M
mdwood
Guest
Don't see any answers to this exact problem anywhere, if someone has any other ideas it would be appreciated. It's not a fatal error, but it does require a reboot to reload all my apps back to normal. Thanks.
My latest CrashDump log.
Microsoft (R) Windows Debugger Version 10.0.18362.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\CrashTemp\explorer.exe.6588.dmp]
User Mini Dump File with Full Memory: Only application data is available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 18363 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Debug session time: Sun Mar 15 15:07:24.000 2020 (UTC - 5:00)
System Uptime: 0 days 17:38:03.416
Process Uptime: 0 days 17:37:45.000
................................................................
................................................................
................................................................
................................................................
...................
Loading unloaded module list
................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(19bc.21f8): Unknown exception - code c0000374 (first/second chance not available)
For analysis of this file, run !analyze -v
ntdll!NtWaitForMultipleObjects+0x14:
00007ffa`5c1fcc14 c3 ret
0:013> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
KEY_VALUES_STRING: 1
Key : Timeline.OS.Boot.DeltaSec
Value: 63483
Key : Timeline.Process.Start.DeltaSec
Value: 63465
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
Timeline: !analyze.Start
Name: <blank>
Time: 2020-03-15T20:08:21.115Z
Diff: 57115 mSec
Timeline: Dump.Current
Name: <blank>
Time: 2020-03-15T20:07:24.0Z
Diff: 0 mSec
Timeline: Process.Start
Name: <blank>
Time: 2020-03-15T02:29:39.0Z
Diff: 63465000 mSec
Timeline: OS.Boot
Name: <blank>
Time: 2020-03-15T02:29:21.0Z
Diff: 63483000 mSec
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.ecxr)
rax=0000000000000010 rbx=00000000c0000374 rcx=0000000014b9e7d0
rdx=00007ffa013b4eb8 rsi=0000000000000001 rdi=00007ffa5c2c27f0
rip=00007ffa5c2592a9 rsp=000000000667dfb0 rbp=0000000000910000
r8=0000000000000000 r9=000000000667da00 r10=00007ffa59706e77
r11=0000000000800009 r12=0000000000000001 r13=0000000000000000
r14=000000001486fa80 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
ntdll!RtlReportFatalFailure+0x9:
00007ffa`5c2592a9 eb00 jmp ntdll!RtlReportFatalFailure+0xb (00007ffa`5c2592ab)
Resetting default scope
FAULTING_IP:
ntdll!RtlReportFatalFailure+9
00007ffa`5c2592a9 eb00 jmp ntdll!RtlReportFatalFailure+0xb (00007ffa`5c2592ab)
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffa5c2592a9 (ntdll!RtlReportFatalFailure+0x0000000000000009)
ExceptionCode: c0000374
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 00007ffa5c2c27f0
BUGCHECK_STR: HEAP_CORRUPTION
DEFAULT_BUCKET_ID: HEAP_CORRUPTION
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_CODE_STR: c0000374
EXCEPTION_PARAMETER1: 00007ffa5c2c27f0
WATSON_BKT_PROCSTAMP: 587c1978
WATSON_BKT_PROCVER: 10.0.18362.693
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
WATSON_BKT_MODULE: ntdll.dll
WATSON_BKT_MODSTAMP: 64d10ee0
WATSON_BKT_MODOFFSET: f92a9
WATSON_BKT_MODVER: 10.0.18362.719
MODULE_VER_PRODUCT: Microsoft® Windows® Operating System
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
MODLIST_WITH_TSCHKSUM_HASH: 6b88c0844ce03e2488f92dcb3f9c7a626407d0d0
MODLIST_SHA1_HASH: 96e9c7d505a35bab0311de294dbe96c954facbe9
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 1
SUITE_MASK: 272
DUMP_FLAGS: 8000c07
DUMP_TYPE: 3
ANALYSIS_SESSION_HOST: WOODYNEW
ANALYSIS_SESSION_TIME: 03-15-2020 15:08:21.0115
ANALYSIS_VERSION: 10.0.18362.1 x86fre
THREAD_ATTRIBUTES:
ADDITIONAL_DEBUG_TEXT: Enable Pageheap/AutoVerifer ; Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]
FAULTING_THREAD: 000021f8
THREAD_SHA1_HASH_MOD_FUNC: d52d126065eecb3edc48f67a35ff31dd4743efac
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b93f0c1e23550cbd55eb89bfacd23924dda5e471
OS_LOCALE: ENU
PRIMARY_PROBLEM_CLASS: HEAP_CORRUPTION
PROBLEM_CLASSES:
ID: [0n262]
Type: [HEAP_CORRUPTION]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [0x19bc]
TID: [0x21f8]
Frame: [5] : ntdll!RtlpFreeHeap
ID: [0n262]
Type: [HEAP_CORRUPTION]
Class: Primary
Scope: BUCKET_ID
Name: Add
Data: Omit
PID: [0x19bc]
TID: [0x21f8]
Frame: [5] : ntdll!RtlpFreeHeap
ID: [0n262]
Type: [HEAP_CORRUPTION]
Class: Primary
Scope: BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [0x21f8]
Frame: [0] : ntdll!RtlReportFatalFailure
LAST_CONTROL_TRANSFER: from 00007ffa5c259273 to 00007ffa5c2592a9
STACK_TEXT:
00000000`00000000 00000000`00000000 heap_corruption!explorer.exe+0x0
STACK_COMMAND: ** Pseudo Context ** ManagedPseudo ** Value: 1a2314d8 ** ; kb
THREAD_SHA1_HASH_MOD: ca4e26064d24ef7512d2e94de5a93c38dbe82fe9
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: heap_corruption!explorer.exe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: heap_corruption
IMAGE_NAME: heap_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID: HEAP_CORRUPTION_heap_corruption!explorer.exe
FAILURE_EXCEPTION_CODE: c0000374
FAILURE_IMAGE_NAME: heap_corruption
BUCKET_ID_IMAGE_STR: heap_corruption
FAILURE_MODULE_NAME: heap_corruption
BUCKET_ID_MODULE_STR: heap_corruption
FAILURE_FUNCTION_NAME: explorer.exe
BUCKET_ID_FUNCTION_STR: explorer.exe
BUCKET_ID_OFFSET: 0
BUCKET_ID_MODTIMEDATESTAMP: 0
BUCKET_ID_MODCHECKSUM: 0
BUCKET_ID_MODVER_STR: 0.0.0.0
BUCKET_ID_PREFIX_STR:
FAILURE_PROBLEM_CLASS: HEAP_CORRUPTION
FAILURE_SYMBOL_NAME: heap_corruption!explorer.exe
FAILURE_BUCKET_ID: HEAP_CORRUPTION_c0000374_heap_corruption!explorer.exe
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...719/64d10ee0/c0000374/000f92a9.htm?Retriage=1
TARGET_TIME: 2020-03-15T20:07:24.000Z
OSBUILD: 18363
OSSERVICEPACK: 329
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: d181
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:heap_corruption_c0000374_heap_corruption!explorer.exe
FAILURE_ID_HASH: {ac1964a1-66cc-28ec-5937-fa6172887bc9}
Followup: MachineOwner
---------
0:013> .exr -1
ExceptionAddress: 00007ffa5c2592a9 (ntdll!RtlReportFatalFailure+0x0000000000000009)
ExceptionCode: c0000374
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 00007ffa5c2c27f0
More...
My latest CrashDump log.
Microsoft (R) Windows Debugger Version 10.0.18362.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\CrashTemp\explorer.exe.6588.dmp]
User Mini Dump File with Full Memory: Only application data is available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 18363 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Debug session time: Sun Mar 15 15:07:24.000 2020 (UTC - 5:00)
System Uptime: 0 days 17:38:03.416
Process Uptime: 0 days 17:37:45.000
................................................................
................................................................
................................................................
................................................................
...................
Loading unloaded module list
................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(19bc.21f8): Unknown exception - code c0000374 (first/second chance not available)
For analysis of this file, run !analyze -v
ntdll!NtWaitForMultipleObjects+0x14:
00007ffa`5c1fcc14 c3 ret
0:013> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
KEY_VALUES_STRING: 1
Key : Timeline.OS.Boot.DeltaSec
Value: 63483
Key : Timeline.Process.Start.DeltaSec
Value: 63465
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
Timeline: !analyze.Start
Name: <blank>
Time: 2020-03-15T20:08:21.115Z
Diff: 57115 mSec
Timeline: Dump.Current
Name: <blank>
Time: 2020-03-15T20:07:24.0Z
Diff: 0 mSec
Timeline: Process.Start
Name: <blank>
Time: 2020-03-15T02:29:39.0Z
Diff: 63465000 mSec
Timeline: OS.Boot
Name: <blank>
Time: 2020-03-15T02:29:21.0Z
Diff: 63483000 mSec
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.ecxr)
rax=0000000000000010 rbx=00000000c0000374 rcx=0000000014b9e7d0
rdx=00007ffa013b4eb8 rsi=0000000000000001 rdi=00007ffa5c2c27f0
rip=00007ffa5c2592a9 rsp=000000000667dfb0 rbp=0000000000910000
r8=0000000000000000 r9=000000000667da00 r10=00007ffa59706e77
r11=0000000000800009 r12=0000000000000001 r13=0000000000000000
r14=000000001486fa80 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
ntdll!RtlReportFatalFailure+0x9:
00007ffa`5c2592a9 eb00 jmp ntdll!RtlReportFatalFailure+0xb (00007ffa`5c2592ab)
Resetting default scope
FAULTING_IP:
ntdll!RtlReportFatalFailure+9
00007ffa`5c2592a9 eb00 jmp ntdll!RtlReportFatalFailure+0xb (00007ffa`5c2592ab)
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffa5c2592a9 (ntdll!RtlReportFatalFailure+0x0000000000000009)
ExceptionCode: c0000374
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 00007ffa5c2c27f0
BUGCHECK_STR: HEAP_CORRUPTION
DEFAULT_BUCKET_ID: HEAP_CORRUPTION
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_CODE: (NTSTATUS) 0xc0000374 - A heap has been corrupted.
EXCEPTION_CODE_STR: c0000374
EXCEPTION_PARAMETER1: 00007ffa5c2c27f0
WATSON_BKT_PROCSTAMP: 587c1978
WATSON_BKT_PROCVER: 10.0.18362.693
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
WATSON_BKT_MODULE: ntdll.dll
WATSON_BKT_MODSTAMP: 64d10ee0
WATSON_BKT_MODOFFSET: f92a9
WATSON_BKT_MODVER: 10.0.18362.719
MODULE_VER_PRODUCT: Microsoft® Windows® Operating System
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
MODLIST_WITH_TSCHKSUM_HASH: 6b88c0844ce03e2488f92dcb3f9c7a626407d0d0
MODLIST_SHA1_HASH: 96e9c7d505a35bab0311de294dbe96c954facbe9
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 1
SUITE_MASK: 272
DUMP_FLAGS: 8000c07
DUMP_TYPE: 3
ANALYSIS_SESSION_HOST: WOODYNEW
ANALYSIS_SESSION_TIME: 03-15-2020 15:08:21.0115
ANALYSIS_VERSION: 10.0.18362.1 x86fre
THREAD_ATTRIBUTES:
ADDITIONAL_DEBUG_TEXT: Enable Pageheap/AutoVerifer ; Followup set based on attribute [Is_ChosenCrashFollowupThread] from Frame:[0] on thread:[PSEUDO_THREAD]
FAULTING_THREAD: 000021f8
THREAD_SHA1_HASH_MOD_FUNC: d52d126065eecb3edc48f67a35ff31dd4743efac
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: b93f0c1e23550cbd55eb89bfacd23924dda5e471
OS_LOCALE: ENU
PRIMARY_PROBLEM_CLASS: HEAP_CORRUPTION
PROBLEM_CLASSES:
ID: [0n262]
Type: [HEAP_CORRUPTION]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Add
Data: Omit
PID: [0x19bc]
TID: [0x21f8]
Frame: [5] : ntdll!RtlpFreeHeap
ID: [0n262]
Type: [HEAP_CORRUPTION]
Class: Primary
Scope: BUCKET_ID
Name: Add
Data: Omit
PID: [0x19bc]
TID: [0x21f8]
Frame: [5] : ntdll!RtlpFreeHeap
ID: [0n262]
Type: [HEAP_CORRUPTION]
Class: Primary
Scope: BUCKET_ID
Name: Add
Data: Omit
PID: [Unspecified]
TID: [0x21f8]
Frame: [0] : ntdll!RtlReportFatalFailure
LAST_CONTROL_TRANSFER: from 00007ffa5c259273 to 00007ffa5c2592a9
STACK_TEXT:
00000000`00000000 00000000`00000000 heap_corruption!explorer.exe+0x0
STACK_COMMAND: ** Pseudo Context ** ManagedPseudo ** Value: 1a2314d8 ** ; kb
THREAD_SHA1_HASH_MOD: ca4e26064d24ef7512d2e94de5a93c38dbe82fe9
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: heap_corruption!explorer.exe
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: heap_corruption
IMAGE_NAME: heap_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID: HEAP_CORRUPTION_heap_corruption!explorer.exe
FAILURE_EXCEPTION_CODE: c0000374
FAILURE_IMAGE_NAME: heap_corruption
BUCKET_ID_IMAGE_STR: heap_corruption
FAILURE_MODULE_NAME: heap_corruption
BUCKET_ID_MODULE_STR: heap_corruption
FAILURE_FUNCTION_NAME: explorer.exe
BUCKET_ID_FUNCTION_STR: explorer.exe
BUCKET_ID_OFFSET: 0
BUCKET_ID_MODTIMEDATESTAMP: 0
BUCKET_ID_MODCHECKSUM: 0
BUCKET_ID_MODVER_STR: 0.0.0.0
BUCKET_ID_PREFIX_STR:
FAILURE_PROBLEM_CLASS: HEAP_CORRUPTION
FAILURE_SYMBOL_NAME: heap_corruption!explorer.exe
FAILURE_BUCKET_ID: HEAP_CORRUPTION_c0000374_heap_corruption!explorer.exe
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...719/64d10ee0/c0000374/000f92a9.htm?Retriage=1
TARGET_TIME: 2020-03-15T20:07:24.000Z
OSBUILD: 18363
OSSERVICEPACK: 329
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: d181
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:heap_corruption_c0000374_heap_corruption!explorer.exe
FAILURE_ID_HASH: {ac1964a1-66cc-28ec-5937-fa6172887bc9}
Followup: MachineOwner
---------
0:013> .exr -1
ExceptionAddress: 00007ffa5c2592a9 (ntdll!RtlReportFatalFailure+0x0000000000000009)
ExceptionCode: c0000374
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 00007ffa5c2c27f0
More...