MEMORY_MANAGEMENT mavi ekran hatası

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000008886, The subtype of the bugcheck.
Arg2: fffff1000c2efd70
Arg3: fffff1000c2cbd40
Arg4: 0000000000000504

Debugging Details:
------------------


KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  18362.1.amd64fre.19h1_release.190318-1202

SYSTEM_MANUFACTURER:  Micro-Star International Co., Ltd.

SYSTEM_PRODUCT_NAME:  MS-7B84

SYSTEM_SKU:  To be filled by O.E.M.

SYSTEM_VERSION:  2.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  4.90

BIOS_DATE:  12/03/2019

BASEBOARD_MANUFACTURER:  Micro-Star International Co., Ltd.

BASEBOARD_PRODUCT:  B450M PRO-M2 V2 (MS-7B84)

BASEBOARD_VERSION:  2.0

DUMP_TYPE:  2

BUGCHECK_P1: 8886

BUGCHECK_P2: fffff1000c2efd70

BUGCHECK_P3: fffff1000c2cbd40

BUGCHECK_P4: 504

BUGCHECK_STR:  0x1a_8886

CPU_COUNT: 4

CPU_MHZ: e74

CPU_VENDOR:  AuthenticAMD

CPU_FAMILY: 17

CPU_MODEL: 1

CPU_STEPPING: 1

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  2

ANALYSIS_SESSION_HOST:  DESKTOP-ME9UFOB

ANALYSIS_SESSION_TIME:  04-10-2020 18:24:07.0678

ANALYSIS_VERSION: 10.0.18362.1 amd64fre

LAST_CONTROL_TRANSFER:  from fffff80438446aa6 to fffff804383c2380

STACK_TEXT: 
ffffa28f`af006258 fffff804`38446aa6 : 00000000`0000001a 00000000`00008886 fffff100`0c2efd70 fffff100`0c2cbd40 : nt!KeBugCheckEx
ffffa28f`af006260 fffff804`3828db33 : fffff100`0c2efd70 00000000`00000000 00000000`00000000 00000000`00000004 : nt!MiUnlinkPageFromList+0x174fe6
ffffa28f`af006380 fffff804`383771e3 : fffff100`0c2efd70 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiRelinkStandbyPage+0x23
ffffa28f`af0063b0 fffff804`388ad4be : ffff800e`bed91000 ffffa28f`af006580 ffffa28f`af006580 00000000`00000000 : nt!MmSetPfnListInfo+0x237
ffffa28f`af0064d0 fffff804`387e999c : 00000000`00000020 00000000`42506650 ffffa28f`af0065e8 ffff800e`bed91000 : nt!PfpPfnPrioRequest+0x26e
ffffa28f`af006550 fffff804`387e7a54 : 00000000`00000000 00000000`00000000 ffffa28f`af006b80 ffff800e`bcc19001 : nt!PfSetSuperfetchInformation+0x128
ffffa28f`af006650 fffff804`383d3c18 : 00000000`00000000 ffffa28f`af006b80 ffff800e`b5ccaf00 00000000`00000ad7 : nt!NtSetSystemInformation+0x294
ffffa28f`af006b00 00007ffa`bedbf534 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000d1`a81f9e68 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`bedbf534


THREAD_SHA1_HASH_MOD_FUNC:  fe5b1e8efcea0bdb4159ce4f6e075044c0973f6a

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  fabc0c77a867c485a3208d82b3613be1da7a659c

THREAD_SHA1_HASH_MOD:  cb5f414824c2521bcc505eaa03e92fa10922dad8

FOLLOWUP_IP:
nt!MiUnlinkPageFromList+174fe6
fffff804`38446aa6 cc              int     3

FAULT_INSTR_CODE:  5b8cc

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiUnlinkPageFromList+174fe6

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  0

IMAGE_VERSION:  10.0.18362.720

STACK_COMMAND:  .thread ; .cxr ; kb

IMAGE_NAME:  memory_corruption

BUCKET_ID_FUNC_OFFSET:  174fe6

FAILURE_BUCKET_ID:  0x1a_8886_nt!MiUnlinkPageFromList

BUCKET_ID:  0x1a_8886_nt!MiUnlinkPageFromList

PRIMARY_PROBLEM_CLASS:  0x1a_8886_nt!MiUnlinkPageFromList

TARGET_TIME:  2020-04-09T17:13:53.000Z

OSBUILD:  18362

OSSERVICEPACK:  720

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  190318-1202

BUILDLAB_STR:  19h1_release

BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h1_release.190318-1202

ANALYSIS_SESSION_ELAPSED_TIME:  980b

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x1a_8886_nt!miunlinkpagefromlist

FAILURE_ID_HASH:  {e6c4a407-fb91-8f9b-d936-43ef8f99a8cf}

Followup:     MachineOwner
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff806134022a3, Address of the instruction which caused the bugcheck
Arg3: ffffee8bb2140080, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for WdFilter.sys

KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  18362.1.amd64fre.19h1_release.190318-1202

SYSTEM_MANUFACTURER:  Micro-Star International Co., Ltd.

SYSTEM_PRODUCT_NAME:  MS-7B84

SYSTEM_SKU:  To be filled by O.E.M.

SYSTEM_VERSION:  2.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  4.90

BIOS_DATE:  12/03/2019

BASEBOARD_MANUFACTURER:  Micro-Star International Co., Ltd.

BASEBOARD_PRODUCT:  B450M PRO-M2 V2 (MS-7B84)

BASEBOARD_VERSION:  2.0

DUMP_TYPE:  2

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff806134022a3

BUGCHECK_P3: ffffee8bb2140080

BUGCHECK_P4: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>

FAULTING_IP:
cldflt!HsmFltPreFILE_SYSTEM_CONTROL+53
fffff806`134022a3 84c0            test    al,al

CONTEXT:  ffffee8bb2140080 -- (.cxr 0xffffee8bb2140080)
rax=0000000000000000 rbx=00000000c9854801 rcx=6576010354c20000
rdx=ffffee8bb21409e0 rsi=ffffaa0ffd0a90f8 rdi=ffffaa0ffc782880
rip=fffff806134022a3 rsp=ffffee8bb2140a70 rbp=0000000000000000
 r8=0000000000000000  r9=0000000000000000 r10=fffff806074617c0
r11=ffffee8bb2140a30 r12=0000000011000000 r13=ffffee8bb2140b48
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050282
cldflt!HsmFltPreFILE_SYSTEM_CONTROL+0x53:
fffff806`134022a3 84c0            test    al,al
Resetting default scope

BUGCHECK_STR:  0x3B_c0000005

CPU_COUNT: 4

CPU_MHZ: e74

CPU_VENDOR:  AuthenticAMD

CPU_FAMILY: 17

CPU_MODEL: 1

CPU_STEPPING: 1

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  DESKTOP-ME9UFOB

ANALYSIS_SESSION_TIME:  04-10-2020 18:24:03.0823

ANALYSIS_VERSION: 10.0.18362.1 amd64fre

LAST_CONTROL_TRANSFER:  from fffff80608ce4a5c to fffff806134022a3

STACK_TEXT: 
ffffee8b`b2140a70 fffff806`08ce4a5c : ffffaa0f`fd0a9198 ffffee8b`b2140b89 ffffaa0f`fd0a9010 00000000`00000000 : cldflt!HsmFltPreFILE_SYSTEM_CONTROL+0x53
ffffee8b`b2140ae0 fffff806`08ce45a0 : ffffee8b`b2140c40 ffffaa0f`fa193600 ffffaa0f`fd0a900d ffffaa0f`f7f65800 : FLTMGR!FltpPerformPreCallbacks+0x2fc
ffffee8b`b2140bf0 fffff806`08ce2bd8 : ffffaa0f`fd0a90f8 ffffaa0f`f7f658a8 00000000`00000000 ffffaa0f`fd0a90f8 : FLTMGR!FltpPassThroughInternal+0x90
ffffee8b`b2140c20 fffff806`08d1952b : ffffaa0f`fd0a9010 ffffaa0f`fd0a90f8 ffffee8b`b2141230 00000000`00000000 : FLTMGR!FltPerformSynchronousIo+0x2d8
ffffee8b`b2140cc0 fffff806`08d19425 : ffffc901`410fc290 00000000`00000160 ffffffff`ffffffff fffff806`09703000 : FLTMGR!IssueControlOperation+0xfb
ffffee8b`b2140d40 fffff806`0971c528 : 00000000`00000000 ffffee8b`b2141230 00000000`00000160 00000000`00000000 : FLTMGR!FltFsControlFile+0x45
ffffee8b`b2140da0 00000000`00000000 : ffffee8b`b2141230 00000000`00000160 00000000`00000000 ffffaa0f`00000000 : WdFilter+0x2c528


THREAD_SHA1_HASH_MOD_FUNC:  eabcd5ad1b84892f6fb27cf8c268f55fae7f9cc4

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  039fa6be32d4d43f046f2fcf0e3b3edd02ec5fbe

THREAD_SHA1_HASH_MOD:  54326e47d16acc516ec2046e448017b06c02291b

FOLLOWUP_IP:
cldflt!HsmFltPreFILE_SYSTEM_CONTROL+53
fffff806`134022a3 84c0            test    al,al

FAULT_INSTR_CODE:  850fc084

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  cldflt!HsmFltPreFILE_SYSTEM_CONTROL+53

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: cldflt

IMAGE_NAME:  cldflt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  0

IMAGE_VERSION:  10.0.18362.693

STACK_COMMAND:  .cxr 0xffffee8bb2140080 ; kb

BUCKET_ID_FUNC_OFFSET:  53

FAILURE_BUCKET_ID:  0x3B_c0000005_cldflt!HsmFltPreFILE_SYSTEM_CONTROL

BUCKET_ID:  0x3B_c0000005_cldflt!HsmFltPreFILE_SYSTEM_CONTROL

PRIMARY_PROBLEM_CLASS:  0x3B_c0000005_cldflt!HsmFltPreFILE_SYSTEM_CONTROL

TARGET_TIME:  2020-04-10T04:21:12.000Z

OSBUILD:  18362

OSSERVICEPACK:  720

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  190318-1202

BUILDLAB_STR:  19h1_release

BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h1_release.190318-1202

ANALYSIS_SESSION_ELAPSED_TIME:  8261

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x3b_c0000005_cldflt!hsmfltprefile_system_control

FAILURE_ID_HASH:  {75769720-dd37-00bd-da19-ad8cebb7fd5e}

Followup:     MachineOwner
---------
REFERENCE_BY_POINTER (18)
Arguments:
Arg1: ffffae0b62abf6c0, Object type of the object whose reference count is being lowered
Arg2: ffffae0b6c119760, Object whose reference count is being lowered
Arg3: 0000000000000001, Reserved
Arg4: 0000000000000001, Reserved
    The reference count of an object is illegal for the current state of the object.
    Each time a driver uses a pointer to an object the driver calls a kernel routine
    to increment the reference count of the object. When the driver is done with the
    pointer the driver calls another kernel routine to decrement the reference count.
    Drivers must match calls to the increment and decrement routines. This bugcheck
    can occur because an object's reference count goes to zero while there are still
    open handles to the object, in which case the fourth parameter indicates the number
    of opened handles. It may also occur when the object's reference count drops below zero
    whether or not there are open handles to the object, and in that case the fourth parameter
    contains the actual value of the pointer references count.

Debugging Details:
------------------


KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  18362.1.amd64fre.19h1_release.190318-1202

SYSTEM_MANUFACTURER:  Micro-Star International Co., Ltd.

SYSTEM_PRODUCT_NAME:  MS-7B84

SYSTEM_SKU:  To be filled by O.E.M.

SYSTEM_VERSION:  2.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  4.90

BIOS_DATE:  12/03/2019

BASEBOARD_MANUFACTURER:  Micro-Star International Co., Ltd.

BASEBOARD_PRODUCT:  B450M PRO-M2 V2 (MS-7B84)

BASEBOARD_VERSION:  2.0

DUMP_TYPE:  2

BUGCHECK_P1: ffffae0b62abf6c0

BUGCHECK_P2: ffffae0b6c119760

BUGCHECK_P3: 1

BUGCHECK_P4: 1

CPU_COUNT: 4

CPU_MHZ: e74

CPU_VENDOR:  AuthenticAMD

CPU_FAMILY: 17

CPU_MODEL: 1

CPU_STEPPING: 1

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x18

PROCESS_NAME:  steam.exe

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  DESKTOP-ME9UFOB

ANALYSIS_SESSION_TIME:  04-10-2020 18:24:00.0012

ANALYSIS_VERSION: 10.0.18362.1 amd64fre

LAST_CONTROL_TRANSFER:  from fffff8042e06259e to fffff8042dfc2380

STACK_TEXT: 
ffffed8b`fded1a38 fffff804`2e06259e : 00000000`00000018 ffffae0b`62abf6c0 ffffae0b`6c119760 00000000`00000001 : nt!KeBugCheckEx
ffffed8b`fded1a40 fffff804`2e4bd26b : ffffed8b`fded1b18 00000000`00000001 00000000`00000001 ffffed8b`fded1b00 : nt!ObfDereferenceObjectWithTag+0x14f3ee
ffffed8b`fded1a80 fffff804`2dfd3c18 : ffffae0b`698d1080 00000000`00000000 ffffed8b`fded1b18 ffffffff`ffd9da60 : nt!NtWaitForSingleObject+0x12b
ffffed8b`fded1b00 00000000`76ed1cbc : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000000`0bebefe8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76ed1cbc


THREAD_SHA1_HASH_MOD_FUNC:  8f819632a0bc19bce34d7ef5e3a676ef0cccb449

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  a8d9fdfebab4088ebee947a28a066b65ac1d3a54

THREAD_SHA1_HASH_MOD:  d084f7dfa548ce4e51810e4fd5914176ebc66791

FOLLOWUP_IP:
nt!ObfDereferenceObjectWithTag+14f3ee
fffff804`2e06259e cc              int     3

FAULT_INSTR_CODE:  48d233cc

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ObfDereferenceObjectWithTag+14f3ee

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

IMAGE_VERSION:  10.0.18362.720

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  14f3ee

FAILURE_BUCKET_ID:  0x18_CORRUPT_REF_COUNT_nt!ObfDereferenceObjectWithTag

BUCKET_ID:  0x18_CORRUPT_REF_COUNT_nt!ObfDereferenceObjectWithTag

PRIMARY_PROBLEM_CLASS:  0x18_CORRUPT_REF_COUNT_nt!ObfDereferenceObjectWithTag

TARGET_TIME:  2020-04-10T02:33:20.000Z

OSBUILD:  18362

OSSERVICEPACK:  720

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  190318-1202

BUILDLAB_STR:  19h1_release

BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h1_release.190318-1202

ANALYSIS_SESSION_ELAPSED_TIME:  c93

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x18_corrupt_ref_count_nt!obfdereferenceobjectwithtag

FAILURE_ID_HASH:  {fa6b3516-71cb-1e92-b987-b8bebd3458ac}

Followup:     MachineOwner
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8026a301b9a, Address of the instruction which caused the bugcheck
Arg3: fffffd8133b86a70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  18362.1.amd64fre.19h1_release.190318-1202

SYSTEM_MANUFACTURER:  Micro-Star International Co., Ltd.

SYSTEM_PRODUCT_NAME:  MS-7B84

SYSTEM_SKU:  To be filled by O.E.M.

SYSTEM_VERSION:  2.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  4.90

BIOS_DATE:  12/03/2019

BASEBOARD_MANUFACTURER:  Micro-Star International Co., Ltd.

BASEBOARD_PRODUCT:  B450M PRO-M2 V2 (MS-7B84)

BASEBOARD_VERSION:  2.0

DUMP_TYPE:  2

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff8026a301b9a

BUGCHECK_P3: fffffd8133b86a70

BUGCHECK_P4: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>

FAULTING_IP:
nt!EtwpTrackBinaryForSession+5a
fffff802`6a301b9a 8b4b10          mov     ecx,dword ptr [rbx+10h]

CONTEXT:  fffffd8133b86a70 -- (.cxr 0xfffffd8133b86a70)
rax=0000000000000068 rbx=0000000000000000 rcx=0000000000000001
rdx=0000000000000004 rsi=ffffa684fa70d7c0 rdi=0000000000000068
rip=fffff8026a301b9a rsp=fffffd8133b87460 rbp=ffffa684fa70d3c0
 r8=0000000000000052  r9=0000000000000000 r10=0000000000000001
r11=ffff8f813ea0b010 r12=0000000000000200 r13=fffffd8133b874d8
r14=0000000000000068 r15=ffffa684fa70d680
iopl=0         nv up ei pl nz na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00050203
nt!EtwpTrackBinaryForSession+0x5a:
fffff802`6a301b9a 8b4b10          mov     ecx,dword ptr [rbx+10h] ds:002b:00000000`00000010=????????
Resetting default scope

BUGCHECK_STR:  0x3B_c0000005

CPU_COUNT: 4

CPU_MHZ: e74

CPU_VENDOR:  AuthenticAMD

CPU_FAMILY: 17

CPU_MODEL: 1

CPU_STEPPING: 1

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  DESKTOP-ME9UFOB

ANALYSIS_SESSION_TIME:  04-10-2020 18:24:11.0461

ANALYSIS_VERSION: 10.0.18362.1 amd64fre

LAST_CONTROL_TRANSFER:  from fffff8026a1e0a15 to fffff8026a301b9a

STACK_TEXT: 
fffffd81`33b87460 fffff802`6a1e0a15 : ffffa684`fa70d3c0 fffffd81`33b875b0 ffffa684`fc342cb8 00000000`00000000 : nt!EtwpTrackBinaryForSession+0x5a
fffffd81`33b874b0 fffff802`6a08afe1 : ffffa684`fed6ed70 ffffa684`fed6ed70 ffffa684`fa70d301 ffffa684`fa70d301 : nt!EtwpProviderArrivalCallback+0xad935
fffffd81`33b87730 fffff802`6a08c209 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!EtwpAddRegEntryToGroup+0x4c1
fffffd81`33b878b0 fffff802`6a08bffd : 00000000`00000000 fffffd81`33b87b80 ffffa684`fed6ed70 00000002`00000000 : nt!EtwpSetProviderTraitsCommon+0x1c9
fffffd81`33b87960 fffff802`6a088f02 : ffffa684`fed6ed70 00000000`0000001e 00000000`50777445 ffffa684`fed6ed70 : nt!EtwpSetProviderTraitsUm+0x165
fffffd81`33b879e0 fffff802`69bd3c18 : 00000000`0000001e 00000002`c8b7e8e8 00000000`00000018 00000002`c8b7e900 : nt!NtTraceControl+0x312
fffffd81`33b87a90 00007ffa`7393f854 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000002`c8b7e8a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`7393f854


THREAD_SHA1_HASH_MOD_FUNC:  8cfb222ec320c8a472009a432fe1e000d16f5ea3

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  537656dcea0f2c76ca704e1d81da1e00f554814f

THREAD_SHA1_HASH_MOD:  30a3e915496deaace47137d5b90c3ecc03746bf6

FOLLOWUP_IP:
nt!EtwpTrackBinaryForSession+5a
fffff802`6a301b9a 8b4b10          mov     ecx,dword ptr [rbx+10h]

FAULT_INSTR_CODE:  49104b8b

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!EtwpTrackBinaryForSession+5a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

IMAGE_VERSION:  10.0.18362.720

STACK_COMMAND:  .cxr 0xfffffd8133b86a70 ; kb

BUCKET_ID_FUNC_OFFSET:  5a

FAILURE_BUCKET_ID:  0x3B_c0000005_nt!EtwpTrackBinaryForSession

BUCKET_ID:  0x3B_c0000005_nt!EtwpTrackBinaryForSession

PRIMARY_PROBLEM_CLASS:  0x3B_c0000005_nt!EtwpTrackBinaryForSession

TARGET_TIME:  2020-04-09T17:16:11.000Z

OSBUILD:  18362

OSSERVICEPACK:  720

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  190318-1202

BUILDLAB_STR:  19h1_release

BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h1_release.190318-1202

ANALYSIS_SESSION_ELAPSED_TIME:  3896

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x3b_c0000005_nt!etwptrackbinaryforsession

FAILURE_ID_HASH:  {2a41ee62-3e9e-3fee-13f6-61f81377d3b0}

Followup:     MachineOwner
---------