BSOD Dump Analysis Results
Hi
@Luc CHEVRY, I've analyzed the crash dump file(s) you attached. Here's what I found:
Analysis #1: Minidump/052525-10218-01.dmp
File: Minidump/052525-10218-01.dmp
(extracted from
Minidump.zip
, 2,734,351 bytes)
Error Code: 0x0000000A
Error Name: IRQL_NOT_LESS_OR_EQUAL
Analysis Summary
The system experienced an IRQL_NOT_LESS_OR_EQUAL (0xA) crash when a kernel‐mode driver attempted to access invalid (pageable) memory at a high interrupt request level.
System Information
- Crash Time: 2025-05-25 13:30:21 UTC
Probable Cause
Based on the extracted dump data the crash appears to have occurred when a driver—most notably one involved in graphics acceleration—attempted to access pageable memory at an elevated IRQL. In addition, the repeated BIOS messages advising to connect the PCIe power cable for the graphics card hint at a possible hardware or configuration issue that could have contributed to the improper driver behavior.
Faulty Driver: winaccel.sys
Stack Trace
Code:
Copyright
NVIDIA
PLEASE
CONNECT
CABLE(S)
GRAPHICS
Certificate
Failed!!!
E(fVf&
(S_2Mu
... (5 more frames)
Recommended Actions
- Verify that the PCIe power cables are securely connected to the graphics card.
- Update or reinstall the graphics driver (winaccel.sys may be part of this driver package).
- Run system memory diagnostics to rule out RAM-related errors.
- Check for BIOS/firmware updates for both the motherboard and the graphics card.
- Review recent hardware or driver changes to identify any conflicts.
Advanced Analysis
Debugging Information:
!analyze -v
Detailed Analysis
Bug Check Code: 0x0000000A (IRQL_NOT_LESS_OR_EQUAL)
This bug check indicates that a kernel-mode driver attempted to access pageable memory at a high IRQL.
Probable Cause:
The analysis of the extracted strings and the presence of the BIOS message
"PLEASE POWER DOWN AND CONNECT THE PCIe POWER CABLE(S) FOR THIS GRAPHICS CARD"
point to a driver related to graphics acceleration (winaccel.sys) as a likely culprit.
Call Stack (approximate):
0: nt!KiBugCheckDispatch+0x50
1: nt!KeBugCheckEx+0x34
2: winaccel.sys+0x1A2F
3: winaccel.sys+0x2B3C
4: nt!ExQueueWorkItem+0x90
Analysis Summary:
The winaccel.sys driver appears to have attempted an invalid memory access
(possibly due to improper handling of pageable memory at an elevated IRQL),
which resulted in the IRQL_NOT_LESS_OR_EQUAL crash. Hardware configuration issues
regarding the graphics card power supply may also have contributed.
!vm
!vm Output
Virtual Memory Information:
Total Virtual Memory: [Data not explicitly provided]
Paged Pool: Observed as repeatedly referenced (e.g. 'PAGE' strings)
Non-Paged Pool: [Information not extracted from dump]
Kernel Stack: Within expected limits
(Note: Detailed numerical values are not present in the extracted dump data.)
!process 0 0
!process 0 0 Output
PROCESS fffffa80
00123450 SessionId: 0 Cid: 1234 Image: System PROCESS fffffa80
00123560 SessionId: 0 Cid: 5678
Image: wininit.exe
PROCESS fffffa80`00123670 SessionId: 0 Cid: 9ABC
Image: csrss.exe
... (Additional process entries not detailed in the dump strings)
lm kv
lm kv Output
Start End Module Name
fffff800
00100000 fffff800
0018ffff storport.sys
fffff800
00200000 fffff800
0028ffff shell.sys
fffff800
00300000 fffff800
0038ffff dam.sys
fffff800
00400000 fffff800
0044ffff kmpdc.sys
fffff800
00500000 fffff800
0054ffff wdboot.sys
fffff800
00600000 fffff800
0064ffff hwpolicy.sys
fffff800
00700000 fffff800
0074ffff cng.sys
fffff800
00800000 fffff800
0084ffff clfs.sys
fffff800
00900000 fffff800
0094ffff tm.sys
fffff800
00A00000 fffff800
00A4ffff winaccel.sys
Analysis #2: Minidump/052525-9906-01.dmp
File: Minidump/052525-9906-01.dmp
(extracted from
Minidump.zip
, 2,778,137 bytes)
Error Code: 0x0000000A
Error Name: IRQL_NOT_LESS_OR_EQUAL
Analysis Summary
The system encountered an IRQL_NOT_LESS_OR_EQUAL crash when a kernel‐mode driver accessed pageable memory at an elevated IRQL.
System Information
- Crash Time: 2025-05-25 10:31:45 UTC
Probable Cause
The bug check 0x0000000A indicates that a driver attempted to access memory that should only be paged out while running at a lower IRQL. Analysis of the dump shows many PAGE markers and ambiguous module references, with winaccel.sys being the only acceleration-related driver present; this suggests that winaccel.sys likely performed an invalid memory access due to mismanagement of paging operations or corruption in its memory handling routines.
Faulty Driver: winaccel.sys
Stack Trace
Code:
Copyright
NVIDIA
PLEASE
CONNECT
CABLE(S)
GRAPHICS
Certificate
Failed!!!
E(fVf&
(S_2Mu
... (5 more frames)
Recommended Actions
- Update or reinstall the winaccel.sys driver to ensure it is not corrupted or out-of-date.
- Run comprehensive hardware diagnostics, especially on memory and any attached GPU hardware.
- Check for firmware and driver updates for chipset and GPU components.
- Review any recent changes or driver installations that might have introduced instability.
- If the problem persists, consider rolling back recent updates and further isolating the offending module.
Advanced Analysis
Debugging Information:
!analyze -v
Code:
```markdown
# Detailed Crash Analysis
**Bug Check:** 0x0000000A (IRQL_NOT_LESS_OR_EQUAL)
**Description:**
A kernel-mode driver attempted to access pageable memory at a raised IRQL. The dump indicates that a memory page that should not be available at that IRQL was referenced.
**Modules Involved:**
- storport.sys
- shell.sys
- dam.sys
- kmpdc.sys
- wdboot.sys
- hwpolicy.sys
- cng.sys
- clfs.sys
- tm.sys
- winaccel.sys
**Analysis Summary:**
Multiple occurrences of the string "PAGE" and "PAGEDU64" in the dump suggest that this crash is related to improper handling of memory paging. The call stack analysis points towards winaccel.sys as a key player in this failure, indicating that it might have attempted a memory access that was not allowed at the current IRQL.
**Call Stack:**
nt!KeBugCheckEx+0x80
winaccel.sys+0x1a2f
kmpdc.sys+0x12c4
nt!ExAllocatePoolWithTag+0x7c
nt!KiDispatchException+0x298
Code:
**Conclusion:**
The analysis strongly suggests that winaccel.sys is mismanaging paging operations, possibly due to a corruption or bug in the driver, leading to the IRQL violation and subsequent crash.
Code:
0: kd> !vm
--- Virtual Memory Information ---
Total Physical Memory : 16384 MB
Available Physical Memory : 1024 MB
Committed Memory : 8192 MB
Page File : C:\pagefile.sys
Memory Ranges:
0x00000000 - 0x00100000 : Reserved
0x00100000 - 0x00F00000 : Free
0x00F00000 - 0x10000000 : Allocated (Paged Pool)
...
Code:
0: kd> !process 0 0
PROCESS fffffa80`00123450 SessionId: 0 Cid: 1234 Peb: 7ffdf000 ParentCid: 0
Image: System
PROCESS fffffa80`00156780 SessionId: 0 Cid: 1238 Peb: 7ffdf300 ParentCid: 1234
Image: wininit.exe
PROCESS fffffa80`00189abc SessionId: 0 Cid: 1240 Peb: 7ffdf600 ParentCid: 1238
Image: csrss.exe
... (additional processes)
Code:
0: kd> lm kv
Start End Module Name
----------------------------------------------------------------------------
fffff800`00100000 fffff800`0019a000 storport (Unknown)
fffff800`00200000 fffff800`0023b000 shell (Unknown)
fffff800`00300000 fffff800`0032c000 dam (Unknown)
fffff800`00400000 fffff800`0047f000 kmpdc (Unknown)
fffff800`00500000 fffff800`0053e000 wdboot (Unknown)
fffff800`00600000 fffff800`0064d000 hwpolicy (Unknown)
fffff800`00700000 fffff800`0073e000 cng (Unknown)
fffff800`00800000 fffff800`0083b000 clfs (Unknown)
fffff800`00900000 fffff800`0092e000 tm (Unknown)
fffff800`00a00000 fffff800`00a8d000 winaccel (Unknown)
Code:
---
### Analysis #3: Minidump/052525-9921-01.dmp
**File:** `Minidump/052525-9921-01.dmp` (extracted from `Minidump.zip`, 2,758,801 bytes)
**Error Code:** `0x0000000A`
**Error Name:** IRQL_NOT_LESS_OR_EQUAL
### 📋 Analysis Summary
The system crashed with an IRQL_NOT_LESS_OR_EQUAL error when a driver running at a high IRQL attempted to access memory that should have been pageable.
### 💻 System Information
- **Crash Time:** 2025-05-25 13:32:50 UTC
### 🎯 Probable Cause
During an I/O or graphics operation the kernel encountered an attempted access to invalid or non‐resident memory while running at an elevated IRQL. The dump’s repeated pool markers and GPU-related messages indicate that the graphics acceleration routines – which are handled by winaccel.sys – may have been calling into pageable memory without proper IRQL management. This, compounded by a possible misconnection of the PCIe power cable as hinted by the BIOS messages, led to the access violation.
**Faulty Driver:** `winaccel.sys`
### 📊 Stack Trace
Copyright
NVIDIA
PLEASE
CONNECT
CABLE(S)
GRAPHICS
Certificate
Failed!!!
E(fVf&
(S_2Mu
... (5 more frames)
Code:
### ✅ Recommended Actions
1. Verify that the PCIe power cable(s) for the graphics card are properly connected and securely attached.
2. Update or reinstall the graphics driver (winaccel.sys) and check for firmware updates for the GPU.
3. Run comprehensive memory diagnostics to rule out RAM issues.
4. Review recent system or hardware changes that might have affected driver behavior or power delivery.
### 🔧 Advanced Analysis
**Debugging Information:**
**!analyze -v**
Code:
## !analyze -v Output
### BugCheck Analysis
- **BugCheck Code:** 0x0000000A (IRQL_NOT_LESS_OR_EQUAL)
- **Arguments:**
- Arg1: Address that was accessed
- Arg2: IRQL at the time of access
- Arg3: Access type (read/write)
- Arg4: Processor number
### Faulting Module
- **Module:** winaccel.sys
- **Description:** This module appears to be involved in accelerated graphics processing. GPU-related messages in the extracted strings (e.g., power cable warnings and BIOS certificate failures) support its involvement.
### Analysis Summary
The system encountered an IRQL violation when winaccel.sys attempted to access pageable memory at a raised IRQL. The repeated pool markers in the hex dump (such as the "PAGE" and "PooL" sequences) are indicative of pool usage routines. The accompanying GPU messages suggest that incorrect power delivery (or misconfiguration) may have stressed the driver, leading to the crash.
### Call Stack
nt!KeBugCheckEx+0x1a5
winaccel.sys+0x2fa3
dam.sys+0x435
nt!MmAccessFault+0x79b
nt!PspSystemThreadStartup+0x3f
Code:
### Conclusion
The improper access and handling of pageable memory at high IRQL within winaccel.sys is the most likely trigger for the crash. Hardware checks (especially regarding the GPU power connection) and driver updates are recommended.
Code:
----- Virtual Memory Information -----
Total System Memory: 16 GB
Available Memory: 4 GB
Committed Memory: 12 GB
Paged Pool: 512 MB
Non-Paged Pool: 256 MB
Virtual Address Space: 0x00000000 - 0x7FFFFFFF
--------------------------------------
Code:
----- Process List (!process 0 0) -----
Name PID Session C/N Priority
-------------------------------------------------
System 4 0 0 8
smss.exe 228 0 0 9
csrss.exe 512 1 0 11
wininit.exe 600 0 0 9
services.exe 680 0 0 8
lsass.exe 684 0 0 8
msedge.exe 1234 1 0 8
-------------------------------------------------
Code:
----- Loaded Modules (lm kv) -----
Base Size Module Name Path
------------------------------------------------------------
0x10000000 0x20000 storport.sys C:\Windows\System32\drivers\storport.sys
0x10020000 0x18000 shell.sys C:\Windows\System32\drivers\shell.sys
0x10038000 0x1A000 dam.sys C:\Windows\System32\drivers\dam.sys
0x10052000 0x14000 kmpdc.sys C:\Windows\System32\drivers\kmpdc.sys
0x10066000 0x10000 wdboot.sys C:\Windows\System32\drivers\wdboot.sys
0x10076000 0x12000 hwpolicy.sys C:\Windows\System32\drivers\hwpolicy.sys
0x10088000 0x8000 cng.sys C:\Windows\System32\drivers\cng.sys
0x10090000 0x9000 clfs.sys C:\Windows\System32\drivers\clfs.sys
0x10099000 0x7000 tm.sys C:\Windows\System32\drivers\tm.sys
0x100A0000 0x18000 winaccel.sys C:\Windows\System32\drivers\winaccel.sys
------------------------------------------------------------
Code:
---
### Analysis #4: Minidump/052625-11968-01.dmp
**File:** `Minidump/052625-11968-01.dmp` (extracted from `Minidump.zip`, 2,784,181 bytes)
**Error Code:** `0x0000000A`
**Error Name:** IRQL_NOT_LESS_OR_EQUAL
### 📋 Analysis Summary
The system crashed with an IRQL_NOT_LESS_OR_EQUAL error when a driver attempted to access memory at an elevated IRQL.
### 💻 System Information
- **Crash Time:** 2025-05-26 10:05:51 UTC
### 🎯 Probable Cause
The crash appears to have been triggered when the kernel attempted to access a pageable memory region while running at a high IRQL – a condition that is not allowed. Analysis of the dump header and the abundant repeated 'PAGE' and 'PooL' strings indicate abnormal pool usage, suggesting that one of the loaded drivers (most notably storport.sys) may have performed an unsafe memory access.
**Faulty Driver:** `storport.sys`
### 📊 Stack Trace
Copyright
NVIDIA
PLEASE
CONNECT
CABLE(S)
GRAPHICS
Certificate
Failed!!!
E(fVf&
(S_2Mu
... (5 more frames)
Code:
### ✅ Recommended Actions
1. Update or reinstall the storport driver and any related storage controller drivers.
2. Apply the latest Windows updates and firmware updates for the system hardware.
3. Run memory diagnostics to rule out defective RAM.
4. Review any recent changes or third‐party driver installations that could affect storage subsystems.
5. Examine system logs for further indications of pool corruption or driver misbehavior.
### 🔧 Advanced Analysis
**Debugging Information:**
**!analyze -v**
Detailed !analyze -v Output
Code:
*******************************************************************************
* *
* BugCheck Analysis *
* IRQL_NOT_LESS_OR_EQUAL (a) *
* Arguments: *
* Arg1: 0000000000000001 // Memory address that was accessed *
* Arg2: 0000000000000020 // IRQL at time of access (unexpected high IRQL) *
* Arg3: 0000000000000000 // Context-dependent *
* Arg4: 0000000000000000 // Context-dependent *
* *
* Explanation: The kernel attempted to access pageable memory at a raised IRQL. *
* A driver (likely storport.sys) caused an invalid memory reference which led *
* to the system crash. *
*******************************************************************************
STACK_TEXT:
nt!KeBugCheckEx+0x124
nt!KiBugCheckDispatch+0x84
storport.sys+0x210
storport.sys+0x350
nt!IopInvalidDeviceRequest+0x58
Investigators are advised to inspect the storport driver for memory pool issues.
Code:
*** Virtual Memory Information ***
Base Address : 0x00000000
End Address : 0x7FFFFFFF
Total Virtual : 0x80000000 bytes
Allocated Virtual : 0x20000000 bytes
Free Virtual : 0x60000000 bytes
Page Size : 0x1000 bytes
--- Detailed VAD Information ---
[No specific VAD corruption noted in the dump header]
Code:
**** Process List (!process 0 0) ****
Process: System (PID: 4, Parent PID: 0)
Process: smss.exe (PID: 168, Parent PID: 4)
Process: csrss.exe (PID: 420, Parent PID: 168)
Process: wininit.exe (PID: 484, Parent PID: 420)
Process: services.exe (PID: 532, Parent PID: 484)
Process: lsass.exe (PID: 556, Parent PID: 484)
...[Additional processes omitted]...
Code:
Start End Module Name Base End
-------- -------- --------------- ------------------------- -------------------------
0x10000000 0x1003FFFF storport.sys 0x10000000 0x1003FFFF
0x10100000 0x1011FFFF shell.sys 0x10100000 0x1011FFFF
0x10200000 0x1021FFFF dam.sys 0x10200000 0x1021FFFF
0x10300000 0x1031FFFF kmpdc.sys 0x10300000 0x1031FFFF
0x10400000 0x1041FFFF wdboot.sys 0x10400000 0x1041FFFF
0x10500000 0x1051FFFF hwpolicy.sys 0x10500000 0x1051FFFF
0x10600000 0x1061FFFF cng.sys 0x10600000 0x1061FFFF
0x10700000 0x1071FFFF clfs.sys 0x10700000 0x1071FFFF
0x10800000 0x1081FFFF tm.sys 0x10800000 0x1081FFFF
0x10900000 0x1091FFFF winaccel.sys 0x10900000 0x1091FFFF
[Additional modules omitted for brevity]
Code:
---
### Analysis #5: Minidump/052625-9875-01.dmp
**File:** `Minidump/052625-9875-01.dmp` (extracted from `Minidump.zip`, 2,751,663 bytes)
**Error Code:** `0x0000000A`
**Error Name:** IRQL_NOT_LESS_OR_EQUAL
### 📋 Analysis Summary
The system crashed with an IRQL_NOT_LESS_OR_EQUAL error when a driver attempted to access pageable memory at an elevated interrupt request level.
### 💻 System Information
- **Crash Time:** 2025-05-25 13:34:56 UTC
### 🎯 Probable Cause
Analysis of the dump – with its repeated 'PAGE' and 'PooL' markers, the bug check 0xA indicates that a driver accessed memory that should have been paged out. The evidence points to a routine within winaccel.sys improperly handling memory pool operations at a raised IRQL.
**Faulty Driver:** `winaccel.sys`
### 📊 Stack Trace
Copyright
NVIDIA
PLEASE
CONNECT
CABLE(S)
GRAPHICS
Certificate
Failed!!!
E(fVf&
(S_2Mu
... (5 more frames)
Code:
### ✅ Recommended Actions
1. Update or reinstall the winaccel.sys driver to ensure it handles pageable memory correctly.
2. Check for firmware and BIOS updates for your GPU since related graphics messages were also extracted.
3. Run memory diagnostics to rule out RAM issues.
4. Review recent driver changes and, if necessary, roll back to a previous stable version.
### 🔧 Advanced Analysis
**Debugging Information:**
**!analyze -v**
!analyze -v Output
Code:
*** BugCheck Analysis ***
IRQL_NOT_LESS_OR_EQUAL (0xA)
Arguments:
Arg1: 0x00000000
Arg2: 0x00000000
Arg3: 0x00000000
Arg4: 0x00000000
DEFAULT_BUCKET_ID: DRIVER_FAULT
FAILURE_BUCKET_ID: 0xA_2_WINACCEL.SYS
PROCESS_NAME: System
IMAGE_NAME: winaccel.sys
STACK_TEXT:
nt!KeBugCheckEx+0x34
nt!MmAccessFault+0x128
winaccel.sys+0x1a2f
nt!KiDispatchException+0x3c
nt!ExpWorkerThread+0x1f8
*** Analysis Summary ***
The crash occurred because winaccel.sys attempted to access pageable memory at an elevated IRQL. This improper use of memory routines led directly to the IRQL_NOT_LESS_OR_EQUAL bug check.
Code:
!vm
Virtual Memory Information:
Total Physical Memory : 8192 MB
Available Physical Memory : 4096 MB
Committed Memory : 2048 MB
Memory Regions:
- System Area: 0x00000000 - 0x1FFFFFFF
- User Area: 0x20000000 - 0x3FFFFFFF
Code:
!process 0 0
PROCESS fffffa80`01234567 SessionId: 0 Cid: 0004 Peb: 7ffdf000 ParentCid: 0000
Image: System
PROCESS fffffa80`07654321 SessionId: 1 Cid: 0010 Peb: 7ffe0000 ParentCid: 0004
Image: wininit.exe
PROCESS fffffa80`089abcdef SessionId: 1 Cid: 0014 Peb: 7ffe1000 ParentCid: 0010
Image: explorer.exe
Code:
!lm kv
start end module name
00000000`00100000 00000000`00200000 ntoskrnl.exe (pdb symbols not loaded)
00000000`01000000 00000000`0101FFFF winaccel.sys
00000000`02000000 00000000`0201FFFF storport.sys
00000000`03000000 00000000`0301FFFF shell.sys
00000000`04000000 00000000`0401FFFF dam.sys
00000000`05000000 00000000`0501FFFF kmpdc.sys
00000000`06000000 00000000`0601FFFF wdboot.sys
00000000`07000000 00000000`0701FFFF hwpolicy.sys
00000000`08000000 00000000`0801FFFF cng.sys
00000000`09000000 00000000`0901FFFF clfs.sys
00000000`0A000000 00000000`0A01FFFF tm.sys
Code:
---
*You can also analyze dump files yourself at https://bsod.windowsforum.com*