BSOD ntoskrnl.exe

zbook · 05 Mar 2018

The memory dump was able to be downloaded.
However three times it displayed CRC failed: MEMORY error.
Maybe Ztrucker can open it.

The bugchecks for the past 2 months have been:
7E
109
12B (2/4 and 2/10) This is a hardware memory error.

1) Upgrade the BIOS: BIOS Version/Date Alienware 1.3.12, 7/28/2017 SMBIOS Version 2.8

Support for Alienware 17 R3 | Drivers & downloads | Dell US

Dell Alienware 15R2/17R3 System BIOS
BIOS 06 Feb 2018
Importance: Urgent
Version: 1.4.4 ,1.4.4 Older versions
Release Date: 06 Feb 2018
File Name: Alienware_15R2_17R3_1.4.4.EXE
File size: 8.8 MB
Description: Dell Alienware 15R2/17R3 System BIOS

2) In the left lower corner search type: system > open system control panel > on the left pane click advanced system settings > under startup and recovery > click settings > under system failure > un-check automatically restart > make sure write debugging information is set to automatic memory dump

3) Open administrative command prompt and type or copy and paste:
chkdsk /x /f /r C:
This may take many hours so plan to run overnight.

C:\Windows\system32>chkdsk /x /f /r
The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: Y
reboot

4) Use the information in this link to find the chkdsk report in the event viewer. Copy and paste > notepad > save to desktop > post into the thread
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Tutorials

5) Open file explorer > this PC > C: > in the right upper corner search for:
win32kbase.sys
win32kbase.sys-20180227-0953.dmp
Only save, zip, and use share links for dump files
This file is large > zip > upload to one drive or drop box > post share link into the thread

6) The computer has 2 graphics cards:
IGPU Intel HD Graphics 530
DGPU Nvidia GeForce GTX 970M
Look in the BIOS and owners manual for an option to turn off Optimus and only use the Nvidia GPU.
If you are able to find this option please set it so that the Optimus is off.
Then test the Nvidia GPU with Furmark:
Aim for 1 hour testing.
Record the highest temperature and the test duration.
Read this link for the warnings about aborting the test due to: temperature, freezing, display artifacts etc,
FurMark - GPU Stress Test Windows 10 Tutorials

7) After completing the test on the Nvidia GPU > turn on Optimus > test Intel GPU using Furmark
Aim for 1 hour testing.
Record the highest temperature and the test duration.
Read this link for the warnings about aborting the test due to: temperature, freezing, display artifacts, etc.
FurMark - GPU Stress Test Windows 10 Tutorials

Code:

Event[890]:  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2018-02-11T23:58:22.920
  Event ID: 98
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: ALIENWARE-17R3
  Description: 
Volume C: (\Device\HarddiskVolume3) requires an Online Scan.  An Online Scan will automatically run as part of the next scheduled maintenance task.  Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.

Code:

3/4/2018 3:37 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff80397efd2a0
P4: ffff8185c4b09a78
P5: ffff8185c4b092c0
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\030318-10468-01.dmp
\\?\C:\WINDOWS\TEMP\WER-23359-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAD.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DCE.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_fd5e3519d9ed9537bc7e3526a219368f83fad8_00000000_cab_1cc07ec5

Analysis symbol: 
Rechecking for solution: 0
Report Id: be823210-af16-4730-8753-1c88776b17d9
Report Status: 2049
Hashed bucket:3/4/2018 3:37 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff80397efd2a0
P4: ffff8185c4b09a78
P5: ffff8185c4b092c0
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\030318-10468-01.dmp
\\?\C:\WINDOWS\TEMP\WER-23359-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAD.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DCE.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_fd5e3519d9ed9537bc7e3526a219368f83fad8_00000000_03e07dcb

Analysis symbol: 
Rechecking for solution: 0
Report Id: be823210-af16-4730-8753-1c88776b17d9
Report Status: 4
Hashed bucket:

Code:

2/27/2018 2:55 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a39fc95b7d92c4f2
P3: 0
P4: 60e609e81b34c726
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\022618-8281-01.dmp
\\?\C:\WINDOWS\TEMP\WER-64921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295E.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER299E.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_109_1581d45de07cda19628d221b2b96beef893e58f_00000000_cab_06212b70

Analysis symbol: 
Rechecking for solution: 0
Report Id: 26e51295-6f01-4a0c-abfb-8e8d744545e5
Report Status: 2049
Hashed bucket:2/27/2018 2:55 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a39fc95b7d92c4f2
P3: 0
P4: 60e609e81b34c726
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\022618-8281-01.dmp
\\?\C:\WINDOWS\TEMP\WER-64921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295E.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER299E.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_109_1581d45de07cda19628d221b2b96beef893e58f_00000000_03dd29ab

Analysis symbol: 
Rechecking for solution: 0
Report Id: 26e51295-6f01-4a0c-abfb-8e8d744545e5
Report Status: 4
Hashed bucket:

Code:

2/4/2018 5:06 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: 847
P4: 1aa68f0
P5: ffffaa8164986000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020318-10656-01.dmp
\\?\C:\WINDOWS\TEMP\WER-55921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE46.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE57.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE77.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_d06a1014d2107947e92359185567c722d0f1e489_00000000_cab_3f990829

Analysis symbol: 
Rechecking for solution: 0
Report Id: 82e614d1-1b1d-4add-a057-4c34f957a456
Report Status: 2049
Hashed bucket:2/4/2018 5:06 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: 847
P4: 1aa68f0
P5: ffffaa8164986000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020318-10656-01.dmp
\\?\C:\WINDOWS\TEMP\WER-55921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE46.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE57.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE77.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_d06a1014d2107947e92359185567c722d0f1e489_00000000_03d4fe74

Analysis symbol: 
Rechecking for solution: 0
Report Id: 82e614d1-1b1d-4add-a057-4c34f957a456
Report Status: 4
Hashed bucket:
1/4/2018 9:51 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: b84
P4: 6af96d0
P5: ffff98009acab000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010418-8468-01.dmp
\\?\C:\WINDOWS\TEMP\WER-31750-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER855D.tmp.WERInternalMetadata.xml

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_92c96b9f55f514b5678a4d6e5a8039bf365e890_00000000_cab_198888e6

Analysis symbol: 
Rechecking for solution: 0
Report Id: 1fcece54-b999-4dff-a7d7-4e050cc4b085
Report Status: 2049
Hashed bucket:

Code:

2/10/2018 4:01 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: f24
P4: 7df1e30
P5: ffffbf816ec2c000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020918-8500-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16531-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA8.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FB9.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_fc9c71f2f23d2bc0d3a6bdfdc7a8bb1589fe7cf9_00000000_cab_28d86afe

Analysis symbol: 
Rechecking for solution: 0
Report Id: 46acd521-e1eb-4cef-8fa1-34f20e3a3be0
Report Status: 2049
Hashed bucket:2/10/2018 3:44 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: f24
P4: 7df1e30
P5: ffffbf816ec2c000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020918-8500-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16531-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA8.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FB9.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_fc9c71f2f23d2bc0d3a6bdfdc7a8bb1589fe7cf9_00000000_03d84fb6

Analysis symbol: 
Rechecking for solution: 0
Report Id: 46acd521-e1eb-4cef-8fa1-34f20e3a3be0
Report Status: 4
Hashed bucket:

Ztruker · 07 Mar 2018

I can open the MEMORY.DMP, it's a SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e).

DPS shows

Code:

ffff8185`c4b06628  fffff80b`4b80ff98*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
 igdkmd64+0x11ff98

igdkmd64.sys file is a software component of Intel Graphics Accelerator Drivers from Intel.

That's all I see in the dump.

radji · 08 Mar 2018

Wow. I did not realize I had multiple BSODs in the past couple months. I updated the BIOS and the Intel GPU drivers. I also made the recommended changes to the system failure settings and will be running chkdisk over the weekend. I cannot disable Optimus. Alienware does not give that option. I will have to see how the newer drivers and BIOS work and if I get anymore BSODs.

radji · 26 Mar 2018

Had another faulty hardware corrupted page BSOD tonight. Attached is the log collector files. Also the win32kbase.sys. Could not find any win32k dump files on the C Drive. Ran chkdsk and DISM.exe scanhealth. Neither one showed any abnormalities. Updated my BIOS per recommendation as well as the Intel GPU and Nvidia GPU drivers.

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 3/26/2018 1:31:43 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: ALIENWARE-17R3
Description:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

Stage 1: Examining basic file system structure ...
1190144 file records processed.

File verification completed.
19622 large file records processed.

0 bad file records processed.

Stage 2: Examining file name linkage ...
437 reparse records processed.

1355180 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered to lost and found.

437 reparse records processed.

Stage 3: Examining security descriptors ...
Cleaning up 3184 unused index entries from index $SII of file 0x9.
Cleaning up 3184 unused index entries from index $SDH of file 0x9.
Cleaning up 3184 unused security descriptors.
Security descriptor verification completed.
82519 data files processed.

CHKDSK is verifying Usn Journal...
35741416 USN bytes processed.

Usn Journal verification completed.

Stage 4: Looking for bad clusters in user file data ...
1190128 files processed.

File data verification completed.

Stage 5: Looking for bad, free clusters ...
36889778 free clusters processed.

Free space verification is complete.

Windows has scanned the file system and found no problems.
No further action is required.

242235391 KB total disk space.
93029464 KB in 362183 files.
342316 KB in 82520 indexes.
0 KB in bad sectors.
1304495 KB in use by the system.
65536 KB occupied by the log file.
147559116 KB available on disk.

4096 bytes in each allocation unit.
60558847 total allocation units on disk.
36889779 allocation units available on disk.

Internal Info:
00 29 12 00 2a c9 06 00 eb 8d 0d 00 00 00 00 00 .)..*...........
63 01 00 00 52 00 00 00 00 00 00 00 00 00 00 00 c...R...........

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-03-26T08:31:43.307119000Z" />
<EventRecordID>19644</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>ALIENWARE-17R3</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

Stage 1: Examining basic file system structure ...
1190144 file records processed.

File verification completed.
19622 large file records processed.

0 bad file records processed.

Stage 2: Examining file name linkage ...
437 reparse records processed.

1355180 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered to lost and found.

437 reparse records processed.

Stage 3: Examining security descriptors ...
Cleaning up 3184 unused index entries from index $SII of file 0x9.
Cleaning up 3184 unused index entries from index $SDH of file 0x9.
Cleaning up 3184 unused security descriptors.
Security descriptor verification completed.
82519 data files processed.

CHKDSK is verifying Usn Journal...
35741416 USN bytes processed.

Usn Journal verification completed.

Stage 4: Looking for bad clusters in user file data ...
1190128 files processed.

File data verification completed.

Stage 5: Looking for bad, free clusters ...
36889778 free clusters processed.

Free space verification is complete.

Windows has scanned the file system and found no problems.
No further action is required.

242235391 KB total disk space.
93029464 KB in 362183 files.
342316 KB in 82520 indexes.
0 KB in bad sectors.
1304495 KB in use by the system.
65536 KB occupied by the log file.
147559116 KB available on disk.

4096 bytes in each allocation unit.
60558847 total allocation units on disk.
36889779 allocation units available on disk.

Internal Info:
00 29 12 00 2a c9 06 00 eb 8d 0d 00 00 00 00 00 .)..*...........
63 01 00 00 52 00 00 00 00 00 00 00 00 00 00 00 c...R...........

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

zbook · 26 Mar 2018

There was 1 BSOD mini dump file and when debugged it displayed bugcheck 12B.
This bugcheck is for hardware problems and can sometimes occur due to antivirus software.
The bugchecks in the logs have been:
7E
109
12B
1A
D1
1) See if you can find a kernel memory dump: win32kbase.sys-20180321-0751.dmp > zip > post a share link
It is 1.8 GB and may take a long time to upload and download.
2) There was also a memory dump: C:\WINDOWS\MEMORY.DMP > zip > post a share link
It is 1.3 GB and may take a long time to upload and download.

3) Uninstall Kaspersky using the applicable uninstall tool:
Removal tool for Kaspersky Lab products (kavremover)

4) Turn on Windows defender
5) Please wait 2 weeks or more before reinstalling Kaspersky.
The greater the time period the better for evaluating cause and effect.
If there is a BSOD when Kaspersky is reinstalled then find alternative AV software.
If there is no BSOD when Kaspersky is reinstalled then you can continue using the AV software.

Code:

12/30/2017 5:48 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff801ebea390e
P4: fffff98e9c509af8
P5: fffff98e9c509340
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122917-10593-01.dmp
\\?\C:\WINDOWS\TEMP\WER-19921-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER61D7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER61D8.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER61E9.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_5503b5e23d6a03dd4f5e4e6d99794cd608a68_00000000_cab_246474c2

Analysis symbol: 
Rechecking for solution: 0
Report Id: bea47a1f-f8dc-4260-957c-032194832a2c
Report Status: 2049
Hashed bucket:12/30/2017 5:48 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff801ebea390e
P4: fffff98e9c509af8
P5: fffff98e9c509340
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\122917-10593-01.dmp
\\?\C:\WINDOWS\TEMP\WER-19921-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER61D7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER61D8.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER61E9.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_5503b5e23d6a03dd4f5e4e6d99794cd608a68_00000000_030c61f6

Analysis symbol: 
Rechecking for solution: 0
Report Id: bea47a1f-f8dc-4260-957c-032194832a2c
Report Status: 4
Hashed bucket:3/4/2018 3:37 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff80397efd2a0
P4: ffff8185c4b09a78
P5: ffff8185c4b092c0
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\030318-10468-01.dmp
\\?\C:\WINDOWS\TEMP\WER-23359-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAD.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DCE.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_fd5e3519d9ed9537bc7e3526a219368f83fad8_00000000_cab_1cc07ec5

Analysis symbol: 
Rechecking for solution: 0
Report Id: be823210-af16-4730-8753-1c88776b17d9
Report Status: 2049
Hashed bucket:3/4/2018 3:37 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff80397efd2a0
P4: ffff8185c4b09a78
P5: ffff8185c4b092c0
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\030318-10468-01.dmp
\\?\C:\WINDOWS\TEMP\WER-23359-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DAD.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7DCE.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_fd5e3519d9ed9537bc7e3526a219368f83fad8_00000000_03e07dcb

Analysis symbol: 
Rechecking for solution: 0
Report Id: be823210-af16-4730-8753-1c88776b17d9
Report Status: 4
Hashed bucket:12/9/2017 10:05 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff806b0aa4a50
P4: fffffa020dcaf5d8
P5: fffffa020dcaee20
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\120917-15765-01.dmp
\\?\C:\WINDOWS\TEMP\WER-65656-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1662.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1663.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1693.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_e6e9b3056b46a44b36cebfdd43b9d395883ac_00000000_cab_19412238

Analysis symbol: 
Rechecking for solution: 0
Report Id: 902214f5-1b0f-4fd4-9a36-7528106e339e
Report Status: 2049
Hashed bucket:12/9/2017 10:05 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff806b0aa4a50
P4: fffffa020dcaf5d8
P5: fffffa020dcaee20
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\120917-15765-01.dmp
\\?\C:\WINDOWS\TEMP\WER-65656-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1662.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1663.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1693.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_e6e9b3056b46a44b36cebfdd43b9d395883ac_00000000_030d1690

Analysis symbol: 
Rechecking for solution: 0
Report Id: 902214f5-1b0f-4fd4-9a36-7528106e339e
Report Status: 4
Hashed bucket:2/27/2018 2:55 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a39fc95b7d92c4f2
P3: 0
P4: 60e609e81b34c726
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\022618-8281-01.dmp
\\?\C:\WINDOWS\TEMP\WER-64921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295E.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER299E.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_109_1581d45de07cda19628d221b2b96beef893e58f_00000000_cab_06212b70

Analysis symbol: 
Rechecking for solution: 0
Report Id: 26e51295-6f01-4a0c-abfb-8e8d744545e5
Report Status: 2049
Hashed bucket:2/27/2018 2:55 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a39fc95b7d92c4f2
P3: 0
P4: 60e609e81b34c726
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\022618-8281-01.dmp
\\?\C:\WINDOWS\TEMP\WER-64921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295E.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER295F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER299E.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_109_1581d45de07cda19628d221b2b96beef893e58f_00000000_03dd29ab

Analysis symbol: 
Rechecking for solution: 0
Report Id: 26e51295-6f01-4a0c-abfb-8e8d744545e5
Report Status: 4
Hashed bucket:12/12/2017 5:11 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a39fd9e24aef44ef
P3: 0
P4: c75070da26576bb5
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\121117-9093-01.dmp
\\?\C:\WINDOWS\TEMP\WER-20562-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6021.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6031.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6060.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_109_d8bf7f15a5253ce3ffb878ef0eae7e371fd54db_00000000_cab_2c186282

Analysis symbol: 
Rechecking for solution: 0
Report Id: c8f8e678-0016-4678-9d97-de3351583308
Report Status: 2049
Hashed bucket:12/12/2017 5:11 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a39fd9e24aef44ef
P3: 0
P4: c75070da26576bb5
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\121117-9093-01.dmp
\\?\C:\WINDOWS\TEMP\WER-20562-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6021.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6031.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6060.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_109_d8bf7f15a5253ce3ffb878ef0eae7e371fd54db_00000000_030c605f

Analysis symbol: 
Rechecking for solution: 0
Report Id: c8f8e678-0016-4678-9d97-de3351583308
Report Status: 4
Hashed bucket:11/26/2017 8:21 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a3a025e05308b55d
P3: 0
P4: b2a22dff6ee1c1b7
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\112617-9578-01.dmp
\\?\C:\WINDOWS\TEMP\WER-29406-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9914.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9925.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9945.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_109_f9f79b83c0dcde8a80c7697d75bb4c87af5d_00000000_cab_302ca4ac

Analysis symbol: 
Rechecking for solution: 0
Report Id: 032398d9-b206-4458-9132-855df0ec606e
Report Status: 2049
Hashed bucket:11/26/2017 8:21 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 109
P2: a3a025e05308b55d
P3: 0
P4: b2a22dff6ee1c1b7
P5: 101
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\112617-9578-01.dmp
\\?\C:\WINDOWS\TEMP\WER-29406-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9914.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9925.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9945.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_109_f9f79b83c0dcde8a80c7697d75bb4c87af5d_00000000_03d49942

Analysis symbol: 
Rechecking for solution: 0
Report Id: 032398d9-b206-4458-9132-855df0ec606e
Report Status: 4
Hashed bucket:2/4/2018 5:06 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: 847
P4: 1aa68f0
P5: ffffaa8164986000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020318-10656-01.dmp
\\?\C:\WINDOWS\TEMP\WER-55921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE46.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE57.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE77.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_d06a1014d2107947e92359185567c722d0f1e489_00000000_cab_3f990829

Analysis symbol: 
Rechecking for solution: 0
Report Id: 82e614d1-1b1d-4add-a057-4c34f957a456
Report Status: 2049
Hashed bucket:2/4/2018 5:06 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: 847
P4: 1aa68f0
P5: ffffaa8164986000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020318-10656-01.dmp
\\?\C:\WINDOWS\TEMP\WER-55921-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE46.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE57.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE77.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_d06a1014d2107947e92359185567c722d0f1e489_00000000_03d4fe74

Analysis symbol: 
Rechecking for solution: 0
Report Id: 82e614d1-1b1d-4add-a057-4c34f957a456
Report Status: 4
Hashed bucket:3/26/2018 7:46 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: 938
P4: 660e5f0
P5: ffffc780421cd000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\032618-20140-01.dmp
\\?\C:\WINDOWS\TEMP\WER-39500-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD53.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD64.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD84.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_b9bfa6f113e19dddc4c8dc3e1f7fd442d454b55e_00000000_cab_3244e743

Analysis symbol: 
Rechecking for solution: 0
Report Id: b55f8880-0d83-4cb0-8241-4bd1e36bae40
Report Status: 2049
Hashed bucket:3/26/2018 7:46 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: 938
P4: 660e5f0
P5: ffffc780421cd000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\032618-20140-01.dmp
\\?\C:\WINDOWS\TEMP\WER-39500-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD53.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD64.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD84.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_b9bfa6f113e19dddc4c8dc3e1f7fd442d454b55e_00000000_03f4cd91

Analysis symbol: 
Rechecking for solution: 0
Report Id: b55f8880-0d83-4cb0-8241-4bd1e36bae40
Report Status: 4
Hashed bucket:3/18/2018 6:04 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: a94
P4: 8a83840
P5: ffffd2003fde9000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\031718-14625-01.dmp
\\?\C:\WINDOWS\TEMP\WER-66031-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BBF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BD0.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BFF.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_d67ea3bf7fa7f5159a8978e3faf288e614e5_00000000_cab_1a892e9c

Analysis symbol: 
Rechecking for solution: 0
Report Id: 439a9de1-b04e-453c-9032-db22fb1f72f0
Report Status: 2049
Hashed bucket:3/18/2018 6:04 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: a94
P4: 8a83840
P5: ffffd2003fde9000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\031718-14625-01.dmp
\\?\C:\WINDOWS\TEMP\WER-66031-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BBF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BD0.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BFF.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_d67ea3bf7fa7f5159a8978e3faf288e614e5_00000000_03e52c0c

Analysis symbol: 
Rechecking for solution: 0
Report Id: 439a9de1-b04e-453c-9032-db22fb1f72f0
Report Status: 4
Hashed bucket:1/4/2018 9:51 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: b84
P4: 6af96d0
P5: ffff98009acab000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\010418-8468-01.dmp
\\?\C:\WINDOWS\TEMP\WER-31750-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER855D.tmp.WERInternalMetadata.xml

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_92c96b9f55f514b5678a4d6e5a8039bf365e890_00000000_cab_198888e6

Analysis symbol: 
Rechecking for solution: 0
Report Id: 1fcece54-b999-4dff-a7d7-4e050cc4b085
Report Status: 2049
Hashed bucket:12/8/2017 9:55 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: c19
P4: 441b620
P5: ffffce8142e61000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\120817-8937-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16906-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4ECC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4ECD.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4EDE.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_5f66a2f2945e1e58769624e0b985318571656234_00000000_cab_09c850a0

Analysis symbol: 
Rechecking for solution: 0
Report Id: 79a9ef89-16d8-4d7a-a12f-0c35c4cf07ae
Report Status: 2049
Hashed bucket:12/8/2017 9:55 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: c19
P4: 441b620
P5: ffffce8142e61000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\120817-8937-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16906-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4ECC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4ECD.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4EDE.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_5f66a2f2945e1e58769624e0b985318571656234_00000000_03144edb

Analysis symbol: 
Rechecking for solution: 0
Report Id: 79a9ef89-16d8-4d7a-a12f-0c35c4cf07ae
Report Status: 4
Hashed bucket:12/13/2017 3:03 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: da6
P4: 55ca3e0
P5: ffffde8064cac000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\121217-8015-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16125-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5BEB.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5BFA.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5C0B.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_dd35b5913f3ff0d7d3ca853658669b3730f43981_00000000_cab_18ac5cb6

Analysis symbol: 
Rechecking for solution: 0
Report Id: a02e5e8d-7323-4837-83f7-0d0a6ad6d118
Report Status: 2049
Hashed bucket:12/13/2017 3:03 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: da6
P4: 55ca3e0
P5: ffffde8064cac000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\121217-8015-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16125-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5BEB.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5BFA.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5C0B.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_dd35b5913f3ff0d7d3ca853658669b3730f43981_00000000_03045c0a

Analysis symbol: 
Rechecking for solution: 0
Report Id: a02e5e8d-7323-4837-83f7-0d0a6ad6d118
Report Status: 4
Hashed bucket:2/10/2018 4:01 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: f24
P4: 7df1e30
P5: ffffbf816ec2c000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020918-8500-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16531-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA8.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FB9.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_fc9c71f2f23d2bc0d3a6bdfdc7a8bb1589fe7cf9_00000000_cab_28d86afe

Analysis symbol: 
Rechecking for solution: 0
Report Id: 46acd521-e1eb-4cef-8fa1-34f20e3a3be0
Report Status: 2049
Hashed bucket:2/10/2018 3:44 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: f24
P4: 7df1e30
P5: ffffbf816ec2c000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\020918-8500-01.dmp
\\?\C:\WINDOWS\TEMP\WER-16531-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FA8.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER4FB9.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_fc9c71f2f23d2bc0d3a6bdfdc7a8bb1589fe7cf9_00000000_03d84fb6

Analysis symbol: 
Rechecking for solution: 0
Report Id: 46acd521-e1eb-4cef-8fa1-34f20e3a3be0
Report Status: 4
Hashed bucket:3/13/2018 8:17 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: f78
P4: f09e5a0
P5: ffffb88160700000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\031318-19656-01.dmp
\\?\C:\WINDOWS\TEMP\WER-32000-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7D9.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7DA.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7FB.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_12b_dde25f4dbf9d64be0edb015aebc533fb13e7e_00000000_cab_1b48afb8

Analysis symbol: 
Rechecking for solution: 0
Report Id: bd4569f1-fdfd-4b17-9740-13432b069ca2
Report Status: 2049
Hashed bucket:3/13/2018 8:17 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 12b
P2: ffffffffc00002c4
P3: f78
P4: f09e5a0
P5: ffffb88160700000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\031318-19656-01.dmp
\\?\C:\WINDOWS\TEMP\WER-32000-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7D9.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7DA.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7FB.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_12b_dde25f4dbf9d64be0edb015aebc533fb13e7e_00000000_03e4a7f8

Analysis symbol: 
Rechecking for solution: 0
Report Id: bd4569f1-fdfd-4b17-9740-13432b069ca2
Report Status: 4
Hashed bucket:11/29/2017 4:28 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1a
P2: 41792
P3: ffff820075b6a810
P4: 1004100000
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\112817-10406-01.dmp
\\?\C:\WINDOWS\TEMP\WER-17953-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER52F2.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5311.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5312.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_28bb12d14f4cb09d7fdcb026b97682b04631a79b_00000000_cab_189853ec

Analysis symbol: 
Rechecking for solution: 0
Report Id: a30c46bf-8f53-4a57-aee0-86c3bb188266
Report Status: 2049
Hashed bucket:11/29/2017 4:28 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1a
P2: 41792
P3: ffff820075b6a810
P4: 1004100000
P5: 0
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\112817-10406-01.dmp
\\?\C:\WINDOWS\TEMP\WER-17953-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER52F2.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5311.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5312.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_28bb12d14f4cb09d7fdcb026b97682b04631a79b_00000000_03145311

Analysis symbol: 
Rechecking for solution: 0
Report Id: a30c46bf-8f53-4a57-aee0-86c3bb188266
Report Status: 4
Hashed bucket:11/27/2017 1:51 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: d1
P2: 1004100000
P3: 2
P4: 8
P5: 1004100000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\112617-9546-01.dmp
\\?\C:\WINDOWS\TEMP\WER-56890-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF8F6.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF934.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF955.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_d1_dec65273eab5c728ee385fba6d83ab8a15596f4_00000000_cab_29acf9f0

Analysis symbol: 
Rechecking for solution: 0
Report Id: 5a88f006-4916-44e9-bef9-11ea06f79b97
Report Status: 2049
Hashed bucket:11/27/2017 1:51 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: d1
P2: 1004100000
P3: 2
P4: 8
P5: 1004100000
P6: 10_0_16299
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\112617-9546-01.dmp
\\?\C:\WINDOWS\TEMP\WER-56890-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF8F6.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF934.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF955.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_d1_dec65273eab5c728ee385fba6d83ab8a15596f4_00000000_03e0f954

Analysis symbol: 
Rechecking for solution: 0
Report Id: 5a88f006-4916-44e9-bef9-11ea06f79b97
Report Status: 4
Hashed bucket:

philc43 · 26 Mar 2018

Has anyone reviewed whether overclocking is causing a problem? My guess: the Turbo Boost setting is activated and is kicking in. Turbo Boost can take it to 3500Hz maximum so you are actually OK

Code:

Processor Version             Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
  Processor Voltage             8bh - 1.1V
  External Clock                100MHz
  Max Speed                     2600MHz
  Current Speed                 3100MHz

Generally Intel turbo boost technology works well and only speeds things up when it is safe to do so but perhaps with your system it is causing problems. Try turning it off (in BIOS) and see if it makes a difference.

It is also possible that your memory ~~speed~~ frequency is set too high. Memory spec is DDR4 2133Hz for this CPU. I think yours is set at 2400Hz. Try reducing it.

radji · 27 Mar 2018

Thank you. I will reduce the RAM clock speed and deactivate Turbo Boost. I have also uninstalled Kaspersky. I could not find any dump files. I searched the entire C drive for *.dmp files with none turning up.

philc43 · 27 Mar 2018

radji said:

Thank you. I will reduce the RAM clock speed and deactivate Turbo Boost. I have also uninstalled Kaspersky. I could not find any dump files. I searched the entire C drive for *.dmp files with none turning up.

If you find the reduced memory clock frequency and no Turbo Boost helps you can then try turning Turbo Boost back on since the memory clock might be the main factor causing your crashes.

radji · 28 Mar 2018

Was able to deactivate Turbo Boost. But there is no option on the BIOS to change the clock speed of the RAM.

Here is the memory dump: MEMORY.DMP - Google Drive

philc43 · 28 Mar 2018

It will be listed under the RAM section, and may be shown as Memory frequency. Usually it is set on Auto.