*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd18d4c1dedf0, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffd18d4c1ded48, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Check Image - Checksum mismatch - Dump: 0x3aff59, File: 0x3ab4c9 - C:\ProgramData\Dbg\sym\dxgkrnl.sys\0F2DDF593aa000\dxgkrnl.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 3655
Key : Analysis.Elapsed.mSec
Value: 18375
Key : Analysis.IO.Other.Mb
Value: 8
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 26
Key : Analysis.Init.CPU.mSec
Value: 1452
Key : Analysis.Init.Elapsed.mSec
Value: 26092
Key : Analysis.Memory.CommitPeak.Mb
Value: 89
Key : Bugcheck.Code.LegacyAPI
Value: 0x139
Key : FailFast.Name
Value: CORRUPT_LIST_ENTRY
Key : FailFast.Type
Value: 3
Key : Failure.Bucket
Value: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
Key : Failure.Hash
Value: {3aede96a-54dd-40d6-d4cb-2a161a843851}
Key : Hypervisor.Enlightenments.Value
Value: 68673420
Key : Hypervisor.Enlightenments.ValueHex
Value: 417df8c
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 21631230
Key : Hypervisor.Flags.ValueHex
Value: 14a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7
Key : WER.OS.Branch
Value: vb_release
Key : WER.OS.Version
Value: 10.0.19041.1
BUGCHECK_CODE: 139
BUGCHECK_P1: 3
BUGCHECK_P2: ffffd18d4c1dedf0
BUGCHECK_P3: ffffd18d4c1ded48
BUGCHECK_P4: 0
FILE_IN_CAB: 062923-15421-01.dmp
TRAP_FRAME: ffffd18d4c1dedf0 -- (.trap 0xffffd18d4c1dedf0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff93003fcfc9a8 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff93003fcfca70 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80261375409 rsp=ffffd18d4c1def80 rbp=fffff8026138a150
r8=ffffd18d4c1def90 r9=0000000000000009 r10=fffff8025d820130
r11=ffffd18d4c1def10 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
Ntfs!NtfsCommonClose+0x809:
fffff802`61375409 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffd18d4c1ded48 -- (.exr 0xffffd18d4c1ded48)
ExceptionAddress: fffff80261375409 (Ntfs!NtfsCommonClose+0x0000000000000809)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
ffffd18d`4c1deac8 fffff802`5da10029 : 00000000`00000139 00000000`00000003 ffffd18d`4c1dedf0 ffffd18d`4c1ded48 : nt!KeBugCheckEx
ffffd18d`4c1dead0 fffff802`5da10590 : 00000000`00000002 ffffc185`51b27a50 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd18d`4c1dec10 fffff802`5da0e55d : fffff802`6138a150 fffff802`6128bb2f ffff9300`44d935a0 ffffd18d`4c1df1f0 : nt!KiFastFailDispatch+0xd0
ffffd18d`4c1dedf0 fffff802`61375409 : fffff802`6138a150 ffff9300`00000000 00000000`00000000 ffff9300`3fcfc5a0 : nt!KiRaiseSecurityCheckFailure+0x31d
ffffd18d`4c1def80 fffff802`6138b4f4 : ffffd18d`4c1df1f0 ffff9300`3fcfc700 ffff9300`3fcfc5a0 ffffc185`42127180 : Ntfs!NtfsCommonClose+0x809
ffffd18d`4c1df050 fffff802`6138a1d8 : 00000000`0000001c fffff802`5e325440 00000000`00000000 00000000`00000000 : Ntfs!NtfsFspCloseInternal+0x244
ffffd18d`4c1df1b0 fffff802`5d88e5c5 : ffffc185`5414a040 fffff802`6138a150 ffffc185`3c8b5a20 fffff802`00000000 : Ntfs!NtfsFspClose+0x88
ffffd18d`4c1df470 fffff802`5d9268f5 : ffffc185`5414a040 00000000`00000080 ffffc185`3c8d3080 00000092`12987334 : nt!ExpWorkerThread+0x105
ffffd18d`4c1df510 fffff802`5da04c68 : ffffd581`a28c0180 ffffc185`5414a040 fffff802`5d9268a0 020b0030`c0020002 : nt!PspSystemThreadStartup+0x55
ffffd18d`4c1df560 00000000`00000000 : ffffd18d`4c1e0000 ffffd18d`4c1d9000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
SYMBOL_NAME: nt!KiFastFailDispatch+d0
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
IMAGE_VERSION: 10.0.19041.3086
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}
Followup: MachineOwner
---------
