I
IgorKravchenko1
mini dump result:
....
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
************* Symbol Loading Error Summary **************
Module name Error
ntoskrnl The system cannot find the file specified
You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
For analysis of this file, run !analyze -v
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000007, BOOT Error
Arg2: ffffb804c58da1f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
WRONG_SYMBOLS_TIMESTAMP: 4efcf7a9
WRONG_SYMBOLS_SIZE: ab6000
FAULTING_MODULE: fffff80229200000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4efcf7a9
DUMP_TYPE: 2
BUGCHECK_P1: 7
BUGCHECK_P2: ffffb804c58da1f8
BUGCHECK_P3: 0
BUGCHECK_P4: 0
BUGCHECK_STR: 4EFCF7A9
CPU_COUNT: 6
CPU_MHZ: e70
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: c
CUSTOMER_CRASH_COUNT: 1
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-3K0GB5M
ANALYSIS_SESSION_TIME: 12-15-2019 06:07:29.0435
ANALYSIS_VERSION: 10.0.18362.1 x86fre
STACK_TEXT:
ffffc801`9e9224a0 ffffb804`c3802000 : 00000000`00000007 ffffb804`c58da1f8 00000000`00000000 ffffb804`c58da1f8 : nt+0x91bbdb
ffffc801`9e9224a8 00000000`00000007 : ffffb804`c58da1f8 00000000`00000000 ffffb804`c58da1f8 00000000`00000000 : 0xffffb804`c3802000
ffffc801`9e9224b0 ffffb804`c58da1f8 : 00000000`00000000 ffffb804`c58da1f8 00000000`00000000 00000000`00000000 : 0x7
ffffc801`9e9224b8 00000000`00000000 : ffffb804`c58da1f8 00000000`00000000 00000000`00000000 ffffb804`00000b60 : 0xffffb804`c58da1f8
THREAD_SHA1_HASH_MOD_FUNC: 76cd06466d098060a9eb26e5fd2a25cb1f3fe0a3
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 7d6583b180802c9a8ab1a4215b5925eb96cf4498
THREAD_SHA1_HASH_MOD: 76cd06466d098060a9eb26e5fd2a25cb1f3fe0a3
FOLLOWUP_NAME: MachineOwner
STACK_COMMAND: .thread ; .cxr ; kb
EXCEPTION_CODE: (Win32) 0x4efcf7a9 (1325201321) - <Unable to get error code text>
EXCEPTION_CODE_STR: 4EFCF7A9
EXCEPTION_STR: WRONG_SYMBOLS
PROCESS_NAME: ntoskrnl.wrong.symbols.exe
IMAGE_NAME: ntoskrnl.wrong.symbols.exe
MODULE_NAME: nt_wrong_symbols
SYMBOL_NAME: nt_wrong_symbols!4EFCF7A9AB6000
BUCKET_ID: WRONG_SYMBOLS_X64_TIMESTAMP_111229-232841
DEFAULT_BUCKET_ID: WRONG_SYMBOLS_X64_TIMESTAMP_111229-232841
PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS
FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_TIMESTAMP_111229-232841_4EFCF7A9_nt_wrong_symbols!4EFCF7A9AB6000
TARGET_TIME: 2019-11-27T20:27:42.000Z
OSBUILD: 18362
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 01:28:41
ANALYSIS_SESSION_ELAPSED_TIME: 20
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:wrong_symbols_x64_timestamp_111229-232841_4efcf7a9_nt_wrong_symbols!4efcf7a9ab6000
FAILURE_ID_HASH: {922fa6e1-be4a-6981-28aa-9840c9772b11}
Followup: MachineOwner
---------
3: kd> lmvm nt_wrong_symbols
Browse full module list
start end module name
Mini Kernel Dump does not contain unloaded driver list
3: kd> lmvm nt
Browse full module list
start end module name
fffff802`29200000 fffff802`29cb6000 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Browse all global symbols functions data
Timestamp: Thu Dec 29 15:28:41 2011 (4EFCF7A9)
CheckSum: 009785ED
ImageSize: 00AB6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
Mini Kernel Dump does not contain unloaded driver list
Continue reading...
....
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
************* Symbol Loading Error Summary **************
Module name Error
ntoskrnl The system cannot find the file specified
You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
For analysis of this file, run !analyze -v
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000007, BOOT Error
Arg2: ffffb804c58da1f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000
Arg4: 0000000000000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** ***
*************************************************************************
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.
WRONG_SYMBOLS_TIMESTAMP: 4efcf7a9
WRONG_SYMBOLS_SIZE: ab6000
FAULTING_MODULE: fffff80229200000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4efcf7a9
DUMP_TYPE: 2
BUGCHECK_P1: 7
BUGCHECK_P2: ffffb804c58da1f8
BUGCHECK_P3: 0
BUGCHECK_P4: 0
BUGCHECK_STR: 4EFCF7A9
CPU_COUNT: 6
CPU_MHZ: e70
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: c
CUSTOMER_CRASH_COUNT: 1
CURRENT_IRQL: 0
ANALYSIS_SESSION_HOST: DESKTOP-3K0GB5M
ANALYSIS_SESSION_TIME: 12-15-2019 06:07:29.0435
ANALYSIS_VERSION: 10.0.18362.1 x86fre
STACK_TEXT:
ffffc801`9e9224a0 ffffb804`c3802000 : 00000000`00000007 ffffb804`c58da1f8 00000000`00000000 ffffb804`c58da1f8 : nt+0x91bbdb
ffffc801`9e9224a8 00000000`00000007 : ffffb804`c58da1f8 00000000`00000000 ffffb804`c58da1f8 00000000`00000000 : 0xffffb804`c3802000
ffffc801`9e9224b0 ffffb804`c58da1f8 : 00000000`00000000 ffffb804`c58da1f8 00000000`00000000 00000000`00000000 : 0x7
ffffc801`9e9224b8 00000000`00000000 : ffffb804`c58da1f8 00000000`00000000 00000000`00000000 ffffb804`00000b60 : 0xffffb804`c58da1f8
THREAD_SHA1_HASH_MOD_FUNC: 76cd06466d098060a9eb26e5fd2a25cb1f3fe0a3
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 7d6583b180802c9a8ab1a4215b5925eb96cf4498
THREAD_SHA1_HASH_MOD: 76cd06466d098060a9eb26e5fd2a25cb1f3fe0a3
FOLLOWUP_NAME: MachineOwner
STACK_COMMAND: .thread ; .cxr ; kb
EXCEPTION_CODE: (Win32) 0x4efcf7a9 (1325201321) - <Unable to get error code text>
EXCEPTION_CODE_STR: 4EFCF7A9
EXCEPTION_STR: WRONG_SYMBOLS
PROCESS_NAME: ntoskrnl.wrong.symbols.exe
IMAGE_NAME: ntoskrnl.wrong.symbols.exe
MODULE_NAME: nt_wrong_symbols
SYMBOL_NAME: nt_wrong_symbols!4EFCF7A9AB6000
BUCKET_ID: WRONG_SYMBOLS_X64_TIMESTAMP_111229-232841
DEFAULT_BUCKET_ID: WRONG_SYMBOLS_X64_TIMESTAMP_111229-232841
PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS
FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_TIMESTAMP_111229-232841_4EFCF7A9_nt_wrong_symbols!4EFCF7A9AB6000
TARGET_TIME: 2019-11-27T20:27:42.000Z
OSBUILD: 18362
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-12-30 01:28:41
ANALYSIS_SESSION_ELAPSED_TIME: 20
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:wrong_symbols_x64_timestamp_111229-232841_4efcf7a9_nt_wrong_symbols!4efcf7a9ab6000
FAILURE_ID_HASH: {922fa6e1-be4a-6981-28aa-9840c9772b11}
Followup: MachineOwner
---------
3: kd> lmvm nt_wrong_symbols
Browse full module list
start end module name
Mini Kernel Dump does not contain unloaded driver list
3: kd> lmvm nt
Browse full module list
start end module name
fffff802`29200000 fffff802`29cb6000 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Browse all global symbols functions data
Timestamp: Thu Dec 29 15:28:41 2011 (4EFCF7A9)
CheckSum: 009785ED
ImageSize: 00AB6000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
Mini Kernel Dump does not contain unloaded driver list
Continue reading...