Citar
ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: fffff8000284e000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7951a
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - La instrucci n en 0x%08lx hace referencia a la memoria en 0x%08lx. La memoria no se pudo %s.
FAULTING_IP:
nt+376bc1
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h]
CONTEXT: fffff880091a5ab0 -- (.cxr 0xfffff880091a5ab0;r)
rax=0000000000000001 rbx=fffff8a001b0f6f0 rcx=fffff8000284e000
rdx=00000000bad0b0b0 rsi=0000000000000024 rdi=fffffa800ac6fb00
rip=fffff80002bc4bc1 rsp=fffff880091a6490 rbp=fffff880091a6ca0
r8=fffff8a001b0f6f0 r9=fffff8a0018e7000 r10=fffffa800aa70b60
r11=fffffffffffffd80 r12=fffff880091a6ab8 r13=fffff8a0016b1670
r14=0000000000000023 r15=000000000000003b
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt+0x376bc1:
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h] ds:002b:00000000`bad0b0d0=????????????????
Last set context:
rax=0000000000000001 rbx=fffff8a001b0f6f0 rcx=fffff8000284e000
rdx=00000000bad0b0b0 rsi=0000000000000024 rdi=fffffa800ac6fb00
rip=fffff80002bc4bc1 rsp=fffff880091a6490 rbp=fffff880091a6ca0
r8=fffff8a001b0f6f0 r9=fffff8a0018e7000 r10=fffffa800aa70b60
r11=fffffffffffffd80 r12=fffff880091a6ab8 r13=fffff8a0016b1670
r14=0000000000000023 r15=000000000000003b
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt+0x376bc1:
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h] ds:002b:00000000`bad0b0d0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002bc4bc1
STACK_TEXT:
fffff880`091a6490 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt+0x376bc1
FOLLOWUP_IP:
nt+376bc1
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt+376bc1
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntoskrnl.exe
STACK_COMMAND: .cxr 0xfffff880091a5ab0 ; kb
BUCKET_ID: WRONG_SYMBOLS
FAILURE_BUCKET_ID: WRONG_SYMBOLS
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:wrong_symbols
FAILURE_ID_HASH: {70b057e8-2462-896f-28e7-ac72d4d365f8}
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: fffff8000284e000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce7951a
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - La instrucci n en 0x%08lx hace referencia a la memoria en 0x%08lx. La memoria no se pudo %s.
FAULTING_IP:
nt+376bc1
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h]
CONTEXT: fffff880091a5ab0 -- (.cxr 0xfffff880091a5ab0;r)
rax=0000000000000001 rbx=fffff8a001b0f6f0 rcx=fffff8000284e000
rdx=00000000bad0b0b0 rsi=0000000000000024 rdi=fffffa800ac6fb00
rip=fffff80002bc4bc1 rsp=fffff880091a6490 rbp=fffff880091a6ca0
r8=fffff8a001b0f6f0 r9=fffff8a0018e7000 r10=fffffa800aa70b60
r11=fffffffffffffd80 r12=fffff880091a6ab8 r13=fffff8a0016b1670
r14=0000000000000023 r15=000000000000003b
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt+0x376bc1:
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h] ds:002b:00000000`bad0b0d0=????????????????
Last set context:
rax=0000000000000001 rbx=fffff8a001b0f6f0 rcx=fffff8000284e000
rdx=00000000bad0b0b0 rsi=0000000000000024 rdi=fffffa800ac6fb00
rip=fffff80002bc4bc1 rsp=fffff880091a6490 rbp=fffff880091a6ca0
r8=fffff8a001b0f6f0 r9=fffff8a0018e7000 r10=fffffa800aa70b60
r11=fffffffffffffd80 r12=fffff880091a6ab8 r13=fffff8a0016b1670
r14=0000000000000023 r15=000000000000003b
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
nt+0x376bc1:
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h] ds:002b:00000000`bad0b0d0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002bc4bc1
STACK_TEXT:
fffff880`091a6490 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt+0x376bc1
FOLLOWUP_IP:
nt+376bc1
fffff800`02bc4bc1 488b4a20 mov rcx,qword ptr [rdx+20h]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt+376bc1
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntoskrnl.exe
STACK_COMMAND: .cxr 0xfffff880091a5ab0 ; kb
BUCKET_ID: WRONG_SYMBOLS
FAILURE_BUCKET_ID: WRONG_SYMBOLS
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:wrong_symbols
FAILURE_ID_HASH: {70b057e8-2462-896f-28e7-ac72d4d365f8}