Loading control script C:\Program Files\DebugDiag\Scripts\CrashRule_Process_spoolsv.exe.vbs DumpPath set to C:\Program Files\DebugDiag\Logs\Crash rule for all instances of spoolsv.exe [06.04.2021 19:46:02] DebugDiag version 2.3.0.37 DbgHost version 2.3.0.37 DbgSvc version 2.3.0.37 Process created. BaseModule - C:\WINDOWS\System32\spoolsv.exe. BaseThread - System ID: 11988 C:\WINDOWS\SYSTEM32\ntdll.dll loaded at 0x5c4d0000 Thread created. New thread - System ID: 10920 Thread created. New thread - System ID: 3916 Thread created. New thread - System ID: 9776 Thread created. New thread - System ID: 5908 Thread created. New thread - System ID: 1172 Thread created. New thread - System ID: 10424 Thread created. New thread - System ID: 9484 C:\WINDOWS\System32\KERNEL32.DLL loaded at 0x5ae10000 C:\WINDOWS\System32\KERNELBASE.dll loaded at 0x59d90000 C:\WINDOWS\System32\USER32.dll loaded at 0x5b870000 C:\WINDOWS\System32\win32u.dll loaded at 0x5a4a0000 C:\WINDOWS\System32\GDI32.dll loaded at 0x5b7e0000 C:\WINDOWS\System32\gdi32full.dll loaded at 0x5a390000 C:\WINDOWS\System32\msvcp_win.dll loaded at 0x5a1c0000 C:\WINDOWS\System32\ucrtbase.dll loaded at 0x5a290000 C:\WINDOWS\System32\msvcrt.dll loaded at 0x5baf0000 C:\WINDOWS\System32\sechost.dll loaded at 0x5ac40000 C:\WINDOWS\System32\RPCRT4.dll loaded at 0x5a530000 C:\WINDOWS\System32\advapi32.dll loaded at 0x5b590000 C:\WINDOWS\System32\bcrypt.dll loaded at 0x5a260000 C:\WINDOWS\System32\DNSAPI.dll loaded at 0x590e0000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL loaded at 0x590a0000 C:\WINDOWS\System32\NSI.dll loaded at 0x5b580000 C:\WINDOWS\System32\bcryptPrimitives.dll loaded at 0x59c10000 C:\WINDOWS\System32\combase.dll loaded at 0x5a750000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll loaded at 0x57a80000 C:\WINDOWS\SYSTEM32\powrprof.dll loaded at 0x59210000 C:\WINDOWS\System32\UMPDC.dll loaded at 0x59080000 C:\WINDOWS\System32\sspicli.dll loaded at 0x59b00000 C:\WINDOWS\System32\WS2_32.dll loaded at 0x5aed0000 C:\WINDOWS\system32\mswsock.dll loaded at 0x59400000 Thread created. New thread - System ID: 6308 Initializing control script Clearing any existing breakpoints [06.04.2021 19:46:04] *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\SYSTEM32\ntdll.dll - Current Breakpoint List(BL) Thread exited. Exiting thread - System ID: 6308. Exit code - 0x00000000 [06.04.2021 19:46:36] Thread created. New thread - System ID: 11092 C:\WINDOWS\SYSTEM32\WINNSI.DLL loaded at 0x56d40000 C:\Windows\System32\rasadhlp.dll loaded at 0x56490000 C:\WINDOWS\System32\fwpuclnt.dll loaded at 0x56cb0000 C:\WINDOWS\System32\localspl.dll loaded at 0x03890000 C:\WINDOWS\System32\CRYPT32.dll loaded at 0x5a060000 C:\WINDOWS\System32\cfgmgr32.dll loaded at 0x59d40000 C:\WINDOWS\System32\srvcli.dll loaded at 0x3c0e0000 C:\WINDOWS\System32\SETUPAPI.dll loaded at 0x5af40000 C:\WINDOWS\System32\sfc_os.dll loaded at 0x43480000 C:\WINDOWS\System32\SPOOLSS.DLL loaded at 0x4a2c0000 C:\WINDOWS\System32\ole32.dll loaded at 0x5ace0000 C:\WINDOWS\System32\Secur32.dll loaded at 0x4f6d0000 C:\WINDOWS\system32\winspool.drv loaded at 0x43530000 Thread created. New thread - System ID: 1232 C:\WINDOWS\System32\PrintIsolationProxy.dll loaded at 0x4a0a0000 C:\WINDOWS\System32\AppMon.dll loaded at 0x3a7f0000 C:\WINDOWS\System32\profapi.dll loaded at 0x59b50000 Exception 0XE06D7363 on thread 9484. DetailID = 1 [06.04.2021 19:46:37] Created dump file C:\Program Files\DebugDiag\Logs\Crash rule for all instances of spoolsv.exe\spoolsv__PID__1368__Date__04_06_2021__Time_07_46_36PM__521__First chance exception 0XE06D7363.dmp *********************** * EXCEPTION DETAILS * *********************** DetailID = 1 Count: 1 Exception #: 0XE06D7363 Stack: KERNELBASE!RaiseException+0x69 msvcrt!CxxThrowException+0xad AppMon+0x2215 AppMon+0x21c2 AppMon+0x276b AppMon!SetRPCClientPid+0x2311 AppMon!SetRPCClientPid+0x2337 AppMon!SetRPCClientPid+0x41c AppMon!SetRPCClientPid+0x1567 AppMon!SetRPCClientPid+0x134 localspl!SplGetPrintClassObject_4CSR+0x2ed3 localspl!SplGetPrintClassObject_4CSR+0x24bc localspl!SplCreateSpooler+0x61c localspl!InitializePrintProvidor+0x365 spoolsv!PrvUpdateBufferSize+0x2b51 spoolsv!PrvInitializeRouter+0x31b spoolsv!PrvSplProcessSessionEvent+0x17a60 KERNEL32!BaseThreadInitThunk+0x14 ntdll!RtlUserThreadStart+0x21 *********************** * EXCEPTION SUMMARY * *********************** |--------------------| | Count | Exception | |--------------------| | 1 | 0XE06D7363 | |--------------------| Debugging Overhead Cost: Total Elapsed Ticks = 34438 (100%) Total Ticks Spent in Debugger Engine = 63 (0%) Total Ticks Spent in Crash Rule Script = 2078 (6%) C:\WINDOWS\System32\FXSMON.DLL loaded at 0x47340000 C:\WINDOWS\System32\pdfcmon.dll loaded at 0x3a680000 C:\WINDOWS\System32\WTSAPI32.dll loaded at 0x56780000 C:\WINDOWS\System32\VERSION.dll loaded at 0x56c30000 C:\WINDOWS\System32\USERENV.dll loaded at 0x59ad0000 C:\WINDOWS\SYSTEM32\apphelp.dll loaded at 0x51360000 C:\WINDOWS\SYSTEM32\apphelp.dll Unloaded from 0x51360000 C:\WINDOWS\System32\tcpmon.dll loaded at 0x39870000 C:\WINDOWS\System32\snmpapi.dll loaded at 0x52200000 C:\WINDOWS\System32\wsnmp32.dll loaded at 0x451d0000 C:\WINDOWS\System32\usbmon.dll loaded at 0x23150000 C:\WINDOWS\System32\OLEAUT32.dll loaded at 0x5a660000 C:\WINDOWS\System32\WINUSB.DLL loaded at 0x50a50000 C:\WINDOWS\System32\deviceassociation.dll loaded at 0x4c1f0000 [06.04.2021 19:46:38] C:\WINDOWS\System32\DEVOBJ.dll loaded at 0x599e0000 C:\WINDOWS\System32\WINTRUST.dll loaded at 0x5a4d0000 C:\WINDOWS\System32\MSASN1.dll loaded at 0x59800000 C:\WINDOWS\System32\APMon.dll loaded at 0x03710000 C:\WINDOWS\System32\shcore.dll loaded at 0x5aab0000 C:\WINDOWS\System32\netutils.dll loaded at 0x59200000 C:\WINDOWS\System32\wsdapi.dll loaded at 0x233a0000 C:\WINDOWS\System32\WINHTTP.dll loaded at 0x58cb0000 C:\WINDOWS\System32\FirewallAPI.dll loaded at 0x58480000 C:\WINDOWS\System32\webservices.dll loaded at 0x035b0000 C:\WINDOWS\System32\fwbase.dll loaded at 0x58420000 C:\WINDOWS\System32\clbcatq.dll loaded at 0x5ba10000 C:\Windows\System32\msxml6.dll loaded at 0x3aab0000 Thread created. New thread - System ID: 9092 C:\WINDOWS\System32\drvstore.dll loaded at 0x549d0000 C:\WINDOWS\system32\spool\PRTPROCS\x64\winprint.dll loaded at 0x50700000 C:\WINDOWS\SYSTEM32\gpapi.dll loaded at 0x58450000 Thread created. New thread - System ID: 4668 C:\WINDOWS\System32\DSROLE.dll loaded at 0x57010000 Thread created. New thread - System ID: 9580 Thread created. New thread - System ID: 11996 C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll loaded at 0x03230000 C:\WINDOWS\System32\SHLWAPI.dll loaded at 0x5b3b0000 C:\WINDOWS\SYSTEM32\prntvpt.dll loaded at 0x37fd0000 C:\WINDOWS\System32\SHLWAPI.dll Unloaded from 0x5b3b0000 C:\WINDOWS\SYSTEM32\prntvpt.dll Unloaded from 0x37fd0000 C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll Unloaded from 0x03230000 C:\WINDOWS\System32\MpPrintFlt.dll loaded at 0x3a4a0000 C:\WINDOWS\System32\ntoskrnl.exe loaded at 0x65710000 C:\WINDOWS\SYSTEM32\win32spl.dll loaded at 0x034d0000 Thread created. New thread - System ID: 8408 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.6-0\MpClient.dll loaded at 0x38140000 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.6-0\MpClient.dll Unloaded from 0x38140000 C:\WINDOWS\SYSTEM32\inetpp.dll loaded at 0x37fd0000 Thread created. New thread - System ID: 3748 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.6-0\MpClient.dll loaded at 0x38140000 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.6-0\MpClient.dll Unloaded from 0x38140000 C:\WINDOWS\SYSTEM32\inetpp.dll Unloaded from 0x37fd0000 Second chance exception - 0XC0000409 caused by thread with System ID: 9092 DetailID = 2 Created dump file C:\Program Files\DebugDiag\Logs\Crash rule for all instances of spoolsv.exe\spoolsv__PID__1368__Date__04_06_2021__Time_07_46_38PM__604__First chance exception 0XC0000409.dmp *********************** * EXCEPTION DETAILS * *********************** DetailID = 1 Count: 1 Exception #: 0XE06D7363 Stack: KERNELBASE!RaiseException+0x69 msvcrt!CxxThrowException+0xad AppMon+0x2215 AppMon+0x21c2 AppMon+0x276b AppMon!SetRPCClientPid+0x2311 AppMon!SetRPCClientPid+0x2337 AppMon!SetRPCClientPid+0x41c AppMon!SetRPCClientPid+0x1567 AppMon!SetRPCClientPid+0x134 localspl!SplGetPrintClassObject_4CSR+0x2ed3 localspl!SplGetPrintClassObject_4CSR+0x24bc localspl!SplCreateSpooler+0x61c localspl!InitializePrintProvidor+0x365 spoolsv!PrvUpdateBufferSize+0x2b51 spoolsv!PrvInitializeRouter+0x31b spoolsv!PrvSplProcessSessionEvent+0x17a60 KERNEL32!BaseThreadInitThunk+0x14 ntdll!RtlUserThreadStart+0x21 DetailID = 2 Count: 1 Exception #: 0XC0000409 Stack: ntdll!_chkstk+0xc0 ntdll!RtlGetReturnAddressHijackTarget+0x9d ntdll!RtlRetrieveNtUserPfn+0x3d8 spoolsv!PrvEnumPrintersW+0xec SPOOLSS!EnumPrintersW+0x7d APMon!Ordinal343+0x1c19f APMon!Ordinal343+0x1c2d3 APMon!Ordinal343+0x1bd72 KERNEL32!BaseThreadInitThunk+0x14 ntdll!RtlUserThreadStart+0x21 *********************** * EXCEPTION SUMMARY * *********************** |--------------------| | Count | Exception | |--------------------| | 1 | 0XE06D7363 | | 1 | 0XC0000409 | |--------------------| Debugging Overhead Cost: Total Elapsed Ticks = 36313 (100%) Total Ticks Spent in Debugger Engine = 360 (1%) Total Ticks Spent in Crash Rule Script = 2750 (8%) Thread exited. Exiting thread - System ID: 5908. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 4668. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 9776. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 9484. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 3916. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 1232. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 11996. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 1172. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 11092. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 10920. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 9580. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 8408. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 10424. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 11988. Exit code - 0xffffffff Thread exited. Exiting thread - System ID: 3748. Exit code - 0xffffffff Process exited. Exit code - 0xffffffff *********************** * EXCEPTION DETAILS * *********************** DetailID = 1 Count: 1 Exception #: 0XE06D7363 Stack: KERNELBASE!RaiseException+0x69 msvcrt!CxxThrowException+0xad AppMon+0x2215 AppMon+0x21c2 AppMon+0x276b AppMon!SetRPCClientPid+0x2311 AppMon!SetRPCClientPid+0x2337 AppMon!SetRPCClientPid+0x41c AppMon!SetRPCClientPid+0x1567 AppMon!SetRPCClientPid+0x134 localspl!SplGetPrintClassObject_4CSR+0x2ed3 localspl!SplGetPrintClassObject_4CSR+0x24bc localspl!SplCreateSpooler+0x61c localspl!InitializePrintProvidor+0x365 spoolsv!PrvUpdateBufferSize+0x2b51 spoolsv!PrvInitializeRouter+0x31b spoolsv!PrvSplProcessSessionEvent+0x17a60 KERNEL32!BaseThreadInitThunk+0x14 ntdll!RtlUserThreadStart+0x21 DetailID = 2 Count: 1 Exception #: 0XC0000409 Stack: ntdll!_chkstk+0xc0 ntdll!RtlGetReturnAddressHijackTarget+0x9d ntdll!RtlRetrieveNtUserPfn+0x3d8 spoolsv!PrvEnumPrintersW+0xec SPOOLSS!EnumPrintersW+0x7d APMon!Ordinal343+0x1c19f APMon!Ordinal343+0x1c2d3 APMon!Ordinal343+0x1bd72 KERNEL32!BaseThreadInitThunk+0x14 ntdll!RtlUserThreadStart+0x21 *********************** * EXCEPTION SUMMARY * *********************** |--------------------| | Count | Exception | |--------------------| | 1 | 0XE06D7363 | | 1 | 0XC0000409 | |--------------------| Debugging Overhead Cost: Total Elapsed Ticks = 36328 (100%) Total Ticks Spent in Debugger Engine = 360 (1%) Total Ticks Spent in Crash Rule Script = 3156 (9%)