KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffe884af23a2d0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffe884af23a228, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for BEDaisy.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd.
SYSTEM_PRODUCT_NAME: MS-7C13
SYSTEM_SKU: Default string
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1.40
BIOS_DATE: 09/05/2019
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd.
BASEBOARD_PRODUCT: H310M PRO-VD PLUS (MS-7C13)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffffe884af23a2d0
BUGCHECK_P3: ffffe884af23a228
BUGCHECK_P4: 0
TRAP_FRAME: ffffe884af23a2d0 -- (.trap 0xffffe884af23a2d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffd38aa3385b60 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8065c048b10 rsp=ffffe884af23a460 rbp=ffffd38aa035f040
r8=0000000000000001 r9=0000000000000002 r10=ffffd38a974aec00
r11=fffff80659f8d180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KiExitDispatcher+0x160:
fffff806`5c048b10 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffe884af23a228 -- (.exr 0xffffe884af23a228)
ExceptionAddress: fffff8065c048b10 (nt!KiExitDispatcher+0x0000000000000160)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 4
CPU_MHZ: e10
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: b
CPU_MICROCODE: 6,9e,b,0 (F,M,S,R) SIG: B4'00000000 (cache) B4'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 01-22-2020 21:04:17.0304
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8065c1d32e9 to fffff8065c1c14e0
STACK_TEXT:
ffffe884`af239fa8 fffff806`5c1d32e9 : 00000000`00000139 00000000`00000003 ffffe884`af23a2d0 ffffe884`af23a228 : nt!KeBugCheckEx
ffffe884`af239fb0 fffff806`5c1d3710 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffe884`af23a0f0 fffff806`5c1d1aa5 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe884`af23a440 : nt!KiFastFailDispatch+0xd0
ffffe884`af23a2d0 fffff806`5c048b10 : 00000000`00000000 ffffe884`af23a501 fffff806`59f8d180 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x325
ffffe884`af23a460 fffff806`5c0a555d : ffffd38a`a3385b58 00000000`00000200 fffff806`59f8d101 fffff806`5c36f06d : nt!KiExitDispatcher+0x160
ffffe884`af23a4c0 fffff806`b0d8fc64 : 00000000`00002200 ffffd38a`9fbe8068 00000000`00000001 00000000`00000002 : nt!KeInsertQueueApc+0x14d
ffffe884`af23a560 00000000`00002200 : ffffd38a`9fbe8068 00000000`00000001 00000000`00000002 00000000`00000000 : BEDaisy+0x2afc64
ffffe884`af23a568 ffffd38a`9fbe8068 : 00000000`00000001 00000000`00000002 00000000`00000000 00000000`00000000 : 0x2200
ffffe884`af23a570 00000000`00000001 : 00000000`00000002 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffd38a`9fbe8068
ffffe884`af23a578 00000000`00000002 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x1
ffffe884`af23a580 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`c0000001 : 0x2
THREAD_SHA1_HASH_MOD_FUNC: b61d566806c3900e9d82f26f996154d545d8a932
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: fca4a2c9edc5b93556e4b2fb148f6720c6f965b3
THREAD_SHA1_HASH_MOD: 0079172978a7673b45090780b1c9d2221d299a5f
FOLLOWUP_IP:
BEDaisy+2afc64
fffff806`b0d8fc64 84c0 test al,al
FAULT_INSTR_CODE: e9c084
SYMBOL_STACK_INDEX: 6
SYMBOL_NAME: BEDaisy+2afc64
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: BEDaisy
IMAGE_NAME: BEDaisy.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5dce5a59
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 2afc64
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_BEDaisy!unknown_function
TARGET_TIME: 2020-01-21T17:56:40.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 4843
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_bedaisy!unknown_function
FAILURE_ID_HASH: {59d8eb10-b2e4-7df6-f6a5-49968226dbb8}
Followup: MachineOwner
---------
