*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000006, Exception code that caused the bugcheck
Arg2: fffff8025188e592, Address of the instruction which caused the bugcheck
Arg3: fffff308be7d34f0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
SYSTEM_PRODUCT_NAME: CASPER NIRVANA DESKTOP
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: CASPER BILGISAYAR SISTEMLERI A.S
BIOS_VERSION: 4.6.5
BIOS_DATE: 08/08/2014
BASEBOARD_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
BASEBOARD_PRODUCT: CASPER NIRVANA DESKTOP
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: c0000006
BUGCHECK_P2: fffff8025188e592
BUGCHECK_P3: fffff308be7d34f0
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - <Unable to get error code text>
FAULTING_IP:
nt!HvpGetCellPaged+a2
fffff802`5188e592 418b02 mov eax,dword ptr [r10]
CONTEXT: fffff308be7d34f0 -- (.cxr 0xfffff308be7d34f0)
rax=0000000000000000 rbx=fffff308be7d3f40 rcx=0000000000000007
rdx=000000000400b348 rsi=0000000000000363 rdi=ffffb8083c996000
rip=fffff8025188e592 rsp=fffff308be7d3ee8 rbp=ffffb8083c996000
r8=000000000000001c r9=ffffa78bfce61080 r10=000002552385c348
r11=0000000000000348 r12=00000000ce4cf905 r13=fffff308be7d41a0
r14=0000000000000363 r15=00000255237ef024
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt!HvpGetCellPaged+0xa2:
fffff802`5188e592 418b02 mov eax,dword ptr [r10] ds:002b:00000255`2385c348=????????
Resetting default scope
BUGCHECK_STR: 0x3B_c0000006
CPU_COUNT: 8
CPU_MHZ: e08
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3c
CPU_STEPPING: 3
CPU_MICROCODE: 6,3c,3,0 (F,M,S,R) SIG: 25'00000000 (cache) 25'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: Registry
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 12-10-2019 13:17:25.0735
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8025182979f to fffff8025188e592
STACK_TEXT:
fffff308`be7d3ee8 fffff802`5182979f : 00000000`7f147a21 fffff308`be7d4270 00000000`00000000 ffffb808`5f9a20f0 : nt!HvpGetCellPaged+0xa2
fffff308`be7d3ef0 fffff802`51828099 : 00000001`ffffffff 00000000`ce4cf905 fffff308`be7d49e8 ffffb808`00000000 : nt!CmpDoCompareKeyName+0x2f
fffff308`be7d3f40 fffff802`517f226a : ffffb808`5f9a20f0 00000000`00000006 fffff308`be7d4138 fffff308`be7d41c0 : nt!CmpWalkOneLevel+0x709
fffff308`be7d4050 fffff802`517ef2d4 : fffff308`0000001c fffff308`be7d43a0 fffff308`be7d4368 00000000`00000000 : nt!CmpDoParseKey+0x9fa
fffff308`be7d42f0 fffff802`517ed1bf : ffffa78c`020cf010 ffffb808`50a0d101 00000000`00000000 00000000`00000001 : nt!CmpParseKey+0x274
fffff308`be7d4510 fffff802`517eb621 : ffffa78c`020cf000 fffff308`be7d4758 00000000`00000040 ffffa78b`ed6dd640 : nt!ObpLookupObjectName+0x78f
fffff308`be7d46d0 fffff802`517f4b3c : 00000000`00000001 00000000`00000000 00000000`00000000 ffffa78b`ed6dd640 : nt!ObOpenObjectByNameEx+0x201
fffff308`be7d4810 fffff802`517f49bd : 0000000d`ab37eb50 fffff308`be7d4b80 00000000`00000001 00000000`00000000 : nt!ObOpenObjectByName+0x5c
fffff308`be7d4860 fffff802`517f69df : 000001b0`00010000 0000000d`ab37e830 00000000`00000000 00007fff`18d9f4f8 : nt!CmOpenKey+0x29d
fffff308`be7d4ac0 fffff802`513d2d18 : 00000000`00000000 00000000`00000001 00000000`00000000 fffff308`be7d4b80 : nt!NtOpenKeyEx+0xf
fffff308`be7d4b00 00007fff`18cde414 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
0000000d`ab37ea78 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`18cde414
THREAD_SHA1_HASH_MOD_FUNC: c60f19c144f9d7dd390ce35adb8e8dcc06aff971
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d82e865cfa12e23bdd842357f7d98796f05fcb05
THREAD_SHA1_HASH_MOD: b28610981796779b4ac02f58898fde25728a775c
FOLLOWUP_IP:
nt!HvpGetCellPaged+a2
fffff802`5188e592 418b02 mov eax,dword ptr [r10]
FAULT_INSTR_CODE: 41028b41
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!HvpGetCellPaged+a2
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4efcf7a9
IMAGE_VERSION: 10.0.18362.476
STACK_COMMAND: .cxr 0xfffff308be7d34f0 ; kb
BUCKET_ID_FUNC_OFFSET: a2
FAILURE_BUCKET_ID: 0x3B_c0000006_nt!HvpGetCellPaged
BUCKET_ID: 0x3B_c0000006_nt!HvpGetCellPaged
PRIMARY_PROBLEM_CLASS: 0x3B_c0000006_nt!HvpGetCellPaged
TARGET_TIME: 2019-12-09T16:48:04.000Z
OSBUILD: 18362
OSSERVICEPACK: 476
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 02:28:41
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 4314
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x3b_c0000006_nt!hvpgetcellpaged
FAILURE_ID_HASH: {68f3db38-ae8e-4bae-c37a-85819946495f}
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffb28389938180, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
SYSTEM_PRODUCT_NAME: CASPER NIRVANA DESKTOP
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: CASPER BILGISAYAR SISTEMLERI A.S
BIOS_VERSION: 4.6.5
BIOS_DATE: 08/08/2014
BASEBOARD_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
BASEBOARD_PRODUCT: CASPER NIRVANA DESKTOP
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffb28389938180
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: services.exe
CRITICAL_PROCESS: services.exe
EXCEPTION_RECORD: ffffb158ac562000 -- (.exr 0xffffb158ac562000)
ExceptionAddress: 0a000001bee50867
ExceptionCode: bee44867
ExceptionFlags: 0a000001
NumberParameters: 0
EXCEPTION_CODE: (NTSTATUS) 0xbee44867 - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0xbee44867 - <Unable to get error code text>
CPU_COUNT: 8
CPU_MHZ: e08
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3c
CPU_STEPPING: 3
CPU_MICROCODE: 6,3c,3,0 (F,M,S,R) SIG: 25'00000000 (cache) 25'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
EXCEPTION_CODE_STR: bee44867
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 12-10-2019 13:17:28.0641
ANALYSIS_VERSION: 10.0.18362.1 x86fre
TRAP_FRAME: ffff800000000000 -- (.trap 0xffff800000000000)
Unable to read trap frame at ffff8000`00000000
LAST_CONTROL_TRANSFER: from fffff80239ccaef9 to fffff802395c14e0
STACK_TEXT:
ffff8607`b8317d98 fffff802`39ccaef9 : 00000000`000000ef ffffb283`89938180 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffff8607`b8317da0 fffff802`39bc78a3 : ffffb283`89938180 fffff802`3949c769 ffffb283`89938180 fffff802`3949c8c0 : nt!PspCatchCriticalBreak+0x115
ffff8607`b8317e40 fffff802`39a39ef0 : ffffb283`00000000 00000000`00000000 ffffb283`89938180 ffffb283`89938180 : nt!PspTerminateAllThreads+0x175b3f
ffff8607`b8317eb0 fffff802`39a39cd9 : ffffffff`ffffffff ffff8607`b8317fe0 ffffb283`89938180 00000000`00000000 : nt!PspTerminateProcess+0xe0
ffff8607`b8317ef0 fffff802`395d2d18 : 00000000`0000030c ffffb283`898c3080 ffffb283`89938180 ffff8607`b8318130 : nt!NtTerminateProcess+0xa9
ffff8607`b8317f60 fffff802`395c5320 : fffff802`3962ffba ffff8607`b8318a58 ffff8607`b8318a58 ffff8607`b8318130 : nt!KiSystemServiceCopyEnd+0x28
ffff8607`b83180f8 fffff802`3962ffba : ffff8607`b8318a58 ffff8607`b8318a58 ffff8607`b8318130 00000000`00000000 : nt!KiServiceLinkage
ffff8607`b8318100 fffff802`395d341d : ffffb158`ac562000 ffff8607`b8318b00 ffff8000`00000000 0000001a`45f00000 : nt!KiDispatchException+0x1687ca
ffff8607`b8318920 fffff802`395cf605 : 0000001a`45f03730 ffff8607`b8318b80 00000000`00000000 ffffb283`8983ace0 : nt!KiExceptionDispatch+0x11d
ffff8607`b8318b00 00007ff9`ad2e1117 : 00000000`0010000b 00000000`00000010 00007ff9`ad2aa15c 00000000`00000000 : nt!KiPageFault+0x445
0000001a`45f01058 00000000`0010000b : 00000000`00000010 00007ff9`ad2aa15c 00000000`00000000 0000001a`45f01770 : 0x00007ff9`ad2e1117
0000001a`45f01060 00000000`00000010 : 00007ff9`ad2aa15c 00000000`00000000 0000001a`45f01770 00000000`00000000 : 0x10000b
0000001a`45f01068 00007ff9`ad2aa15c : 00000000`00000000 0000001a`45f01770 00000000`00000000 00000000`00000001 : 0x10
0000001a`45f01070 00000000`00000000 : 0000001a`45f01770 00000000`00000000 00000000`00000001 00000000`00000000 : 0x00007ff9`ad2aa15c
THREAD_SHA1_HASH_MOD_FUNC: f6b0f7fafbd5253fc3d42ad0a11af14fddabdcf0
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6b80782683f2a56e3d79d6dbd71ba21b3a412b1d
THREAD_SHA1_HASH_MOD: bc100a5647b828107ac4e18055e00abcbe1ec406
FOLLOWUP_IP:
nt!PspCatchCriticalBreak+115
fffff802`39ccaef9 cc int 3
FAULT_INSTR_CODE: ed8440cc
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!PspCatchCriticalBreak+115
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4efcf7a9
IMAGE_VERSION: 10.0.18362.476
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 115
FAILURE_BUCKET_ID: 0xEF_services.exe_BUGCHECK_CRITICAL_PROCESS_898c3080_nt!PspCatchCriticalBreak
BUCKET_ID: 0xEF_services.exe_BUGCHECK_CRITICAL_PROCESS_898c3080_nt!PspCatchCriticalBreak
PRIMARY_PROBLEM_CLASS: 0xEF_services.exe_BUGCHECK_CRITICAL_PROCESS_898c3080_nt!PspCatchCriticalBreak
TARGET_TIME: 2019-12-09T18:17:39.000Z
OSBUILD: 18362
OSSERVICEPACK: 476
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 02:28:41
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 473f
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_services.exe_bugcheck_critical_process_898c3080_nt!pspcatchcriticalbreak
FAILURE_ID_HASH: {5d3d9f88-0d66-04de-b796-03a94fa9f5e8}
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffc8844420b140, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
SYSTEM_PRODUCT_NAME: CASPER NIRVANA DESKTOP
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: CASPER BILGISAYAR SISTEMLERI A.S
BIOS_VERSION: 4.6.5
BIOS_DATE: 08/08/2014
BASEBOARD_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
BASEBOARD_PRODUCT: CASPER NIRVANA DESKTOP
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffc8844420b140
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: csrss.exe
CRITICAL_PROCESS: csrss.exe
EXCEPTION_RECORD: ffffc8844420b700 -- (.exr 0xffffc8844420b700)
ExceptionAddress: 0000000000000000
ExceptionCode: 00000000
ExceptionFlags: 00000000
NumberParameters: 0
EXCEPTION_CODE: (Win32) 0x44205240 (1142968896) - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0x44205240 - <Unable to get error code text>
CPU_COUNT: 8
CPU_MHZ: e08
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3c
CPU_STEPPING: 3
CPU_MICROCODE: 6,3c,3,0 (F,M,S,R) SIG: 25'00000000 (cache) 25'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 12-10-2019 13:17:32.0334
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8001a4caef9 to fffff80019dc14e0
STACK_TEXT:
fffff300`19b47d98 fffff800`1a4caef9 : 00000000`000000ef ffffc884`4420b140 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffff300`19b47da0 fffff800`1a3c78a3 : ffffc884`4420b140 fffff800`19c9c769 ffffc884`4420b140 fffff800`19c9c8c0 : nt!PspCatchCriticalBreak+0x115
fffff300`19b47e40 fffff800`1a239ef0 : ffffc884`00000000 00000000`00000000 ffffc884`4420b140 ffffc884`4420b140 : nt!PspTerminateAllThreads+0x175b3f
fffff300`19b47eb0 fffff800`1a239cd9 : ffffffff`ffffffff fffff300`19b47fe0 ffffc884`4420b140 00000000`00000000 : nt!PspTerminateProcess+0xe0
fffff300`19b47ef0 fffff800`19dd2d18 : 00007ffd`00000258 ffffc884`44205240 ffffc884`4420b140 fffff300`19b48130 : nt!NtTerminateProcess+0xa9
fffff300`19b47f60 fffff800`19dc5320 : fffff800`19e2ffba fffff300`19b48a58 fffff300`19b48a58 fffff300`19b48130 : nt!KiSystemServiceCopyEnd+0x28
fffff300`19b480f8 fffff800`19e2ffba : fffff300`19b48a58 fffff300`19b48a58 fffff300`19b48130 00007ffd`01add000 : nt!KiServiceLinkage
fffff300`19b48100 fffff800`19dd341d : ffffc884`4420b700 fffff800`19c74ef6 00000000`00000800 fffff300`19b48b00 : nt!KiDispatchException+0x1687ca
fffff300`19b48920 fffff800`19dcf605 : 0000003f`19d913b0 fffff300`19b48b80 00000000`00000000 fffff300`19b48b80 : nt!KiExceptionDispatch+0x11d
fffff300`19b48b00 00007ffd`04c9e392 : 00000000`00000000 0000003f`00000000 00007ffd`04ce7db4 00007ffd`04d211ff : nt!KiPageFault+0x445
0000003f`19d91320 00000000`00000000 : 0000003f`00000000 00007ffd`04ce7db4 00007ffd`04d211ff 00007ffd`01add000 : 0x00007ffd`04c9e392
THREAD_SHA1_HASH_MOD_FUNC: f6b0f7fafbd5253fc3d42ad0a11af14fddabdcf0
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6b80782683f2a56e3d79d6dbd71ba21b3a412b1d
THREAD_SHA1_HASH_MOD: bc100a5647b828107ac4e18055e00abcbe1ec406
FOLLOWUP_IP:
nt!PspCatchCriticalBreak+115
fffff800`1a4caef9 cc int 3
FAULT_INSTR_CODE: ed8440cc
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!PspCatchCriticalBreak+115
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4efcf7a9
IMAGE_VERSION: 10.0.18362.476
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 115
FAILURE_BUCKET_ID: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_44205240_nt!PspCatchCriticalBreak
BUCKET_ID: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_44205240_nt!PspCatchCriticalBreak
PRIMARY_PROBLEM_CLASS: 0xEF_csrss.exe_BUGCHECK_CRITICAL_PROCESS_44205240_nt!PspCatchCriticalBreak
TARGET_TIME: 2019-12-09T19:47:24.000Z
OSBUILD: 18362
OSSERVICEPACK: 476
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 02:28:41
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 387b
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_csrss.exe_bugcheck_critical_process_44205240_nt!pspcatchcriticalbreak
FAILURE_ID_HASH: {2458627f-6c51-df19-a964-cdbf81756ee8}
Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffd40524498340, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
SYSTEM_PRODUCT_NAME: CASPER NIRVANA DESKTOP
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: CASPER BILGISAYAR SISTEMLERI A.S
BIOS_VERSION: 4.6.5
BIOS_DATE: 08/08/2014
BASEBOARD_MANUFACTURER: CASPER BILGISAYAR SISTEMLERI A.S
BASEBOARD_PRODUCT: CASPER NIRVANA DESKTOP
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: ffffd40524498340
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
EXCEPTION_RECORD: ffff8bc5e2f17000 -- (.exr 0xffff8bc5e2f17000)
ExceptionAddress: 0000000000000000
ExceptionCode: 82d6e867
ExceptionFlags: 0a000001
NumberParameters: -2146998169
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000000
Parameter[2]: 0000000000000000
Parameter[3]: 0000000000000000
Parameter[4]: 0000000000000000
Parameter[5]: 0000000000000000
Parameter[6]: 0000000000000000
Parameter[7]: 0000000000000000
Parameter[8]: 0000000000000000
Parameter[9]: 0000000000000000
Parameter[10]: 0000000000000000
Parameter[11]: 0000000000000000
Parameter[12]: 0000000000000000
Parameter[13]: 0000000000000000
Parameter[14]: 0000000000000000
EXCEPTION_CODE: (HRESULT) 0x82d6e867 (2195122279) - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0x82d6e867 - <Unable to get error code text>
CPU_COUNT: 8
CPU_MHZ: e08
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3c
CPU_STEPPING: 3
CPU_MICROCODE: 6,3c,3,0 (F,M,S,R) SIG: 25'00000000 (cache) 25'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
EXCEPTION_CODE_STR: 82d6e867
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000000
EXCEPTION_PARAMETER3: 0000000000000000
EXCEPTION_PARAMETER4: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 12-10-2019 13:17:35.0755
ANALYSIS_VERSION: 10.0.18362.1 x86fre
TRAP_FRAME: ffff800000000000 -- (.trap 0xffff800000000000)
Unable to read trap frame at ffff8000`00000000
LAST_CONTROL_TRANSFER: from fffff80775ccaef9 to fffff807755c14e0
STACK_TEXT:
fffffe89`bc108d98 fffff807`75ccaef9 : 00000000`000000ef ffffd405`24498340 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
fffffe89`bc108da0 fffff807`75bc78a3 : ffffd405`24498340 fffff807`7549c769 ffffd405`24498340 fffff807`7549c8c0 : nt!PspCatchCriticalBreak+0x115
fffffe89`bc108e40 fffff807`75a39ef0 : ffffd405`00000000 00000000`00000000 ffffd405`24498340 ffffd405`24498340 : nt!PspTerminateAllThreads+0x175b3f
fffffe89`bc108eb0 fffff807`75a39cd9 : ffffffff`ffffffff fffffe89`bc108fe0 ffffd405`24498340 00000000`00000000 : nt!PspTerminateProcess+0xe0
fffffe89`bc108ef0 fffff807`755d2d18 : 00007ffd`000003ec ffffd405`2a34f080 ffffd405`24498340 fffffe89`bc109130 : nt!NtTerminateProcess+0xa9
fffffe89`bc108f60 fffff807`755c5320 : fffff807`7562ffba fffffe89`bc109a58 fffffe89`bc109a58 fffffe89`bc109130 : nt!KiSystemServiceCopyEnd+0x28
fffffe89`bc1090f8 fffff807`7562ffba : fffffe89`bc109a58 fffffe89`bc109a58 fffffe89`bc109130 00007ffd`ff416000 : nt!KiServiceLinkage
fffffe89`bc109100 fffff807`755d341d : ffff8bc5`e2f17000 fffffe89`bc109b00 ffff8000`00000000 00000074`00c80ff8 : nt!KiDispatchException+0x1687ca
fffffe89`bc109920 fffff807`755cf605 : 00000000`00000000 fffffe89`bc109b80 00000000`00000000 fffffe89`bc109b80 : nt!KiExceptionDispatch+0x11d
fffffe89`bc109b00 00007ffe`031984b0 : 00000000`00000000 00007ffd`ff416000 00000074`00c81730 00000074`00c81070 : nt!KiPageFault+0x445
00000074`00c81000 00000000`00000000 : 00007ffd`ff416000 00000074`00c81730 00000074`00c81070 00000000`00000000 : 0x00007ffe`031984b0
THREAD_SHA1_HASH_MOD_FUNC: f6b0f7fafbd5253fc3d42ad0a11af14fddabdcf0
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 6b80782683f2a56e3d79d6dbd71ba21b3a412b1d
THREAD_SHA1_HASH_MOD: bc100a5647b828107ac4e18055e00abcbe1ec406
FOLLOWUP_IP:
nt!PspCatchCriticalBreak+115
fffff807`75ccaef9 cc int 3
FAULT_INSTR_CODE: ed8440cc
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!PspCatchCriticalBreak+115
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4efcf7a9
IMAGE_VERSION: 10.0.18362.476
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 115
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_2a34f080_nt!PspCatchCriticalBreak
BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_2a34f080_nt!PspCatchCriticalBreak
PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_2a34f080_nt!PspCatchCriticalBreak
TARGET_TIME: 2019-12-09T21:42:02.000Z
OSBUILD: 18362
OSSERVICEPACK: 476
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 02:28:41
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 5e5c
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_2a34f080_nt!pspcatchcriticalbreak
FAILURE_ID_HASH: {6625e1c4-421e-33b5-56af-c73385e7a552}
Followup: MachineOwner
---------
Eve gidince bakacağım aklımda
www.malwarebytes.com
www.technopat.net
