KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffeb8a420dd810, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffeb8a420dd768, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1822
BIOS_DATE: 10/14/2019
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME A320M-F
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffffeb8a420dd810
BUGCHECK_P3: ffffeb8a420dd768
BUGCHECK_P4: 0
TRAP_FRAME: ffffeb8a420dd810 -- (.trap 0xffffeb8a420dd810)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffd987037245c0 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000278 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80657d9a6e0 rsp=ffffeb8a420dd9a0 rbp=ffffeb8a420dda19
r8=ffffd987037021cc r9=0000000000000044 r10=00000000ffffffff
r11=00000000000002c7 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
NETIO!UpdateCacheLruBucket+0x271f0:
fffff806`57d9a6e0 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffeb8a420dd768 -- (.exr 0xffffeb8a420dd768)
ExceptionAddress: fffff80657d9a6e0 (NETIO!UpdateCacheLruBucket+0x00000000000271f0)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: c
CPU_MHZ: c7a
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-02-2020 13:46:22.0856
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff80653bd32e9 to fffff80653bc14e0
STACK_TEXT:
ffffeb8a`420dd4e8 fffff806`53bd32e9 : 00000000`00000139 00000000`00000003 ffffeb8a`420dd810 ffffeb8a`420dd768 : nt!KeBugCheckEx
ffffeb8a`420dd4f0 fffff806`53bd3710 : ffffd986`f6010100 fffff806`53a460ed 00000000`00000020 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffeb8a`420dd630 fffff806`53bd1aa5 : 00000000`000000c0 00000000`00000001 00000000`00000300 ffffd987`03723750 : nt!KiFastFailDispatch+0xd0
ffffeb8a`420dd810 fffff806`57d9a6e0 : ffffd986`f8acc800 00000000`00000000 00000000`00000000 00000000`00000001 : nt!KiRaiseSecurityCheckFailure+0x325
ffffeb8a`420dd9a0 fffff806`57d730d2 : 00000000`00000200 00000000`0000ff00 00000000`00000000 00000000`00000002 : NETIO!UpdateCacheLruBucket+0x271f0
ffffeb8a`420dda80 fffff806`57d85796 : ffffd987`01000000 ffffd986`f8accd90 ffffd986`f8e37dc0 00000000`00000000 : NETIO!LruCleanupWorkItemRoutine+0x82
ffffeb8a`420ddab0 fffff806`53a67ba2 : ffffd986`fb0520d0 00000000`00000000 00000000`00000000 fffff806`5f085020 : NETIO!NetiopIoWorkItemRoutine+0x56
ffffeb8a`420ddb00 fffff806`53abd095 : ffffd986`f5690010 ffffd987`00717040 fffff806`53a67b10 00000000`0000000c : nt!IopProcessWorkItem+0x92
ffffeb8a`420ddb70 fffff806`53b2a7a5 : ffffd987`00717040 00000000`00000080 ffffd986`f569a180 00000000`00000001 : nt!ExpWorkerThread+0x105
ffffeb8a`420ddc10 fffff806`53bc8b2a : ffffc300`66720180 ffffd987`00717040 fffff806`53b2a750 00000000`00000246 : nt!PspSystemThreadStartup+0x55
ffffeb8a`420ddc60 00000000`00000000 : ffffeb8a`420de000 ffffeb8a`420d8000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x2a
THREAD_SHA1_HASH_MOD_FUNC: c92f616c73ef82f08d6f48d5bd5190ed5b4fa1c6
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2e8d618d2d6987a5dc2e05f5f6cbb44667834abc
THREAD_SHA1_HASH_MOD: bdba214886862e246067a00a28a13545bffb9f5b
FOLLOWUP_IP:
NETIO!UpdateCacheLruBucket+271f0
fffff806`57d9a6e0 cd29 int 29h
FAULT_INSTR_CODE: d0f29cd
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: NETIO!UpdateCacheLruBucket+271f0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION: 10.0.18362.267
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 271f0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_NETIO!UpdateCacheLruBucket
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_NETIO!UpdateCacheLruBucket
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_NETIO!UpdateCacheLruBucket
TARGET_TIME: 2020-01-27T11:54:42.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: edbb
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_netio!updatecachelrubucket
FAILURE_ID_HASH: {fb44da04-2c89-3698-d3db-3936a15eee5e}
Followup: MachineOwner
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80464a45c32, Address of the instruction which caused the bugcheck
Arg3: ffff858f1cf4edb0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1822
BIOS_DATE: 10/14/2019
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME A320M-F
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff80464a45c32
BUGCHECK_P3: ffff858f1cf4edb0
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!ExFreeHeapPool+b2
fffff804`64a45c32 488b5810 mov rbx,qword ptr [rax+10h]
CONTEXT: ffff858f1cf4edb0 -- (.cxr 0xffff858f1cf4edb0)
rax=ffdf858f1cf00000 rbx=0000000000000102 rcx=0000000000000000
rdx=fffff80464a00000 rsi=ffdf858f1cf4f9c0 rdi=a2e64eada2e64ead
rip=fffff80464a45c32 rsp=ffff858f1cf4f7a0 rbp=ffff858f1cf4fb80
r8=0000000000000001 r9=0000000000000000 r10=ffffa78134502180
r11=ffffdf0d4c10e080 r12=ffff800000000000 r13=0000000000000000
r14=0000000000000010 r15=000000bab1b7f9b4
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050286
nt!ExFreeHeapPool+0xb2:
fffff804`64a45c32 488b5810 mov rbx,qword ptr [rax+10h] ds:002b:ffdf858f`1cf00010=????????????????
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: c
CPU_MHZ: c7a
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: winlogon.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-02-2020 13:46:25.0663
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff80464d6f0a9 to fffff80464a45c32
STACK_TEXT:
ffff858f`1cf4f7a0 fffff804`64d6f0a9 : 00000000`00000000 ffdf858f`1cf4f9c0 ffffdf0d`46c7a730 01000000`00100000 : nt!ExFreeHeapPool+0xb2
ffff858f`1cf4f8c0 fffff804`64bf91f8 : ffffdf0d`46c7a730 000004d0`fffffb30 00000000`00000019 00000000`00000000 : nt!ExFreePool+0x9
ffff858f`1cf4f8f0 fffff804`64bd2d18 : 00000000`00000000 fffff804`64b1c497 ffffdf0d`46c7a730 00000263`a9080b00 : nt!NtWaitForWorkViaWorkerFactory+0x1ba788
ffff858f`1cf4fa90 00007ffd`3f45fa54 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
000000ba`b1b7f958 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`3f45fa54
CHKIMG_EXTENSION: !chkimg -lo 50 -db !win32kbase
3 errors : !win32kbase (fffffdc494c3c89e-fffffdc494c458a6)
fffffdc494c3c890 00 00 00 48 85 c9 75 12 48 8b 5c 24 30 48 *93 c4 ...H..u.H.\$0H..
...
fffffdc494c45850 48 89 5c 24 08 57 *c8 83 ec 20 48 8d 05 af 92 13 H.\$.W... H.....
...
fffffdc494c458a0 4c 8d 05 69 92 13 *80 4c 89 01 48 8b c1 48 83 c4 L..i...L..H..H..
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: STRIDE
STACK_COMMAND: .cxr 0xffff858f1cf4edb0 ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_STRIDE
BUCKET_ID: MEMORY_CORRUPTION_STRIDE
PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_STRIDE
TARGET_TIME: 2020-01-29T11:38:15.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 4496
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_stride
FAILURE_ID_HASH: {574dbc1b-92cb-fb09-cb7a-cacc1bb2c511}
Followup: memory_corruption
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8041b82c4cf, Address of the instruction which caused the bugcheck
Arg3: fffff80421c7c930, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1822
BIOS_DATE: 10/14/2019
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME A320M-F
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff8041b82c4cf
BUGCHECK_P3: fffff80421c7c930
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!RtlAvlInsertNodeEx+6f
fffff804`1b82c4cf 48391a cmp qword ptr [rdx],rbx
CONTEXT: fffff80421c7c930 -- (.cxr 0xfffff80421c7c930)
rax=0000000000000000 rbx=ffff9e8f62c81d80 rcx=00000000ffffff03
rdx=ffdf9e8f62c59560 rsi=ffff9e8f62d91500 rdi=0000000000000000
rip=fffff8041b82c4cf rsp=ffffd380913b8610 rbp=0000000000001000
r8=0000000000000063 r9=ffff9e8f62c81d90 r10=0000000000000000
r11=ffff9e8f6078d998 r12=000000002148fbb0 r13=000000002148fbb0
r14=000000002148fbb0 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050286
nt!RtlAvlInsertNodeEx+0x6f:
fffff804`1b82c4cf 48391a cmp qword ptr [rdx],rbx ds:002b:ffdf9e8f`62c59560=????????????????
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: c
CPU_MHZ: c7a
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-02-2020 13:46:29.0448
ANALYSIS_VERSION: 10.0.18362.1 x86fre
BAD_STACK_POINTER: fffff80421c7bff8
LAST_CONTROL_TRANSFER: from fffff8041b82c313 to fffff8041b82c4cf
STACK_TEXT:
ffffd380`913b8610 fffff804`1b82c313 : ffff9e8f`6078d900 ffff9e8f`6078d340 00000000`2148fbb0 ffff9e8f`00000000 : nt!RtlAvlInsertNodeEx+0x6f
ffffd380`913b8650 fffff804`1bdd9130 : ffffffff`ffffffff ffffd380`913b8790 00000000`00000000 ffffd380`913b89e0 : nt!MiGetWsAndInsertVad+0x133
ffffd380`913b8690 fffff804`1bdd8983 : ffff9e8f`63982ca0 ffffd380`913b89e0 ffffd380`913b89a8 ffffd380`913b89b8 : nt!MiMapViewOfDataSection+0x570
ffffd380`913b8800 fffff804`1bdd7ba8 : 00000000`00000000 ffffd380`913b8b80 00000082`401fce80 00000082`401fce80 : nt!MiMapViewOfSection+0x343
ffffd380`913b8950 fffff804`1b9d2d18 : ffff9e8f`60ab6080 00000082`401fce48 ffffd380`913b8aa8 00000000`00000000 : nt!NtMapViewOfSection+0x158
ffffd380`913b8a90 00007ffc`4dfbc5c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000082`401fce28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`4dfbc5c4
THREAD_SHA1_HASH_MOD_FUNC: e1cb2b3ae934614b88215e7bec1bb0bac8840cba
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: c42516d264ca5ab2d9f4c0d2e816bedb01d7ceea
THREAD_SHA1_HASH_MOD: ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693
FOLLOWUP_IP:
nt!RtlAvlInsertNodeEx+6f
fffff804`1b82c4cf 48391a cmp qword ptr [rdx],rbx
FAULT_INSTR_CODE: 4c1a3948
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!RtlAvlInsertNodeEx+6f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4f6eba0
IMAGE_VERSION: 10.0.18362.592
STACK_COMMAND: .cxr 0xfffff80421c7c930 ; kb
BUCKET_ID_FUNC_OFFSET: 6f
FAILURE_BUCKET_ID: 0x3B_c0000005_STACKPTR_ERROR_nt!RtlAvlInsertNodeEx
BUCKET_ID: 0x3B_c0000005_STACKPTR_ERROR_nt!RtlAvlInsertNodeEx
PRIMARY_PROBLEM_CLASS: 0x3B_c0000005_STACKPTR_ERROR_nt!RtlAvlInsertNodeEx
TARGET_TIME: 2020-01-29T11:41:53.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 340e
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x3b_c0000005_stackptr_error_nt!rtlavlinsertnodeex
FAILURE_ID_HASH: {8c5c821c-718a-e9c3-2d84-f712c08aae9e}
Followup: MachineOwner
---------
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffea8d36da3624, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800cb0fa844, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1822
BIOS_DATE: 10/14/2019
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME A320M-F
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: ffffea8d36da3624
BUGCHECK_P2: 0
BUGCHECK_P3: fffff800cb0fa844
BUGCHECK_P4: 2
READ_ADDRESS: fffff800823733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffea8d36da3624
FAULTING_IP:
bindflt!BfFormatPathFromFileNameInfo+1c
fffff800`cb0fa844 498ba82409408a mov rbp,qword ptr [r8-75BFF6DCh]
MM_INTERNAL_CODE: 2
CPU_COUNT: c
CPU_MHZ: c7a
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: AV
PROCESS_NAME: services.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-02-2020 13:46:33.0021
ANALYSIS_VERSION: 10.0.18362.1 x86fre
TRAP_FRAME: ffffea8dac9a2ab0 -- (.trap 0xffffea8dac9a2ab0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffea8dac9a2c00 rbx=0000000000000000 rcx=ffff8f82e601b350
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800cb0fa844 rsp=ffffea8dac9a2c40 rbp=ffffea8dac9a2d10
r8=ffffea8dac9a2d00 r9=0000000000000000 r10=fffff8008530acc0
r11=ffffea8dac9a2dc8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
bindflt!BfFormatPathFromFileNameInfo+0x1c:
fffff800`cb0fa844 498ba82409408a mov rbp,qword ptr [r8-75BFF6DCh] ds:ffffea8d`36da3624=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80081fe35d6 to fffff80081fc14e0
STACK_TEXT:
ffffea8d`ac9a2808 fffff800`81fe35d6 : 00000000`00000050 ffffea8d`36da3624 00000000`00000000 ffffea8d`ac9a2ab0 : nt!KeBugCheckEx
ffffea8d`ac9a2810 fffff800`81e72eef : 00000000`00000000 00000000`00000000 00000000`00000000 ffffea8d`36da3624 : nt!MiSystemFault+0x1d6866
ffffea8d`ac9a2910 fffff800`81fcf520 : 00000000`00000001 00000000`02000100 00000000`00000000 00000000`00000000 : nt!MmAccessFault+0x34f
ffffea8d`ac9a2ab0 fffff800`cb0fa844 : ffffea8d`ac9a2fb4 ffffea8d`ac9a3058 00000000`00000000 ffffea8d`ac9a2dc0 : nt!KiPageFault+0x360
ffffea8d`ac9a2c40 fffff800`cb0f5b28 : 00000000`00000000 00000000`00000000 ffffd803`1e5cf010 ffffea8d`ac9a2f18 : bindflt!BfFormatPathFromFileNameInfo+0x1c
ffffea8d`ac9a2c90 fffff800`cb0e35c7 : ffffd803`1c76e050 00000000`00000000 00000000`00000000 00000000`00000000 : bindflt!BfMappingLookup+0x90
ffffea8d`ac9a2d50 fffff800`cb0ee754 : ffffd803`1c76e050 00000000`00000000 ffffea8d`ac9a2ed0 00000000`00000000 : bindflt!BfCombinedMappingLookup+0x11b
ffffea8d`ac9a2dd0 fffff800`852e4a5c : ffffd803`1e647010 fffff800`00000000 00000000`00000000 00000000`00000000 : bindflt!BfPreCreate+0x3d4
ffffea8d`ac9a3160 fffff800`852e2f5c : ffffea8d`ac9a3300 ffffd803`1f504300 ffffea8d`ac9a39f2 fffff800`852e6400 : FLTMGR!FltpPerformPreCallbacks+0x2fc
ffffea8d`ac9a3270 fffff800`8531c981 : ffffea8d`ac9a3300 00000000`00000000 00000000`00000000 ffffd803`1551ad90 : FLTMGR!FltpPassThroughFastIo+0x8c
ffffea8d`ac9a32d0 fffff800`824b28ff : 00000000`6d4e6f49 fffff800`8216f06d ffffea8d`00000003 00000000`00000000 : FLTMGR!FltpFastIoQueryOpen+0x131
ffffea8d`ac9a3370 fffff800`823e64aa : fffff800`823e5b45 fffff800`823e5b45 ffffea8d`ac9a35b0 ffffea8d`00000000 : nt!IopQueryInformation+0x8f
ffffea8d`ac9a33d0 fffff800`823ed1bf : ffffd803`154f28f0 ffffd803`154f2845 ffffd803`1f1f4010 00000000`00000001 : nt!IopParseDevice+0x8ea
ffffea8d`ac9a3540 fffff800`823eb621 : ffffd803`1f1f4000 ffffea8d`ac9a3788 00000000`00000040 ffffd803`11cf62a0 : nt!ObpLookupObjectName+0x78f
ffffea8d`ac9a3700 fffff800`824afc06 : ffffea8d`00000001 0000009e`56e7dd20 00000000`00008001 0000009e`56e7e130 : nt!ObOpenObjectByNameEx+0x201
ffffea8d`ac9a3840 fffff800`81fd2d18 : ffffd803`1dded080 00000000`00000001 ffffd803`1dded080 0000009e`56e7e130 : nt!NtQueryAttributesFile+0x1e6
ffffea8d`ac9a3b00 00007ffd`88e5c864 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
0000009e`56e7dcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`88e5c864
CHKIMG_EXTENSION: !chkimg -lo 50 -db !bindflt
79 errors : !bindflt (fffff800cb0fa006-fffff800cb0fafc6)
fffff800cb0fa000 b3 01 66 41 2b ca *4f b7 d7 44 8d 0c 09 49 *9b 4b ..fA+.O..D...I.K
fffff800cb0fa010 08 48 8d 04 51 49 *d9 40 08 8a c3 66 45 89 *68 02 [email protected].
...
fffff800cb0fa0c0 b2 02 48 8d 05 27 *4a fe ff 48 89 44 24 20 *58 8b ..H..'J..H.D$ X.
...
fffff800cb0fa140 ff bb 95 00 00 c0 48 8d 05 03 ef fe ff 48 *79 05 ......H......Hy.
fffff800cb0fa150 fc ee fe ff 74 3c 48 8b 0d eb ee fe ff 48 *dd 05 ....t<H......H..
...
fffff800cb0fa180 6c d9 fe ff 48 8b *59 40 48 89 44 24 20 e8 *66 70 [email protected]$ .fp
fffff800cb0fa190 fe ff 8b c3 48 83 *44 40 5b c3 cc cc cc cc *dc cc ....H.D@[.......
...
fffff800cb0fa240 43 0f b7 c2 66 2b *55 66 83 f9 5c 66 0f 45 *e2 33 C...f+Uf..\f.E.3
fffff800cb0fa250 d2 66 83 f9 5c 44 *4f b7 c0 0f 94 c2 44 3b *d7 0f .f..\DO.....D;..
...
fffff800cb0fa280 03 d5 66 44 03 c0 *51 0f b7 c0 3b c7 7f d7 eb 70 ..fD..Q...;....p
fffff800cb0fa290 48 8d 05 b9 ed fe *cf 48 39 05 b2 ed fe ff 74 60 H......H9.....t`
...
fffff800cb0fa310 60 48 83 c4 40 5f *d3 cc cc cc cc cc cc cc cc cc `H..@_..........
...
fffff800cb0fa3c0 89 5b 08 49 89 73 *70 57 48 83 ec 60 44 0f *d7 02 .[.I.spWH..`D...
fffff800cb0fa3d0 48 8d 71 08 33 c0 *58 8b d9 49 89 43 e8 48 *ca fa H.q.3.X..I.C.H..
...
fffff800cb0fa440 0c ec fe ff 48 39 *25 05 ec fe ff 0f 84 3c 01 00 ....H9%......<..
fffff800cb0fa450 00 89 5c 24 38 41 *99 21 00 00 00 c7 44 24 30 e0 ..\$8A.!....D$0.
...
fffff800cb0fa480 78 50 48 8b d7 48 *9d 4c 24 50 4c 8b 15 cf 0f ff xPH..H.L$PL.....
fffff800cb0fa490 ff e8 8a 6f 00 00 *2b d8 85 c0 78 36 48 8b *0f 08 ...o..+...x6H...
...
fffff800cb0fa500 bc d5 fe ff c7 44 24 30 ed 06 00 00 48 8b *59 40 .....D$0....H.Y@
fffff800cb0fa510 48 89 44 24 28 45 8d 41 e6 48 8d 05 d0 d5 *ee ff H.D$(E.A.H......
...
fffff800cb0fa5c0 c0 83 65 20 00 48 8b fa 48 8d 55 28 48 89 *55 f0 ..e .H..H.U(H.U.
fffff800cb0fa5d0 48 89 45 f8 48 89 *35 e0 48 89 45 e8 4c 8b 05 0d H.E.H.5.H.E.L...
...
fffff800cb0fa610 32 07 00 00 e9 a4 *11 00 00 48 8b 4d 28 4c *0c 45 2........H.M(L.E
...
fffff800cb0fa6c0 00 00 c7 44 24 30 *49 07 00 00 e9 ee 00 00 00 48 ...D$0I........H
...
fffff800cb0fa740 00 00 48 89 44 24 28 48 8d 05 a2 d3 fe ff *08 89 ..H.D$(H........
fffff800cb0fa750 44 24 20 e8 8c 95 *ae ff 48 8d 4d e0 e8 1b *3c ff D$ .....H.M...<.
...
fffff800cb0fa780 db 48 89 47 08 0f b7 45 e0 66 89 07 0f b7 *85 e2 .H.G...E.f......
fffff800cb0fa790 66 89 47 02 eb 57 *9b 95 00 00 c0 48 8d 0d *be e8 f.G..W.....H....
...
fffff800cb0fa840 40 8a 41 02 49 8b *a8 24 09 40 8a f2 48 8b *99 3c @[email protected]..<
fffff800cb0fa850 09 0f 84 9b 00 00 *30 4c 8b 15 aa 08 ff ff 88 bd ......0L........
...
fffff800cb0fa880 b9 28 00 00 00 c7 *64 24 30 be 07 00 00 48 *9a 0d .(....d$0....H..
fffff800cb0fa890 b4 e7 fe ff 48 8d *14 25 d2 fe ff 48 89 44 24 28 ....H..%...H.D$(
...
fffff800cb0fa900 0f 82 30 01 00 00 *13 c0 40 84 f6 74 23 0f *37 43 [email protected]#.7C
fffff800cb0fa910 28 0f b7 d1 66 03 *e1 66 3b c1 72 05 0f b7 c8 eb (...f..f;.r.....
...
fffff800cb0fa9d0 7c e6 fe ff 48 39 0d 75 e6 fe ff 0f 84 a3 *30 00 |...H9.u......0.
...
fffff800cb0faa00 8b 15 5a 0a ff ff f8 15 6a 00 00 85 c0 79 *3d 48 ..Z.....j....y=H
fffff800cb0faa10 8d 0d 3a e6 fe ff *88 39 0d 33 e6 fe ff 74 *25 89 ..:....9.3...t%.
...
fffff800cb0faac0 00 4c 8d 40 18 48 *93 60 20 00 48 8b fa 48 *ab d1 [email protected].` .H..H..
fffff800cb0faad0 48 8b 0d 29 e6 fe *ef 4c 8b 15 7a 05 ff ff d8 3d H..)...L..z....=
...
fffff800cb0fab40 52 48 8b 54 24 60 *6c 8d 4c 24 68 48 8b 0d *8e e5 RH.T$`l.L$hH....
...
fffff800cb0fab80 00 c7 44 24 30 39 08 00 00 eb 84 48 8b 44 *34 68 ..D$09.....H.D4h
...
fffff800cb0fac00 00 48 8b fa 81 78 *58 00 00 22 00 74 07 bb *50 00 .H...xX..".t..P.
fffff800cb0fac10 00 c0 eb 18 83 78 *50 10 74 07 bb 06 02 00 c0 eb .....xP.t.......
...
fffff800cb0facc0 84 06 ff ff e8 57 67 00 00 84 db 75 7d 48 *cd 0d .....Wg....u}H..
...
fffff800cb0fad40 e8 67 9c fe ff e8 86 06 00 00 33 c0 48 83 *e4 20 .g........3.H..
fffff800cb0fad50 5b c3 cc cc cc cc *dc cc cc cc cc cc cc cc cc cc [...............
...
fffff800cb0fad80 48 89 5c 24 08 57 *68 83 ec 40 45 33 c9 45 *13 c0 H.\[email protected]..
fffff800cb0fad90 48 8b d9 e8 70 b2 *de ff 8b f8 85 c0 79 5f *68 8d H...p.......y_h.
...
fffff800cb0fae40 c9 45 33 c0 e8 bf *f1 fe ff 8b f0 85 c0 79 *da 48 .E3..........y.H
fffff800cb0fae50 8d 05 fa e1 fe ff *db 04 00 00 00 48 39 05 ee e1 ...........H9...
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: STRIDE
STACK_COMMAND: .thread ; .cxr ; kb
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_STRIDE
BUCKET_ID: MEMORY_CORRUPTION_STRIDE
PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_STRIDE
TARGET_TIME: 2020-01-29T13:53:12.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 7bb7
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:memory_corruption_stride
FAILURE_ID_HASH: {574dbc1b-92cb-fb09-cb7a-cacc1bb2c511}
Followup: memory_corruption
---------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80034a45419, Address of the instruction which caused the bugcheck
Arg3: ffffeb038c99b950, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1822
BIOS_DATE: 10/14/2019
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: PRIME A320M-F
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: c0000005
BUGCHECK_P2: fffff80034a45419
BUGCHECK_P3: ffffeb038c99b950
BUGCHECK_P4: 0
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - <Unable to get error code text>
FAULTING_IP:
nt!RtlRbInsertNodeEx+b9
fffff800`34a45419 f6411001 test byte ptr [rcx+10h],1
CONTEXT: ffffeb038c99b950 -- (.cxr 0xffffeb038c99b950)
rax=0000000000000001 rbx=0000000000000000 rcx=0010000000000000
rdx=ffffdb05df151ed8 rsi=00000000000000c8 rdi=0000000000000001
rip=fffff80034a45419 rsp=ffffeb038c99c340 rbp=0000000000000000
r8=ffffdb05e7092ed8 r9=ffffdb05e1feded8 r10=ffffdb05bec00290
r11=0000000000000001 r12=ffffdb05bec00290 r13=ffffdb05e1fea000
r14=0000000000000000 r15=ffffdb05bec00280
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00050206
nt!RtlRbInsertNodeEx+0xb9:
fffff800`34a45419 f6411001 test byte ptr [rcx+10h],1 ds:002b:00100000`00000010=??
Resetting default scope
BUGCHECK_STR: 0x3B_c0000005
CPU_COUNT: c
CPU_MHZ: c7a
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: MsMpEng.exe
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 02-02-2020 13:46:36.0486
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff80034a43466 to fffff80034a45419
STACK_TEXT:
ffffeb03`8c99c340 fffff800`34a43466 : 00000000`00000000 ffffeb03`8c99c3c9 ffffdb05`e1feded0 ffffdb05`df151ed8 : nt!RtlRbInsertNodeEx+0xb9
ffffeb03`8c99c350 fffff800`34a42d79 : 00000011`00000011 ffffdb05`e1fedc90 00000000`00000000 00000000`00000000 : nt!RtlpHpVsChunkSplit+0x5f6
ffffeb03`8c99c420 fffff800`34a3330e : 00000000`00000025 00000000`00000230 00000000`00000230 ffffdb05`bec00000 : nt!RtlpHpVsContextAllocateInternal+0x3c9
ffffeb03`8c99c490 fffff800`34d6f06d : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`0000021a : nt!ExAllocateHeapPool+0xc0e
ffffeb03`8c99c5d0 fffff800`35046b70 : 00000000`00000000 ffffeb03`8c99cb80 00000000`0000021a ffffffff`00000000 : nt!ExAllocatePoolWithTag+0x5d
ffffeb03`8c99c620 fffff800`35046ad6 : ffff970d`a1eb9670 00000000`a1eb9600 00000000`00000000 00000155`5f933240 : nt!IopQueryNameInternal+0x8c
ffffeb03`8c99c6d0 fffff800`3504757e : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopQueryName+0x26
ffffeb03`8c99c720 fffff800`35059e51 : ffff970d`a1eb9670 00000155`5f933240 ffffeb03`0000021a ffffeb03`8c99c8e8 : nt!ObQueryNameStringMode+0xce
ffffeb03`8c99c8a0 fffff800`35059225 : ffff3e71`c71aa65f fffff279`3c8fffc8 00007ffe`738c0000 00000000`00000001 : nt!MmQueryVirtualMemory+0xc21
ffffeb03`8c99ca40 fffff800`34bd2d18 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtQueryVirtualMemory+0x25
ffffeb03`8c99ca90 00007ffe`7395c524 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
0000000c`400fc688 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`7395c524
THREAD_SHA1_HASH_MOD_FUNC: adbe423f28b9fbb83ee31295a5e2f07de898119b
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: dbe6aa3d5c89ef9f7f9973c31a8a43e00d508f0b
THREAD_SHA1_HASH_MOD: b28610981796779b4ac02f58898fde25728a775c
FOLLOWUP_IP:
nt!RtlRbInsertNodeEx+b9
fffff800`34a45419 f6411001 test byte ptr [rcx+10h],1
FAULT_INSTR_CODE: 11041f6
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!RtlRbInsertNodeEx+b9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 29371fe3
IMAGE_VERSION: 10.0.18362.628
STACK_COMMAND: .cxr 0xffffeb038c99b950 ; kb
BUCKET_ID_FUNC_OFFSET: b9
FAILURE_BUCKET_ID: 0x3B_c0000005_nt!RtlRbInsertNodeEx
BUCKET_ID: 0x3B_c0000005_nt!RtlRbInsertNodeEx
PRIMARY_PROBLEM_CLASS: 0x3B_c0000005_nt!RtlRbInsertNodeEx
TARGET_TIME: 2020-01-31T12:32:43.000Z
OSBUILD: 18362
OSSERVICEPACK: 628
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1991-11-30 08:21:39
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 5c7d
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x3b_c0000005_nt!rtlrbinsertnodeex
FAILURE_ID_HASH: {86fd3e06-70cd-4676-ada1-e7ee1bab440e}
Followup: MachineOwner
---------
