KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff682a08e9b60, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff682a08e9ab8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 4014
BIOS_DATE: 05/11/2018
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME B350M-A
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: fffff682a08e9b60
BUGCHECK_P3: fffff682a08e9ab8
BUGCHECK_P4: 0
TRAP_FRAME: fffff682a08e9b60 -- (.trap 0xfffff682a08e9b60)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffa40f452d9e88 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8047e1ab8da rsp=fffff682a08e9cf0 rbp=ffffe2815e666180
r8=0000000000000001 r9=0000000000000001 r10=0000000000000000
r11=ffff8d8eb2c71d00 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po cy
nt!KiExitDispatcher+0x2da:
fffff804`7e1ab8da cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff682a08e9ab8 -- (.exr 0xfffff682a08e9ab8)
ExceptionAddress: fffff8047e1ab8da (nt!KiExitDispatcher+0x00000000000002da)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 8
CPU_MHZ: f35
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 11
CPU_STEPPING: 0
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXPNP: 1 (!blackboxpnp)
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-22-2020 14:40:25.0836
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff8047e27b2e9 to fffff8047e269a50
STACK_TEXT:
fffff682`a08e9838 fffff804`7e27b2e9 : 00000000`00000139 00000000`00000003 fffff682`a08e9b60 fffff682`a08e9ab8 : nt!KeBugCheckEx
fffff682`a08e9840 fffff804`7e27b690 : ffffa40f`0000000a 00000000`00000000 ffffa40f`3dd11d00 ffffa40f`36f9da60 : nt!KiBugCheckDispatch+0x69
fffff682`a08e9980 fffff804`7e279a8e : ffffa40f`443f8080 fffff804`7e72c722 ffffa40f`00000001 00000000`00000000 : nt!KiFastFailDispatch+0xd0
fffff682`a08e9b60 fffff804`7e1ab8da : ffffa40f`36f9da60 fffff804`7e1ad6d9 ffffa40f`44360e80 fffff28f`889a25b6 : nt!KiRaiseSecurityCheckFailure+0x30e
fffff682`a08e9cf0 fffff804`7e1ae5fa : ffffa40f`00000000 00000000`00000000 ffffa40f`474cd2e0 ffffa40f`474cd2e8 : nt!KiExitDispatcher+0x2da
fffff682`a08e9d60 fffff804`7e736b50 : fffff682`a08e9ec0 00000000`00000000 00000000`00000000 fffff682`a08e9ec0 : nt!KeReleaseSemaphore+0xaa
fffff682`a08e9de0 fffff804`7e27ad08 : ffffa40f`45339080 00000000`00000000 00000000`00000000 fffff682`a08e9e01 : nt!NtReleaseSemaphore+0x90
fffff682`a08e9e40 00007ffb`3cd5f894 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000000`005cc918 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffb`3cd5f894
THREAD_SHA1_HASH_MOD_FUNC: ca049d7d12f83adbbd3f8ad2fd9c2014b89cb59b
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b0ac4dd4343a73f57fb6413e43ca2ee6031bfef5
THREAD_SHA1_HASH_MOD: cb5f414824c2521bcc505eaa03e92fa10922dad8
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff804`7e27b690 c644242000 mov byte ptr [rsp+20h],0
FAULT_INSTR_CODE: 202444c6
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5fb6edc2
IMAGE_VERSION: 10.0.17763.1039
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
TARGET_TIME: 2020-02-22T11:26:59.000Z
OSBUILD: 17763
OSSERVICEPACK: 1039
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2020-11-20 01:12:18
BUILDDATESTAMP_STR: 180914-1434
BUILDLAB_STR: rs5_release
BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
ANALYSIS_SESSION_ELAPSED_TIME: 46bd
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_nt!kifastfaildispatch
FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}
Followup: MachineOwner
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80212b53470, Address of the instruction which caused the bugcheck
Arg3: ffffd68e3a117280, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 4014
BIOS_DATE: 05/11/2018
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME B350M-A
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff80212b53470
BUGCHECK_P3: ffffd68e3a117280
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!ExReleasePushLockExclusiveEx+20
fffff802`12b53470 f0480fc101 lock xadd qword ptr [rcx],rax
CONTEXT: ffffd68e3a117280 -- (.cxr 0xffffd68e3a117280)
rax=ffffffffffffffff rbx=0000000000000000 rcx=0000000000000ac0
rdx=0000000000000000 rsi=0000000000000ac0 rdi=ffffa1a3c3527010
rip=fffff80212b53470 rsp=ffffd68e3a117c70 rbp=0000000000000005
r8=0000000000000024 r9=00000000000024ac r10=fffff80212b53450
r11=0000000000010000 r12=0000000000000001 r13=0000000000000000
r14=0000000000000001 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!ExReleasePushLockExclusiveEx+0x20:
fffff802`12b53470 f0480fc101 lock xadd qword ptr [rcx],rax ds:002b:00000000`00000ac0=????????????????
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: 8
CPU_MHZ: f35
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 11
CPU_STEPPING: 0
BLACKBOXBSD: 1 (!blackboxbsd)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-22-2020 14:40:29.0126
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from ffffa1cd8d815242 to fffff80212b53470
STACK_TEXT:
ffffd68e`3a117c70 ffffa1cd`8d815242 : 00000000`00000484 ffffffff`ae051398 00000000`00000000 00000000`00000005 : nt!ExReleasePushLockExclusiveEx+0x20
ffffd68e`3a117cd0 ffffa1cd`8d81ade6 : ffffc40c`d217f080 ffffa1a3`c3527010 ffffc40c`d217f080 ffffd68e`3a117da9 : win32kbase!HmgShareLockCheck+0x262
ffffd68e`3a117d40 ffffa1cd`8e21e406 : 00000000`00000000 ffffffff`ae051398 ffffc40c`d217f080 ffff7ff8`8d600000 : win32kbase!hbmSelectBitmap+0x276
ffffd68e`3a117e10 fffff802`12c7ad08 : ffffc40c`d217f080 00000000`3001123e 00000000`00f7d0e0 ffffc40c`d217f080 : win32kfull!NtGdiSelectBitmap+0x16
ffffd68e`3a117e40 00007ffa`30781204 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000000`005dd878 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`30781204
THREAD_SHA1_HASH_MOD_FUNC: 4f35ea0c2c6485b5a739e4222d2fb599ed4eb054
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 1038b889259b2f86aa0ff2a5e7b652e76c9232ed
THREAD_SHA1_HASH_MOD: 87c82543d907dc79f8508a999bc8fe39a84bf40f
FOLLOWUP_IP:
win32kbase!HmgShareLockCheck+262
ffffa1cd`8d815242 4c8b15bfda1d00 mov r10,qword ptr [win32kbase!_imp_KeLeaveCriticalRegion (ffffa1cd`8d9f2d08)]
FAULT_INSTR_CODE: bf158b4c
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: win32kbase!HmgShareLockCheck+262
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32kbase
IMAGE_NAME: win32kbase.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 7e9fb578
IMAGE_VERSION: 10.0.17763.1039
STACK_COMMAND: .cxr 0xffffd68e3a117280 ; kb
BUCKET_ID_FUNC_OFFSET: 262
FAILURE_BUCKET_ID: 0x3B_c0000005_win32kbase!HmgShareLockCheck
BUCKET_ID: 0x3B_c0000005_win32kbase!HmgShareLockCheck
PRIMARY_PROBLEM_CLASS: 0x3B_c0000005_win32kbase!HmgShareLockCheck
TARGET_TIME: 2020-02-22T10:59:33.000Z
OSBUILD: 17763
OSSERVICEPACK: 1039
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2020-11-20 01:12:18
BUILDDATESTAMP_STR: 180914-1434
BUILDLAB_STR: rs5_release
BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
ANALYSIS_SESSION_ELAPSED_TIME: 4bcf
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x3b_c0000005_win32kbase!hmgsharelockcheck
FAILURE_ID_HASH: {9614cd5f-c2f0-b3ef-da9f-ca6be510c559}
Followup: MachineOwner
---------
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000061941, The subtype of the bugcheck.
Arg2: 0000019030f57c00
Arg3: 000000000000000d
Arg4: ffffe1882b639b00
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 4014
BIOS_DATE: 05/11/2018
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME B350M-A
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: 61941
BUGCHECK_P2: 19030f57c00
BUGCHECK_P3: d
BUGCHECK_P4: ffffe1882b639b00
BUGCHECK_STR: 0x1a_61941
CPU_COUNT: 8
CPU_MHZ: f35
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 11
CPU_STEPPING: 0
BLACKBOXBSD: 1 (!blackboxbsd)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: chrome.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-22-2020 14:40:32.0507
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff803150a62c7 to fffff803151c6a50
STACK_TEXT:
ffffe188`2b639958 fffff803`150a62c7 : 00000000`0000001a 00000000`00061941 00000190`30f57c00 00000000`0000000d : nt!KeBugCheckEx
ffffe188`2b639960 fffff803`151d45c9 : ffffcd05`d787e080 00000190`2ec70000 ffffe188`2b639b80 ffffcd05`d3dc10c0 : nt!MmAccessFault+0x947
ffffe188`2b639b00 00007ff8`3ef04324 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x349
00000030`ce3fe160 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`3ef04324
THREAD_SHA1_HASH_MOD_FUNC: 1feb98d5c6601cfab1575099bc1303f202ec7478
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 474324c53ad90401b1ff03d1d137ef564a4a4d87
THREAD_SHA1_HASH_MOD: 2a7ca9d3ab5386d53fea7498e1d81b9c4a4c036b
SYMBOL_NAME: ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: 0x1a_61941_ANALYSIS_INCONCLUSIVE!unknown_function
BUCKET_ID: 0x1a_61941_ANALYSIS_INCONCLUSIVE!unknown_function
PRIMARY_PROBLEM_CLASS: 0x1a_61941_ANALYSIS_INCONCLUSIVE!unknown_function
TARGET_TIME: 2020-02-22T10:43:33.000Z
OSBUILD: 17763
OSSERVICEPACK: 1039
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2020-11-20 01:12:18
BUILDDATESTAMP_STR: 180914-1434
BUILDLAB_STR: rs5_release
BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
ANALYSIS_SESSION_ELAPSED_TIME: 25de
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x1a_61941_analysis_inconclusive!unknown_function
FAILURE_ID_HASH: {5deef4f7-7ffd-da2a-fbcb-ad563ba13c90}
Followup: MachineOwner
---------