heylookitwasicuethistime

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80d9135a3e7, ffffe38010d2b520, 0}

Probably caused by : memory_corruption

Followup:     memory_corruption
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80d9135a3e7, Address of the instruction which caused the bugcheck
Arg3: ffffe38010d2b520, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  10.0.17134.590 (WinBuild.160101.0800)

DUMP_FILE_ATTRIBUTES: 0x8
  Kernel Generated Triage Dump

DUMP_TYPE:  2

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff80d9135a3e7

BUGCHECK_P3: ffffe38010d2b520

BUGCHECK_P4: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

FAULTING_IP:
Ntfs!NtfsInitializeIrpContext+1b7
fffff80d`9135a3e7 658b042da4010000 mov     eax,dword ptr gs:[rbp+1A4h]

CONTEXT:  ffffe38010d2b520 -- (.cxr 0xffffe38010d2b520)
rax=0000000000000000 rbx=ffffe38010d2bfd8 rcx=0000000000000000
rdx=ffffba0cb6b2b080 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80d9135a3e7 rsp=ffffe38010d2bf10 rbp=ffffba0cb7b26010
 r8=0000000000000000  r9=ffffe38010d2bfd8 r10=0000000000000000
r11=ffffe38010d2c1b8 r12=0000000000000001 r13=ffffba0cb0069180
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
Ntfs!NtfsInitializeIrpContext+0x1b7:
fffff80d`9135a3e7 658b042da4010000 mov     eax,dword ptr gs:[rbp+1A4h] gs:002b:ffffba0c`b7b261b4=????????
Resetting default scope

CPU_COUNT: c

CPU_MHZ: d42

CPU_VENDOR:  AuthenticAMD

CPU_FAMILY: 17

CPU_MODEL: 8

CPU_STEPPING: 2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  iCUE.exe

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  PC-JOEY

ANALYSIS_SESSION_TIME:  02-26-2019 18:12:06.0698

ANALYSIS_VERSION: 10.0.17763.132 amd64fre

LAST_CONTROL_TRANSFER:  from fffff80d9143e381 to fffff80d9135a3e7

STACK_TEXT:
ffffe380`10d2bf10 fffff80d`9143e381 : ffffba0c`b7b26b00 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsInitializeIrpContext+0x1b7
ffffe380`10d2bf80 fffff801`9329be89 : ffffba0c`b0069030 ffffba0c`b7b26010 ffffba0c`b6b2b000 00000000`00000000 : Ntfs!NtfsFsdCreate+0xc1
ffffe380`10d2c1c0 fffff80d`908d7207 : ffffba0c`b7b26010 ffffba0c`b6b2b080 ffffba0c`b7b263b0 ffffba0c`b2ca9920 : nt!IofCallDriver+0x59
ffffe380`10d2c200 fffff80d`9090bbcd : ffffe380`10d2c2b0 ffffba0c`b7b263b0 ffffba0c`b5b739c0 fffff801`936ca177 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x157
ffffe380`10d2c270 fffff801`9329be89 : ffffe380`10d2c800 00000000`00000045 ffffba0c`b7b263b0 ffffba0c`b7b26010 : FLTMGR!FltpCreate+0x2dd
ffffe380`10d2c320 fffff801`936c8ba3 : 00000000`00000045 ffffe380`10d2c630 ffffba0c`b6b2b080 ffffe380`00000001 : nt!IofCallDriver+0x59
ffffe380`10d2c360 fffff801`936f882b : fffff801`936c8430 fffff801`936c8430 ffffe380`00000000 ffffba0c`b2ca1850 : nt!IopParseDevice+0x773
ffffe380`10d2c530 fffff801`936c6cdf : ffffba0c`b782c000 ffffe380`10d2c7a8 00000000`00000040 ffffba0c`b017ab00 : nt!ObpLookupObjectName+0x73b
ffffe380`10d2c710 fffff801`9378a6ee : fffff7cf`00000001 00000000`17f5e738 00000000`77884620 00000000`17f5f020 : nt!ObOpenObjectByNameEx+0x1df
ffffe380`10d2c850 fffff801`933bd743 : ffffba0c`b353e080 00000000`72997740 ffffba0c`b353e080 ffffba0c`b688afe0 : nt!NtQueryFullAttributesFile+0x19e
ffffe380`10d2cb00 00007ff8`a6f0d154 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`17f5e6f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`a6f0d154


CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
    fffff80d9135a3ea - Ntfs!NtfsInitializeIrpContext+1ba
	[ 25:2d ]
1 error : !Ntfs (fffff80d9135a3ea)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  ONE_BIT

STACK_COMMAND:  .cxr 0xffffe38010d2b520 ; kb

FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT

BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT

PRIMARY_PROBLEM_CLASS:  MEMORY_CORRUPTION_ONE_BIT

TARGET_TIME:  2019-02-26T21:37:26.000Z

OSBUILD:  17134

OSSERVICEPACK:  590

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  784

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS Personal

OS_LOCALE:

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-02-05 21:25:47

BUILDDATESTAMP_STR:  160101.0800

BUILDLAB_STR:  WinBuild

BUILDOSVER_STR:  10.0.17134.590

ANALYSIS_SESSION_ELAPSED_TIME:  13ca

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:memory_corruption_one_bit

FAILURE_ID_HASH:  {e3faf315-c3d0-81db-819a-6c43d23c63a7}

Followup:     memory_corruption
---------