', please update pooltag.txt
IWBB 2 2416 0 0 UNKNOWN pooltag 'IWBB', please update pooltag.txt
AWP3 20 2352 0 0 UNKNOWN pooltag 'AWP3', please update pooltag.txt
FOCX 49 2352 0 0 File System Run Time File Object Context structure , Binary: nt!fsrtl
TcPt 1 2312 0 0 TCP Partitions , Binary: tcpip.sys
KeSc 41 2304 0 0 UNKNOWN pooltag 'KeSc', please update pooltag.txt
IWBU 6 2296 0 0 UNKNOWN pooltag 'IWBU', please update pooltag.txt
ReEv 95 2280 0 0 Resource Event
NBSf 2 2280 0 0 FCB
Dprt 19 2272 16 1472 Video port for Vista display drivers , Binary: dxgkrnl.sys
Vadl 28 2240 0 0 Mm virtual address descriptors (long) , Binary: nt!mm
IWBE 1 2232 0 0 UNKNOWN pooltag 'IWBE', please update pooltag.txt
TdxT 12 2216 0 0 TDX Transport Provider Contexts , Binary: tdx.sys
Pcle 4 2216 0 0 PACER Lines , Binary: pacer.sys
Nb01 2 2208 0 0 NetBT hash table , Binary: netbt.sys
NLcp 2 2192 0 0 Network Layer Compartments , Binary: tcpip.sys
Alep 16 2176 0 0 ALE process info , Binary: tcpip.sys
ONEL 1 2144 0 0 UNKNOWN pooltag 'ONEL', please update pooltag.txt
CcPc 22 2112 0 0 Cache Manager Private Cache Map , Binary: nt!cc
PcCr 4 2112 1 40 WDM audio stuff
FlpI 12 2112 0 0 Framing Layer Interfaces , Binary: tcpip.sys
ACPN 4 2080 0 0 UNKNOWN pooltag 'ACPN', please update pooltag.txt
IPdc 2 2064 0 0 IP Destination Cache , Binary: tcpip.sys
WanO 1 2064 0 0 NdisWan Tags (PPP Framing module for Remote Access)
IWCy 1 2056 0 0 UNKNOWN pooltag 'IWCy', please update pooltag.txt
Frag 257 2056 120 960 UNKNOWN pooltag 'Frag', please update pooltag.txt
FMcr 4 2032 0 0 Context registration structures , Binary: fltmgr.sys
#EVR 1 2024 0 0 UNKNOWN pooltag '#EVR', please update pooltag.txt
PX2. 1 2008 0 0 UNKNOWN pooltag ' PX2', please update pooltag.txt
PXl. 1 2008 0 0 UNKNOWN pooltag ' PXl', please update pooltag.txt
IW2h 1 1984 0 0 UNKNOWN pooltag 'IW2h', please update pooltag.txt
ClMl 6 1968 0 0 UNKNOWN pooltag 'ClMl', please update pooltag.txt
IWIu 27 1944 0 0 UNKNOWN pooltag 'IWIu', please update pooltag.txt
ClMc 11 1936 0 0 UNKNOWN pooltag 'ClMc', please update pooltag.txt
IWGb 1 1936 0 0 UNKNOWN pooltag 'IWGb', please update pooltag.txt
Ipng 6 1920 0 0 IP Generic buffers (Address, Interface, Packetize, Route allocations) , Binary: tcpip.sys
AzD8 3 1896 0 0 UNKNOWN pooltag 'AzD8', please update pooltag.txt
IWGc 1 1856 0 0 UNKNOWN pooltag 'IWGc', please update pooltag.txt
IWNG 1 1840 0 0 UNKNOWN pooltag 'IWNG', please update pooltag.txt
IWJs 1 1832 0 0 UNKNOWN pooltag 'IWJs', please update pooltag.txt
WSKs 9 1824 0 0 WSK socket , Binary: afd.sys
Xlal 12 1824 0 0 UNKNOWN pooltag 'Xlal', please update pooltag.txt
UQCa 2 1808 0 0 UNKNOWN pooltag 'UQCa', please update pooltag.txt
NeWQ 45 1800 0 0 NetIO WorkQueue Data , Binary: tcpip.sys
AcpR 1 1792 9 2608 ACPI resource data , Binary: acpi.sys
IPif 10 1792 0 0 IP Interfaces , Binary: tcpip.sys
IWGu 1 1784 0 0 UNKNOWN pooltag 'IWGu', please update pooltag.txt
Xsu 17 1784 0 0 UNKNOWN pooltag 'Xsu ', please update pooltag.txt
#FXS 31 1776 0 0 UNKNOWN pooltag '#FXS', please update pooltag.txt
PXd. 5 1720 0 0 UNKNOWN pooltag ' PXd', please update pooltag.txt
CcPT 5 1720 0 0 Prefetcher trace , Binary: nt!ccpf
#UCH 7 1688 2 160 UNKNOWN pooltag '#UCH', please update pooltag.txt
WanJ 5 1680 0 0 LineUpInfo
CBRe 42 1680 0 0 CallbackRegistration
IWBc 35 1680 0 0 UNKNOWN pooltag 'IWBc', please update pooltag.txt
NDfv 4 1672 0 0 NDIS_TAG_LWFILTER_DRIVER , Binary: ndis.sys
IWLm 41 1640 0 0 UNKNOWN pooltag 'IWLm', please update pooltag.txt
Ala6 7 1600 0 0 ALE remote endpoint IPv6 address , Binary: tcpip.sys
TcST 7 1600 0 0 TCP Syn TCBs , Binary: tcpip.sys
AlLl 7 1600 0 0 ALE remote endpoint LRU , Binary: tcpip.sys
AleU 7 1600 0 0 ALE pend context , Binary: tcpip.sys
AfdC 7 1600 0 0 Afd connection structure , Binary: afd.sys
TcpB 7 1600 0 0 TCP Offload Blocks , Binary: tcpip.sys
ReED 7 1600 0 0 UNKNOWN pooltag 'ReED', please update pooltag.txt
Alei 7 1600 0 0 ALE arrival/nexthop interface cache , Binary: tcpip.sys
VadS 40 1600 0 0 Mm virtual address descriptors (short) , Binary: nt!mm
AfdR 7 1600 0 0 Afd remote address buffer , Binary: afd.sys
ClfG 8 1600 0 0 CLFS Log I/O Request lookaside list , Binary: clfs.sys
AlP4 7 1600 0 0 ALE peer IPv4 address , Binary: tcpip.sys
StDa 7 1600 0 0 WFP stream inspection data , Binary: netio.sys
AlCi 7 1600 0 0 ALE credential info , Binary: tcpip.sys
AlPU 7 1600 0 0 ALE secure socket policy update , Binary: tcpip.sys
TcDM 7 1600 0 0 TCP Delayed Delivery Memory Descriptor Lists , Binary: tcpip.sys
AlUI 7 1600 0 0 UNKNOWN pooltag 'AlUI', please update pooltag.txt
TcRH 7 1600 0 0 TCP Reassembly Headers , Binary: tcpip.sys
AleD 7 1600 0 0 ALE remote endpoint , Binary: tcpip.sys
AlSP 7 1600 0 0 ALE secure socket policy , Binary: tcpip.sys
AlP6 7 1600 0 0 ALE peer IPv6 address , Binary: tcpip.sys
Ala4 7 1600 0 0 ALE remote endpoint IPv4 address , Binary: tcpip.sys
StCc 7 1600 0 0 WFP stream inspection call context , Binary: netio.sys
TcpE 7 1600 0 0 TCP Endpoints , Binary: tcpip.sys
SeSd 11 1584 17 1968 Security Descriptor , Binary: nt!se
NSIk 28 1568 0 0 NSI RPC Tansactions , Binary: nsi.dll
IWET 1 1568 0 0 UNKNOWN pooltag 'IWET', please update pooltag.txt
IWJo 1 1544 0 0 UNKNOWN pooltag 'IWJo', please update pooltag.txt
GZdt 1 1528 0 0 UNKNOWN pooltag 'GZdt', please update pooltag.txt
IWaX 17 1496 0 0 UNKNOWN pooltag 'IWaX', please update pooltag.txt
NMhf 16 1496 0 0 Handle Factory pool , Binary: netio.sys
Nnbf 1 1488 0 0 NetIO NetBuffers , Binary: netio.sys
NDch 18 1488 0 0 NDIS_TAG_CONFIG_HANDLE , Binary: ndis.sys
W3Rx 1 1488 0 0 UNKNOWN pooltag 'W3Rx', please update pooltag.txt
_pPF 1 1488 0 0 UNKNOWN pooltag '_pPF', please update pooltag.txt
AVpc 1 1488 0 0 UNKNOWN pooltag 'AVpc', please update pooltag.txt
Nnnn 1 1488 0 0 NetIO NetBuffers And NetBufferLists , Binary: netio.sys
NDrt 1 1488 0 0 NDIS_TAG_RST_NBL , Binary: ndis.sys
Nnbl 1 1488 0 0 NetIO NetBufferLists , Binary: netio.sys
TNbl 1 1488 0 0 TCP Send NetBufferLists , Binary: tcpip.sys
TcDN 1 1488 0 0 TCP Delayed Delivery Network Buffer Lists , Binary: tcpip.sys
W3Tx 1 1488 0 0 UNKNOWN pooltag 'W3Tx', please update pooltag.txt
UDNb 1 1488 0 0 UDP NetBuffers , Binary: tcpip.sys
UNbl 1 1488 0 0 UDP NetBufferLists , Binary: tcpip.sys
TSNb 1 1488 0 0 TCP Send NetBuffers , Binary: tcpip.sys
WMTx 1 1488 0 0 UNKNOWN pooltag 'WMTx', please update pooltag.txt
MmDT 9 1488 283 18888 Mm debug , Binary: nt!mm
@GM8 1 1464 0 0 UNKNOWN pooltag '@GM8', please update pooltag.txt
@GMm 1 1464 0 0 UNKNOWN pooltag '@GMm', please update pooltag.txt
@GM7 1 1464 0 0 UNKNOWN pooltag '@GM7', please update pooltag.txt
@GMg 1 1464 0 0 UNKNOWN pooltag '@GMg', please update pooltag.txt
@GM! 1 1464 0 0 UNKNOWN pooltag '@GM!', please update pooltag.txt
Vadm 18 1440 0 0 UNKNOWN pooltag 'Vadm', please update pooltag.txt
CxIc 5 1360 0 0 UNKNOWN pooltag 'CxIc', please update pooltag.txt
Call 18 1344 0 0 kernel callback object signature , Binary: nt!ex
ObLl 4 1280 0 0 UNKNOWN pooltag 'ObLl', please update pooltag.txt
FSmg 6 1248 0 0 File System Run Time , Binary: nt!fsrtl
BatC 2 1248 0 0 Composite battery driver
NDrd 21 1248 0 0 NDIS_TAG_REG_READ_DATA_BUFFER , Binary: ndis.sys
FxLa 22 1232 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys
GZnc 1 1232 0 0 UNKNOWN pooltag 'GZnc', please update pooltag.txt
NMpc 11 1232 0 0 UNKNOWN pooltag 'NMpc', please update pooltag.txt
AzVP 9 1224 0 0 UNKNOWN pooltag 'AzVP', please update pooltag.txt
:UCH 14 1216 0 0 UNKNOWN pooltag ':UCH', please update pooltag.txt
IWCK 1 1208 0 0 UNKNOWN pooltag 'IWCK', please update pooltag.txt
:TRF 1 1208 0 0 UNKNOWN pooltag ':TRF', please update pooltag.txt
IWGf 1 1168 0 0 UNKNOWN pooltag 'IWGf', please update pooltag.txt
VoSc 8 1168 0 0 Snapshot context allocations , Binary: volsnap.sys
USBB 4 1160 0 0 Bluetooth USB minidriver , Binary: bthusb.sys
Vpb 12 1152 0 0 Io, vpb's
WfpH 22 1152 0 0 WFP hash , Binary: netio.sys
FMfn 4 1152 773 185608 NAME_CACHE_NODE structure , Binary: fltmgr.sys
IWEb 1 1152 0 0 UNKNOWN pooltag 'IWEb', please update pooltag.txt
:LST 11 1144 0 0 UNKNOWN pooltag ':LST', please update pooltag.txt
IWHF 1 1120 0 0 UNKNOWN pooltag 'IWHF', please update pooltag.txt
stfr 3 1120 0 0 UNKNOWN pooltag 'stfr', please update pooltag.txt
IWJb 1 1112 0 0 UNKNOWN pooltag 'IWJb', please update pooltag.txt
IWC_ 1 1112 0 0 UNKNOWN pooltag 'IWC_', please update pooltag.txt
IWDm 1 1112 0 0 UNKNOWN pooltag 'IWDm', please update pooltag.txt
IWB7 1 1096 0 0 UNKNOWN pooltag 'IWB7', please update pooltag.txt
FMla 1 1096 0 0 Per-processor IRPCTRL lookaside lists , Binary: fltmgr.sys
GZpe 7 1096 0 0 UNKNOWN pooltag 'GZpe', please update pooltag.txt
BTHP 12 1088 0 0 Bluetooth port driver (generic) , Binary: bthport.sys
DOPE 15 1080 0 0 Device Object Power Extension (po component)
DU12 1 1072 0 0 UNKNOWN pooltag 'DU12', please update pooltag.txt
MmIm 1 1064 0 0 IO space MDL trackers , Binary: nt!mm
NDwi 22 1064 0 0 NDIS_TAG_WORK_ITEM , Binary: ndis.sys
PmAT 2 1040 0 0 Partition Manager attributes table cache , Binary: partmgr.sys
IWiP 1 1040 0 0 UNKNOWN pooltag 'IWiP', please update pooltag.txt
TcRL 1 1032 0 0 TCP Create And Connect Tcb Rate Limit Pool , Binary: tcpip.sys
IWCh 1 1032 0 0 UNKNOWN pooltag 'IWCh', please update pooltag.txt
IWCg 1 1032 0 0 UNKNOWN pooltag 'IWCg', please update pooltag.txt
TdxM 1 1032 0 0 TDX Message Indication Buffers , Binary: tdx.sys
AleL 4 1032 0 0 ALE LRU , Binary: tcpip.sys
TcDQ 1 1032 0 0 TCP Delay Queues , Binary: tcpip.sys
PcCi 2 1024 0 0 WDM audio port class adapter device object stuff
WfpI 28 1008 0 0 WFP index , Binary: netio.sys
IW9h 18 1008 0 0 UNKNOWN pooltag 'IW9h', please update pooltag.txt
#PCI 2 992 0 0 UNKNOWN pooltag '#PCI', please update pooltag.txt
DxgM 3 984 16 1464 UNKNOWN pooltag 'DxgM', please update pooltag.txt
IWAv 2 976 0 0 UNKNOWN pooltag 'IWAv', please update pooltag.txt
L2T1 1 968 0 0 ndis\l2tp / MTAG_ADAPTERCB
IoEr 5 960 0 0 Io error log packets , Binary: nt!io
CM48 6 960 0 0 Internal Configuration manager allocations , Binary: nt!cm
IWEr 1 952 0 0 UNKNOWN pooltag 'IWEr', please update pooltag.txt
Adap 7 952 0 0 Adapter objects
InNl 6 944 0 0 UNKNOWN pooltag 'InNl', please update pooltag.txt
CM44 13 936 0 0 Internal Configuration manager allocations , Binary: nt!cm
IWFg 1 928 0 0 UNKNOWN pooltag 'IWFg', please update pooltag.txt
NDrw 23 920 0 0 NDIS_TAG_RWLOCK , Binary: ndis.sys
AcpP 16 920 0 0 ACPI power data , Binary: acpi.sys
#TFC 1 912 0 0 UNKNOWN pooltag '#TFC', please update pooltag.txt
Jxxx 19 912 0 0 UNKNOWN pooltag 'Jxxx', please update pooltag.txt
Ntfp 16 896 0 0 Unkown allocation , Binary: ntfs.sys
Ksec 1 880 2 10248 Security device driver , Binary: ksecdd.sys
IWWd 1 872 0 0 UNKNOWN pooltag 'IWWd', please update pooltag.txt
AzE9 9 864 0 0 UNKNOWN pooltag 'AzE9', please update pooltag.txt
IW0G 18 864 0 0 UNKNOWN pooltag 'IW0G', please update pooltag.txt
FMng 6 864 0 0 NAME_GENERATION_CONTEXT structure , Binary: fltmgr.sys
PoIr 12 864 0 0 UNKNOWN pooltag 'PoIr', please update pooltag.txt
IWIp 4 864 0 0 UNKNOWN pooltag 'IWIp', please update pooltag.txt
IWDQ 1 864 0 0 UNKNOWN pooltag 'IWDQ', please update pooltag.txt
Sema 12 864 0 0 Semaphore objects
VoSs 14 856 1 128 Short term allocations , Binary: volsnap.sys
IWEu 1 848 0 0 UNKNOWN pooltag 'IWEu', please update pooltag.txt
IWA9 1 848 0 0 UNKNOWN pooltag 'IWA9', please update pooltag.txt
HidB 5 848 0 0 UNKNOWN pooltag 'HidB', please update pooltag.txt
IWEv 1 840 0 0 UNKNOWN pooltag 'IWEv', please update pooltag.txt
FMfr 1 840 0 0 FLT_FRAME structure , Binary: fltmgr.sys
Desk 4 832 0 0 UNKNOWN pooltag 'Desk', please update pooltag.txt
SeTl 13 832 0 0 Security Token Lock , Binary: nt!se
FxLc 22 808 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys
IWrV 1 808 0 0 UNKNOWN pooltag 'IWrV', please update pooltag.txt
IW2o 1 808 0 0 UNKNOWN pooltag 'IW2o', please update pooltag.txt
#PCX 2 800 0 0 UNKNOWN pooltag '#PCX', please update pooltag.txt
IWGM 1 800 0 0 UNKNOWN pooltag 'IWGM', please update pooltag.txt
FSfm 20 800 0 0 File System Run Time Fast Mutex Lookaside List , Binary: nt!fsrtl
IWj0 5 800 0 0 UNKNOWN pooltag 'IWj0', please update pooltag.txt
IWBI 1 800 0 0 UNKNOWN pooltag 'IWBI', please update pooltag.txt
IWDA 1 800 0 0 UNKNOWN pooltag 'IWDA', please update pooltag.txt
Filt 9 792 0 0 UNKNOWN pooltag 'Filt', please update pooltag.txt
^PIT 1 784 0 0 UNKNOWN pooltag '^PIT', please update pooltag.txt
IWAG 1 784 0 0 UNKNOWN pooltag 'IWAG', please update pooltag.txt
Batt 3 768 5 768 Battery class driver
IPsi 10 768 0 0 IP SubInterfaces , Binary: tcpip.sys
IWXc 16 768 0 0 UNKNOWN pooltag 'IWXc', please update pooltag.txt
Mdp 2 768 0 0 Memory Descriptor Lists , Binary: netio.sys
IWAB 1 760 0 0 UNKNOWN pooltag 'IWAB', please update pooltag.txt
SeOn 6 736 0 0 Security Captured Object Name information , Binary: nt!se
IW60 17 736 0 0 UNKNOWN pooltag 'IW60', please update pooltag.txt
IWDa 1 736 0 0 UNKNOWN pooltag 'IWDa', please update pooltag.txt
PTPa 1 736 0 0 UNKNOWN pooltag 'PTPa', please update pooltag.txt
tIkW 7 728 0 0 UNKNOWN pooltag 'tIkW', please update pooltag.txt
IW41 18 720 0 0 UNKNOWN pooltag 'IW41', please update pooltag.txt
AzD5 9 720 0 0 UNKNOWN pooltag 'AzD5', please update pooltag.txt
#INX 10 720 0 0 UNKNOWN pooltag '#INX', please update pooltag.txt
ArbM 30 720 0 0 ARBITER_MISC_TAG , Binary: nt!arb
NDrc 2 704 0 0 NDIS_TAG_RWL_REFCOUNT , Binary: ndis.sys
IWYL 1 696 0 0 UNKNOWN pooltag 'IWYL', please update pooltag.txt
NDwh 5 688 0 0 NDIS_TAG_WRAPPER_HANDLE , Binary: ndis.sys
AcpE 1 680 0 0 ACPI embedded controller data , Binary: acpi.sys
WanN 1 680 0 0 NdisPacketPool Desc
Afdr 3 680 0 0 Afd ERESOURCE buffer , Binary: afd.sys
Txts 5 680 0 0 TXF_TRANS_SYNC , Binary: ntfs.sys
IW3f 1 680 0 0 UNKNOWN pooltag 'IW3f', please update pooltag.txt
NLcc 14 672 0 0 Network Layer Client Contexts , Binary: tcpip.sys
Usla 6 672 0 0 USERTAG_LOOKASIDE , Binary: win32k!InitLockRecordLookaside
NMRn 12 672 0 0 Network Module Registrar Network Protocol Identifiers , Binary: tcpip.sys
Ussy 20 672 0 0 USERTAG_SYSTEM , Binary: win32k!xxxDesktopThread
MmWe 4 672 0 0 Work entries for writing out modified filesystem pages. , Binary: nt!mm
IoUs 28 672 0 0 I/O SubSystem completion Context Allocation , Binary: nt!io
WanM 8 664 0 0 Connection Table
FIXE 5 664 0 0 UNKNOWN pooltag 'FIXE', please update pooltag.txt
PoEa 1 664 0 0 MTAG_ADAPTER , Binary: raspppoe.sys
KSde 1 656 0 0 UNKNOWN pooltag 'KSde', please update pooltag.txt
fnoC 1 656 0 0 UNKNOWN pooltag 'fnoC', please update pooltag.txt
CRYP 2 648 0 0 UNKNOWN pooltag 'CRYP', please update pooltag.txt
KSdh 3 648 0 0 device header
Pcfc 4 640 0 0 PACER Filter Contexts , Binary: pacer.sys
PXh. 5 640 0 0 UNKNOWN pooltag ' PXh', please update pooltag.txt
NtfI 20 640 0 0 IO_CONTEXT , Binary: ntfs.sys
MmDp 6 640 11 1504 Lost delayed write context , Binary: nt!mm
IWG8 1 640 0 0 UNKNOWN pooltag 'IWG8', please update pooltag.txt
NLap 2 640 0 0 Network Layer Netio Helper Function allocations , Binary: tcpip.sys
IWBa 2 624 0 0 UNKNOWN pooltag 'IWBa', please update pooltag.txt
Nb07 2 624 0 0 NetBT datagram request tracker , Binary: netbt.sys
DNME 3 624 0 0 UNKNOWN pooltag 'DNME', please update pooltag.txt
@KCH 3 624 0 0 (Intel video driver) Chipset specific service
IWCd 1 616 0 0 UNKNOWN pooltag 'IWCd', please update pooltag.txt
IWGi 1 616 0 0 UNKNOWN pooltag 'IWGi', please update pooltag.txt
IWAA 1 616 0 0 UNKNOWN pooltag 'IWAA', please update pooltag.txt
Time 3 600 0 0 Timer objects , Binary: nt!ke
IWAk 2 592 0 0 UNKNOWN pooltag 'IWAk', please update pooltag.txt
TcpN 2 592 0 0 TCP Name Service Interfaces , Binary: tcpip.sys
OlmI 1 584 0 0 Offload Manager Interfaces , Binary: tcpip.sys
IWFL 1 584 0 0 UNKNOWN pooltag 'IWFL', please update pooltag.txt
IWXH 18 576 0 0 UNKNOWN pooltag 'IWXH', please update pooltag.txt
FMwi 9 576 0 0 Work item structures , Binary: fltmgr.sys
HidU 8 576 0 0 UNKNOWN pooltag 'HidU', please update pooltag.txt
TuPI 1 576 0 0 UNKNOWN pooltag 'TuPI', please update pooltag.txt
IWKR 1 568 0 0 UNKNOWN pooltag 'IWKR', please update pooltag.txt
IWKT 1 568 0 0 UNKNOWN pooltag 'IWKT', please update pooltag.txt
IWKP 1 568 0 0 UNKNOWN pooltag 'IWKP', please update pooltag.txt
IWQH 1 568 0 0 UNKNOWN pooltag 'IWQH', please update pooltag.txt
IWKM 1 568 0 0 UNKNOWN pooltag 'IWKM', please update pooltag.txt
XSav 1 568 0 0 UNKNOWN pooltag 'XSav', please update pooltag.txt
IWjb 1 568 0 0 UNKNOWN pooltag 'IWjb', please update pooltag.txt
IWKK 1 568 0 0 UNKNOWN pooltag 'IWKK', please update pooltag.txt
IWF_ 1 568 0 0 UNKNOWN pooltag 'IWF_', please update pooltag.txt
NDfm 5 560 0 0 NDIS_TAG_FAKE_MAC , Binary: ndis.sys
WfpF 14 560 0 0 WFP filters , Binary: netio.sys
LfsS 5 560 7 132872 UNKNOWN pooltag 'LfsS', please update pooltag.txt
PX9. 5 560 0 0 UNKNOWN pooltag ' PX9', please update pooltag.txt
ObCI 4 544 0 0 object creation lookaside list , Binary: nt!ob
IWAw 2 544 0 0 UNKNOWN pooltag 'IWAw', please update pooltag.txt
CcWK 4 544 0 0 Kernel Cache Manager lookaside list , Binary: nt!cc
ExIC 4 544 0 0 UNKNOWN pooltag 'ExIC', please update pooltag.txt
ObNM 4 544 0 0 name buffer per processor lookaside pointers , Binary: nt!ob
IW1j 1 536 0 0 UNKNOWN pooltag 'IW1j', please update pooltag.txt
TpmP 10 536 0 0 UNKNOWN pooltag 'TpmP', please update pooltag.txt
Ntfc 6 528 78 6864 CCB_DATA , Binary: ntfs.sys
RNVL 3 528 0 0 UNKNOWN pooltag 'RNVL', please update pooltag.txt
CTSP 8 512 0 0 UNKNOWN pooltag 'CTSP', please update pooltag.txt
NBqh 16 512 0 0 Non-blocking queue entries used to carry the real data in the queue.
:PWQ 4 512 0 0 UNKNOWN pooltag ':PWQ', please update pooltag.txt
RCDJ 1 512 0 0 UNKNOWN pooltag 'RCDJ', please update pooltag.txt
User 8 512 0 0 USERTAG_ERESOURCE , Binary: win32k!InitCreateUserCrit
IWAC 1 504 0 0 UNKNOWN pooltag 'IWAC', please update pooltag.txt
RNDR 6 480 0 0 UNKNOWN pooltag 'RNDR', please update pooltag.txt
NtfV 5 480 0 0 VPB , Binary: ntfs.sys
PlWl 2 480 1 240 UNKNOWN pooltag 'PlWl', please update pooltag.txt
#KTC 12 480 0 0 UNKNOWN pooltag '#KTC', please update pooltag.txt
ScLW 2 464 0 0 Power , Binary: classpnp.sys
IoCo 3 456 0 0 UNKNOWN pooltag 'IoCo', please update pooltag.txt
stor 3 448 1 136 UNKNOWN pooltag 'stor', please update pooltag.txt
IWB0 1 448 0 0 UNKNOWN pooltag 'IWB0', please update pooltag.txt
AcpF 11 440 0 0 ACPI interface data , Binary: acpi.sys
L2CA 8 440 0 0 Bluetooth port driver (L2CAP) , Binary: bthport.sys
Ke 2 440 1 2056 Kernel data structures
MmSd 6 432 0 0 extended subsections used to map data files , Binary: nt!mm
AzIA 9 432 0 0 UNKNOWN pooltag 'AzIA', please update pooltag.txt
ScB4 4 432 0 0 Storage descriptor header , Binary: classpnp.sys
IWCT 1 432 0 0 UNKNOWN pooltag 'IWCT', please update pooltag.txt
AzI1 9 432 0 0 UNKNOWN pooltag 'AzI1', please update pooltag.txt
AzIc 9 432 0 0 UNKNOWN pooltag 'AzIc', please update pooltag.txt
AzI2 9 432 0 0 UNKNOWN pooltag 'AzI2', please update pooltag.txt
CcMb 3 432 0 0 Cache Manager Mbcb , Binary: nt!cc
IW2H 1 416 0 0 UNKNOWN pooltag 'IW2H', please update pooltag.txt
FVE0 8 416 0 0 General allocations , Binary: fvevol.sys
SeSi 17 408 18 424 Security SID , Binary: nt!se
SDgi 1 408 0 0 UNKNOWN pooltag 'SDgi', please update pooltag.txt
IoSh 17 408 0 0 Io shutdown packet , Binary: nt!io
TDIc 5 400 0 0 TDI resource
Acpg 3 400 0 0 ACPI GPE data , Binary: acpi.sys
AzCI 1 400 0 0 UNKNOWN pooltag 'AzCI', please update pooltag.txt
IWlk 1 392 0 0 UNKNOWN pooltag 'IWlk', please update pooltag.txt
Ntfr 6 392 0 0 ERESOURCE , Binary: ntfs.sys
AmlI 2 392 0 0 ACPI AMLI Pooltags
IWDk 1 392 0 0 UNKNOWN pooltag 'IWDk', please update pooltag.txt
ClfN 6 384 0 0 CLFS Log base file lock , Binary: clfs.sys
NDpn 14 384 0 0 NDIS_TAG_PARAMETER_NODE , Binary: ndis.sys
PPMp 3 384 0 0 Kernel Processor Power Management Perf States. , Binary: nt!po
ScLq 2 384 0 0 Release queue , Binary: classpnp.sys
GZrw 4 384 0 0 UNKNOWN pooltag 'GZrw', please update pooltag.txt
NtfT 4 384 0 0 SCB_SNAPSHOT , Binary: ntfs.sys
WmiA 3 376 4 360 Wmi ACPI mapper
IWLV 1 376 0 0 UNKNOWN pooltag 'IWLV', please update pooltag.txt
IW8O 1 376 0 0 UNKNOWN pooltag 'IW8O', please update pooltag.txt
IWLG 1 376 0 0 UNKNOWN pooltag 'IWLG', please update pooltag.txt
IWB9 1 376 0 0 UNKNOWN pooltag 'IWB9', please update pooltag.txt
NMpt 9 376 0 0 Generic AVL Tree allocations
IWEc 1 368 0 0 UNKNOWN pooltag 'IWEc', please update pooltag.txt
MAS 1 368 0 0 UNKNOWN pooltag ' MAS', please update pooltag.txt
PX5. 5 360 0 0 UNKNOWN pooltag ' PX5', please update pooltag.txt
WanS 5 360 0 0 AfCB/SapCB/VcCB
PmSD 3 360 0 0 Partition Manager snapshot data cache , Binary: partmgr.sys
PXg. 5 360 0 0 UNKNOWN pooltag ' PXg', please update pooltag.txt
FlSB 4 352 0 0 Framing Layer Stack Block , Binary: tcpip.sys
PcSl 2 352 0 0 WDM audio stuff
Thrm 1 344 0 0 Thermal zone structure
TSic 6 344 0 0 Terminal Services - ICA_POOL_TAG , Binary: termdd.sys
IWVe 7 336 0 0 UNKNOWN pooltag 'IWVe', please update pooltag.txt
TEE6 2 336 0 0 UNKNOWN pooltag 'TEE6', please update pooltag.txt
IWeP 1 336 0 0 UNKNOWN pooltag 'IWeP', please update pooltag.txt
TpWo 2 336 0 0 Threadpool worker factory objects , Binary: nt!ex
VdPN 2 328 962 77008 Video display mode management , Binary: dxgkrnl.sys
GZsv 1 328 0 0 UNKNOWN pooltag 'GZsv', please update pooltag.txt
APS2 3 328 0 0 UNKNOWN pooltag 'APS2', please update pooltag.txt
IWQW 1 320 0 0 UNKNOWN pooltag 'IWQW', please update pooltag.txt
Muta 4 320 0 0 Mutant objects
Wind 2 320 0 0 UNKNOWN pooltag 'Wind', please update pooltag.txt
PnpB 2 320 0 0 UNKNOWN pooltag 'PnpB', please update pooltag.txt
Z-Bs 2 320 0 0 UNKNOWN pooltag 'Z-Bs', please update pooltag.txt
DfCg 2 320 0 0 DFS Client PREFIXCACHE , Binary: dfsc.sys
IWAz 1 320 0 0 UNKNOWN pooltag 'IWAz', please update pooltag.txt
IWJ9 1 312 0 0 UNKNOWN pooltag 'IWJ9', please update pooltag.txt
IW7m 1 312 0 0 UNKNOWN pooltag 'IW7m', please update pooltag.txt
WanI 3 312 0 0 IoPacket
IWBK 1 312 0 0 UNKNOWN pooltag 'IWBK', please update pooltag.txt
IWpT 1 312 0 0 UNKNOWN pooltag 'IWpT', please update pooltag.txt
IWW1 1 312 0 0 UNKNOWN pooltag 'IWW1', please update pooltag.txt
AzFg 2 312 0 0 HD Audio Class Driver (Audio Function Group) , Binary: HDAudio.sys
IWdE 1 312 0 0 UNKNOWN pooltag 'IWdE', please update pooltag.txt
NLmc 2 304 0 0 UNKNOWN pooltag 'NLmc', please update pooltag.txt
IWDs 1 296 0 0 UNKNOWN pooltag 'IWDs', please update pooltag.txt
TWTa 2 288 0 0 Echo Request Timer Table , Binary: tcpip.sys
RawE 2 288 0 0 Raw Socket Endpoints , Binary: tcpip.sys
Acpt 12 288 0 0 ACPI table data , Binary: acpi.sys
InTl 6 288 0 0 UNKNOWN pooltag 'InTl', please update pooltag.txt
IWum 18 288 0 0 UNKNOWN pooltag 'IWum', please update pooltag.txt
X 2 288 0 0 UNKNOWN pooltag 'X ', please update pooltag.txt
MT05 1 288 0 0 UNKNOWN pooltag 'MT05', please update pooltag.txt
FlmC 3 288 0 0 Framing Layer Client Contexts , Binary: tcpip.sys
IWGN 1 288 0 0 UNKNOWN pooltag 'IWGN', please update pooltag.txt
FLpc 6 288 0 0 UNKNOWN pooltag 'FLpc', please update pooltag.txt
^KTC 7 280 0 0 UNKNOWN pooltag '^KTC', please update pooltag.txt
Z-SD 1 280 0 0 UNKNOWN pooltag 'Z-SD', please update pooltag.txt
ZzDb 1 280 0 0 UNKNOWN pooltag 'ZzDb', please update pooltag.txt
Icp 6 280 0 0 I/O completion packets queue on a completion ports
UdpN 2 272 0 0 UDP Name Service Interfaces , Binary: tcpip.sys
DPAE 2 272 0 0 UNKNOWN pooltag 'DPAE', please update pooltag.txt
RawN 2 272 0 0 Raw Socket Nsi , Binary: tcpip.sys
IWDr 1 272 0 0 UNKNOWN pooltag 'IWDr', please update pooltag.txt
:GLK 3 264 0 0 UNKNOWN pooltag ':GLK', please update pooltag.txt
AzDC 3 264 0 0 UNKNOWN pooltag 'AzDC', please update pooltag.txt
TcCC 1 264 0 0 TCP Create And Connect Tcb Pool , Binary: tcpip.sys
IWCx 1 264 0 0 UNKNOWN pooltag 'IWCx', please update pooltag.txt
:PWT 3 264 0 0 UNKNOWN pooltag ':PWT', please update pooltag.txt
MmPh 3 264 0 0 Physical memory nodes for querying memory ranges , Binary: nt!mm
FMpr 1 264 0 0 FLT_PRCB structure , Binary: fltmgr.sys
IWBJ 3 264 0 0 UNKNOWN pooltag 'IWBJ', please update pooltag.txt
CcWk 11 264 0 0 Kernel Cache Manager lookaside list , Binary: nt!cc
IW9S 1 256 0 0 UNKNOWN pooltag 'IW9S', please update pooltag.txt
ScDs 2 256 0 0 start device paths
IoTi 8 256 0 0 Io timers , Binary: nt!io
IWCf 1 248 0 0 UNKNOWN pooltag 'IWCf', please update pooltag.txt
CM 3 248 13 3232 Configuration Manager (registry) , Binary: nt!cm
NAcc 6 240 0 0 UNKNOWN pooltag 'NAcc', please update pooltag.txt
NDfa 14 240 0 0 NDIS_TAG_FILTER_ADDR , Binary: ndis.sys
FSrN 5 240 0 0 File System Run Time , Binary: nt!fsrtl
IWBT 6 240 0 0 UNKNOWN pooltag 'IWBT', please update pooltag.txt
CcVm 6 240 0 0 UNKNOWN pooltag 'CcVm', please update pooltag.txt
IWBZ 3 240 0 0 UNKNOWN pooltag 'IWBZ', please update pooltag.txt
IWDq 1 240 0 0 UNKNOWN pooltag 'IWDq', please update pooltag.txt
IdeX 1 240 0 0 PCI IDE
Npfs 1 240 0 0 Npfs Allocations , Binary: npfs.sys
IWBR 4 232 0 0 UNKNOWN pooltag 'IWBR', please update pooltag.txt
Gla; 2 224 0 0 GDITAG_HMGR_LOOKASIDE_RFONT_TYPE , Binary: win32k.sys
Gla1 2 224 0 0 GDITAG_HMGR_LOOKASIDE_DC_TYPE , Binary: win32k.sys
Gla5 2 224 0 0 GDITAG_HMGR_LOOKASIDE_SURF_TYPE , Binary: win32k.sys
Xdll 2 224 0 0 UNKNOWN pooltag 'Xdll', please update pooltag.txt
Gla8 2 224 0 0 GDITAG_HMGR_LOOKASIDE_PAL_TYPE , Binary: win32k.sys
#PII 1 224 0 0 UNKNOWN pooltag '#PII', please update pooltag.txt
:TRD 4 224 0 0 UNKNOWN pooltag ':TRD', please update pooltag.txt
Gla4 2 224 0 0 GDITAG_HMGR_LOOKASIDE_RGN_TYPE , Binary: win32k.sys
Gla: 2 224 0 0 GDITAG_HMGR_LOOKASIDE_LFONT_TYPE , Binary: win32k.sys
Gla@ 2 224 0 0 GDITAG_HMGR_LOOKASIDE_BRUSH_TYPE , Binary: win32k.sys
GZad 1 224 0 0 UNKNOWN pooltag 'GZad', please update pooltag.txt
smAr 3 216 0 0 ReadyBoost generic array allocation , Binary: nt!store or rdyboost.sys
IWL1 1 216 0 0 UNKNOWN pooltag 'IWL1', please update pooltag.txt
SWfd 1 216 0 0 POOLTAG_DEVICE_FDOEXTENSION
IWLh 1 216 0 0 UNKNOWN pooltag 'IWLh', please update pooltag.txt
aFDC 3 216 0 0 UNKNOWN pooltag 'aFDC', please update pooltag.txt
KSff 1 216 0 0 UNKNOWN pooltag 'KSff', please update pooltag.txt
IWCl 1 208 0 0 UNKNOWN pooltag 'IWCl', please update pooltag.txt
IWA2 2 208 0 0 UNKNOWN pooltag 'IWA2', please update pooltag.txt
CIsc 2 208 101 13856 Code Integrity core dll , Binary: ci.dll
USBL 2 208 0 0 UNKNOWN pooltag 'USBL', please update pooltag.txt
alPm 1 200 0 0 UNKNOWN pooltag 'alPm', please update pooltag.txt
Gfsm 5 200 0 0 Gdi Fast mutex
NDdb 2 200 0 0 DMA block , Binary: ndis.sys
PSwt 4 192 14 336 PDC_PSWT_TAG , Binary: pdc.sys
AlIn 4 192 0 0 ALPC Internal allocation , Binary: nt!alpc
FlpC 6 192 0 0 Framing Layer Client Contexts , Binary: tcpip.sys
MsFD 1 192 1 16 Mailslot root DCB and its name buffer
rsob 4 192 0 0 UNKNOWN pooltag 'rsob', please update pooltag.txt
GZtd 1 192 0 0 UNKNOWN pooltag 'GZtd', please update pooltag.txt
ClfP 12 192 0 0 CLFS Log request state , Binary: clfs.sys
NtfJ 4 192 3 376 Unkown allocation , Binary: ntfs.sys
aFDT 3 192 0 0 UNKNOWN pooltag 'aFDT', please update pooltag.txt
IWF8 8 192 0 0 UNKNOWN pooltag 'IWF8', please update pooltag.txt
FIPc 3 192 0 0 FileInfo FS-filter Prefetch Context , Binary: fileinfo.sys
IWA6 6 192 0 0 UNKNOWN pooltag 'IWA6', please update pooltag.txt
MV16 1 184 0 0 UNKNOWN pooltag 'MV16', please update pooltag.txt
AzCm 2 184 0 0 HD Audio Class Driver (AzCommon) , Binary: HDAudio.sys
Vm 1 184 1 40 General allocations , Binary: volmgrx.sys
Powe 2 176 0 0 UNKNOWN pooltag 'Powe', please update pooltag.txt
AcpT 1 176 1 40 ACPI thermal data , Binary: acpi.sys
Sess 2 176 0 0 UNKNOWN pooltag 'Sess', please update pooltag.txt
IWCP 1 176 0 0 UNKNOWN pooltag 'IWCP', please update pooltag.txt
IWJS 1 176 0 0 UNKNOWN pooltag 'IWJS', please update pooltag.txt
TSrp 2 176 0 0 Terminal Services - RP_ALLOC_TAG , Binary: termdd.sys
TDId 5 176 0 0 TDI resource
IWBl 1 176 0 0 UNKNOWN pooltag 'IWBl', please update pooltag.txt
MmLp 1 168 0 0 UNKNOWN pooltag 'MmLp', please update pooltag.txt
FxL7 1 168 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys
PLIT 1 168 0 0 UNKNOWN pooltag 'PLIT', please update pooltag.txt
GOPM 4 160 2 64 GDITAG_OPM , Binary: win32k.sys
TDIa 2 160 0 0 UNKNOWN pooltag 'TDIa', please update pooltag.txt
IWIv 4 160 0 0 UNKNOWN pooltag 'IWIv', please update pooltag.txt
DPwr 5 160 0 0 PnP power management , Binary: nt!pnp
GZmm 10 160 67 13032 UNKNOWN pooltag 'GZmm', please update pooltag.txt
Xlhd 5 160 0 0 UNKNOWN pooltag 'Xlhd', please update pooltag.txt
MmHi 4 160 0 0 Mm image entry - allocated per session , Binary: nt!mm
Xqlh 5 160 0 0 UNKNOWN pooltag 'Xqlh', please update pooltag.txt
FMnc 4 160 0 0 NAME_CACHE_CREATE_CTRL structure , Binary: fltmgr.sys
AzMx 2 160 0 0 HD Audio Class Driver (AzMixerport) , Binary: HDAudio.sys
IWdj 1 160 0 0 UNKNOWN pooltag 'IWdj', please update pooltag.txt
IWDZ 1 160 0 0 UNKNOWN pooltag 'IWDZ', please update pooltag.txt
IW4p 1 160 0 0 UNKNOWN pooltag 'IW4p', please update pooltag.txt
QoSc 4 160 0 0 UNKNOWN pooltag 'QoSc', please update pooltag.txt
PmVE 1 160 0 0 Partition Manager volume entry , Binary: partmgr.sys
IWDB 1 152 0 0 UNKNOWN pooltag 'IWDB', please update pooltag.txt
smKG 1 152 0 0 ReadyBoost encryption key registry path buffer , Binary: nt!store
IWL0 1 152 0 0 UNKNOWN pooltag 'IWL0', please update pooltag.txt
MuFc 1 152 0 0 File Context , Binary: mup.sys
IWFM 1 152 0 0 UNKNOWN pooltag 'IWFM', please update pooltag.txt
IWEt 1 152 0 0 UNKNOWN pooltag 'IWEt', please update pooltag.txt
SCO 1 152 0 0 Smart card driver tags
Mup 1 144 0 0 Multiple UNC provider allocations, generic , Binary: mup.sys
RtsC 3 144 0 0 UNKNOWN pooltag 'RtsC', please update pooltag.txt
VM 1 144 11 928 General allocations , Binary: volmgr.sys
TDIf 2 144 0 0 TDI resource
IWh_ 1 144 0 0 UNKNOWN pooltag 'IWh_', please update pooltag.txt
Itht 6 144 0 0 IPsec hashtable , Binary: tcpip.sys
IWIc 1 144 0 0 UNKNOWN pooltag 'IWIc', please update pooltag.txt
ItoM 1 144 0 0 IPsec task offload interface , Binary: tcpip.sys
RaHI 1 144 0 0 RaSaveDriverInitData storport!_HW_INITIALIZATION_DATA , Binary: storport.sys
NDar 1 144 0 0 NDIS_TAG_ALLOCATED_RESOURCES , Binary: ndis.sys
Plcp 1 136 0 0 Cache aware pushlock list (array of puchlock addresses)
@CP 2 136 0 0 UNKNOWN pooltag '@CP ', please update pooltag.txt
Wrps 2 136 0 0 WAN_STRING_TAG
VoSt 1 136 0 0 Temp table allocations , Binary: volsnap.sys
TcpM 1 136 0 0 TCP Offload Miscellaneous buffers , Binary: tcpip.sys
AHID 1 136 0 0 UNKNOWN pooltag 'AHID', please update pooltag.txt
IWHh 1 128 0 0 UNKNOWN pooltag 'IWHh', please update pooltag.txt
RaDS 1 128 0 0 StorCreateAnsiString storport!_STRING.Buffer , Binary: storport.sys
Pium 2 128 0 0 UNKNOWN pooltag 'Pium', please update pooltag.txt
DfCB 2 128 0 0 DFS Client allocations , Binary: dfsc.sys
IWsN 2 128 0 0 UNKNOWN pooltag 'IWsN', please update pooltag.txt
Wnln 4 128 0 0 UNKNOWN pooltag 'Wnln', please update pooltag.txt
AmlR 4 128 0 0 ACPI AMLI Pooltags
IWHG 1 128 0 0 UNKNOWN pooltag 'IWHG', please update pooltag.txt
#PXM 2 128 0 0 UNKNOWN pooltag '#PXM', please update pooltag.txt
EMTB 4 128 6 672 UNKNOWN pooltag 'EMTB', please update pooltag.txt
GZrf 1 128 0 0 UNKNOWN pooltag 'GZrf', please update pooltag.txt
Nb17 1 120 0 0 NetBT registry path , Binary: netbt.sys
DfCC 1 120 0 0 DFS Client allocations , Binary: dfsc.sys
IWJl 1 120 0 0 UNKNOWN pooltag 'IWJl', please update pooltag.txt
IWbp 1 120 0 0 UNKNOWN pooltag 'IWbp', please update pooltag.txt
PLST 1 120 0 0 UNKNOWN pooltag 'PLST', please update pooltag.txt
^TLQ 5 120 0 0 UNKNOWN pooltag '^TLQ', please update pooltag.txt
NDcs 5 120 0 0 NDIS_TAG_NET_CFG_OPS_ID , Binary: ndis.sys
Drmk 3 120 3 104 UNKNOWN pooltag 'Drmk', please update pooltag.txt
MmSa 3 120 0 0 Subsection AVL tree allocations , Binary: nt!mm
IWEw 1 120 0 0 UNKNOWN pooltag 'IWEw', please update pooltag.txt
Pcge 1 120 0 0 PACER Generic Buffers (DACL, SID allocations) , Binary: pacer.sys
FMfi 1 120 0 0 Fast IO dispatch table , Binary: fltmgr.sys
BTMO 1 120 0 0 Bluetooth modem , Binary: bthmodem.sys
NDpc 1 120 0 0 NDIS_TAG_PROTOCOL_CONFIGURATION , Binary: ndis.sys
GZwc 2 112 0 0 UNKNOWN pooltag 'GZwc', please update pooltag.txt
TEE7 1 112 0 0 UNKNOWN pooltag 'TEE7', please update pooltag.txt
fecm 1 112 0 0 UNKNOWN pooltag 'fecm', please update pooltag.txt
IWnZ 1 112 0 0 UNKNOWN pooltag 'IWnZ', please update pooltag.txt
Vprt 2 112 18 2104 Video port for legacy (pre-Vista) display drivers , Binary: videoprt.sys
PcDe 2 112 0 0 UNKNOWN pooltag 'PcDe', please update pooltag.txt
PcWC 2 112 0 0 UNKNOWN pooltag 'PcWC', please update pooltag.txt
IWBL 2 112 0 0 UNKNOWN pooltag 'IWBL', please update pooltag.txt
RpcM 1 112 19 6552 all msrpc.sys allocations not covered elsewhere , Binary: msrpc.sys
IWGI 1 112 0 0 UNKNOWN pooltag 'IWGI', please update pooltag.txt
Nbtw 1 112 0 0 NetBT device linkage names , Binary: netbt.sys
rtCA 1 104 0 0 UNKNOWN pooltag 'rtCA', please update pooltag.txt
TcRD 1 104 0 0 TCP Receive DPC Data , Binary: tcpip.sys
SdpD 1 104 4 336 Bluetooth SDP database , Binary: bthport.sys
IWIs 1 104 0 0 UNKNOWN pooltag 'IWIs', please update pooltag.txt
RaDA 1 104 0 0 Raw Socket Discretionary ACLs , Binary: tcpip.sys
Wait 1 104 0 0 WaitCompletion Packets , Binary: nt!io
#VIO 1 96 0 0 UNKNOWN pooltag '#VIO', please update pooltag.txt
IWOZ 4 96 0 0 UNKNOWN pooltag 'IWOZ', please update pooltag.txt
IWuk 1 96 0 0 UNKNOWN pooltag 'IWuk', please update pooltag.txt
IWJZ 2 96 0 0 UNKNOWN pooltag 'IWJZ', please update pooltag.txt
#FXH 1 96 0 0 UNKNOWN pooltag '#FXH', please update pooltag.txt
InNP 3 96 0 0 Inet Nsi Providers , Binary: tcpip.sys
CcWq 4 96 0 0 Cache Manager Work Queue Item , Binary: nt!cc
AcpO 4 96 0 0 ACPI object data , Binary: acpi.sys
xefb 5 96 0 0 UNKNOWN pooltag 'xefb', please update pooltag.txt
#FXO 1 96 0 0 UNKNOWN pooltag '#FXO', please update pooltag.txt
tSyB 1 96 0 0 UNKNOWN pooltag 'tSyB', please update pooltag.txt
MmNo 4 96 0 0 Inernal physical memory nodes , Binary: nt!mm
^PRI 1 96 0 0 UNKNOWN pooltag '^PRI', please update pooltag.txt
AzF1 1 96 0 0 UNKNOWN pooltag 'AzF1', please update pooltag.txt
MT09 1 96 0 0 UNKNOWN pooltag 'MT09', please update pooltag.txt
AzE 1 96 0 0 UNKNOWN pooltag 'AzE ', please update pooltag.txt
WSKL 1 96 0 0 UNKNOWN pooltag 'WSKL', please update pooltag.txt
IWGP 1 96 0 0 UNKNOWN pooltag 'IWGP', please update pooltag.txt
CcPf 1 96 0 0 Prefetcher , Binary: nt!ccpf
ArbN 2 96 0 0 UNKNOWN pooltag 'ArbN', please update pooltag.txt
InSB 1 88 0 0 Inet stack block , Binary: tcpip.sys
PnpJ 1 88 0 0 PNPMGR device event list , Binary: nt!pnp
PYRC 2 88 0 0 UNKNOWN pooltag 'PYRC', please update pooltag.txt
IWa4 1 88 0 0 UNKNOWN pooltag 'IWa4', please update pooltag.txt
NLSB 1 88 0 0 UNKNOWN pooltag 'NLSB', please update pooltag.txt
IWF0 1 88 0 0 UNKNOWN pooltag 'IWF0', please update pooltag.txt
TuSB 1 88 0 0 Tunnel stack block , Binary: tunnel.sys
IWJY 1 88 0 0 UNKNOWN pooltag 'IWJY', please update pooltag.txt
IWD6 1 88 0 0 UNKNOWN pooltag 'IWD6', please update pooltag.txt
INTC 2 88 0 0 Intel video driver
IW6p 1 88 0 0 UNKNOWN pooltag 'IW6p', please update pooltag.txt
L2Ti 2 88 0 0 ndis\l2tp / MTAG_UTIL
IPmf 2 80 0 0 IP Multicast Forwarding Entry pool , Binary: tcpip.sys
CSlo 1 80 0 0 UNKNOWN pooltag 'CSlo', please update pooltag.txt
Uspp 2 80 0 0 USERTAG_PNP , Binary: win32k!AllocateAndLinkHidTLCInf
IW1O 1 80 0 0 UNKNOWN pooltag 'IW1O', please update pooltag.txt
2920 1 80 0 0 UNKNOWN pooltag '2920', please update pooltag.txt
^KTP 5 80 0 0 UNKNOWN pooltag '^KTP', please update pooltag.txt
Uspo 2 80 0 0 USERTAG_POWER , Binary: win32k!QueuePowerRequest
smIt 2 80 0 0 ReadyBoost store ETA timers , Binary: nt!store or rdyboost.sys
ScLf 2 80 0 0 Fault prediction , Binary: classpnp.sys
#HTB 2 80 2 80 UNKNOWN pooltag '#HTB', please update pooltag.txt
Mmpr 2 80 0 0 Mm physical VAD roots , Binary: nt!mm
HdWM 2 80 0 0 UNKNOWN pooltag 'HdWM', please update pooltag.txt
NEtd 2 80 0 0 UNKNOWN pooltag 'NEtd', please update pooltag.txt
IWHH 1 80 0 0 UNKNOWN pooltag 'IWHH', please update pooltag.txt
TpWc 2 80 0 0 Threadpool minipacket context , Binary: nt!ex
ClMC 1 80 0 0 UNKNOWN pooltag 'ClMC', please update pooltag.txt
AcpA 2 80 0 0 ACPI arbiter data , Binary: acpi.sys
IWQO 2 80 0 0 UNKNOWN pooltag 'IWQO', please update pooltag.txt
GZob 1 80 5 520 UNKNOWN pooltag 'GZob', please update pooltag.txt
6116 1 80 0 0 UNKNOWN pooltag '6116', please update pooltag.txt
Wrpc 1 72 0 0 WAN_CONN_TAG
IWv3 1 72 0 0 UNKNOWN pooltag 'IWv3', please update pooltag.txt
IWD1 1 72 0 0 UNKNOWN pooltag 'IWD1', please update pooltag.txt
IWFN 1 72 0 0 UNKNOWN pooltag 'IWFN', please update pooltag.txt
KSlw 1 72 0 0 UNKNOWN pooltag 'KSlw', please update pooltag.txt
IWA_ 1 72 0 0 UNKNOWN pooltag 'IWA_', please update pooltag.txt
IWmm 3 72 0 0 UNKNOWN pooltag 'IWmm', please update pooltag.txt
IWLz 1 72 0 0 UNKNOWN pooltag 'IWLz', please update pooltag.txt
#RUS 3 72 3 72 UNKNOWN pooltag '#RUS', please update pooltag.txt
IWPG 1 72 0 0 UNKNOWN pooltag 'IWPG', please update pooltag.txt
#MEC 1 72 0 0 UNKNOWN pooltag '#MEC', please update pooltag.txt
Scs$ 1 72 0 0 Tag for pnp class driver's SRB lookaside list
Fssf 1 64 0 0 UNKNOWN pooltag 'Fssf', please update pooltag.txt
IWOU 1 64 0 0 UNKNOWN pooltag 'IWOU', please update pooltag.txt
ExEH 1 64 2 128 UNKNOWN pooltag 'ExEH', please update pooltag.txt
GZcp 1 64 0 0 UNKNOWN pooltag 'GZcp', please update pooltag.txt
PcLR 2 64 0 0 UNKNOWN pooltag 'PcLR', please update pooltag.txt
^UCH 1 64 0 0 UNKNOWN pooltag '^UCH', please update pooltag.txt
IWHg 1 64 0 0 UNKNOWN pooltag 'IWHg', please update pooltag.txt
AzD 1 64 0 0 UNKNOWN pooltag 'AzD ', please update pooltag.txt
IWCj 1 64 0 0 UNKNOWN pooltag 'IWCj', please update pooltag.txt
IW9Z 1 64 0 0 UNKNOWN pooltag 'IW9Z', please update pooltag.txt
EtwT 1 64 0 0 Etw provider traits , Binary: nt!etw
IWJU 4 64 0 0 UNKNOWN pooltag 'IWJU', please update pooltag.txt
TQoS 2 64 0 0 TL QoS Client Data , Binary: tcpip.sys
PcEi 2 64 0 0 UNKNOWN pooltag 'PcEi', please update pooltag.txt
Gtff 1 64 0 0 GDITAG_TRUSTED_FONT_FILE_TABLE , Binary: win32k.sys
IWBQ 4 64 0 0 UNKNOWN pooltag 'IWBQ', please update pooltag.txt
Gzee 1 64 0 0 UNKNOWN pooltag 'Gzee', please update pooltag.txt
ClfK 1 64 0 0 CLFS Log read completion element , Binary: clfs.sys
SslC 1 64 0 0 SSL kernel mode client allocations , Binary: ksecdd.sys
TWpV 1 64 0 0 UNKNOWN pooltag 'TWpV', please update pooltag.txt
IWLn 1 56 0 0 UNKNOWN pooltag 'IWLn', please update pooltag.txt
Nb37 1 56 0 0 NetBT lmhosts path , Binary: netbt.sys
IWJX 1 56 0 0 UNKNOWN pooltag 'IWJX', please update pooltag.txt
AzP 1 56 0 0 UNKNOWN pooltag 'AzP ', please update pooltag.txt
IWvL 1 56 0 0 UNKNOWN pooltag 'IWvL', please update pooltag.txt
hibr 1 56 0 0 UNKNOWN pooltag 'hibr', please update pooltag.txt
EirD 1 56 0 0 UNKNOWN pooltag 'EirD', please update pooltag.txt
IWRp 1 56 0 0 UNKNOWN pooltag 'IWRp', please update pooltag.txt
IWLN 1 56 0 0 UNKNOWN pooltag 'IWLN', please update pooltag.txt
IWBP 1 56 0 0 UNKNOWN pooltag 'IWBP', please update pooltag.txt
mnip 1 56 0 0 UNKNOWN pooltag 'mnip', please update pooltag.txt
IWcY 1 48 0 0 UNKNOWN pooltag 'IWcY', please update pooltag.txt
IWBN 1 48 0 0 UNKNOWN pooltag 'IWBN', please update pooltag.txt
#LRU 3 48 3 48 UNKNOWN pooltag '#LRU', please update pooltag.txt
IWBM 1 48 0 0 UNKNOWN pooltag 'IWBM', please update pooltag.txt
TDIg 2 48 0 0 TDI resource
IWBO 1 48 0 0 UNKNOWN pooltag 'IWBO', please update pooltag.txt
TcCM 1 48 0 0 TCP Congestion Control Manager Contexts , Binary: tcpip.sys
PcEt 2 48 0 0 UNKNOWN pooltag 'PcEt', please update pooltag.txt
RxTl 1 48 0 0 RDBSS toplevel IRP , Binary: rdbss.sys
IoCc 3 48 0 0 Io completion context , Binary: nt!io
noff 1 48 0 0 UNKNOWN pooltag 'noff', please update pooltag.txt
Pnim 1 48 0 0 UNKNOWN pooltag 'Pnim', please update pooltag.txt
AzC 1 48 0 0 UNKNOWN pooltag 'AzC ', please update pooltag.txt
IWKw 1 48 0 0 UNKNOWN pooltag 'IWKw', please update pooltag.txt
IWJO 1 48 0 0 UNKNOWN pooltag 'IWJO', please update pooltag.txt
#PGX 1 48 0 0 UNKNOWN pooltag '#PGX', please update pooltag.txt
IWAx 2 48 0 0 UNKNOWN pooltag 'IWAx', please update pooltag.txt
MmMl 1 48 0 0 physical memory range information , Binary: nt!mm
RMcc 1 48 0 0 UNKNOWN pooltag 'RMcc', please update pooltag.txt
#FCX 2 48 0 0 UNKNOWN pooltag '#FCX', please update pooltag.txt
Mmpv 1 48 0 0 Physical view VAD info , Binary: nt!mm
RASw 2 48 0 0 UNKNOWN pooltag 'RASw', please update pooltag.txt
IWJq 1 48 0 0 UNKNOWN pooltag 'IWJq', please update pooltag.txt
IWI7 1 40 0 0 UNKNOWN pooltag 'IWI7', please update pooltag.txt
IWfV 1 40 0 0 UNKNOWN pooltag 'IWfV', please update pooltag.txt
IWdk 1 40 0 0 UNKNOWN pooltag 'IWdk', please update pooltag.txt
IWFZ 1 40 0 0 UNKNOWN pooltag 'IWFZ', please update pooltag.txt
IWPV 1 40 0 0 UNKNOWN pooltag 'IWPV', please update pooltag.txt
AzF2 1 40 0 0 UNKNOWN pooltag 'AzF2', please update pooltag.txt
PRTF 1 40 0 0 UNKNOWN pooltag 'PRTF', please update pooltag.txt
SdpI 1 40 0 0 Bluetooth port driver (SDP) , Binary: bthport.sys
IWyl 1 40 0 0 UNKNOWN pooltag 'IWyl', please update pooltag.txt
FxL2 1 40 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys
IWKJ 1 40 0 0 UNKNOWN pooltag 'IWKJ', please update pooltag.txt
IWOi 1 40 0 0 UNKNOWN pooltag 'IWOi', please update pooltag.txt
IWCO 1 40 0 0 UNKNOWN pooltag 'IWCO', please update pooltag.txt
IWIy 1 40 0 0 UNKNOWN pooltag 'IWIy', please update pooltag.txt
#GMP 1 40 0 0 UNKNOWN pooltag '#GMP', please update pooltag.txt
IWIx 1 40 0 0 UNKNOWN pooltag 'IWIx', please update pooltag.txt
:WCH 1 40 0 0 UNKNOWN pooltag ':WCH', please update pooltag.txt
NpFn 1 40 0 0 Name block , Binary: npfs.sys
IWGO 1 40 0 0 UNKNOWN pooltag 'IWGO', please update pooltag.txt
MTXO 2 40 0 0 UNKNOWN pooltag 'MTXO', please update pooltag.txt
#FOF 1 40 0 0 UNKNOWN pooltag '#FOF', please update pooltag.txt
IWTA 1 40 0 0 UNKNOWN pooltag 'IWTA', please update pooltag.txt
IWre 1 40 0 0 UNKNOWN pooltag 'IWre', please update pooltag.txt
IWFX 1 32 0 0 UNKNOWN pooltag 'IWFX', please update pooltag.txt
RaPD 1 32 0 0 RaidGetPortData storport!RaidpPortData , Binary: storport.sys
#CLP 1 32 0 0 UNKNOWN pooltag '#CLP', please update pooltag.txt
IWCk 1 32 0 0 UNKNOWN pooltag 'IWCk', please update pooltag.txt
OIGd 1 32 0 0 UNKNOWN pooltag 'OIGd', please update pooltag.txt
Nsic 1 32 0 0 UNKNOWN pooltag 'Nsic', please update pooltag.txt
NQoS 1 32 0 0 UNKNOWN pooltag 'NQoS', please update pooltag.txt
IWJm 1 32 0 0 UNKNOWN pooltag 'IWJm', please update pooltag.txt
IWsq 1 32 0 0 UNKNOWN pooltag 'IWsq', please update pooltag.txt
@KMD 1 32 0 0 UNKNOWN pooltag '@KMD', please update pooltag.txt
Ccmp 1 32 0 0 UNKNOWN pooltag 'Ccmp', please update pooltag.txt
IWIm 1 32 0 0 UNKNOWN pooltag 'IWIm', please update pooltag.txt
IWs3 1 32 0 0 UNKNOWN pooltag 'IWs3', please update pooltag.txt
IW7W 1 32 0 0 UNKNOWN pooltag 'IW7W', please update pooltag.txt
IWJu 1 32 0 0 UNKNOWN pooltag 'IWJu', please update pooltag.txt
IWLj 1 32 0 0 UNKNOWN pooltag 'IWLj', please update pooltag.txt
IWux 1 32 0 0 UNKNOWN pooltag 'IWux', please update pooltag.txt
Nb36 1 32 0 0 NetBT string , Binary: netbt.sys
IWl6 1 32 0 0 UNKNOWN pooltag 'IWl6', please update pooltag.txt
L2T4 1 32 0 0 ndis\l2tp / MTAG_VCTABLE
IoCb 1 32 0 0 UNKNOWN pooltag 'IoCb', please update pooltag.txt
IWD4 1 32 0 0 UNKNOWN pooltag 'IWD4', please update pooltag.txt
ER12 1 32 0 0 UNKNOWN pooltag 'ER12', please update pooltag.txt
IWkk 1 32 0 0 UNKNOWN pooltag 'IWkk', please update pooltag.txt
IWye 1 32 0 0 UNKNOWN pooltag 'IWye', please update pooltag.txt
IWD3 1 32 0 0 UNKNOWN pooltag 'IWD3', please update pooltag.txt
BthS 1 32 0 0 Bluetooth port driver (security) , Binary: bthport.sys
Nbtg 2 32 0 0 NetBT MDL buffer , Binary: netbt.sys
IWJ8 1 32 0 0 UNKNOWN pooltag 'IWJ8', please update pooltag.txt
IWIl 1 32 0 0 UNKNOWN pooltag 'IWIl', please update pooltag.txt
EQSc 1 32 0 0 EQoS pacer client , Binary: tcpip.sys
AzC6 1 32 0 0 UNKNOWN pooltag 'AzC6', please update pooltag.txt
#QXP 1 32 0 0 UNKNOWN pooltag '#QXP', please update pooltag.txt
IWJ1 1 24 0 0 UNKNOWN pooltag 'IWJ1', please update pooltag.txt
Wnds 1 24 0 0 UNKNOWN pooltag 'Wnds', please update pooltag.txt
PoEi 1 24 0 0 MTAG_HANDLETABLE , Binary: raspppoe.sys
WanW 1 24 0 0 SHA Encryption
IWGC 1 24 0 0 UNKNOWN pooltag 'IWGC', please update pooltag.txt
IWJT 1 24 0 0 UNKNOWN pooltag 'IWJT', please update pooltag.txt
IWKL 1 24 0 0 UNKNOWN pooltag 'IWKL', please update pooltag.txt
Nbuf 1 24 0 0 NetIO Memory Descriptor List allocations , Binary: netio.sys
IWLU 1 24 0 0 UNKNOWN pooltag 'IWLU', please update pooltag.txt
idle 1 24 0 0 Power Manager idle handler
IWGA 1 24 0 0 UNKNOWN pooltag 'IWGA', please update pooltag.txt
PTPc 1 24 0 0 UNKNOWN pooltag 'PTPc', please update pooltag.txt
IPpv 1 24 0 0 UNKNOWN pooltag 'IPpv', please update pooltag.txt
IWJK 1 24 0 0 UNKNOWN pooltag 'IWJK', please update pooltag.txt
IW_T 1 24 0 0 UNKNOWN pooltag 'IW_T', please update pooltag.txt
IWKO 1 24 0 0 UNKNOWN pooltag 'IWKO', please update pooltag.txt
IWIw 1 24 0 0 UNKNOWN pooltag 'IWIw', please update pooltag.txt
AVns 1 24 0 0 UNKNOWN pooltag 'AVns', please update pooltag.txt
L2Ts 1 24 0 0 UNKNOWN pooltag 'L2Ts', please update pooltag.txt
IWKU 1 24 0 0 UNKNOWN pooltag 'IWKU', please update pooltag.txt
edfw 1 24 0 0 UNKNOWN pooltag 'edfw', please update pooltag.txt
PTPn 1 24 0 0 UNKNOWN pooltag 'PTPn', please update pooltag.txt
Fsrc 1 24 0 0 Filesystem recognizer (fsrec.sys) , Binary: fsrec.sys
IWit 1 24 0 0 UNKNOWN pooltag 'IWit', please update pooltag.txt
IWKS 1 24 0 0 UNKNOWN pooltag 'IWKS', please update pooltag.txt
AcpM 1 24 2 152 ACPI miscellaneous data , Binary: acpi.sys
IWKQ 1 24 0 0 UNKNOWN pooltag 'IWKQ', please update pooltag.txt
IWJn 1 24 0 0 UNKNOWN pooltag 'IWJn', please update pooltag.txt
PoEj 1 24 0 0 MTAG_HANDLECB , Binary: raspppoe.sys
AzC2 1 16 0 0 UNKNOWN pooltag 'AzC2', please update pooltag.txt
smFp 1 16 0 0 ReadyBoost virtual forward progress entry , Binary: nt!store
IWd2 1 16 0 0 UNKNOWN pooltag 'IWd2', please update pooltag.txt
IWFW 1 16 0 0 UNKNOWN pooltag 'IWFW', please update pooltag.txt
Nb03 1 16 0 0 NetBT remote name address cache , Binary: netbt.sys
BMnS 1 16 0 0 UNKNOWN pooltag 'BMnS', please update pooltag.txt
IWMh 1 16 0 0 UNKNOWN pooltag 'IWMh', please update pooltag.txt
TEE4 1 16 0 0 UNKNOWN pooltag 'TEE4', please update pooltag.txt
RI12 1 16 0 0 UNKNOWN pooltag 'RI12', please update pooltag.txt
:SRW 1 16 0 0 UNKNOWN pooltag ':SRW', please update pooltag.txt
UMB. 1 16 0 0 UNKNOWN pooltag ' UMB', please update pooltag.txt
IWOq 1 16 0 0 UNKNOWN pooltag 'IWOq', please update pooltag.txt
smms 1 16 0 0 ReadyBoost virtual store memory monitor context , Binary: nt!store
IWAs 1 16 0 0 UNKNOWN pooltag 'IWAs', please update pooltag.txt
IWXy 1 16 0 0 UNKNOWN pooltag 'IWXy', please update pooltag.txt
IWYt 1 16 0 0 UNKNOWN pooltag 'IWYt', please update pooltag.txt
CM31 0 0 17239 81080320 Internal Configuration manager allocations , Binary: nt!cm
CM25 0 0 4574 21381120 Internal Configuration manager allocations , Binary: nt!cm
CM19 0 0 1 5224 Internal Configuration manager allocations , Binary: nt!cm
RRle 0 0 717 34416 RTL_RANGE_LIST_ENTRY_TAG
Ntfo 0 0 168 12400 SCB_INDEX normalized named buffer , Binary: ntfs.sys
HD01 0 0 1 120 UNKNOWN pooltag 'HD01', please update pooltag.txt
GZcr 0 0 5 120 UNKNOWN pooltag 'GZcr', please update pooltag.txt
WDIs 0 0 4 16384 UNKNOWN pooltag 'WDIs', please update pooltag.txt
AlRe 0 0 2 160 ALPC section region , Binary: nt!alpc
NpfF 0 0 1 144 Npfs Allocations , Binary: npfs.sys
TmRr 0 0 6 144 Tm KTM_RESTART_RECORD , Binary: nt!tm
TCSC 0 0 18 768 TCP/IP network protocol , Binary: TCP
CM20 0 0 1 8192 Internal Configuration manager allocations , Binary: nt!cm
CMVI 0 0 75 7640 value index cache tag , Binary: nt!cm
ClfO 0 0 1 4096 CLFS Log zero page , Binary: clfs.sys
None 0 0 1 56 call to ExAllocatePool
PnpD 0 0 20 1440 UNKNOWN pooltag 'PnpD', please update pooltag.txt
NpFc 0 0 3 552 CCB, client control block , Binary: npfs.sys
CcPh 0 0 5 11304 Prefetcher header preallocation , Binary: nt!ccpf
GZbm 0 0 5 164528 UNKNOWN pooltag 'GZbm', please update pooltag.txt
CMNb 0 0 175 8192 Configuration Manager Name Tag , Binary: nt!cm
CMpb 0 0 13 624 registry post blocks , Binary: nt!cm
ObDi 0 0 997 23928 object directory , Binary: nt!ob
AlVi 0 0 4 352 ALPC view , Binary: nt!alpc
Txrm 0 0 5 43880 TXF_RMCB , Binary: ntfs.sys
NtfM 0 0 12 480 NTFS_MCB_ENTRY , Binary: ntfs.sys
AcpI 0 0 44 9840 ACPI irp data , Binary: acpi.sys
NtFS 0 0 191 43912 SecurSup.c , Binary: ntfs.sys
GZbc 0 0 1 112 UNKNOWN pooltag 'GZbc', please update pooltag.txt
Symb 0 0 287 20984 Symbolic link objects
CM13 0 0 1 4096 Internal Configuration manager allocations , Binary: nt!cm
BatM 0 0 1 120 Control method battery driver
PsSl 0 0 1 136 UNKNOWN pooltag 'PsSl', please update pooltag.txt
KSau 0 0 3 3872 UNKNOWN pooltag 'KSau', please update pooltag.txt
Pp 0 0 574 63544 UNKNOWN pooltag 'Pp ', please update pooltag.txt
CMca 0 0 2 48 Internal Configuration manager allocations , Binary: nt!cm
CM26 0 0 2 16384 Internal Configuration manager allocations , Binary: nt!cm
CM32 0 0 3 12288 Internal Configuration manager allocations , Binary: nt!cm
SeFS 0 0 1 16 Security File System Notify Context , Binary: nt!se
EMst 0 0 89 4112 UNKNOWN pooltag 'EMst', please update pooltag.txt
PcSi 0 0 78 33424 UNKNOWN pooltag 'PcSi', please update pooltag.txt
CMVa 0 0 1167 78512 value cache value tag , Binary: nt!cm
AlCI 0 0 16 1152 ALPC communication info , Binary: nt!alpc
Rx?? 0 0 1 88 RDBSS allocations , Binary: rdbss.sys
ClfI 0 0 17 2166784 CLFS Log marshal buffer lookaside list , Binary: clfs.sys
EMpr 0 0 12 384 UNKNOWN pooltag 'EMpr', please update pooltag.txt
CMPe 0 0 18 720 Internal Configuration manager allocations , Binary: nt!cm
Ntfm 0 0 1 272 NTFS_MCB_ARRAY , Binary: ntfs.sys
TxTb 0 0 15 600 UNKNOWN pooltag 'TxTb', please update pooltag.txt
CMRm 0 0 1 96 Configuration Manager Resource Manager Tag , Binary: nt!cm
#FLG 0 0 1 40 UNKNOWN pooltag '#FLG', please update pooltag.txt
MmFr 0 0 12 384 ASLR fixup records , Binary: nt!mm
Lfs 0 0 60 27120 Lfs allocations
KLRG 0 0 3 264 UNKNOWN pooltag 'KLRG', please update pooltag.txt
SeLs 0 0 2 128 Security Logon Session , Binary: nt!se
AlHa 0 0 16 1152 ALPC port handle table , Binary: nt!alpc
PcUs 0 0 2 152 WDM audio stuff
CMAl 0 0 24 98304 internal registry memory allocator pool tag , Binary: nt!cm
#ACT 0 0 1 72 UNKNOWN pooltag '#ACT', please update pooltag.txt
NtFf 0 0 33 132520 FsCtrl.c , Binary: ntfs.sys
ClfA 0 0 18 1584 CLFS Log container lookaside list , Binary: clfs.sys
NtFC 0 0 43 3296 Create.c , Binary: ntfs.sys
Txtr 0 0 5 1680 TXF_TRANS (Txf transaction context) , Binary: ntfs.sys
PRCx 0 0 2 128 UNKNOWN pooltag 'PRCx', please update pooltag.txt
FSel 0 0 5 120 File System Run Time Extra Create Parameter List , Binary: nt!fsrtl
AlSe 0 0 1 112 ALPC client security , Binary: nt!alpc
VmRb 0 0 1 16384 Raw record buffers , Binary: volmgrx.sys
Z-Lm 0 0 1 152 UNKNOWN pooltag 'Z-Lm', please update pooltag.txt
StSD 0 0 1 96 UNKNOWN pooltag 'StSD', please update pooltag.txt
Toke 0 0 13 8120 Token objects , Binary: nt!se
IoNm 0 0 332 41352 Io parsing names , Binary: nt!io
PmRP 0 0 1 128 Partition Manager registry path , Binary: partmgr.sys
PcDi 0 0 10 480 WDM audio stuff
Cbrb 0 0 12 288 UNKNOWN pooltag 'Cbrb', please update pooltag.txt
Ntfl 0 0 14 2352 LCB , Binary: ntfs.sys
GZvn 0 0 21 1456 UNKNOWN pooltag 'GZvn', please update pooltag.txt
ClMn 0 0 6 896 UNKNOWN pooltag 'ClMn', please update pooltag.txt
CM49 0 0 1 1552 Internal Configuration manager allocations , Binary: nt!cm
Citm 0 0 1 168 UNKNOWN pooltag 'Citm', please update pooltag.txt
MDTR 0 0 1 446464 UNKNOWN pooltag 'MDTR', please update pooltag.txt
^LRU 0 0 2 32 UNKNOWN pooltag '^LRU', please update pooltag.txt
#ERC 0 0 1 272 UNKNOWN pooltag '#ERC', please update pooltag.txt
^HFE 0 0 1 23608 UNKNOWN pooltag '^HFE', please update pooltag.txt
Txte 0 0 5 200 TXF_RMCB_TABLE_ENTRY , Binary: ntfs.sys
ArbA 0 0 15 69728 ARBITER_ALLOCATION_STATE_TAG , Binary: nt!arb
WmDS 0 0 2 8752 Wmi DataSource chunks
FIcs 0 0 515 53560 FileInfo FS-filter Stream Context , Binary: fileinfo.sys
CM27 0 0 3 20016 Internal Configuration manager allocations , Binary: nt!cm
Dire 0 0 33 7648 Directory objects
MuUn 0 0 4 424 UNC provider , Binary: mup.sys
CM11 0 0 2 8192 Internal Configuration manager allocations , Binary: nt!cm
CM39 0 0 264 168960 Internal Configuration manager allocations , Binary: nt!cm
CMPt 0 0 1 144 Internal Configuration manager allocations , Binary: nt!cm
WmGE 0 0 1 57368 Wmi GuidEntry chunks
Obtb 0 0 26 54184 object tables via EX handle.c , Binary: nt!ob
PoSL 0 0 1 16 Power shutdown event list
IoFs 0 0 1 24 Io shutdown packet , Binary: nt!io
WmIS 0 0 1 118784 Wmi InstanceSet chunks
SWbr 0 0 7 1112 bus reference
PcwR 0 0 11 1880 PCW provider Registration , Binary: nt!pcw
SWda 0 0 7 280 POOLTAG_DEVICE_ASSOCIATION
CMSb 0 0 1 4096 internal stash buffer pool tag , Binary: nt!cm
#ICT 0 0 1 104 UNKNOWN pooltag '#ICT', please update pooltag.txt
ScDg 0 0 1 72 update disk geometry paths
Gzrg 0 0 6 592 UNKNOWN pooltag 'Gzrg', please update pooltag.txt
FSim 0 0 449 57472 File System Run Time Mcb Initial Mapping Lookaside List , Binary: nt!fsrtl
MmRe 0 0 88 797400 ASLR relocation blocks , Binary: nt!mm
PcPc 0 0 2 80 WDM audio stuff
IoSi 0 0 1 336 Io Symbolic Links , Binary: nt!io
CMIn 0 0 13 496 Configuration Manager Index Hint Tag , Binary: nt!cm
PsQt 0 0 1 392 UNKNOWN pooltag 'PsQt', please update pooltag.txt
CM10 0 0 6 9600 Internal Configuration manager allocations , Binary: nt!cm
Gi2c 0 0 2 64 GDITAG_DDCCI , Binary: win32k.sys
SWdr 0 0 8 1376 device reference
NtFB 0 0 25 414536 BitmpSup.c , Binary: ntfs.sys
NtFU 0 0 20 2592 usnsup.c , Binary: ntfs.sys
Vga 0 0 1 1800 UNKNOWN pooltag 'Vga ', please update pooltag.txt
ObNm 0 0 1013 52792 object names , Binary: nt!ob
DfCo 0 0 1 136 DFS Client allocations , Binary: dfsc.sys
CreS 0 0 1 56 UNKNOWN pooltag 'CreS', please update pooltag.txt
NtfS 0 0 15 6360 SCB_INDEX , Binary: ntfs.sys
Ntfs 0 0 5 1760 SCB_DATA , Binary: ntfs.sys
EtwP 0 0 10 1440 Etw Pool , Binary: nt!etw
Ppin 0 0 7 2208 plug-and-play initialization , Binary: nt!pnp
AlMs 0 0 3 1272 ALPC message , Binary: nt!alpc
WmMR 0 0 1 544 Wmi MofResouce chunks
SWid 0 0 7 616 device ID
Keye 0 0 3 2448 UNKNOWN pooltag 'Keye', please update pooltag.txt
NpFD 0 0 1 136 DCB, directory block , Binary: npfs.sys
FMus 0 0 2 40 Unicode string , Binary: fltmgr.sys
CMSc 0 0 775 224832 security cache pooltag , Binary: nt!cm
GZsc 0 0 307 66312 UNKNOWN pooltag 'GZsc', please update pooltag.txt
ARFT 0 0 3 96 UNKNOWN pooltag 'ARFT', please update pooltag.txt
Pnp9 0 0 5 280 PNPMGR HW profile notify , Binary: nt!pnp
PfFK 0 0 504 12096 Pf RpContext FileKeyHashEntry , Binary: nt!pf
NpAt 0 0 4 192 UNKNOWN pooltag 'NpAt', please update pooltag.txt
NtfF 0 0 284 286272 FCB_INDEX , Binary: ntfs.sys
Txfl 0 0 4 192 TXF_FCB_CLEANUP , Binary: ntfs.sys
CM17 0 0 7 57344 Internal Configuration manager allocations , Binary: nt!cm
ClMp 0 0 29 1152 UNKNOWN pooltag 'ClMp', please update pooltag.txt
ObSq 0 0 16 4320 object security descriptors (query) , Binary: nt!ob
MmSt 0 0 602 7390568 Mm section object prototype ptes , Binary: nt!mm
KSat 0 0 2 48 UNKNOWN pooltag 'KSat', please update pooltag.txt
#RSN 0 0 1 32 UNKNOWN pooltag '#RSN', please update pooltag.txt
SeAk 0 0 118 4352 Security Account Name , Binary: nt!se
#HFE 0 0 1 23608 UNKNOWN pooltag '#HFE', please update pooltag.txt
EMit 0 0 460 39024 UNKNOWN pooltag 'EMit', please update pooltag.txt
SeAc 0 0 7 664 Security ACL , Binary: nt!se
Txsa 0 0 5 1960 Txf sorted array item , Binary: ntfs.sys
KSbe 0 0 17 1184 UNKNOWN pooltag 'KSbe', please update pooltag.txt
ObSc 0 0 134 25328 Object security descriptor cache block , Binary: nt!ob
PnpH 0 0 5 160 PNPMGR service name , Binary: nt!pnp
Sect 0 0 273 22528 Section objects
ObFl 0 0 2 232 UNKNOWN pooltag 'ObFl', please update pooltag.txt
GZic 0 0 1 24 UNKNOWN pooltag 'GZic', please update pooltag.txt
AtmA 0 0 180 10016 Atoms
ArbR 0 0 30 960 ARBITER_RANGE_LIST_TAG , Binary: nt!arb
#SMD 0 0 1 18496 UNKNOWN pooltag '#SMD', please update pooltag.txt
Symt 0 0 287 16688 Symbolic link target strings
MuSp 0 0 2 216 UNKNOWN pooltag 'MuSp', please update pooltag.txt
KSdi 0 0 4 128 UNKNOWN pooltag 'KSdi', please update pooltag.txt
MmSg 0 0 1 64 Mm segments , Binary: nt!mm
cbuf 0 0 3 72 UNKNOWN pooltag 'cbuf', please update pooltag.txt
GZif 0 0 1 2056 UNKNOWN pooltag 'GZif', please update pooltag.txt
CcPD 0 0 4 2315288 Prefetcher trace dump , Binary: nt!ccpf
Dacl 0 0 1 96 Temp allocations for object DACLs
NtfE 0 0 22 4224 INDEX_CONTEXT , Binary: ntfs.sys
rtPi 0 0 1 1288 UNKNOWN pooltag 'rtPi', please update pooltag.txt
FIcp 0 0 4 288 FileInfo FS-filter Extra Create Parameter , Binary: fileinfo.sys
PEAU 0 0 173 24888 UNKNOWN pooltag 'PEAU', please update pooltag.txt
CM16 0 0 63 409600 Internal Configuration manager allocations , Binary: nt!cm
VCdc 0 0 3 1744 UNKNOWN pooltag 'VCdc', please update pooltag.txt
CMcc 0 0 22 1056 Internal Configuration manager allocations , Binary: nt!cm
PcwC 0 0 11 968 PCW Counter set , Binary: nt!pcw
MmSm 0 0 336 13440 segments used to map data files , Binary: nt!mm
MsPp 0 0 4 1016 UNKNOWN pooltag 'MsPp', please update pooltag.txt
RngS 0 0 2 216 UNKNOWN pooltag 'RngS', please update pooltag.txt
MntA 0 0 39 3304 UNKNOWN pooltag 'MntA', please update pooltag.txt
CM7 0 0 23 736 Internal Configuration manager allocations , Binary: nt!cm
Ntrs 0 0 1 96 UNKNOWN pooltag 'Ntrs', please update pooltag.txt
PcSb 0 0 16 304 UNKNOWN pooltag 'PcSb', please update pooltag.txt
CMcb 0 0 2 112 Internal Configuration manager allocations , Binary: nt!cm
D2d 0 0 8 288 Device Object to DosName rtns (ntos\rtl\dev2dos.c)
PnpC 0 0 27 1728 PNPMGR target device notify , Binary: nt!pnp
IMW. 0 0 1 120 UNKNOWN pooltag ' IMW', please update pooltag.txt
Z-Cl 0 0 1 56 UNKNOWN pooltag 'Z-Cl', please update pooltag.txt
^RUS 0 0 2 48 UNKNOWN pooltag '^RUS', please update pooltag.txt
#USX 0 0 1 48 UNKNOWN pooltag '#USX', please update pooltag.txt
Key 0 0 184 15160 Key objects
UMDM 0 0 1 120 UMDF pool allocation , Binary: WUDFRd.sys
PSet 0 0 97 5832 UNKNOWN pooltag 'PSet', please update pooltag.txt
GZcc 0 0 18 8344 UNKNOWN pooltag 'GZcc', please update pooltag.txt
mltr 0 0 1 872 UNKNOWN pooltag 'mltr', please update pooltag.txt
Sdba 0 0 2313 307712 Application compatibility Sdb* allocations
CMnb 0 0 13 728 registry notify blocks , Binary: nt!cm
SeTd 0 0 13 1040 Security Token dynamic part , Binary: nt!se
FIcn 0 0 5 1240 FileInfo FS-filter Create Retry Path , Binary: fileinfo.sys
CM29 0 0 49 401408 Internal Configuration manager allocations , Binary: nt!cm
Ntfu 0 0 1 1032 NTFS_MARK_UNUSED_CONTEXT , Binary: ntfs.sys
FIvn 0 0 5 280 FileInfo FS-filter Volume Name , Binary: fileinfo.sys
CMpi 0 0 201 8664 Internal Configuration manager allocations , Binary: nt!cm
PcFp 0 0 4 1664 WDM audio stuff
CMDa 0 0 156 32120 value data cache pool tag , Binary: nt!cm
Ntf0 0 0 647 56384 General pool allocation , Binary: ntfs.sys
GZhc 0 0 4 288 UNKNOWN pooltag 'GZhc', please update pooltag.txt
Strg 0 0 90 8408 Dynamic Translated strings
AtmT 0 0 4 4512 Atom tables
KSce 0 0 43 1416 create item entry
HD20 0 0 1 16 UNKNOWN pooltag 'HD20', please update pooltag.txt
SeLS 0 0 1 72 Security Logon Session tracking array , Binary: nt!se
GzTe 0 0 16 1152 UNKNOWN pooltag 'GzTe', please update pooltag.txt
PmTE 0 0 3 168 Partition Manager table entry , Binary: partmgr.sys
ObHd 0 0 5 192 object handle count data base , Binary: nt!ob
FxL5 0 0 1 128 KMDF Loader Pool allocation , Binary: wdfldr.sys
ArbL 0 0 30 8176 ARBITER_ORDERING_LIST_TAG , Binary: nt!arb
PfFH 0 0 1 2056 Pf RpContext FileKeyHash buckets , Binary: nt!pf
Ppsu 0 0 346 16200 plug-and-play subroutines for the I/O system , Binary: nt!pnp
NDse 0 0 5 928 NDIS_TAG_SECURITY , Binary: ndis.sys
AlSc 0 0 2 144 ALPC section , Binary: nt!alpc
NtfC 0 0 6 768 CCB , Binary: ntfs.sys
ScC1 0 0 1 120 Registry path buffer , Binary: classpnp.sys
CM28 0 0 2 8192 Internal Configuration manager allocations , Binary: nt!cm
SePa 0 0 1 16 Process audit image names and captured policy structures , Binary: nt!se
ObDm 0 0 1 64 object device map , Binary: nt!ob
GZrc 0 0 22 528 UNKNOWN pooltag 'GZrc', please update pooltag.txt
CMCa 0 0 7 60960 Configuration Manager Cache (registry) , Binary: nt!cm
NpPp 0 0 4 792 UNKNOWN pooltag 'NpPp', please update pooltag.txt
PcwI 0 0 3 144 PCW counter set Instance , Binary: nt!pcw
CIcr 0 0 178 2174384 Code Integrity allocations for image integrity checking , Binary: ci.dll
SeAt 0 0 13 416 Security Attributes , Binary: nt!se
Se 0 0 1 784 General security allocations , Binary: nt!se
PfNL 0 0 1 360448 Pf Name logging buffers , Binary: nt!pf
ClfH 0 0 17 2312 CLFS Log I/O control block lookaside list , Binary: clfs.sys
PcSt 0 0 14 1960 WDM audio stuff
TOTAL 33275 74102688 44383 125051472
0: kd> !verifier
Verify Flags Level 0x00000000
STANDARD FLAGS:
[ ] (0x00000000) Automatic Checks
[ ] (0x00000001) Special pool
[ ] (0x00000002) Force IRQL checking
[ ] (0x00000008) Pool tracking
[ ] (0x00000010) I/O verification
[ ] (0x00000020) Deadlock detection
[ ] (0x00000080) DMA checking
[ ] (0x00000100) Security checks
[ ] (0x00000800) Miscellaneous checks
ADDITIONAL FLAGS:
[ ] (0x00000004) Randomized low resources simulation
[ ] (0x00000200) Force pending I/O requests
[ ] (0x00000400) IRP logging
[X] Indicates flag is enabled
Summary of All Verifier Statistics
RaiseIrqls 0x0
AcquireSpinLocks 0x0
Synch Executions 0x0
Trims 0x0
Pool Allocations Attempted 0x0
Pool Allocations Succeeded 0x0
Pool Allocations Succeeded SpecialPool 0x0
Pool Allocations With NO TAG 0x0
Pool Allocations Failed 0x0
Current paged pool allocations 0x0 for 00000000 bytes
Peak paged pool allocations 0x0 for 00000000 bytes
Current nonpaged pool allocations 0x0 for 00000000 bytes
Peak nonpaged pool allocations 0x0 for 00000000 bytes
0: kd> !irpfind
Scanning large pool allocation table for tag 0x3f707249 (Irp?) (9e200000 : 9e400000)
unable to get nt!ExpHeapBackedPoolEnabledState
Irp [ Thread ] irpStack: (Mj,Mn) DevObj [Driver] MDL Process
8625ac08 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
9ad45e28 [00000000] irpStack: (16, 0) 874fc778 [*** ERROR: Module load completed but symbols could not be loaded for LHidEqd.Sys
\Driver\LHidEqd]
8581bcd8 [00000000] irpStack: ( f, 0) 861f5228 [ \Driver\ACPI]
877ba578 [00000000] irpStack: ( f, 0) 87013960 [*** ERROR: Module load completed but symbols could not be loaded for TeeDriver.sys
\Driver\MEI]
Searching nonpaged pool (80000000 : ffc00000) for tag 0x3f707249 (Irp?)
857a9360 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
857ee1c0 [00000000] irpStack: ( e, 0) 86291b58 [ \Driver\ACPI]
857ef1c0 [00000000] irpStack: ( e, 0) 8624c578 [ \Driver\ACPI]
857f4168 [00000000] irpStack: (16, 0) 862918f0 [ \Driver\ACPI]
85844008 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
85848008 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
858486a8 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
85848b58 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
8585c320 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
8587c138 [00000000] Irp is complete (CurrentLocation 31 > StackCount 30)
861f41e8 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
86202ec0 [00000000] irpStack: ( f, 0) 00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
862131a8 [00000000] irpStack: ( f, 0) 86f99c50 [*** ERROR: Module load completed but symbols could not be loaded for iusb3xhc.sys
\Driver\iusb3xhc]
8623c1c8 [00000000] irpStack: ( f, 0) 00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
862917c0 [00000000] irpStack: ( e, 0) 862918f0 [ \Driver\ACPI]
869afd00 [00000000] Irp is complete (CurrentLocation 10 > StackCount 9)
869b0bf8 [00000000] Irp is complete (CurrentLocation 11 > StackCount 10) 0x00000000
869b6e00 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
869b7458 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
869b8e00 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
869bb008 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
869bbae8 [85850798] Irp is complete (CurrentLocation 12 > StackCount 11) 0x00000000
86a31d18 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
86a35188 [00000000] irpStack: ( f, 0) 9b07aee8 [*** ERROR: Module load completed but symbols could not be loaded for btmhsf.sys
\Driver\btmhsf]
86a35368 [00000000] irpStack: ( f, 0) 9b07aee8 [ \Driver\btmhsf]
86a35548 [00000000] irpStack: ( f, 0) 9b07aee8 [ \Driver\btmhsf]
86a358e0 [00000000] irpStack: ( f, 0) 9b07aee8 [ \Driver\btmhsf]
86a35ac0 [00000000] irpStack: ( f, 0) 9b07aee8 [ \Driver\btmhsf]
86a36008 [00000000] irpStack: ( 0, 0) 00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
86a36248 [00000000] irpStack: (16, 0) 9ae0e030 [*** ERROR: Module load completed but symbols could not be loaded for iusb3hub.sys
\Driver\iusb3hub]
86a36648 [00000000] Irp is complete (CurrentLocation 10 > StackCount 9)
86a3c8c0 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
86a3e6d0 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
86a4b4b0 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
86af2008 [00000000] irpStack: ( f, 0) 87d95138 [ \Driver\HidBth]
86b2b008 [00000000] Irp is complete (CurrentLocation 13 > StackCount 12)
86b2bde0 [00000000] Irp is complete (CurrentLocation 13 > StackCount 12)
86b2c008 [00000000] irpStack: (16, 0) 86dee030 [ \Driver\HidBth]
86b2c5d0 [00000000] irpStack: (16, 0) 86b29030 [ \Driver\HidBth]
86b8c4a8 [00000000] irpStack: ( e, 0) 870d99a8 [ \Driver\CmBatt]
86f24008 [00000000] irpStack: ( f, 0) 00000000 [00000000: Could not read device object or _DEVICE_OBJECT not found
]
86f26008 [00000000] Irp is complete (CurrentLocation 6 > StackCount 5)
86f26220 [00000000] Irp is complete (CurrentLocation 11 > StackCount 10) 0x00000000
86f292d0 [00000000] Irp is complete (CurrentLocation 3 > StackCount 2)
86f29830 [00000000] Irp is complete (CurrentLocation 10 > StackCount 9)
86f77008 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
86f999d8 [00000000] irpStack: ( e, 0) 8579c760 [ \Driver\Compbatt]
87756cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3)
8779b6d8 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
877a71a8 [00000000] Irp is complete (CurrentLocation 2 > StackCount 1)
87d48318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d485d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d48888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d48b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d48df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000003
87d49318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d495d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d49df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4a7e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4aa98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4ad50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4b210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4b4c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4b780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4ba38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4bcf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4bf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c6d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4c990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4cc48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4cf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4d318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4d5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4db40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4ddf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4e888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4eb40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x9d8d5574
87d4edf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4f270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4f528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4f7e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4fa98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d4fd50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d504c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50a38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d50f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d51168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d51420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d516d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d51f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d52b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d52df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87d60320 [00000000] irpStack: ( e, 0) 870449a8 [ \Driver\CmBatt]
87d8a588 [00000000] irpStack: ( f, 0) 87d95138 [ \Driver\HidBth]
87d8abe8 [00000000] Irp is complete (CurrentLocation 15 > StackCount 14)
87d8d1a8 [00000000] Irp is complete (CurrentLocation 16 > StackCount 15) 0x00000000
87d8d698 [00000000] Irp is complete (CurrentLocation 16 > StackCount 15) 0x00000000
87d8e210 [00000000] irpStack: (16, 0) 9b0772b8 [*** ERROR: Module load completed but symbols could not be loaded for LEqdUsb.Sys
\Driver\LEqdUsb]
87d8e360 [00000000] irpStack: ( f, 0) 8719e028 [ \Driver\usbehci]
87d933b0 [00000000] Irp is complete (CurrentLocation 14 > StackCount 13)
87d993b0 [00000000] Irp is complete (CurrentLocation 14 > StackCount 13)
87d9dcf0 [00000000] irpStack: ( f, 0) 9b0772b8 [ \Driver\LEqdUsb]
87d9e420 [00000000] irpStack: ( f, 0) 9b0772b8 [ \Driver\LEqdUsb]
87d9ea98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3)
87da3bc0 [00000000] irpStack: (16, 0) 87d99628 [ \Driver\BthEnum]
87dea5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deb270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deb528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deb7e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deba98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87debd50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dec210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dec4c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dec780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deca38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87deccf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87decf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87ded168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87ded420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87ded6d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87ded990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dedc48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dedf00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87dee318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87dee5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87dee888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87deeb40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87deedf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def5d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87def888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87defb40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87defdf8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df0008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df0270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df0528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df07e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df0a98 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df0d50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00010039
87df1210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df14c8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1780 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1a38 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df1f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df26d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2c48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df2f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df3318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df35d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x8a8a8989
87df3888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df3b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df3df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000004
87df4008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4318 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df45d0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4888 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4b40 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df4df8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5008 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5270 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5528 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df57e0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df5d50 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df6210 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df6cf0 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df6f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x005e0070
87df7168 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7420 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df76d8 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7990 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7c48 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x00000000
87df7f00 [00000000] Irp is complete (CurrentLocation 4 > StackCount 3) 0x86f6c9f0
9ad51418 [00000000] irpStack: ( f, 0) 9b065e10 [ \Driver\LEqdUsb]
9b03fd80 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b049ac8 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b054c48 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b054e28 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b058358 [00000000] irpStack: ( f, 0) 9b07aee8 [ \Driver\btmhsf]
9b065398 [8c7c6460] irpStack: ( d, 0) 86bd36a8 [ \FileSystem\Npfs]
9b0655d0 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b06e790 [00000000] Irp is complete (CurrentLocation 6 > StackCount 5)
9b06ed58 [00000000] irpStack: ( e, 0) 9b06b030 [ \Driver\HidUsb]
9b072400 [00000000] irpStack: (16, 0) 874f0198 [ \Driver\iusb3hub]
9b0725e0 [00000000] irpStack: (16, 0) 9b037798 [ \Driver\usbccgp]
9b0727c0 [00000000] irpStack: (16, 0) 9b0515e0 [ \Driver\HidUsb]
9b073bd8 [00000000] irpStack: (16, 0) 9b045030 [ \Driver\usbccgp]
9b073db8 [00000000] irpStack: (16, 0) 9b069030 [ \Driver\HidUsb]
9b076008 [00000000] irpStack: ( f, 0) 9b065e10 [ \Driver\LEqdUsb]
9b07ac70 [00000000] Irp is complete (CurrentLocation 7 > StackCount 6) 0x00000000
9b089240 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b1bd3d8 [00000000] irpStack: ( f, 0) 8719e028 [ \Driver\usbehci]
9b1bdb68 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b1bee28 [00000000] irpStack: ( f, 0) 86f99c50 [ \Driver\iusb3xhc]
9b1c0008 [00000000] irpStack: ( f, 0) 86a3c030 [ \Driver\usbccgp]
0: kd> !stacks
Proc.Thread .Thread Ticks ThreadState Blocker
[83380fc0 Idle]
0.000000 83380d00 0000001 RUNNING nt!KiIdleLoop+0xce
0.000000 807c5000 000036c RUNNING nt!KiIdleLoop+0x1a
0.000000 8cd05000 000036c RUNNING nt!KiIdleLoop+0x1a
0.000000 8cd3d000 000036c RUNNING nt!KiIdleLoop+0xce
[857f4d20 System]
4.00008c 8586aa70 000033b Blocked nt!MiModifiedPageWriter+0x39
4.0000ac 858674e8 000006b Blocked nt!CcQueueLazyWriteScanThread+0x4a
4.0000b8 85870410 0000335 Blocked nt!AlpcpReceiveMessagePort+0x421
4.0000bc 858818c8 0000333 Blocked nt!EtwpLogger+0xd0
4.0000c0 85907788 000002a Blocked nt!EtwpLogger+0xd0
4.0000c4 859071f0 000006b Blocked nt!EtwpLogger+0xd0
4.0000c8 8591ea48 000006b Blocked nt!EtwpLogger+0xd0
4.0000cc 8591e4b0 000006b Blocked nt!EtwpLogger+0xd0
4.0000d0 8595f020 000006b Blocked nt!EtwpLogger+0xd0
4.0000d4 8596f4c8 00000b2 Blocked nt!EtwpLogger+0xd0
4.0000d8 86172540 000006b Blocked nt!EtwpLogger+0xd0
4.0000dc 86174a88 000004b Blocked nt!EtwpLogger+0xd0
4.0000e0 86199a48 0000332 Blocked nt!WdipSemCheckTimeout+0x21d
4.0000e4 857bd960 000003e Blocked ACPI!ACPIWorkerThread+0x47
4.0000e8 86202c00 000032f Blocked ACPI!PciRootBusBiosMethodDispatcherOnResume+0x30
4.0000ec 861fbcf8 000032f Blocked Wdf01000!FxSystemThread::Thread+0xef
4.0000f0 86204750 000004b Blocked nt!EtwpLogger+0xd0
*** ERROR: Module load completed but symbols could not be loaded for trufos.sys
4.0000f4 86229348 0000089 Blocked trufos+0x5c633
4.0000f8 8622c020 0000089 Blocked trufos+0x5c633
4.0000fc 8622cd48 0000089 Blocked trufos+0x5c633
4.000100 8622ca70 0000089 Blocked trufos+0x567ae
4.000104 8622c3b0 00000a5 Blocked trufos+0x6905
4.000108 8579ca28 00000a5 Blocked trufos+0x1fc27
*** ERROR: Module load completed but symbols could not be loaded for SscRdBus.sys
4.00010c 8628d920 0000325 Blocked SscRdBus+0xb158
4.000110 8628dd48 0000000 Blocked SscRdBus+0x4fdc
*** ERROR: Module load completed but symbols could not be loaded for gzflt.sys
4.000118 86874d48 0000325 Blocked gzflt+0x1a379
4.00011c 868b1020 0000003 Blocked ndis!ndisThreadPoolTimerHandler+0xd9
4.000124 868b5c28 0000324 Blocked ndis!ndisCmWaitThread+0x2c
4.000128 8699ad48 0000000 Blocked rdyboost!SMKM_STORE<SMD_TRAITS>::SmStWorker+0x64
4.00012c 858570b8 0000002 Blocked rdyboost!SmdRBMemoryWatchdogThread+0xc0
*** ERROR: Module load completed but symbols could not be loaded for ApsHM86.sys
4.000130 869a7890 00000a1 Blocked ApsHM86+0x167e
4.000134 869a75b8 00000a1 Blocked ApsHM86+0x1829
*** ERROR: Module load completed but symbols could not be loaded for Apsx86.sys
4.000138 869a8020 00000a1 Blocked Apsx86+0x158fc
4.00013c 869af5c8 0000322 Blocked Apsx86+0x1132b
4.000140 869af2f0 0000322 Blocked Apsx86+0x11191
4.000144 869b07d0 0000001 Blocked Apsx86+0x1032a
4.000148 869b04f8 00000a0 Blocked Apsx86+0x10804
*** ERROR: Module load completed but symbols could not be loaded for DozeHDD.sys
4.00014c 8621dd48 0000322 Blocked DozeHDD+0x1d10
4.000150 869b4d48 0000322 Blocked DozeHDD+0x2572
4.000154 869b4a70 0000322 Blocked DozeHDD+0x1a02
4.000158 8621fd48 0000322 Blocked DozeHDD+0x2202
*** ERROR: Module load completed but symbols could not be loaded for spvve.sys
4.000164 86ba4ca0 00002ea Blocked spvve+0x9f76
*** ERROR: Symbol file could not be found. Defaulted to export symbols for atc.sys -
4.000168 86b9d9c0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.00016c 86b9d6c0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000170 86b9eab0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000174 86b9e7b0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000178 86ba3ba0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.00017c 86ba38a0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000180 86ba9c90 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000184 86ba9090 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000188 86baad00 00002e9 Blocked atc!RestoreX87State+0x9c9e4
4.00018c 86baf798 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000190 86baf498 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000194 86bbc9c0 00002e9 Blocked atc!RestoreX87State+0xd152a
4.000198 86bbd020 00002e9 Blocked atc!RestoreX87State+0xd152a
*** ERROR: Symbol file could not be found. Defaulted to export symbols for Gemma.sys -
4.00019c 86b9bbc0 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001a0 86b9b8e8 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001a4 86b9b610 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001a8 86b9b310 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001ac 86bc5020 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001b0 86bc5d48 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001b4 86bc5a48 00002e8 Blocked Gemma!SfdCheckDigitalSignature+0xe38
4.0001b8 86bd3d48 00002d5 Blocked watchdog!SMgrGdiCalloutThread+0x35
*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxDrv.sys -
4.0001bc 86b91d48 0000182 Blocked VBoxDrv!RTSemEventMultiReset+0x1b6
4.0001c4 86f60100 0000181 Blocked blbdrive!BlbIoWorkerThread+0x1e
4.0001c8 86f53d48 0000181 Blocked nt!AlpcpReceiveMessagePort+0x421
4.0001e0 86f854d8 000017a Blocked dxgkrnl!DpiPdoPollingThread+0x39
*** ERROR: Symbol file could not be found. Defaulted to export symbols for igdkmd32.sys -
4.0001e4 86fd1d48 000017a Blocked igdkmd32!hybDriverEntry+0x78b6b
4.0001e8 86fa9d48 000017a Blocked dxgkrnl!DpiPowerArbiterThread+0x41
*** ERROR: Module load completed but symbols could not be loaded for ibmpmdrv.sys
4.0001ec 870dc020 0000173 Blocked ibmpmdrv+0xa384
4.0001f0 870dcd48 00000f2 Blocked ibmpmdrv+0x137e
4.0001f4 870dca70 0000030 Blocked ibmpmdrv+0x17f4
4.000200 87c00568 000016a Blocked iusb3xhc+0x2cb5
4.000204 87d1f958 0000169 Blocked iusb3xhc+0x4a478
4.000208 87cedd48 0000051 Blocked iusb3xhc+0x276c2
4.00020c 877bc980 0000169 Blocked iusb3xhc+0x3b40b
4.00021c 87794a60 0000168 Blocked nt!CmpLoadHiveThread+0x58
4.00022c 87d01868 0000168 Blocked nt!CmpLoadHiveThread+0x58
4.000230 87d01580 00000f9 Blocked nt!CmpFinishSystemHivesLoad+0x140
4.000234 86f95d48 000001d Blocked iusb3xhc+0x97d48
*** ERROR: Module load completed but symbols could not be loaded for RtsPer.sys
4.000238 87d63020 0000008 Blocked RtsPer+0x7389b
4.00023c 87d64020 0000008 Blocked RtsPer+0x73d92
4.000240 87d65020 0000163 Blocked RtsPer+0x7378c
4.000244 87d02d48 0000148 Blocked tpm!TpmWaitForMultipleObjects+0x1c
*** ERROR: Module load completed but symbols could not be loaded for Smb_driver_Intel.sys
4.000248 86f72020 0000157 Blocked Smb_driver_Intel+0x35f7
4.000260 87490340 0000009 Blocked iusb3hub+0x4c8ae
*** ERROR: Module load completed but symbols could not be loaded for RTKVHDA.sys
4.000264 86f40a50 000002c Blocked RTKVHDA+0x28b1f
4.000268 874b7d48 000010d Blocked RTKVHDA+0x28b1f
4.00026c 870e0d48 000010d Blocked RTKVHDA+0x28b1f
4.000270 870e0a70 000002b Blocked RTKVHDA+0x28b1f
4.000274 874f3d48 000010d Blocked RTKVHDA+0x28b1f
4.000278 874f3a70 000010d Blocked RTKVHDA+0x28b1f
4.00027c 874f3798 000010d Blocked RTKVHDA+0x28b1f
4.000284 9ad47628 000000a Blocked RTKVHDA+0x239577
4.000294 9ad3dd48 00000eb Blocked iusb3hub+0x6495
4.00029c 8748a518 000008a Blocked btmhsf+0x9a1db
4.0002a0 8748b928 000008a Blocked btmhsf+0x9a1db
4.0002a4 8748b650 000008a Blocked btmhsf+0x9a1db
4.0002a8 8748b378 000008a Blocked btmhsf+0x9a1db
4.0002ac 8748c020 000008a Blocked btmhsf+0x9a1db
4.0002b0 874f4020 000008a Blocked btmhsf+0x9a1db
4.0002b4 874f6020 000008a Blocked btmhsf+0x9a1db
4.0002b8 874f5218 00000c1 Blocked btmhsf+0x9a1db
4.0002bc 874f7768 00000c1 Blocked btmhsf+0x9a1db
4.0002c0 9b088d48 00000c0 Blocked iusb3hub+0x6495
4.0002c4 9b0be020 000008a Blocked bthport!HCI_ThreadFunction+0xa8
4.0002c8 869ba7c0 00000ae Blocked iusb3hub+0x6495
4.0002cc 9b1c0630 0000089 Blocked Ntfs!EfspCheckEfsPolicy+0x95
4.00045c 8c623d48 000003e Blocked igdkmd32!hybDriverEntry+0x12ab14
4.0004e0 8c788510 0000054 Blocked dxgmms1!VidSchiWaitForSchedulerEvents+0x176
4.000540 8c7e7390 000004a Blocked nt!IoRemoveIoCompletion+0x2e
[86f6ed20 smss.exe]
1cc.0001d0 86f6d020 000004c Blocked nt!ObpWaitForMultipleObjects+0x262
1cc.0001d4 86f6ea48 000004b Blocked nt!IoRemoveIoCompletion+0x2e
1cc.000250 89045920 000004b Blocked nt!IoRemoveIoCompletion+0x2e
1cc.000254 890477f0 0000148 Blocked nt!IoRemoveIoCompletion+0x2e
[9cdb97f8 csrss.exe]
2d0.00050c 8c7b9868 000004c Blocked nt!KiSystemServicePostCall
2d0.000510 8c7b3af8 000004c Blocked nt!ObpWaitForMultipleObjects+0x262
2d0.000514 86232b58 0000040 Blocked nt!AlpcpReceiveMessagePort+0x421
2d0.000518 86e60030 000004c Blocked nt!AlpcpReceiveMessagePort+0x421
2d0.000534 8c7da098 0000040 Blocked nt!AlpcpReceiveMessagePort+0x421
2d0.000548 8c7bd030 0000044 Blocked win32k!xxxMsgWaitForMultipleObjects+0xe9
2d0.000564 86e5d628 0000040 Blocked nt!AlpcpReceiveMessagePort+0x421
2d0.000568 8d6098a0 0000040 Blocked win32k!xxxMsgWaitForMultipleObjects+0xe9
[86e60ab0 smss.exe]
51c.000520 86e60378 000004b Blocked nt!ObpWaitForMultipleObjects+0x262
[8c7c8d20 wininit.exe]
524.000528 8c7bcd48 0000000 RUNNING nt!KeBugCheckEx+0x1e
524.000538 8c7c6460 0000043 Blocked nt!IoRemoveIoCompletion+0x2e
524.00053c 8c7dbad8 0000044 Blocked nt!KiSystemServicePostCall
524.000550 8c7bdd48 0000044 Blocked nt!AlpcpReceiveMessagePort+0x421
524.000554 86e3e618 0000041 Blocked nt!ObpWaitForMultipleObjects+0x262
524.000560 86e3a030 0000043 Blocked nt!IoRemoveIoCompletion+0x2e
[8c7ae948 csrss.exe]
52c.000530 86e483a8 000003f Blocked cdd!CddIssueCommand+0x9c
52c.00056c 8d61b6c8 000003f Blocked cdd!CddSqmThread+0x9a
52c.000570 8d688030 000000c RUNNING hal!HalpTscStallExecutionProcessor+0xce
[8c7e7ce8 services.exe]
558.00055c 86e44688 000003b Blocked nt!KiSystemServicePostCall
Threads Processed: 188