If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA willĪrg1: 00000000000000f6, Referencing user handle as KernelMode.Īrg2: 0000000000000870, Handle value being referenced.Īrg3: ffffc38098d7a5c0, Address of the current process.Īrg4: fffff80097b4160f, Address inside the driver that is performing the incorrect reference.īUILD_VERSION_STRING: 9.125 (WinBuild.160101.0800) This isīecause the driver was specified in the registry as being suspect (by theĪdministrator) and the kernel has enabled substantial checking of this driver. A device driver attempting to corrupt the system has been caught.