API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 22nd, 2017
145
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 28.47 KB | None | 0 0
raw download clone embed print report
  1. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  3.  
  4.  
  5. Loading Dump File [C:\Users\UserName\Desktop\Dumps\052117-4578-01.dmp]
  6. Mini Kernel Dump File: Only registers and stack trace are available
  7.  
  8. Symbol search path is: srv*
  9. Executable search path is:
  10. Windows 10 Kernel Version 15063 MP (4 procs) Free x64
  11. Product: WinNt, suite: TerminalServer SingleUserTS
  12. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  13. Machine Name:
  14. Kernel base = 0xfffff801`2947d000 PsLoadedModuleList = 0xfffff801`297c95a0
  15. Debug session time: Sun May 21 12:34:45.959 2017 (UTC - 4:00)
  16. System Uptime: 0 days 0:20:04.633
  17. Loading Kernel Symbols
  18. ...............................................................
  19. ................................................................
  20. ...................................
  21. Loading User Symbols
  22. Loading unloaded module list
  23. ........
  24. *******************************************************************************
  25. * *
  26. * Bugcheck Analysis *
  27. * *
  28. *******************************************************************************
  29.  
  30. Use !analyze -v to get detailed debugging information.
  31.  
  32. BugCheck D1, {63b9, ff, 4c, 63b9}
  33.  
  34. *** WARNING: Unable to verify timestamp for win32k.sys
  35. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  36. Probably caused by : memory_corruption
  37.  
  38. Followup: memory_corruption
  39. ---------
  40.  
  41.  
  42.  
  43. *******************************************************************************
  44. * *
  45. * Bugcheck Analysis *
  46. * *
  47. *******************************************************************************
  48.  
  49. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  50. An attempt was made to access a pageable (or completely invalid) address at an
  51. interrupt request level (IRQL) that is too high. This is usually
  52. caused by drivers using improper addresses.
  53. If kernel debugger is available get stack backtrace.
  54. Arguments:
  55. Arg1: 00000000000063b9, memory referenced
  56. Arg2: 00000000000000ff, IRQL
  57. Arg3: 000000000000004c, value 0 = read operation, 1 = write operation
  58. Arg4: 00000000000063b9, address which referenced memory
  59.  
  60. Debugging Details:
  61. ------------------
  62.  
  63.  
  64. DUMP_CLASS: 1
  65. DUMP_QUALIFIER: 400
  66. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  67. SYSTEM_MANUFACTURER: System manufacturer
  68. SYSTEM_PRODUCT_NAME: System Product Name
  69. SYSTEM_SKU: SKU
  70. SYSTEM_VERSION: System Version
  71. BIOS_VENDOR: American Megatrends Inc.
  72. BIOS_VERSION: 2001
  73. BIOS_DATE: 09/23/2016
  74. BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
  75. BASEBOARD_PRODUCT: H110M-K D3
  76. BASEBOARD_VERSION: Rev X.0x
  77. DUMP_TYPE: 2
  78. BUGCHECK_P1: 63b9
  79. BUGCHECK_P2: ff
  80. BUGCHECK_P3: 4c
  81. BUGCHECK_P4: 63b9
  82. READ_ADDRESS: 00000000000063b9
  83. CURRENT_IRQL: 0
  84. FAULTING_IP:
  85. +0
  86. 00000000`000063b9 ?? ???
  87. PROCESS_NAME: System
  88. ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.
  89. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT
  90. CPU_COUNT: 4
  91. CPU_MHZ: a98
  92. CPU_VENDOR: GenuineIntel
  93. CPU_FAMILY: 6
  94. CPU_MODEL: 5e
  95. CPU_STEPPING: 3
  96. CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
  97. CUSTOMER_CRASH_COUNT: 1
  98. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  99. ANALYSIS_SESSION_HOST: UserName-PC
  100. ANALYSIS_SESSION_TIME: 05-22-2017 12:31:48.0225
  101. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  102.  
  103. TRAP_FRAME: ffffca81254fc5e0 -- (.trap 0xffffca81254fc5e0)
  104. NOTE: The trap frame does not contain all registers.
  105. Some register values may be zeroed or incorrect.
  106. rax=fffff79cc000b000 rbx=0000000000000000 rcx=0000000000000380
  107. rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
  108. rip=00000000000063b9 rsp=ffffca81254fc770 rbp=0000000000000000
  109. r8=0000000000000380 r9=0000000000000000 r10=0000000000000001
  110. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  111. r14=0000000000000000 r15=0000000000000000
  112. iopl=0 nv up di ng nz na po nc
  113. 00000000`000063b9 ?? ???
  114. Resetting default scope
  115.  
  116. LAST_CONTROL_TRANSFER: from fffff801295f46a9 to fffff801295e9310
  117.  
  118. FAILED_INSTRUCTION_ADDRESS:
  119. +0
  120. 00000000`000063b9 ?? ???
  121.  
  122. STACK_COMMAND: kb
  123.  
  124. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  125. fffff801294d7fa0 - nt!MiFlushTbAsNeeded+70
  126. [ 80:00 ]
  127. 1 error : !nt (fffff801294d7fa0)
  128.  
  129. MODULE_NAME: memory_corruption
  130. IMAGE_NAME: memory_corruption
  131. FOLLOWUP_NAME: memory_corruption
  132. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  133. MEMORY_CORRUPTOR: ONE_BIT
  134. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  135. BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  136. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
  137. TARGET_TIME: 2017-05-21T16:34:45.000Z
  138. OSBUILD: 15063
  139. OSSERVICEPACK: 296
  140. SERVICEPACK_NUMBER: 0
  141. OS_REVISION: 0
  142. SUITE_MASK: 272
  143. PRODUCT_TYPE: 1
  144. OSPLATFORM_TYPE: x64
  145. OSNAME: Windows 10
  146. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  147. OS_LOCALE:
  148. USER_LCID: 0
  149. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  150. BUILDDATESTAMP_STR: 160101.0800
  151. BUILDLAB_STR: WinBuild
  152. BUILDOSVER_STR: 10.0.15063.296
  153. ANALYSIS_SESSION_ELAPSED_TIME: 190b
  154. ANALYSIS_SOURCE: KM
  155. FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
  156. FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
  157.  
  158. Followup: memory_corruption
  159. ---------
  160.  
  161.  
  162. ======================================================================
  163. ======================================================================
  164. ======================================================================
  165.  
  166.  
  167. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  168. Copyright (c) Microsoft Corporation. All rights reserved.
  169.  
  170.  
  171. Loading Dump File [C:\Users\UserName\Desktop\Dumps\052117-4578-02.dmp]
  172. Mini Kernel Dump File: Only registers and stack trace are available
  173.  
  174. Symbol search path is: srv*
  175. Executable search path is:
  176. Windows 10 Kernel Version 15063 MP (4 procs) Free x64
  177. Product: WinNt, suite: TerminalServer SingleUserTS
  178. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  179. Machine Name:
  180. Kernel base = 0xfffff800`d760e000 PsLoadedModuleList = 0xfffff800`d795a5a0
  181. Debug session time: Sun May 21 13:50:45.695 2017 (UTC - 4:00)
  182. System Uptime: 0 days 0:22:25.369
  183. Loading Kernel Symbols
  184. ...............................................................
  185. ................................................................
  186. ..................................
  187. Loading User Symbols
  188. Loading unloaded module list
  189. ........
  190. *******************************************************************************
  191. * *
  192. * Bugcheck Analysis *
  193. * *
  194. *******************************************************************************
  195.  
  196. Use !analyze -v to get detailed debugging information.
  197.  
  198. BugCheck D1, {5c19, ff, e9, 5c19}
  199.  
  200. Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+23d )
  201.  
  202. Followup: MachineOwner
  203. ---------
  204.  
  205. *******************************************************************************
  206. * *
  207. * Bugcheck Analysis *
  208. * *
  209. *******************************************************************************
  210.  
  211. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  212. An attempt was made to access a pageable (or completely invalid) address at an
  213. interrupt request level (IRQL) that is too high. This is usually
  214. caused by drivers using improper addresses.
  215. If kernel debugger is available get stack backtrace.
  216. Arguments:
  217. Arg1: 0000000000005c19, memory referenced
  218. Arg2: 00000000000000ff, IRQL
  219. Arg3: 00000000000000e9, value 0 = read operation, 1 = write operation
  220. Arg4: 0000000000005c19, address which referenced memory
  221.  
  222. Debugging Details:
  223. ------------------
  224.  
  225.  
  226. DUMP_CLASS: 1
  227. DUMP_QUALIFIER: 400
  228. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  229. SYSTEM_MANUFACTURER: System manufacturer
  230. SYSTEM_PRODUCT_NAME: System Product Name
  231. SYSTEM_SKU: SKU
  232. SYSTEM_VERSION: System Version
  233. BIOS_VENDOR: American Megatrends Inc.
  234. BIOS_VERSION: 2001
  235. BIOS_DATE: 09/23/2016
  236. BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
  237. BASEBOARD_PRODUCT: H110M-K D3
  238. BASEBOARD_VERSION: Rev X.0x
  239. DUMP_TYPE: 2
  240. BUGCHECK_P1: 5c19
  241. BUGCHECK_P2: ff
  242. BUGCHECK_P3: e9
  243. BUGCHECK_P4: 5c19
  244. CURRENT_IRQL: 0
  245. FAULTING_IP:
  246. +0
  247. 00000000`00005c19 ?? ???
  248.  
  249. PROCESS_NAME: System
  250. ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.
  251. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT
  252. CPU_COUNT: 4
  253. CPU_MHZ: a98
  254. CPU_VENDOR: GenuineIntel
  255. CPU_FAMILY: 6
  256. CPU_MODEL: 5e
  257. CPU_STEPPING: 3
  258. CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
  259. CUSTOMER_CRASH_COUNT: 2
  260. DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  261. ANALYSIS_SESSION_HOST: UserName-PC
  262. ANALYSIS_SESSION_TIME: 05-22-2017 12:35:38.0685
  263. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  264.  
  265. TRAP_FRAME: ffffa88095afc680 -- (.trap 0xffffa88095afc680)
  266. NOTE: The trap frame does not contain all registers.
  267. Some register values may be zeroed or incorrect.
  268. rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000001
  269. rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
  270. rip=0000000000005c19 rsp=ffffa88095afc810 rbp=0000000000000000
  271. r8=ffffe58bacfb2cf0 r9=ffffe58bacfb2c90 r10=0000010540fca2ae
  272. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  273. r14=0000000000000000 r15=0000000000000000
  274. iopl=0 nv up di ng nz na pe nc
  275. 00000000`00005c19 ?? ???
  276. Resetting default scope
  277.  
  278. LAST_CONTROL_TRANSFER: from fffff800d77856a9 to fffff800d777a310
  279. STACK_COMMAND: kb
  280. THREAD_SHA1_HASH_MOD_FUNC: bf99962f16aee8a6a536cfcc5454c0cd4db15ac9
  281. THREAD_SHA1_HASH_MOD_FUNC_OFFSET: e11032a5b0d8f823e1cbfc5959db225bec5c2b35
  282. THREAD_SHA1_HASH_MOD: 2a7ca9d3ab5386d53fea7498e1d81b9c4a4c036b
  283.  
  284. FOLLOWUP_IP:
  285. nt!KiPageFault+23d
  286. fffff800`d7783c7d 33c0 xor eax,eax
  287.  
  288. FAULT_INSTR_CODE: ffb0c033
  289. SYMBOL_STACK_INDEX: 2
  290. SYMBOL_NAME: nt!KiPageFault+23d
  291. FOLLOWUP_NAME: MachineOwner
  292. MODULE_NAME: nt
  293. IMAGE_NAME: ntkrnlmp.exe
  294. DEBUG_FLR_IMAGE_TIMESTAMP: 5902843e
  295. IMAGE_VERSION: 10.0.15063.296
  296. BUCKET_ID_FUNC_OFFSET: 23d
  297. FAILURE_BUCKET_ID: DISABLED_INTERRUPT_FAULT_nt!KiPageFault
  298. BUCKET_ID: DISABLED_INTERRUPT_FAULT_nt!KiPageFault
  299. PRIMARY_PROBLEM_CLASS: DISABLED_INTERRUPT_FAULT_nt!KiPageFault
  300. TARGET_TIME: 2017-05-21T17:50:45.000Z
  301. OSBUILD: 15063
  302. OSSERVICEPACK: 296
  303. SERVICEPACK_NUMBER: 0
  304. OS_REVISION: 0
  305. SUITE_MASK: 272
  306. PRODUCT_TYPE: 1
  307. OSPLATFORM_TYPE: x64
  308. OSNAME: Windows 10
  309. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  310. OS_LOCALE:
  311. USER_LCID: 0
  312. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  313. BUILDDATESTAMP_STR: 160101.0800
  314. BUILDLAB_STR: WinBuild
  315. BUILDOSVER_STR: 10.0.15063.296
  316. ANALYSIS_SESSION_ELAPSED_TIME: d88
  317. ANALYSIS_SOURCE: KM
  318. FAILURE_ID_HASH_STRING: km:disabled_interrupt_fault_nt!kipagefault
  319. FAILURE_ID_HASH: {4e9c41db-c8e3-cbef-73a7-1b373e8262de}
  320.  
  321. Followup: MachineOwner
  322. ---------
  323.  
  324.  
  325. ======================================================================
  326. ======================================================================
  327. ======================================================================
  328.  
  329.  
  330. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  331. Copyright (c) Microsoft Corporation. All rights reserved.
  332.  
  333. Loading Dump File [C:\Users\UserName\Desktop\Dumps\052117-4718-01.dmp]
  334. Mini Kernel Dump File: Only registers and stack trace are available
  335.  
  336. Symbol search path is: srv*
  337. Executable search path is:
  338. Windows 10 Kernel Version 15063 MP (4 procs) Free x64
  339. Product: WinNt, suite: TerminalServer SingleUserTS
  340. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  341. Machine Name:
  342. Kernel base = 0xfffff803`3301d000 PsLoadedModuleList = 0xfffff803`333695a0
  343. Debug session time: Sun May 21 12:39:37.331 2017 (UTC - 4:00)
  344. System Uptime: 0 days 0:04:30.005
  345. Loading Kernel Symbols
  346. ...............................................................
  347. ................................................................
  348. ................................
  349. Loading User Symbols
  350. Loading unloaded module list
  351. ........
  352. *******************************************************************************
  353. * *
  354. * Bugcheck Analysis *
  355. * *
  356. *******************************************************************************
  357.  
  358. Use !analyze -v to get detailed debugging information.
  359.  
  360. BugCheck D1, {4d66, ff, 8a, 4d66}
  361.  
  362. *** WARNING: Unable to verify timestamp for win32k.sys
  363. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  364. Probably caused by : memory_corruption
  365.  
  366. Followup: memory_corruption
  367. ---------
  368.  
  369. *******************************************************************************
  370. * *
  371. * Bugcheck Analysis *
  372. * *
  373. *******************************************************************************
  374.  
  375. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  376. An attempt was made to access a pageable (or completely invalid) address at an
  377. interrupt request level (IRQL) that is too high. This is usually
  378. caused by drivers using improper addresses.
  379. If kernel debugger is available get stack backtrace.
  380. Arguments:
  381. Arg1: 0000000000004d66, memory referenced
  382. Arg2: 00000000000000ff, IRQL
  383. Arg3: 000000000000008a, value 0 = read operation, 1 = write operation
  384. Arg4: 0000000000004d66, address which referenced memory
  385.  
  386. Debugging Details:
  387. ------------------
  388.  
  389. DUMP_CLASS: 1
  390. DUMP_QUALIFIER: 400
  391. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  392. SYSTEM_MANUFACTURER: System manufacturer
  393. SYSTEM_PRODUCT_NAME: System Product Name
  394. SYSTEM_SKU: SKU
  395. SYSTEM_VERSION: System Version
  396. BIOS_VENDOR: American Megatrends Inc.
  397. BIOS_VERSION: 2001
  398. BIOS_DATE: 09/23/2016
  399. BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
  400. BASEBOARD_PRODUCT: H110M-K D3
  401. BASEBOARD_VERSION: Rev X.0x
  402. DUMP_TYPE: 2
  403. BUGCHECK_P1: 4d66
  404. BUGCHECK_P2: ff
  405. BUGCHECK_P3: 8a
  406. BUGCHECK_P4: 4d66
  407. READ_ADDRESS: 0000000000004d66
  408. CURRENT_IRQL: 0
  409.  
  410. FAULTING_IP:
  411. +0
  412. 00000000`00004d66 ?? ???
  413.  
  414. PROCESS_NAME: System
  415. ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.
  416. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT
  417. CPU_COUNT: 4
  418. CPU_MHZ: a98
  419. CPU_VENDOR: GenuineIntel
  420. CPU_FAMILY: 6
  421. CPU_MODEL: 5e
  422. CPU_STEPPING: 3
  423. CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
  424. CUSTOMER_CRASH_COUNT: 1
  425. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  426. ANALYSIS_SESSION_HOST: UserName-PC
  427. ANALYSIS_SESSION_TIME: 05-22-2017 12:38:05.0309
  428. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  429.  
  430. TRAP_FRAME: ffffd20160ef8680 -- (.trap 0xffffd20160ef8680)
  431. NOTE: The trap frame does not contain all registers.
  432. Some register values may be zeroed or incorrect.
  433. rax=fffff7e14000b001 rbx=0000000000000000 rcx=d32bbff612e30000
  434. rdx=ffffd20160eca180 rsi=0000000000000000 rdi=0000000000000000
  435. rip=0000000000004d66 rsp=ffffd20160ef8810 rbp=0000000000000000
  436. r8=0000000000000300 r9=0000000000000000 r10=0000000000000001
  437. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  438. r14=0000000000000000 r15=0000000000000000
  439. iopl=0 nv up di ng nz na po nc
  440. 00000000`00004d66 ?? ???
  441. Resetting default scope
  442.  
  443. LAST_CONTROL_TRANSFER: from fffff803331946a9 to fffff80333189310
  444.  
  445. FAILED_INSTRUCTION_ADDRESS:
  446. +0
  447. 00000000`00004d66 ?? ???
  448.  
  449. STACK_COMMAND: kb
  450.  
  451. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  452. fffff80333077fa0 - nt!MiFlushTbAsNeeded+70
  453. [ 80:00 ]
  454. 1 error : !nt (fffff80333077fa0)
  455.  
  456. MODULE_NAME: memory_corruption
  457. IMAGE_NAME: memory_corruption
  458. FOLLOWUP_NAME: memory_corruption
  459. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  460. MEMORY_CORRUPTOR: ONE_BIT
  461. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  462. BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  463. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
  464. TARGET_TIME: 2017-05-21T16:39:37.000Z
  465. OSBUILD: 15063
  466. OSSERVICEPACK: 296
  467. SERVICEPACK_NUMBER: 0
  468. OS_REVISION: 0
  469. SUITE_MASK: 272
  470. PRODUCT_TYPE: 1
  471. OSPLATFORM_TYPE: x64
  472. OSNAME: Windows 10
  473. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  474. OS_LOCALE:
  475. USER_LCID: 0
  476. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  477. BUILDDATESTAMP_STR: 160101.0800
  478. BUILDLAB_STR: WinBuild
  479. BUILDOSVER_STR: 10.0.15063.296
  480. ANALYSIS_SESSION_ELAPSED_TIME: 18b2
  481. ANALYSIS_SOURCE: KM
  482. FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
  483. FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
  484.  
  485. Followup: memory_corruption
  486. ---------
  487.  
  488. ======================================================================
  489. ======================================================================
  490. ======================================================================
  491.  
  492. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  493. Copyright (c) Microsoft Corporation. All rights reserved.
  494.  
  495. Loading Dump File [C:\Users\UserName\Desktop\Dumps\052117-4734-01.dmp]
  496. Mini Kernel Dump File: Only registers and stack trace are available
  497.  
  498. Symbol search path is: srv*
  499. Executable search path is:
  500. Windows 10 Kernel Version 15063 MP (4 procs) Free x64
  501. Product: WinNt, suite: TerminalServer SingleUserTS
  502. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  503. Machine Name:
  504. Kernel base = 0xfffff802`cf48b000 PsLoadedModuleList = 0xfffff802`cf7d75a0
  505. Debug session time: Sun May 21 13:27:56.030 2017 (UTC - 4:00)
  506. System Uptime: 0 days 0:47:57.704
  507. Loading Kernel Symbols
  508. ...............................................................
  509. ................................................................
  510. ...................................
  511. Loading User Symbols
  512. Loading unloaded module list
  513. ..........
  514. *******************************************************************************
  515. * *
  516. * Bugcheck Analysis *
  517. * *
  518. *******************************************************************************
  519.  
  520. Use !analyze -v to get detailed debugging information.
  521.  
  522. BugCheck D1, {2d66, ff, 41, 2d66}
  523.  
  524. *** WARNING: Unable to verify timestamp for win32k.sys
  525. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  526. Probably caused by : memory_corruption
  527.  
  528. Followup: memory_corruption
  529. ---------
  530.  
  531. *******************************************************************************
  532. * *
  533. * Bugcheck Analysis *
  534. * *
  535. *******************************************************************************
  536.  
  537. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  538. An attempt was made to access a pageable (or completely invalid) address at an
  539. interrupt request level (IRQL) that is too high. This is usually
  540. caused by drivers using improper addresses.
  541. If kernel debugger is available get stack backtrace.
  542. Arguments:
  543. Arg1: 0000000000002d66, memory referenced
  544. Arg2: 00000000000000ff, IRQL
  545. Arg3: 0000000000000041, value 0 = read operation, 1 = write operation
  546. Arg4: 0000000000002d66, address which referenced memory
  547.  
  548. Debugging Details:
  549. ------------------
  550.  
  551. DUMP_CLASS: 1
  552. DUMP_QUALIFIER: 400
  553. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  554. SYSTEM_MANUFACTURER: System manufacturer
  555. SYSTEM_PRODUCT_NAME: System Product Name
  556. SYSTEM_SKU: SKU
  557. SYSTEM_VERSION: System Version
  558. BIOS_VENDOR: American Megatrends Inc.
  559. BIOS_VERSION: 2001
  560. BIOS_DATE: 09/23/2016
  561. BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
  562. BASEBOARD_PRODUCT: H110M-K D3
  563. BASEBOARD_VERSION: Rev X.0x
  564. DUMP_TYPE: 2
  565. BUGCHECK_P1: 2d66
  566. BUGCHECK_P2: ff
  567. BUGCHECK_P3: 41
  568. BUGCHECK_P4: 2d66
  569. CURRENT_IRQL: 0
  570.  
  571. FAULTING_IP:
  572. +0
  573. 00000000`00002d66 ?? ???
  574.  
  575. PROCESS_NAME: System
  576. ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.
  577. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT
  578. CPU_COUNT: 4
  579. CPU_MHZ: a98
  580. CPU_VENDOR: GenuineIntel
  581. CPU_FAMILY: 6
  582. CPU_MODEL: 5e
  583. CPU_STEPPING: 3
  584. CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
  585. CUSTOMER_CRASH_COUNT: 1
  586. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  587. ANALYSIS_SESSION_HOST: UserName-PC
  588. ANALYSIS_SESSION_TIME: 05-22-2017 12:39:42.0732
  589. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  590.  
  591. TRAP_FRAME: ffffd10083cf7680 -- (.trap 0xffffd10083cf7680)
  592. NOTE: The trap frame does not contain all registers.
  593. Some register values may be zeroed or incorrect.
  594. rax=fffff7fe4000b001 rbx=0000000000000000 rcx=9ac83e172d050000
  595. rdx=ffffd10083cc9180 rsi=0000000000000000 rdi=0000000000000000
  596. rip=0000000000002d66 rsp=ffffd10083cf7810 rbp=0000000000000000
  597. r8=0000000000000300 r9=0000000000000000 r10=0000000000000001
  598. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
  599. r14=0000000000000000 r15=0000000000000000
  600. iopl=0 nv up di ng nz na po nc
  601. 00000000`00002d66 ?? ???
  602. Resetting default scope
  603.  
  604. LAST_CONTROL_TRANSFER: from fffff802cf6026a9 to fffff802cf5f7310
  605.  
  606. STACK_COMMAND: kb
  607.  
  608. CHKIMG_EXTENSION: !chkimg -lo 50 -db !nt
  609. 2 errors : !nt (fffff802cf593a89-fffff802cf593ab8)
  610. fffff802cf593a80 8b e9 48 ba 00 00 00 00 80 *f3 ff ff 4b 8d 2c 76 ..H.........K.,v
  611. ...
  612. fffff802cf593ab0 c1 48 b9 00 00 00 00 80 *fe ff ff 48 8b 0c 08 48 .H.........H...H
  613.  
  614. MODULE_NAME: memory_corruption
  615. IMAGE_NAME: memory_corruption
  616. FOLLOWUP_NAME: memory_corruption
  617. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  618. MEMORY_CORRUPTOR: STRIDE
  619. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_STRIDE
  620. BUCKET_ID: MEMORY_CORRUPTION_STRIDE
  621. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_STRIDE
  622. TARGET_TIME: 2017-05-21T17:27:56.000Z
  623. OSBUILD: 15063
  624. OSSERVICEPACK: 296
  625. SERVICEPACK_NUMBER: 0
  626. OS_REVISION: 0
  627. SUITE_MASK: 272
  628. PRODUCT_TYPE: 1
  629. OSPLATFORM_TYPE: x64
  630. OSNAME: Windows 10
  631. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  632. OS_LOCALE:
  633. USER_LCID: 0
  634. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  635. BUILDDATESTAMP_STR: 160101.0800
  636. BUILDLAB_STR: WinBuild
  637. BUILDOSVER_STR: 10.0.15063.296
  638. ANALYSIS_SESSION_ELAPSED_TIME: 18d9
  639. ANALYSIS_SOURCE: KM
  640. FAILURE_ID_HASH_STRING: km:memory_corruption_stride
  641. FAILURE_ID_HASH: {574dbc1b-92cb-fb09-cb7a-cacc1bb2c511}
  642.  
  643. Followup: memory_corruption
  644. ---------
  645.  
  646.  
  647. ======================================================================
  648. ======================================================================
  649. ======================================================================
  650.  
  651. Microsoft (R) Windows Debugger Version 10.0.14321.1024 AMD64
  652. Copyright (c) Microsoft Corporation. All rights reserved.
  653.  
  654. Loading Dump File [C:\Users\UserName\Desktop\Dumps\052117-5171-01.dmp]
  655. Mini Kernel Dump File: Only registers and stack trace are available
  656.  
  657. Symbol search path is: srv*
  658. Executable search path is:
  659. Windows 10 Kernel Version 15063 MP (4 procs) Free x64
  660. Product: WinNt, suite: TerminalServer SingleUserTS
  661. Built by: 15063.0.amd64fre.rs2_release.170317-1834
  662. Machine Name:
  663. Kernel base = 0xfffff801`45a17000 PsLoadedModuleList = 0xfffff801`45d635a0
  664. Debug session time: Sun May 21 13:54:12.071 2017 (UTC - 4:00)
  665. System Uptime: 0 days 0:03:05.745
  666. Loading Kernel Symbols
  667. ...............................................................
  668. ................................................................
  669. .................................
  670. Loading User Symbols
  671. Loading unloaded module list
  672. .........
  673. *******************************************************************************
  674. * *
  675. * Bugcheck Analysis *
  676. * *
  677. *******************************************************************************
  678.  
  679. Use !analyze -v to get detailed debugging information.
  680.  
  681. BugCheck D1, {ed66, ff, 2a, ed66}
  682.  
  683. *** WARNING: Unable to verify timestamp for win32k.sys
  684. *** ERROR: Module load completed but symbols could not be loaded for win32k.sys
  685. Probably caused by : memory_corruption
  686.  
  687. Followup: memory_corruption
  688. ---------
  689.  
  690. *******************************************************************************
  691. * *
  692. * Bugcheck Analysis *
  693. * *
  694. *******************************************************************************
  695.  
  696. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
  697. An attempt was made to access a pageable (or completely invalid) address at an
  698. interrupt request level (IRQL) that is too high. This is usually
  699. caused by drivers using improper addresses.
  700. If kernel debugger is available get stack backtrace.
  701. Arguments:
  702. Arg1: 000000000000ed66, memory referenced
  703. Arg2: 00000000000000ff, IRQL
  704. Arg3: 000000000000002a, value 0 = read operation, 1 = write operation
  705. Arg4: 000000000000ed66, address which referenced memory
  706.  
  707. Debugging Details:
  708. ------------------
  709.  
  710.  
  711. DUMP_CLASS: 1
  712. DUMP_QUALIFIER: 400
  713. BUILD_VERSION_STRING: 10.0.15063.296 (WinBuild.160101.0800)
  714. SYSTEM_MANUFACTURER: System manufacturer
  715. SYSTEM_PRODUCT_NAME: System Product Name
  716. SYSTEM_SKU: SKU
  717. SYSTEM_VERSION: System Version
  718. BIOS_VENDOR: American Megatrends Inc.
  719. BIOS_VERSION: 2001
  720. BIOS_DATE: 09/23/2016
  721. BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
  722. BASEBOARD_PRODUCT: H110M-K D3
  723. BASEBOARD_VERSION: Rev X.0x
  724. DUMP_TYPE: 2
  725. BUGCHECK_P1: ed66
  726. BUGCHECK_P2: ff
  727. BUGCHECK_P3: 2a
  728. BUGCHECK_P4: ed66
  729. READ_ADDRESS: 000000000000ed66
  730. CURRENT_IRQL: 0
  731.  
  732. FAULTING_IP:
  733. +0
  734. 00000000`0000ed66 ?? ???
  735.  
  736. PROCESS_NAME: System
  737. ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target.
  738. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT
  739. CPU_COUNT: 4
  740. CPU_MHZ: a98
  741. CPU_VENDOR: GenuineIntel
  742. CPU_FAMILY: 6
  743. CPU_MODEL: 5e
  744. CPU_STEPPING: 3
  745. CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: 84'00000000 (cache) 84'00000000 (init)
  746. CUSTOMER_CRASH_COUNT: 1
  747. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  748. ANALYSIS_SESSION_HOST: UserName-PC
  749. ANALYSIS_SESSION_TIME: 05-22-2017 12:41:29.0649
  750. ANALYSIS_VERSION: 10.0.14321.1024 amd64fre
  751.  
  752. TRAP_FRAME: ffffaa01a6cb5680 -- (.trap 0xffffaa01a6cb5680)
  753. NOTE: The trap frame does not contain all registers.
  754. Some register values may be zeroed or incorrect.
  755. rax=0000000000000001 rbx=0000000000000000 rcx=29f9687e2f7d0000
  756. rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
  757. rip=000000000000ed66 rsp=ffffaa01a6cb5810 rbp=0000000000000000
  758. r8=0000008000000000 r9=ffff938fce87c9e0 r10=0000000000000001
  759. r11=ffffaa01a6cb5808 r12=0000000000000000 r13=0000000000000000
  760. r14=0000000000000000 r15=0000000000000000
  761. iopl=0 nv up di ng nz na po nc
  762. 00000000`0000ed66 ?? ???
  763. Resetting default scope
  764.  
  765. LAST_CONTROL_TRANSFER: from fffff80145b8e6a9 to fffff80145b83310
  766.  
  767. FAILED_INSTRUCTION_ADDRESS:
  768. +0
  769. 00000000`0000ed66 ?? ???
  770.  
  771. STACK_COMMAND: kb
  772.  
  773. CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
  774. fffff80145a71fa0 - nt!MiFlushTbAsNeeded+70
  775. [ 80:00 ]
  776. 1 error : !nt (fffff80145a71fa0)
  777.  
  778. MODULE_NAME: memory_corruption
  779. IMAGE_NAME: memory_corruption
  780. FOLLOWUP_NAME: memory_corruption
  781. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  782. MEMORY_CORRUPTOR: ONE_BIT
  783. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  784. BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  785. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
  786. TARGET_TIME: 2017-05-21T17:54:12.000Z
  787. OSBUILD: 15063
  788. OSSERVICEPACK: 296
  789. SERVICEPACK_NUMBER: 0
  790. OS_REVISION: 0
  791. SUITE_MASK: 272
  792. PRODUCT_TYPE: 1
  793. OSPLATFORM_TYPE: x64
  794. OSNAME: Windows 10
  795. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
  796. OS_LOCALE:
  797. USER_LCID: 0
  798. OSBUILD_TIMESTAMP: 2017-04-27 19:52:30
  799. BUILDDATESTAMP_STR: 160101.0800
  800. BUILDLAB_STR: WinBuild
  801. BUILDOSVER_STR: 10.0.15063.296
  802. ANALYSIS_SESSION_ELAPSED_TIME: 18d1
  803. ANALYSIS_SOURCE: KM
  804. FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
  805. FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
  806.  
  807. Followup: memory_corruption
  808. ---------
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!