DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff505d3588ff8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: ffffba8ff5f80c6d, address which referenced memory
*** WARNING: Check Image - Checksum mismatch - cng.sys
PROCESS_NAME: nvcontainer.ex
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
FAILURE_BUCKET_ID: AV_nt!KiPageFault
Сбой в работе ядра. Более того - информация о том, что компонент ядра Kernel Cryptography видоизменен (контрольная сумма не совпадает с оригиналом). Плюс - наличие "маркера" ntkrnlmp.exe... Вероятная причина всё та же.