Talos Vulnerability Report

TALOS-2019-0957

VMware Workstation 15 shader functionality round_ni denial of service vulnerability

June 1, 2020

CVE Number

CVE-2020-3958

Summary

An exploitable denial of service vulnerability exists in VMware Workstation 15.5.0 build-14665864. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from a VMware guest and the VMware host will be affected, leading to vmware-vmx.exe process crash on the host.

Tested Versions

VMware Workstation 15 (15.5.0 build-14665864) with Windows 10 x64 as guestVM

Product URLs

http://vmware.com

CVSSv3 Score

6.5 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-617: Reachable Assertion

Details

This vulnerability can be triggered by supplying a malformed pixel shader (inside VMware guest OS). Such attack can be triggered from VMware guest usermode to cause a denial-of-service attack due a panic condition in the vmware-vmx.exe process on host, or theoretically through WEBGL (remote website).

Example of pixel shader:

ps_4_0
dcl_constantbuffer cb0[3], immediateIndexed
dcl_immediateConstantBuffer { ... }
dcl_input_ps_siv constant v0.xyzw, position
dcl_output o0.xyzw
dcl_temps 33
round_ni o7., r7.xyzw
mov o0.xyzw, r2.xyzw
ret

By emitting the instruction ROUND_NI O7., R7.XYZW with an O7 operand (an output data register), or any different output register as operand, it is possible to cause a “PANIC” (denial of service) in the vmware-vmx.exe process, leading to process termination.

svga| E105: PANIC: NOT_REACHED bora\mks\hostops\DX11\DX11ShaderTrans.c:162

Crash Information

From vmware-vmx.exe (this is not a windbg crash dump):

2019-10-28T11:12:23.393+01:00| svga| E105: PANIC: NOT_REACHED bora\mks\hostops\DX11\DX11ShaderTrans.c:162
2019-10-28T11:12:23.393+01:00| svga| I125: CoreDump_CoreDump: faking exception to get context
2019-10-28T11:12:23.394+01:00| svga| I125: CoreDump: Minidump file K:\vmware_images\windows_10_x64_uefi\vmware-vmx.dmp exists. Rotating ...
2019-10-28T11:12:23.404+01:00| svga| W115: CoreDump: Writing minidump to K:\vmware_images\windows_10_x64_uefi\vmware-vmx.dmp
2019-10-28T11:12:23.526+01:00| svga| I125: CoreDump: including module base 0x0x7ff6e4ec0000 size 0x0x01490000
2019-10-28T11:12:23.526+01:00| svga| I125:   checksum 0x01005d98 timestamp 0x5d803d03
2019-10-28T11:12:23.526+01:00| svga| I125:   image file K:\tools\vmware\x64\vmware-vmx.exe
2019-10-28T11:12:23.526+01:00| svga| I125:   file version 15.5.0.49504
2019-10-28T11:12:23.526+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d2040000 size 0x0x001f0000
2019-10-28T11:12:23.526+01:00| svga| I125:   checksum 0x001ed133 timestamp 0x99ca0526
2019-10-28T11:12:23.526+01:00| svga| I125:   image file C:\Windows\System32\ntdll.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.418
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d0ee0000 size 0x0x000b2000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000bbbc4 timestamp 0xd0cecc10
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\kernel32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.329
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ceff0000 size 0x0x002a3000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x002b1c84 timestamp 0xfba22159
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\KERNELBASE.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.418
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cfbe0000 size 0x0x000fa000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x00103d88 timestamp 0x4361b720
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\ucrtbase.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d11b0000 size 0x0x00194000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x00195b72 timestamp 0x7daa1cfe
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\user32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.418
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cfbb0000 size 0x0x00021000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0002b239 timestamp 0x5343f4fb
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\win32u.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d1690000 size 0x0x00026000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0002f763 timestamp 0x90b22122
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\gdi32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ba9e0000 size 0x0x00016000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0001e3e1 timestamp 0x5c82fae2
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\VCRUNTIME140.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 14.20.27508.1
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cff50000 size 0x0x00194000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0019ed71 timestamp 0x1ff6ed38
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\gdi32full.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.356
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cfd10000 size 0x0x0009e000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000a1dae timestamp 0x2085286c
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\msvcp_win.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d16e0000 size 0x0x00156000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x00164a1e timestamp 0x137cb3c6
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\ole32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.113
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d08f0000 size 0x0x00336000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0033e15d timestamp 0x7b512025
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\combase.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.356
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d0d10000 size 0x0x00120000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x00124bf2 timestamp 0x0530c620
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\rpcrt4.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cfb30000 size 0x0x00080000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x00086602 timestamp 0x5c8eaa57
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\bcryptPrimitives.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.295
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d0150000 size 0x0x000a3000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000a0ad7 timestamp 0x0ba7a4cd
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\advapi32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.329
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d14a0000 size 0x0x0009e000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000a591e timestamp 0xf5bdefd7
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\msvcrt.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 7.0.18362.1
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d1540000 size 0x0x00097000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000a2387 timestamp 0x1c757ba0
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\sechost.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d0200000 size 0x0x006e5000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x006ee638 timestamp 0xdeca38c3
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\shell32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cff00000 size 0x0x0004a000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000542d0 timestamp 0xafaaabaa
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\cfgmgr32.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d0e30000 size 0x0x000a9000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x000b5f37 timestamp 0x48cfe63c
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\SHCore.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cf3b0000 size 0x0x0077f000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x00799857 timestamp 0x8ebbe9ca
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\windows.storage.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cef40000 size 0x0x0001f000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0002584e timestamp 0xfacae6c0
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\profapi.dll
2019-10-28T11:12:23.527+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.527+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cef60000 size 0x0x0004a000
2019-10-28T11:12:23.527+01:00| svga| I125:   checksum 0x0004e923 timestamp 0xfdc4588a
2019-10-28T11:12:23.527+01:00| svga| I125:   image file C:\Windows\System32\powrprof.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cef10000 size 0x0x00010000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0000d99d timestamp 0xa2ccd413
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\umpdc.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 0.0.0.0
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d10d0000 size 0x0x00052000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0005e008 timestamp 0xf8807ba1
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\shlwapi.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cefb0000 size 0x0x00011000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000165ad timestamp 0x05bef372
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\kernel.appcore.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cefd0000 size 0x0x00017000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000209a8 timestamp 0xa51023f1
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\cryptsp.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d19e0000 size 0x0x00470000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x00479990 timestamp 0xa7d94c0a
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\setupapi.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cfce0000 size 0x0x00026000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0002f62e timestamp 0xb59ada57
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\bcrypt.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d1610000 size 0x0x0006f000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x00070793 timestamp 0x50866107
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\ws2_32.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d0c30000 size 0x0x000c4000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000c7a6d timestamp 0x8fcb7820
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\oleaut32.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.329
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cfdb0000 size 0x0x00149000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0014798b timestamp 0x080d7530
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\crypt32.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cef20000 size 0x0x00012000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000134f9 timestamp 0xe4c2641f
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\msasn1.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ca420000 size 0x0x00024000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x00022435 timestamp 0xd238be3c
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\winmm.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff991ad0000 size 0x0x00099000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x00095d08 timestamp 0x0f4dfe70
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\dsound.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x5ead0000 size 0x0x0001a000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0001ee05 timestamp 0x5d32a0b2
2019-10-28T11:12:23.528+01:00| svga| I125:   image file K:\tools\vmware\x64\zlib1.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 1.2.11.0
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c6da0000 size 0x0x00041000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x00042566 timestamp 0x42b29311
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\WinSCard.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ca600000 size 0x0x00013000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0001f367 timestamp 0x416eeff6
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\wtsapi32.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c8370000 size 0x0x000f0000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000f24a7 timestamp 0x0b289476
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\winhttp.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ca360000 size 0x0x0002d000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0003505e timestamp 0xd6bb9be2
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\WINMMBASE.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ced10000 size 0x0x0002a000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x00034410 timestamp 0x73cca382
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\devobj.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d15e0000 size 0x0x0002e000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x0002d385 timestamp 0x4be57136
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\imm32.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cdf50000 size 0x0x00031000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000338fa timestamp 0xd95e6299
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\ntmarta.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.528+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cd180000 size 0x0x00099000
2019-10-28T11:12:23.528+01:00| svga| I125:   checksum 0x000962a9 timestamp 0xfdddb636
2019-10-28T11:12:23.528+01:00| svga| I125:   image file C:\Windows\System32\uxtheme.dll
2019-10-28T11:12:23.528+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x5bb80000 size 0x0x00248000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00248720 timestamp 0x5d32893f
2019-10-28T11:12:23.529+01:00| svga| I125:   image file K:\tools\vmware\x64\libeay32.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 1.0.2.19
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff99b080000 size 0x0x0005d000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0005f1c0 timestamp 0x5d32894e
2019-10-28T11:12:23.529+01:00| svga| I125:   image file K:\tools\vmware\x64\ssleay32.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 1.0.2.19
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ce2f0000 size 0x0x00033000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0003d7b5 timestamp 0xfa3c3542
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\rsaenh.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ce950000 size 0x0x0000c000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0000fc85 timestamp 0xfef011a6
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\CRYPTBASE.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cee00000 size 0x0x0002f000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0003972a timestamp 0x250d8234
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\sspicli.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ce780000 size 0x0x00067000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00066c3e timestamp 0x18af169c
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\mswsock.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ce4d0000 size 0x0x000ca000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x000cd47e timestamp 0x997f6419
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\dnsapi.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d1490000 size 0x0x00008000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00007f98 timestamp 0x64ef9ebf
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\nsi.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ce490000 size 0x0x0003a000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0003db3f timestamp 0x50afe730
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\IPHLPAPI.DLL
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bfba0000 size 0x0x0000a000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0000f693 timestamp 0x6a2bea39
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\rasadhlp.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d18c0000 size 0x0x000a2000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x000a702b timestamp 0x9506208f
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\clbcatq.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 2001.12.10941.16384
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bdec0000 size 0x0x00011000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00017bcc timestamp 0x6e82a406
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\wbem\wbemprox.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bde30000 size 0x0x00084000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00085b03 timestamp 0x6af5c06d
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\wbemcomn.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bdac0000 size 0x0x00014000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00016a19 timestamp 0xf9651a38
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\wbem\wbemsvc.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bd550000 size 0x0x00101000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00102890 timestamp 0x65ead981
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\wbem\fastprox.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bda70000 size 0x0x00015000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0001da1b timestamp 0xb26a0aaf
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\amsi.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cee30000 size 0x0x00025000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00028d50 timestamp 0xdbb466d6
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\userenv.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9bda20000 size 0x0x00044000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0004ae46 timestamp 0xafa3cfd3
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1909.6-0\MpOAV.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 4.18.1909.6
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9ca1c0000 size 0x0x0000a000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x00013092 timestamp 0x927b71e6
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\version.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.529+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d1680000 size 0x0x00008000
2019-10-28T11:12:23.529+01:00| svga| I125:   checksum 0x0000d177 timestamp 0x3ebc2f6d
2019-10-28T11:12:23.529+01:00| svga| I125:   image file C:\Windows\System32\psapi.dll
2019-10-28T11:12:23.529+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c62a0000 size 0x0x001f4000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x001dca4b timestamp 0xe04b92e8
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\dbghelp.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9d1350000 size 0x0x00136000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x00137919 timestamp 0x1dc2f89b
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\msctf.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cf350000 size 0x0x0005c000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x00063f04 timestamp 0x1a03c9d6
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\wintrust.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cdfc0000 size 0x0x0005c000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0005ea7c timestamp 0x029f3766
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\winsta.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.53
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cc270000 size 0x0x0025b000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x00262b94 timestamp 0x7e72d1cb
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\d3d11.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cdbf0000 size 0x0x000eb000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x000ed5a5 timestamp 0xb54a43bb
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\dxgi.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.387
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cdb60000 size 0x0x00020000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0002a5ba timestamp 0xbc0e8e8e
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\DXCore.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cd090000 size 0x0x0008f000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x000912fd timestamp 0xff74693c
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\apphelp.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c2930000 size 0x0x001e0000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x001eca35 timestamp 0x5d976bfd
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\u0347338.inf_amd64_17d1b402964eb558\B347375\aticfx64.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 26.20.13025.10004
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c28f0000 size 0x0x00036000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0003777f timestamp 0x5d976c4a
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\u0347338.inf_amd64_17d1b402964eb558\B347375\atiuxp64.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 26.20.13025.10004
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c02b0000 size 0x0x02639000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x01b00f4d timestamp 0x5d97706a
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\DriverStore\FileRepository\u0347338.inf_amd64_17d1b402964eb558\B347375\atidxx64.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 26.20.13025.10004
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c0280000 size 0x0x0002b000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0000000000 timestamp 0x5cf7100d
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\amdihk64.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 1.0.0.0
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9be720000 size 0x0x0002b000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0002a232 timestamp 0xfcc30f70
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\D3DSCache.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cd340000 size 0x0x0025a000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0026b282 timestamp 0x42f071ca
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\twinapi.appcore.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cd850000 size 0x0x00029000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x00035828 timestamp 0x5be0eb17
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\rmclient.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff98de60000 size 0x0x00066000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0007092f timestamp 0x6c139455
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\SensorsApi.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9adbc0000 size 0x0x00025000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x000262e4 timestamp 0x348cb243
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\SensorsUtilsV2.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9a50a0000 size 0x0x00028000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x00026273 timestamp 0x9b1f4cab
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\SensorsNativeApi.V2.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9cae20000 size 0x0x000ef000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x000fa20a timestamp 0xbc1b9802
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\propsys.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 7.0.18362.267
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff99feb0000 size 0x0x00030000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x00035f43 timestamp 0x65441c6d
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\PortableDeviceTypes.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff99e190000 size 0x0x0003b000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x0003d78f timestamp 0xebb2781b
2019-10-28T11:12:23.530+01:00| svga| I125:   image file C:\Windows\System32\deviceaccess.dll
2019-10-28T11:12:23.530+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.530+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c78f0000 size 0x0x000ae000
2019-10-28T11:12:23.530+01:00| svga| I125:   checksum 0x000b1c17 timestamp 0xdb1735e2
2019-10-28T11:12:23.531+01:00| svga| I125:   image file C:\Windows\System32\mscms.dll
2019-10-28T11:12:23.531+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c8350000 size 0x0x00017000
2019-10-28T11:12:23.531+01:00| svga| I125:   checksum 0x00016d5e timestamp 0x9fd55c48
2019-10-28T11:12:23.531+01:00| svga| I125:   image file C:\Windows\System32\ColorAdapterClient.dll
2019-10-28T11:12:23.531+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c6990000 size 0x0x00043000
2019-10-28T11:12:23.531+01:00| svga| I125:   checksum 0x00046d10 timestamp 0x0830af3e
2019-10-28T11:12:23.531+01:00| svga| I125:   image file C:\Windows\System32\icm32.dll
2019-10-28T11:12:23.531+01:00| svga| I125:   file version 10.0.18362.267
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: including module base 0x0x7ff9c6270000 size 0x0x0002a000
2019-10-28T11:12:23.531+01:00| svga| I125:   checksum 0x00032d6f timestamp 0x17edc79f
2019-10-28T11:12:23.531+01:00| svga| I125:   image file C:\Windows\System32\dbgcore.dll
2019-10-28T11:12:23.531+01:00| svga| I125:   file version 10.0.18362.1
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 13524
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 12908
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 10092
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 1844
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 16824
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 4820
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 8452
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 4796
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 5516
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 16712
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 2088
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 17348
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 12788
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 12892
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 13276
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 816
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 9600
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 4904
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 2912
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 12956
2019-10-28T11:12:23.531+01:00| svga| I125: CoreDump: Including thread 12820
2019-10-28T11:12:23.625+01:00| svga| I125: Backtrace:
2019-10-28T11:12:23.625+01:00| svga| I125: backtrace[00] frame 0x60011f3ae0 IP 0x7ff6e535a73e params 0x60011f3304 0x7ff6e5334240 0x8 0x3c [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x000000000049973e] <K:\tools\vmware\x64\vmware-vmx.exe>+0x49a73e
2019-10-28T11:12:23.625+01:00| svga| I125: backtrace[01] frame 0x60011f3b50 IP 0x7ff6e5359fe7 params 0x1 0x7ff6e5694df8 0x60011f3b80 0x60011f3700 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x0000000000498fe7] <K:\tools\vmware\x64\vmware-vmx.exe>+0x499fe7
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[02] frame 0x60011f3f80 IP 0x7ff6e4ecde5e params 0x7ff6e5691860 0x7ff6e577e3b0 0xa2 0x3 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x000000000000ce5e] <K:\tools\vmware\x64\vmware-vmx.exe>+0xde5e
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[03] frame 0x60011f4260 IP 0x7ff6e52150e4 params 0x1c9eabbe050 0 0 0x1c9eabb2050 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000003540e4] <K:\tools\vmware\x64\vmware-vmx.exe>+0x3550e4
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[04] frame 0x60011f50b0 IP 0x7ff6e5215c5b params 0x1c9eabb2050 0x1c9eabb2050 0x1c9eabb2050 0 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x0000000000354c5b] <K:\tools\vmware\x64\vmware-vmx.exe>+0x355c5b
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[05] frame 0x60011f51e0 IP 0x7ff6e52510ba params 0x1 0 0x1c9e2af0028 0x7ff9cdb682ad [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000003900ba] <K:\tools\vmware\x64\vmware-vmx.exe>+0x3910ba
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[06] frame 0x60011facd0 IP 0x7ff6e5206219 params 0x1c9e2d95010 0x1c9da564808 0xffffffffffffffff 0x1 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x0000000000345219] <K:\tools\vmware\x64\vmware-vmx.exe>+0x346219
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[07] frame 0x60011fad90 IP 0x7ff6e5181a29 params 0 0x60011faea0 0x1c84f791d80 0 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000002c0a29] <K:\tools\vmware\x64\vmware-vmx.exe>+0x2c1a29
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[08] frame 0x60011faef0 IP 0x7ff6e517ed5c params 0 0x60011fefd0 0x1c9e2d8e080 0x1c84f791d80 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000002bdd5c] <K:\tools\vmware\x64\vmware-vmx.exe>+0x2bed5c
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[09] frame 0x60011feec0 IP 0x7ff6e5180af6 params 0x7ff6e4ec0000 0x1c9d53ff270 0x1c9d53ff270 0 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000002bfaf6] <K:\tools\vmware\x64\vmware-vmx.exe>+0x2c0af6
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[10] frame 0x60011ff400 IP 0x7ff6e517fbc9 params 0x1c9e25525a0 0x7ff6e4ec0000 0x3 0x3 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000002bebc9] <K:\tools\vmware\x64\vmware-vmx.exe>+0x2bfbc9
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[11] frame 0x60011ff440 IP 0x7ff6e517cae1 params 0x1c9e2552500 0x9 0x1c9e2af0028 0x9 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000002bbae1] <K:\tools\vmware\x64\vmware-vmx.exe>+0x2bcae1
2019-10-28T11:12:23.626+01:00| svga| I125: backtrace[12] frame 0x60011ff480 IP 0x7ff6e51aeb06 params 0x100 0x60011ff5e0 0x28 0x1c9e25524f0 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000002edb06] <K:\tools\vmware\x64\vmware-vmx.exe>+0x2eeb06
2019-10-28T11:12:23.627+01:00| svga| I125: backtrace[13] frame 0x60011ff4d0 IP 0x7ff6e50b2b8d params 0x4801 0x100 0x80 0xfc [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000001f1b8d] <K:\tools\vmware\x64\vmware-vmx.exe>+0x1f2b8d
2019-10-28T11:12:23.627+01:00| svga| I125: backtrace[14] frame 0x60011ff690 IP 0x7ff6e5031742 params 0 0x1 0x60011ff70c 0x20 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x0000000000170742] <K:\tools\vmware\x64\vmware-vmx.exe>+0x171742
2019-10-28T11:12:23.627+01:00| svga| I125: backtrace[15] frame 0x60011ff6c0 IP 0x7ff6e502f358 params 0 0x1 0x1 0x1c800000000 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x000000000016e358] <K:\tools\vmware\x64\vmware-vmx.exe>+0x16f358
2019-10-28T11:12:23.627+01:00| svga| I125: backtrace[16] frame 0x60011ff730 IP 0x7ff6e4f7b45a params 0x1c9d51de350 0x7ff6e4f7b170 0xffffffffffffffff 0 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x00000000000ba45a] <K:\tools\vmware\x64\vmware-vmx.exe>+0xbb45a
2019-10-28T11:12:23.627+01:00| svga| I125: backtrace[17] frame 0x60011ff7f0 IP 0x7ff6e54c4e09 params 0 0 0 0 [K:\tools\vmware\x64\vmware-vmx.exe base 0x00007ff6e4ec0000 0x0001:0x0000000000603e09] <K:\tools\vmware\x64\vmware-vmx.exe>+0x604e09
2019-10-28T11:12:23.629+01:00| svga| I125: backtrace[18] frame 0x60011ff7f8 IP 0x7ff9d0ef7bd4 params 0 0 0 0 [C:\WINDOWS\System32\KERNEL32.DLL base 0x00007ff9d0ee0000 0x0001:0x0000000000016bd4] BaseThreadInitThunk
2019-10-28T11:12:23.632+01:00| svga| I125: backtrace[19] frame 0x60011ff828 IP 0x7ff9d20aced1 params 0 0 0 0 [C:\WINDOWS\SYSTEM32\ntdll.dll base 0x00007ff9d2040000 0x0001:0x000000000006bed1] RtlUserThreadStart
2019-10-28T11:12:23.632+01:00| svga| I125: Printing loaded objects
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00e4ec0000-0x00e6350000): K:\tools\vmware\x64\vmware-vmx.exe
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d2040000-0x00d2230000): C:\WINDOWS\SYSTEM32\ntdll.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d0ee0000-0x00d0f92000): C:\WINDOWS\System32\KERNEL32.DLL
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00ceff0000-0x00cf293000): C:\WINDOWS\System32\KERNELBASE.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cfbe0000-0x00cfcda000): C:\WINDOWS\System32\ucrtbase.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d11b0000-0x00d1344000): C:\WINDOWS\System32\USER32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cfbb0000-0x00cfbd1000): C:\WINDOWS\System32\win32u.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d1690000-0x00d16b6000): C:\WINDOWS\System32\GDI32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00ba9e0000-0x00ba9f6000): C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cff50000-0x00d00e4000): C:\WINDOWS\System32\gdi32full.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cfd10000-0x00cfdae000): C:\WINDOWS\System32\msvcp_win.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d16e0000-0x00d1836000): C:\WINDOWS\System32\ole32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d08f0000-0x00d0c26000): C:\WINDOWS\System32\combase.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d0d10000-0x00d0e30000): C:\WINDOWS\System32\RPCRT4.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cfb30000-0x00cfbb0000): C:\WINDOWS\System32\bcryptPrimitives.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d0150000-0x00d01f3000): C:\WINDOWS\System32\advapi32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d14a0000-0x00d153e000): C:\WINDOWS\System32\msvcrt.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d1540000-0x00d15d7000): C:\WINDOWS\System32\sechost.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d0200000-0x00d08e5000): C:\WINDOWS\System32\SHELL32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cff00000-0x00cff4a000): C:\WINDOWS\System32\cfgmgr32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d0e30000-0x00d0ed9000): C:\WINDOWS\System32\shcore.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cf3b0000-0x00cfb2f000): C:\WINDOWS\System32\windows.storage.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cef40000-0x00cef5f000): C:\WINDOWS\System32\profapi.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cef60000-0x00cefaa000): C:\WINDOWS\System32\powrprof.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cef10000-0x00cef20000): C:\WINDOWS\System32\UMPDC.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d10d0000-0x00d1122000): C:\WINDOWS\System32\shlwapi.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cefb0000-0x00cefc1000): C:\WINDOWS\System32\kernel.appcore.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cefd0000-0x00cefe7000): C:\WINDOWS\System32\cryptsp.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d19e0000-0x00d1e50000): C:\WINDOWS\System32\SETUPAPI.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cfce0000-0x00cfd06000): C:\WINDOWS\System32\bcrypt.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d1610000-0x00d167f000): C:\WINDOWS\System32\WS2_32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00d0c30000-0x00d0cf4000): C:\WINDOWS\System32\OLEAUT32.dll
2019-10-28T11:12:23.632+01:00| svga| I125: [0x00cfdb0000-0x00cfef9000): C:\WINDOWS\System32\CRYPT32.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00cef20000-0x00cef32000): C:\WINDOWS\System32\MSASN1.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ca420000-0x00ca444000): C:\WINDOWS\SYSTEM32\WINMM.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x0091ad0000-0x0091b69000): C:\WINDOWS\SYSTEM32\DSOUND.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x005ead0000-0x005eaea000): K:\tools\vmware\x64\zlib1.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00c6da0000-0x00c6de1000): C:\WINDOWS\SYSTEM32\WinSCard.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ca600000-0x00ca613000): C:\WINDOWS\SYSTEM32\WTSAPI32.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00c8370000-0x00c8460000): C:\WINDOWS\SYSTEM32\WINHTTP.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ca360000-0x00ca38d000): C:\WINDOWS\SYSTEM32\WINMMBASE.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ced10000-0x00ced3a000): C:\WINDOWS\SYSTEM32\DEVOBJ.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00d15e0000-0x00d160e000): C:\WINDOWS\System32\IMM32.DLL
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00cdf50000-0x00cdf81000): C:\WINDOWS\SYSTEM32\ntmarta.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00cd180000-0x00cd219000): C:\WINDOWS\system32\uxtheme.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x005bb80000-0x005bdc8000): K:\tools\vmware\x64\libeay32.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x009b080000-0x009b0dd000): K:\tools\vmware\x64\ssleay32.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ce2f0000-0x00ce323000): C:\WINDOWS\system32\rsaenh.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ce950000-0x00ce95c000): C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00cee00000-0x00cee2f000): C:\WINDOWS\SYSTEM32\SspiCli.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ce780000-0x00ce7e7000): C:\WINDOWS\system32\mswsock.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ce4d0000-0x00ce59a000): C:\WINDOWS\SYSTEM32\DNSAPI.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00d1490000-0x00d1498000): C:\WINDOWS\System32\NSI.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ce490000-0x00ce4ca000): C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bfba0000-0x00bfbaa000): C:\Windows\System32\rasadhlp.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00d18c0000-0x00d1962000): C:\WINDOWS\System32\clbcatq.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bdec0000-0x00bded1000): C:\WINDOWS\system32\wbem\wbemprox.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bde30000-0x00bdeb4000): C:\WINDOWS\SYSTEM32\wbemcomn.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bdac0000-0x00bdad4000): C:\WINDOWS\system32\wbem\wbemsvc.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bd550000-0x00bd651000): C:\WINDOWS\system32\wbem\fastprox.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bda70000-0x00bda85000): C:\WINDOWS\SYSTEM32\amsi.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00cee30000-0x00cee55000): C:\WINDOWS\SYSTEM32\USERENV.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00bda20000-0x00bda64000): C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MpOav.dll
2019-10-28T11:12:23.633+01:00| svga| I125: [0x00ca1c0000-0x00ca1ca000): C:\WINDOWS\system32\version.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00d1680000-0x00d1688000): C:\WINDOWS\System32\psapi.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00c62a0000-0x00c6494000): C:\WINDOWS\SYSTEM32\dbghelp.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00d1350000-0x00d1486000): C:\WINDOWS\System32\MSCTF.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cf350000-0x00cf3ac000): C:\WINDOWS\System32\WINTRUST.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cdfc0000-0x00ce01c000): C:\WINDOWS\SYSTEM32\WINSTA.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cc270000-0x00cc4cb000): C:\WINDOWS\SYSTEM32\D3D11.DLL
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cdbf0000-0x00cdcdb000): C:\WINDOWS\SYSTEM32\dxgi.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cdb60000-0x00cdb80000): C:\WINDOWS\SYSTEM32\dxcore.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cd090000-0x00cd11f000): C:\WINDOWS\SYSTEM32\apphelp.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00c2930000-0x00c2b10000): C:\WINDOWS\System32\DriverStore\FileRepository\u0347338.inf_amd64_17d1b402964eb558\B347375\aticfx64.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00c28f0000-0x00c2926000): C:\WINDOWS\System32\DriverStore\FileRepository\u0347338.inf_amd64_17d1b402964eb558\B347375\atiuxp64.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00c02b0000-0x00c28e9000): C:\WINDOWS\System32\DriverStore\FileRepository\u0347338.inf_amd64_17d1b402964eb558\B347375\atidxx64.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00c0280000-0x00c02ab000): C:\WINDOWS\SYSTEM32\amdihk64.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00be720000-0x00be74b000): C:\WINDOWS\SYSTEM32\D3DSCache.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cd340000-0x00cd59a000): C:\WINDOWS\SYSTEM32\twinapi.appcore.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cd850000-0x00cd879000): C:\WINDOWS\SYSTEM32\RMCLIENT.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x008de60000-0x008dec6000): C:\WINDOWS\System32\SensorsApi.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00adbc0000-0x00adbe5000): C:\WINDOWS\System32\SensorsUtilsV2.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00a50a0000-0x00a50c8000): C:\WINDOWS\System32\SensorsNativeApi.V2.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00cae20000-0x00caf0f000): C:\WINDOWS\System32\PROPSYS.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x009feb0000-0x009fee0000): C:\Windows\System32\PortableDeviceTypes.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x009e190000-0x009e1cb000): C:\Windows\System32\deviceaccess.dll
2019-10-28T11:12:23.634+01:00| svga| I125: [0x00c78f0000-0x00c799e000): C:\WINDOWS\SYSTEM32\mscms.dll
2019-10-28T11:12:23.635+01:00| svga| I125: [0x00c8350000-0x00c8367000): C:\WINDOWS\SYSTEM32\ColorAdapterClient.dll
2019-10-28T11:12:23.635+01:00| svga| I125: [0x00c6990000-0x00c69d3000): C:\WINDOWS\SYSTEM32\icm32.dll
2019-10-28T11:12:23.635+01:00| svga| I125: [0x00c6270000-0x00c629a000): C:\WINDOWS\SYSTEM32\dbgcore.DLL
2019-10-28T11:12:23.635+01:00| svga| I125: End printing loaded objects
2019-10-28T11:12:23.635+01:00| svga| W115: Win32 object usage: GDI 12, USER 20
2019-10-28T11:12:23.635+01:00| svga| I125: Writing monitor `vmmcores.gz`
2019-10-28T11:12:23.719+01:00| svga| W115: Dumping core for vcpu-0
2019-10-28T11:12:23.719+01:00| svga| I125: Beginning monitor coredump
2019-10-28T11:12:23.866+01:00| svga| I125: CoreDump error: Read, page 0xd13 (0) Invalid access to memory location
2019-10-28T11:12:23.866+01:00| svga| I125: CoreDump error: Read, page 0xd14 (0) Invalid access to memory location
2019-10-28T11:12:23.866+01:00| svga| I125: CoreDump error: Read, page 0xd15 (0) Invalid access to memory location
2019-10-28T11:12:23.866+01:00| svga| I125: CoreDump error: Read, page 0xd16 (0) Invalid access to memory location
2019-10-28T11:12:24.149+01:00| svga| I125: End monitor coredump
2019-10-28T11:12:24.149+01:00| svga| W115: Dumping core for vcpu-1
2019-10-28T11:12:24.149+01:00| svga| I125: Beginning monitor coredump
2019-10-28T11:12:24.278+01:00| svga| I125: CoreDump error: Read, page 0xd13 (0) Invalid access to memory location
2019-10-28T11:12:24.278+01:00| svga| I125: CoreDump error: Read, page 0xd14 (0) Invalid access to memory location
2019-10-28T11:12:24.278+01:00| svga| I125: CoreDump error: Read, page 0xd15 (0) Invalid access to memory location
2019-10-28T11:12:24.279+01:00| svga| I125: CoreDump error: Read, page 0xd16 (0) Invalid access to memory location
2019-10-28T11:12:24.349+01:00| mks| W115: Panic in progress... ungrabbing
2019-10-28T11:12:24.349+01:00| mks| I125: MKS: Release starting (Panic)
2019-10-28T11:12:24.349+01:00| mks| I125: MKS: Release finished (Panic)
2019-10-28T11:12:24.559+01:00| svga| I125: End monitor coredump
2019-10-28T11:12:26.873+01:00| svga| I125: Msg_Post: Error
2019-10-28T11:12:26.873+01:00| svga| I125: [msg.log.error.unrecoverable] VMware Workstation unrecoverable error: (svga)
2019-10-28T11:12:26.873+01:00| svga| I125+ NOT_REACHED bora\mks\hostops\DX11\DX11ShaderTrans.c:162
2019-10-28T11:12:26.873+01:00| svga| I125: [msg.panic.haveLog] A log file is available in "K:\vmware_images\windows_10_x64_uefi\vmware.log".

Timeline

2019-11-14 - Vendor Disclosure
2019-11-15 - Vendor confirmed release of 15.5.1
2020-01-21 - Talos follow up re: testing on latest version
2020-02-07 - Vendor acknowledged and working on fix for latest version
2020-02-11 - Talos granted timeline extension to 2020-03-13
2020-03-03 - Additional timeline extension granted to 2020-06-30
2020-05-28 - Vendor patched
2020-06-01 - Public Release

Credit

Discovered by Piotr Bania of Cisco Talos.

TALOS-2020-1214

TALOS-2019-0897

Intelligence Center

Vulnerability Research

Incident Response

Security Resources

Media

Company