Please find details here:
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {80000003, fffff803dd1f3018, ffff8a00e9670070, 0}
*** ERROR: Module load completed but symbols could not be loaded for PSINFile.sys
Probably caused by : PSINFile.sys ( PSINFile+3daf )
Followup: MachineOwner
************* Symbol Path validation summary **************
Response Time (ms) Location
Deferred srv*
OK C:\Pooja\Issues\31aug_win10_dump
1: kd> .reload /f @“\SystemRoot\system32\DRIVERS\sfntpffd.sys”
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 0000000080000003, Exception code that caused the bugcheck
Arg2: fffff803dd1f3018, Address of the instruction which caused the bugcheck
Arg3: ffff8a00e9670070, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
*** ERROR: Module load completed but symbols could not be loaded for PSINFile.sys
DUMP_CLASS: 1
DUMP_QUALIFIER: 402
BUILD_VERSION_STRING: 15063.0.amd64fre.rs2_release.170317-1834
SYSTEM_MANUFACTURER: VMware, Inc.
VIRTUAL_MACHINE: VMware
SYSTEM_PRODUCT_NAME: VMware Virtual Platform
SYSTEM_VERSION: None
BIOS_VENDOR: Phoenix Technologies LTD
BIOS_VERSION: 6.00
BIOS_DATE: 07/30/2013
BASEBOARD_MANUFACTURER: Intel Corporation
BASEBOARD_PRODUCT: 440BX Desktop Reference Platform
BASEBOARD_VERSION: None
DUMP_TYPE: 0
BUGCHECK_P1: 80000003
BUGCHECK_P2: fffff803dd1f3018
BUGCHECK_P3: ffff8a00e9670070
BUGCHECK_P4: 0
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
FAULTING_IP:
nt!DebugPrompt+18
fffff803`dd1f3018 c3 ret
CONTEXT: ffff8a00e9670070 – (.cxr 0xffff8a00e9670070)
rax=0000000000000002 rbx=fffff80c94347390 rcx=fffff80c9433f378
rdx=ffff8a00e967001f rsi=ffffc00d2d012b80 rdi=000000000000002f
rip=fffff803dd1f3017 rsp=ffff8a00e9670a68 rbp=ffff8a00e9670bc0
r8=ffff8a00e9670af0 r9=0000000000000002 r10=ffff8a00e96708d0
r11=0000000000000000 r12=000000000000001c r13=000000000000001c
r14=0000000000000000 r15=ffffc00d2f875fa8
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000246
nt!DebugPrompt+0x17:
fffff803`dd1f3017 cc int 3
Resetting default scope
CPU_COUNT: 2
CPU_MHZ: 960
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 2d
CPU_STEPPING: 7
CPU_MICROCODE: 6,2d,7,0 (F,M,S,R) SIG: 710’00000000 (cache) 710’00000000 (init)
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: NOI-D70QD152
ANALYSIS_SESSION_TIME: 09-22-2017 11:13:29.0673
ANALYSIS_VERSION: 10.0.15063.468 amd64fre
LAST_CONTROL_TRANSFER: from fffff803dd2b8a85 to fffff803dd1f3017
STACK_TEXT:
ffff8a00e9670a68 fffff803
dd2b8a85 : ffff8a00e9670bc0 fffff803
dd1542d0 fffff80c94347390 ffffc00d
2d012b80 : nt!DebugPrompt+0x17
ffff8a00e9670a70 fffff80c
9437491a : fffff80c94347390 ffffc00d
2d012b80 fffff80c9433f374 00000000
00000007 : nt!DbgPrompt+0x35
ffff8a00e9670ac0 fffff80c
9437a260 : ffffc00d00000044 ffffc00d
2d010880 ffffc00d2c92d4e0 ffffc00d
2d130010 : FLTMGR!FltpvPrintErrors+0x14e
ffff8a00e9670d30 fffff80c
94368215 : ffffc00d2f875f00 00000000
0000001a ffffc00d2f875f00 ffffc00d
00000000 : FLTMGR!FltvNormalizeNameComponentEx+0xc0
ffff8a00e9670d90 fffff80c
94357a2a : ffffc00d2f870001 ffffc00d
0000001a 000000000000001b ffffc00d
2f875f00 : FLTMGR!FltpExpandShortNames+0xefb1
ffff8a00e9670e20 fffff80c
94357852 : ffffc00d2f875f00 ffff8a00
e9660000 0000000000000000 00000000
c000000d : FLTMGR!FltpGetNormalizedFileNameWorker+0x15e
ffff8a00e9670e60 fffff80c
94356d7d : 0000000000000000 ffffc00d
2fe73240 ffffc00d2fe73200 fffff80c
94359da8 : FLTMGR!FltpGetNormalizedFileName+0x1a
ffff8a00e9670eb0 fffff80c
9435d829 : 0000000000000000 ffffc00d
2f875f00 ffffc00d2d12f680 ffffc00d
2d130010 : FLTMGR!FltpCreateFileNameInformation+0x32d
ffff8a00e9670f00 fffff80c
943273a5 : ffffc00d2f875f00 00000000
c000000d ffffc00d2f875f00 ffffc00d
2fe73208 : FLTMGR!CreateTemporaryFileNameInformation+0x3d
ffff8a00e9670f50 fffff80c
94358181 : ffff8a00e9671210 ffffc00d
2fe73200 ffffc00d2d130010 ffffc00d
2fe763f0 : FLTMGR!FltpGetFileNameInformation+0x885
ffff8a00e9671000 fffff80c
96ca3daf : ffffc00d2f875f00 ffff8a00
e9671210 0000000000000101 00000000
00000000 : FLTMGR!FltGetFileNameInformationUnsafe+0x71
ffff8a00e9671070 fffff80c
96ca6d5a : 0000000000000000 00000000
00002725 0000000000002713 00000000
00000000 : PSINFile+0x3daf
ffff8a00e96710b0 fffff80c
96ca55f3 : ffffc00d2fe73200 00000000
01010101 ffffc00d2fe76370 00000000
00000000 : PSINFile+0x6d5a
ffff8a00e9671150 fffff80c
9432413c : ffffc00d2f84cb60 ffffc00d
2f84cc80 c000001600000000 ffffc00d
00000000 : PSINFile+0x55f3
ffff8a00e96711c0 fffff80c
94323af3 : ffffc00d2f84ca00 ffffc00d
2f84ca00 ffffe482d5626f68 00000000
00000000 : FLTMGR!FltpPerformPostCallbacks+0x2ac
ffff8a00e9671290 fffff80c
943256ce : ffffe482d5626dc0 ffffc00d
2f84ca80 0000000000000008 ffffc00d
2f84ca98 : FLTMGR!FltpPassThroughCompletionWorker+0x73
ffff8a00e96712d0 fffff80c
9435612b : ffff8a00e9671380 ffffe482
d5626f68 0000000000000000 00000000
00000040 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x21e
ffff8a00e9671340 fffff803
dd7e109d : ffffe482d5626d00 ffffe482
d5626dc0 0000000000000000 00000000
00000000 : FLTMGR!FltpCreate+0x2eb
ffff8a00e96713f0 fffff803
dd2167ad : 0000000000000085 ffff8a00
e9671750 ffffe482d5626dc0 ffffc00d
2f3cd9b0 : nt!IovCallDriver+0x245
ffff8a00e9671430 fffff803
dd518265 : 0000000000000085 ffff8a00
e9671750 ffffc00d2d0fc1e0 00000000
00000000 : nt!IofCallDriver+0x134f9d
ffff8a00e9671470 fffff803
dd52361b : fffff803dd517a50 fffff803
dd517a50 ffff8a0000000000 ffffc00d
2d0fc5b0 : nt!IopParseDevice+0x815
ffff8a00e9671650 fffff803
dd527150 : ffffc00d2ce82200 ffff8a00
e96718b8 0000000000000040 ffffc00d
2af029a0 : nt!ObpLookupObjectName+0x46b
ffff8a00e9671820 fffff803
dd52b0ca : ffffc00d00000001 ffffc00d
2ceefbb0 000000314c3ff280 00000000
00000000 : nt!ObOpenObjectByNameEx+0x1e0
ffff8a00e9671960 fffff803
dd52c159 : 000001455863edf0 ffffb00a
a974a630 000000314c3ff280 00000031
4c3ff2b0 : nt!IopCreateFile+0x3aa
ffff8a00e9671a00 fffff803
dd1f8413 : ffffafd7dffe5b30 ffffafd7
ebefff28 ffffafd7ebf5f7f8 ffff6c6a
94227079 : nt!NtCreateFile+0x79
ffff8a00e9671a90 00007ff9
76885e44 : 00007ff96cde71fe 00660063
00000004 006300300030002d 00007ff9
6ce0b880 : nt!KiSystemServiceCopyEnd+0x13
000000314c3ff208 00007ff9
6cde71fe : 0066006300000004 00630030
0030002d 00007ff96ce0b880 00007ff9
6ce0b878 : ntdll!NtCreateFile+0x14
000000314c3ff210 00007ff9
6ce01ebb : 0000000000000010 00000145
5863eda0 0000000000000001 00007ff9
6ce19000 : WinSCard!RedirectionContextCreateRdpdrHandle+0xe2
000000314c3ff3e0 00007ff9
6ce0215c : 000001455863eda0 00000000
00000000 0000000000000001 00007ff9
6ce01370 : WinSCard!_SendSCardIOCTLWithWaitForCallback+0xc3
000000314c3ff450 00007ff9
6cdfe3aa : 000001455863eda0 00000145
5863eda0 0000000000000000 00000145
5863eda0 : WinSCard!_SetStartedEventToCorrectState+0x100
000000314c3ff4a0 00007ff9
6cde508a : 0000014500000001 00007ff9
00000001 0000014500000004 00000000
00002234 : WinSCard!RedirectedSCardAccessStartedEvent+0xe
000000314c3ff4d0 00007ff9
6cde26ba : 000001455863eda0 00000000
00000001 000000314c3ff801 00000000
00000001 : WinSCard!_guard_ss_verify_sp_default+0x9ca
000000314c3ff520 00007ff9
6ce323e2 : 0000000000000001 00000145
00000004 0000000000002134 00000145
5863eda0 : WinSCard!SCardAccessStartedEvent+0x2da
000000314c3ff590 00007ff9
6ce3236b : 0000000000000009 00000000
000016a4 0000000100000000 00000031
49042000 : certprop!errcntrctlib::WinApiErrorContract<<lambda_729d4eada3656720b1e125f364f44fb4> >+0x32
000000314c3ff600 00007ff9
76823021 : 000001455866ae10 00000145
5862b780 000000007ffe0386 00000000
000020f8 : certprop!CertPropAssociateSmartCardUserWithCertificateCallback+0x6b
000000314c3ff660 00007ff9
76821989 : 0000014558e87760 00000000
00000000 00007ff976822ef0 00000000
00000000 : ntdll!TppWorkpExecuteCallback+0x131
000000314c3ff6b0 00007ff9
75b22774 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : ntdll!TppWorkerThread+0x6c9
000000314c3ff9c0 00007ff9
76850d51 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : KERNEL32!BaseThreadInitThunk+0x14
000000314c3ff9f0 00000000
00000000 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : ntdll!RtlUserThreadStart+0x21
THREAD_SHA1_HASH_MOD_FUNC: 1c65640d49035044e989aa6371b9ee704c23d750
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 03c39bc8cc86d3b9f3dccb83fc318f1748e1fd20
THREAD_SHA1_HASH_MOD: 7a5afbef3f43c6a14a102d7f9977964302622394
FOLLOWUP_IP:
PSINFile+3daf
fffff80c96ca3daf 85c0 test eax,eax<br><br>FAULT_INSTR_CODE: 3c79c085<br><br>SYMBOL_STACK_INDEX: b<br><br>SYMBOL_NAME: PSINFile+3daf<br><br>FOLLOWUP_NAME: MachineOwner<br><br>MODULE_NAME: PSINFile<br><br>IMAGE_NAME: PSINFile.sys<br><br>DEBUG_FLR_IMAGE_TIMESTAMP: 57a3fab9<br><br>STACK_COMMAND: .cxr 0xffff8a00e9670070 ; kb<br><br>BUCKET_ID_FUNC_OFFSET: 3daf<br><br>FAILURE_BUCKET_ID: 0x3B_VRF_PSINFile!unknown_function<br><br>BUCKET_ID: 0x3B_VRF_PSINFile!unknown_function<br><br>PRIMARY_PROBLEM_CLASS: 0x3B_VRF_PSINFile!unknown_function<br><br>TARGET_TIME: 2017-08-31T07:11:22.000Z<br><br>OSBUILD: 15063<br><br>OSSERVICEPACK: 0<br><br>SERVICEPACK_NUMBER: 0<br><br>OS_REVISION: 0<br><br>SUITE_MASK: 272<br><br>PRODUCT_TYPE: 1<br><br>OSPLATFORM_TYPE: x64<br><br>OSNAME: Windows 10<br><br>OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS<br><br>OS_LOCALE: <br><br>USER_LCID: 0<br><br>OSBUILD_TIMESTAMP: 2017-08-01 06:53:25<br><br>BUILDDATESTAMP_STR: 170317-1834<br><br>BUILDLAB_STR: rs2_release<br><br>BUILDOSVER_STR: 10.0.15063.0.amd64fre.rs2_release.170317-1834<br><br>ANALYSIS_SESSION_ELAPSED_TIME: 281b<br><br>ANALYSIS_SOURCE: KM<br><br>FAILURE_ID_HASH_STRING: km:0x3b_vrf_psinfile!unknown_function<br><br>FAILURE_ID_HASH: {ffe7027d-0b4d-0ac3-d7f0-c05980763caa}<br><br>Followup: MachineOwner<br>---------<br><br>1: kd> k<br> # Child-SP RetAddr Call Site<br>00 ffff8a00
e966f798 fffff803dd1f88a9 nt!KeBugCheckEx<br>01 ffff8a00
e966f7a0 fffff803dd1f803c nt!KiBugCheckDispatch+0x69<br>02 ffff8a00
e966f8e0 fffff803dd1f3a3d nt!KiSystemServiceHandler+0x7c<br>03 ffff8a00
e966f920 fffff803dd0acd94 nt!RtlpExecuteHandlerForException+0xd<br>04 ffff8a00
e966f950 fffff803dd0abb36 nt!RtlDispatchException+0x404<br>05 ffff8a00
e9670040 fffff803dd1f898e nt!KiDispatchException+0x1f6<br>06 ffff8a00
e96706f0 fffff803dd1f7df6 nt!KiExceptionDispatch+0xce<br>07 ffff8a00
e96708d0 fffff803dd1f3018 nt!KiDebugServiceTrap+0xf6<br>08 ffff8a00
e9670a68 fffff803dd2b8a85 nt!DebugPrompt+0x18<br>09 ffff8a00
e9670a70 fffff80c9437491a nt!DbgPrompt+0x35<br>0a ffff8a00
e9670ac0 fffff80c9437a260 FLTMGR!FltpvPrintErrors+0x14e<br>0b ffff8a00
e9670d30 fffff80c94368215 FLTMGR!FltvNormalizeNameComponentEx+0xc0<br>0c ffff8a00
e9670d90 fffff80c94357a2a FLTMGR!FltpExpandShortNames+0xefb1<br>0d ffff8a00
e9670e20 fffff80c94357852 FLTMGR!FltpGetNormalizedFileNameWorker+0x15e<br>0e ffff8a00
e9670e60 fffff80c94356d7d FLTMGR!FltpGetNormalizedFileName+0x1a<br>0f ffff8a00
e9670eb0 fffff80c9435d829 FLTMGR!FltpCreateFileNameInformation+0x32d<br>10 ffff8a00
e9670f00 fffff80c943273a5 FLTMGR!CreateTemporaryFileNameInformation+0x3d<br>11 ffff8a00
e9670f50 fffff80c94358181 FLTMGR!FltpGetFileNameInformation+0x885<br>12 ffff8a00
e9671000 fffff80c96ca3daf FLTMGR!FltGetFileNameInformationUnsafe+0x71<br>13 ffff8a00
e9671070 fffff80c96ca6d5a PSINFile+0x3daf<br>14 ffff8a00
e96710b0 fffff80c96ca55f3 PSINFile+0x6d5a<br>15 ffff8a00
e9671150 fffff80c9432413c PSINFile+0x55f3<br>16 ffff8a00
e96711c0 fffff80c94323af3 FLTMGR!FltpPerformPostCallbacks+0x2ac<br>17 ffff8a00
e9671290 fffff80c943256ce FLTMGR!FltpPassThroughCompletionWorker+0x73<br>18 ffff8a00
e96712d0 fffff80c9435612b FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x21e<br>19 ffff8a00
e9671340 fffff803dd7e109d FLTMGR!FltpCreate+0x2eb<br>1a ffff8a00
e96713f0 fffff803dd2167ad nt!IovCallDriver+0x245<br>1b ffff8a00
e9671430 fffff803dd518265 nt!IofCallDriver+0x134f9d<br>1c ffff8a00
e9671470 fffff803dd52361b nt!IopParseDevice+0x815<br>1d ffff8a00
e9671650 fffff803dd527150 nt!ObpLookupObjectName+0x46b<br>1e ffff8a00
e9671820 fffff803dd52b0ca nt!ObOpenObjectByNameEx+0x1e0<br>1f ffff8a00
e9671960 fffff803dd52c159 nt!IopCreateFile+0x3aa<br>20 ffff8a00
e9671a00 fffff803dd1f8413 nt!NtCreateFile+0x79<br>21 ffff8a00
e9671a90 00007ff976885e44 nt!KiSystemServiceCopyEnd+0x13<br>22 00000031
4c3ff208 00007ff96cde71fe ntdll!NtCreateFile+0x14<br>23 00000031
4c3ff210 00007ff96ce01ebb WinSCard!RedirectionContextCreateRdpdrHandle+0xe2<br>24 00000031
4c3ff3e0 00007ff96ce0215c WinSCard!_SendSCardIOCTLWithWaitForCallback+0xc3<br>25 00000031
4c3ff450 00007ff96cdfe3aa WinSCard!_SetStartedEventToCorrectState+0x100<br>26 00000031
4c3ff4a0 00007ff96cde508a WinSCard!RedirectedSCardAccessStartedEvent+0xe<br>27 00000031
4c3ff4d0 00007ff96cde26ba WinSCard!_guard_ss_verify_sp_default+0x9ca<br>28 00000031
4c3ff520 00007ff96ce323e2 WinSCard!SCardAccessStartedEvent+0x2da<br>29 00000031
4c3ff590 00007ff96ce3236b certprop!errcntrctlib::WinApiErrorContract<<lambda_729d4eada3656720b1e125f364f44fb4> >+0x32<br>2a 00000031
4c3ff600 00007ff976823021 certprop!CertPropAssociateSmartCardUserWithCertificateCallback+0x6b<br>2b 00000031
4c3ff660 00007ff976821989 ntdll!TppWorkpExecuteCallback+0x131<br>2c 00000031
4c3ff6b0 00007ff975b22774 ntdll!TppWorkerThread+0x6c9<br>2d 00000031
4c3ff9c0 00007ff976850d51 KERNEL32!BaseThreadInitThunk+0x14<br>2e 00000031
4c3ff9f0 00000000`00000000 ntdll!RtlUserThreadStart+0x21
---------------------------------------------------------------------------------------------------
If we attach debugger, then we can see bellow error,
FILTER VERIFIER ERROR: A filter has returned an invalid status code from a
name provider callback routine
(Filter = FFFF9600559C2840, Instance = FFFF960055AE4010, Status = 0xc0000002)
where Status = 0xc0000002 is STATUS_Not_implemented,</lambda_729d4eada3656720b1e125f364f44fb4></lambda_729d4eada3656720b1e125f364f44fb4>