Child-SP RetAddr : Args to Child : Call Site
fffff880`031f6060 fffff800`030db672 : fffffa80`036e6720 fffffa80`036e6660 00000000`00000000 00000000`0000000d : nt!KiSwapContext+0x7a
fffff880`031f61a0 fffff800`030dde9f : 00000000`00000000 00000000`00000001 fffffa80`00000000 fffffa80`036e6660 : nt!KiCommitThreadWait+0x1d2
fffff880`031f6230 fffff880`02415773 : fffffa80`07e5b100 fffffa80`00000000 fffffa80`07e5b000 fffffa80`07e5b100 : nt!KeWaitForSingleObject+0x19f
fffff880`031f62d0 fffffa80`07e5b100 : fffffa80`00000000 fffffa80`07e5b000 fffffa80`07e5b100 fffff800`03255e80 : [COLOR="red"]btfilter[/COLOR]+0x9773
fffff880`031f62d8 fffffa80`00000000 : fffffa80`07e5b000 fffffa80`07e5b100 fffff800`03255e80 fffff880`0428a404 : 0xfffffa80`07e5b100
fffff880`031f62e0 fffffa80`07e5b000 : fffffa80`07e5b100 fffff800`03255e80 fffff880`0428a404 00000000`0000fc57 : 0xfffffa80`00000000
fffff880`031f62e8 fffffa80`07e5b100 : fffff800`03255e80 fffff880`0428a404 00000000`0000fc57 69634d43`00000000 : 0xfffffa80`07e5b000
fffff880`031f62f0 fffff800`03255e80 : fffff880`0428a404 00000000`0000fc57 69634d43`00000000 ffffffff`c000009d : 0xfffffa80`07e5b100
fffff880`031f62f8 fffff880`0428a404 : 00000000`0000fc57 69634d43`00000000 ffffffff`c000009d 00000000`00000000 : nt!KiInitialPCR+0x180
fffff880`031f6300 00000000`0000fc57 : 69634d43`00000000 ffffffff`c000009d 00000000`00000000 fffffa80`07e5b1a0 : [COLOR="Red"]fshs[/COLOR]+0x6404
fffff880`031f6308 69634d43`00000000 : ffffffff`c000009d 00000000`00000000 fffffa80`07e5b1a0 fffff880`0240e881 : 0xfc57
fffff880`031f6310 ffffffff`c000009d : 00000000`00000000 fffffa80`07e5b1a0 fffff880`0240e881 00000000`00000000 : 0x69634d43`00000000
fffff880`031f6318 00000000`00000000 : fffffa80`07e5b1a0 fffff880`0240e881 00000000`00000000 fffff800`0326a588 : 0xffffffff`c000009d
Bugcheck code 1000009F
Arguments 00000000`00000004 00000000`00000258 fffffa80`036e6660 fffff800`046e64d0
Debug session time: Wed Jul 20 22:48:19.055 2016 (UTC + 2:00)
System Uptime: 0 days 7:57:32.226
0: kd> lmvm fshs
Browse full module list
start end module name
fffff880`04284000 fffff880`0429e000 fshs T (no symbols)
Loaded symbol image file: fshs.sys
Image path: \??\C:\Program Files (x86)\Charter Security Suite\apps\ComputerSecurity\HIPS\drivers\fshs.sys
Image name: fshs.sys
Browse all global symbols functions data
Timestamp: Fri Mar 11 09:18:18 2016 (56E27F4A)
CheckSum: 00025B92
ImageSize: 0001A000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
0: kd> lmvm btfilter
Browse full module list
start end module name
fffff880`0240c000 fffff880`024b3000 btfilter T (no symbols)
Loaded symbol image file: btfilter.sys
Image path: \SystemRoot\system32\DRIVERS\btfilter.sys
Image name: btfilter.sys
Browse all global symbols functions data
Timestamp: Wed Aug 20 11:17:17 2014 (53F4679D)
CheckSum: 0009F1C7
ImageSize: 000A7000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4