DRIVER_CORRUPTED_EXPOOL
Code: 0xc5 (197)
As HRESULT:- S: 0 (Success)
- C: 0 (Microsoft-defined)
- N: 0 (Not an NTSTATUS value)
- Facility: 0x000 (FACILITY_NULL: Default)
- Code: 0x00c5 (197)
- Sev: 0 (STATUS_SEVERITY_SUCCESS)
- C: 0 (Microsoft-defined)
- Facility: 0x000 (Default)
- Code: 0x00c5 (197)
Parameters
| Parameter | Description |
|---|---|
| 1 | Memory referenced |
| 2 | IRQL at time of reference |
| 3 | 0: Read 1: Write |
| 4 | Address that referenced memory |
Description
The DRIVER_CORRUPTED_EXPOOL bug check has a value of 0x000000C5. This indicates that the system attempted to access invalid memory at a process IRQL that was too high.
Important
This article is for programmers. If you're a customer who has received a blue screen error code while using your computer, see Troubleshoot blue screen errors.
Cause
The kernel attempted to access pageable memory (or perhaps completely invalid memory) when the IRQL was too high. The ultimate cause of this problem is almost certainly a driver that has corrupted the system pool.
In most cases, this bug check results if a driver corrupts a small allocation (less than PAGE_SIZE). Larger allocations result in bug check 0xD0 (DRIVER_CORRUPTED_MMPOOL).
Resolution
The !analyze debug extension displays information about the bug check and can be helpful in determining the root cause. If you have recently installed any new software, check to see if it is properly installed. Check for updated drivers on the manufacturer's website.
To debug this error, use the special pool option of Driver Verifier. If this fails to reveal the driver that caused the error, use the Global Flags utility to enable the special pool by pool tag.
For information about the special pool, consult the Driver Verifier section of the Windows Driver Kit.
Article text from the Windows driver documentation (opens in a new tab), by Microsoft, under the CC BY 4.0 (opens in a new tab) licence.
Associated Modules
| Module | Code | Found in | Description |
|---|---|---|---|
| EventCreate.exe | 0xc5 | 78.11011 | %1 |
| KernelBase.dll | 0xc5 | 78.1 | The operating system is not presently configured to run this application. |
| dsreg.dll | 0xc5 | 10 | MDM enrollment for Azure SecureVM failed. The device will be unjoined from Azure AD. MDM Enrollment URL: %1 |
| dsreg.dll | 0xc5 | 11 | MDM enrollment for Microsoft Entra SecureVM failed. The device will be unjoined from Microsoft Entra. MDM Enrollment URL: %1 |
| kernel32.dll | 0xc5 | 78.11011 | The operating system is not presently configured to run this application. |
| nslookup.exe | 0xc5 | 78.11011 | %1!d! min |
| webservices.dll | 0xc5 | 78.11011 | There was an error getting the accept function for the listen socket. |
| 7 entries | |||