KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff8480ceaf4130, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff8480ceaf4088, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for athurx.sys
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 3
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-VFOM7MS
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 49
Key : Analysis.Memory.CommitPeak.Mb
Value: 71
Key : Analysis.System
Value: CreateObject
ADDITIONAL_XML: 1
BUGCHECK_CODE: 139
BUGCHECK_P1: 3
BUGCHECK_P2: ffff8480ceaf4130
BUGCHECK_P3: ffff8480ceaf4088
BUGCHECK_P4: 0
TRAP_FRAME: ffff8480ceaf4130 -- (.trap 0xffff8480ceaf4130)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffac868eeb40e3 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffac868efabc48 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8043b120f6c rsp=ffff8480ceaf42c0 rbp=0000000000000001
r8=000000000000004c r9=0000000000000000 r10=0000000000000000
r11=fffff780000003b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up di ng nz ac po cy
nt!ExInterlockedRemoveHeadList+0x8c:
fffff804`3b120f6c cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff8480ceaf4088 -- (.exr 0xffff8480ceaf4088)
ExceptionAddress: fffff8043b120f6c (nt!ExInterlockedRemoveHeadList+0x000000000000008c)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
EXCEPTION_STR: 0xc0000409
STACK_TEXT:
ffff8480`ceaf3e08 fffff804`3b1ef929 : 00000000`00000139 00000000`00000003 ffff8480`ceaf4130 ffff8480`ceaf4088 : nt!KeBugCheckEx
ffff8480`ceaf3e10 fffff804`3b1efd50 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff8480`ceaf3f50 fffff804`3b1ee0e3 : 00000000`03dfd240 00000000`00000000 ffff2a12`7425fbbd fffff804`3b03737e : nt!KiFastFailDispatch+0xd0
ffff8480`ceaf4130 fffff804`3b120f6c : 00000000`00000000 00000000`00000000 ffffac86`8efabc58 ffffac86`8efabc48 : nt!KiRaiseSecurityCheckFailure+0x323
ffff8480`ceaf42c0 fffff804`4ed554c0 : ffffac86`95c67040 00000000`00000080 fffff804`4ed56eb0 00000000`00000000 : nt!ExInterlockedRemoveHeadList+0x8c
ffff8480`ceaf42f0 ffffac86`95c67040 : 00000000`00000080 fffff804`4ed56eb0 00000000`00000000 00000000`00000000 : athurx+0x54c0
ffff8480`ceaf42f8 00000000`00000080 : fffff804`4ed56eb0 00000000`00000000 00000000`00000000 00000000`00000000 : 0xffffac86`95c67040
ffff8480`ceaf4300 fffff804`4ed56eb0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x80
ffff8480`ceaf4308 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff804`4ed7abf4 : athurx+0x6eb0
SYMBOL_NAME: athurx+54c0
MODULE_NAME: athurx
IMAGE_NAME: athurx.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 54c0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {cf0b00cb-8b52-be47-e20d-865e290d55f0}
Followup: MachineOwner
---------