*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {7, 1200, 4150002, ffffe000acf38930}
*** ERROR: Symbol file could not be found. Defaulted to export symbols for fwpkclnt.sys -
*** WARNING: Unable to verify timestamp for klwfp.sys
*** ERROR: Module load completed but symbols could not be loaded for [B][COLOR="Red"]klwfp.sys[/COLOR][/B]
GetPointerFromAddress: unable to read from fffff800223eb138
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsCompleteOperation0+1e )
Followup: MachineOwner
2: kd> !thread
GetPointerFromAddress: unable to read from fffff800223eb000
THREAD ffffe000aae46880 Cid 0004.0154 Teb: 0000000000000000 Win32Thread: 0000000000000000 RUNNING on processor 2
Not impersonating
GetUlongFromAddress: unable to read from fffff80022337ac0
Owning Process ffffe000a744c040 Image: System
Attached Process N/A Image: N/A
fffff78000000000: Unable to get shared data
Wait Start TickCount 7079729
Context Switch Count 317545 IdealProcessor: 1
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
UserTime 00:00:00.000
KernelTime 00:00:00.000
Unable to load image \SystemRoot\system32\DRIVERS\[B][COLOR="red"]klflt.sys[/COLOR][/B], Win32 error 0n2
*** WARNING: Unable to verify timestamp for klflt.sys
*** ERROR: Module load completed but symbols could not be loaded for klflt.sys
Win32 Start Address klflt (0xfffff80058bcd4a8)
Stack Init ffffd00185c48c90 Current ffffd00185c48860
Base ffffd00185c49000 Limit ffffd00185c43000 Call 0
Priority 12 BasePriority 12 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
---------