FAULTING_IP:
nt!KeSetEvent+226
fffff800`02acf7b6 488b09 mov rcx,qword ptr [rcx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: winlogon.exe
TRAP_FRAME: fffff88002133480 -- (.trap 0xfffff88002133480)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8003990050 rbx=0000000000000000 rcx=000000000d0b0000
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002acf7b6 rsp=fffff88002133610 rbp=0000000000000000
r8=0000000000000000 r9=0000000000000400 r10=000000000d0b0000
r11=0000000000000306 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe cy
nt!KeSetEvent+0x226:
fffff800`02acf7b6 488b09 mov rcx,qword ptr [rcx] ds:0002:00000000`0d0b0000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002acab69 to fffff80002acb600
STACK_TEXT:
fffff880`02133338 fffff800`02acab69 : 00000000`0000000a 00000000`0d0b0000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`02133340 fffff800`02ac97e0 : 00000000`00000000 fffffa80`03990048 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`02133480 fffff800`02acf7b6 : fffffa80`029ac180 fffff8a0`019d0900 00000000`0005f200 fffff880`02133848 : nt!KiPageFault+0x260
fffff880`02133610 fffff800`02a91044 : fffff8a0`00000000 00000000`00000001 fffff880`02133600 00000000`00000000 : nt!KeSetEvent+0x226
fffff880`02133680 fffff880`0122ef8f : fffff880`021336e0 fffffa80`03990010 fffff880`02133801 fffffa80`039dd101 : nt!ExReleaseFastMutex+0x54
fffff880`021336b0 fffff880`02133738 : fffff880`02133738 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsLookupNtfsMcbEntry+0x1cb
fffff880`02133740 fffff880`02133738 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`02133738
fffff880`02133748 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff880`02133738
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KeSetEvent+226
fffff800`02acf7b6 488b09 mov rcx,qword ptr [rcx]
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!KeSetEvent+226
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
FAILURE_BUCKET_ID: X64_0xA_nt!KeSetEvent+226
BUCKET_ID: X64_0xA_nt!KeSetEvent+226
Followup: MachineOwner
---------