API tools faq
paste
Guest User

Untitled

a guest
Jun 4th, 2017
211
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 48.84 KB | None | 0 0
raw download clone embed print report
  1. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  3.  
  4. ========================================================================
  5. =================== Dump File: 051617-24078-01.dmp ====================
  6. ========================================================================
  7. Mini Kernel Dump File: Only registers and stack trace are available
  8. Executable search path is:
  9. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  10. Product: WinNt, suite: TerminalServer SingleUserTS
  11. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  12. Machine Name:
  13. Kernel base = 0xfffff800`75c8d000 PsLoadedModuleList = 0xfffff800`75fd95a0
  14. Debug session time: Tue May 16 00:45:12.519 2017 (UTC - 4:00)
  15. System Uptime: 3 days 6:59:08.513
  16. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  17. Run !sym noisy before .reload to track down problems loading symbols.
  18.  
  19. BugCheck A, {fffff8f3c63dc000, 2, 0, fffff80075d68236}
  20. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  21. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  22. Probably caused by : memory_corruption
  23. Followup: memory_corruption
  24.  
  25. !thread
  26. THREAD ffffe78c7e0957c0 Cid 0168.1944 Teb: 000000f0cc8b0000 Win32Thread: ffffe78c7a3a9910 RUNNING on processor 0
  27. IRP List:
  28. Unable to read nt!_IRP @ ffffe78c79706520
  29. Not impersonating
  30. GetUlongFromAddress: unable to read from fffff80075fca2d4
  31. Owning Process ffffe78c78bc37c0 Image: chrome.exe
  32. Attached Process N/A Image: N/A
  33. fffff78000000000: Unable to get shared data
  34. Wait Start TickCount 18198304
  35. Context Switch Count 3539528 IdealProcessor: 0
  36. ReadMemory error: Cannot get nt!KeMaximumIncrement value.
  37. UserTime 00:00:00.000
  38. KernelTime 00:00:00.000
  39. Win32 Start Address 0x00007ff98a7a3cd0
  40. Stack Init ffffc38180feedd0 Current ffffc38180fee670
  41. Base ffffc38180fef000 Limit ffffc38180fe9000 Call 0000000000000000
  42. Priority 12 BasePriority 8 PriorityDecrement 2 IoPriority 2 PagePriority 5
  43. Child-SP RetAddr : Args to Child : Call Site
  44. fffff800`77e5a788 fffff800`75e046a9 : 00000000`0000000a fffff8f3`c63dc000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
  45. fffff800`77e5a790 fffff800`75e02c7d : ffffe78c`7e800000 fffff800`00000000 fffff800`7600cb80 00000001`00000000 : nt!KiBugCheckDispatch+0x69
  46. fffff800`77e5a8d0 fffff800`75d68236 : fffff8fc`79e31ee0 fffff8fc`7e3cf188 fffff8fc`7e3f1e78 fffff8f3`c63d7000 : nt!KiPageFault+0x23d (TrapFrame @ fffff800`77e5a8d0)
  47. fffff800`77e5aa60 fffff80d`ca87d501 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe78c`77e06b80 : nt!MmBuildMdlForNonPagedPool+0x176
  48. fffff800`77e5aad0 fffff80d`cc327f9a : ffffe78c`73f9842d ffffe78c`73f9842d 00000000`00000000 fffff80d`cc351b16 : ndis!NdisAllocateMdl+0x31
  49. fffff800`77e5ab10 ffffe78c`73f9842d : ffffe78c`73f9842d 00000000`00000000 fffff80d`cc351b16 ffffe78c`72e92138 : RTL8192su+0x17f9a
  50. fffff800`77e5ab18 ffffe78c`73f9842d : 00000000`00000000 fffff80d`cc351b16 ffffe78c`72e92138 fffff80d`cc332020 : 0xffffe78c`73f9842d
  51. fffff800`77e5ab20 00000000`00000000 : fffff80d`cc351b16 ffffe78c`72e92138 fffff80d`cc332020 ffffe78c`73ea0000 : 0xffffe78c`73f9842d
  52.  
  53. !sysinfo smbios
  54. [SMBIOS Data Tables v2.5]
  55. [DMI Version - 0]
  56. [2.0 Calling Convention - No]
  57. [Table Size - 3086 bytes]
  58. [BIOS Information (Type 0) - Length 24 - Handle 0000h]
  59. Vendor Dell Inc.
  60. BIOS Version A15
  61. BIOS Starting Address Segment f000
  62. BIOS Release Date 03/28/2012
  63. BIOS ROM Size 200000
  64. BIOS Characteristics
  65. 07: - PCI Supported
  66. 09: - Plug and Play Supported
  67. 10: - APM Supported
  68. 11: - Upgradeable FLASH BIOS
  69. 12: - BIOS Shadowing Supported
  70. 14: - ESCD Supported
  71. 15: - CD-Boot Supported
  72. 16: - Selectable Boot Supported
  73. 19: - EDD Supported
  74. 21: - Toshiba J-Floppy Supported
  75. 24: - 720KB Floppy Supported
  76. 26: - Print Screen Device Supported
  77. 27: - Keyboard Services Supported
  78. 28: - Serial Services Supported
  79. 29: - Printer Services Supported
  80. 48: - System Vendor Reserved
  81. 49: - System Vendor Reserved
  82. 50: - System Vendor Reserved
  83. 51: - System Vendor Reserved
  84. 52: - System Vendor Reserved
  85. BIOS Characteristic Extensions
  86. 00: - ACPI Supported
  87. 01: - USB Legacy Supported
  88. 08: - BIOS Boot Specification Supported
  89. 09: - Fn-Key NET-Boot Supported
  90. 10: - Specification Reserved
  91. BIOS Major Revision 0
  92. BIOS Minor Revision 0
  93. EC Firmware Major Revision 255
  94. EC Firmware Minor Revision 255
  95. [System Information (Type 1) - Length 27 - Handle 0100h]
  96. Manufacturer Dell Inc.
  97. Product Name Precision WorkStation T3500
  98. Version [String Not Specified]
  99. Serial Number 2D7SJS1
  100. UUID 00000000-0000-0000-0000-000000000000
  101. Wakeup Type Power Switch
  102. SKUNumber [String Not Specified]
  103. Family [String Not Specified]
  104. [BaseBoard Information (Type 2) - Length 8 - Handle 0200h]
  105. Manufacturer Dell Inc.
  106. Product 09KPNV
  107. Version A01
  108. Serial Number ..CN708211CC0GTC.
  109. [System Enclosure (Type 3) - Length 13 - Handle 0300h]
  110. Manufacturer Dell Inc.
  111. Chassis Type Tower
  112. Version [String Not Specified]
  113. Serial Number
  114. Asset Tag Number
  115. Bootup State Safe
  116. Power Supply State Safe
  117. Thermal State Safe
  118. Security Status None
  119. [Processor Information (Type 4) - Length 40 - Handle 0400h]
  120. Socket Designation CPU
  121. Processor Type Central Processor
  122. Processor Family b3h - Intel Xeon
  123. Processor Manufacturer Intel
  124. Processor ID a5060100fffbebbf
  125. Processor Version [String Not Specified]
  126. Processor Voltage 00h -
  127. External Clock 4800MHz
  128. Max Speed 3800MHz
  129. Current Speed 3200MHz
  130. Status Enabled Populated
  131. Processor Upgrade Specification Reserved
  132. L1 Cache Handle 0700h
  133. L2 Cache Handle 0701h
  134. L3 Cache Handle 0704h
  135. Serial Number [String Not Specified]
  136. Asset Tag Number [String Not Specified]
  137. Part Number [String Not Specified]
  138. [Cache Information (Type 7) - Length 19 - Handle 0700h]
  139. Socket Designation [String Not Specified]
  140. Cache Configuration 0180h - WB Enabled Int NonSocketed L1
  141. Maximum Cache Size 0100h - 256K
  142. Installed Size 0100h - 256K
  143. Supported SRAM Type 0001h - Other
  144. Current SRAM Type 0001h - Other
  145. Cache Speed 0ns
  146. Error Correction Type None
  147. System Cache Type Unified
  148. Associativity 16-way Set-Associative
  149. [Cache Information (Type 7) - Length 19 - Handle 0701h]
  150. Socket Designation [String Not Specified]
  151. Cache Configuration 0281h - Varies Enabled Int NonSocketed L2
  152. Maximum Cache Size 0400h - 1024K
  153. Installed Size 0400h - 1024K
  154. Supported SRAM Type 0001h - Other
  155. Current SRAM Type 0001h - Other
  156. Cache Speed 0ns
  157. Error Correction Type Multi-Bit ECC
  158. System Cache Type Unified
  159. Associativity 16-way Set-Associative
  160. [Cache Information (Type 7) - Length 19 - Handle 0704h]
  161. Socket Designation [String Not Specified]
  162. Cache Configuration 0282h - Varies Enabled Int NonSocketed L3
  163. Maximum Cache Size 2000h - 8192K
  164. Installed Size 2000h - 8192K
  165. Supported SRAM Type 0001h - Other
  166. Current SRAM Type 0001h - Other
  167. Cache Speed 0ns
  168. Error Correction Type Multi-Bit ECC
  169. System Cache Type Unified
  170. Associativity Specification Reserved
  171. [Onboard Devices Information (Type 10) - Length 6 - Handle 0a02h]
  172. Number of Devices 1
  173. 01: Type Ethernet [enabled]
  174. 01: Description Intel Pro 1000 MT Network Connection
  175. [Onboard Devices Information (Type 10) - Length 6 - Handle 0a03h]
  176. Number of Devices 1
  177. 01: Type Sound [enabled]
  178. 01: Description Intel(R) High Definition Audio Controller
  179. [OEM Strings (Type 11) - Length 5 - Handle 0b00h]
  180. Number of Strings 1
  181. 1 www.dell.com
  182. [Physical Memory Array (Type 16) - Length 15 - Handle 1000h]
  183. Location 03h - SystemBoard/Motherboard
  184. Use 03h - System Memory
  185. Memory Error Correction 03h - None
  186. Maximum Capacity 25165824KB
  187. Memory Error Inf Handle [Not Provided]
  188. Number of Memory Devices 6
  189. [Memory Device (Type 17) - Length 27 - Handle 1100h]
  190. Physical Memory Array Handle 1000h
  191. Memory Error Info Handle [No Errors]
  192. Total Width 64 bits
  193. Data Width 64 bits
  194. Size 4096MB
  195. Form Factor 09h - DIMM
  196. Device Set [None]
  197. Device Locator DIMM 1
  198. Bank Locator [String Not Specified]
  199. Memory Type 18h - Specification Reserved
  200. Type Detail 4000h -
  201. Speed 1333MHz
  202. Manufacturer 80CE000080CE
  203. Serial Number
  204. Asset Tag Number
  205. Part Number M378B5273DH0-CH9
  206. [Memory Device (Type 17) - Length 27 - Handle 1101h]
  207. Physical Memory Array Handle 1000h
  208. Memory Error Info Handle [No Errors]
  209. Total Width 64 bits
  210. Data Width 64 bits
  211. Size 4096MB
  212. Form Factor 09h - DIMM
  213. Device Set [None]
  214. Device Locator DIMM 2
  215. Bank Locator [String Not Specified]
  216. Memory Type 18h - Specification Reserved
  217. Type Detail 4000h -
  218. Speed 1333MHz
  219. Manufacturer 80CE000080CE
  220. Serial Number
  221. Asset Tag Number
  222. Part Number M378B5273DH0-CH9
  223. [Memory Device (Type 17) - Length 27 - Handle 1102h]
  224. Physical Memory Array Handle 1000h
  225. Memory Error Info Handle [No Errors]
  226. Total Width 64 bits
  227. Data Width 64 bits
  228. Size 4096MB
  229. Form Factor 09h - DIMM
  230. Device Set [None]
  231. Device Locator DIMM 3
  232. Bank Locator [String Not Specified]
  233. Memory Type 18h - Specification Reserved
  234. Type Detail 4000h -
  235. Speed 1333MHz
  236. Manufacturer 80CE000080CE
  237. Serial Number
  238. Asset Tag Number
  239. Part Number M378B5273DH0-CH9
  240. [Memory Device (Type 17) - Length 27 - Handle 1103h]
  241. Physical Memory Array Handle 1000h
  242. Memory Error Info Handle [No Errors]
  243. Total Width 64 bits
  244. Data Width 64 bits
  245. Size [Not Populated]
  246. Form Factor 09h - DIMM
  247. Device Set [None]
  248. Device Locator DIMM 4
  249. Bank Locator [String Not Specified]
  250. Memory Type 18h - Specification Reserved
  251. Type Detail 0080h - Synchronous
  252. Speed 0MHz
  253. Manufacturer FFFFFFFFFFFF
  254. Serial Number
  255. Asset Tag Number
  256. Part Number
  257. [Memory Device (Type 17) - Length 27 - Handle 1104h]
  258. Physical Memory Array Handle 1000h
  259. Memory Error Info Handle [No Errors]
  260. Total Width 64 bits
  261. Data Width 64 bits
  262. Size [Not Populated]
  263. Form Factor 09h - DIMM
  264. Device Set [None]
  265. Device Locator DIMM 5
  266. Bank Locator [String Not Specified]
  267. Memory Type 18h - Specification Reserved
  268. Type Detail 0080h - Synchronous
  269. Speed 0MHz
  270. Manufacturer FFFFFFFFFFFF
  271. Serial Number
  272. Asset Tag Number
  273. Part Number
  274. [Memory Device (Type 17) - Length 27 - Handle 1105h]
  275. Physical Memory Array Handle 1000h
  276. Memory Error Info Handle [No Errors]
  277. Total Width 64 bits
  278. Data Width 64 bits
  279. Size [Not Populated]
  280. Form Factor 09h - DIMM
  281. Device Set [None]
  282. Device Locator DIMM 6
  283. Bank Locator [String Not Specified]
  284. Memory Type 18h - Specification Reserved
  285. Type Detail 0080h - Synchronous
  286. Speed 0MHz
  287. Manufacturer FFFFFFFFFFFF
  288. Serial Number
  289. Asset Tag Number
  290. Part Number
  291. [Memory Array Mapped Address (Type 19) - Length 15 - Handle 1300h]
  292. Starting Address 00000000h
  293. Ending Address 00bfffffh
  294. Memory Array Handle 1000h
  295. Partition Width 01
  296. 0: kd> !errrec fffff8f3c63dc000
  297. ===============================================================================
  298. Common Platform Error Record @ fffff8f3c63dc000
  299. -------------------------------------------------------------------------------
  300. Signature : *** INVALID ***
  301. Revision : 0.0
  302. Record Id : 0000000000000000
  303. Severity : Recoverable (0)
  304. Length : 0
  305. Creator : {00003ad7-0033-0000-0000-00000f000000}
  306. Notify Type : {00003ad7-0033-0000-0000-00000f000000}
  307. Flags : 0x00000000
  308.  
  309. IRQL_NOT_LESS_OR_EQUAL (a)
  310. An attempt was made to access a pageable (or completely invalid) address at an
  311. interrupt request level (IRQL) that is too high. This is usually
  312. caused by drivers using improper addresses.
  313. If a kernel debugger is available get the stack backtrace.
  314.  
  315. Arguments:
  316. Arg1: fffff8f3c63dc000, memory referenced
  317. Arg2: 0000000000000002, IRQL
  318. Arg3: 0000000000000000, bitfield :
  319. bit 0 : value 0 = read operation, 1 = write operation
  320. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  321. Arg4: fffff80075d68236, address which referenced memory
  322.  
  323. Debugging Details:
  324. DUMP_CLASS: 1
  325. DUMP_QUALIFIER: 400
  326. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  327. SYSTEM_MANUFACTURER: Dell Inc.
  328. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  329. BIOS_VENDOR: Dell Inc.
  330. BIOS_VERSION: A15
  331. BIOS_DATE: 03/28/2012
  332. BASEBOARD_MANUFACTURER: Dell Inc.
  333. BASEBOARD_PRODUCT: 09KPNV
  334. BASEBOARD_VERSION: A01
  335. DUMP_TYPE: 2
  336. READ_ADDRESS: fffff8f3c63dc000
  337. CURRENT_IRQL: 2
  338. FAULTING_IP:
  339. nt!MmBuildMdlForNonPagedPool+176
  340. fffff800`75d68236 498b00 mov rax,qword ptr [r8]
  341. CPU_COUNT: 8
  342. CPU_MHZ: c80
  343. CPU_VENDOR: GenuineIntel
  344. CPU_FAMILY: 6
  345. CPU_MODEL: 1a
  346. CPU_STEPPING: 5
  347. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  348. CUSTOMER_CRASH_COUNT: 1
  349. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  350. BUGCHECK_STR: AV
  351.  
  352. PROCESS_NAME: chrome.exe
  353.  
  354. ANALYSIS_SESSION_HOST: USERNAME-PC
  355. ANALYSIS_SESSION_TIME: 06-04-2017 01:39:13.0705
  356. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  357. DPC_STACK_BASE: FFFFF80077E5BFB0
  358. TRAP_FRAME: fffff80077e5a8d0 -- (.trap 0xfffff80077e5a8d0)
  359. NOTE: The trap frame does not contain all registers.
  360. Some register values may be zeroed or incorrect.
  361. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff80075ff7580
  362. rdx=00000000000000cf rsi=0000000000000000 rdi=0000000000000000
  363. rip=fffff80075d68236 rsp=fffff80077e5aa60 rbp=0000007ffffffff8
  364. r8=fffff8f3c63dc000 r9=ffffe78c7e800000 r10=0000000000000003
  365. r11=fffff8fc40000000 r12=0000000000000000 r13=0000000000000000
  366. r14=0000000000000000 r15=0000000000000000
  367. iopl=0 nv up ei pl zr na po nc
  368. nt!MmBuildMdlForNonPagedPool+0x176:
  369. fffff800`75d68236 498b00 mov rax,qword ptr [r8] ds:fffff8f3`c63dc000=????????????????
  370. Resetting default scope
  371. LAST_CONTROL_TRANSFER: from fffff80075e046a9 to fffff80075df9310
  372. STACK_COMMAND: kb
  373. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  374. fffff80075d68113 - nt!MmBuildMdlForNonPagedPool+53
  375. [ f6:f8 ]
  376. fffff80075d68178-fffff80075d68179 2 bytes - nt!MmBuildMdlForNonPagedPool+b8 (+0x65)
  377. [ fb f6:fc f8 ]
  378. fffff80075d68182-fffff80075d68183 2 bytes - nt!MmBuildMdlForNonPagedPool+c2 (+0x0a)
  379. [ 80 fa:00 ba ]
  380. fffff80075d68355-fffff80075d68356 2 bytes - nt!MmBuildMdlForNonPagedPool+295 (+0x1d3)
  381. [ fb f6:fc f8 ]
  382. fffff80075f0d374-fffff80075f0d375 2 bytes - nt!ExFreePoolWithTag+364
  383. [ fb f6:fc f8 ]
  384. 9 errors : !nt (fffff80075d68113-fffff80075f0d375)
  385. MODULE_NAME: memory_corruption
  386.  
  387. IMAGE_NAME: memory_corruption
  388.  
  389. FOLLOWUP_NAME: memory_corruption
  390. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  391. MEMORY_CORRUPTOR: LARGE
  392. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  393. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  394. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  395. TARGET_TIME: 2017-05-16T04:45:12.000Z
  396. OSBUILD: 15063
  397. OSSERVICEPACK: 296
  398. SERVICEPACK_NUMBER: 0
  399. OS_REVISION: 0
  400. SUITE_MASK: 272
  401. PRODUCT_TYPE: 1
  402. OSPLATFORM_TYPE: x64
  403. OSNAME: Windows 10
  404. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  405. OS_LOCALE:
  406. USER_LCID: 0
  407. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  408. BUILDDATESTAMP_STR: 160101.0800
  409. BUILDLAB_STR: WinBuild
  410. BUILDOSVER_STR: 10.0.15063.296
  411. ANALYSIS_SESSION_ELAPSED_TIME: 1930
  412. ANALYSIS_SOURCE: KM
  413. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  414. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  415. Followup: memory_corruption
  416.  
  417. ========================================================================
  418. =================== Dump File: 051817-24140-01.dmp ====================
  419. ========================================================================
  420. Mini Kernel Dump File: Only registers and stack trace are available
  421. Executable search path is:
  422. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  423. Product: WinNt, suite: TerminalServer SingleUserTS
  424. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  425. Machine Name:
  426. Kernel base = 0xfffff801`2d085000 PsLoadedModuleList = 0xfffff801`2d3d15a0
  427. Debug session time: Thu May 18 22:10:27.926 2017 (UTC - 4:00)
  428. System Uptime: 2 days 10:07:43.612
  429. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  430. Run !sym noisy before .reload to track down problems loading symbols.
  431.  
  432. BugCheck A, {ffff80dd07261000, 2, 0, fffff8012d160236}
  433. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  434. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  435. *** WARNING: Unable to verify timestamp for win32k.sys
  436. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  437. Probably caused by : memory_corruption
  438. Followup: memory_corruption
  439. IRQL_NOT_LESS_OR_EQUAL (a)
  440. An attempt was made to access a pageable (or completely invalid) address at an
  441. interrupt request level (IRQL) that is too high. This is usually
  442. caused by drivers using improper addresses.
  443. If a kernel debugger is available get the stack backtrace.
  444.  
  445. Arguments:
  446. Arg1: ffff80dd07261000, memory referenced
  447. Arg2: 0000000000000002, IRQL
  448. Arg3: 0000000000000000, bitfield :
  449. bit 0 : value 0 = read operation, 1 = write operation
  450. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  451. Arg4: fffff8012d160236, address which referenced memory
  452.  
  453. Debugging Details:
  454. DUMP_CLASS: 1
  455. DUMP_QUALIFIER: 400
  456. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  457. SYSTEM_MANUFACTURER: Dell Inc.
  458. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  459. BIOS_VENDOR: Dell Inc.
  460. BIOS_VERSION: A15
  461. BIOS_DATE: 03/28/2012
  462. BASEBOARD_MANUFACTURER: Dell Inc.
  463. BASEBOARD_PRODUCT: 09KPNV
  464. BASEBOARD_VERSION: A01
  465. DUMP_TYPE: 2
  466. READ_ADDRESS: ffff80dd07261000
  467. CURRENT_IRQL: 2
  468. FAULTING_IP:
  469. nt!MmBuildMdlForNonPagedPool+176
  470. fffff801`2d160236 498b00 mov rax,qword ptr [r8]
  471. CPU_COUNT: 8
  472. CPU_MHZ: c80
  473. CPU_VENDOR: GenuineIntel
  474. CPU_FAMILY: 6
  475. CPU_MODEL: 1a
  476. CPU_STEPPING: 5
  477. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  478. CUSTOMER_CRASH_COUNT: 1
  479. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  480. BUGCHECK_STR: AV
  481.  
  482. PROCESS_NAME: System
  483.  
  484. ANALYSIS_SESSION_HOST: USERNAME-PC
  485. ANALYSIS_SESSION_TIME: 06-04-2017 01:41:42.0814
  486. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  487. DPC_STACK_BASE: FFFFE100DCCD7FB0
  488. TRAP_FRAME: ffffe100dccd68d0 -- (.trap 0xffffe100dccd68d0)
  489. NOTE: The trap frame does not contain all registers.
  490. Some register values may be zeroed or incorrect.
  491. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff8012d3ef580
  492. rdx=0000000000000074 rsi=0000000000000000 rdi=0000000000000000
  493. rip=fffff8012d160236 rsp=ffffe100dccd6a60 rbp=0000007ffffffff8
  494. r8=ffff80dd07261000 r9=ffffba0e4b800000 r10=0000000000000003
  495. r11=ffff80c040000000 r12=0000000000000000 r13=0000000000000000
  496. r14=0000000000000000 r15=0000000000000000
  497. iopl=0 nv up ei pl zr na po nc
  498. nt!MmBuildMdlForNonPagedPool+0x176:
  499. fffff801`2d160236 498b00 mov rax,qword ptr [r8] ds:ffff80dd`07261000=????????????????
  500. Resetting default scope
  501. LAST_CONTROL_TRANSFER: from fffff8012d1fc6a9 to fffff8012d1f1310
  502. STACK_COMMAND: kb
  503. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  504. fffff8012d160113 - nt!MmBuildMdlForNonPagedPool+53
  505. [ f6:80 ]
  506. fffff8012d160178-fffff8012d160179 2 bytes - nt!MmBuildMdlForNonPagedPool+b8 (+0x65)
  507. [ fb f6:c0 80 ]
  508. fffff8012d160182-fffff8012d160183 2 bytes - nt!MmBuildMdlForNonPagedPool+c2 (+0x0a)
  509. [ 80 fa:00 8b ]
  510. fffff8012d160355-fffff8012d160356 2 bytes - nt!MmBuildMdlForNonPagedPool+295 (+0x1d3)
  511. [ fb f6:c0 80 ]
  512. fffff8012d305374-fffff8012d305375 2 bytes - nt!ExFreePoolWithTag+364
  513. [ fb f6:c0 80 ]
  514. 9 errors : !nt (fffff8012d160113-fffff8012d305375)
  515. MODULE_NAME: memory_corruption
  516.  
  517. IMAGE_NAME: memory_corruption
  518.  
  519. FOLLOWUP_NAME: memory_corruption
  520. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  521. MEMORY_CORRUPTOR: LARGE
  522. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  523. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  524. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  525. TARGET_TIME: 2017-05-19T02:10:27.000Z
  526. OSBUILD: 15063
  527. OSSERVICEPACK: 296
  528. SERVICEPACK_NUMBER: 0
  529. OS_REVISION: 0
  530. SUITE_MASK: 272
  531. PRODUCT_TYPE: 1
  532. OSPLATFORM_TYPE: x64
  533. OSNAME: Windows 10
  534. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  535. OS_LOCALE:
  536. USER_LCID: 0
  537. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  538. BUILDDATESTAMP_STR: 160101.0800
  539. BUILDLAB_STR: WinBuild
  540. BUILDOSVER_STR: 10.0.15063.296
  541. ANALYSIS_SESSION_ELAPSED_TIME: 18ee
  542. ANALYSIS_SOURCE: KM
  543. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  544. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  545. Followup: memory_corruption
  546.  
  547. ========================================================================
  548. =================== Dump File: 052217-23718-01.dmp ====================
  549. ========================================================================
  550. Mini Kernel Dump File: Only registers and stack trace are available
  551. Executable search path is:
  552. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  553. Product: WinNt, suite: TerminalServer SingleUserTS
  554. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  555. Machine Name:
  556. Kernel base = 0xfffff803`4e280000 PsLoadedModuleList = 0xfffff803`4e5cc5a0
  557. Debug session time: Mon May 22 18:54:29.055 2017 (UTC - 4:00)
  558. System Uptime: 3 days 20:41:59.867
  559. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  560. Run !sym noisy before .reload to track down problems loading symbols.
  561.  
  562. BugCheck A, {ffffe6e1426f5000, 2, 0, fffff8034e35b236}
  563. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  564. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  565. *** WARNING: Unable to verify timestamp for win32k.sys
  566. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  567. Probably caused by : memory_corruption
  568. Followup: memory_corruption
  569. IRQL_NOT_LESS_OR_EQUAL (a)
  570. An attempt was made to access a pageable (or completely invalid) address at an
  571. interrupt request level (IRQL) that is too high. This is usually
  572. caused by drivers using improper addresses.
  573. If a kernel debugger is available get the stack backtrace.
  574.  
  575. Arguments:
  576. Arg1: ffffe6e1426f5000, memory referenced
  577. Arg2: 0000000000000002, IRQL
  578. Arg3: 0000000000000000, bitfield :
  579. bit 0 : value 0 = read operation, 1 = write operation
  580. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  581. Arg4: fffff8034e35b236, address which referenced memory
  582.  
  583. Debugging Details:
  584. DUMP_CLASS: 1
  585. DUMP_QUALIFIER: 400
  586. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  587. SYSTEM_MANUFACTURER: Dell Inc.
  588. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  589. BIOS_VENDOR: Dell Inc.
  590. BIOS_VERSION: A15
  591. BIOS_DATE: 03/28/2012
  592. BASEBOARD_MANUFACTURER: Dell Inc.
  593. BASEBOARD_PRODUCT: 09KPNV
  594. BASEBOARD_VERSION: A01
  595. DUMP_TYPE: 2
  596. READ_ADDRESS: ffffe6e1426f5000 Nonpaged pool
  597. CURRENT_IRQL: 2
  598. FAULTING_IP:
  599. nt!MmBuildMdlForNonPagedPool+176
  600. fffff803`4e35b236 498b00 mov rax,qword ptr [r8]
  601. CPU_COUNT: 8
  602. CPU_MHZ: c80
  603. CPU_VENDOR: GenuineIntel
  604. CPU_FAMILY: 6
  605. CPU_MODEL: 1a
  606. CPU_STEPPING: 5
  607. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  608. CUSTOMER_CRASH_COUNT: 1
  609. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  610. BUGCHECK_STR: AV
  611.  
  612. PROCESS_NAME: System
  613.  
  614. ANALYSIS_SESSION_HOST: USERNAME-PC
  615. ANALYSIS_SESSION_TIME: 06-04-2017 01:43:50.0186
  616. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  617. TRAP_FRAME: fffff803504536c0 -- (.trap 0xfffff803504536c0)
  618. NOTE: The trap frame does not contain all registers.
  619. Some register values may be zeroed or incorrect.
  620. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff8034e5ea580
  621. rdx=0000000000000085 rsi=0000000000000000 rdi=0000000000000000
  622. rip=fffff8034e35b236 rsp=fffff80350453850 rbp=0000007ffffffff8
  623. r8=ffffe6e1426f5000 r9=ffffc284df000000 r10=0000000000000003
  624. r11=ffffe6f340000000 r12=0000000000000000 r13=0000000000000000
  625. r14=0000000000000000 r15=0000000000000000
  626. iopl=0 nv up ei pl zr na po nc
  627. nt!MmBuildMdlForNonPagedPool+0x176:
  628. fffff803`4e35b236 498b00 mov rax,qword ptr [r8] ds:ffffe6e1`426f5000=????????????????
  629. Resetting default scope
  630. LAST_CONTROL_TRANSFER: from fffff8034e3f76a9 to fffff8034e3ec310
  631. STACK_COMMAND: kb
  632. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  633. fffff8034e324aa9 - nt!MmDeleteKernelStack+2a9
  634. [ fa:a4 ]
  635. fffff8034e324ace - nt!MmDeleteKernelStack+2ce (+0x25)
  636. [ f6:e6 ]
  637. fffff8034e324b0f - nt!MmDeleteKernelStack+30f (+0x41)
  638. [ f6:e6 ]
  639. fffff8034e35b113 - nt!MmBuildMdlForNonPagedPool+53 (+0x36604)
  640. [ f6:e6 ]
  641. fffff8034e35b178-fffff8034e35b179 2 bytes - nt!MmBuildMdlForNonPagedPool+b8 (+0x65)
  642. [ fb f6:f3 e6 ]
  643. fffff8034e35b183 - nt!MmBuildMdlForNonPagedPool+c3 (+0x0b)
  644. [ fa:a4 ]
  645. fffff8034e35b355-fffff8034e35b356 2 bytes - nt!MmBuildMdlForNonPagedPool+295 (+0x1d2)
  646. [ fb f6:f3 e6 ]
  647. fffff8034e500374-fffff8034e500375 2 bytes - nt!ExFreePoolWithTag+364
  648. [ fb f6:f3 e6 ]
  649. 11 errors : !nt (fffff8034e324aa9-fffff8034e500375)
  650. MODULE_NAME: memory_corruption
  651.  
  652. IMAGE_NAME: memory_corruption
  653.  
  654. FOLLOWUP_NAME: memory_corruption
  655. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  656. MEMORY_CORRUPTOR: LARGE
  657. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  658. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  659. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  660. TARGET_TIME: 2017-05-22T22:54:29.000Z
  661. OSBUILD: 15063
  662. OSSERVICEPACK: 296
  663. SERVICEPACK_NUMBER: 0
  664. OS_REVISION: 0
  665. SUITE_MASK: 272
  666. PRODUCT_TYPE: 1
  667. OSPLATFORM_TYPE: x64
  668. OSNAME: Windows 10
  669. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  670. OS_LOCALE:
  671. USER_LCID: 0
  672. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  673. BUILDDATESTAMP_STR: 160101.0800
  674. BUILDLAB_STR: WinBuild
  675. BUILDOSVER_STR: 10.0.15063.296
  676. ANALYSIS_SESSION_ELAPSED_TIME: 18ce
  677. ANALYSIS_SOURCE: KM
  678. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  679. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  680. Followup: memory_corruption
  681.  
  682. ========================================================================
  683. =================== Dump File: 052417-22984-01.dmp ====================
  684. ========================================================================
  685. Mini Kernel Dump File: Only registers and stack trace are available
  686. Executable search path is:
  687. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  688. Product: WinNt, suite: TerminalServer SingleUserTS
  689. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  690. Machine Name:
  691. Kernel base = 0xfffff802`54c95000 PsLoadedModuleList = 0xfffff802`54fe15a0
  692. Debug session time: Wed May 24 20:24:05.872 2017 (UTC - 4:00)
  693. System Uptime: 2 days 1:27:49.555
  694. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  695. Run !sym noisy before .reload to track down problems loading symbols.
  696.  
  697. BugCheck A, {fffff44c828eb000, 2, 0, fffff80254d70236}
  698. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  699. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  700. Probably caused by : memory_corruption
  701. Followup: memory_corruption
  702.  
  703. IRQL_NOT_LESS_OR_EQUAL (a)
  704. An attempt was made to access a pageable (or completely invalid) address at an
  705. interrupt request level (IRQL) that is too high. This is usually
  706. caused by drivers using improper addresses.
  707. If a kernel debugger is available get the stack backtrace.
  708.  
  709. Arguments:
  710. Arg1: fffff44c828eb000, memory referenced
  711. Arg2: 0000000000000002, IRQL
  712. Arg3: 0000000000000000, bitfield :
  713. bit 0 : value 0 = read operation, 1 = write operation
  714. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  715. Arg4: fffff80254d70236, address which referenced memory
  716.  
  717. Debugging Details:
  718. DUMP_CLASS: 1
  719. DUMP_QUALIFIER: 400
  720. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  721. SYSTEM_MANUFACTURER: Dell Inc.
  722. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  723. BIOS_VENDOR: Dell Inc.
  724. BIOS_VERSION: A15
  725. BIOS_DATE: 03/28/2012
  726. BASEBOARD_MANUFACTURER: Dell Inc.
  727. BASEBOARD_PRODUCT: 09KPNV
  728. BASEBOARD_VERSION: A01
  729. DUMP_TYPE: 2
  730. READ_ADDRESS: fffff44c828eb000
  731. CURRENT_IRQL: 2
  732. FAULTING_IP:
  733. nt!MmBuildMdlForNonPagedPool+176
  734. fffff802`54d70236 498b00 mov rax,qword ptr [r8]
  735. CPU_COUNT: 8
  736. CPU_MHZ: c80
  737. CPU_VENDOR: GenuineIntel
  738. CPU_FAMILY: 6
  739. CPU_MODEL: 1a
  740. CPU_STEPPING: 5
  741. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  742. CUSTOMER_CRASH_COUNT: 1
  743. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  744. BUGCHECK_STR: AV
  745.  
  746. PROCESS_NAME: chrome.exe
  747.  
  748. ANALYSIS_SESSION_HOST: USERNAME-PC
  749. ANALYSIS_SESSION_TIME: 06-04-2017 01:45:48.0541
  750. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  751. DPC_STACK_BASE: FFFFF80256E5BFB0
  752. TRAP_FRAME: fffff80256e5a8d0 -- (.trap 0xfffff80256e5a8d0)
  753. NOTE: The trap frame does not contain all registers.
  754. Some register values may be zeroed or incorrect.
  755. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff80254fff580
  756. rdx=0000000000000032 rsi=0000000000000000 rdi=0000000000000000
  757. rip=fffff80254d70236 rsp=fffff80256e5aa60 rbp=0000007ffffffff8
  758. r8=fffff44c828eb000 r9=ffff99051fa00000 r10=0000000000000003
  759. r11=fffff47a00000000 r12=0000000000000000 r13=0000000000000000
  760. r14=0000000000000000 r15=0000000000000000
  761. iopl=0 nv up ei pl zr na po nc
  762. nt!MmBuildMdlForNonPagedPool+0x176:
  763. fffff802`54d70236 498b00 mov rax,qword ptr [r8] ds:fffff44c`828eb000=????????????????
  764. Resetting default scope
  765. LAST_CONTROL_TRANSFER: from fffff80254e0c6a9 to fffff80254e01310
  766. STACK_COMMAND: kb
  767. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  768. fffff80254d70112-fffff80254d70113 2 bytes - nt!MmBuildMdlForNonPagedPool+52
  769. [ 80 f6:00 f4 ]
  770. fffff80254d70177-fffff80254d70179 3 bytes - nt!MmBuildMdlForNonPagedPool+b7 (+0x65)
  771. [ 40 fb f6:00 7a f4 ]
  772. fffff80254d70183 - nt!MmBuildMdlForNonPagedPool+c3 (+0x0c)
  773. [ fa:f8 ]
  774. fffff80254d70354-fffff80254d70356 3 bytes - nt!MmBuildMdlForNonPagedPool+294 (+0x1d1)
  775. [ 40 fb f6:00 7a f4 ]
  776. fffff80254f15373-fffff80254f15375 3 bytes - nt!ExFreePoolWithTag+363
  777. [ 40 fb f6:00 7a f4 ]
  778. 12 errors : !nt (fffff80254d70112-fffff80254f15375)
  779. MODULE_NAME: memory_corruption
  780.  
  781. IMAGE_NAME: memory_corruption
  782.  
  783. FOLLOWUP_NAME: memory_corruption
  784. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  785. MEMORY_CORRUPTOR: LARGE
  786. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  787. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  788. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  789. TARGET_TIME: 2017-05-25T00:24:05.000Z
  790. OSBUILD: 15063
  791. OSSERVICEPACK: 296
  792. SERVICEPACK_NUMBER: 0
  793. OS_REVISION: 0
  794. SUITE_MASK: 272
  795. PRODUCT_TYPE: 1
  796. OSPLATFORM_TYPE: x64
  797. OSNAME: Windows 10
  798. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  799. OS_LOCALE:
  800. USER_LCID: 0
  801. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  802. BUILDDATESTAMP_STR: 160101.0800
  803. BUILDLAB_STR: WinBuild
  804. BUILDOSVER_STR: 10.0.15063.296
  805. ANALYSIS_SESSION_ELAPSED_TIME: 195e
  806. ANALYSIS_SOURCE: KM
  807. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  808. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  809. Followup: memory_corruption
  810.  
  811. ========================================================================
  812. =================== Dump File: 052717-21062-01.dmp ====================
  813. ========================================================================
  814. Mini Kernel Dump File: Only registers and stack trace are available
  815. Executable search path is:
  816. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  817. Product: WinNt, suite: TerminalServer SingleUserTS
  818. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  819. Machine Name:
  820. Kernel base = 0xfffff802`66690000 PsLoadedModuleList = 0xfffff802`669dc5a0
  821. Debug session time: Sat May 27 11:11:34.020 2017 (UTC - 4:00)
  822. System Uptime: 2 days 14:46:04.702
  823. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  824. Run !sym noisy before .reload to track down problems loading symbols.
  825.  
  826. BugCheck A, {ffffdac545f0d000, 2, 0, fffff8026676b236}
  827. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  828. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  829. Probably caused by : memory_corruption
  830. Followup: memory_corruption
  831. IRQL_NOT_LESS_OR_EQUAL (a)
  832. An attempt was made to access a pageable (or completely invalid) address at an
  833. interrupt request level (IRQL) that is too high. This is usually
  834. caused by drivers using improper addresses.
  835. If a kernel debugger is available get the stack backtrace.
  836.  
  837. Arguments:
  838. Arg1: ffffdac545f0d000, memory referenced
  839. Arg2: 0000000000000002, IRQL
  840. Arg3: 0000000000000000, bitfield :
  841. bit 0 : value 0 = read operation, 1 = write operation
  842. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  843. Arg4: fffff8026676b236, address which referenced memory
  844.  
  845. Debugging Details:
  846. DUMP_CLASS: 1
  847. DUMP_QUALIFIER: 400
  848. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  849. SYSTEM_MANUFACTURER: Dell Inc.
  850. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  851. BIOS_VENDOR: Dell Inc.
  852. BIOS_VERSION: A15
  853. BIOS_DATE: 03/28/2012
  854. BASEBOARD_MANUFACTURER: Dell Inc.
  855. BASEBOARD_PRODUCT: 09KPNV
  856. BASEBOARD_VERSION: A01
  857. DUMP_TYPE: 2
  858. READ_ADDRESS: ffffdac545f0d000
  859. CURRENT_IRQL: 2
  860. FAULTING_IP:
  861. nt!MmBuildMdlForNonPagedPool+176
  862. fffff802`6676b236 498b00 mov rax,qword ptr [r8]
  863. CPU_COUNT: 8
  864. CPU_MHZ: c80
  865. CPU_VENDOR: GenuineIntel
  866. CPU_FAMILY: 6
  867. CPU_MODEL: 1a
  868. CPU_STEPPING: 5
  869. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  870. CUSTOMER_CRASH_COUNT: 1
  871. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  872. BUGCHECK_STR: AV
  873.  
  874. PROCESS_NAME: chrome.exe
  875.  
  876. ANALYSIS_SESSION_HOST: USERNAME-PC
  877. ANALYSIS_SESSION_TIME: 06-04-2017 01:48:24.0377
  878. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  879. DPC_STACK_BASE: FFFFF8026885BFB0
  880. TRAP_FRAME: fffff8026885a8d0 -- (.trap 0xfffff8026885a8d0)
  881. NOTE: The trap frame does not contain all registers.
  882. Some register values may be zeroed or incorrect.
  883. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff802669fa580
  884. rdx=0000000000000015 rsi=0000000000000000 rdi=0000000000000000
  885. rip=fffff8026676b236 rsp=fffff8026885aa60 rbp=0000007ffffffff8
  886. r8=ffffdac545f0d000 r9=ffff8a8be1000000 r10=0000000000000003
  887. r11=ffffdaed40000000 r12=0000000000000000 r13=0000000000000000
  888. r14=0000000000000000 r15=0000000000000000
  889. iopl=0 nv up ei pl zr na po nc
  890. nt!MmBuildMdlForNonPagedPool+0x176:
  891. fffff802`6676b236 498b00 mov rax,qword ptr [r8] ds:ffffdac5`45f0d000=????????????????
  892. Resetting default scope
  893. LAST_CONTROL_TRANSFER: from fffff802668076a9 to fffff802667fc310
  894. STACK_COMMAND: kb
  895. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  896. fffff8026676b113 - nt!MmBuildMdlForNonPagedPool+53
  897. [ f6:da ]
  898. fffff8026676b178-fffff8026676b179 2 bytes - nt!MmBuildMdlForNonPagedPool+b8 (+0x65)
  899. [ fb f6:ed da ]
  900. fffff8026676b182-fffff8026676b183 2 bytes - nt!MmBuildMdlForNonPagedPool+c2 (+0x0a)
  901. [ 80 fa:00 80 ]
  902. fffff8026676b355-fffff8026676b356 2 bytes - nt!MmBuildMdlForNonPagedPool+295 (+0x1d3)
  903. [ fb f6:ed da ]
  904. fffff80266910374-fffff80266910375 2 bytes - nt!ExFreePoolWithTag+364
  905. [ fb f6:ed da ]
  906. 9 errors : !nt (fffff8026676b113-fffff80266910375)
  907. MODULE_NAME: memory_corruption
  908.  
  909. IMAGE_NAME: memory_corruption
  910.  
  911. FOLLOWUP_NAME: memory_corruption
  912. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  913. MEMORY_CORRUPTOR: LARGE
  914. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  915. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  916. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  917. TARGET_TIME: 2017-05-27T15:11:34.000Z
  918. OSBUILD: 15063
  919. OSSERVICEPACK: 296
  920. SERVICEPACK_NUMBER: 0
  921. OS_REVISION: 0
  922. SUITE_MASK: 272
  923. PRODUCT_TYPE: 1
  924. OSPLATFORM_TYPE: x64
  925. OSNAME: Windows 10
  926. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  927. OS_LOCALE:
  928. USER_LCID: 0
  929. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  930. BUILDDATESTAMP_STR: 160101.0800
  931. BUILDLAB_STR: WinBuild
  932. BUILDOSVER_STR: 10.0.15063.296
  933. ANALYSIS_SESSION_ELAPSED_TIME: 1918
  934. ANALYSIS_SOURCE: KM
  935. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  936. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  937. Followup: memory_corruption
  938.  
  939. ========================================================================
  940. =================== Dump File: 053017-20484-01.dmp ====================
  941. ========================================================================
  942. Mini Kernel Dump File: Only registers and stack trace are available
  943. Executable search path is:
  944. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  945. Product: WinNt, suite: TerminalServer SingleUserTS
  946. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  947. Machine Name:
  948. Kernel base = 0xfffff801`3b87c000 PsLoadedModuleList = 0xfffff801`3bbc85a0
  949. Debug session time: Tue May 30 19:59:44.118 2017 (UTC - 4:00)
  950. System Uptime: 1 days 4:41:12.800
  951.  
  952. BugCheck A, {ffffe5c683af6000, 2, 0, fffff8013b957236}
  953. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  954. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  955. Probably caused by : memory_corruption
  956. Followup: memory_corruption
  957. IRQL_NOT_LESS_OR_EQUAL (a)
  958. An attempt was made to access a pageable (or completely invalid) address at an
  959. interrupt request level (IRQL) that is too high. This is usually
  960. caused by drivers using improper addresses.
  961. If a kernel debugger is available get the stack backtrace.
  962.  
  963. Arguments:
  964. Arg1: ffffe5c683af6000, memory referenced
  965. Arg2: 0000000000000002, IRQL
  966. Arg3: 0000000000000000, bitfield :
  967. bit 0 : value 0 = read operation, 1 = write operation
  968. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  969. Arg4: fffff8013b957236, address which referenced memory
  970.  
  971. Debugging Details:
  972. DUMP_CLASS: 1
  973. DUMP_QUALIFIER: 400
  974. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  975. SYSTEM_MANUFACTURER: Dell Inc.
  976. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  977. BIOS_VENDOR: Dell Inc.
  978. BIOS_VERSION: A15
  979. BIOS_DATE: 03/28/2012
  980. BASEBOARD_MANUFACTURER: Dell Inc.
  981. BASEBOARD_PRODUCT: 09KPNV
  982. BASEBOARD_VERSION: A01
  983. DUMP_TYPE: 2
  984. READ_ADDRESS: ffffe5c683af6000 Nonpaged pool
  985. CURRENT_IRQL: 2
  986. FAULTING_IP:
  987. nt!MmBuildMdlForNonPagedPool+176
  988. fffff801`3b957236 498b00 mov rax,qword ptr [r8]
  989. CPU_COUNT: 8
  990. CPU_MHZ: c80
  991. CPU_VENDOR: GenuineIntel
  992. CPU_FAMILY: 6
  993. CPU_MODEL: 1a
  994. CPU_STEPPING: 5
  995. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  996. CUSTOMER_CRASH_COUNT: 1
  997. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  998. BUGCHECK_STR: AV
  999.  
  1000. PROCESS_NAME: wallpaper32.exe
  1001.  
  1002. ANALYSIS_SESSION_HOST: USERNAME-PC
  1003. ANALYSIS_SESSION_TIME: 06-04-2017 01:50:03.0895
  1004. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  1005. DPC_STACK_BASE: FFFFF8013DA5BFB0
  1006. TRAP_FRAME: fffff8013da5a8d0 -- (.trap 0xfffff8013da5a8d0)
  1007. NOTE: The trap frame does not contain all registers.
  1008. Some register values may be zeroed or incorrect.
  1009. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff8013bbe6580
  1010. rdx=000000000000001a rsi=0000000000000000 rdi=0000000000000000
  1011. rip=fffff8013b957236 rsp=fffff8013da5aa60 rbp=0000007ffffffff8
  1012. r8=ffffe5c683af6000 r9=ffff8d075e200000 r10=0000000000000003
  1013. r11=ffffe5f2c0000000 r12=0000000000000000 r13=0000000000000000
  1014. r14=0000000000000000 r15=0000000000000000
  1015. iopl=0 nv up ei pl zr na po nc
  1016. nt!MmBuildMdlForNonPagedPool+0x176:
  1017. fffff801`3b957236 498b00 mov rax,qword ptr [r8] ds:ffffe5c6`83af6000=????????????????
  1018. Resetting default scope
  1019. LAST_CONTROL_TRANSFER: from fffff8013b9f36a9 to fffff8013b9e8310
  1020. STACK_COMMAND: kb
  1021. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  1022. fffff8013b957113 - nt!MmBuildMdlForNonPagedPool+53
  1023. [ f6:e5 ]
  1024. fffff8013b957177-fffff8013b957179 3 bytes - nt!MmBuildMdlForNonPagedPool+b7 (+0x64)
  1025. [ 40 fb f6:c0 f2 e5 ]
  1026. fffff8013b957182-fffff8013b957183 2 bytes - nt!MmBuildMdlForNonPagedPool+c2 (+0x0b)
  1027. [ 80 fa:00 82 ]
  1028. fffff8013b957354-fffff8013b957356 3 bytes - nt!MmBuildMdlForNonPagedPool+294 (+0x1d2)
  1029. [ 40 fb f6:c0 f2 e5 ]
  1030. fffff8013bafc373-fffff8013bafc375 3 bytes - nt!ExFreePoolWithTag+363
  1031. [ 40 fb f6:c0 f2 e5 ]
  1032. 12 errors : !nt (fffff8013b957113-fffff8013bafc375)
  1033. MODULE_NAME: memory_corruption
  1034.  
  1035. IMAGE_NAME: memory_corruption
  1036.  
  1037. FOLLOWUP_NAME: memory_corruption
  1038. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1039. MEMORY_CORRUPTOR: LARGE
  1040. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1041. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1042. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1043. TARGET_TIME: 2017-05-30T23:59:44.000Z
  1044. OSBUILD: 15063
  1045. OSSERVICEPACK: 296
  1046. SERVICEPACK_NUMBER: 0
  1047. OS_REVISION: 0
  1048. SUITE_MASK: 272
  1049. PRODUCT_TYPE: 1
  1050. OSPLATFORM_TYPE: x64
  1051. OSNAME: Windows 10
  1052. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  1053. OS_LOCALE:
  1054. USER_LCID: 0
  1055. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  1056. BUILDDATESTAMP_STR: 160101.0800
  1057. BUILDLAB_STR: WinBuild
  1058. BUILDOSVER_STR: 10.0.15063.296
  1059. ANALYSIS_SESSION_ELAPSED_TIME: 1940
  1060. ANALYSIS_SOURCE: KM
  1061. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1062. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1063. Followup: memory_corruption
  1064.  
  1065. ========================================================================
  1066. =================== Dump File: 053017-46265-01.dmp ====================
  1067. ========================================================================
  1068. Mini Kernel Dump File: Only registers and stack trace are available
  1069. Executable search path is:
  1070. Windows 10 Kernel Version 15063 MP (8 procs) Free x64
  1071. Product: WinNt, suite: TerminalServer SingleUserTS
  1072. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  1073. Machine Name:
  1074. Kernel base = 0xfffff800`0907f000 PsLoadedModuleList = 0xfffff800`093cb5a0
  1075. Debug session time: Wed May 31 00:40:01.121 2017 (UTC - 4:00)
  1076. System Uptime: 0 days 2:18:30.800
  1077. Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
  1078. Run !sym noisy before .reload to track down problems loading symbols.
  1079.  
  1080. BugCheck A, {ffff97e003034000, 2, 0, fffff8000915a236}
  1081. *** WARNING: Unable to verify timestamp for RTL8192su.sys
  1082. *** ERROR: Module load completed but symbols could not be loaded for RTL8192su.sys
  1083. Probably caused by : memory_corruption
  1084. Followup: memory_corruption
  1085. IRQL_NOT_LESS_OR_EQUAL (a)
  1086. An attempt was made to access a pageable (or completely invalid) address at an
  1087. interrupt request level (IRQL) that is too high. This is usually
  1088. caused by drivers using improper addresses.
  1089. If a kernel debugger is available get the stack backtrace.
  1090.  
  1091. Arguments:
  1092. Arg1: ffff97e003034000, memory referenced
  1093. Arg2: 0000000000000002, IRQL
  1094. Arg3: 0000000000000000, bitfield :
  1095. bit 0 : value 0 = read operation, 1 = write operation
  1096. bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
  1097. Arg4: fffff8000915a236, address which referenced memory
  1098.  
  1099. Debugging Details:
  1100. DUMP_CLASS: 1
  1101. DUMP_QUALIFIER: 400
  1102. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  1103. SYSTEM_MANUFACTURER: Dell Inc.
  1104. SYSTEM_PRODUCT_NAME: Precision WorkStation T3500
  1105. BIOS_VENDOR: Dell Inc.
  1106. BIOS_VERSION: A15
  1107. BIOS_DATE: 03/28/2012
  1108. BASEBOARD_MANUFACTURER: Dell Inc.
  1109. BASEBOARD_PRODUCT: 09KPNV
  1110. BASEBOARD_VERSION: A01
  1111. DUMP_TYPE: 2
  1112. READ_ADDRESS: ffff97e003034000
  1113. CURRENT_IRQL: 2
  1114. FAULTING_IP:
  1115. nt!MmBuildMdlForNonPagedPool+176
  1116. fffff800`0915a236 498b00 mov rax,qword ptr [r8]
  1117. CPU_COUNT: 8
  1118. CPU_MHZ: c80
  1119. CPU_VENDOR: GenuineIntel
  1120. CPU_FAMILY: 6
  1121. CPU_MODEL: 1a
  1122. CPU_STEPPING: 5
  1123. CPU_MICROCODE: 6,1a,5,0 (F,M,S,R) SIG: 19'00000000 (cache) 19'00000000 (init)
  1124. CUSTOMER_CRASH_COUNT: 1
  1125. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  1126. BUGCHECK_STR: AV
  1127.  
  1128. PROCESS_NAME: CUE.exe
  1129.  
  1130. ANALYSIS_SESSION_HOST: USERNAME-PC
  1131. ANALYSIS_SESSION_TIME: 06-04-2017 01:52:03.0455
  1132. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  1133. DPC_STACK_BASE: FFFFF8000B25BFB0
  1134. TRAP_FRAME: fffff8000b25a8d0 -- (.trap 0xfffff8000b25a8d0)
  1135. NOTE: The trap frame does not contain all registers.
  1136. Some register values may be zeroed or incorrect.
  1137. rax=ffff800000000000 rbx=0000000000000000 rcx=fffff800093e9580
  1138. rdx=0000000000000080 rsi=0000000000000000 rdi=0000000000000000
  1139. rip=fffff8000915a236 rsp=fffff8000b25aa60 rbp=0000007ffffffff8
  1140. r8=ffff97e003034000 r9=ffffc00608600000 r10=0000000000000003
  1141. r11=ffff97cbc0000000 r12=0000000000000000 r13=0000000000000000
  1142. r14=0000000000000000 r15=0000000000000000
  1143. iopl=0 nv up ei pl zr na po nc
  1144. nt!MmBuildMdlForNonPagedPool+0x176:
  1145. fffff800`0915a236 498b00 mov rax,qword ptr [r8] ds:ffff97e0`03034000=????????????????
  1146. Resetting default scope
  1147. LAST_CONTROL_TRANSFER: from fffff800091f66a9 to fffff800091eb310
  1148. STACK_COMMAND: kb
  1149. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  1150. fffff8000915a113 - nt!MmBuildMdlForNonPagedPool+53
  1151. [ f6:97 ]
  1152. fffff8000915a177-fffff8000915a179 3 bytes - nt!MmBuildMdlForNonPagedPool+b7 (+0x64)
  1153. [ 40 fb f6:c0 cb 97 ]
  1154. fffff8000915a182-fffff8000915a183 2 bytes - nt!MmBuildMdlForNonPagedPool+c2 (+0x0b)
  1155. [ 80 fa:00 98 ]
  1156. fffff8000915a354-fffff8000915a356 3 bytes - nt!MmBuildMdlForNonPagedPool+294 (+0x1d2)
  1157. [ 40 fb f6:c0 cb 97 ]
  1158. fffff80009187a88-fffff80009187a89 2 bytes - nt!MiMakeSystemCachePteValid+3c (+0x2d734)
  1159. [ 80 fa:00 98 ]
  1160. fffff80009187ab8 - nt!MiMakeSystemCachePteValid+6c (+0x30)
  1161. [ f6:97 ]
  1162. fffff800092ff373-fffff800092ff375 3 bytes - nt!ExFreePoolWithTag+363
  1163. [ 40 fb f6:c0 cb 97 ]
  1164. 15 errors : !nt (fffff8000915a113-fffff800092ff375)
  1165. MODULE_NAME: memory_corruption
  1166.  
  1167. IMAGE_NAME: memory_corruption
  1168.  
  1169. FOLLOWUP_NAME: memory_corruption
  1170. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  1171. MEMORY_CORRUPTOR: LARGE
  1172. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1173. BUCKET_ID: MEMORY_CORRUPTION_LARGE
  1174. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE
  1175. TARGET_TIME: 2017-05-31T04:40:01.000Z
  1176. OSBUILD: 15063
  1177. OSSERVICEPACK: 296
  1178. SERVICEPACK_NUMBER: 0
  1179. OS_REVISION: 0
  1180. SUITE_MASK: 272
  1181. PRODUCT_TYPE: 1
  1182. OSPLATFORM_TYPE: x64
  1183. OSNAME: Windows 10
  1184. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  1185. OS_LOCALE:
  1186. USER_LCID: 0
  1187. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  1188. BUILDDATESTAMP_STR: 160101.0800
  1189. BUILDLAB_STR: WinBuild
  1190. BUILDOSVER_STR: 10.0.15063.296
  1191. ANALYSIS_SESSION_ELAPSED_TIME: 191e
  1192. ANALYSIS_SOURCE: KM
  1193. FAILURE_ID_HASH_STRING: km:memory_corruption_large
  1194. FAILURE_ID_HASH: {e29154ac-69a4-0eb8-172a-a860f73c0a3c}
  1195. Followup: memory_corruption
  1196.  
  1197. ---------------------------------------------------------------------------
  1198. Skipped by gardenman (for now): 060217-38875-01.dmp and 060217-47718-01.dmp
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!