KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffc30cda775250, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffc30cda7751a8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for athurx.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: MSI
SYSTEM_PRODUCT_NAME: MS-7996
SYSTEM_SKU: Default string
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 2.50
BIOS_DATE: 02/23/2016
BASEBOARD_MANUFACTURER: MSI
BASEBOARD_PRODUCT: H110M PRO-VD (MS-7996)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffffc30cda775250
BUGCHECK_P3: ffffc30cda7751a8
BUGCHECK_P4: 0
TRAP_FRAME: ffffc30cda775250 -- (.trap 0xffffc30cda775250)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe78643be3249 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffe7864311cc48 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8074fc466bb rsp=ffffc30cda7753e0 rbp=0000000000000001
r8=0000000000000010 r9=0000000000000000 r10=0000000000000001
r11=fffff780000003b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di ng nz ac pe cy
nt!ExInterlockedRemoveHeadList+0x8b:
fffff807`4fc466bb cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffc30cda7751a8 -- (.exr 0xffffc30cda7751a8)
ExceptionAddress: fffff8074fc466bb (nt!ExInterlockedRemoveHeadList+0x000000000000008b)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 4
CPU_MHZ: e70
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 5e
CPU_STEPPING: 3
CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: C6'00000000 (cache) C6'00000000 (init)
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 0
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-ME9UFOB
ANALYSIS_SESSION_TIME: 04-07-2020 17:06:48.0804
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
LAST_CONTROL_TRANSFER: from fffff8074fdd41e9 to fffff8074fdc2380
STACK_TEXT:
ffffc30c`da774f28 fffff807`4fdd41e9 : 00000000`00000139 00000000`00000003 ffffc30c`da775250 ffffc30c`da7751a8 : nt!KeBugCheckEx
ffffc30c`da774f30 fffff807`4fdd4610 : 00000000`40030008 00000000`00000002 ffffc30c`da775801 ffffc30c`da7751d8 : nt!KiBugCheckDispatch+0x69
ffffc30c`da775070 fffff807`4fdd29a5 : 00000003`6677904f 00000000`00000000 ffffe786`416e3ee0 fffff807`68b6bab8 : nt!KiFastFailDispatch+0xd0
ffffc30c`da775250 fffff807`4fc466bb : 00000000`00000000 00000000`00000000 ffffe786`4311cc58 ffffe786`4311cc48 : nt!KiRaiseSecurityCheckFailure+0x325
ffffc30c`da7753e0 fffff807`66de54c0 : ffffe786`4591b040 00000000`00000080 fffff807`66de6eb0 ffffc30c`da775578 : nt!ExInterlockedRemoveHeadList+0x8b
ffffc30c`da775410 ffffe786`4591b040 : 00000000`00000080 fffff807`66de6eb0 ffffc30c`da775578 00000000`00000000 : athurx+0x54c0
ffffc30c`da775418 00000000`00000080 : fffff807`66de6eb0 ffffc30c`da775578 00000000`00000000 fffff807`51fb7941 : 0xffffe786`4591b040
ffffc30c`da775420 fffff807`66de6eb0 : ffffc30c`da775578 00000000`00000000 fffff807`51fb7941 fffff807`5206c6a8 : 0x80
ffffc30c`da775428 ffffc30c`da775578 : 00000000`00000000 fffff807`51fb7941 fffff807`5206c6a8 fffff807`66e0abf4 : athurx+0x6eb0
ffffc30c`da775430 00000000`00000000 : fffff807`51fb7941 fffff807`5206c6a8 fffff807`66e0abf4 ffffe786`4310a030 : 0xffffc30c`da775578
THREAD_SHA1_HASH_MOD_FUNC: c075dd76ae1cb3d32cda42306df9a73c8b1bf6c7
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 691b31929db45ab9a5cfbb6e15e4d6c9f0f611cc
THREAD_SHA1_HASH_MOD: cd7a3d611cb1d19f2239b2de5cad241acae27d4f
FOLLOWUP_IP:
athurx+54c0
fffff807`66de54c0 4889442420 mov qword ptr [rsp+20h],rax
FAULT_INSTR_CODE: 24448948
SYMBOL_STACK_INDEX: 5
SYMBOL_NAME: athurx+54c0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: athurx
IMAGE_NAME: athurx.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4daeb071
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 54c0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function
TARGET_TIME: 2020-04-07T13:08:08.000Z
OSBUILD: 18362
OSSERVICEPACK: 720
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: f540
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_athurx!unknown_function
FAILURE_ID_HASH: {cf0b00cb-8b52-be47-e20d-865e290d55f0}
Followup: MachineOwner
---------
www.dropbox.com
