*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 139, {3, ffffd000227586d0, ffffd00022758628, 0}
Probably caused by : win32k.sys ( win32k!EnterCritAvoidingDitHitTestHazard+13 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd000227586d0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd00022758628, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
TRAP_FRAME: ffffd000227586d0 -- (.trap 0xffffd000227586d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff80263764928 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffd00116f00180 rsi=0000000000000000 rdi=0000000000000000
rip=fffff802635f0a4f rsp=ffffd00022758860 rbp=fffff80263764928
r8=0000000000000000 r9=000000000000003d r10=fffff8026347b000
r11=ffffd00022758910 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt! ?? ::FNODOBFM::`string'+0x1159f:
fffff802`635f0a4f cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffd00022758628 -- (.exr 0xffffd00022758628)
ExceptionAddress: fffff802635f0a4f (nt! ?? ::FNODOBFM::`string'+0x000000000001159f)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
BUGCHECK_STR: 0x139
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 2
ERROR_CODE: (NTSTATUS) 0xc0000409 - Er is een bufferoverschrijdingsfout opgetreden voor stack-buffer in deze toepassing. Via deze overschrijdingsfout kan een kwaadwillige gebruiker de controle over deze toepassing verkrijgen.
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Er is een bufferoverschrijdingsfout opgetreden voor stack-buffer in deze toepassing. Via deze overschrijdingsfout kan een kwaadwillige gebruiker de controle over deze toepassing verkrijgen.
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER: from fffff802635daae9 to fffff802635cefa0
STACK_TEXT:
ffffd000`227583a8 fffff802`635daae9 : 00000000`00000139 00000000`00000003 ffffd000`227586d0 ffffd000`22758628 : nt!KeBugCheckEx
ffffd000`227583b0 fffff802`635dae10 : 00000000`00000000 fffff802`635d081c 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd000`227584f0 fffff802`635da034 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffd000`227586d0 fffff802`635f0a4f : ffffe001`32c951c0 fffff802`635134fd 00000000`00000000 00000000`00000001 : nt!KiRaiseSecurityCheckFailure+0xf4
ffffd000`22758860 fffff802`634d1815 : ffffe001`34c71080 fffff802`634d3e00 00000000`00000002 fffff802`635156f7 : nt! ?? ::FNODOBFM::`string'+0x1159f
ffffd000`227588c0 fffff802`634d3aa3 : 00000000`00000001 ffffd001`16f00180 00000000`0000003d ffffe001`3328a3b0 : nt!KiCommitThreadWait+0x1c5
ffffd000`22758940 fffff802`635134fd : ffffe001`32c951c0 ffffe001`3328a3b0 00000000`04bff700 ffffd000`00000002 : nt!ExpWaitForResource+0x273
ffffd000`22758a00 fffff960`00187a73 : ffffe001`34c71002 00000000`00000075 ffffd000`22758b80 00000000`04bff718 : nt!ExEnterPriorityRegionAndAcquireResourceExclusive+0x1ad
ffffd000`22758a90 fffff960`0013266d : 00000000`00000001 00000000`00000003 00000000`00000004 00000000`00000000 : win32k!EnterCritAvoidingDitHitTestHazard+0x13
ffffd000`22758ad0 fffff802`635da7b3 : ffffe001`34c71080 00000000`02b8ac60 00000000`00000001 ffffe001`34dcf7e0 : win32k!NtUserCallTwoParam+0x1d
ffffd000`22758b00 00007ffd`ae6995aa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`04bff6c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`ae6995aa
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k!EnterCritAvoidingDitHitTestHazard+13
fffff960`00187a73 488bd8 mov rbx,rax
SYMBOL_STACK_INDEX: 8
SYMBOL_NAME: win32k!EnterCritAvoidingDitHitTestHazard+13
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 5308949c
IMAGE_VERSION: 6.3.9600.17031
BUCKET_ID_FUNC_OFFSET: 13
FAILURE_BUCKET_ID: 0x139_3_win32k!EnterCritAvoidingDitHitTestHazard
BUCKET_ID: 0x139_3_win32k!EnterCritAvoidingDitHitTestHazard
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_win32k!entercritavoidingdithittesthazard
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {1a, 2, 8, 1a}
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+23a )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000001a, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 000000000000001a, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80332dde138
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
000000000000001a
CURRENT_IRQL: 2
FAULTING_IP:
+1fa1d9d150
00000000`0000001a ?? ???
PROCESS_NAME: System
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
TRAP_FRAME: ffffd0013f0845b0 -- (.trap 0xffffd0013f0845b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=000000000000001a rsp=ffffd0013f084741 rbp=ffffd0013f07fab0
r8=00000000000000c0 r9=ffffe0013428fab0 r10=fffff80332d72f80
r11=000000061cacdc96 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
00000000`0000001a ?? ???
Resetting default scope
UNALIGNED_STACK_POINTER: ffffd0013f084741
LAST_CONTROL_TRANSFER: from fffff80332be9ae9 to fffff80332bddfa0
FAILED_INSTRUCTION_ADDRESS:
+1fa1d9d150
00000000`0000001a ?? ???
STACK_TEXT:
ffffd001`3f084468 fffff803`32be9ae9 : 00000000`0000000a 00000000`0000001a 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
ffffd001`3f084470 fffff803`32be833a : 00000000`00000008 fffff803`32d736e8 00000000`00000000 ffffd001`3f0845b0 : nt!KiBugCheckDispatch+0x69
ffffd001`3f0845b0 00000000`0000001a : 48000000`00000000 48ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 : nt!KiPageFault+0x23a
ffffd001`3f084741 48000000`00000000 : 48ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 68000000`00000000 : 0x1a
ffffd001`3f084749 48ffffd0`013f0847 : 00ffffd0`013f0847 00ffffff`ff000000 68000000`00000000 68ffffd0`013f0847 : 0x48000000`00000000
ffffd001`3f084751 00ffffd0`013f0847 : 00ffffff`ff000000 68000000`00000000 68ffffd0`013f0847 00ffffd0`013f0847 : 0x48ffffd0`013f0847
ffffd001`3f084759 00ffffff`ff000000 : 68000000`00000000 68ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 : 0x00ffffd0`013f0847
ffffd001`3f084761 68000000`00000000 : 68ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 88000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084769 68ffffd0`013f0847 : 00ffffd0`013f0847 00ffffff`ff000000 88000000`00000000 88ffffd0`013f0847 : 0x68000000`00000000
ffffd001`3f084771 00ffffd0`013f0847 : 00ffffff`ff000000 88000000`00000000 88ffffd0`013f0847 00ffffd0`013f0847 : 0x68ffffd0`013f0847
ffffd001`3f084779 00ffffff`ff000000 : 88000000`00000000 88ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 : 0x00ffffd0`013f0847
ffffd001`3f084781 88000000`00000000 : 88ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 a8000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084789 88ffffd0`013f0847 : 00ffffd0`013f0847 00ffffff`ff000000 a8000000`00000000 a8ffffd0`013f0847 : 0x88000000`00000000
ffffd001`3f084791 00ffffd0`013f0847 : 00ffffff`ff000000 a8000000`00000000 a8ffffd0`013f0847 00ffffd0`013f0847 : 0x88ffffd0`013f0847
ffffd001`3f084799 00ffffff`ff000000 : a8000000`00000000 a8ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 : 0x00ffffd0`013f0847
ffffd001`3f0847a1 a8000000`00000000 : a8ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 c8000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f0847a9 a8ffffd0`013f0847 : 00ffffd0`013f0847 00ffffff`ff000000 c8000000`00000000 c8ffffd0`013f0847 : 0xa8000000`00000000
ffffd001`3f0847b1 00ffffd0`013f0847 : 00ffffff`ff000000 c8000000`00000000 c8ffffd0`013f0847 00ffffd0`013f0847 : 0xa8ffffd0`013f0847
ffffd001`3f0847b9 00ffffff`ff000000 : c8000000`00000000 c8ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 : 0x00ffffd0`013f0847
ffffd001`3f0847c1 c8000000`00000000 : c8ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 e8000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f0847c9 c8ffffd0`013f0847 : 00ffffd0`013f0847 00ffffff`ff000000 e8000000`00000000 e8ffffd0`013f0847 : 0xc8000000`00000000
ffffd001`3f0847d1 00ffffd0`013f0847 : 00ffffff`ff000000 e8000000`00000000 e8ffffd0`013f0847 00ffffd0`013f0847 : 0xc8ffffd0`013f0847
ffffd001`3f0847d9 00ffffff`ff000000 : e8000000`00000000 e8ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 : 0x00ffffd0`013f0847
ffffd001`3f0847e1 e8000000`00000000 : e8ffffd0`013f0847 00ffffd0`013f0847 00ffffff`ff000000 08000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f0847e9 e8ffffd0`013f0847 : 00ffffd0`013f0847 00ffffff`ff000000 08000000`00000000 08ffffd0`013f0848 : 0xe8000000`00000000
ffffd001`3f0847f1 00ffffd0`013f0847 : 00ffffff`ff000000 08000000`00000000 08ffffd0`013f0848 00ffffd0`013f0848 : 0xe8ffffd0`013f0847
ffffd001`3f0847f9 00ffffff`ff000000 : 08000000`00000000 08ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0847
ffffd001`3f084801 08000000`00000000 : 08ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 28000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084809 08ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 28000000`00000000 28ffffd0`013f0848 : 0x08000000`00000000
ffffd001`3f084811 00ffffd0`013f0848 : 00ffffff`ff000000 28000000`00000000 28ffffd0`013f0848 00ffffd0`013f0848 : 0x08ffffd0`013f0848
ffffd001`3f084819 00ffffff`ff000000 : 28000000`00000000 28ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f084821 28000000`00000000 : 28ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 48000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084829 28ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 48000000`00000000 48ffffd0`013f0848 : 0x28000000`00000000
ffffd001`3f084831 00ffffd0`013f0848 : 00ffffff`ff000000 48000000`00000000 48ffffd0`013f0848 00ffffd0`013f0848 : 0x28ffffd0`013f0848
ffffd001`3f084839 00ffffff`ff000000 : 48000000`00000000 48ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f084841 48000000`00000000 : 48ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 68000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084849 48ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 68000000`00000000 68ffffd0`013f0848 : 0x48000000`00000000
ffffd001`3f084851 00ffffd0`013f0848 : 00ffffff`ff000000 68000000`00000000 68ffffd0`013f0848 00ffffd0`013f0848 : 0x48ffffd0`013f0848
ffffd001`3f084859 00ffffff`ff000000 : 68000000`00000000 68ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f084861 68000000`00000000 : 68ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 88000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084869 68ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 88000000`00000000 88ffffd0`013f0848 : 0x68000000`00000000
ffffd001`3f084871 00ffffd0`013f0848 : 00ffffff`ff000000 88000000`00000000 88ffffd0`013f0848 00ffffd0`013f0848 : 0x68ffffd0`013f0848
ffffd001`3f084879 00ffffff`ff000000 : 88000000`00000000 88ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f084881 88000000`00000000 : 88ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 a8000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084889 88ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 a8000000`00000000 a8ffffd0`013f0848 : 0x88000000`00000000
ffffd001`3f084891 00ffffd0`013f0848 : 00ffffff`ff000000 a8000000`00000000 a8ffffd0`013f0848 00ffffd0`013f0848 : 0x88ffffd0`013f0848
ffffd001`3f084899 00ffffff`ff000000 : a8000000`00000000 a8ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f0848a1 a8000000`00000000 : a8ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 c8000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f0848a9 a8ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 c8000000`00000000 c8ffffd0`013f0848 : 0xa8000000`00000000
ffffd001`3f0848b1 00ffffd0`013f0848 : 00ffffff`ff000000 c8000000`00000000 c8ffffd0`013f0848 00ffffd0`013f0848 : 0xa8ffffd0`013f0848
ffffd001`3f0848b9 00ffffff`ff000000 : c8000000`00000000 c8ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f0848c1 c8000000`00000000 : c8ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 e8000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f0848c9 c8ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 e8000000`00000000 e8ffffd0`013f0848 : 0xc8000000`00000000
ffffd001`3f0848d1 00ffffd0`013f0848 : 00ffffff`ff000000 e8000000`00000000 e8ffffd0`013f0848 00ffffd0`013f0848 : 0xc8ffffd0`013f0848
ffffd001`3f0848d9 00ffffff`ff000000 : e8000000`00000000 e8ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f0848e1 e8000000`00000000 : e8ffffd0`013f0848 00ffffd0`013f0848 00ffffff`ff000000 08000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f0848e9 e8ffffd0`013f0848 : 00ffffd0`013f0848 00ffffff`ff000000 08000000`00000000 08ffffd0`013f0849 : 0xe8000000`00000000
ffffd001`3f0848f1 00ffffd0`013f0848 : 00ffffff`ff000000 08000000`00000000 08ffffd0`013f0849 00ffffd0`013f0849 : 0xe8ffffd0`013f0848
ffffd001`3f0848f9 00ffffff`ff000000 : 08000000`00000000 08ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 : 0x00ffffd0`013f0848
ffffd001`3f084901 08000000`00000000 : 08ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 28000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084909 08ffffd0`013f0849 : 00ffffd0`013f0849 00ffffff`ff000000 28000000`00000000 28ffffd0`013f0849 : 0x08000000`00000000
ffffd001`3f084911 00ffffd0`013f0849 : 00ffffff`ff000000 28000000`00000000 28ffffd0`013f0849 00ffffd0`013f0849 : 0x08ffffd0`013f0849
ffffd001`3f084919 00ffffff`ff000000 : 28000000`00000000 28ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 : 0x00ffffd0`013f0849
ffffd001`3f084921 28000000`00000000 : 28ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 48000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084929 28ffffd0`013f0849 : 00ffffd0`013f0849 00ffffff`ff000000 48000000`00000000 48ffffd0`013f0849 : 0x28000000`00000000
ffffd001`3f084931 00ffffd0`013f0849 : 00ffffff`ff000000 48000000`00000000 48ffffd0`013f0849 00ffffd0`013f0849 : 0x28ffffd0`013f0849
ffffd001`3f084939 00ffffff`ff000000 : 48000000`00000000 48ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 : 0x00ffffd0`013f0849
ffffd001`3f084941 48000000`00000000 : 48ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 68000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084949 48ffffd0`013f0849 : 00ffffd0`013f0849 00ffffff`ff000000 68000000`00000000 68ffffd0`013f0849 : 0x48000000`00000000
ffffd001`3f084951 00ffffd0`013f0849 : 00ffffff`ff000000 68000000`00000000 68ffffd0`013f0849 00ffffd0`013f0849 : 0x48ffffd0`013f0849
ffffd001`3f084959 00ffffff`ff000000 : 68000000`00000000 68ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 : 0x00ffffd0`013f0849
ffffd001`3f084961 68000000`00000000 : 68ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 88000000`00000000 : 0x00ffffff`ff000000
ffffd001`3f084969 68ffffd0`013f0849 : 00ffffd0`013f0849 00ffffff`ff000000 88000000`00000000 88ffffd0`013f0849 : 0x68000000`00000000
ffffd001`3f084971 00ffffd0`013f0849 : 00ffffff`ff000000 88000000`00000000 88ffffd0`013f0849 00ffffd0`013f0849 : 0x68ffffd0`013f0849
ffffd001`3f084979 00ffffff`ff000000 : 88000000`00000000 88ffffd0`013f0849 00ffffd0`013f0849 00ffffff`ff000000 : 0x00ffffd0`013f0849
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiPageFault+23a
fffff803`32be833a 440f20c0 mov rax,cr8
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiPageFault+23a
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 5318053f
IMAGE_VERSION: 6.3.9600.17041
BUCKET_ID_FUNC_OFFSET: 23a
FAILURE_BUCKET_ID: AV_CODE_AV_NULL_IP_nt!KiPageFault
BUCKET_ID: AV_CODE_AV_NULL_IP_nt!KiPageFault
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_code_av_null_ip_nt!kipagefault
FAILURE_ID_HASH: {4ce35ff9-c5cf-d66d-0323-0f05e33f6692}
Followup: MachineOwnerFAILURE_ID_HASH: {f9c803d6-838b-8937-2275-f06f60e09026}
Followup: MachineOwner