BSOD about 10-15 minutes from startup (CRITICAL_PROCESS_DIED)

Page 1 of 3 123 LastLast

  1. Posts : 36
    Windows 10
       #1

    BSOD about 10-15 minutes from startup (CRITICAL_PROCESS_DIED)


    My laptop randomly BSODs about 10-15 minutes from boot with the code "CRITICAL_PROCESS_DIED". I am running Windows 10 1909 build 18263.

    It BSODs even in safe mode, and on examining the dump file, it tells me that services.exe crashed due to an Nt!KeBugCheckEx() call.
    I have already tried restoring system files using sfc /scannow, but it wasn't able to restore everything, and dism could not restore everything either. I ran the two from an external USB using the /onbootdir and /offwindir arguments but to no avail.
    I also tried to do an in-place reinstall of Windows (keep all apps, settings, and files) but that BSOD'd two times at 37%. I verified my drivers using verifier and there was an erroring driver, but it still kept crashing even on removing it. It is definitely not a hardware failure, as I have been running on an Ubuntu live USB for a few hours with no issues (in fact I am even writing this on Ubuntu).

    I have attached the latest minidump file.

    Cheers,
    inf1425
      My Computer


  2. Posts : 1,231
    Windows 8.1 Enterprise x64
       #2

    Send full memory dump (MEMORY.DMP in C:\Windows)
      My Computer


  3. Posts : 36
    Windows 10
    Thread Starter
       #3

    Link to memory dump: MEMORY.DMP - Google Drive
      My Computer


  4. Posts : 1,231
    Windows 8.1 Enterprise x64
       #4

    The CRITICAL_PROCESS_DIED bug check has a value of 0x000000EF. This indicates that a critical system process died.
    Code:
    Microsoft (R) Windows Debugger Version 10.0.19528.1000 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\mrpep\Downloads\MEMORY (13).DMP]
    Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
    
    
    ************* Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       srv*
    Symbol search path is: srv*
    Executable search path is: 
    Page 20000092b too large to be in the dump file.
    Page 200002f96 too large to be in the dump file.
    Page 200002f96 too large to be in the dump file.
    Windows 10 Kernel Version 18362 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    18362.1.amd64fre.19h1_release.190318-1202
    Machine Name:
    Kernel base = 0xfffff807`80c1f000 PsLoadedModuleList = 0xfffff807`81067190
    Debug session time: Fri Feb 21 09:39:15.101 2020 (UTC + 1:00)
    System Uptime: 0 days 0:14:52.938
    Loading Kernel Symbols
    ...............................................................
    ..........Page 34402c not present in the dump file. Type ".hh dbgerr004" for details
    .......Page 346c68 not present in the dump file. Type ".hh dbgerr004" for details
    ...............................................
    ................................................................
    ............
    Loading User Symbols
    ............................
    Loading unloaded module list
    ...............
    For analysis of this file, run !analyze -v
    nt!KeBugCheckEx:
    fffff807`80de0510 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffa784`3b787940=00000000000000ef
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    CRITICAL_PROCESS_DIED (ef)
            A critical system process died
    Arguments:
    Arg1: ffffbe07647304c0, Process object or thread object
    Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
    Arg3: 0000000000000000
    Arg4: 0000000000000000
    
    Debugging Details:
    ------------------
    
    
    KEY_VALUES_STRING: 1
    
        Key  : Analysis.CPU.Sec
        Value: 3
    
        Key  : Analysis.DebugAnalysisProvider.CPP
        Value: Create: 8007007e on DESKTOP-QO9C72C
    
        Key  : Analysis.DebugData
        Value: CreateObject
    
        Key  : Analysis.DebugModel
        Value: CreateObject
    
        Key  : Analysis.Elapsed.Sec
        Value: 3
    
        Key  : Analysis.Memory.CommitPeak.Mb
        Value: 78
    
        Key  : Analysis.System
        Value: CreateObject
    
    
    ADDITIONAL_XML: 1
    
    BUGCHECK_CODE:  ef
    
    BUGCHECK_P1: ffffbe07647304c0
    
    BUGCHECK_P2: 0
    
    BUGCHECK_P3: 0
    
    BUGCHECK_P4: 0
    
    PROCESS_NAME:  services.exe
    
    CRITICAL_PROCESS:  services.exe
    
    ERROR_CODE: (NTSTATUS) 0x5d1d3040 - <Unable to get error code text>
    
    CRITICAL_PROCESS_REPORTGUID:  {8d5b3d58-2953-4ee3-965b-4b5fb262255f}
    
    IMAGE_NAME:  ntdll.dll
    
    MODULE_NAME: ntdll
    
    FAULTING_MODULE: 00007ffbc03a0000 ntdll
    
    STACK_TEXT:  
    ffffa784`3b787938 fffff807`814ea1e9 : 00000000`000000ef ffffbe07`647304c0 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
    ffffa784`3b787940 fffff807`813e6893 : ffffbe07`647304c0 fffff807`80cbb769 ffffbe07`647304c0 fffff807`80cbb8c0 : nt!PspCatchCriticalBreak+0x115
    ffffa784`3b7879e0 fffff807`81259190 : ffffbe07`00000000 00000000`00000000 ffffbe07`647304c0 ffffbe07`647304c0 : nt!PspTerminateAllThreads+0x175cbf
    ffffa784`3b787a50 fffff807`81258f79 : ffffffff`ffffffff ffffa784`3b787b80 ffffbe07`647304c0 fffff807`811e6801 : nt!PspTerminateProcess+0xe0
    ffffa784`3b787a90 fffff807`80df1e18 : ffffbe07`00000358 ffffbe07`5d1d3040 ffffbe07`647304c0 000000cf`17c7f9bc : nt!NtTerminateProcess+0xa9
    ffffa784`3b787b00 00007ffb`c043c644 : 00007ffb`c04afc9f 00007ffb`c04df980 000000cf`17c7f980 000000cf`17c7d240 : nt!KiSystemServiceCopyEnd+0x28
    000000cf`17c7cfe8 00007ffb`c04afc9f : 00007ffb`c04df980 000000cf`17c7f980 000000cf`17c7d240 00000000`00000000 : ntdll!NtTerminateProcess+0x14
    000000cf`17c7cff0 00007ffb`c0443d1d : 00007ffb`c04df980 00000000`00000008 00000000`00000001 ffffffff`ffffffff : ntdll!TppWorkerpInnerExceptionFilter+0x5b
    000000cf`17c7d020 00007ffb`c042c6d6 : 00000000`00000000 0000025b`db390000 0000025b`db3906b8 00000000`000000b8 : ntdll!TppWorkerThread$filt$3+0x19
    000000cf`17c7d060 00007ffb`c043bcae : 00007ffb`c04dfa40 000000cf`17c7dd30 000000cf`17c7f980 000000cf`17c7f980 : ntdll!_C_specific_handler+0x96
    000000cf`17c7d0d0 00007ffb`c044121f : 00000000`00000000 000000cf`17c7d670 000000cf`17c7dd30 00000000`00000000 : ntdll!_GSHandlerCheck_SEH+0x6a
    000000cf`17c7d100 00007ffb`c040a289 : 000000cf`00000001 00007ffb`c03a0000 00000000`00000000 00007ffb`c050cbfc : ntdll!RtlpExecuteHandlerForException+0xf
    000000cf`17c7d130 00007ffb`c043fe8e : 00000000`00000208 00000000`00000000 00000000`00000000 00007ffb`bdc39070 : ntdll!RtlDispatchException+0x219
    000000cf`17c7d840 00007ffb`c03f49ec : 00001a58`633cf95c 00000000`0000010c 000000cf`17c7e410 0000025b`db6d0002 : ntdll!KiUserExceptionDispatch+0x2e
    000000cf`17c7df60 00007ffb`bd9dd4de : 00000000`00000000 00000000`00000200 00000000`00000000 00000000`00000000 : ntdll!RtlLoadString+0x14c
    000000cf`17c7e020 00007ffb`bd9dc0fb : 00000000`00000000 00000000`00000acc 00007ff7`6dc5ea90 00000000`00000200 : KERNELBASE!LoadStringByReference+0x4fe
    000000cf`17c7e3c0 00007ff7`6dbf8e00 : 00000000`00000acc 00000000`00000000 000000cf`17c7e4a0 00000000`00000400 : KERNELBASE!RegLoadMUIStringW+0x18b
    000000cf`17c7e450 00007ff7`6dbf8d38 : 0000025b`db9edefe 0000025b`db9edeb0 00000000`00000000 0000025b`db9edeb0 : services!ScRegLoadMUIString+0x80
    000000cf`17c7e8f0 00007ff7`6dbf8b33 : 000000cf`17c7ea08 00000000`00000000 00000000`00000000 00000000`00000000 : services!ScReadStringIndirect+0x64
    000000cf`17c7e950 00007ff7`6dbf9039 : 0000025b`db470230 000000cf`17c7eb30 00000000`00000000 00000001`00000000 : services!ScReadAndTranslateString+0x83
    000000cf`17c7e9c0 00007ff7`6dbf8f23 : 00000000`00000acc 0000025b`db9edeb0 0000025b`db470230 00000000`00000000 : services!CServiceRecord::ReadDisplayNameFromRegistry+0x79
    000000cf`17c7ea00 00007ff7`6dbf4de7 : 00000000`00000000 0000025b`db470230 00000000`00000000 00000000`00000050 : services!CServiceRecord::ReadDisplayName+0x17
    000000cf`17c7ea30 00007ff7`6dbf3b98 : 00000000`00000000 00000000`00000000 0000025b`dba1b8fc 00000000`00000000 : services!REnumServiceGroupHelp+0x9a7
    000000cf`17c7ebc0 00007ffb`bf986953 : 0000025b`db973960 00000000`00000000 00000000`00000070 00000000`00000003 : services!REnumServicesStatusExW+0x68
    000000cf`17c7ec20 00007ffb`bf92364b : 00007ff7`6dc65932 000000cf`17c7f0c0 00000000`0000002a 00000000`00000000 : RPCRT4!Invoke+0x73
    000000cf`17c7ecb0 00007ffb`bf92451a : 0000025b`db3419c0 00007ffb`c03dedf2 00000000`00000000 00000000`00000002 : RPCRT4!NdrStubCall2+0x70b
    000000cf`17c7f310 00007ffb`bf9648c8 : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : RPCRT4!NdrServerCall2+0x1a
    000000cf`17c7f340 00007ffb`bf93c921 : 00000000`000db8cb 00000000`00000000 000000cf`17c7f530 00000000`00000000 : RPCRT4!DispatchToStubInCNoAvrf+0x18
    000000cf`17c7f390 00007ffb`bf93c1db : 0000025b`db429420 00000000`00000000 00000000`00000000 00007ffb`bf9ffca4 : RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x2d1
    000000cf`17c7f470 00007ffb`bf92a86f : 000000cf`17c7f610 0000025b`dba718b0 00000000`00000000 00000000`00000003 : RPCRT4!RPC_INTERFACE::DispatchToStub+0xcb
    000000cf`17c7f4d0 00007ffb`bf929d1a : 00000000`0021a79b 00000000`00000001 00000000`00000000 0000025b`db995560 : RPCRT4!LRPC_SCALL::DispatchRequest+0x31f
    000000cf`17c7f5b0 00007ffb`bf929301 : 00007ffb`00000002 0000025b`00000000 0000025b`00000000 00000000`00000000 : RPCRT4!LRPC_SCALL::HandleRequest+0x7fa
    000000cf`17c7f6b0 00007ffb`bf928d6e : 00000000`00000000 00000000`00000000 00000000`00000001 0000025b`db426e70 : RPCRT4!LRPC_ADDRESS::HandleRequest+0x341
    000000cf`17c7f750 00007ffb`bf9269a5 : 00000000`00000004 0000025b`db8c7230 0000025b`db426f78 000000cf`17c7fb98 : RPCRT4!LRPC_ADDRESS::ProcessIO+0x89e
    000000cf`17c7f890 00007ffb`c03d346d : 00000000`00000000 00000000`00000000 0000025b`db45f830 00000000`00000000 : RPCRT4!LrpcIoComplete+0xc5
    000000cf`17c7f930 00007ffb`c03d41c2 : 0000025b`db427030 00000000`00000000 0000025b`db402340 00000000`00000000 : ntdll!TppAlpcpExecuteCallback+0x14d
    000000cf`17c7f980 00007ffb`bf867bd4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x462
    000000cf`17c7fd40 00007ffb`c040ced1 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNEL32!BaseThreadInitThunk+0x14
    000000cf`17c7fd70 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
    
    
    SYMBOL_NAME:  ntdll!NtTerminateProcess+14
    
    STACK_COMMAND:  .thread ; .cxr ; kb
    
    BUCKET_ID_FUNC_OFFSET:  14
    
    FAILURE_BUCKET_ID:  0xEF_services.exe_VRF_BUGCHECK_CRITICAL_PROCESS_5d1d3040_ntdll.dll!RtlLoadString_ntdll!NtTerminateProcess
    
    OS_VERSION:  10.0.18362.1
    
    BUILDLAB_STR:  19h1_release
    
    OSPLATFORM_TYPE:  x64
    
    OSNAME:  Windows 10
    
    FAILURE_ID_HASH:  {459e9b70-1822-af80-a5aa-0842ca04975c}
    
    Followup:     MachineOwner
    ---------
    
    0: kd> .load pde
    =========================================================================================
     PDE v11.3 - Copyright 2017 Andrew Richards
    =========================================================================================
    0: kd> !dpx
    Start memory scan  : 0xffffa7843b787938 ($csp)
    End memory scan    : 0xffffa7843b788000 (Kernel Stack Base)
    
                   rsp : 0xffffa7843b787938 : 0xfffff807814ea1e9 : nt!PspCatchCriticalBreak+0x115
                   r15 : 0xffffbe0764730910 :  !da "services.exe"
    0xffffa7843b787938 : 0xfffff807814ea1e9 : nt!PspCatchCriticalBreak+0x115
    0xffffa7843b7879e8 : 0xfffff80780cbb769 : nt!EtwTraceProcessTerminate+0x61
    0xffffa7843b7879f8 : 0xfffff80780cbb8c0 : nt!KeSetProcessSchedulingGroup+0x5c
    0xffffa7843b787a48 : 0xfffff80781259190 : nt!PspTerminateProcess+0xe0
    0xffffa7843b787a88 : 0xfffff80781258f79 : nt!NtTerminateProcess+0xa9
    0xffffa7843b787aa8 : 0xfffff807811e6801 : nt!NtUnmapViewOfSectionEx+0x11
    0xffffa7843b787ad0 : 0x00007ffbc03a0000 : "ntdll!RtlStringCchCopyW <PERF> (ntdll+0x0)"
    0xffffa7843b787ad8 : 0x000000cf17c7d6c0 : 0x00007ffbc03d41c2 : ntdll!TppWorkerThread+0x462
    0xffffa7843b787ae0 : 0x000000cf17c7f980 : 0x0000025bdb427030 : 0x00007ffbc04b8320 : ntdll!TppDirectTaskVFuncs
    0xffffa7843b787af8 : 0xfffff80780df1e18 : nt!KiSystemServiceCopyEnd+0x28
    0xffffa7843b787b00 : 0xffffbe0700000358 :  Trap @ ffffa7843b787b00
    0xffffa7843b787b48 : 0x000000cf17c7c9e8 : 0x00007ffbbda280ed : KERNELBASE!WaitForMultipleObjectsEx+0x1cd
    0xffffa7843b787c58 : 0x000000cf17c7f980 : 0x0000025bdb427030 : 0x00007ffbc04b8320 : ntdll!TppDirectTaskVFuncs
    0xffffa7843b787c68 : 0x00007ffbc043c644 : ntdll!NtTerminateProcess+0x14
    0xffffa7843b787c80 : 0x000000cf17c7cfe8 : 0x00007ffbc04afc9f : ntdll!TppWorkerpInnerExceptionFilter+0x5b
    The reason for this blue screen can be either a damaged disk or a disk that is not working properly (or the controller the disk is running on), or a nonpaged pool leak. This leak is most often caused by third-party drivers. Let's check the use of virtual memory
    Code:
    0: kd> !vm
    Page File: \??\C:\pagefile.sys
      Current:  12582912 Kb  Free Space:  12582904 Kb
      Minimum:  12582912 Kb  Maximum:     19123068 Kb
    Page File: \??\C:\swapfile.sys
      Current:    262144 Kb  Free Space:    262136 Kb
      Minimum:    262144 Kb  Maximum:     15298456 Kb
    No Name for Paging File
      Current:  31624516 Kb  Free Space:  31077400 Kb
      Minimum:  31624516 Kb  Maximum:     31624516 Kb
    
    Physical Memory:          3125362 (   12501448 Kb)
    Available Pages:          2451888 (    9807552 Kb)
    ResAvail Pages:           2863802 (   11455208 Kb)
    Locked IO Pages:                0 (          0 Kb)
    Free System PTEs:      4294970401 (17179881604 Kb)
    
    ******* 491264 kernel stack PTE allocations have failed ******
    
    
    ******* 2164815424 kernel stack growth attempts have failed ******
    
    Modified Pages:             76995 (     307980 Kb)
    Modified PF Pages:          76879 (     307516 Kb)
    Modified No Write Pages:        0 (          0 Kb)
    NonPagedPool Usage:           148 (        592 Kb)
    NonPagedPoolNx Usage:       34284 (     137136 Kb)
    NonPagedPool Max:      4294967296 (17179869184 Kb)
    PagedPool Usage:            56620 (     226480 Kb)
    PagedPool Maximum:     4294967296 (17179869184 Kb)
    Processor Commit:             983 (       3932 Kb)
    Session Commit:             24774 (      99096 Kb)
    Shared Commit:             158158 (     632632 Kb)
    Special Pool:              254045 (    1016180 Kb)
    Kernel Stacks:              12480 (      49920 Kb)
    Pages For MDLs:              3235 (      12940 Kb)
    Pages For AWE:                  0 (          0 Kb)
    NonPagedPool Commit:       133876 (     535504 Kb)
    PagedPool Commit:           56620 (     226480 Kb)
    Driver Commit:              23068 (      92272 Kb)
    Boot Commit:                 2915 (      11660 Kb)
    PFN Array Commit:           37177 (     148708 Kb)
    System PageTables:           1710 (       6840 Kb)
    ProcessLockedFilePages:        12 (         48 Kb)
    Pagefile Hash Pages:            0 (          0 Kb)
    Sum System Commit:         709053 (    2836212 Kb)
    Total Private:             317512 (    1270048 Kb)
    
    ********** Sum of individual system commit + Process commit exceeds overall commit by 437720 Kb ? ********
    Committed pages:           917135 (    3668540 Kb)
    Commit limit:             6271090 (   25084360 Kb)
    
      Pid ImageName                        Commit   SharedCommit        Debt
    
      e60 MsMpEng.exe                   157844 Kb        2080 Kb        0 Kb
      6ac svchost.exe                    82276 Kb        1992 Kb        0 Kb
     19ec explorer.exe                   71928 Kb        5744 Kb        0 Kb
     1bc4 SearchUI.exe                   63932 Kb        5952 Kb        0 Kb
     23c0 NoteBookFanControl.exe         63632 Kb        4176 Kb        0 Kb
     148c svchost.exe                    53284 Kb        3260 Kb        0 Kb
      44c dwm.exe                        50092 Kb       29812 Kb        0 Kb
     1a78 StartMenuExperienceHost.       46964 Kb        4600 Kb        0 Kb
      8d8 SearchIndexer.exe              41428 Kb        2824 Kb        0 Kb
      dd4 NbfcService.exe                36508 Kb        2328 Kb        0 Kb
     1118 NVDisplay.Container.exe        28704 Kb        3412 Kb        0 Kb
       88 Registry                       18572 Kb           0 Kb        0 Kb
     2370 SkypeApp.exe                   17680 Kb        3280 Kb        0 Kb
      4f8 svchost.exe                    16892 Kb        1968 Kb        0 Kb
      d50 svchost.exe                    16864 Kb        2268 Kb        0 Kb
     2054 YourPhone.exe                  15956 Kb        3280 Kb        0 Kb
      590 Taskmgr.exe                    15456 Kb        5672 Kb        0 Kb
      c64 svchost.exe                    12252 Kb        1972 Kb        0 Kb
     1ef4 Wacom_Tablet.exe               11692 Kb        3544 Kb        0 Kb
      b2c audiodg.exe                    11492 Kb        1976 Kb        0 Kb
      3f4 svchost.exe                    11036 Kb        2368 Kb        0 Kb
     20d4 svchost.exe                     9632 Kb        2280 Kb        0 Kb
     11d8 svchost.exe                     9460 Kb        1988 Kb        0 Kb
      d58 svchost.exe                     9136 Kb        1980 Kb        0 Kb
      8f4 svchost.exe                     8668 Kb        1992 Kb        0 Kb
      bf4 wmpnetwk.exe                    8624 Kb        2256 Kb        0 Kb
     1918 Wacom_Tablet.exe                8096 Kb        3232 Kb        0 Kb
     1734 svchost.exe                     7624 Kb        1972 Kb        0 Kb
     1b04 svchost.exe                     7492 Kb        2568 Kb        0 Kb
     1f00 RuntimeBroker.exe               7428 Kb        2600 Kb        0 Kb
      260 svchost.exe                     6932 Kb         524 Kb        0 Kb
     10ec svchost.exe                     6808 Kb        2568 Kb        0 Kb
      5fc svchost.exe                     6808 Kb        1992 Kb        0 Kb
      5a0 svchost.exe                     6744 Kb        1988 Kb        0 Kb
      ef8 dasHost.exe                     6604 Kb        1980 Kb        0 Kb
      bec svchost.exe                     6316 Kb        2016 Kb        0 Kb
     1ae4 sihost.exe                      6112 Kb        2564 Kb        0 Kb
      c44 spoolsv.exe                     6076 Kb        1992 Kb        0 Kb
      36c lsass.exe                       5856 Kb         460 Kb        0 Kb
     1f84 Wacom_TouchUser.exe             5832 Kb        2500 Kb        0 Kb
      7a8 svchost.exe                     5760 Kb        1984 Kb        0 Kb
      938 taskhostw.exe                   5376 Kb        3472 Kb        0 Kb
      358 services.exe                    5144 Kb         388 Kb        0 Kb
     13c4 NisSrv.exe                      4976 Kb        1968 Kb        0 Kb
     172c svchost.exe                     4928 Kb        2260 Kb        0 Kb
     250c usocoreworker.exe               4808 Kb        2276 Kb        0 Kb
      e3c svchost.exe                     4772 Kb        2268 Kb        0 Kb
      1a4 dllhost.exe                     4732 Kb        2412 Kb        0 Kb
      d80 svchost.exe                     4700 Kb        1988 Kb        0 Kb
      5ec NVDisplay.Container.exe         4616 Kb        2008 Kb        0 Kb
      518 igfxEM.exe                      4492 Kb        3240 Kb        0 Kb
     2274 ApplicationFrameHost.exe        4376 Kb        3560 Kb        0 Kb
     22ec RAVCpl64.exe                    4276 Kb        3288 Kb        0 Kb
      de4 NvTelemetryContainer.exe        4168 Kb        1984 Kb        0 Kb
      55c svchost.exe                     4120 Kb        1968 Kb        0 Kb
     1550 svchost.exe                     4108 Kb        1984 Kb        0 Kb
     1588 SgrmBroker.exe                  4052 Kb         368 Kb        0 Kb
     1778 svchost.exe                     3916 Kb        1972 Kb        0 Kb
      16c fontdrvhost.exe                 3884 Kb         384 Kb        0 Kb
      e20 svchost.exe                     3768 Kb        2004 Kb        0 Kb
      a24 svchost.exe                     3744 Kb        1976 Kb        0 Kb
      8dc svchost.exe                     3684 Kb        1972 Kb        0 Kb
     157c svchost.exe                     3636 Kb        1972 Kb        0 Kb
     1e9c SecurityHealthService.ex        3600 Kb        2280 Kb        0 Kb
      d48 ctfmon.exe                      3576 Kb        3220 Kb        0 Kb
      aa8 svchost.exe                     3508 Kb        1972 Kb        0 Kb
      be4 svchost.exe                     3476 Kb        2268 Kb        0 Kb
      d8c svchost.exe                     3288 Kb        2564 Kb        0 Kb
     25b0 igfxTray.exe                    3264 Kb        2300 Kb        0 Kb
      bac svchost.exe                     3220 Kb        1992 Kb        0 Kb
      7bc svchost.exe                     3164 Kb        1968 Kb        0 Kb
      ea8 svchost.exe                     3140 Kb        2272 Kb        0 Kb
      e34 svchost.exe                     3108 Kb        1976 Kb        0 Kb
      bcc svchost.exe                     3080 Kb        1968 Kb        0 Kb
      924 svchost.exe                     3020 Kb        2268 Kb        0 Kb
      d34 svchost.exe                     2972 Kb        2100 Kb        0 Kb
     27e4 svchost.exe                     2968 Kb        2564 Kb        0 Kb
     25ac svchost.exe                     2940 Kb        2276 Kb        0 Kb
      a10 svchost.exe                     2936 Kb        1972 Kb        0 Kb
     23d8 wermgr.exe                      2928 Kb        2284 Kb        0 Kb
     12c0 WmiPrvSE.exe                    2864 Kb        1992 Kb        0 Kb
      d6c svchost.exe                     2864 Kb        1984 Kb        0 Kb
     1ea0 svchost.exe                     2844 Kb        1984 Kb        0 Kb
      584 svchost.exe                     2844 Kb        1996 Kb        0 Kb
      688 svchost.exe                     2804 Kb        2004 Kb        0 Kb
      47c svchost.exe                     2784 Kb        1992 Kb        0 Kb
      32c winlogon.exe                    2732 Kb        5304 Kb        0 Kb
     18f8 svchost.exe                     2700 Kb        2268 Kb        0 Kb
     1288 svchost.exe                     2660 Kb        1972 Kb        0 Kb
      3a4 svchost.exe                     2660 Kb        1988 Kb        0 Kb
      d2c AdminService.exe                2636 Kb        2008 Kb        0 Kb
     1c10 RuntimeBroker.exe               2544 Kb        2580 Kb        0 Kb
     1cb4 RuntimeBroker.exe               2536 Kb        2576 Kb        0 Kb
      5c4 svchost.exe                     2480 Kb        1968 Kb        0 Kb
      2d0 csrss.exe                       2472 Kb       12712 Kb        0 Kb
     1798 igfxHK.exe                      2440 Kb        3232 Kb        0 Kb
      e0c svchost.exe                     2316 Kb        1988 Kb        0 Kb
      524 svchost.exe                     2312 Kb        1988 Kb        0 Kb
      5c0 igfxCUIService.exe              2256 Kb        1988 Kb        0 Kb
     1bb4 WacomHost.exe                   2252 Kb        2296 Kb        0 Kb
     2524 XBoxStat.exe                    2244 Kb        3200 Kb        0 Kb
      690 svchost.exe                     2240 Kb        1972 Kb        0 Kb
     1e90 WacomHost.exe                   2204 Kb        2296 Kb        0 Kb
     19ac svchost.exe                     2204 Kb        1972 Kb        0 Kb
      ee8 svchost.exe                     2184 Kb        1968 Kb        0 Kb
      5b0 svchost.exe                     2124 Kb        1988 Kb        0 Kb
      c7c svchost.exe                     2092 Kb        1972 Kb        0 Kb
     1a28 svchost.exe                     2072 Kb        1984 Kb        0 Kb
      684 svchost.exe                     2060 Kb        1976 Kb        0 Kb
      798 svchost.exe                     2052 Kb        1992 Kb        0 Kb
     2034 SkypeBackgroundHost.exe         2004 Kb        2624 Kb        0 Kb
     1af0 Wacom_TabletUser.exe            1996 Kb        2288 Kb        0 Kb
      850 svchost.exe                     1944 Kb        1988 Kb        0 Kb
     1628 svchost.exe                     1912 Kb         392 Kb        0 Kb
      858 svchost.exe                     1900 Kb        2548 Kb        0 Kb
     26d4 svchost.exe                     1888 Kb         388 Kb        0 Kb
      a9c svchost.exe                     1868 Kb        1968 Kb        0 Kb
     1530 GoogleCrashHandler.exe          1864 Kb        1996 Kb        0 Kb
     194c svchost.exe                     1840 Kb        1988 Kb        0 Kb
      f00 svchost.exe                     1832 Kb        1976 Kb        0 Kb
      d3c svchost.exe                     1812 Kb        1988 Kb        0 Kb
     238c SecurityHealthSystray.ex        1800 Kb        2284 Kb        0 Kb
     1a90 svchost.exe                     1792 Kb        1972 Kb        0 Kb
      25c csrss.exe                       1792 Kb        8916 Kb        0 Kb
     1b84 svchost.exe                     1780 Kb        2280 Kb        0 Kb
      ea0 GoogleCrashHandler64.exe        1772 Kb        1996 Kb        0 Kb
      e44 WTabletServicePro.exe           1720 Kb        1988 Kb        0 Kb
       6c fontdrvhost.exe                 1720 Kb         384 Kb        0 Kb
      2c8 wininit.exe                     1684 Kb        1948 Kb        0 Kb
      e14 svchost.exe                     1664 Kb        1968 Kb        0 Kb
     22cc svchost.exe                     1636 Kb        1984 Kb        0 Kb
     1518 svchost.exe                     1632 Kb        1972 Kb        0 Kb
      7b0 svchost.exe                     1632 Kb        1972 Kb        0 Kb
     2688 RuntimeBroker.exe               1520 Kb        2292 Kb        0 Kb
      674 svchost.exe                     1468 Kb        1968 Kb        0 Kb
      48c svchost.exe                     1444 Kb        1968 Kb        0 Kb
      cc4 svchost.exe                     1412 Kb        1984 Kb        0 Kb
      6cc svchost.exe                     1364 Kb        4676 Kb        0 Kb
     25f4 TranslucentTB.exe               1344 Kb        3204 Kb        0 Kb
      e54 svchost.exe                     1336 Kb        1984 Kb        0 Kb
      198 smss.exe                        1212 Kb         288 Kb        0 Kb
     1424 dasHost.exe                     1000 Kb         392 Kb        0 Kb
      3e0 svchost.exe                      964 Kb         388 Kb        0 Kb
      748 MemCompression                   264 Kb           0 Kb        0 Kb
        4 System                           196 Kb       18728 Kb        0 Kb
     1f30 svchost.exe                       80 Kb           0 Kb        0 Kb
     1c6c svchost.exe                       80 Kb           0 Kb        0 Kb
     17bc svchost.exe                       80 Kb           0 Kb        0 Kb
     1520 svchost.exe                       80 Kb           0 Kb        0 Kb
      e5c userinit.exe                      80 Kb           0 Kb        0 Kb
      8e8 WerFaultSecure.exe                80 Kb           0 Kb        0 Kb
     1b20 WacomHost.exe                     64 Kb           0 Kb        0 Kb
     1120 WacomHost.exe                     64 Kb           0 Kb        0 Kb
    Here we see the use of both paged and nonpaged memory, although we are interested in the latter. Let's check what consumes nonpaged memory so much
    Code:
    0: kd> !poolused 2
    ....
     Sorting by NonPaged Pool Consumed
    
                   NonPaged                  Paged
     Tag     Allocs         Used     Allocs         Used
    
     ConT       619     16334848          0            0	UNKNOWN pooltag 'ConT', please update pooltag.txt
     Vepp      2121      8687616          0            0	Verifier Pool Tracking information , Binary: nt!Vf
     VfPT         1      8388608          0            0	Verifier Allocate/Free Pool stack traces , Binary: nt!Vf
     EtwB       140      7487744         14       409600	Etw Buffer , Binary: nt!etw
     File     14466      6159712          0            0	File objects 
     Thre      2018      4907776          0            0	Thread objects , Binary: nt!ps
     AthM         9      4838796          0            0	UNKNOWN pooltag 'AthM', please update pooltag.txt
     Ntfx     15259      4495296          0            0	Unrecognized NTFS tag (update base\published\pooltag.w) , Binary: ntfs.sys
     MmPb         3      4132864          0            0	Paging file bitmaps , Binary: nt!mm
     VNod     18427      4127648          0            0	Deadlock Verifier nodes , Binary: nt!Vf
     MmCa     10374      3624624          0            0	Mm control areas for mapped files , Binary: nt!mm
     NVRM      3947      3159906         14      1057216	UNKNOWN pooltag 'NVRM', please update pooltag.txt
     VRes     10887      2961264          0            0	Deadlock Verifier resources , Binary: nt!Vf
     AthH      2672      2818163          0            0	UNKNOWN pooltag 'AthH', please update pooltag.txt
     EtwR     12712      2799392          0            0	Etw KM RegEntry , Binary: nt!etw
     smNp       650      2662400          0            0	ReadyBoost store node pool allocations , Binary: nt!store or rdyboost.sys
     Obtd         1      2625536          0            0	UNKNOWN pooltag 'Obtd', please update pooltag.txt
     FMsl     14224      2389632          0            0	STREAM_LIST_CTRL structure , Binary: fltmgr.sys
     VfIT       521      2195488          0            0	Verifier Import Address Table information , Binary: nt!Vf
     Wl2g        13      2183168          0            0	WFP L2 generic block , Binary: wfplwfs.sys
     AthE         2      2101555          0            0	UNKNOWN pooltag 'AthE', please update pooltag.txt
     VfAT     29924      1961264          0            0	Verifier AVL trees , Binary: nt!Vf
     Vad      11797      1887520          0            0	Mm virtual address descriptors , Binary: nt!mm
     Pool         5      1847296          0            0	Pool tables, etc. 
     smCB       448      1835008          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     Even     12529      1611840          0            0	Event objects 
     AmlH         3      1585152          0            0	ACPI AMLI Pooltags 
     MmCi      2329      1491104          0            0	Mm control areas for images , Binary: nt!mm
     ALPC      2479      1476240          0            0	ALPC port objects , Binary: nt!alpc
     smBt       292      1196032          0            0	ReadyBoost various B+Tree allocations , Binary: nt!store or rdyboost.sys
     FMvj     14247      1139760         14          416	FLT_VERIFIER_OBJECT structure , Binary: fltmgr.sys
     KiWP         4      1064960          0            0	UNKNOWN pooltag 'KiWP', please update pooltag.txt
     @MP        154       957224          6       274616	(Intel video driver) Miniport related memory 
     Irps       341       916608          0            0	I/O verifier per-IRP session tracking data , Binary: nt!vf
     Ath2      1543       914272          0            0	UNKNOWN pooltag 'Ath2', please update pooltag.txt
     HTab       448       864592          0            0	Hash Table pool 
     CcSc      1498       862848          0            0	Cache Manager Shared Cache Map , Binary: nt!cc
     KETR      2058       856874          0            0	UNKNOWN pooltag 'KETR', please update pooltag.txt
     EtwG      1851       770016          0            0	Etw Guid , Binary: nt!etw
     Wait      3208       769920          0            0	WaitCompletion Packets , Binary: nt!io
     Devi       411       732544          0            0	Device objects 
     NvLH       500       693302         78       101338	nVidia video driver , Binary: <nvlddmkm.sys>
     smSt        44       649088          0            0	ReadyBoost various store allocations , Binary: nt!store or rdyboost.sys
     Via1        66       627968          0            0	GPU scheduler node state , Binary: dxgmms2.sys
     FOCX      2390       611584          0            0	File System Run Time File Object Context structure , Binary: nt!fsrtl
     MmAc       149       610304          0            0	Mm access log buffers , Binary: nt!mm
     CDmp        15       599520          0            0	Crashdump driver , Binary: crashdmp.sys
     DxgK       809       571912       2376      1392842	Vista display driver support , Binary: dxgkrnl.sys
     Via9        18       564260          0            0	GPU scheduler present info , Binary: dxgmms2.sys
     smRg         6       557056          0            0	ReadyBoost in-memory store region array , Binary: nt!store or rdyboost.sys
     FMsc       752       481280          0            0	SECTION_CONTEXT structure , Binary: fltmgr.sys
     FMfc      2385       457920          0            0	FLTMGR_FILE_OBJECT_CONTEXT structure , Binary: fltmgr.sys
     Proc       153       450304          0            0	Process objects , Binary: nt!ps
     WPLg       131       446520          0            0	UNKNOWN pooltag 'WPLg', please update pooltag.txt
     VadS      5532       442560          0            0	Mm virtual address descriptors (short) , Binary: nt!mm
     Via2       334       408548        132          528	GPU scheduler process state , Binary: dxgmms2.sys
     Job        178       387328          0            0	UNKNOWN pooltag 'Job ', please update pooltag.txt
     Irp+       624       366888          0            0	I/O verifier allocated IRP packets , Binary: nt!vf
     NSIk       928       355336          0            0	NSI RPC Tansactions , Binary: nsi.dll
     SeTl      2769       354432          0            0	Security Token Lock , Binary: nt!se
     MiIo       286       329472          0            0	UNKNOWN pooltag 'MiIo', please update pooltag.txt
     TpWo       490       329280          0            0	Threadpool worker factory objects , Binary: nt!ex
     MmSe      3271       314016          0            0	Mm secured VAD allocation , Binary: nt!mm
     Sema      2272       301792          0            0	Semaphore objects 
     XHCW       615       301083         18         3128	UNKNOWN pooltag 'XHCW', please update pooltag.txt
     Icp       3096       297024          0            0	I/O completion packets queue on a completion ports 
     NvLL         7       294960          0            0	UNKNOWN pooltag 'NvLL', please update pooltag.txt
     HalB        14       291024          0            0	UNKNOWN pooltag 'HalB', please update pooltag.txt
     Io        3028       288236        367        13300	general IO allocations , Binary: nt!io
     VMdl      3363       287512          0            0	MDL allocated by I/O verifier version of IoAllocateMdl , Binary: nt!Vf
     IoCo      1091       276480          0            0	UNKNOWN pooltag 'IoCo', please update pooltag.txt
     CcVa         3       272384          0            0	Cache Manager Initial array of Vacbs , Binary: nt!cc
     VHAL        13       271448          0            0	UNKNOWN pooltag 'VHAL', please update pooltag.txt
     IRTi       990       269280          0            0	UNKNOWN pooltag 'IRTi', please update pooltag.txt
     AthW      2291       264211          0            0	UNKNOWN pooltag 'AthW', please update pooltag.txt
     IPRT       558       256504          0            0	UNKNOWN pooltag 'IPRT', please update pooltag.txt
     Vi10       528       250272          1           24	Video memory manager process heap , Binary: dxgmms2.sys
     Via5       222       245088          0            0	GPU scheduler queue packet , Binary: dxgmms2.sys
     NtFs         8       232992      22063      1900862	StrucSup.c , Binary: ntfs.sys
     NvLM         4       226080          0            0	UNKNOWN pooltag 'NvLM', please update pooltag.txt
     Lfsr         3       221184          0            0	UNKNOWN pooltag 'Lfsr', please update pooltag.txt
     @SB        435       217379          0            0	(Intel video driver) Soft BIOS 
     APpt      2052       213616       4471       338997	UNKNOWN pooltag 'APpt', please update pooltag.txt
     Tcpt        33       204896          0            0	TCP Timers , Binary: tcpip.sys
     ReTa      2940       192512          0            0	Resource Extended Table 
     @GM6       122       183488          0            0	UNKNOWN pooltag '@GM6', please update pooltag.txt
     Irpt       641       174352          0            0	I/O verifier per-IRP tracking data , Binary: nt!vf
     InPa        26       172544          0            0	Inet Port Assignments , Binary: tcpip.sys
     PFXM       151       170752         24         3264	Runtime Power Management Framework , Binary: nt!PoFx
     UH3w       342       154256         25         4852	UNKNOWN pooltag 'UH3w', please update pooltag.txt
     Ntfr      1466       152488          0            0	ERESOURCE , Binary: ntfs.sys
     WfpH      1936       149408          0            0	WFP hash , Binary: netio.sys
     Muta       846       145024          0            0	Mutant objects 
     FxLg        33       143888          0            0	KMDF IFR log tag , Binary: wdf01000.sys
     AcpD       150       142432          0            0	ACPI device data , Binary: acpi.sys
     IPrq        21       140384          0            0	IP Request Control data , Binary: tcpip.sys
     II2C       215       138864          3          444	IP in IP tunneling 
     HalV       118       136880          0            0	Driver Verifier DMA checking , Binary: ntoskrnl.exe
     MiSc       396       133056          0            0	UNKNOWN pooltag 'MiSc', please update pooltag.txt
     TcRN        32       131584          0            0	TCP Random Number Generator Pool , Binary: tcpip.sys
     @GMM        43       129816          0            0	(Intel video driver) Memory manager 
     Driv       224       127616          0            0	Driver objects 
     Vi15         3       124656          0            0	Video memory manager global state , Binary: dxgmms2.sys
     NvLd         6       119136          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     RxTu         3       118808          0            0	RDBSS allocations , Binary: rdbss.sys
     WfpA       482       117632          0            0	Windows Filtering Platform Tags , Binary: netio.sys
     FMic       115       115736          0            0	IRP_CTRL structure , Binary: fltmgr.sys
     MmSd       709       113440          0            0	extended subsections used to map data files , Binary: nt!mm
     AlIn       600       105472          0            0	ALPC Internal allocation , Binary: nt!alpc
     TdxC       164       104960          0            0	TDX Connections , Binary: tdx.sys
     Cngb      1003       104277          0            0	CNG kmode crypto pool tag , Binary: ksecdd.sys
     ViMm         1       102400          0            0	Video memory manager , Binary: dxgkrnl.sys
     inte       277       101752         18         2484	UNKNOWN pooltag 'inte', please update pooltag.txt
     Dnod       127       101600          0            0	Device node structure 
     MiP2       154        98560          0            0	UNKNOWN pooltag 'MiP2', please update pooltag.txt
     NvLA         2        98392          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     NtTe        19        98016         27        67224	NTFS Telemetry , Binary: ntfs.sys
     CcVl        52        97920          0            0	Cache Manager Vacb Level structures (large streams) , Binary: nt!cc
     ClfB        11        95216          0            0	CLFS Log base file lookaside list , Binary: clfs.sys
     MiVw       736        94208          0            0	UNKNOWN pooltag 'MiVw', please update pooltag.txt
     MmLd       204        91744          0            0	Mm load module database , Binary: nt!mm
     NDif        98        90406          0            0	NDIS_TAG_IF , Binary: ndis.sys
     AleE       124        88728          0            0	ALE endpoint context , Binary: tcpip.sys
     WfpC         2        86096          0            0	WFP callouts , Binary: netio.sys
     Ahci        13        85434          0            0	UNKNOWN pooltag 'Ahci', please update pooltag.txt
     FSro      1064        85120       1064       187264	File System Run Time , Binary: nt!fsrtl
     [email protected]        18        84504          1           16	UNKNOWN pooltag '[email protected]', please update pooltag.txt
     Time       187        80816          0            0	Timer objects , Binary: nt!ke
     WdiG       160        78808          0            0	UNKNOWN pooltag 'WdiG', please update pooltag.txt
     AleP       164        75252          0            0	ALE process image path , Binary: tcpip.sys
     AleS        29        74926          0            0	ALE token info , Binary: tcpip.sys
     Vi03       564        71748          0            0	Video memory manager alloc , Binary: dxgmms2.sys
     Vi32         9        71056          0            0	Video memory manager DMA buffer private data , Binary: dxgmms2.sys
     ScCB         4        70578          0            0	ClassPnP misc allocations , Binary: classpnp.sys
     Dlck         3        65920          0            0	deadlock verifier (part of driver verifier) structures 
     Vi35       158        65864         28          672	Video memory manager MDL , Binary: dxgmms2.sys
     VRsP         4        65856          0            0	UNKNOWN pooltag 'VRsP', please update pooltag.txt
     smCt         2        65424          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     Irp         31        62208          0            0	Io, IRP packets 
     VfVD       204        62016          0            0	UNKNOWN pooltag 'VfVD', please update pooltag.txt
     ClfC        11        61600          0            0	CLFS Log physical FCB lookaside list , Binary: clfs.sys
     Scbf        48        61440          0            0	Mass storage driver tags 
     AzBD        42        60064          0            0	UNKNOWN pooltag 'AzBD', please update pooltag.txt
     LSbf       167        60038          3          436	SMB1 buffer descriptor or srvnet allocation , Binary: srvnet.sys
     HDAu       171        59990         27         7570	UNKNOWN pooltag 'HDAu', please update pooltag.txt
     MmLk       370        59200          0            0	UNKNOWN pooltag 'MmLk', please update pooltag.txt
     usbp        56        58974          1           34	UNKNOWN pooltag 'usbp', please update pooltag.txt
     AzAd        88        58944          0            0	HD Audio Class Driver (AzPcAudDev) , Binary: HDAudio.sys
     Mmdl        31        58176          0            0	Mm Mdls for flushes , Binary: nt!mm
     MiBc         2        57344          0            0	UNKNOWN pooltag 'MiBc', please update pooltag.txt
     Mm          11        55936          4          208	general Mm Allocations , Binary: nt!mm
     WfpF       858        54912          0            0	WFP filters , Binary: netio.sys
     UlOT         8        53312          0            0	Opaque ID Table , Binary: http.sys
     Vfwi       571        50248          0            0	IO_WORKITEM allocated by I/O verifier version of IoAllocateWorkItem , Binary: nt!Vf
     PPMf         1        50048          0            0	UNKNOWN pooltag 'PPMf', please update pooltag.txt
     MEIx       132        49960          4          604	UNKNOWN pooltag 'MEIx', please update pooltag.txt
     Pctw         4        49408          0            0	PACER Timer Wheels , Binary: pacer.sys
     UlTW         4        49408          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     VoSb         3        49200          0            0	Buffer allocations , Binary: volsnap.sys
     NDmo        44        44688          0            0	NDIS_TAG_M_OPEN_BLK , Binary: ndis.sys
     ObWm        65        43952          0            0	Object Manager wait blocks , Binary: nt!ob
     AfdE       107        43152          0            0	Afd endpoint structure , Binary: afd.sys
     NDrs        13        41704          0            0	NDIS_TAG_RSS , Binary: ndis.sys
     Iptt        79        41376          0            0	IP Timer Tables , Binary: tcpip.sys
     vwif       113        40978         10         1894	UNKNOWN pooltag 'vwif', please update pooltag.txt
     Gsem       300        40672          0            0	Gdi Semaphores 
     @GM2        27        40608          0            0	UNKNOWN pooltag '@GM2', please update pooltag.txt
     CcVp       134        40368          0            0	Cache Manager Array of Vacb pointers for a cached stream , Binary: nt!cc
     LShs        11        40240          0            0	SMB2 lease hash table , Binary: srv2.sys
     Mmww       175        38992          0            0	Write watch bitmap VAD info , Binary: nt!mm
     NvLb        33        38704          0            0	UNKNOWN pooltag 'NvLb', please update pooltag.txt
     USBV       123        38004          0            0	UNKNOWN pooltag 'USBV', please update pooltag.txt
     NDam        44        37756          0            0	NdisAllocateMemory , Binary: ndis.sys
     NvLl         2        37640          1        33312	UNKNOWN pooltag 'NvLl', please update pooltag.txt
     Hal        117        37424          2        24720	Hardware Abstraction Layer , Binary: hal.dll
     EtwL        25        37312          0            0	Etw LoggerContext , Binary: nt!etw
     IPpa         9        37008          0            0	IP Path information , Binary: tcpip.sys
     MmSW       256        36864          0            0	Store write support , Binary: nt!mm
     NvDI         1        36624          0            0	UNKNOWN pooltag 'NvDI', please update pooltag.txt
     CM44       286        36608        660        84480	Internal Configuration manager allocations , Binary: nt!cm
     Via4        37        36408          0            0	GPU scheduler context state , Binary: dxgmms2.sys
     NvLa        85        36368          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     Ath1         6        36208          0            0	UNKNOWN pooltag 'Ath1', please update pooltag.txt
     TcpE        43        35836          0            0	TCP Endpoints , Binary: tcpip.sys
     NvLC        13        35568          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     moni        93        34832         10         1336	UNKNOWN pooltag 'moni', please update pooltag.txt
     Vib1       128        34816          0            0	GPU scheduler flip queue entry , Binary: dxgmms2.sys
     HidI        88        34310          2          346	UNKNOWN pooltag 'HidI', please update pooltag.txt
     RawI        21        34176          0            0	UNKNOWN pooltag 'RawI', please update pooltag.txt
     PciB        70        34076         12         1073	PnP pci bus enumerator , Binary: pci.sys
     smBR       147        33888          0            0	ReadyBoost volume ranges array , Binary: rdyboost.sys
     XdvN        85        33632          0            0	UNKNOWN pooltag 'XdvN', please update pooltag.txt
     cdro        79        33065          6          998	UNKNOWN pooltag 'cdro', please update pooltag.txt
     UlXR         2        33056          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     Ipur         8        32896          0            0	IP Unicast Routes , Binary: tcpip.sys
     FlpS         8        32896          0            0	Framing Layer Serialized Requests , Binary: tcpip.sys
     FlpM         8        32896          0            0	Framing Layer Multicast Groups , Binary: tcpip.sys
     IPss         8        32896          0            0	IP Session State , Binary: tcpip.sys
     Tdx          4        32880          0            0	TDX Generic Buffers (Address, Entity information, Interface change allocations) , Binary: tdx.sys
     VmBu         1        32784          0            0	I/O buffers , Binary: volmgrx.sys
     UHUB        41        32212          1          110	Universal Serial Bus Hub 
     VThr       396        31680          0            0	UNKNOWN pooltag 'VThr', please update pooltag.txt
     ObCi       395        31600          0            0	captured information for ObCreateObject , Binary: nt!ob
     VfCa       490        31360          0            0	UNKNOWN pooltag 'VfCa', please update pooltag.txt
     TpWc       490        31360          0            0	Threadpool minipacket context , Binary: nt!ex
     AzMD         9        31104          0            0	UNKNOWN pooltag 'AzMD', please update pooltag.txt
     MmWS         8        30896          0            0	Working set swap support , Binary: nt!mm
     DCcs       297        30888          0            0	DCOMPOSITIONTAG_CRITICALSECTION , Binary: win32kbase!DirectComposition::C
     VBLF        32        30624          0            0	UNKNOWN pooltag 'VBLF', please update pooltag.txt
     fbDm       211        30608          0            0	UNKNOWN pooltag 'fbDm', please update pooltag.txt
     NbL4       100        29600          0            0	NetBT lower connection , Binary: netbt.sys
     Comp       110        29184          1          202	UNKNOWN pooltag 'Comp', please update pooltag.txt
     XSav        32        29184          0            0	UNKNOWN pooltag 'XSav', please update pooltag.txt
     Ustn       521        29176          0            0	USERTAG_THREADINFONP , Binary: win32k!AllocateW32Thread
     HpSe         2        29152          0            0	UNKNOWN pooltag 'HpSe', please update pooltag.txt
     Mem          7        28672          0            0	NT Power manager, POP_MEM_TAG , Binary: nt!po
     @PC         28        28576          0            0	UNKNOWN pooltag '@PC ', please update pooltag.txt
     Mmdi        80        28512          0            0	MDLs for physical memory allocations , Binary: nt!mm
     LeGe        17        28278          0            0	Legacy Registry Mapping Module Buffers , Binary: tcpip.sys
     SynR        71        27946          3          454	UNKNOWN pooltag 'SynR', please update pooltag.txt
     NvLF         5        27904          3           12	UNKNOWN pooltag 'NvLF', please update pooltag.txt
     CcMb       131        27248          0            0	Cache Manager Mbcb , Binary: nt!cc
     NDw1        10        27076          0            0	NDIS_TAG_WMI_GUID_TO_OID , Binary: ndis.sys
     Mdl        130        27040          0            0	Io, Mdls 
     Wdog        14        27040          3         1680	Watchdog object/context allocation , Binary: watchdog.sys
     AmlS       841        26912          0            0	ACPI AMLI Pooltags 
     TPM.        71        26682          4          592	UNKNOWN pooltag ' TPM', please update pooltag.txt
     ExTm       149        26224          0            0	UNKNOWN pooltag 'ExTm', please update pooltag.txt
     PepT        35        26144          0            0	Default Power Engine Plugin , Binary: nt!PopPep
     NDfb        29        24824          0            0	NDIS_TAG_LWFILTER_BLOCK , Binary: ndis.sys
     CAD.        65        24792          5          866	UNKNOWN pooltag 'CAD.', please update pooltag.txt
     I4nb         6        24672          0            0	IPv4 Neighbors , Binary: tcpip.sys
     I6nb         6        24672          0            0	IPv6 Neighbors , Binary: tcpip.sys
     Flng       107        24656          0            0	Framing Layer Generic Buffers (Tunnel/Port change notifications, ACLs) , Binary: tcpip.sys
     PfEL         1        24576          0            0	Pf Event logging buffers , Binary: nt!pf
     NDfa        74        24576          0            0	NDIS_TAG_FILTER_ADDR , Binary: ndis.sys
     Etwc       128        24320          0            0	Etw rundown reference counters , Binary: nt!etw
     AzWd        69        24088          0            0	HD Audio Class Driver (AzWidget) , Binary: HDAudio.sys
     Via3        17        23936          0            0	GPU scheduler device state , Binary: dxgmms2.sys
     PsIn       152        23840          0            0	UNKNOWN pooltag 'PsIn', please update pooltag.txt
     PdcA        25        23640         57         7468	PDC_ACTIVATION_TAG, ACTIVATOR_CLIENT_TAG , Binary: pdc.sys
     ObjT        67        23584          0            0	object type objects , Binary: nt!ob
     Via8       161        23184          0            0	GPU scheduler GPU sync object , Binary: dxgmms2.sys
     CcBm        21        22848          0            0	Cache Manager Bitmap , Binary: nt!cc
     UlPP       210        22320          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     niJr         1        22288          0            0	UNKNOWN pooltag 'niJr', please update pooltag.txt
     wsij         3        21936          0            0	UNKNOWN pooltag 'wsij', please update pooltag.txt
     SMBi        27        21864          1          114	UNKNOWN pooltag 'SMBi', please update pooltag.txt
     ResH        59        21676         11          963	UNKNOWN pooltag 'ResH', please update pooltag.txt
     Nbtl       164        21648          0            0	NetBT allocations 
     Wmip       269        21520        336        78224	Wmi General purpose allocation 
     Whea         8        21168          0            0	UNKNOWN pooltag 'Whea', please update pooltag.txt
     FMis        16        21032          0            0	FLT_INSTANCE structure , Binary: fltmgr.sys
     InPP         2        20960          0            0	Inet Port pool , Binary: tcpip.sys
     VfET       436        20928          0            0	UNKNOWN pooltag 'VfET', please update pooltag.txt
     PnpX        80        20480       1226        78464	PNPMGR DevQuery , Binary: nt!pnp
     ND          46        20272          1          114	general NDIS allocations , Binary: ndis.sys
     FxDr        69        19580          1          120	KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable. , Binary: wdf01000.sys
     wsii         3        19296          0            0	UNKNOWN pooltag 'wsii', please update pooltag.txt
     NbL2        64        18944          0            0	NetBT lower connection , Binary: netbt.sys
     Ipng        10        18872          0            0	IP Generic buffers (Address, Interface, Packetize, Route allocations) , Binary: tcpip.sys
     Nuio        24        18538          0            0	UNKNOWN pooltag 'Nuio', please update pooltag.txt
     ScPm         1        18496          0            0	address mapping lists 
     PPMi         4        18496          0            0	Kernel Processor Power Management Idle States. , Binary: nt!po
     Vi24         3        18480          0            0	Video memory manager DMA buffer allocation list , Binary: dxgmms2.sys
     Fsb         50        18400          0            0	Fixed-Size Block pool , Binary: netio.sys
     VfSD       209        18240          0            0	UNKNOWN pooltag 'VfSD', please update pooltag.txt
     Via0        17        18120          0            0	GPU scheduler adapter state , Binary: dxgmms2.sys
     Alep       150        17904          0            0	ALE process info , Binary: tcpip.sys
     Vsvt         5        17808          0            0	UNKNOWN pooltag 'Vsvt', please update pooltag.txt
     umbu        44        17712          4          588	UNKNOWN pooltag 'umbu', please update pooltag.txt
     Fwpq         2        17432          0            0	UNKNOWN pooltag 'Fwpq', please update pooltag.txt
     NbtD        64        17408          0            0	NetBT connection , Binary: netbt.sys
     vdrv        43        17344          3          482	UNKNOWN pooltag 'vdrv', please update pooltag.txt
     Ipcr       120        17280          0            0	IP Cache-aware Reference Counters , Binary: tcpip.sys
     MmIn        20        17152          0            0	Mm inpaged io structures , Binary: nt!mm
     KiBc         1        17024          0            0	UNKNOWN pooltag 'KiBc', please update pooltag.txt
     Vi42       424        16960          0            0	Video memory manager global alloc nonpaged , Binary: dxgmms2.sys
     TDIk         4        16888          0            0	TDI resource 
     Prcr        33        16808          4         4096	Processr driver allocations , Binary: processr.sys
     msis        43        16769          3          466	UNKNOWN pooltag 'msis', please update pooltag.txt
     HSSP        57        16640        112         9562	UNKNOWN pooltag 'HSSP', please update pooltag.txt
     InF1         4        16448          0            0	Inet Generic Fixed Size Block pool 1 , Binary: tcpip.sys
     I6ua         4        16448          0            0	IPv6 Local Unicast Addresses , Binary: tcpip.sys
     I4ba         4        16448          0            0	IPv4 Local Broadcast Addresses , Binary: tcpip.sys
     I4ai         4        16448          0            0	IPv4 Local Address Identifiers , Binary: tcpip.sys
     I6ai         4        16448          0            0	IPv6 Local Address Identifiers , Binary: tcpip.sys
     RaMI         4        16448          0            0	Raw Socket Message Indication Tags , Binary: tcpip.sys
     I6ma         4        16448          0            0	IPv6 Local Multicast Addresses , Binary: tcpip.sys
     InF2         4        16448          0            0	Inet Generic Fixed Size Block pool 2 , Binary: tcpip.sys
     I4ma         4        16448          0            0	IPv4 Local Multicast Addresses , Binary: tcpip.sys
     InF0         4        16448          0            0	Inet Generic Fixed Size Block pool 0 , Binary: tcpip.sys
     UdMI         4        16448          0            0	UDP Message Indications , Binary: tcpip.sys
     I4ua         4        16448          0            0	IPv4 Local Unicast Addresses , Binary: tcpip.sys
     TcCR         4        16448          0            0	TCP Connect Requests , Binary: tcpip.sys
     Nph1         4        16448          0            0	NetIO Protocol Header1 Data , Binary: netio.sys
     IoTr         1        16432          0            0	UNKNOWN pooltag 'IoTr', please update pooltag.txt
     dFVE         1        16400          0            0	Full Volume Encryption crash dump filter (Bitlocker Drive Encryption) , Binary: dumpfve.sys
     InPA       512        16384          0            0	Inet Port Assignment Arrays , Binary: tcpip.sys
     Viaa        16        16384          0            0	GPU scheduler history buffer , Binary: dxgmms2.sys
     MTCo        42        16274          1          194	UNKNOWN pooltag 'MTCo', please update pooltag.txt
     acpi        41        16072          4          610	UNKNOWN pooltag 'acpi', please update pooltag.txt
     Fwpp        60        16072          6        12568	Windows Filtering Platform export driver. , Binary: fwpkclnt.sys
     NDqu        13        15912          0            0	NDIS_TAG_QUEUE , Binary: ndis.sys
     VdWd        38        15904          1          184	Virtual Machine Virtualization Infrastructure Driver (WDF) , Binary: Vid.sys
     IPif        60        15744          0            0	IP Interfaces , Binary: tcpip.sys
     Ioin        39        15728          0            0	Io interrupts 
     NDvb        39        15512          1          206	UNKNOWN pooltag 'NDvb', please update pooltag.txt
     UdpA        47        15416          0            0	UDP Endpoints , Binary: tcpip.sys
     NDpb        17        15380          0            0	protocol block , Binary: ndis.sys
     Ntft        24        15312          0            0	SCB (Prerestart) , Binary: ntfs.sys
     @GMp        10        15040          0            0	UNKNOWN pooltag '@GMp', please update pooltag.txt
     ELOG         1        14704          0            0	UNKNOWN pooltag 'ELOG', please update pooltag.txt
     WfpS         4        14664          0            0	WFP startup , Binary: netio.sys
     DtrV        39        14624          0            0	UNKNOWN pooltag 'DtrV', please update pooltag.txt
     RLin        14        14560          0            0	FsLib Range lock entry 
     FMvo         7        14472          0            0	FLT_VOLUME structure , Binary: fltmgr.sys
     TcHT        32        14336          0            0	TCP Hash Tables , Binary: tcpip.sys
     Irql         1        14336          0            0	UNKNOWN pooltag 'Irql', please update pooltag.txt
     TrEE        39        14216          3          486	UNKNOWN pooltag 'TrEE', please update pooltag.txt
     AzDH         9        14040          0            0	UNKNOWN pooltag 'AzDH', please update pooltag.txt
     CcWq       162        14032          0            0	Cache Manager Work Queue Item , Binary: nt!cc
     NDel        14        14016          0            0	NDIS debugging event log , Binary: ndis.sys
     TmRm        20        13696          0            0	Tm KRESOURCEMANAGER object , Binary: nt!tm
     wdiw        39        13664          1          192	UNKNOWN pooltag 'wdiw', please update pooltag.txt
     WmiG        50        13536          0            0	Allocation of WMIGUID 
     FlpI        72        13440          0            0	Framing Layer Interfaces , Binary: tcpip.sys
     PnpI       127        13344          0            0	PNPMGR instance path , Binary: nt!pnp
     QsSw         3        13120          0            0	UNKNOWN pooltag 'QsSw', please update pooltag.txt
     tvEm        33        13096          0            0	UNKNOWN pooltag 'tvEm', please update pooltag.txt
     NSpc       199        13072          0            0	NSI Proxy Contexts , Binary: nsi.dll
     TUSS        90        13040          0            0	UNKNOWN pooltag 'TUSS', please update pooltag.txt
     MmLa         1        12960          0            0	Memory list locks , Binary: nt!mm
     VWFF         8        12916          0            0	Virtual Wi-Fi Filter Driver (object allocation) , Binary: vwififlt.sys
     TrAG        57        12912          5         1880	UNKNOWN pooltag 'TrAG', please update pooltag.txt
     Wl2l        13        12896          0            0	WFP L2 LWF context , Binary: wfplwfs.sys
     Clfs       165        12828         42       372278	CLFS General buffer, or owner page lookaside list , Binary: clfs.sys
     Bwtw         8        12736          0            0	UNKNOWN pooltag 'Bwtw', please update pooltag.txt
     Ath4        60        12480          0            0	UNKNOWN pooltag 'Ath4', please update pooltag.txt
     PnpY       155        12400        155        24800	PNPMGR usermode device notifications , Binary: nt!pnp
     TcTW         3        12336          0            0	TCP Time Wait TCBs , Binary: tcpip.sys
     Nph2         3        12336          0            0	NetIO Protocol Header2 Data , Binary: netio.sys
     SmBf         2        12320          0            0	SMB exchange buffer , Binary: mrxsmb.sys
     sta1         2        12320          0            0	UNKNOWN pooltag 'sta1', please update pooltag.txt
     Etwa         3        12160          0            0	Etw server silo state , Binary: nt!etw
     NDws        42        12096          0            0	UNKNOWN pooltag 'NDws', please update pooltag.txt
     @GMf         8        12032          0            0	UNKNOWN pooltag '@GMf', please update pooltag.txt
     EtwT       118        12000        527        56720	Etw provider traits , Binary: nt!etw
     HidC        60        11990          8          656	HID Class driver , Binary: hidclass.sys
     ReSe         5        11960          0            0	Resource Semaphore 
     WfpL       123        11852          0            0	WFP fast cache , Binary: netio.sys
     FVE0        90        11744         13         1258	General allocations , Binary: fvevol.sys
     LLDP         7        11564          0            0	LLDP protocol driver allocations , Binary: mslldp.sys
     MsLl        31        11464          3          426	UNKNOWN pooltag 'MsLl', please update pooltag.txt
     Vi44       144        11336          0            0	Video memory manager fence storage , Binary: dxgmms2.sys
     Pcsb         8        11264          0            0	PACER Send Buffers , Binary: pacer.sys
     LqWi       128        11264          0            0	UNKNOWN pooltag 'LqWi', please update pooltag.txt
     Vi28       279        11160          0            0	Video memory manager mutex , Binary: dxgmms2.sys
     NvLD         3        10944          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     FMfl         9        10862          0            0	FLT_FILTER structure , Binary: fltmgr.sys
     NSIr       103        10836          0            0	NSI Generic Buffers , Binary: nsi.dll
     PEAU        29        10816        212        38380	UNKNOWN pooltag 'PEAU', please update pooltag.txt
     ITrk        54        10656          0            0	UNKNOWN pooltag 'ITrk', please update pooltag.txt
     NvLv         4        10512          0            0	UNKNOWN pooltag 'NvLv', please update pooltag.txt
     TmTm        10        10496          0            0	Tm KTRANSACTIONMANAGER object , Binary: nt!tm
     FMvf         9        10368          0            0	FLT_VERIFIER_EXTENSION structure , Binary: fltmgr.sys
     HCID         3        10228          0            0	Bluetooth port driver HCI debug , Binary: bthport.sys
     PsJb         5         9920         86        13120	UNKNOWN pooltag 'PsJb', please update pooltag.txt
     MmTx       153         9792          0            0	UNKNOWN pooltag 'MmTx', please update pooltag.txt
     PnpV        76         9728          0            0	PNPMGR notify entry loc , Binary: nt!pnp
     EtwS       150         9600          0            0	Etw DataSource , Binary: nt!etw
     NDco        25         9440          0            0	NDIS_TAG_CO , Binary: ndis.sys
     Fltt         1         9216          0            0	Log of Driver Verifier fault injection stack traces. , Binary: nt!Vf
     PsSi         4         9120          1          256	UNKNOWN pooltag 'PsSi', please update pooltag.txt
     pCmd         4         9072          0            0	UNKNOWN pooltag 'pCmd', please update pooltag.txt
     User        77         9064          0            0	USERTAG_ERESOURCE , Binary: win32k!InitCreateUserCrit
     @GMa         6         9024          0            0	UNKNOWN pooltag '@GMa', please update pooltag.txt
     @GMo         6         9024          0            0	UNKNOWN pooltag '@GMo', please update pooltag.txt
     Ucx0        25         8968          2          300	i.e., the case of the leading "Ul" or "Uc" has been reversed. , Binary: http.sys
     MmWe         7         8960          0            0	Work entries for writing out modified filesystem pages. , Binary: nt!mm
     SpbC        25         8920          2          298	UNKNOWN pooltag 'SpbC', please update pooltag.txt
     NDoa         9         8868          0            0	NDIS_TAG_OID_ARRAY , Binary: ndis.sys
     FSrt        50         8784         22        14320	File System Run Time allocations (DO NOT USE!) , Binary: nt!fsrtl
     WPAD         1         8752          0            0	Basic Render Adapter , Binary: BasicRender.sys
     smBA        14         8640          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     RaTe        10         8616          0            0	UNKNOWN pooltag 'RaTe', please update pooltag.txt
     CR..         1         8576          0            0	UNKNOWN pooltag '  CR', please update pooltag.txt
     wdnf       146         8552          0            0	UNKNOWN pooltag 'wdnf', please update pooltag.txt
     IrpC        41         8528          0            0	I/O verifier stack contexts , Binary: nt!vf
     NDpp         4         8448          0            0	packet pool , Binary: ndis.sys
     FMcr         9         8368          0            0	Context registration structures , Binary: fltmgr.sys
     KeSc        87         8368          0            0	UNKNOWN pooltag 'KeSc', please update pooltag.txt
     RaDr         4         8292          0            0	UNKNOWN pooltag 'RaDr', please update pooltag.txt
     WmiR       103         8240          0            0	Wmi Registration info blocks 
     NvLW         1         8240          0            0	UNKNOWN pooltag 'NvLW', please update pooltag.txt
     VfCR         1         8192          0            0	UNKNOWN pooltag 'VfCR', please update pooltag.txt
     IoTt         1         8192          0            0	I/O verifier IRP tracking table , Binary: nt!vf
     AcpR         1         8192         10         2384	ACPI resource data , Binary: acpi.sys
     IPdc         4         8192          0            0	IP Destination Cache , Binary: tcpip.sys
     wgmw         4         8192          0            0	UNKNOWN pooltag 'wgmw', please update pooltag.txt
     Ath3        60         8160          0            0	UNKNOWN pooltag 'Ath3', please update pooltag.txt
     NMRm        85         8160          0            0	Network Module Registrar Modules , Binary: tcpip.sys
     NDrw        85         8080          0            0	NDIS_TAG_RWLOCK , Binary: ndis.sys
     IoCc       250         8000          0            0	Io completion context , Binary: nt!io
     QUIC        16         7992          1          192	UNKNOWN pooltag 'QUIC', please update pooltag.txt
     ClfE        29         7888          0            0	CLFS Log CCB lookaside list , Binary: clfs.sys
     IPsi        60         7872          0            0	IP SubInterfaces , Binary: tcpip.sys
     TTEC         1         7696          0            0	UNKNOWN pooltag 'TTEC', please update pooltag.txt
     KStr        67         7674          0            0	UNKNOWN pooltag 'KStr', please update pooltag.txt
     PcCr        27         7608          1           56	WDM audio stuff 
     @GMe         5         7520          0            0	UNKNOWN pooltag '@GMe', please update pooltag.txt
     RxIr         9         7488          0            0	RDBSS RxContext , Binary: rdbss.sys
     TcpL        24         7488          0            0	TCP Listeners , Binary: tcpip.sys
     NtFL         6         7472        151         7248	LogSup.c , Binary: ntfs.sys
     NDof        19         7464          0            0	NDIS_TAG_OFFLOAD , Binary: ndis.sys
     UsKw         5         7344          0            0	USERTAG_KWAITBLOCK , Binary: win32k!xxxDesktopThread
     AlSe       150         7200       1786       314336	ALPC client security , Binary: nt!alpc
     NMRb        69         7176          0            0	Network Module Registrar Bindings , Binary: tcpip.sys
     Ntfn        51         6888          0            0	SCB_NONPAGED                      NtfsScbNonpagedLookasideList , Binary: ntfs.sys
     CPnp        17         6800          0            0	ClassPnP transfer packets , Binary: classpnp.sys
     Ath6        19         6744          1          202	UNKNOWN pooltag 'Ath6', please update pooltag.txt
     NvLg         1         6656          2         1232	UNKNOWN pooltag 'NvLg', please update pooltag.txt
     UVM1         2         6640          0            0	UNKNOWN pooltag 'UVM1', please update pooltag.txt
     CcPc        46         6624          0            0	Cache Manager Private Cache Map , Binary: nt!cc
     DmaA         9         6592          0            0	UNKNOWN pooltag 'DmaA', please update pooltag.txt
     RefT        13         6568          0            0	Bluetooth reference tracking , Binary: refs.sys
     NDpf        16         6528          0            0	NDIS_TAG_FILTER , Binary: ndis.sys
     NvLq         4         6496          0            0	UNKNOWN pooltag 'NvLq', please update pooltag.txt
     PnpS        58         6480         59         2832	PNPMGR dependent info , Binary: nt!pnp
     Vstw         4         6368          0            0	UNKNOWN pooltag 'Vstw', please update pooltag.txt
     NvLm         3         6241          2       135200	nVidia video driver , Binary: <nvlddmkm.sys>
     NDtk        86         6192          0            0	NDIS_TAG_NBL_TRACKER - Lost packet diagnostics , Binary: ndis.sys
     TcPt         1         6160          0            0	TCP Partitions , Binary: tcpip.sys
     Vi23         3         6144          0            0	Video memory manager DMA buffer allocation table , Binary: dxgmms2.sys
     AfdC        28         6120          0            0	Afd connection structure , Binary: afd.sys
     FMrr        32         6080          0            0	Per-processor Cache-aware rundown ref structure , Binary: fltmgr.sys
     NeWQ        69         6072          0            0	NetIO WorkQueue Data , Binary: tcpip.sys
     TPOP         2         6048          0            0	UNKNOWN pooltag 'TPOP', please update pooltag.txt
     ScPC         4         5816          0            0	reset bus code 
     Wind        15         5784          1          228	UNKNOWN pooltag 'Wind', please update pooltag.txt
     Nb07        11         5643          0            0	NetBT datagram request tracker , Binary: netbt.sys
     Call        35         5600          0            0	kernel callback object signature , Binary: nt!ex
     L2CA         7         5580          1          120	Bluetooth port driver (L2CAP) , Binary: bthport.sys
     FMct        16         5504          0            0	TRACK_COMPLETION_NODES structure , Binary: fltmgr.sys
     NDrx       377         5424          0            0	NDIS debugging refcount , Binary: ndis.sys
     CcBc        26         5408          0            0	Cache Manager Bcb from pool , Binary: nt!cc
     HidP        14         5384          0            0	HID Parser , Binary: hidparse.sys
     NDan        92         5332          0            0	adapter name , Binary: ndis.sys
     TRWp         3         5256          0            0	UNKNOWN pooltag 'TRWp', please update pooltag.txt
     FIPc        59         5192          0            0	FileInfo FS-filter Prefetch Context , Binary: fileinfo.sys
     Ntff        15         5160       8061     10833984	FCB_DATA , Binary: ntfs.sys
     NDst        32         5122          0            0	NDIS_TAG_STRING , Binary: ndis.sys
     ClMl         9         5112          0            0	UNKNOWN pooltag 'ClMl', please update pooltag.txt
     IPSp        36         5056          0            0	UNKNOWN pooltag 'IPSp', please update pooltag.txt
     MouC         5         5042          0            0	Mouse Class Driver , Binary: mouclass.sys
     Desk        10         4960          0            0	UNKNOWN pooltag 'Desk', please update pooltag.txt
     TdxA         6         4896          0            0	TDX Transport Addresses , Binary: tdx.sys
     ETOF        28         4888          0            0	UNKNOWN pooltag 'ETOF', please update pooltag.txt
     SeDt         4         4848        169        13488	Security Global Singleton attributes table , Binary: nt!se
     WPCT         3         4800          0            0	Basic Render DX Context , Binary: BasicRender.sys
     Vi50         3         4704          0            0	Video memory manager physical adapter , Binary: dxgmms2.sys
     Nhfs         2         4664          0            0	NetIO Hash Function State Data , Binary: tcpip.sys
     Rspp        19         4630          0            0	UNKNOWN pooltag 'Rspp', please update pooltag.txt
     Vi06        12         4608          0            0	Video memory manager segment , Binary: dxgmms2.sys
     AleD        13         4536          0            0	ALE remote endpoint , Binary: tcpip.sys
     Txrn         3         4536          0            0	TXF_NONPAGED_RMCB , Binary: ntfs.sys
     NvAL         2         4528          0            0	UNKNOWN pooltag 'NvAL', please update pooltag.txt
     AcpS       102         4441          5           92	ACPI string data , Binary: acpi.sys
     UH3d        39         4380          0            0	UNKNOWN pooltag 'UH3d', please update pooltag.txt
     Nb01         2         4376          0            0	NetBT hash table , Binary: netbt.sys
     IPRA         1         4368          0            0	UNKNOWN pooltag 'IPRA', please update pooltag.txt
     CCsw         4         4352          0            0	UNKNOWN pooltag 'CCsw', please update pooltag.txt
     NvLZ         3         4344          1          192	UNKNOWN pooltag 'NvLZ', please update pooltag.txt
     EhSt        10         4328          1          208	UNKNOWN pooltag 'EhSt', please update pooltag.txt
     NBSf         2         4318          0            0	FCB 
     wsip         3         4224          0            0	UNKNOWN pooltag 'wsip', please update pooltag.txt
     wsiq         3         4224          0            0	UNKNOWN pooltag 'wsiq', please update pooltag.txt
     wsio         3         4224          0            0	UNKNOWN pooltag 'wsio', please update pooltag.txt
     wsir         3         4224          0            0	UNKNOWN pooltag 'wsir', please update pooltag.txt
     NtfJ         3         4216          1          114	Unrecognized NTFS tag (update base\published\pooltag.w) , Binary: ntfs.sys
     NDfv         8         4194          0            0	NDIS_TAG_LWFILTER_DRIVER , Binary: ndis.sys
     Etwb        49         4176        500        99968	Etw provider tracking , Binary: nt!etw
     UHCD        39         4168          0            0	Universal Host Controller (USB - Intel Controller) 
     FSrN        43         4128         54         7840	File System Run Time , Binary: nt!fsrtl
     FatZ         1         4112          0            0	UNKNOWN pooltag 'FatZ', please update pooltag.txt
     wgmv         4         4096          0            0	UNKNOWN pooltag 'wgmv', please update pooltag.txt
     Filt        14         4096          0            0	UNKNOWN pooltag 'Filt', please update pooltag.txt
     CcPf         1         4096          0            0	Prefetcher , Binary: nt!ccpf
     WanO         1         4096          0            0	NdisWan Tags (PPP Framing module for Remote Access) 
     Plcl         1         4096          4        16384	Cache aware pushlock entry. One per processor 
     MmRp         1         4096          0            0	Mm repurpose logging , Binary: nt!mm
     XdvL         1         4096          0            0	UNKNOWN pooltag 'XdvL', please update pooltag.txt
     PXl.         1         4000          0            0	UNKNOWN pooltag ' PXl', please update pooltag.txt
     PX2.         1         4000          0            0	UNKNOWN pooltag ' PX2', please update pooltag.txt
     Pcle         8         3922          0            0	PACER Lines , Binary: pacer.sys
     ClfD         6         3888          0            0	CLFS Log virtual FCB lookaside list , Binary: clfs.sys
     TdxT        12         3846          0            0	TDX Transport Provider Contexts , Binary: tdx.sys
     FlpL        20         3840          0            0	Framing Layer Client Interface Contexts , Binary: tcpip.sys
     FIcv         5         3840          0            0	FileInfo FS-filter Volume Context , Binary: fileinfo.sys
     CBRe        60         3840          0            0	CallbackRegistration 
     PmPE         5         3840          0            0	Partition Manager partition entry , Binary: partmgr.sys
     LS2$        12         3800          0            0	SMB2 misc. allocation , Binary: srv2.sys
     LLnb         5         3776          0            0	UNKNOWN pooltag 'LLnb', please update pooltag.txt
     NvFX         1         3776          0            0	UNKNOWN pooltag 'NvFX', please update pooltag.txt
     RApc        36         3744          0            0	UNKNOWN pooltag 'RApc', please update pooltag.txt
     ioRr         8         3712          0            0	UNKNOWN pooltag 'ioRr', please update pooltag.txt
     AlsT        58         3712          0            0	UNKNOWN pooltag 'AlsT', please update pooltag.txt
     PX3.         5         3670          0            0	UNKNOWN pooltag ' PX3', please update pooltag.txt
     AzD8         3         3576          0            0	UNKNOWN pooltag 'AzD8', please update pooltag.txt
     IoCx         5         3510          0            0	UNKNOWN pooltag 'IoCx', please update pooltag.txt
     NLcp         2         3456          0            0	Network Layer Compartments , Binary: tcpip.sys
     PPMp        10         3440          0            0	Kernel Processor Power Management Perf States. , Binary: nt!po
     ThNm        40         3376          0            0	UNKNOWN pooltag 'ThNm', please update pooltag.txt
     PXb.         5         3340          0            0	UNKNOWN pooltag ' PXb', please update pooltag.txt
     NvLT         3         3312          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     Sp**        17         3286          0            0	UNKNOWN pooltag 'Sp**', please update pooltag.txt
     XHCI         5         3268          0            0	UNKNOWN pooltag 'XHCI', please update pooltag.txt
     MPfd         1         3264          0            0	UNKNOWN pooltag 'MPfd', please update pooltag.txt
     ClMc        12         3168          0            0	UNKNOWN pooltag 'ClMc', please update pooltag.txt
     FSmg        10         3136          0            0	File System Run Time , Binary: nt!fsrtl
     MPic         5         3120          0            0	UNKNOWN pooltag 'MPic', please update pooltag.txt
     Tdxo        10         3120          0            0	TDX Device Objects , Binary: tdx.sys
     DxgM         7         3056         12         1137	UNKNOWN pooltag 'DxgM', please update pooltag.txt
     FLli        38         3040          0            0	per-file lock information 
     Halb        14         2912          0            0	UNKNOWN pooltag 'Halb', please update pooltag.txt
     FxLa        33         2904          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     BaNB         4         2880          0            0	UNKNOWN pooltag 'BaNB', please update pooltag.txt
     WanJ         5         2880          0            0	LineUpInfo 
     KSoh        21         2856          0            0	object header 
     StBn         3         2848          0            0	UNKNOWN pooltag 'StBn', please update pooltag.txt
     Powe        11         2832          0            0	UNKNOWN pooltag 'Powe', please update pooltag.txt
     ExWl        10         2832          0            0	Executive worker list entry 
     wgmu        11         2816          0            0	UNKNOWN pooltag 'wgmu', please update pooltag.txt
     Bwsb         2         2816          0            0	UNKNOWN pooltag 'Bwsb', please update pooltag.txt
     NDnd         2         2816          0            0	NDIS_TAG_POOL_NDIS , Binary: ndis.sys
     MmDT        16         2800        336        29696	Mm debug , Binary: nt!mm
     WfpI        60         2736          0            0	WFP index , Binary: netio.sys
     EtwC        10         2720          0            0	Etw Realtime Consumer , Binary: nt!etw
     MmWd         1         2688          0            0	UNKNOWN pooltag 'MmWd', please update pooltag.txt
     Dprt        39         2680         45        15428	Video port for Vista display drivers , Binary: dxgkrnl.sys
     Io..         4         2624          0            0	UNKNOWN pooltag '  Io', please update pooltag.txt
     ClfG         9         2592          0            0	CLFS Log I/O Request lookaside list , Binary: clfs.sys
     SmMs        13         2588          3         5428	SMB miscellaneous , Binary: mrxsmb.sys
     Pdcs        14         2566          3         2592	PDC_SCENARIO_TAG , Binary: pdc.sys
     RaDf        20         2560          0            0	RaidInitializeDeferredQueue storport!_RAID_DEFERRED_QUEUE.FreeList , Binary: storport.sys
     UsbC        24         2544          0            0	UNKNOWN pooltag 'UsbC', please update pooltag.txt
     VdPN        12         2512        363        40476	Video display mode management , Binary: dxgkrnl.sys
     NMpc        13         2496          0            0	UNKNOWN pooltag 'NMpc', please update pooltag.txt
     Core        17         2480          0            0	UNKNOWN pooltag 'Core', please update pooltag.txt
     NDFL        21         2464          0            0	UNKNOWN pooltag 'NDFL', please update pooltag.txt
     SeSd        14         2464         15         2176	Security Descriptor , Binary: nt!se
     Uwrp         8         2352          0            0	UNKNOWN pooltag 'Uwrp', please update pooltag.txt
     WSKs        15         2344          0            0	WSK socket , Binary: afd.sys
     TDIc        17         2312          0            0	TDI resource 
     Nb05         8         2240          0            0	NetBT client element , Binary: netbt.sys
     Usfl        14         2240          0            0	USERTAG_SERVICEFILTER , Binary: win32k!InitializeWin32KSyscallF
     Bwcm         8         2160          0            0	UNKNOWN pooltag 'Bwcm', please update pooltag.txt
     FSfm        27         2160          0            0	File System Run Time Fast Mutex Lookaside List , Binary: nt!fsrtl
     smAr        15         2160          0            0	ReadyBoost generic array allocation , Binary: nt!store or rdyboost.sys
     RaTM         4         2144          0            0	RaInitializeTagList storport!_QUEUE_TAG_LIST.Buffer , Binary: storport.sys
     NDch        15         2128          0            0	NDIS_TAG_CONFIG_HANDLE , Binary: ndis.sys
     WofV         9         2094          0            0	Wof volume context , Binary: wof.sys
     CcWk        13         2080          0            0	Kernel Cache Manager lookaside list , Binary: nt!cc
     FLsh        26         2080          0            0	shared file lock 
     NMhf        16         2048          0            0	Handle Factory pool , Binary: netio.sys
     TcRL         1         2048          0            0	TCP Create And Connect Tcb Rate Limit Pool , Binary: tcpip.sys
     PcCi         2         2016          0            0	WDM audio port class adapter device object stuff 
     LBxp         2         2016          0            0	Transport 
     MuFc         7         2004          0            0	File Context , Binary: mup.sys
     Vi17         6         1920          0            0	Video memory manager pool , Binary: dxgmms2.sys
     FMfr         1         1920          0            0	FLT_FRAME structure , Binary: fltmgr.sys
     NpfF        34         1904         34        13328	Npfs Allocations , Binary: npfs.sys
     FLln        23         1840          0            0	shared lock tree node 
     Vi08         6         1824          3          912	Video memory manager device , Binary: dxgmms2.sys
     NEVE        57         1824          0            0	UNKNOWN pooltag 'NEVE', please update pooltag.txt
     PXd.         5         1820          0            0	UNKNOWN pooltag ' PXd', please update pooltag.txt
     NDdb        16         1808          0            0	DMA block , Binary: ndis.sys
     MouH         6         1808          1          110	Mouse HID mapper Driver , Binary: mouhid.sys
     Pcfc         8         1792          0            0	PACER Filter Contexts , Binary: pacer.sys
     NetQ         1         1744          0            0	UNKNOWN pooltag 'NetQ', please update pooltag.txt
     InAf        12         1728          0            0	UNKNOWN pooltag 'InAf', please update pooltag.txt
     MmDp         6         1728          7          608	Lost delayed write context , Binary: nt!mm
     LS2h         5         1728          4         3712	SMB2 share , Binary: srv2.sys
     AfdB        21         1712          0            0	Afd data buffer , Binary: afd.sys
     Wfdp         4         1688          0            0	UNKNOWN pooltag 'Wfdp', please update pooltag.txt
     Vi22         9         1656          0            0	Video memory manager DMA buffer , Binary: dxgmms2.sys
     Ra12         4         1646          0            0	RaidBusEnumeratorAllocateUnitResources storport!_BUS_ENUM_RESOURCES.DataBuffer , Binary: storport.sys
     LS2e         4         1624          0            0	SMB2 endpoint , Binary: srv2.sys
     Aeht         1         1600          0            0	UNKNOWN pooltag 'Aeht', please update pooltag.txt
     USBB         4         1597          0            0	Bluetooth USB minidriver , Binary: bthusb.sys
     srb-        18         1584          0            0	UNKNOWN pooltag 'srb-', please update pooltag.txt
     8042         3         1562          0            0	PS/2 keyboard and mouse , Binary: i8042prt.sys
     NDPP         4         1536          0            0	UNKNOWN pooltag 'NDPP', please update pooltag.txt
     OpCt        24         1536          0            0	UNKNOWN pooltag 'OpCt', please update pooltag.txt
     Bwta         2         1536          0            0	UNKNOWN pooltag 'Bwta', please update pooltag.txt
     NMRn        19         1520          0            0	Network Module Registrar Network Protocol Identifiers , Binary: tcpip.sys
     @GMm         1         1504          0            0	UNKNOWN pooltag '@GMm', please update pooltag.txt
     @GMb         1         1504          0            0	UNKNOWN pooltag '@GMb', please update pooltag.txt
     @GMg         1         1504          0            0	UNKNOWN pooltag '@GMg', please update pooltag.txt
     AlPi        14         1488          0            0	ALE peer info , Binary: tcpip.sys
     OlmI         6         1488          0            0	Offload Manager Interfaces , Binary: tcpip.sys
     VsVN        14         1488          0            0	Virtual Machine Network Switch Driver (VM NIC) , Binary: vmswitch.sys
     LS2%        14         1488          0            0	LM server allocations 
     TDId        17         1484          0            0	TDI resource 
     Wfra         3         1472          0            0	UNKNOWN pooltag 'Wfra', please update pooltag.txt
     Usla        10         1440          0            0	USERTAG_LOOKASIDE , Binary: win32k!InitLockRecordLookaside
     AzVP         9         1440          0            0	UNKNOWN pooltag 'AzVP', please update pooltag.txt
     bnvW         2         1440          0            0	UNKNOWN pooltag 'bnvW', please update pooltag.txt
     TcRF         1         1432          0            0	TCP Recent Connection Failure , Binary: tcpip.sys
     Etwp         4         1408          0            0	Etw TracingBlock , Binary: nt!etw
     L2T8         1         1408          0            0	ndis\l2tp / MTAG_PACKETPOOL 
     Athb         1         1408          0            0	UNKNOWN pooltag 'Athb', please update pooltag.txt
     WaNF         1         1408          0            0	UNKNOWN pooltag 'WaNF', please update pooltag.txt
     AthG         1         1408          0            0	UNKNOWN pooltag 'AthG', please update pooltag.txt
     PTPp         1         1408          0            0	UNKNOWN pooltag 'PTPp', please update pooltag.txt
     NDrt         1         1408          0            0	NDIS_TAG_RST_NBL , Binary: ndis.sys
     AVNw         1         1408          0            0	UNKNOWN pooltag 'AVNw', please update pooltag.txt
     PTAp         1         1408          0            0	UNKNOWN pooltag 'PTAp', please update pooltag.txt
     AVpd         1         1408          0            0	UNKNOWN pooltag 'AVpd', please update pooltag.txt
     TcDN         1         1408          0            0	TCP Delayed Delivery Network Buffer Lists , Binary: tcpip.sys
     WaNE         1         1408          0            0	UNKNOWN pooltag 'WaNE', please update pooltag.txt
     PTPH         1         1408          0            0	UNKNOWN pooltag 'PTPH', please update pooltag.txt
     TSNb         1         1408          0            0	TCP Send NetBuffers , Binary: tcpip.sys
     AVpc         1         1408          0            0	UNKNOWN pooltag 'AVpc', please update pooltag.txt
     Vssb         1         1408          0            0	UNKNOWN pooltag 'Vssb', please update pooltag.txt
     wdnb         1         1408          0            0	UNKNOWN pooltag 'wdnb', please update pooltag.txt
     TNbl         1         1408          0            0	TCP Send NetBufferLists , Binary: tcpip.sys
     VBHO         1         1408          0            0	UNKNOWN pooltag 'VBHO', please update pooltag.txt
     Nnnn         1         1408          0            0	NetIO NetBuffers And NetBufferLists , Binary: netio.sys
     UNbl         1         1408          0            0	UDP NetBufferLists , Binary: tcpip.sys
     PoEc         1         1408          0            0	MTAG_BUFFERPOOL , Binary: raspppoe.sys
     UH3p         5         1408          0            0	UNKNOWN pooltag 'UH3p', please update pooltag.txt
     Snds         1         1408          0            0	UNKNOWN pooltag 'Snds', please update pooltag.txt
     UDNb         1         1408          0            0	UDP NetBuffers , Binary: tcpip.sys
     L2T9         1         1408          0            0	ndis\l2tp / MTAG_FBUFPOOL 
     Nnbl         1         1408          0            0	NetIO NetBufferLists , Binary: netio.sys
     Nnbf         1         1408          0            0	NetIO NetBuffers , Binary: netio.sys
     WaNG         1         1408          0            0	UNKNOWN pooltag 'WaNG', please update pooltag.txt
     Atha         1         1408          0            0	UNKNOWN pooltag 'Atha', please update pooltag.txt
     NDAC        24         1396          0            0	UNKNOWN pooltag 'NDAC', please update pooltag.txt
     SslC         3         1384          0            0	SSL kernel mode client allocations , Binary: ksecdd.sys
     KbdC         3         1378          0            0	Keyboard Class Driver , Binary: kbdclass.sys
     L2T1         1         1360          0            0	ndis\l2tp / MTAG_ADAPTERCB 
     RaPO         7         1352          0            0	UNKNOWN pooltag 'RaPO', please update pooltag.txt
     smSa         1         1344          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     NpFn        33         1338          0            0	Name block , Binary: npfs.sys
     MPrD         1         1280          0            0	UNKNOWN pooltag 'MPrD', please update pooltag.txt
     Pcta         2         1280          0            0	PACER Timer Units , Binary: pacer.sys
     Mirm        20         1280          0            0	UNKNOWN pooltag 'Mirm', please update pooltag.txt
     InNl         6         1280          0            0	UNKNOWN pooltag 'InNl', please update pooltag.txt
     UlTF        10         1280          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     TcpN         6         1280          0            0	TCP Name Service Interfaces , Binary: tcpip.sys
     NMpt        22         1264          0            0	Generic AVL Tree allocations 
     Afdl        58         1252          0            0	Afd lookaside lists buffer , Binary: afd.sys
     Nbtw         6         1250          0            0	NetBT device linkage names , Binary: netbt.sys
     FatE        12         1248          0            0	Fat EResources , Binary: fastfat.sys
     ArbM        42         1248          0            0	ARBITER_MISC_TAG , Binary: nt!arb
     NvLE         4         1240          0            0	nVidia video driver , Binary: <nvlddmkm.sys>
     RpcM        24         1232        444       116278	all msrpc.sys allocations not covered elsewhere , Binary: msrpc.sys
     Ussy         5         1224          0            0	USERTAG_SYSTEM , Binary: win32k!xxxDesktopThread
     Dcdd        25         1216          0            0	Canonical display driver , Binary: cdd.dll
     Thrm         1         1216          0            0	Thermal zone structure 
     UlCC         3         1200          0            0	Control Channel , Binary: http.sys
     ItoM         6         1200          0            0	IPsec task offload interface , Binary: tcpip.sys
     ClfN        11         1144          0            0	CLFS Log base file lock , Binary: clfs.sys
     SynH        12         1135          0            0	UNKNOWN pooltag 'SynH', please update pooltag.txt
     SmTp        11         1128          0            0	SMB transport , Binary: mrxsmb.sys
     KSdh         3         1128          0            0	device header 
     KSde         1         1128          0            0	UNKNOWN pooltag 'KSde', please update pooltag.txt
     Ath8         1         1124          0            0	UNKNOWN pooltag 'Ath8', please update pooltag.txt
     ExEH        10         1120          3          336	UNKNOWN pooltag 'ExEH', please update pooltag.txt
     CcVm         5         1120          0            0	UNKNOWN pooltag 'CcVm', please update pooltag.txt
     PoIr         5         1120          0            0	UNKNOWN pooltag 'PoIr', please update pooltag.txt
     Ntfi         2         1120          0            0	IRP_CONTEXT , Binary: ntfs.sys
     Ppdb         2         1088          0            0	UNKNOWN pooltag 'Ppdb', please update pooltag.txt
     CcPr         1         1088          0            0	UNKNOWN pooltag 'CcPr', please update pooltag.txt
     Vsbw         4         1080          0            0	UNKNOWN pooltag 'Vsbw', please update pooltag.txt
     VoSc         5         1072          0            0	Snapshot context allocations , Binary: volsnap.sys
     PmIB        16         1072          0            0	Partition Manager buffer for IOCTL processing , Binary: partmgr.sys
     KSee         7         1064          0            0	event entry 
     HidU        13         1060          0            0	UNKNOWN pooltag 'HidU', please update pooltag.txt
     NDwi        22         1056          0            0	NDIS_TAG_WORK_ITEM , Binary: ndis.sys
     Batt         2         1040          2          560	Battery class driver 
     PXh.         5         1040          0            0	UNKNOWN pooltag ' PXh', please update pooltag.txt
     InSA         1         1024          0            0	UNKNOWN pooltag 'InSA', please update pooltag.txt
     FMla         1         1024          0            0	Per-processor IRPCTRL lookaside lists , Binary: fltmgr.sys
     TdxM         1         1024          0            0	TDX Message Indication Buffers , Binary: tdx.sys
     usbL         8         1024          0            0	UNKNOWN pooltag 'usbL', please update pooltag.txt
     ioRe        32         1024          0            0	UNKNOWN pooltag 'ioRe', please update pooltag.txt
     GOPM        14         1024          2          128	GDITAG_OPM , Binary: win32k.sys
     SeSi        31         1024        372        18080	Security SID , Binary: nt!se
     BMCa         1         1024          0            0	UNKNOWN pooltag 'BMCa', please update pooltag.txt
     tIkW         8         1024          0            0	UNKNOWN pooltag 'tIkW', please update pooltag.txt
     Nncm         4         1016          0            0	UNKNOWN pooltag 'Nncm', please update pooltag.txt
     RCDJ         1         1008          0            0	UNKNOWN pooltag 'RCDJ', please update pooltag.txt
     AzD5         9         1008          0            0	UNKNOWN pooltag 'AzD5', please update pooltag.txt
     AcpO        20          992          0            0	ACPI object data , Binary: acpi.sys
     TWTa         4          992          0            0	Echo Request Timer Table , Binary: tcpip.sys
     UlAO         3          984          0            0	App Pool Object , Binary: http.sys
     PoET         1          976        468       194944	UNKNOWN pooltag 'PoET', please update pooltag.txt
     TpmP         7          976         15         3132	UNKNOWN pooltag 'TpmP', please update pooltag.txt
     MmSc         6          960          0            0	subsections used to map data files , Binary: nt!mm
     Tpcw         2          960          0            0	UNKNOWN pooltag 'Tpcw', please update pooltag.txt
     RaAT         6          960          0            0	UNKNOWN pooltag 'RaAT', please update pooltag.txt
     BDD          1          952          1        69632	Microsoft Basic Display Driver , Binary: BasicDisplay.sys
     Luaf         1          952        411       105436	LUA File Virtualization , Binary: luafv.sys
     Nbt0         5          920          0            0	NetBT name address , Binary: netbt.sys
     LSfR         9          912          9        24000	SMB2 rfssequence table and rfs64table , Binary: srv2.sys
     Cbrb        19          912          0            0	UNKNOWN pooltag 'Cbrb', please update pooltag.txt
     AcpE         1          904          0            0	ACPI embedded controller data , Binary: acpi.sys
     fdmg        16          896          0            0	UNKNOWN pooltag 'fdmg', please update pooltag.txt
     NDAS         8          896          0            0	UNKNOWN pooltag 'NDAS', please update pooltag.txt
     AcpF        14          896          0            0	ACPI interface data , Binary: acpi.sys
     FxLc        33          880          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     TcpI        10          880          0            0	TCP ISN buffers , Binary: tcpip.sys
     NbtC         5          880          0            0	NetBT address element , Binary: netbt.sys
     Ala6        15          872          0            0	ALE remote endpoint IPv6 address , Binary: tcpip.sys
     KeIR        18          864          0            0	UNKNOWN pooltag 'KeIR', please update pooltag.txt
     NDUP         4          864          0            0	UNKNOWN pooltag 'NDUP', please update pooltag.txt
     ExSa         7          864          1           96	UNKNOWN pooltag 'ExSa', please update pooltag.txt
     UsKs        27          864          0            0	USERTAG_KSEMAPHORE , Binary: win32k!CreateKernelSemaphore
     TDIe         6          860          0            0	TDI resource 
     PcSr        11          856          0            0	UNKNOWN pooltag 'PcSr', please update pooltag.txt
     EtwF         2          848          0            0	Etw Filter , Binary: nt!etw
     W32l         7          840          0            0	GDITAG_W32PIDLOCK , Binary: win32k!W32PIDLOCK::vInit
     FxLd         3          840          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     PX9.         5          840          0            0	UNKNOWN pooltag ' PX9', please update pooltag.txt
     NDUW         8          840          0            0	UNKNOWN pooltag 'NDUW', please update pooltag.txt
     UsKe        35          840          0            0	USERTAG_KEVENT , Binary: win32k!CreateKernelEvent
     aFDC         7          840          0            0	UNKNOWN pooltag 'aFDC', please update pooltag.txt
     NDTW         8          840          0            0	UNKNOWN pooltag 'NDTW', please update pooltag.txt
     Afdr         5          796          0            0	Afd ERESOURCE buffer , Binary: afd.sys
     FMwi         7          784          0            0	Work item structures , Binary: fltmgr.sys
     NpPp        14          784         14         7506	UNKNOWN pooltag 'NpPp', please update pooltag.txt
     NLap         7          784          0            0	Network Layer Netio Helper Function allocations , Binary: tcpip.sys
     DOPE         7          784          0            0	Device Object Power Extension (po component) 
     MmHi         7          784          0            0	Mm image entry - allocated per session , Binary: nt!mm
     Nbuf         8          776          0            0	NetIO Memory Descriptor List allocations , Binary: netio.sys
     Ala4        11          776          0            0	ALE remote endpoint IPv4 address , Binary: tcpip.sys
     SWfd         1          772          0            0	POOLTAG_DEVICE_FDOEXTENSION 
     UlEU         2          768          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     Olmg         4          768          0            0	UNKNOWN pooltag 'Olmg', please update pooltag.txt
     InCS         2          768          0            0	Inet Compartment Set , Binary: tcpip.sys
     Vsta         1          768          0            0	UNKNOWN pooltag 'Vsta', please update pooltag.txt
     CMrl         6          768          0            0	Internal Configuration manager allocations , Binary: nt!cm
     Tths         1          768          0            0	UNKNOWN pooltag 'Tths', please update pooltag.txt
     UlLE         3          768          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     AzE9         9          756          0            0	UNKNOWN pooltag 'AzE9', please update pooltag.txt
     Avrt        17          756          0            0	UNKNOWN pooltag 'Avrt', please update pooltag.txt
     WanM         8          746          0            0	Connection Table 
     AlP4         7          744          0            0	ALE peer IPv4 address , Binary: tcpip.sys
     AleU         7          744          0            0	ALE pend context , Binary: tcpip.sys
     AlFq         7          744          0            0	UNKNOWN pooltag 'AlFq', please update pooltag.txt
     TcRH         7          744          0            0	TCP Reassembly Headers , Binary: tcpip.sys
     TcST         7          744          0            0	TCP Syn TCBs , Binary: tcpip.sys
     AfdR         7          744          0            0	Afd remote address buffer , Binary: afd.sys
     ReED         7          744          0            0	UNKNOWN pooltag 'ReED', please update pooltag.txt
     Itui         7          744          0            0	IPsec inbound packet tunnel security context , Binary: tcpip.sys
     AlPU         7          744          0            0	ALE secure socket policy update , Binary: tcpip.sys
     RxMs         7          744          3          106	RDBSS miscellaneous , Binary: rdbss.sys
     Nv6f         7          744          0            0	UNKNOWN pooltag 'Nv6f', please update pooltag.txt
     Wl2f         7          744          0            0	WFP L2 flow , Binary: wfplwfs.sys
     Alei         7          744          0            0	ALE arrival/nexthop interface cache , Binary: tcpip.sys
     Wfpn         7          744          0            0	WFP NBL info container , Binary: netio.sys
     AlP6         7          744          0            0	ALE peer IPv6 address , Binary: tcpip.sys
     StDa         7          744          0            0	WFP stream inspection data , Binary: netio.sys
     AlSP         7          744          0            0	ALE secure socket policy , Binary: tcpip.sys
     AlLl         7          744          0            0	ALE remote endpoint LRU , Binary: tcpip.sys
     AlCi         7          744          0            0	ALE credential info , Binary: tcpip.sys
     StCc         7          744          0            0	WFP stream inspection call context , Binary: netio.sys
     StPw         7          744          0            0	UNKNOWN pooltag 'StPw', please update pooltag.txt
     Nv4f         7          744          0            0	UNKNOWN pooltag 'Nv4f', please update pooltag.txt
     TcCT         7          744          0            0	TCP Connection Tuples , Binary: tcpip.sys
     NDPI         7          744          0            0	UNKNOWN pooltag 'NDPI', please update pooltag.txt
     Ituo         7          744          0            0	IPsec outbound tunnel session security context , Binary: tcpip.sys
     NDNB         7          744          0            0	UNKNOWN pooltag 'NDNB', please update pooltag.txt
     TcDM         7          744          0            0	TCP Delayed Delivery Memory Descriptor Lists , Binary: tcpip.sys
     Itro         7          744          0            0	IPsec outbound session security context , Binary: tcpip.sys
     Itri         7          744          0            0	IPsec inbound packet security context , Binary: tcpip.sys
     NLmc         2          736          0            0	UNKNOWN pooltag 'NLmc', please update pooltag.txt
     Mdp          2          736          0            0	Memory Descriptor Lists , Binary: netio.sys
     FatN         6          720          0            0	Fat Nonpaged Fcbs , Binary: fastfat.sys
     FLpc        10          720          0            0	UNKNOWN pooltag 'FLpc', please update pooltag.txt
     FlSB         5          720          0            0	Framing Layer Stack Block , Binary: tcpip.sys
     PXg.         5          720          0            0	UNKNOWN pooltag ' PXg', please update pooltag.txt
     NvHP         6          720          4           96	UNKNOWN pooltag 'NvHP', please update pooltag.txt
     NLcc        10          720          0            0	Network Layer Client Contexts , Binary: tcpip.sys
     PoEa         1          712          0            0	MTAG_ADAPTER , Binary: raspppoe.sys
     Viae        14          704          0            0	GPU scheduler monitored fence , Binary: dxgmms2.sys
     SAad         2          700         13         2428	SrvAdmin buffer , Binary: srvnet.sys
     WanN         1          688          0            0	NdisPacketPool Desc 
     RaME         1          688          0            0	RiAllocateMiniportDeviceExtension , Binary: storport.sys
     TDIu         6          684          0            0	TDI resource 
     TDIa         5          680          0            0	UNKNOWN pooltag 'TDIa', please update pooltag.txt
     Vi29         5          680          0            0	Video memory manager DMA pool , Binary: dxgmms2.sys
     IoUs        14          672          0            0	I/O SubSystem completion Context Allocation , Binary: nt!io
     PcSl         2          672          0            0	WDM audio stuff 
     WfpM         7          672          0            0	WFP filter match buffers , Binary: netio.sys
     VIsr        14          672          0            0	UNKNOWN pooltag 'VIsr', please update pooltag.txt
     AVwi         1          672          0            0	UNKNOWN pooltag 'AVwi', please update pooltag.txt
     HCIT         6          664          0            0	Bluetooth port driver (HCI) , Binary: bthport.sys
     LSnn         1          658          0            0	SMB2 netname , Binary: srv2.sys
     PsSt         1          656          0            0	UNKNOWN pooltag 'PsSt', please update pooltag.txt
     MmMl         4          656          0            0	physical memory range information , Binary: nt!mm
     PsQb         1          656          0            0	Process quota block , Binary: nt!ps
     VoSs         9          654          1          120	Short term allocations , Binary: volsnap.sys
     BLEL         1          654          0            0	UNKNOWN pooltag 'BLEL', please update pooltag.txt
     AfdP         2          648          0            0	Afd poll info , Binary: afd.sys
      MAS         1          648          0            0	UNKNOWN pooltag ' MAS', please update pooltag.txt
     fnoC         1          644          0            0	UNKNOWN pooltag 'fnoC', please update pooltag.txt
     RaPQ         2          640          0            0	UNKNOWN pooltag 'RaPQ', please update pooltag.txt
     @KCH         3          632          0            0	(Intel video driver) Chipset specific service 
     UlAE         3          624          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     Txts         3          624          0            0	TXF_TRANS_SYNC , Binary: ntfs.sys
     wsin         3          624          0            0	UNKNOWN pooltag 'wsin', please update pooltag.txt
     Vi48        26          624        108        17744	Video memory manager paging queue , Binary: dxgmms2.sys
     NVWS         1          616          0            0	UNKNOWN pooltag 'NVWS', please update pooltag.txt
     FatF         1          616          5         3080	Fat Fcbs , Binary: fastfat.sys
     SilG         1          608          0            0	UNKNOWN pooltag 'SilG', please update pooltag.txt
     TDIf         5          600          0            0	TDI resource 
     AzCI         1          592          0            0	UNKNOWN pooltag 'AzCI', please update pooltag.txt
     SDgi         1          584          0            0	UNKNOWN pooltag 'SDgi', please update pooltag.txt
     UlAL         3          576          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     PoCb         6          576          0            0	UNKNOWN pooltag 'PoCb', please update pooltag.txt
     FMcb         6          576          0            0	FLT_CCB structure , Binary: fltmgr.sys
     IoSh        12          576          0            0	Io shutdown packet , Binary: nt!io
     CcWK         4          576          0            0	Kernel Cache Manager lookaside list , Binary: nt!cc
     AleO         1          576          0            0	UNKNOWN pooltag 'AleO', please update pooltag.txt
     FlmC         4          576          0            0	Framing Layer Client Contexts , Binary: tcpip.sys
     ExIC         4          576          0            0	UNKNOWN pooltag 'ExIC', please update pooltag.txt
     NDOC         4          576          0            0	UNKNOWN pooltag 'NDOC', please update pooltag.txt
     MPFg         1          576          0            0	UNKNOWN pooltag 'MPFg', please update pooltag.txt
     ObNM         4          576          0            0	name buffer per processor lookaside pointers , Binary: nt!ob
     ObCI         4          576          0            0	object creation lookaside list , Binary: nt!ob
     smRl         6          576          0            0	ReadyBoost virtual forward progress resources , Binary: nt!store
     smIt        12          576          0            0	ReadyBoost store ETA timers , Binary: nt!store or rdyboost.sys
     Vpb          5          560          0            0	Io, vpb's 
     RaRL         2          560          0            0	RaidInitializeResourceList storport!_RAID_RESOURCE_LIST , Binary: storport.sys
     PcRP         2          560          0            0	UNKNOWN pooltag 'PcRP', please update pooltag.txt
     RLli        14          560          0            0	UNKNOWN pooltag 'RLli', please update pooltag.txt
     KSed         7          560          0            0	event dpc item 
     LfsS         3          552          5       141184	UNKNOWN pooltag 'LfsS', please update pooltag.txt
     Npfs         2          548          0            0	Npfs Allocations , Binary: npfs.sys
     MmCx        17          544          0            0	info for dynamic section extension , Binary: nt!mm
     FVEw         2          544          0            0	Worker threads , Binary: fvevol.sys
     CcZe         1          528          0            0	Cache Manager Buffer of Zeros , Binary: nt!cc
     AmlI         2          528          0            0	ACPI AMLI Pooltags 
     XdvU         1          528          0            0	UNKNOWN pooltag 'XdvU', please update pooltag.txt
     XpZw         1          528          0            0	UNKNOWN pooltag 'XpZw', please update pooltag.txt
     AcpM        17          528          1          114	ACPI miscellaneous data , Binary: acpi.sys
     DfCg         2          528          0            0	DFS Client PREFIXCACHE , Binary: dfsc.sys
     WanI         3          528          0            0	IoPacket 
     WanS         5          520          0            0	AfCB/SapCB/VcCB 
     UlPY         4          512          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     NtfI         1          512          0            0	IO_CONTEXT , Binary: ntfs.sys
     LS2#         2          512          0            0	LM server allocations 
     Ntfp         1          512          0            0	COMPRESSION_CONTEXT , Binary: ntfs.sys
     Uiso         4          512          0            0	USERTAG_ISOHEAP , Binary: win32k!TypeIsolation::Create
     wgmt         8          512          0            0	UNKNOWN pooltag 'wgmt', please update pooltag.txt
     ODMg        14          512         34         3888	Output Duplication component , Binary: dxgkrnl.sys
     FatV         1          512          0            0	Fat Vcb stat bucket , Binary: fastfat.sys
     KsoO        21          504          0            0	WDM audio stuff 
     SeSb         1          496          0            0	Security Secure Boot , Binary: nt!se
     KCNw         7          496          0            0	UNKNOWN pooltag 'KCNw', please update pooltag.txt
     Afdh         9          488          0            0	Afd address list change buffer , Binary: afd.sys
     NDFF         1          480          0            0	UNKNOWN pooltag 'NDFF', please update pooltag.txt
     TcCC         1          480          0            0	TCP Create And Connect Tcb Pool , Binary: tcpip.sys
     KSff         1          480          0            0	UNKNOWN pooltag 'KSff', please update pooltag.txt
     Ath9         5          480          0            0	UNKNOWN pooltag 'Ath9', please update pooltag.txt
     Hmap         1          480          0            0	UNKNOWN pooltag 'Hmap', please update pooltag.txt
     NDar         2          480          0            0	NDIS_TAG_ALLOCATED_RESOURCES , Binary: ndis.sys
     VfUs        15          480          0            0	Memory allocated by a call to IoSetCompletionRoutineEx. , Binary: nt!Vf
     AcpT         3          475          1           64	ACPI thermal data , Binary: acpi.sys
     EtwV         1          464          2         8288	UNKNOWN pooltag 'EtwV', please update pooltag.txt
     AzFg         2          464          0            0	HD Audio Class Driver (Audio Function Group) , Binary: HDAudio.sys
     Wrps         4          456          0            0	WAN_STRING_TAG 
     ScB4         3          452          0            0	Storage descriptor header , Binary: classpnp.sys
     ScCD         3          448          0            0	Adaptor & Device descriptor buffer , Binary: cdrom.sys
     MPpT         1          448          1         2048	UNKNOWN pooltag 'MPpT', please update pooltag.txt
     Cdma         1          448          0            0	CDFS Mcb array , Binary: cdfs.sys
     lzdc         4          448          0            0	UNKNOWN pooltag 'lzdc', please update pooltag.txt
     smFp        12          448          0            0	ReadyBoost virtual forward progress entry , Binary: nt!store
     Sfgi         1          448          0            0	UNKNOWN pooltag 'Sfgi', please update pooltag.txt
     ScLW         2          448          0            0	Power , Binary: classpnp.sys
     AzI2         9          432          0            0	UNKNOWN pooltag 'AzI2', please update pooltag.txt
     Acpg         3          432          0            0	ACPI GPE data , Binary: acpi.sys
     Ke           3          432          1         4096	Kernel data structures 
     AzIc         9          432          0            0	UNKNOWN pooltag 'AzIc', please update pooltag.txt
     AzI1         9          432          0            0	UNKNOWN pooltag 'AzI1', please update pooltag.txt
     AzIA         9          432          0            0	UNKNOWN pooltag 'AzIA', please update pooltag.txt
     FlpC         9          432          0            0	Framing Layer Client Contexts , Binary: tcpip.sys
     PX5.         5          430          0            0	UNKNOWN pooltag ' PX5', please update pooltag.txt
     Asrt        20          425          0            0	UNKNOWN pooltag 'Asrt', please update pooltag.txt
     LS2w         1          416          0            0	SMB2 workitem , Binary: srv2.sys
     sta9         2          416          0            0	UNKNOWN pooltag 'sta9', please update pooltag.txt
     WfpN         1          412          0            0	Windows Filtering Platform Tags , Binary: netio.sys
     Ntfc         3          408       2721       370056	CCB_DATA , Binary: ntfs.sys
     DPwr         5          400          0            0	PnP power management , Binary: nt!pnp
     aFDT         5          400          0            0	UNKNOWN pooltag 'aFDT', please update pooltag.txt
     BGBK         4          400          0            0	UNKNOWN pooltag 'BGBK', please update pooltag.txt
     BTHP         2          400          0            0	Bluetooth port driver (generic) , Binary: bthport.sys
     WCic         1          400          0            0	UNKNOWN pooltag 'WCic', please update pooltag.txt
     SQSF         2          396          0            0	UNKNOWN pooltag 'SQSF', please update pooltag.txt
     NAcc         7          392          0            0	UNKNOWN pooltag 'NAcc', please update pooltag.txt
     Nrtr         1          384          0            0	NRT record , Binary: netio.sys
     FLex         4          384          0            0	exclusive file lock 
     UdpN         2          384          0            0	UDP Name Service Interfaces , Binary: tcpip.sys
     MPad         1          384          0            0	UNKNOWN pooltag 'MPad', please update pooltag.txt
     InTl         6          384          0            0	UNKNOWN pooltag 'InTl', please update pooltag.txt
     PDDB         3          384          3          432	UNKNOWN pooltag 'PDDB', please update pooltag.txt
     AzMx         3          384          0            0	HD Audio Class Driver (AzMixerport) , Binary: HDAudio.sys
     UlAP         3          384          0            0	App Pool Process , Binary: http.sys
     MmSC         4          384          0            0	UNKNOWN pooltag 'MmSC', please update pooltag.txt
     alPm         1          384          0            0	UNKNOWN pooltag 'alPm', please update pooltag.txt
     RaRm         2          384          0            0	UNKNOWN pooltag 'RaRm', please update pooltag.txt
     UlTG         6          384          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     WmiA         2          380          3          416	Wmi ACPI mapper 
     NDIS         4          376          0            0	UNKNOWN pooltag 'NDIS', please update pooltag.txt
     PmVE         2          374          0            0	Partition Manager volume entry , Binary: partmgr.sys
     Nptg         4          372          1          272	UNKNOWN pooltag 'Nptg', please update pooltag.txt
     pdcp         2          368          0            0	UNKNOWN pooltag 'pdcp', please update pooltag.txt
     Pcge         2          366          0            0	PACER Generic Buffers (DACL, SID allocations) , Binary: pacer.sys
     MPse        15          360          0            0	UNKNOWN pooltag 'MPse', please update pooltag.txt
     LBtn         4          360          0            0	Transport name 
     NvPB         1          360          0            0	UNKNOWN pooltag 'NvPB', please update pooltag.txt
     ScCF         1          356          0            0	Feature descriptor , Binary: cdrom.sys
     IPle         4          352          0            0	IP Loopback execution context , Binary: tcpip.sys
     IPlc         4          352          0            0	IP Locality , Binary: tcpip.sys
     Sess         2          352          0            0	UNKNOWN pooltag 'Sess', please update pooltag.txt
     RaCD         1          352          0            0	RaUnitScsiGetDumpPointersIoctl , Binary: storport.sys
     ScLq         1          352          0            0	Release queue , Binary: classpnp.sys
     LSlb         2          344          1           40	SRVLIB security descriptor/registry buffer , Binary: srv2.sys
     Tdxc         6          336          0            0	TDX Control Channels , Binary: tdx.sys
     Pnim         6          336          0            0	UNKNOWN pooltag 'Pnim', please update pooltag.txt
     Afdb         4          336          0            0	AFD objects , Binary: afd.sys
     AzCm         2          328          0            0	HD Audio Class Driver (AzCommon) , Binary: HDAudio.sys
     VBNA         1          325          0            0	UNKNOWN pooltag 'VBNA', please update pooltag.txt
     NDDC         3          324          0            0	UNKNOWN pooltag 'NDDC', please update pooltag.txt
     smPL         1          320          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     MiFi         4          320          0            0	UNKNOWN pooltag 'MiFi', please update pooltag.txt
     smPS         5          320          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     AfdL         1          320          0            0	Afd local address buffer , Binary: afd.sys
     WSKL         2          320          0            0	UNKNOWN pooltag 'WSKL', please update pooltag.txt
     ScLF         8          320          0            0	File Object Extension , Binary: classpnp.sys
     QoSc         5          320          0            0	UNKNOWN pooltag 'QoSc', please update pooltag.txt
     PSwt         5          320          5           80	PDC_PSWT_TAG , Binary: pdc.sys
     Udpr         2          320          0            0	UNKNOWN pooltag 'Udpr', please update pooltag.txt
     Dict         1          320          0            0	StorCreateDictionary storport!_STOR_DICTIONARY.Entries , Binary: storport.sys
     AleL         1          320          0            0	ALE LRU , Binary: tcpip.sys
     MPtd         1          320          0            0	UNKNOWN pooltag 'MPtd', please update pooltag.txt
     EvtA         6          312        131         6500	UNKNOWN pooltag 'EvtA', please update pooltag.txt
     AzDC         3          312          0            0	UNKNOWN pooltag 'AzDC', please update pooltag.txt
     USBL         2          304          0            0	UNKNOWN pooltag 'USBL', please update pooltag.txt
     Vm           1          296          1           56	General allocations , Binary: volmgrx.sys
     RaET         1          292          0            0	UNKNOWN pooltag 'RaET', please update pooltag.txt
     UH3h         2          292          0            0	UNKNOWN pooltag 'UH3h', please update pooltag.txt
     FxL7         1          288          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     Gla5         2          288          0            0	GDITAG_HMGR_LOOKASIDE_SURF_TYPE , Binary: win32k.sys
     Gla4         2          288          0            0	GDITAG_HMGR_LOOKASIDE_RGN_TYPE , Binary: win32k.sys
     Gla:         2          288          0            0	GDITAG_HMGR_LOOKASIDE_LFONT_TYPE , Binary: win32k.sys
     [email protected]         2          288          0            0	GDITAG_HMGR_LOOKASIDE_BRUSH_TYPE , Binary: win32k.sys
     Gla8         2          288          0            0	GDITAG_HMGR_LOOKASIDE_PAL_TYPE , Binary: win32k.sys
     WrSB         2          288          0            0	UNKNOWN pooltag 'WrSB', please update pooltag.txt
     Gla1         2          288          0            0	GDITAG_HMGR_LOOKASIDE_DC_TYPE , Binary: win32k.sys
     WPDV         3          288          0            0	Basic Render DX Device , Binary: BasicRender.sys
     DPAE         2          288          0            0	UNKNOWN pooltag 'DPAE', please update pooltag.txt
     NtfV         3          288          0            0	VPB , Binary: ntfs.sys
     AlSm         1          288          0            0	ALE Secondary App Meta Data , Binary: tcpip.sys
     AmlR         6          288          0            0	ACPI AMLI Pooltags 
     Gla;         2          288          0            0	GDITAG_HMGR_LOOKASIDE_RFONT_TYPE , Binary: win32k.sys
     Rssp         5          281          0            0	UNKNOWN pooltag 'Rssp', please update pooltag.txt
     Avpn         7          280          0            0	UNKNOWN pooltag 'Avpn', please update pooltag.txt
     MuIc         1          280          0            0	IRP Context , Binary: mup.sys
     Plcp         1          272          4         1088	Cache aware pushlock list (array of puchlock addresses) 
     Tdxn         4          272          0            0	TDX Net Addresses , Binary: tdx.sys
     VMIN         2          272          0            0	Virtual Wi-Fi miniport , Binary: vwifimp.sys
     KSEb         1          272          0            0	UNKNOWN pooltag 'KSEb', please update pooltag.txt
     ScCa         2          266          0            0	Media change detection , Binary: cdrom.sys
     Nb16         1          264          0            0	NetBT timer entry , Binary: netbt.sys
     MpHd         1          264          0            0	UNKNOWN pooltag 'MpHd', please update pooltag.txt
     Mup          2          262          0            0	Multiple UNC provider allocations, generic , Binary: mup.sys
     PcDe         2          256          0            0	UNKNOWN pooltag 'PcDe', please update pooltag.txt
     MPdo         1          256          6         1718	UNKNOWN pooltag 'MPdo', please update pooltag.txt
     VFIO         8          256          0            0	UNKNOWN pooltag 'VFIO', please update pooltag.txt
     Pium         2          256          0            0	UNKNOWN pooltag 'Pium', please update pooltag.txt
     RawN         2          256          0            0	Raw Socket Nsi , Binary: tcpip.sys
     Nb39         2          256          0            0	NetBT file objects , Binary: netbt.sys
     FMpr         1          256          0            0	FLT_PRCB structure , Binary: fltmgr.sys
     IPlw         2          256          0            0	IP Loopback worker , Binary: tcpip.sys
     NDSC         2          256          0            0	UNKNOWN pooltag 'NDSC', please update pooltag.txt
     NDWC         2          256          0            0	UNKNOWN pooltag 'NDWC', please update pooltag.txt
     MiAv         4          256          0            0	UNKNOWN pooltag 'MiAv', please update pooltag.txt
     Acpt         8          256          0            0	ACPI table data , Binary: acpi.sys
     UlOB         1          256          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     TcRD         1          256          0            0	TCP Receive DPC Data , Binary: tcpip.sys
     MPtT         1          256          0            0	UNKNOWN pooltag 'MPtT', please update pooltag.txt
     TcDQ         1          256          0            0	TCP Delay Queues , Binary: tcpip.sys
     MmPh         2          256          0            0	Physical memory nodes for querying memory ranges , Binary: nt!mm
     UsKt         4          256          0            0	USERTAG_KTIMER , Binary: win32k!RemoteConnect
     UlAU         3          252          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     KSno         1          248          0            0	UNKNOWN pooltag 'KSno', please update pooltag.txt
     VM           1          248          0            0	General allocations , Binary: volmgr.sys
     VadI         1          240          0            0	UNKNOWN pooltag 'VadI', please update pooltag.txt
     SCO          1          240          0            0	Smart card driver tags 
     PmPC         1          240          0            0	UNKNOWN pooltag 'PmPC', please update pooltag.txt
     NtWR         3          240          0            0	REGISTRY_WATCH_CONTEXT , Binary: ntfs.sys
     NtFv         2          240          0            0	ViewSup.c , Binary: ntfs.sys
     PcEi         6          240          0            0	UNKNOWN pooltag 'PcEi', please update pooltag.txt
     NBSn         2          236          0            0	copy of user NCB 
     RxCt         2          232          2           80	RXCE transport , Binary: mrxsmb.sys
     FMfi         1          224          0            0	Fast IO dispatch table , Binary: fltmgr.sys
     RaHI         1          224          0            0	RaSaveDriverInitData storport!_HW_INITIALIZATION_DATA , Binary: storport.sys
     UsKf         4          224          0            0	USERTAG_FASTMUTEX , Binary: win32k!InitCreateUserCrit
     MsPp         4          224          4         1718	UNKNOWN pooltag 'MsPp', please update pooltag.txt
     Kpib         1          224          0            0	UNKNOWN pooltag 'Kpib', please update pooltag.txt
     Clio         1          224          0            0	UNKNOWN pooltag 'Clio', please update pooltag.txt
     WowP         7          224          0            0	UNKNOWN pooltag 'WowP', please update pooltag.txt
     Part         1          224          0            0	UNKNOWN pooltag 'Part', please update pooltag.txt
     Rkev         9          216          0            0	UNKNOWN pooltag 'Rkev', please update pooltag.txt
     RaPW         3          216          0            0	UNKNOWN pooltag 'RaPW', please update pooltag.txt
     PTPa         1          216          0            0	UNKNOWN pooltag 'PTPa', please update pooltag.txt
     VoSt         1          216          0            0	Temp table allocations , Binary: volsnap.sys
     InNP         3          216          0            0	Inet Nsi Providers , Binary: tcpip.sys
     Vi47         3          216          3          720	Video memory manager worker thread , Binary: dxgmms2.sys
     DfCC         1          208          0            0	DFS Client allocations , Binary: dfsc.sys
     DfCB         2          208          0            0	DFS Client allocations , Binary: dfsc.sys
     IoDA         1          208          0            0	UNKNOWN pooltag 'IoDA', please update pooltag.txt
     VWFB         2          208          0            0	Virtual Wi-Fi Bus Driver , Binary: vwifibus.sys
     PcIc        21          200          0            0	WDM audio stuff 
     LBdi         1          192          0            0	POOL_DOMAIN_INFO 
     Fatv         2          192          0            0	Fat events , Binary: fastfat.sys
     NDPS         4          192          0            0	UNKNOWN pooltag 'NDPS', please update pooltag.txt
     Wnln         4          192          0            0	UNKNOWN pooltag 'Wnln', please update pooltag.txt
     FDev         8          192          0            0	GDITAG_UMFD_EVENT , Binary: win32k.sys
     UlWS         1          192          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     MmSi         4          192          0            0	Control area security image stubs , Binary: nt!mm
     UlAX         3          192          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     UlXB         2          192          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     ScB3         1          184          0            0	ClassPnP misc allocations , Binary: classpnp.sys
     RaDS         3          179          0            0	StorCreateAnsiString storport!_STRING.Buffer , Binary: storport.sys
     NDpo         3          177          0            0	NDIS_TAG_PORT , Binary: ndis.sys
     AzE          1          176          0            0	UNKNOWN pooltag 'AzE ', please update pooltag.txt
     fecm         1          168          0            0	UNKNOWN pooltag 'fecm', please update pooltag.txt
     Itht         7          168          0            0	IPsec hashtable , Binary: tcpip.sys
     CIsc         1          168        113       573008	Code Integrity core dll , Binary: ci.dll
     Drmk         3          168          3          136	UNKNOWN pooltag 'Drmk', please update pooltag.txt
     EQOw         3          168          0            0	EQoS policy owner , Binary: tcpip.sys
     SdpD         1          168          6          632	Bluetooth SDP database , Binary: bthport.sys
     SdpI         1          168          0            0	Bluetooth port driver (SDP) , Binary: bthport.sys
     AcpC         7          168          0            0	UNKNOWN pooltag 'AcpC', please update pooltag.txt
     AcpP         3          168          0            0	ACPI power data , Binary: acpi.sys
     FxLh         3          168          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     NDWF         1          160          0            0	UNKNOWN pooltag 'NDWF', please update pooltag.txt
     pukm         4          160          0            0	UNKNOWN pooltag 'pukm', please update pooltag.txt
     VmSp         1          160          1          122	Volume Manager Extension , Binary: volmgrx.sys
     PmPP         4          160          0            0	UNKNOWN pooltag 'PmPP', please update pooltag.txt
     IPbw         4          160          0            0	IP Path Bandwidth information , Binary: tcpip.sys
     PcWC         2          160          0            0	UNKNOWN pooltag 'PcWC', please update pooltag.txt
     MpCh         1          160          0            0	UNKNOWN pooltag 'MpCh', please update pooltag.txt
     PnpJ         1          160          0            0	PNPMGR device event list , Binary: nt!pnp
     LpSd         2          160          0            0	UNKNOWN pooltag 'LpSd', please update pooltag.txt
     BkCh         5          160          0            0	UNKNOWN pooltag 'BkCh', please update pooltag.txt
     bpmt         2          158          0            0	UNKNOWN pooltag 'bpmt', please update pooltag.txt
     TEE6         1          156          0            0	UNKNOWN pooltag 'TEE6', please update pooltag.txt
     RdKI         1          152          0            0	UNKNOWN pooltag 'RdKI', please update pooltag.txt
     BRUa         1          152          0            0	UNKNOWN pooltag 'BRUa', please update pooltag.txt
     Ipse         1          144          0            0	IP Security (IPsec) , Binary: ipsec.sys
     InSB         1          144          0            0	Inet stack block , Binary: tcpip.sys
     Fisb         1          144          0            0	UNKNOWN pooltag 'Fisb', please update pooltag.txt
     FMrw         2          144          0            0	FLT_REGISTRY_WATCH_CONTEXT structure , Binary: fltmgr.sys
     VssP         1          144          0            0	Virtual Machine Network Switch Driver (protocol NIC) , Binary: vmswitch.sys
     PcEt         3          144          0            0	UNKNOWN pooltag 'PcEt', please update pooltag.txt
     IPre         1          144          0            0	IP Reassembly buffers , Binary: tcpip.sys
     Cont         1          144          0            0	Contiguous physical memory allocations for device drivers 
     UlPR         3          144          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     smKG         1          142          0            0	ReadyBoost encryption key registry path buffer , Binary: nt!store
     RaCT         2          128          0            0	UNKNOWN pooltag 'RaCT', please update pooltag.txt
     HdWM         2          128          0            0	UNKNOWN pooltag 'HdWM', please update pooltag.txt
     IoTi         2          128          0            0	Io timers , Binary: nt!io
     rtCA         1          128          0            0	UNKNOWN pooltag 'rtCA', please update pooltag.txt
     ClMC         1          128          0            0	UNKNOWN pooltag 'ClMC', please update pooltag.txt
     WHvL         1          128          0            0	UNKNOWN pooltag 'WHvL', please update pooltag.txt
     PNPR         1          128          2          720	UNKNOWN pooltag 'PNPR', please update pooltag.txt
     OcKm         1          128          0            0	UNKNOWN pooltag 'OcKm', please update pooltag.txt
     Wrpc         1          128          0            0	WAN_CONN_TAG 
     CSlo         1          128          0            0	UNKNOWN pooltag 'CSlo', please update pooltag.txt
     UlGC         1          128          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     ScCs         1          128          1           38	Assorted string data , Binary: cdrom.sys
     WHvU         2          124          0            0	UNKNOWN pooltag 'WHvU', please update pooltag.txt
     @CP          2          122          0            0	UNKNOWN pooltag '@CP ', please update pooltag.txt
     SPBx         3          120          0            0	UNKNOWN pooltag 'SPBx', please update pooltag.txt
     MPps         1          120          2           56	UNKNOWN pooltag 'MPps', please update pooltag.txt
     INTC         2          120          0            0	Intel video driver 
     InPE         3          120          0            0	Inet Port Exclusions , Binary: tcpip.sys
     NvLy         1          120          0            0	UNKNOWN pooltag 'NvLy', please update pooltag.txt
     AcpA         2          120        172         1376	ACPI arbiter data , Binary: acpi.sys
     xefb         7          120          0            0	UNKNOWN pooltag 'xefb', please update pooltag.txt
     FCin         1          116          0            0	UNKNOWN pooltag 'FCin', please update pooltag.txt
     Uspp         2          112          0            0	USERTAG_PNP , Binary: win32k!AllocateAndLinkHidTLCInf
     TcWQ         1          112          0            0	TCP TCB Work Queue Contexts , Binary: tcpip.sys
     PmSD         1          112          0            0	Partition Manager snapshot data cache , Binary: partmgr.sys
     AzF1         1          112          0            0	UNKNOWN pooltag 'AzF1', please update pooltag.txt
     Gfsm         2          112          0            0	Gdi Fast mutex 
     Uspo         2          112          0            0	USERTAG_POWER , Binary: win32k!QueuePowerRequest
     CMEL         2          112          0            0	Internal Configuration manager allocations , Binary: nt!cm
     PdcL         2          112          0            0	UNKNOWN pooltag 'PdcL', please update pooltag.txt
     USBD         2          108          1           48	Universal Serial Bus Class Driver 
     Nrsd         1          108          0            0	NRT security descriptor , Binary: netio.sys
     Nb17         1          106          0            0	NetBT registry path , Binary: netbt.sys
     PmBF         4          104          4          448	UNKNOWN pooltag 'PmBF', please update pooltag.txt
     KSlw         1          104          0            0	UNKNOWN pooltag 'KSlw', please update pooltag.txt
     RdSD         1          104          1          144	UNKNOWN pooltag 'RdSD', please update pooltag.txt
     ArbN         2          104          0            0	UNKNOWN pooltag 'ArbN', please update pooltag.txt
     Gnff         1          104          0            0	GDITAG_NETWORKED_FONT_FILE_TABLE , Binary: win32k.sys
     Gtff         1          104          0            0	GDITAG_TRUSTED_FONT_FILE_TABLE , Binary: win32k.sys
     TDIg         5           98          0            0	TDI resource 
     IPmf         2           96          0            0	IP Multicast Forwarding Entry pool , Binary: tcpip.sys
     ClfP        12           96          0            0	CLFS Log request state , Binary: clfs.sys
     AzD          1           96          0            0	UNKNOWN pooltag 'AzD ', please update pooltag.txt
     IPbq         1           96          0            0	UNKNOWN pooltag 'IPbq', please update pooltag.txt
     TDIv         6           96          0            0	TDI resource 
     hibr         1           96          1      1007616	UNKNOWN pooltag 'hibr', please update pooltag.txt
     Ksec         1           96          4        41552	Security device driver , Binary: ksecdd.sys
     LS2p         2           96          0            0	SMB2 provider , Binary: srv2.sys
     IU12         1           96          0            0	IIS Utility Driver 
     ScCi         1           96          0            0	Cached inquiry buffer , Binary: cdrom.sys
     RaPC         1           96          0            0	RaInitializeConfiguration storport!_PORT_CONFIGURATION_INFORMATION.AccessRanges , Binary: storport.sys
     TQoS         2           96          0            0	TL QoS Client Data , Binary: tcpip.sys
     FMcp         6           96          0            0	Client port wrapper structure , Binary: fltmgr.sys
     Rssg         1           92          0            0	UNKNOWN pooltag 'Rssg', please update pooltag.txt
     RaDA         1           92          0            0	Raw Socket Discretionary ACLs , Binary: tcpip.sys
     FxLi         3           88          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     L2Ti         2           85          0            0	ndis\l2tp / MTAG_UTIL 
     VSfl         2           80          0            0	UNKNOWN pooltag 'VSfl', please update pooltag.txt
     FbCx         4           80          0            0	Inet feature fallback contexts , Binary: tcpip.sys
     UlTE         4           80          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     InCo         2           80          0            0	Inet Compartment , Binary: tcpip.sys
     smHT         1           80          0            0	ReadyBoost allocations , Binary: nt!store or rdyboost.sys
     P9Rx         1           80          1           52	UNKNOWN pooltag 'P9Rx', please update pooltag.txt
     InWP         2           80          0            0	Inet Wake Port Record , Binary: tcpip.sys
     NDFC         2           80          0            0	UNKNOWN pooltag 'NDFC', please update pooltag.txt
     AzC          1           72          0            0	UNKNOWN pooltag 'AzC ', please update pooltag.txt
     FMac         9           72          0            0	ASCII String buffers , Binary: fltmgr.sys
     EQHb         1           72          0            0	EQoS HKE binding , Binary: tcpip.sys
     NDse         1           72          4          688	NDIS_TAG_SECURITY , Binary: ndis.sys
     UlKC         1           72          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     AzP          1           72          0            0	UNKNOWN pooltag 'AzP ', please update pooltag.txt
     Afd          1           72          0            0	AFD objects , Binary: afd.sys
     UxSH         1           68          0            0	UNKNOWN pooltag 'UxSH', please update pooltag.txt
     UxSC         1           66          0            0	UNKNOWN pooltag 'UxSC', please update pooltag.txt
     NDpn         2           65          0            0	NDIS_TAG_PARAMETER_NODE , Binary: ndis.sys
     VBUM         1           64          0            0	UNKNOWN pooltag 'VBUM', please update pooltag.txt
     IoCb         1           64          0            0	UNKNOWN pooltag 'IoCb', please update pooltag.txt
     Pcna         2           64          0            0	PACER Filter Network Addresses , Binary: pacer.sys
     PcLR         2           64          0            0	UNKNOWN pooltag 'PcLR', please update pooltag.txt
     NDcw         2           64          0            0	NDIS_TAG_PCW - NDIS Performance Counters , Binary: ndis.sys
     CuDr         1           64          0            0	UNKNOWN pooltag 'CuDr', please update pooltag.txt
     CcBr         1           64          0            0	Cache Manager Bitmap range , Binary: nt!cc
     Wngo         2           64          0            0	UNKNOWN pooltag 'Wngo', please update pooltag.txt
     PeFx         1           64          0            0	UNKNOWN pooltag 'PeFx', please update pooltag.txt
     RMcc         1           64          0            0	UNKNOWN pooltag 'RMcc', please update pooltag.txt
     Nbta         1           64          0            0	NetBT DPC , Binary: netbt.sys
     Wnf          1           64       6094      1039760	Windows Notification Facility , Binary: nt!wnf
     AzF2         1           56          0            0	UNKNOWN pooltag 'AzF2', please update pooltag.txt
     NDbi         1           56          0            0	NDIS_TAG_BUS_INTERFACE , Binary: ndis.sys
     ScFw         1           56          0            0	Mass storage driver tags 
     NDoc         1           56          0            0	NDIS_TAG_OPEN_CONTEXT , Binary: ndis.sys
     5520         1           56          0            0	UNKNOWN pooltag '5520', please update pooltag.txt
     ScLf         1           56          0            0	Fault prediction , Binary: classpnp.sys
     VfId         1           48          0            0	UNKNOWN pooltag 'VfId', please update pooltag.txt
     2LED         1           48          0            0	UNKNOWN pooltag '2LED', please update pooltag.txt
     RASw         2           48          0            0	UNKNOWN pooltag 'RASw', please update pooltag.txt
     NQoS         1           48          0            0	UNKNOWN pooltag 'NQoS', please update pooltag.txt
     AzC6         1           48          0            0	UNKNOWN pooltag 'AzC6', please update pooltag.txt
     IoSD         1           48          0            0	Io system device buffer , Binary: nt!io
     EQSc         1           48          0            0	EQoS pacer client , Binary: tcpip.sys
     MTXO         2           48          0            0	UNKNOWN pooltag 'MTXO', please update pooltag.txt
     SR..         1           48          0            0	UNKNOWN pooltag '  SR', please update pooltag.txt
     RaAE         1           48          0            0	UNKNOWN pooltag 'RaAE', please update pooltag.txt
     Nb37         1           42          0            0	NetBT lmhosts path , Binary: netbt.sys
     QDCC         1           40          5         4400	UNKNOWN pooltag 'QDCC', please update pooltag.txt
     Nsic         1           40          0            0	UNKNOWN pooltag 'Nsic', please update pooltag.txt
     UR..         1           40          0            0	UNKNOWN pooltag '  UR', please update pooltag.txt
     RaPD         1           40          0            0	RaidGetPortData storport!RaidpPortData , Binary: storport.sys
     RaAM         1           40          0            0	RaidAllocateAddressMapping storport!_MAPPED_ADDRESS , Binary: storport.sys
     WHvF         1           40          0            0	UNKNOWN pooltag 'WHvF', please update pooltag.txt
     DU12         1           39          0            0	UNKNOWN pooltag 'DU12', please update pooltag.txt
     UlSI         2           35          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     MPdD         1           32          0            0	UNKNOWN pooltag 'MPdD', please update pooltag.txt
     wdnd         1           32          0            0	UNKNOWN pooltag 'wdnd', please update pooltag.txt
     SePa         1           32          0            0	Process audit image names and captured policy structures , Binary: nt!se
     Wnds         1           32          0            0	UNKNOWN pooltag 'Wnds', please update pooltag.txt
     GCwi         1           32          0            0	UNKNOWN pooltag 'GCwi', please update pooltag.txt
     Clto         1           32          0            0	UNKNOWN pooltag 'Clto', please update pooltag.txt
     Acpi         1           32          0            0	ACPI generic data , Binary: acpi.sys
     @KMD         1           32          0            0	UNKNOWN pooltag '@KMD', please update pooltag.txt
     CcTp         1           32          0            0	UNKNOWN pooltag 'CcTp', please update pooltag.txt
     RaDR         1           32          0            0	RaidpBuildAdapterBusRelations storport!_DEVICE_RELATIONS , Binary: storport.sys
     UlPZ         1           32          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     NVPN         1           32          0            0	UNKNOWN pooltag 'NVPN', please update pooltag.txt
     IPpv         1           32          0            0	UNKNOWN pooltag 'IPpv', please update pooltag.txt
     FxL2         1           26          0            0	KMDF Loader Pool allocation , Binary: wdfldr.sys
     VsCs         1           26          0            0	Virtual Machine Network Switch Driver (configuration store) , Binary: vmswitch.sys
     UlWQ         1           24          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     Rssc         1           24          0            0	UNKNOWN pooltag 'Rssc', please update pooltag.txt
     PTPn         1           24          0            0	UNKNOWN pooltag 'PTPn', please update pooltag.txt
     PoEj         1           24          0            0	MTAG_HANDLECB , Binary: raspppoe.sys
     WanW         1           24          0            0	SHA Encryption 
     L2T4         1           24          0            0	ndis\l2tp / MTAG_VCTABLE 
     FLTR         1           24          0            0	UNKNOWN pooltag 'FLTR', please update pooltag.txt
     OIGd         1           24          0            0	UNKNOWN pooltag 'OIGd', please update pooltag.txt
     LfsI         1           24          0            0	Lfs allocations 
     PoEi         1           24          0            0	MTAG_HANDLETABLE , Binary: raspppoe.sys
     Fsrc         1           24          0            0	Filesystem recognizer (fsrec.sys) , Binary: fsrec.sys
     AVns         1           24          0            0	UNKNOWN pooltag 'AVns', please update pooltag.txt
     L2Ts         1           24          0            0	UNKNOWN pooltag 'L2Ts', please update pooltag.txt
     ScAD         1           20          0            0	Mass storage driver tags 
     ScCI         1           18          0            0	Sense info buffers , Binary: cdrom.sys
     ScDs         1           18          0            0	start device paths 
     Nb36         1           18          0            0	NetBT string , Binary: netbt.sys
     ETW          1           16          0            0	UNKNOWN pooltag 'ETW ', please update pooltag.txt
     UlCN         1           16          0            0	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     SeCL         4           16          0            0	Security CONTEXT_TAG , Binary: nt!se
     RI12         1           16          0            0	UNKNOWN pooltag 'RI12', please update pooltag.txt
     Ghtm         2           16          0            0	GDITAG_HMGR_TEMP , Binary: win32k.sys
     Ghml         2           16          0            0	GDITAG_HMGR_LOCK , Binary: win32k.sys
     FVEl         1           16          0            0	FVELIB allocations , Binary: fvevol.sys
     Nbtg         2            8          0            0	NetBT MDL buffer , Binary: netbt.sys
     ScCG         1            8          0            0	GESN buffer , Binary: cdrom.sys
     TcCo         1            8          0            0	TCP Compartment , Binary: tcpip.sys
     AzC2         1            8          0            0	UNKNOWN pooltag 'AzC2', please update pooltag.txt
     UMB.         1            8          0            0	UNKNOWN pooltag ' UMB', please update pooltag.txt
     BthS         1            8          0            0	Bluetooth port driver (security) , Binary: bthport.sys
     PTPc         1            8          0            0	UNKNOWN pooltag 'PTPc', please update pooltag.txt
     UdCo         1            8          0            0	UDP Compartment , Binary: tcpip.sys
     RaVM         1            4          0            0	UNKNOWN pooltag 'RaVM', please update pooltag.txt
     BSCa         1            2          0            0	UNKNOWN pooltag 'BSCa', please update pooltag.txt
     Nb03         1            1          0            0	NetBT remote name address cache , Binary: netbt.sys
     PdcI         0            0          1          376	PDC_INCLUSION_LIST_TAG , Binary: pdc.sys
     SeLs         0            0         35         4800	Security Logon Session , Binary: nt!se
     Vi61         0            0          3           96	Video memory manager context alloc , Binary: dxgmms2.sys
     SeSs         0            0        170       317888	Shared Sids , Binary: nt!se
     CMpi         0            0        353        20640	Internal Configuration manager allocations , Binary: nt!cm
     CMci         0            0          4          256	Internal Configuration manager allocations , Binary: nt!cm
     FxL5         0            0          1          120	KMDF Loader Pool allocation , Binary: wdfldr.sys
     Ppsu         0            0        385        30960	plug-and-play subroutines for the I/O system , Binary: nt!pnp
     Vi11         0            0         42         6048	Video memory manager process heap block , Binary: dxgmms2.sys
     Vi01         0            0        424       217088	Video memory manager global alloc , Binary: dxgmms2.sys
     KSat         0            0          2           56	UNKNOWN pooltag 'KSat', please update pooltag.txt
     CM85         0            0        194        55456	Internal Configuration manager allocations , Binary: nt!cm
     CM45         0            0          3          144	Internal Configuration manager allocations , Binary: nt!cm
     VrfU         0            0          2          112	UNKNOWN pooltag 'VrfU', please update pooltag.txt
     FatC         0            0          4          320	Fat Ccbs , Binary: fastfat.sys
     NtfC         0            0        241        50128	CCB , Binary: ntfs.sys
     Vi13         0            0        144        39640	Video memory manager process adapter info , Binary: dxgmms2.sys
     UlCH         0            0         14         1648	Config Group Tree Header , Binary: http.sys
     Vi53         0            0         53       558560	Video memory manager page table , Binary: dxgmms2.sys
     UlCJ         0            0          5         2840	Config Group Object Pool , Binary: http.sys
     NtFC         0            0       2486       327918	Create.c , Binary: ntfs.sys
     MPat         0            0         12          384	UNKNOWN pooltag 'MPat', please update pooltag.txt
     Wnpi         0            0          1           40	UNKNOWN pooltag 'Wnpi', please update pooltag.txt
     SePr         0            0          5          240	Security Privilege Set , Binary: nt!se
     TMcf         0            0          1          184	TOKENMANAGER_COMPOSITIONFRAME , Binary: dxgkrnl!CCompositionFrame::Crea
     CM16         0            0       5343     24989696	Internal Configuration manager allocations , Binary: nt!cm
     CM74         0            0         21         1008	Internal Configuration manager allocations , Binary: nt!cm
     CM26         0            0         17       208896	Internal Configuration manager allocations , Binary: nt!cm
     MPdr         0            0        138        24288	UNKNOWN pooltag 'MPdr', please update pooltag.txt
     AcpX         0            0          2          162	ACPI translation data , Binary: acpi.sys
     CMSN         0            0          1           42	Internal Configuration manager allocations , Binary: nt!cm
     EMpr         0            0         13          864	UNKNOWN pooltag 'EMpr', please update pooltag.txt
     Etwd         0            0          1         1472	Etw Disallow List Entry , Binary: nt!etw
     KLRG         0            0          3          244	UNKNOWN pooltag 'KLRG', please update pooltag.txt
     TMsg         0            0          2          704	TOKENMANAGER_SESSIONGLOBAL , Binary: dxgkrnl!CreateSessionTokenManag
     PnpD         0            0         38         4256	UNKNOWN pooltag 'PnpD', please update pooltag.txt
     FatB         0            0          1         8208	Fat allocation bitmaps , Binary: fastfat.sys
     Vi12         0            0       2221       440048	Video memory manager process heap alloc , Binary: dxgmms2.sys
     Vi02         0            0        430        44720	Video memory manager local alloc , Binary: dxgmms2.sys
     BFlD         0            0          8          576	UNKNOWN pooltag 'BFlD', please update pooltag.txt
     NtFB         0            0         21        47208	BitmpSup.c , Binary: ntfs.sys
     SeAt         0            0      12304      1251872	Security Attributes , Binary: nt!se
     MPpX         0            0        144        28800	UNKNOWN pooltag 'MPpX', please update pooltag.txt
     Mpus         0            0        286        40916	UNKNOWN pooltag 'Mpus', please update pooltag.txt
     CM           0            0          3          272	Configuration Manager (registry) , Binary: nt!cm
     PnpC         0            0         34         3808	PNPMGR target device notify , Binary: nt!pnp
     NtfE         0            0        471       173328	INDEX_CONTEXT , Binary: ntfs.sys
     VStr         0            0        196        16492	String buffer allocated by the Driver Verifier version of Rtl String APIs , Binary: nt!Vf
     AtmT         0            0         10        18560	Atom tables 
     Vi5b         0            0          1           80	Video memory manager partition , Binary: dxgmms2.sys
     EXSP         0            0          1           48	UNKNOWN pooltag 'EXSP', please update pooltag.txt
     AlHa         0            0       1391       207312	ALPC port handle table , Binary: nt!alpc
     CM7          0            0        169         8112	Internal Configuration manager allocations , Binary: nt!cm
     MmSm         0            0       9632       616448	segments used to map data files , Binary: nt!mm
     Pdig         0            0          1           48	UNKNOWN pooltag 'Pdig', please update pooltag.txt
     TxTb         0            0          9          288	UNKNOWN pooltag 'TxTb', please update pooltag.txt
     BtSS         0            0          3          374	UNKNOWN pooltag 'BtSS', please update pooltag.txt
     TunP         0            0         10         2640	Tunnel cache oddsized pool-allocated elements 
     BGIK         0            0          1       503808	UNKNOWN pooltag 'BGIK', please update pooltag.txt
     KSdi         0            0          3          120	UNKNOWN pooltag 'KSdi', please update pooltag.txt
     PcSb         0            0         24          143	UNKNOWN pooltag 'PcSb', please update pooltag.txt
     LBpn         0            0          4          256	Paged Name 
     krew         0            0          1           48	UNKNOWN pooltag 'krew', please update pooltag.txt
     cbuf         0            0          2           96	UNKNOWN pooltag 'cbuf', please update pooltag.txt
     CMRm         0            0          6          960	Configuration Manager Resource Manager Tag , Binary: nt!cm
     Fatx         0            0          6          336	Fat delayed close contexts , Binary: fastfat.sys
     LBbn         0            0          2          174	Name 
     Toke         0            0       2769      4921728	Token objects , Binary: nt!se
     PDA2         0            0          2          528	UNKNOWN pooltag 'PDA2', please update pooltag.txt
     SeSp         0            0          2          176	Scoped Policy , Binary: nt!se
     AfdX         0            0         90        16496	Afd context buffer , Binary: afd.sys
     CM89         0            0          2          192	Internal Configuration manager allocations , Binary: nt!cm
     CM19         0            0          8        74304	Internal Configuration manager allocations , Binary: nt!cm
     CM39         0            0        840       375552	Internal Configuration manager allocations , Binary: nt!cm
     CM29         0            0         77       946176	Internal Configuration manager allocations , Binary: nt!cm
     Mpon         0            0          6          644	UNKNOWN pooltag 'Mpon', please update pooltag.txt
     MPvn         0            0          7          432	UNKNOWN pooltag 'MPvn', please update pooltag.txt
     MPpn         0            0          4          620	UNKNOWN pooltag 'MPpn', please update pooltag.txt
     WmDS         0            0         92        13248	Wmi DataSource chunks 
     WmIS         0            0       1275       142800	Wmi InstanceSet chunks 
     RRle         0            0       1012        80960	RTL_RANGE_LIST_ENTRY_TAG 
     NtFf         0            0          3           48	FsCtrl.c , Binary: ntfs.sys
     MPdn         0            0        414        26714	UNKNOWN pooltag 'MPdn', please update pooltag.txt
     UlCD         0            0          5          320	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     MPgn         0            0          4          392	UNKNOWN pooltag 'MPgn', please update pooltag.txt
     ArbR         0            0         42         1504	ARBITER_RANGE_LIST_TAG , Binary: nt!arb
     Dire         0            0         63        30208	Directory objects 
     ClMp         0            0         39         1158	UNKNOWN pooltag 'ClMp', please update pooltag.txt
     SWdr         0            0          8         1572	device reference 
     SWbr         0            0          7         1032	bus reference 
     CM28         0            0          2        16384	Internal Configuration manager allocations , Binary: nt!cm
     CM18         0            0          4        32768	Internal Configuration manager allocations , Binary: nt!cm
     FIcs         0            0      14229      2504304	FileInfo FS-filter Stream Context , Binary: fileinfo.sys
     PfET         0            0          2       172032	Pf Entry info tables , Binary: nt!pf
     Vi20         0            0         15         2856	Video memory manager commitment info , Binary: dxgmms2.sys
     AlCI         0            0       1388       199872	ALPC communication info , Binary: nt!alpc
     TMcc         0            0          1           48	TOKENMANAGER_COMPOSITIONFRAMECOLLECTION , Binary: dxgkrnl!CCompositionFrameCollec
     TMac         0            0          3          288	TOKENMANAGER_ADAPTER , Binary: dxgkrnl!CAdapter::Create
     Ener         0            0          2         1472	UNKNOWN pooltag 'Ener', please update pooltag.txt
     AlSc         0            0        150        21600	ALPC section , Binary: nt!alpc
     PReb         0            0          1          128	UNKNOWN pooltag 'PReb', please update pooltag.txt
     PnpG         0            0         32         4160	PNPMGR generic , Binary: nt!pnp
     CLIP         0            0         69        28694	UNKNOWN pooltag 'CLIP', please update pooltag.txt
     mltr         0            0          1         1280	UNKNOWN pooltag 'mltr', please update pooltag.txt
     NtfF         0            0       7153     11101456	FCB_INDEX , Binary: ntfs.sys
     FMrs         0            0          1          124	Registry string , Binary: fltmgr.sys
     WCaa         0            0          1         4112	UNKNOWN pooltag 'WCaa', please update pooltag.txt
     FMus         0            0          2           14	Unicode string , Binary: fltmgr.sys
     NpFs         0            0          1           72	Client security context , Binary: npfs.sys
     WmMR         0            0         12          960	Wmi MofResouce chunks 
     PNet         0            0          1           48	UNKNOWN pooltag 'PNet', please update pooltag.txt
     rtPi         0            0          1         2176	UNKNOWN pooltag 'rtPi', please update pooltag.txt
     Vi5c         0            0          1        11792	Video memory manager partition adapter info , Binary: dxgmms2.sys
     PcPc         0            0          3          192	WDM audio stuff 
     PcwI         0            0         70         5040	PCW counter set Instance , Binary: nt!pcw
     ClfO         0            0          1         4112	CLFS Log zero page , Binary: clfs.sys
     Symt         0            0        325        28048	Symbolic link target strings 
     Txsa         0            0          5         1920	Txf sorted array item , Binary: ntfs.sys
     PnpH         0            0          1           48	PNPMGR service name , Binary: nt!pnp
     MPCp         0            0         41        10000	UNKNOWN pooltag 'MPCp', please update pooltag.txt
     ObHd         0            0        484        47040	object handle count data base , Binary: nt!ob
     MPTp         0            0        138         4356	UNKNOWN pooltag 'MPTp', please update pooltag.txt
     CM27         0            0         38        12000	Internal Configuration manager allocations , Binary: nt!cm
     CM17         0            0         16       196608	Internal Configuration manager allocations , Binary: nt!cm
     UlCE         0            0         27         4648	Config Group Tree Entry , Binary: http.sys
     NvMC         0            0          1         1448	UNKNOWN pooltag 'NvMC', please update pooltag.txt
     WPAO         0            0         16          512	Basic Render Opened Allocation , Binary: BasicRender.sys
     PdcP         0            0          5         8864	PDC_PORT_TAG , Binary: pdc.sys
     CM10         0            0         25       121200	Internal Configuration manager allocations , Binary: nt!cm
     CM20         0            0         10        65536	Internal Configuration manager allocations , Binary: nt!cm
     Ntfo         0            0       5620       890034	SCB_INDEX normalized named buffer , Binary: ntfs.sys
     NvLR         0            0          2        21440	nVidia video driver , Binary: <nvlddmkm.sys>
     Afdt         0            0          6          616	Afd transport address buffer , Binary: afd.sys
     NtMo         0            0         25       136230	mount.c , Binary: ntfs.sys
     Vi18         0            0         24         7680	Video memory manager pool block , Binary: dxgmms2.sys
     UlCP         0            0          1         1088	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     NtFU         0            0       1262       399416	usnsup.c , Binary: ntfs.sys
     PnpZ         0            0       6359      1036720	PNPMGR data model , Binary: nt!pnp
     WARB         0            0          2          352	UNKNOWN pooltag 'WARB', please update pooltag.txt
     Symb         0            0        332        50272	Symbolic link objects 
     MmFr         0            0        822        39456	ASLR fixup records , Binary: nt!mm
     CAMC         0            0          3          540	UNKNOWN pooltag 'CAMC', please update pooltag.txt
     DxgP         0            0        132        57024	UNKNOWN pooltag 'DxgP', please update pooltag.txt
     PfNL         0            0          1       360448	Pf Name logging buffers , Binary: nt!pf
     CMCI         0            0          1           32	Internal Configuration manager allocations , Binary: nt!cm
     Fatn         0            0         13          289	Fat filename buffer , Binary: fastfat.sys
     CMSc         0            0       2186       889200	security cache pooltag , Binary: nt!cm
     NtfM         0            0         14          896	NTFS_MCB_ENTRY , Binary: ntfs.sys
     NDAg         0            0          1         8272	NDIS_PD_GLOBAL , Binary: ndis.sys
     CSMb         0            0          4         2592	COMPOSITIONSURFACEMANAGER_BUFFER , Binary: dxgkrnl!CCompositionBuffer::Cre
     PcwC         0            0         69        10488	PCW Counter set , Binary: nt!pcw
     Vi37         0            0          6        49248	Video memory manager DMA buffer global alloc table , Binary: dxgmms2.sys
     NDbg         0            0          1           56	UNKNOWN pooltag 'NDbg', please update pooltag.txt
     Vi57         0            0          8      1097792	Video memory manager PDE array , Binary: dxgmms2.sys
     HD01         0            0          1          112	UNKNOWN pooltag 'HD01', please update pooltag.txt
     PcwQ         0            0         18         1784	PCW Query item , Binary: nt!pcw
     NtFd         0            0        471        33576	DirCtrl.c , Binary: ntfs.sys
     MuSp         0            0          1          154	UNKNOWN pooltag 'MuSp', please update pooltag.txt
     FLfl         0            0         38         4256	exported (non-private) file lock 
     letw         0            0          1          192	UNKNOWN pooltag 'letw', please update pooltag.txt
     CMcb         0            0          1           96	Internal Configuration manager allocations , Binary: nt!cm
     CMNb         0            0       2770       196208	Configuration Manager Name Tag , Binary: nt!cm
     WDIs         0            0          4        16384	UNKNOWN pooltag 'WDIs', please update pooltag.txt
     PfFK         0            0      14215       682320	Pf RpContext FileKeyHashEntry , Binary: nt!pf
     ToBi         0            0          1           28	UNKNOWN pooltag 'ToBi', please update pooltag.txt
     CMpb         0            0        949        91104	registry post blocks , Binary: nt!cm
     CMnb         0            0       1012       113344	registry notify blocks , Binary: nt!cm
     AlEB         0            0        154        41632	UNKNOWN pooltag 'AlEB', please update pooltag.txt
     CMkb         0            0       4979      1672944	registry key control blocks , Binary: nt!cm
     FSim         0            0      11341      1633104	File System Run Time Mcb allocations , Binary: nt!fsrtl
     CSMr         0            0          4          288	COMPOSITIONSURFACEMANAGER_REALIZATION , Binary: dxgkrnl!CBufferRealization::Cre
     NpFC         0            0          2           48	ROOT_DCB CCB , Binary: npfs.sys
     IoNm         0            0       7083      1184848	Io parsing names , Binary: nt!io
     PSet         0            0        681        64736	UNKNOWN pooltag 'PSet', please update pooltag.txt
     Vi09         0            0        132        35904	Video memory manager process , Binary: dxgmms2.sys
     Vi19         0            0         24          576	Video memory manager pool block array , Binary: dxgmms2.sys
     Vi49         0            0        496        63152	Video memory manager GPU VA , Binary: dxgmms2.sys
     PCol         0            0          2          752	Thermal cooling requests and extensions , Binary: nt!po
     PnpW         0            0        810        98320	PNPMGR SwDevice , Binary: nt!pnp
     PsSl         0            0          1          144	UNKNOWN pooltag 'PsSl', please update pooltag.txt
     PcwR         0            0         44         7832	PCW provider Registration , Binary: nt!pcw
     PWQT         0            0         16         2624	UNKNOWN pooltag 'PWQT', please update pooltag.txt
     PdcN         0            0          2          128	PDC_NOTIFICATION_TAG, NOTIFICATION_CLIENT_TAG , Binary: pdc.sys
     MuUn         0            0          5          728	UNC provider , Binary: mup.sys
     Pdcc         0            0          2          144	UNKNOWN pooltag 'Pdcc', please update pooltag.txt
     CMca         0            0          1           32	Internal Configuration manager allocations , Binary: nt!cm
     Txtr         0            0          3         1368	TXF_TRANS (Txf transaction context) , Binary: ntfs.sys
     FSel         0            0          4          192	File System Run Time Extra Create Parameter List , Binary: nt!fsrtl
     CMCa         0            0         51       375056	Configuration Manager Cache (registry) , Binary: nt!cm
     Ppin         0            0          3          288	plug-and-play initialization , Binary: nt!pnp
     Vi45         0            0          1           72	Video memory manager CPU host aperture , Binary: dxgmms2.sys
     Vi25         0            0          3       196608	Video memory manager DMA buffer patch location list , Binary: dxgmms2.sys
     UlPS         0            0         14          784	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     ClfH         0            0          9         1584	CLFS Log I/O control block lookaside list , Binary: clfs.sys
     MmVt         0            0          3         2656	Verifier thunk allocations , Binary: nt!mm
     Lfs          0            0         33        16368	Lfs allocations 
     PdcS         0            0          7          448	PDC_SUSPRES_TAG , Binary: pdc.sys
     MmSt         0            0      12813     39607136	Mm section object prototype ptes , Binary: nt!mm
     VmRb         0            0          1        16400	Raw record buffers , Binary: volmgrx.sys
     LBpt         0            0          2         1060	Paged transport 
     KSau         0            0          7        12504	UNKNOWN pooltag 'KSau', please update pooltag.txt
     NtSr         0            0          1           68	srsup.c , Binary: ntfs.sys
     PmTE         0            0          5          360	Partition Manager table entry , Binary: partmgr.sys
     EtwP         0            0         19         2992	Etw Pool , Binary: nt!etw
     AtmA         0            0        893       107840	Atoms 
     Citm         0            0          1          216	UNKNOWN pooltag 'Citm', please update pooltag.txt
     CM73         0            0         21         1008	Internal Configuration manager allocations , Binary: nt!cm
     MmSg         0            0          1           96	Mm segments , Binary: nt!mm
     NvRN         0            0          6          144	UNKNOWN pooltag 'NvRN', please update pooltag.txt
     EMst         0            0        150         9888	UNKNOWN pooltag 'EMst', please update pooltag.txt
     Ntce         0            0       4650       409200	CLOSE_ENTRY , Binary: ntfs.sys
     MPst         0            0         32         1536	UNKNOWN pooltag 'MPst', please update pooltag.txt
     EMit         0            0        759        72512	UNKNOWN pooltag 'EMit', please update pooltag.txt
     Vi14         0            0         11         6256	Video memory manager process commitment info , Binary: dxgmms2.sys
     Vi54         0            0         45      3236400	Video memory manager PTE array , Binary: dxgmms2.sys
     krpc         0            0         80        30144	NTOS midl_user_allocate , Binary: nt
     CM32         0            0         23        94208	Internal Configuration manager allocations , Binary: nt!cm
     FatW         0            0          1           24	Fat FAT windowing structure , Binary: fastfat.sys
     HSTI         0            0          1           32	UNKNOWN pooltag 'HSTI', please update pooltag.txt
     FMfn         0            0      25004     11307008	NAME_CACHE_NODE structure , Binary: fltmgr.sys
     TMlt         0            0          3         6336	TOKENMANAGER_LEGACYTOKENBUFFER , Binary: dxgkrnl!CTokenManager::EnsureLe
     KArr         0            0        117         4152	UNKNOWN pooltag 'KArr', please update pooltag.txt
     PfCH         0            0          2        33856	Pf Allocations , Binary: nt!pf
     PfFH         0            0          1        65536	Pf RpContext FileKeyHash buckets , Binary: nt!pf
     RvaL         0            0       1922      5717184	UNKNOWN pooltag 'RvaL', please update pooltag.txt
     Strg         0            0        123        11360	Dynamic Translated strings 
     BPtL         0            0         52         4576	UNKNOWN pooltag 'BPtL', please update pooltag.txt
     bsdf         0            0          1          192	UNKNOWN pooltag 'bsdf', please update pooltag.txt
     D2d          0            0          7          512	Device Object to DosName rtns (ntos\rtl\dev2dos.c) 
     AlVi         0            0        288        46080	ALPC view , Binary: nt!alpc
     MPih         0            0        138         3480	UNKNOWN pooltag 'MPih', please update pooltag.txt
     MmRe         0            0       2168     19398400	ASLR relocation blocks , Binary: nt!mm
     IoSi         0            0         17         6688	Io Symbolic Links , Binary: nt!io
     ObSq         0            0         21        16848	object security descriptors (query) , Binary: nt!ob
     Dxgk         0            0         10         1920	UNKNOWN pooltag 'Dxgk', please update pooltag.txt
     MPbh         0            0          3         3504	UNKNOWN pooltag 'MPbh', please update pooltag.txt
     FxLe         0            0          3          374	KMDF Loader Pool allocation , Binary: wdfldr.sys
     Clpc         0            0          1          224	UNKNOWN pooltag 'Clpc', please update pooltag.txt
     ArbL         0            0         44        11680	ARBITER_ORDERING_LIST_TAG , Binary: nt!arb
     Vi46         0            0          1        14352	Video memory manager CPU host aperture page , Binary: dxgmms2.sys
     Vi56         0            0          8          320	Video memory manager page directory , Binary: dxgmms2.sys
     HD20         0            0          1           16	UNKNOWN pooltag 'HD20', please update pooltag.txt
     Txte         0            0          3          144	TXF_RMCB_TABLE_ENTRY , Binary: ntfs.sys
     CMVe         0            0          2          272	Internal Configuration manager allocations , Binary: nt!cm
     CmSe         0            0          1           48	UNKNOWN pooltag 'CmSe', please update pooltag.txt
     MPtB         0            0          1         1024	UNKNOWN pooltag 'MPtB', please update pooltag.txt
     Ntfs         0            0          9         5472	SCB_DATA , Binary: ntfs.sys
     PcSi         0            0        116        80424	UNKNOWN pooltag 'PcSi', please update pooltag.txt
     PcwO         0            0         32         6320	UNKNOWN pooltag 'PcwO', please update pooltag.txt
     PRCx         0            0         14         1968	UNKNOWN pooltag 'PRCx', please update pooltag.txt
     CM11         0            0          2         8192	Internal Configuration manager allocations , Binary: nt!cm
     ScC1         0            0          1          112	Registry path buffer , Binary: classpnp.sys
     ClfI         0            0          9       626688	CLFS Log marshal buffer lookaside list , Binary: clfs.sys
     PcDi         0            0         15          840	WDM audio stuff 
     ReRe         0            0          1          132	UNKNOWN pooltag 'ReRe', please update pooltag.txt
     Sect         0            0       2797       445072	Section objects 
     MmRi         0            0          4        69568	UNKNOWN pooltag 'MmRi', please update pooltag.txt
     Obtb         0            0        565      1731552	object tables via EX handle.c , Binary: nt!ob
     StSp         0            0         32         4880	UNKNOWN pooltag 'StSp', please update pooltag.txt
     Pdct         0            0          6         2856	UNKNOWN pooltag 'Pdct', please update pooltag.txt
     MPb1         0            0          4          512	UNKNOWN pooltag 'MPb1', please update pooltag.txt
     NtFI         0            0        365        47672	IndexSup.c , Binary: ntfs.sys
     MSum         0            0         60       245760	UNKNOWN pooltag 'MSum', please update pooltag.txt
     CdCl         0            0          2           80	UNKNOWN pooltag 'CdCl', please update pooltag.txt
     Pnp9         0            0          4          384	PNPMGR HW profile notify , Binary: nt!pnp
     SeAk         0            0        112         5680	Security Account Name , Binary: nt!se
     PNPS         0            0          1           80	UNKNOWN pooltag 'PNPS', please update pooltag.txt
     MPrK         0            0          6          802	UNKNOWN pooltag 'MPrK', please update pooltag.txt
     CMBC         0            0          2        11668	Internal Configuration manager allocations , Binary: nt!cm
     ObDi         0            0       2412       115776	object directory , Binary: nt!ob
     Pnpd         0            0        116         6240	UNKNOWN pooltag 'Pnpd', please update pooltag.txt
     MPte         0            0         30         1440	UNKNOWN pooltag 'MPte', please update pooltag.txt
     ArbA         0            0         21       140720	ARBITER_ALLOCATION_STATE_TAG , Binary: nt!arb
     KSce         0            0         64         2620	create item entry 
     PoSL         0            0          2           64	Power shutdown event list 
     KSbe         0            0        259         9728	UNKNOWN pooltag 'KSbe', please update pooltag.txt
     KSle         0            0          1           56	UNKNOWN pooltag 'KSle', please update pooltag.txt
     MDTR         0            0          1     32931840	UNKNOWN pooltag 'MDTR', please update pooltag.txt
     FIcp         0            0          6          672	FileInfo FS-filter Extra Create Parameter , Binary: fileinfo.sys
     TmRr         0            0          9          216	Tm KTM_RESTART_RECORD , Binary: nt!tm
     BatM         0            0          1          110	Control method battery driver 
     Txrm         0            0          3        27168	TXF_RMCB , Binary: ntfs.sys
     AlRr         0            0        152        17024	ALPC resource reserves , Binary: nt!Alpc
     MPnd         0            0          4          128	UNKNOWN pooltag 'MPnd', please update pooltag.txt
     MPsd         0            0          3           96	UNKNOWN pooltag 'MPsd', please update pooltag.txt
     D2G          0            0          1          128	UNKNOWN pooltag 'D2G ', please update pooltag.txt
     Key          0            0       3853       984928	Key objects 
     MntA         0            0         27         2676	UNKNOWN pooltag 'MntA', please update pooltag.txt
     CmEv         0            0          1           32	UNKNOWN pooltag 'CmEv', please update pooltag.txt
     RtDF         0            0          4         3536	UNKNOWN pooltag 'RtDF', please update pooltag.txt
     BFlL         0            0         30         2880	UNKNOWN pooltag 'BFlL', please update pooltag.txt
     CMBB         0            0          3        12288	Internal Configuration manager allocations , Binary: nt!cm
     PsQt         0            0          1          784	UNKNOWN pooltag 'PsQt', please update pooltag.txt
     IoFs         0            0          1           48	Io shutdown packet , Binary: nt!io
     KHsh         0            0          1           64	UNKNOWN pooltag 'KHsh', please update pooltag.txt
     PcSt         0            0         21         5480	WDM audio stuff 
     AlMs         0            0       1648       819072	ALPC message , Binary: nt!alpc
     AtmL         0            0         60         3840	UNKNOWN pooltag 'AtmL', please update pooltag.txt
     WPAL         0            0         16         3584	Basic Render Allocation , Binary: BasicRender.sys
     MPrg         0            0          1          144	UNKNOWN pooltag 'MPrg', please update pooltag.txt
     MPrM         0            0          1       196608	UNKNOWN pooltag 'MPrM', please update pooltag.txt
     Rtds         0            0          6         1734	UNKNOWN pooltag 'Rtds', please update pooltag.txt
     FMQc         0            0          4          896	QueryOnCreate ECP structure , Binary: fltmgr.sys
     SWda         0            0          7          336	POOLTAG_DEVICE_ASSOCIATION 
     VCdc         0            0          2         2376	UNKNOWN pooltag 'VCdc', please update pooltag.txt
     NpFc         0            0         77        35728	CCB, client control block , Binary: npfs.sys
     Ntf0         0            0       9657       413664	General pool allocation , Binary: ntfs.sys
     ClMn         0            0          9         1736	UNKNOWN pooltag 'ClMn', please update pooltag.txt
     UlHT         0            0          1         2048	Hash Table , Binary: http.sys
     NDBG         0            0          1          104	UNKNOWN pooltag 'NDBG', please update pooltag.txt
     TEE8         0            0          2           80	UNKNOWN pooltag 'TEE8', please update pooltag.txt
     MiSn         0            0       3394       253920	UNKNOWN pooltag 'MiSn', please update pooltag.txt
     PSes         0            0          1           32	UNKNOWN pooltag 'PSes', please update pooltag.txt
     BamK         0            0        143       134094	UNKNOWN pooltag 'BamK', please update pooltag.txt
     SeTd         0            0       2769       431344	Security Token dynamic part , Binary: nt!se
     HsUs         0            0          1           70	UNKNOWN pooltag 'HsUs', please update pooltag.txt
     UEFI         0            0          1           56	UNKNOWN pooltag 'UEFI', please update pooltag.txt
     NtFa         0            0         20         3200	AllocSup.c , Binary: ntfs.sys
     MuPN         0            0          4           78	UNKNOWN pooltag 'MuPN', please update pooltag.txt
     PcUs         0            0          2          144	WDM audio stuff 
     LSSL         0            0          3          248	SMBLIB allocation , Binary: srv2.sys
     Gi2c         0            0          2           80	GDITAG_DDCCI , Binary: win32k.sys
     Keye         0            0          1         1664	UNKNOWN pooltag 'Keye', please update pooltag.txt
     VReg         0            0          1          272	UNKNOWN pooltag 'VReg', please update pooltag.txt
     BPtD         0            0         17          952	UNKNOWN pooltag 'BPtD', please update pooltag.txt
     BPSD         0            0          2           48	UNKNOWN pooltag 'BPSD', please update pooltag.txt
     MBOe         0            0          6          726	UNKNOWN pooltag 'MBOe', please update pooltag.txt
     MPdb         0            0          1         2048	UNKNOWN pooltag 'MPdb', please update pooltag.txt
     FIvn         0            0          5          216	FileInfo FS-filter Volume Name , Binary: fileinfo.sys
     FIcn         0            0          3          720	FileInfo FS-filter Create Retry Path , Binary: fileinfo.sys
     RTar         0            0          1         4624	UNKNOWN pooltag 'RTar', please update pooltag.txt
     AppX         0            0          5          136	UNKNOWN pooltag 'AppX', please update pooltag.txt
     Pp           0            0        553       240544	UNKNOWN pooltag 'Pp  ', please update pooltag.txt
     AcpI         0            0         54       119072	ACPI irp data , Binary: acpi.sys
     MPgb         0            0          1          100	UNKNOWN pooltag 'MPgb', please update pooltag.txt
     MPsb         0            0          1         1024	UNKNOWN pooltag 'MPsb', please update pooltag.txt
     DbgP         0            0          1           32	UNKNOWN pooltag 'DbgP', please update pooltag.txt
     SeHc         0            0          7          448	UNKNOWN pooltag 'SeHc', please update pooltag.txt
     ClfA         0            0         35         4480	CLFS Log container lookaside list , Binary: clfs.sys
     SeAc         0            0         10         1200	Security ACL , Binary: nt!se
     PfLB         0            0          8       262144	Pf Log buffers , Binary: nt!pf
     SeSc         0            0         14         1280	Captured Security Descriptor , Binary: nt!se
     ObDm         0            0          7          672	object device map , Binary: nt!ob
     ObNm         0            0       2441       189664	object names , Binary: nt!ob
     TVEP         0            0          1          288	UNKNOWN pooltag 'TVEP', please update pooltag.txt
     KSEa         0            0        225        25200	UNKNOWN pooltag 'KSEa', please update pooltag.txt
     RxNc         0            0          1         2048	RDBSS name cache , Binary: rdbss.sys
     FMdh         0            0          2          224	Paged ECP context for targeted create reparse , Binary: fltmgr.sys
     UlCX         0            0          5          640	tags. Note: In-use tags are of the form "Ul??" or "Uc??".and   Free tags are of the form "uL??" or "uC??"; , Binary: http.sys
     MPsc         0            0       5982      2297088	UNKNOWN pooltag 'MPsc', please update pooltag.txt
     CIcr         0            0       6333     34499524	Code Integrity allocations for image integrity checking , Binary: ci.dll
     MSeg         0            0       3071       481136	segments used to support image files , Binary: nt!mm
     MiRr         0            0        290      1335600	UNKNOWN pooltag 'MiRr', please update pooltag.txt
     SLS          0            0         12         1744	UNKNOWN pooltag 'SLS ', please update pooltag.txt
     CMhp         0            0         24         2560	Internal Configuration manager allocations , Binary: nt!cm
     Ntfm         0            0          2          704	NTFS_MCB_ARRAY , Binary: ntfs.sys
     NtFm         0            0          3        24624	Ntfs MFT View Ref Counter Arrays , Binary: ntfs.sys
     NtfS         0            0          9         6696	SCB_INDEX , Binary: ntfs.sys
     SeFS         0            0          2           96	Security File System Notify Context , Binary: nt!se
     NtFS         0            0       1231       366916	SecurSup.c , Binary: ntfs.sys
     NVap         0            0          1         3856	UNKNOWN pooltag 'NVap', please update pooltag.txt
     Urtm         0            0          2           32	USERTAG_ROTMGR , Binary: win32kfull!InitRotationManager
     ARFT         0            0          2          128	UNKNOWN pooltag 'ARFT', please update pooltag.txt
     WmGE         0            0        269        47344	Wmi GuidEntry chunks 
     EP..         0            0          3          186	UNKNOWN pooltag '  EP', please update pooltag.txt
     ObFl         0            0          2          400	UNKNOWN pooltag 'ObFl', please update pooltag.txt
     SilM         0            0         11         1152	UNKNOWN pooltag 'SilM', please update pooltag.txt
     PAVl         0            0         11          704	UNKNOWN pooltag 'PAVl', please update pooltag.txt
     PcFp         0            0          6         5040	WDM audio stuff 
     PsTp         0            0          4          128	Thread termination port block , Binary: nt!ps
     ObSc         0            0       1730       754160	Object security descriptor cache block , Binary: nt!ob
     SWid         0            0          7          546	device ID 
     Se           0            0        123         8736	General security allocations , Binary: nt!se
     DfCo         0            0          1          128	DFS Client allocations , Binary: dfsc.sys
     Lx           0            0          3          128	UNKNOWN pooltag 'Lx  ', please update pooltag.txt
     MPhc         0            0       5699       911840	UNKNOWN pooltag 'MPhc', please update pooltag.txt
     MPbc         0            0          2           64	UNKNOWN pooltag 'MPbc', please update pooltag.txt
     AlRe         0            0        148        23680	ALPC section region , Binary: nt!alpc
     Ntfl         0            0         13         2808	LCB , Binary: ntfs.sys
     PdcC         0            0         32         1792	PDC_CLIENT_PORT_TAG , Binary: pdc.sys
    Much of the pool consumes the NVIDIA graphics card driver. Of course, the problem may also be a program using the NVIDIA graphics card, however, we have some clue. On the consumer list, we also see a tag associated with the ntfs.sys driver, so maybe this troublesome program was using the disk excessively. However, it's a good idea to update your graphics card driver - Download Drivers | NVIDIA
    Code:
    0: kd> lmvm nvlddmkm
    Browse full module list
    start             end                 module name
    fffff80c`b0850000 fffff80c`b1c7a000   nvlddmkm   (deferred)             
        Image path: \SystemRoot\System32\DriverStore\FileRepository\nvaci.inf_amd64_3a28859ceb44fcc2\nvlddmkm.sys
        Image name: nvlddmkm.sys
        Browse all global symbols  functions  data
        Timestamp:        Tue Apr  9 13:38:51 2019 (5CAC844B)
        CheckSum:         013D18E1
        ImageSize:        0142A000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
        Information from resource tables:
      My Computer


  5. Posts : 36
    Windows 10
    Thread Starter
       #5

    Hello MrPepka,

    Thank you so much for the reply! What I wanted to say was that my Nvidia drivers are at the latest version, and that they have been on this version for some time now. So could a problem suddenly have occured in the driver? I'll still try uninstalling the driver to see if that helps.

    Cheers,
    inf1425

    - - - Updated - - -

    Just wondering, but could it also be that the Nvidia driver doesn't play well with my Japanese locale? I recently changed it to Japanese from English-US.
      My Computer


  6. Posts : 1,231
    Windows 8.1 Enterprise x64
       #6

    As I mentioned earlier, it could be some program that excessively uses a graphics card. Does the language in the system matter? In my opinion no, but different things are in IT and everything is possible.
      My Computer


  7. Posts : 36
    Windows 10
    Thread Starter
       #7

    My system language is English, I have only changed the locale as some programs I use refuse to run in a non-Japanese locale.
    After uninstalling the driver, it still BSOD'd with the same "CRITICAL_PROCESS_DIED" error. I was not running any GPU intensive software (I don't think I was using my GPU at all), and it crashed barely 5 minutes from startup. Should I send the new memory dump?
      My Computer


  8. Posts : 1,231
    Windows 8.1 Enterprise x64
       #8

    Yes, send new memory dump
      My Computer


  9. Posts : 36
    Windows 10
    Thread Starter
       #9

    New dump: MEMORY.7z - Google Drive
    (I compressed it as 7z this time so the download size is smaller)
      My Computer


  10. Posts : 1,231
    Windows 8.1 Enterprise x64
       #10

    Enable Driver Verifier with all standard settings and 2 additional settings (force pending i/o request and irp logging) but to verify tick all 3rd party drivers and 1 Microsoft driver (ntoskrnl.exe)
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 00:21.
Find Us




Windows 10 Forums