*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: ffff9c9d68784000, Address of the instruction which caused the bugcheck
Arg3: ffffda8cba8addf0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 10.0.18362.476 (WinBuild.160101.0800)
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: ffff9c9d68784000
BUGCHECK_P3: ffffda8cba8addf0
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
win32kfull!GreIsCurrentProcessSystemCritical+0
ffff9c9d`68784000 0000 add byte ptr [rax],al
CONTEXT: ffffda8cba8addf0 -- (.cxr 0xffffda8cba8addf0)
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=fffff807184389a8 rdi=ffff9d09af6fc2d0
rip=ffff9c9d68784000 rsp=ffffda8cba8ae7e8 rbp=ffffda8cba8ae8f0
r8=ffffda8cba8aea90 r9=00007ff870530000 r10=ffff9c9d68784000
r11=ffffb67a53600000 r12=00007ff872d93880 r13=0000000000000001
r14=ffffda8cba8aea90 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050286
win32kfull!GreIsCurrentProcessSystemCritical:
ffff9c9d`68784000 0000 add byte ptr [rax],al ds:002b:00000000`00000000=??
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: c
CPU_MHZ: e74
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: taskhostw.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 11-22-2019 16:44:19.0861
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from ffff9c9d69ab5ba7 to ffff9c9d68784000
STACK_TEXT:
ffffda8c`ba8ae7e8 ffff9c9d`69ab5ba7 : 00000000`00000000 00000000`00000000 e605e836`88000400 fffff807`18074677 : win32kfull!GreIsCurrentProcessSystemCritical
ffffda8c`ba8ae7f0 ffff9c9d`68461040 : 00000000`00000078 ffff9d09`a88d2000 00007ff8`70546014 00000000`00000014 : win32kbase!W32CalloutDispatch+0x47
ffffda8c`ba8aea10 fffff807`185ca6f1 : fffffbfd`dffe1c10 ffffda8c`ba8aea90 fffffbfd`feff77f8 ffff9d09`b2cc0900 : win32k!W32CalloutDispatchThunk+0x10
ffffda8c`ba8aea40 fffff807`186c5311 : ffff9d09`b2d9c080 ffffda8c`ba8aeab0 00000000`00000021 00000000`00000000 : nt!ExCallCallBack+0x3d
ffffda8c`ba8aea70 fffff807`181c5169 : 00000000`00000000 ffff9d09`b2d9c080 00000000`0000101b 000000dc`d12fcae0 : nt!PsConvertToGuiThread+0xc1
ffffda8c`ba8aead0 fffff807`181d3112 : ffff9d09`0000003a 000000dc`d12fd0c0 00000000`0000fffc 00000000`00000000 : nt!KiConvertToGuiThread+0x9
ffffda8c`ba8aeb00 00007ff8`71561784 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x17d
000000dc`d12fd098 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`71561784
CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32kfull
3224 errors : !win32kfull (ffff9c9d68784002-ffff9c9d68784fff)
ffff9c9d68784000 00 00 *f2 *0f *11 *48 10 49 8b 85 00 02 00 00 48 8b .....H.I......H.
ffff9c9d68784010 4c 24 *70 *48 *c7 *00 *00 *00 00 00 49 8b 85 00 02 00 L$pH......I.....
...
ffff9c9d68784030 00 *00 *00 *b9 *18 *00 *00 *00 *0f *45 *c1 *49 *01 *85 *00 *02 .........E.I....
ffff9c9d68784040 00 *00 *b8 *01 00 00 *00 *85 *c0 0f 84 11 01 00 00 49 ...............I
...
ffff9c9d68784060 4d 8b *04 *00 *e9 *ab *fd *ff *ff *b8 01 00 00 00 48 8b M.............H.
ffff9c9d68784070 8c 24 *28 *01 *00 *00 *48 *33 *cc *e8 *f2 *7b *06 *00 *48 *81 .$(...H3...{..H.
ffff9c9d68784080 *c4 *38 *01 *00 *00 *41 *5f *41 *5e *41 *5d *41 *5c *5f *5e *5d .8...A_A^A]A\_^]
ffff9c9d68784090 *5b *c3 *66 *89 *6c *24 *40 4c *8d *4c *24 *64 *48 *8b *6c *24 [[email protected]$dH.l$
ffff9c9d687840a0 *50 *48 *8d *54 *24 *40 *48 *8b *cd *c7 *44 *24 *28 *00 *00 *00 [email protected]$(...
ffff9c9d687840b0 *00 *41 *b8 *01 *00 *00 *00 *c7 *44 *24 *20 *00 *00 *00 *00 *e8 .A......D$ .....
ffff9c9d687840c0 *dc *bc *fd *ff *48 *8b *4c *24 *58 *48 *8b *54 *24 *70 *44 *8b ....H.L$XH.T$pD.
ffff9c9d687840d0 *74 *24 *64 *4c *8b *6d *00 *e9 *ac *fd *ff *ff *0f *b7 *d5 *49 t$dL.m.........I
ffff9c9d687840e0 *8b *cd *e8 *05 *b9 *fd *ff *41 8b *de *4c *8b *f8 *2b *18 *48 .......A..L..+.H
ffff9c9d687840f0 *83 *c0 *04 *48 *89 *84 *24 *80 00 00 *00 *3b *18 *73 *10 *0f ...H..$....;.s..
ffff9c9d68784100 *ae *e8 *49 *8b *4f *08 *4c *8b *04 *d9 *e9 *00 *fd *ff *ff *4c ..I.O.L........L
ffff9c9d68784110 *8b *84 *24 *98 *00 *00 *00 *48 *8d *84 *24 *88 *00 *00 *00 *48 ..$....H..$....H
ffff9c9d68784120 *8b *94 *24 *a0 *00 *00 *00 *4c *8b *cf *c7 *44 *24 *38 *00 *00 ..$....L...D$8..
ffff9c9d68784130 *00 *00 *49 *8b *cd *48 *89 *44 *24 *30 *8b *44 *24 *60 *89 *44 ..I..H.D$0.D$`.D
ffff9c9d68784140 *24 *28 *48 *8b *84 *24 *90 *00 *00 *00 *48 *89 *44 *24 *20 *e8 $(H..$....H.D$ .
ffff9c9d68784150 *44 *30 *fd *ff *4c *8b *c0 *48 *85 *c0 0f *85 *af *fc *ff *ff D0..L..H........
ffff9c9d68784160 *33 *c0 *e9 *07 *ff *ff *ff *45 *33 *c0 *ba *47 *63 *61 *63 *b9 3......E3..Gcac.
ffff9c9d68784170 *20 *07 00 00 *e8 *fb *2a *fd *ff *48 *85 *c0 *74 *61 *49 *8b .....*..H..taI.
ffff9c9d68784180 *8d *18 *02 *00 *00 *48 *89 *08 *48 *8d *88 *20 *07 *00 *00 *49 .....H..H.. ...I
ffff9c9d68784190 *89 *85 *18 *02 *00 *00 *48 *83 *c0 *10 *49 *89 *85 00 *02 00 ......H...I.....
ffff9c9d687841a0 *00 *49 *89 8d *08 *02 *00 *00 48 *8b *5d *00 *48 *89 *5c *24 .I......H.].H.\$
ffff9c9d687841b0 *48 *e9 *11 fd *ff *ff *48 *8b *41 *08 *48 *89 *5c *24 *48 *48 H.....H.A.H.\$HH
ffff9c9d687841c0 *85 *c0 *0f *84 *d5 *fc *ff *ff *48 *89 *02 *e9 *72 *fe *ff *ff ........H...r...
ffff9c9d687841d0 *e8 *c3 *06 *fd *ff *85 *c0 *0f *85 *ce *fb *ff *ff *eb *81 *33 ...............3
ffff9c9d687841e0 *c0 *e9 *61 *fe *ff *ff *cc *cc *cc *cc *cc *cc *48 *8b *01 *4c ..a.........H..L
ffff9c9d687841f0 *8b *48 *78 *49 *8b *41 *10 *8b *48 *04 *f6 *c1 *02 *0f *85 *79 .HxI.A..H......y
ffff9c9d68784200 *67 *0b *00 *c3 *cc *cc *cc *cc *cc *cc *cc *cc *cc *cc *cc *cc g...............
ffff9c9d68784210 *4c *89 *4c *24 *20 *4c *89 *44 *24 *18 *89 *54 *24 *10 *48 *89 L.L$ L.D$..T$.H.
ffff9c9d68784220 *4c *24 *08 *53 *48 *81 *ec *90 *00 *00 *00 *44 *8b *d2 *4c *8b L$.SH......D..L.
ffff9c9d68784230 *d9 *48 *8b *9c *24 *c0 *00 *00 *00 *48 *85 *db *0f *84 *84 *67 .H..$....H.....g
ffff9c9d68784240 *0b 00 *33 *c0 *48 *89 *44 *24 *70 *48 *89 *44 *24 *78 *48 *89 ..3.H.D$pH.D$xH.
ffff9c9d68784250 *84 *24 *80 *00 *00 *00 *65 *48 *8b *04 25 88 01 00 00 48 .$....eH..%....H
ffff9c9d68784260 85 c0 *0f *84 *f5 *00 *00 *00 *48 *8b *cb *f6 *c3 *03 *75 *14 ........H.....u.
ffff9c9d68784270 48 *8b *05 *01 *db *25 *00 48 8b *10 48 *3b *da *72 *12 *48 H....%.H..H;.r.H
ffff9c9d68784280 *8b *ca *eb *0d *4c *8b *15 *95 *d9 *25 *00 *e8 *90 b1 2a 00 ....L....%....*.
ffff9c9d68784290 cc 0f b6 01 88 01 0f b6 41 *17 *88 *41 *17 *0f *10 *03 ........A..A....
ffff9c9d687842a0 *0f *11 *44 *24 *70 *f2 *0f *10 *4b *10 *f2 *0f *11 *8c *24 *80 ..D$p...K.....$.
ffff9c9d687842b0 *00 *00 *00 *33 *c0 *89 *44 *24 *50 eb *2c *89 *44 *24 *50 *48 ...3..D$P.,.D$PH
ffff9c9d687842c0 *8b *9c *24 *c0 *00 *00 *00 *4c 8b *8c *24 *b8 *00 *00 *00 *4c ..$....L..$....L
ffff9c9d687842d0 *8b *84 *24 *b0 *00 *00 *00 *44 *8b *94 *24 *a8 *00 00 00 *4c ..$....D..$....L
ffff9c9d687842e0 *8b *9c *24 *a0 *00 *00 *00 *85 *c0 *78 *72 *48 *8b *44 *24 *70 ..$......xrH.D$p
ffff9c9d687842f0 *48 *c1 *e8 *20 *c7 *44 *24 *40 *01 *00 *00 *00 *c7 *44 *24 *38 H.. [email protected]$8
ffff9c9d68784300 *00 *00 00 *00 *48 *8d *4c *24 *58 *48 *89 *4c *24 *30 *89 *44 ....H.L$XH.L$0.D
ffff9c9d68784310 *24 *28 *8b *44 *24 *70 *89 *44 *24 *20 *41 *8b *d2 *49 *8b *cb $(.D$p.D$ A..I..
ffff9c9d68784320 *e8 *4b *6f *f6 *ff *48 *8b *4c *24 *58 *48 *89 *8c *24 *80 *00 .Ko..H.L$XH..$..
ffff9c9d68784330 *00 *00 *48 *89 *44 *24 *78 *0f *10 *44 *24 *70 *0f *11 *03 *f2 ..H.D$x..D$p....
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE_4096
STACK_COMMAND: .cxr 0xffffda8cba8addf0 ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_LARGE_4096
TARGET_TIME: 2019-11-22T13:40:54.000Z
OSBUILD: 18362
OSSERVICEPACK: 476
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 784
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 02:28:41
BUILDDATESTAMP_STR: 160101.0800
BUILDLAB_STR: WinBuild
BUILDOSVER_STR: 10.0.18362.476
ANALYSIS_SESSION_ELAPSED_TIME: 2314
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_large_4096
FAILURE_ID_HASH: {8d7aaa06-783f-2252-c9f3-768cf1e213bd}
Followup: memory_corruption
---------
