*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
[COLOR=red]MEMORY_MANAGEMENT[/COLOR] (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: fffff6806cd0e148
Arg3: 0000000000008000
Arg4: 0000000000000000
Debugging Details:
------------------
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
MEMORY_CORRUPTOR: ONE_BIT
BUGCHECK_STR: 0x1a_41792
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: [COLOR=red]MsMpEng.exe[/COLOR]
CURRENT_IRQL: 0
ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre
STACK_TEXT:
ffffd000`23b5f7c8 fffff802`4efedbd3 : 00000000`0000001a 00000000`00041792 fffff680`6cd0e148 00000000`00008000 : nt!KeBugCheckEx
ffffd000`23b5f7d0 fffff802`4eec64ad : 00000000`00000008 00000000`00000001 00000000`00000001 ffffe000`02c61de8 : nt! ?? ::FNODOBFM::`string'+0xea33
ffffd000`23b5fa30 fffff802`4f233e31 : ffffe000`078244f0 000000d9`a1070000 ffffe000`00000000 7fffffff`00000000 : nt!MiDeleteVad+0x22d
ffffd000`23b5fb20 fffff802`4f233747 : 00000000`00000000 fffff680`00000008 000000d9`a1070000 00000000`00001001 : nt!MiUnmapViewOfSection+0xf9
ffffd000`23b5fbf0 fffff802`4efda4b3 : ffffe000`02e11080 000000d9`8d81f430 00000000`00000000 ffffe000`02c61900 : nt!NtUnmapViewOfSectionEx+0x73
ffffd000`23b5fc40 00007ffd`ce297ffa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000d9`8d81cbf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`ce297ffa
STACK_COMMAND: kb
SYMBOL_NAME: ONE_BIT
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: hardware
IMAGE_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION:
FAILURE_BUCKET_ID: [COLOR=red]MEMORY_CORRUPTION_ONE_BIT[/COLOR]
BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: [COLOR=red]km:memory_corruption_one_bit[/COLOR]
FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
Followup: MachineOwne