jlco

heylookitwasicuethistime

Feb 26th, 2019
68
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. *******************************************************************************
  2. * *
  3. * Bugcheck Analysis *
  4. * *
  5. *******************************************************************************
  6.  
  7. Use !analyze -v to get detailed debugging information.
  8.  
  9. BugCheck 3B, {c0000005, fffff80d9135a3e7, ffffe38010d2b520, 0}
  10.  
  11. Probably caused by : memory_corruption
  12.  
  13. Followup: memory_corruption
  14. ---------
  15.  
  16. 1: kd> !analyze -v
  17. *******************************************************************************
  18. * *
  19. * Bugcheck Analysis *
  20. * *
  21. *******************************************************************************
  22.  
  23. SYSTEM_SERVICE_EXCEPTION (3b)
  24. An exception happened while executing a system service routine.
  25. Arguments:
  26. Arg1: 00000000c0000005, Exception code that caused the bugcheck
  27. Arg2: fffff80d9135a3e7, Address of the instruction which caused the bugcheck
  28. Arg3: ffffe38010d2b520, Address of the context record for the exception that caused the bugcheck
  29. Arg4: 0000000000000000, zero.
  30.  
  31. Debugging Details:
  32. ------------------
  33.  
  34.  
  35. KEY_VALUES_STRING: 1
  36.  
  37.  
  38. STACKHASH_ANALYSIS: 1
  39.  
  40. TIMELINE_ANALYSIS: 1
  41.  
  42.  
  43. DUMP_CLASS: 1
  44.  
  45. DUMP_QUALIFIER: 400
  46.  
  47. BUILD_VERSION_STRING: 10.0.17134.590 (WinBuild.160101.0800)
  48.  
  49. DUMP_FILE_ATTRIBUTES: 0x8
  50. Kernel Generated Triage Dump
  51.  
  52. DUMP_TYPE: 2
  53.  
  54. BUGCHECK_P1: c0000005
  55.  
  56. BUGCHECK_P2: fffff80d9135a3e7
  57.  
  58. BUGCHECK_P3: ffffe38010d2b520
  59.  
  60. BUGCHECK_P4: 0
  61.  
  62. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.
  63.  
  64. FAULTING_IP:
  65. Ntfs!NtfsInitializeIrpContext+1b7
  66. fffff80d`9135a3e7 658b042da4010000 mov eax,dword ptr gs:[rbp+1A4h]
  67.  
  68. CONTEXT: ffffe38010d2b520 -- (.cxr 0xffffe38010d2b520)
  69. rax=0000000000000000 rbx=ffffe38010d2bfd8 rcx=0000000000000000
  70. rdx=ffffba0cb6b2b080 rsi=0000000000000000 rdi=0000000000000000
  71. rip=fffff80d9135a3e7 rsp=ffffe38010d2bf10 rbp=ffffba0cb7b26010
  72. r8=0000000000000000 r9=ffffe38010d2bfd8 r10=0000000000000000
  73. r11=ffffe38010d2c1b8 r12=0000000000000001 r13=ffffba0cb0069180
  74. r14=0000000000000000 r15=0000000000000000
  75. iopl=0 nv up ei pl zr na po nc
  76. cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
  77. Ntfs!NtfsInitializeIrpContext+0x1b7:
  78. fffff80d`9135a3e7 658b042da4010000 mov eax,dword ptr gs:[rbp+1A4h] gs:002b:ffffba0c`b7b261b4=????????
  79. Resetting default scope
  80.  
  81. CPU_COUNT: c
  82.  
  83. CPU_MHZ: d42
  84.  
  85. CPU_VENDOR: AuthenticAMD
  86.  
  87. CPU_FAMILY: 17
  88.  
  89. CPU_MODEL: 8
  90.  
  91. CPU_STEPPING: 2
  92.  
  93. CUSTOMER_CRASH_COUNT: 1
  94.  
  95. DEFAULT_BUCKET_ID: CODE_CORRUPTION
  96.  
  97. BUGCHECK_STR: 0x3B
  98.  
  99. PROCESS_NAME: iCUE.exe
  100.  
  101. CURRENT_IRQL: 0
  102.  
  103. ANALYSIS_SESSION_HOST: PC-JOEY
  104.  
  105. ANALYSIS_SESSION_TIME: 02-26-2019 18:12:06.0698
  106.  
  107. ANALYSIS_VERSION: 10.0.17763.132 amd64fre
  108.  
  109. LAST_CONTROL_TRANSFER: from fffff80d9143e381 to fffff80d9135a3e7
  110.  
  111. STACK_TEXT:
  112. ffffe380`10d2bf10 fffff80d`9143e381 : ffffba0c`b7b26b00 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsInitializeIrpContext+0x1b7
  113. ffffe380`10d2bf80 fffff801`9329be89 : ffffba0c`b0069030 ffffba0c`b7b26010 ffffba0c`b6b2b000 00000000`00000000 : Ntfs!NtfsFsdCreate+0xc1
  114. ffffe380`10d2c1c0 fffff80d`908d7207 : ffffba0c`b7b26010 ffffba0c`b6b2b080 ffffba0c`b7b263b0 ffffba0c`b2ca9920 : nt!IofCallDriver+0x59
  115. ffffe380`10d2c200 fffff80d`9090bbcd : ffffe380`10d2c2b0 ffffba0c`b7b263b0 ffffba0c`b5b739c0 fffff801`936ca177 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x157
  116. ffffe380`10d2c270 fffff801`9329be89 : ffffe380`10d2c800 00000000`00000045 ffffba0c`b7b263b0 ffffba0c`b7b26010 : FLTMGR!FltpCreate+0x2dd
  117. ffffe380`10d2c320 fffff801`936c8ba3 : 00000000`00000045 ffffe380`10d2c630 ffffba0c`b6b2b080 ffffe380`00000001 : nt!IofCallDriver+0x59
  118. ffffe380`10d2c360 fffff801`936f882b : fffff801`936c8430 fffff801`936c8430 ffffe380`00000000 ffffba0c`b2ca1850 : nt!IopParseDevice+0x773
  119. ffffe380`10d2c530 fffff801`936c6cdf : ffffba0c`b782c000 ffffe380`10d2c7a8 00000000`00000040 ffffba0c`b017ab00 : nt!ObpLookupObjectName+0x73b
  120. ffffe380`10d2c710 fffff801`9378a6ee : fffff7cf`00000001 00000000`17f5e738 00000000`77884620 00000000`17f5f020 : nt!ObOpenObjectByNameEx+0x1df
  121. ffffe380`10d2c850 fffff801`933bd743 : ffffba0c`b353e080 00000000`72997740 ffffba0c`b353e080 ffffba0c`b688afe0 : nt!NtQueryFullAttributesFile+0x19e
  122. ffffe380`10d2cb00 00007ff8`a6f0d154 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
  123. 00000000`17f5e6f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`a6f0d154
  124.  
  125.  
  126. CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
  127. fffff80d9135a3ea - Ntfs!NtfsInitializeIrpContext+1ba
  128. [ 25:2d ]
  129. 1 error : !Ntfs (fffff80d9135a3ea)
  130.  
  131. MODULE_NAME: memory_corruption
  132.  
  133. IMAGE_NAME: memory_corruption
  134.  
  135. FOLLOWUP_NAME: memory_corruption
  136.  
  137. DEBUG_FLR_IMAGE_TIMESTAMP: 0
  138.  
  139. MEMORY_CORRUPTOR: ONE_BIT
  140.  
  141. STACK_COMMAND: .cxr 0xffffe38010d2b520 ; kb
  142.  
  143. FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  144.  
  145. BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
  146.  
  147. PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
  148.  
  149. TARGET_TIME: 2019-02-26T21:37:26.000Z
  150.  
  151. OSBUILD: 17134
  152.  
  153. OSSERVICEPACK: 590
  154.  
  155. SERVICEPACK_NUMBER: 0
  156.  
  157. OS_REVISION: 0
  158.  
  159. SUITE_MASK: 784
  160.  
  161. PRODUCT_TYPE: 1
  162.  
  163. OSPLATFORM_TYPE: x64
  164.  
  165. OSNAME: Windows 10
  166.  
  167. OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
  168.  
  169. OS_LOCALE:
  170.  
  171. USER_LCID: 0
  172.  
  173. OSBUILD_TIMESTAMP: 2019-02-05 21:25:47
  174.  
  175. BUILDDATESTAMP_STR: 160101.0800
  176.  
  177. BUILDLAB_STR: WinBuild
  178.  
  179. BUILDOSVER_STR: 10.0.17134.590
  180.  
  181. ANALYSIS_SESSION_ELAPSED_TIME: 13ca
  182.  
  183. ANALYSIS_SOURCE: KM
  184.  
  185. FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
  186.  
  187. FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
  188.  
  189. Followup: memory_corruption
  190. ---------
RAW Paste Data