{\rtf1\ansi\deff0\nouicompat{\fonttbl{\f0\fnil\fcharset0 Calibri;}}
{\*\generator Riched20 10.0.19041}\viewkind4\uc1 
\pard\sa200\sl276\slmult1\f0\fs22\lang9 ************* Preparing the environment for Debugger Extensions Gallery repositories **************\par
   ExtensionRepository : Implicit\par
   UseExperimentalFeatureForNugetShare : false\par
   AllowNugetExeUpdate : false\par
   AllowNugetMSCredentialProviderInstall : false\par
   AllowParallelInitializationOfLocalRepositories : true\par
\par
   -- Configuring repositories\par
      ----> Repository : LocalInstalled, Enabled: true\par
      ----> Repository : UserExtensions, Enabled: true\par
\par
>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.000 seconds\par
\par
************* Waiting for Debugger Extensions Gallery to Initialize **************\par
\par
>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.156 seconds\par
   ----> Repository : UserExtensions, Enabled: true, Packages count: 0\par
   ----> Repository : LocalInstalled, Enabled: true, Packages count: 36\par
\par
Microsoft (R) Windows Debugger Version 10.0.25877.1004 AMD64\par
Copyright (c) Microsoft Corporation. All rights reserved.\par
\par
\par
Loading Dump File [C:\\Windows\\MEMORY.DMP]\par
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.\par
\par
Symbol search path is: srv*\par
Executable search path is: \par
Windows 10 Kernel Version 19041 MP (16 procs) Free x64\par
Product: WinNt, suite: TerminalServer SingleUserTS\par
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406\par
Kernel base = 0xfffff803`3fc00000 PsLoadedModuleList = 0xfffff803`4082a2d0\par
Debug session time: Mon Aug  7 13:10:39.231 2023 (UTC + 3:00)\par
System Uptime: 2 days 19:43:51.308\par
Loading Kernel Symbols\par
...............................................................\par
................................................................\par
...Page 8097d0 not present in the dump file. Type ".hh dbgerr004" for details\par
..Page 809cac not present in the dump file. Type ".hh dbgerr004" for details\par
....................................................\par
Loading User Symbols\par
PEB is paged out (Peb.Ldr = 00000027`4fbeb018).  Type ".hh dbgerr001" for details\par
Loading unloaded module list\par
.........................\par
For analysis of this file, run !analyze -v\par
nt!KeBugCheck:\par
fffff803`3fffc0a0 4883ec28        sub     rsp,28h\par
3: kd> !analyze -v\par
*******************************************************************************\par
*                                                                             *\par
*                        Bugcheck Analysis                                    *\par
*                                                                             *\par
*******************************************************************************\par
\par
INVALID_PROCESS_DETACH_ATTEMPT (6)\par
Arguments:\par
Arg1: 0000000000000000\par
Arg2: 0000000000000000\par
Arg3: 0000000000000000\par
Arg4: 0000000000000000\par
\par
Debugging Details:\par
------------------\par
\par
\par
KEY_VALUES_STRING: 1\par
\par
    Key  : Analysis.CPU.mSec\par
    Value: 2843\par
\par
    Key  : Analysis.Elapsed.mSec\par
    Value: 2859\par
\par
    Key  : Analysis.IO.Other.Mb\par
    Value: 14\par
\par
    Key  : Analysis.IO.Read.Mb\par
    Value: 0\par
\par
    Key  : Analysis.IO.Write.Mb\par
    Value: 18\par
\par
    Key  : Analysis.Init.CPU.mSec\par
    Value: 1187\par
\par
    Key  : Analysis.Init.Elapsed.mSec\par
    Value: 126630\par
\par
    Key  : Analysis.Memory.CommitPeak.Mb\par
    Value: 89\par
\par
    Key  : Bugcheck.Code.KiBugCheckData\par
    Value: 0x6\par
\par
    Key  : Bugcheck.Code.LegacyAPI\par
    Value: 0x6\par
\par
    Key  : Failure.Bucket\par
    Value: 0x6_nt!KiUnstackDetachProcess\par
\par
    Key  : Failure.Hash\par
    Value: \{75221f7b-705e-36e1-7243-ef6f70b056ce\}\par
\par
    Key  : Hypervisor.Enlightenments.Value\par
    Value: 0\par
\par
    Key  : Hypervisor.Enlightenments.ValueHex\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.AnyHypervisorPresent\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.ApicEnlightened\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.ApicVirtualizationAvailable\par
    Value: 1\par
\par
    Key  : Hypervisor.Flags.AsyncMemoryHint\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.CoreSchedulerRequested\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.CpuManager\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.DeprecateAutoEoi\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.DynamicCpuDisabled\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.Epf\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.ExtendedProcessorMasks\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.HardwareMbecAvailable\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.MaxBankNumber\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.MemoryZeroingControl\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.NoExtendedRangeFlush\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.NoNonArchCoreSharing\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.Phase0InitDone\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.PowerSchedulerQos\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.RootScheduler\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.SynicAvailable\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.UseQpcBias\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.Value\par
    Value: 16777216\par
\par
    Key  : Hypervisor.Flags.ValueHex\par
    Value: 1000000\par
\par
    Key  : Hypervisor.Flags.VpAssistPage\par
    Value: 0\par
\par
    Key  : Hypervisor.Flags.VsmAvailable\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.AccessStats\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.CrashdumpEnlightened\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.CreateVirtualProcessor\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.DisableHyperthreading\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.HostTimelineSync\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.IsHyperV\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.LivedumpEnlightened\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.MapDeviceInterrupt\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.MceEnlightened\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.Nested\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.StartLogicalProcessor\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.Value\par
    Value: 0\par
\par
    Key  : Hypervisor.RootFlags.ValueHex\par
    Value: 0\par
\par
    Key  : SecureKernel.HalpHvciEnabled\par
    Value: 0\par
\par
    Key  : WER.OS.Branch\par
    Value: vb_release\par
\par
    Key  : WER.OS.Version\par
    Value: 10.0.19041.1\par
\par
\par
BUGCHECK_CODE:  6\par
\par
BUGCHECK_P1: 0\par
\par
BUGCHECK_P2: 0\par
\par
BUGCHECK_P3: 0\par
\par
BUGCHECK_P4: 0\par
\par
FILE_IN_CAB:  MEMORY.DMP\par
\par
BLACKBOXBSD: 1 (!blackboxbsd)\par
\par
\par
BLACKBOXNTFS: 1 (!blackboxntfs)\par
\par
\par
BLACKBOXPNP: 1 (!blackboxpnp)\par
\par
\par
BLACKBOXWINLOGON: 1\par
\par
PROCESS_NAME:  MsMpEng.exe\par
\par
STACK_TEXT:  \par
ffffe905`bea29858 fffff803`4001b988     : 00000000`00000000 fffff803`403179b0 00000000`00000000 ffff800c`064e6000 : nt!KeBugCheck\par
ffffe905`bea29860 fffff803`403178f6     : ffff800b`00000000 ffff800c`00000000 00000000`00001000 ffff800b`f29ed700 : nt!KiUnstackDetachProcess+0x1b3668\par
ffffe905`bea298c0 fffff803`40317696     : 00000000`00000000 fffff803`3fed6b0b 00000000`00000001 ffff800c`08ff3150 : nt!EtwpRealtimeInjectEtwBuffer+0x196\par
ffffe905`bea29960 fffff803`403175e0     : 00000000`00000000 ffff800b`f29ed700 00000000`00000000 ffff800b`f29ed700 : nt!EtwpRealtimeDeliverBuffer+0x7a\par
ffffe905`bea299c0 fffff803`40268302     : 00000000`c0000001 ffff800b`f29ed700 ffff800b`f29ed700 00000000`00000018 : nt!EtwpFlushBufferToRealtime+0x34\par
ffffe905`bea299f0 fffff803`4026a9ce     : 00000000`00000000 00000000`00000000 ffff800b`f29ed700 ffff800c`064e6000 : nt!EtwpFlushBuffer+0x5a\par
ffffe905`bea29a20 fffff803`4031578e     : ffff800b`f29ed700 ffff800b`f29ed700 00000000`00000000 ffffffff`fffffffd : nt!EtwpFlushActiveBuffers+0x236\par
ffffe905`bea29b90 fffff803`3ff26915     : ffffffff`fffffffd ffff800b`f29ee040 00000000`00000080 fffff803`403154e0 : nt!EtwpLogger+0x2ae\par
ffffe905`bea29c10 fffff803`40004cf8     : ffffd901`dc6a9180 ffff800b`f29ee040 fffff803`3ff268c0 00000000`00000000 : nt!PspSystemThreadStartup+0x55\par
ffffe905`bea29c60 00000000`00000000     : ffffe905`bea2a000 ffffe905`bea24000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x28\par
\par
\par
SYMBOL_NAME:  nt!KiUnstackDetachProcess+1b3668\par
\par
MODULE_NAME: nt\par
\par
IMAGE_NAME:  ntkrnlmp.exe\par
\par
STACK_COMMAND:  .cxr; .ecxr ; kb\par
\par
BUCKET_ID_FUNC_OFFSET:  1b3668\par
\par
FAILURE_BUCKET_ID:  0x6_nt!KiUnstackDetachProcess\par
\par
OS_VERSION:  10.0.19041.1\par
\par
BUILDLAB_STR:  vb_release\par
\par
OSPLATFORM_TYPE:  x64\par
\par
OSNAME:  Windows 10\par
\par
FAILURE_ID_HASH:  \{75221f7b-705e-36e1-7243-ef6f70b056ce\}\par
\par
Followup:     MachineOwner\par
---------\par
\par
}