CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffff878f85037300, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
ETW minidump data unavailable
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
DUMP_TYPE: 2
BUGCHECK_P1: ffff878f85037300
BUGCHECK_P2: 0
BUGCHECK_P3: 0
BUGCHECK_P4: 0
PROCESS_NAME: svchost.exe
CRITICAL_PROCESS: svchost.exe
EXCEPTION_CODE: (HRESULT) 0x8728c080 (2267594880) - <Unable to get error code text>
ERROR_CODE: (NTSTATUS) 0x8728c080 - <Unable to get error code text>
CRITICAL_PROCESS_REPORTGUID: {ba527b6f-5a4a-477d-a0f0-92c641d0863c}
IMAGE_NAME: ntdll.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: ntdll
FAULTING_MODULE: 0000000000000000
CPU_COUNT: 4
CPU_MHZ: 893
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 3d
CPU_STEPPING: 4
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: 0xEF
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-28-2020 16:29:59.0172
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff801068cb1e9 to fffff801061c1510
STACK_TEXT:
ffff8683`0e66f8f8 fffff801`068cb1e9 : 00000000`000000ef ffff878f`85037300 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffff8683`0e66f900 fffff801`067c7893 : ffff878f`85037300 fffff801`0609c769 ffff878f`85037300 fffff801`0609c8c0 : nt!PspCatchCriticalBreak+0x115
ffff8683`0e66f9a0 fffff801`0663a190 : ffff878f`00000000 00000000`00000000 ffff878f`85037300 ffff878f`85037300 : nt!PspTerminateAllThreads+0x175cbf
ffff8683`0e66fa10 fffff801`06639f79 : ffffffff`ffffffff ffff8683`0e66fb40 ffff878f`85037300 fffff801`065c7801 : nt!PspTerminateProcess+0xe0
ffff8683`0e66fa50 fffff801`061d2e18 : ffff878f`0000038c ffff878f`8728c080 ffff878f`85037300 0000003d`d5bff3fc : nt!NtTerminateProcess+0xa9
ffff8683`0e66fac0 00007ff8`fcadc644 : 00007ff8`fcb4fc9f 00007ff8`fcb7f980 0000003d`d5bff3c0 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
0000003d`d5bfc508 00007ff8`fcb4fc9f : 00007ff8`fcb7f980 0000003d`d5bff3c0 00000000`00000000 00000000`00000000 : 0x00007ff8`fcadc644
0000003d`d5bfc510 00007ff8`fcb7f980 : 0000003d`d5bff3c0 00000000`00000000 00000000`00000000 00000000`00000004 : 0x00007ff8`fcb4fc9f
0000003d`d5bfc518 0000003d`d5bff3c0 : 00000000`00000000 00000000`00000000 00000000`00000004 00007ff8`fcae3d1d : 0x00007ff8`fcb7f980
0000003d`d5bfc520 00000000`00000000 : 00000000`00000000 00000000`00000004 00007ff8`fcae3d1d 00007ff8`fcb7f980 : 0x0000003d`d5bff3c0
THREAD_SHA1_HASH_MOD_FUNC: 042a2b51772309c39e12d732cc93cacf0af3064e
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d394090036a06c3619fdd15ebfe933a282001283
THREAD_SHA1_HASH_MOD: ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693
FOLLOWUP_NAME: MachineOwner
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_8728c080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_8728c080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
PRIMARY_PROBLEM_CLASS: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_8728c080_ntdll.dll!KiRaiseUserExceptionDispatcher_IMAGE_ntdll.dll
TARGET_TIME: 2020-02-28T13:16:03.000Z
OSBUILD: 18362
OSSERVICEPACK: 657
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2005-04-23 04:40:32
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 1af9
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0xef_svchost.exe_bugcheck_critical_process_8728c080_ntdll.dll!kiraiseuserexceptiondispatcher_image_ntdll.dll
FAILURE_ID_HASH: {413f9e17-4562-9e99-a4d0-ae770a634600}
Followup: MachineOwner
---------