Page MenuHomeFeedback Tracker

Need someone that can help me opening the MDMP files so i can find out why my server is crashing
New, UrgentPublic

Description

Would be awesome if you can give me a bit more info on why my server is crashing. Provided the mdmp and RPT{F3155887}

There is nothing helpful in troubleshooting server crashes in the log file, and currently known errors will not cause crashes

Details

Severity
Crash
Resolution
Open
Reproducibility
N/A
Operating System
Windows 10
Category
General

Event Timeline

Metasequoia added a subscriber: Metasequoia.

*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************


KEY_VALUES_STRING: 1

    Key  : AV.Dereference
    Value: NullClassPtr

    Key  : AV.Fault
    Value: Read

    Key  : Analysis.Elapsed.mSec
    Value: 892

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.Elapsed.mSec
    Value: 8979

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 77

    Key  : Failure.Bucket
    Value: NULL_CLASS_PTR_READ_c0000005_NoBattleEye.exe!Unknown

    Key  : Failure.Hash
    Value: {d53999e6-c1f0-323b-8f4a-3ed89e24517d}

    Key  : Timeline.Process.Start.DeltaSec
    Value: 35134

    Key  : WER.OS.Branch
    Value: fe_release

    Key  : WER.OS.Version
    Value: 10.0.20348.1

    Key  : WER.Process.Version
    Value: 1.22.156.718


FILE_IN_CAB:  NoBattleEye_2023-10-09_11-24-21_2023-10-09_21-09-54.mdmp

APPLICATION_VERIFIER_FLAGS:  0

CONTEXT:  (.ecxr)
rax=0000000000000044 rbx=0000028104bca840 rcx=0000028104bca840
rdx=0000000000000001 rsi=0000028ab74e4ad0 rdi=0000028ab74e4870
rip=00007ff63fcecddb rsp=000000a16a1f9ba0 rbp=000000a16a1f9ed0
 r8=0000028a95b804e0  r9=00000281137e7ee8 r10=0000028ab74e4870
r11=0000000000000000 r12=00000281824d77d0 r13=0000000000000806
r14=0000028104bca840 r15=0000000000000004
iopl=0         nv up ei pl nz na pe nc
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202
NoBattleEye+0x2acddb:
00007ff6`3fcecddb 3b4254          cmp     eax,dword ptr [rdx+54h] ds:00000000`00000055=????????
Resetting default scope

EXCEPTION_RECORD:  (.exr -1)
ExceptionAddress: 00007ff63fcecddb (NoBattleEye+0x00000000002acddb)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000000055
Attempt to read from address 0000000000000055

PROCESS_NAME:  NoBattleEye.exe

READ_ADDRESS:  0000000000000055 

ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%p            0x%p                    %s

EXCEPTION_CODE_STR:  c0000005

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000055

IP_ON_HEAP:  0000028ab74e4ad0
The fault address in not in any loaded module, please check your build's rebase
log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
contain the address if it were loaded.

FRAME_ONE_INVALID: 1

STACK_TEXT:  
000000a1`6a1f9ba0 0000028a`b74e4ad0     : 00000281`04bca840 00000000`00000004 00000281`04bca840 00000000`00000000 : NoBattleEye+0x2acddb
000000a1`6a1f9ba8 00000281`04bca840     : 00000000`00000004 00000281`04bca840 00000000`00000000 00007ff6`4076ce90 : 0x0000028a`b74e4ad0
000000a1`6a1f9bb0 00000000`00000004     : 00000281`04bca840 00000000`00000000 00007ff6`4076ce90 00000281`8efac858 : 0x00000281`04bca840
000000a1`6a1f9bb8 00000281`04bca840     : 00000000`00000000 00007ff6`4076ce90 00000281`8efac858 00007ff6`402c99dd : 0x4
000000a1`6a1f9bc0 00000000`00000000     : 00007ff6`4076ce90 00000281`8efac858 00007ff6`402c99dd 00000000`00000000 : 0x00000281`04bca840


STACK_COMMAND:  ~0s; .ecxr ; kb

SYMBOL_NAME:  NoBattleEye+2acddb

MODULE_NAME: NoBattleEye

IMAGE_NAME:  NoBattleEye.exe

FAILURE_BUCKET_ID:  NULL_CLASS_PTR_READ_c0000005_NoBattleEye.exe!Unknown

OS_VERSION:  10.0.20348.1

BUILDLAB_STR:  fe_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

IMAGE_VERSION:  1.22.156.718

FAILURE_ID_HASH:  {d53999e6-c1f0-323b-8f4a-3ed89e24517d}

Followup:     MachineOwner

The RTP log only displays the last loaded MOD, which is not the cause of the crash