Windows Defender crashing a lot (15 times in the last 5 hours)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 7.000000000000001%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETW%3C/text%3E%3C/svg%3E)
Timothy Wilhite
0
Reputation points
Microsoft Defender (MsMpEng.exe) is repeatedly crashing with mpengine.dll faults and shadow stack violations. Crashes occur both during gaming and while idle. Crash dumps are being generated in C:\CrashDumps. The Defender engine version is 1.1.26030.3008. I have already reset Defender signatures and confirmed system file integrity (sfc /scannow and DISM). Hardware diagnostics show no errors. A DMP file is too big to post, but I am happy to provide them, or post a copy+paste from WinDBG if either is at all helpful.
Thanks for any assistance; I'm at my wits end.
Windows for home | Windows 11 | Performance and system failures
2 answers
Sort by: Most helpful
-
Timothy Wilhite 0 Reputation points
2026-04-25T06:16:12.1266667+00:00 -
Timothy Wilhite 0 Reputation points
2026-04-25T06:17:37.6266667+00:00 Hi Dave,
I was playing various games, some were on Steam, others were not. I was able to confirm that crashes happen whether using Steam or not. I did have one crash generate a DMP file while I was simply watching a youtube video, but just the one: all the rest were while playing games. Weirdly, I'm trying to post the WinDBG copy and paste but it's saying I'm not authorized to do so, even after refreshing several times.
-
Timothy Wilhite 0 Reputation points
2026-04-25T06:20:00.42+00:00 0:047> !analyze -v ................................................................ ........................... Loading unloaded module list ..................................... ******************************************************************************* * * * Exception Analysis * * * ******************************************************************************* KEY_VALUES_STRING: 1 Key : AV.Type Value: Read Key : Analysis.CPU.mSec Value: 312 Key : Analysis.Elapsed.mSec Value: 727 Key : Analysis.IO.Other.Mb Value: 0 Key : Analysis.IO.Read.Mb Value: 1 Key : Analysis.IO.Write.Mb Value: 0 Key : Analysis.Init.CPU.mSec Value: 125 Key : Analysis.Init.Elapsed.mSec Value: 3477 Key : Analysis.Memory.CommitPeak.Mb Value: 95 Key : Analysis.Version.DbgEng Value: 10.0.29547.1002 Key : Analysis.Version.Description Value: 10.2602.27.2 amd64fre Key : Analysis.Version.Ext Value: 1.2602.27.2 Key : Failure.Bucket Value: INVALID_POINTER_READ_c0000005_mpengine.dll!Unknown Key : Failure.Exception.Code Value: 0xc0000005 Key : Failure.Exception.IP.Address Value: 0x7ffcb9dfac82 Key : Failure.Exception.IP.Module Value: mpengine Key : Failure.Exception.IP.Offset Value: 0x2ac82 Key : Failure.Hash Value: {62d27a8e-047e-eb78-f3f9-dbd66d5cbd1d} Key : Failure.ProblemClass.Primary Value: INVALID_POINTER_READ Key : Faulting.IP.Type Value: Paged Key : Timeline.OS.Boot.DeltaSec Value: 1562 Key : Timeline.Process.Start.DeltaSec Value: 1554 Key : WER.OS.Branch Value: ge_release Key : WER.OS.Version Value: 10.0.26100.1 Key : WER.Process.Version Value: 4.18.26030.3011 FILE_IN_CAB: MsMpEng.exe.5116.dmp NTGLOBALFLAG: 0 APPLICATION_VERIFIER_FLAGS: 0 CONTEXT: (.ecxr) rax=0000c8ae037ca3cf rbx=000001ec2fc8568c rcx=000001ec30a33f28 rdx=000001ec303744b8 rsi=000001ec334b1b68 rdi=000001ec303744b8 rip=00007ffcb9dfac82 rsp=000000eaccff8d50 rbp=0000000000000001 r8=000001ec334b1b68 r9=000001ec30a33f28 r10=000001ec334b2b98 r11=0000000000000000 r12=00007ffcba9877a0 r13=000001ec30a34e88 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 mpengine+0x2ac82: 00007ffc`b9dfac82 4833c4 xor rax,rsp Resetting default scope EXCEPTION_RECORD: (.exr -1) ExceptionAddress: 00007ffcb9dfac82 (mpengine+0x000000000002ac82) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff PROCESS_NAME: MsMpEng.exe READ_ADDRESS: ffffffffffffffff ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s. EXCEPTION_CODE_STR: c0000005 EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: ffffffffffffffff STACK_TEXT: 000000ea`ccff8d50 00007ffc`b9dfb27e : 000001ec`2fc8568c 00000000`00000001 00000000`00000040 00000000`00000060 : mpengine+0x2ac82 000000ea`ccff8e50 00007ffc`b9dfe127 : 000001ec`30f44090 000000ea`ccff9050 000001ec`30a33f28 000001ec`30a33f28 : mpengine+0x2b27e 000000ea`ccff8f50 00007ffc`b9dfb967 : 000001ec`30a33f28 000001ec`30a33f28 00000000`00000001 000000ea`ccff9480 : mpengine+0x2e127 000000ea`ccff9270 00007ffc`b9e0e6dc : 000001ec`30a33f28 00000000`00000001 000000ea`ccff9909 00000000`00000000 : mpengine+0x2b967 000000ea`ccff92a0 00007ffc`b9e0d162 : 000001ec`30a33f28 00000000`00000001 00007ffc`ba9877a0 00007ffc`b9e2cb53 : mpengine+0x3e6dc 000000ea`ccff9310 00007ffc`b9e0bdc5 : 000001ec`334ac6f8 000000ea`ccff9909 000001ec`30f44070 00000000`00000001 : mpengine+0x3d162 000000ea`ccff9540 00007ffc`b9e52cd6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine+0x3bdc5 000000ea`ccff98b0 00007ffc`ba1bb713 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : mpengine+0x82cd6 000000ea`ccff9970 00007ffc`ba1b8460 : 000001ec`3b8fb098 000001ec`00000000 000001ec`3b8faef8 000000ea`ccffad0c : mpengine+0x3eb713 000000ea`ccff9ef0 00007ffc`b9ef1904 : 000001ec`34e3dc80 000000ea`ccffd000 00000000`00000000 000001ec`3d0c1060 : mpengine+0x3e8460 000000ea`ccff9f20 00007ffc`b9eeffda : 00000000`0000001f 00007ffc`00000000 000001ec`3d0c1540 000001ec`3d0c1060 : mpengine+0x121904 000000ea`ccffcf00 00007ffc`b9eee245 : 000001ec`34e3dc00 000001ec`34e3dc01 000001ec`3d0c3fe8 000001ec`3d0c3fe8 : mpengine+0x11ffda 000000ea`ccffd060 00007ffc`b9fc9875 : 000001ec`33525c60 00007ffc`b9e8a520 000001ec`3d0c1060 000000ea`ccffd140 : mpengine+0x11e245 000000ea`ccffd0d0 00007ffc`b9fc7d96 : 000001ec`3bb83f80 000001ec`3bb83f80 00000000`00000000 000000ea`ccffd1e0 : mpengine+0x1f9875 000000ea`ccffd160 00007ffc`b9e8252e : 00000000`00000000 00000000`00000000 000000ea`ccffd760 00000000`00000000 : mpengine+0x1f7d96 000000ea`ccffd220 00007ffc`ba110b95 : 00000000`00000000 000000ea`ccffd760 000000ea`ccffd840 000000ea`ccffd401 : mpengine+0xb252e 000000ea`ccffd2d0 00007ffc`ba1cf099 : 000000ea`ccffd840 00007ffc`ba76299f 00000000`00000029 000000ea`ccffd858 : mpengine+0x340b95 000000ea`ccffd560 00007ffc`ba273221 : 00007ffc`badb6260 000001ec`3c7d2400 000001ec`302c2b40 00000000`00000001 : mpengine+0x3ff099 000000ea`ccffd800 00007ffc`ba274286 : 00000000`00000000 00007ffc`ba99f8b0 00007ffc`ba9dc490 000000ea`ccffd990 : mpengine!rsignal+0x314b1 000000ea`ccffd880 00007ffc`ba27341c : 000001ec`00000000 000001ec`3c189ee0 00000000`00000000 000001ec`302c2b40 : mpengine!rsignal+0x32516 000000ea`ccffda60 00007ffc`ba0cf67c : 00000000`00000000 00000000`000003e3 00000000`00000000 000001ec`302c2b40 : mpengine!rsignal+0x316ac 000000ea`ccffdb90 00007ffc`ba521a2e : 000001ec`12a00340 00007ffc`baa0b3d8 000001ec`2507000a 00000000`00000000 : mpengine+0x2ff67c 000000ea`ccffdd40 00007ffc`ba2710cd : 000001ec`3b7ef1c0 000001ec`349f5490 000000ea`ccffdee0 00000004`57587122 : mpengine!_rsignal+0x269a0e 000000ea`ccffdde0 00007ffc`ba270264 : 000001ec`3b7ef1c0 000001ec`3b7ef1c0 00000000`00000000 00000000`00000000 : mpengine!rsignal+0x2f35d 000000ea`ccffde50 00007ffc`ba26fc30 : 00007ffc`baa810e0 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine!rsignal+0x2e4f4 000000ea`ccffdee0 00007ffc`ba529564 : 00000000`00000030 000000ea`ccffe050 00000000`00000000 00000000`00000600 : mpengine!rsignal+0x2dec0 000000ea`ccffdf20 00007ffc`ba529145 : 00000000`00000083 000001ec`12b0e4a0 00007ffc`baa8d558 00007ffc`ba02c56e : mpengine!_rsignal+0x271544 000000ea`ccffe0b0 00007ffc`ba21d852 : 00007ffc`ba9bd048 000001ec`3c7cc2b0 000001ec`12b7eed8 00007ffc`ba02973c : mpengine!_rsignal+0x271125 000000ea`ccffe160 00007ffc`ba50278a : 00007ffc`badb6260 000000ea`ccffe979 00000000`00000000 00000000`00010001 : mpengine!MpContainerGetNext+0x3fe2 000000ea`ccffe2b0 00007ffc`ba87a809 : 000001ec`30dc35f0 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine!_rsignal+0x24a76a 000000ea`ccffe4b0 00007ffc`ba2c5aa5 : 000001ec`2ebfd5a0 00007ffc`e6de6268 000001ec`30dc35f0 00007ffc`badb6260 : mpengine!MpBootStrap+0x8699 000000ea`ccffe8c0 00007ffc`ba1cf861 : 00000000`00000004 00000000`00000078 000001ec`2ebfd5a0 00000000`0000800c : mpengine!_rsignal+0xda85 000000ea`ccffe9e0 00007ffc`ba2b902c : 00000002`fffffffe 00610048`00000000 000000ea`ccffee9a 00520001`00000003 : mpengine+0x3ff861 000000ea`ccffec80 00007ffc`ba2b8104 : 00000000`00000000 000000ea`ccfff5f0 00000000`00000000 00000000`00000000 : mpengine!_rsignal+0x100c 000000ea`ccffece0 00007ffc`e688e395 : 00000000`00004026 00000000`00000078 000001ec`343ecac0 000059d5`36c0813f : mpengine!_rsignal+0xe4 000000ea`ccfff4d0 00007ffc`e68d6b3e : 000001ec`343ecac0 000001ec`343ecac0 000001ec`343ecac0 00000000`00000000 : MpSvc+0x3e395 000000ea`ccfff590 00007ffc`e698509a : 000001ec`2eb72780 000001ec`2eb72780 000001ec`12882480 00007ffc`e6cbd550 : MpSvc+0x86b3e 000000ea`ccfff620 00007ffc`e6984f33 : 00000000`00000000 000001ec`2eb72780 000001ec`121ccb90 00000000`00000000 : MpSvc+0x13509a 000000ea`ccfff690 00007ffc`e69b9a9d : 00000000`00000001 00007ffd`034db2a0 000001ec`2eb72780 000001ec`2eb72790 : MpSvc+0x134f33 000000ea`ccfff6d0 00007ffc`e5a0be98 : 00000000`00000000 000000ea`ccfffab8 00000000`00000000 00000000`00000000 : MpSvc+0x169a9d 000000ea`ccfff700 00007ffc`e5a0bd83 : 000001ec`12882480 000001ec`12882490 00000000`00000000 000001ec`12882480 : MpClient+0x2be98 000000ea`ccfff750 00007ffd`03475230 : 000000ea`ccfffab8 000000ea`ccfff8c0 00000000`7ffe0386 00007ffd`0341c81e : MpClient+0x2bd83 000000ea`ccfff7c0 00007ffd`03476281 : 00000000`00000000 00000000`00000001 00007ffd`034da410 00000000`00000000 : ntdll!TppWorkpExecuteCallback+0x4d0 000000ea`ccfff920 00007ffd`019fe8d7 : 00000000`00000800 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x801 000000ea`ccfffc80 00007ffd`0348c3fc : 00000000`00000000 00000000`00000000 00000000`00000001 000000ea`cd07f000 : kernel32!BaseThreadInitThunk+0x17 000000ea`ccfffcb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x2c IP_IN_PAGED_CODE: mpengine+2ac82 00007ffc`b9dfac82 4833c4 xor rax,rsp SYMBOL_NAME: mpengine+2ac82 MODULE_NAME: mpengine IMAGE_NAME: mpengine.dll STACK_COMMAND: ~47s; .ecxr ; kb FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_mpengine.dll!Unknown OS_VERSION: 10.0.26100.1 BUILDLAB_STR: ge_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 IMAGE_VERSION: 1.1.26030.3008 FAILURE_ID_HASH: {62d27a8e-047e-eb78-f3f9-dbd66d5cbd1d} Followup: MachineOwner --------- -
Deleted
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
-
DaveM121 882.8K Reputation points Independent Advisor2026-04-25T06:22:21.3166667+00:00 If you analyze the dump file in WinDBG, then select the whole output and copy it, are you then able to paste that into your next reply.
-
Timothy Wilhite 0 Reputation points
2026-04-25T06:23:18.3266667+00:00 ******************************************************************************* * * * Exception Analysis * * * ******************************************************************************* KEY_VALUES_STRING: 1 Key : AV.Type Value: Read Key : Analysis.CPU.mSec Value: 312 Key : Analysis.Elapsed.mSec Value: 727 Key : Analysis.IO.Other.Mb Value: 0 Key : Analysis.IO.Read.Mb Value: 1 Key : Analysis.IO.Write.Mb Value: 0 Key : Analysis.Init.CPU.mSec Value: 125 Key : Analysis.Init.Elapsed.mSec Value: 3477 Key : Analysis.Memory.CommitPeak.Mb Value: 95 Key : Analysis.Version.DbgEng Value: 10.0.29547.1002 Key : Analysis.Version.Description Value: 10.2602.27.2 amd64fre Key : Analysis.Version.Ext Value: 1.2602.27.2 Key : Failure.Bucket Value: INVALID_POINTER_READ_c0000005_mpengine.dll!Unknown Key : Failure.Exception.Code Value: 0xc0000005 Key : Failure.Exception.IP.Address Value: 0x7ffcb9dfac82 Key : Failure.Exception.IP.Module Value: mpengine Key : Failure.Exception.IP.Offset Value: 0x2ac82 Key : Failure.Hash Value: {62d27a8e-047e-eb78-f3f9-dbd66d5cbd1d} Key : Failure.ProblemClass.Primary Value: INVALID_POINTER_READ Key : Faulting.IP.Type Value: Paged Key : Timeline.OS.Boot.DeltaSec Value: 1562 Key : Timeline.Process.Start.DeltaSec Value: 1554 Key : WER.OS.Branch Value: ge_release Key : WER.OS.Version Value: 10.0.26100.1 Key : WER.Process.Version Value: 4.18.26030.3011 FILE_IN_CAB: MsMpEng.exe.5116.dmp NTGLOBALFLAG: 0 APPLICATION_VERIFIER_FLAGS: 0 CONTEXT: (.ecxr) rax=0000c8ae037ca3cf rbx=000001ec2fc8568c rcx=000001ec30a33f28 rdx=000001ec303744b8 rsi=000001ec334b1b68 rdi=000001ec303744b8 rip=00007ffcb9dfac82 rsp=000000eaccff8d50 rbp=0000000000000001 r8=000001ec334b1b68 r9=000001ec30a33f28 r10=000001ec334b2b98 r11=0000000000000000 r12=00007ffcba9877a0 r13=000001ec30a34e88 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe nc cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 mpengine+0x2ac82: 00007ffc`b9dfac82 4833c4 xor rax,rsp Resetting default scope EXCEPTION_RECORD: (.exr -1) ExceptionAddress: 00007ffcb9dfac82 (mpengine+0x000000000002ac82) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff PROCESS_NAME: MsMpEng.exe READ_ADDRESS: ffffffffffffffff ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s. EXCEPTION_CODE_STR: c0000005 EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: ffffffffffffffff STACK_TEXT: 000000ea`ccff8d50 00007ffc`b9dfb27e : 000001ec`2fc8568c 00000000`00000001 00000000`00000040 00000000`00000060 : mpengine+0x2ac82 000000ea`ccff8e50 00007ffc`b9dfe127 : 000001ec`30f44090 000000ea`ccff9050 000001ec`30a33f28 000001ec`30a33f28 : mpengine+0x2b27e 000000ea`ccff8f50 00007ffc`b9dfb967 : 000001ec`30a33f28 000001ec`30a33f28 00000000`00000001 000000ea`ccff9480 : mpengine+0x2e127 000000ea`ccff9270 00007ffc`b9e0e6dc : 000001ec`30a33f28 00000000`00000001 000000ea`ccff9909 00000000`00000000 : mpengine+0x2b967 000000ea`ccff92a0 00007ffc`b9e0d162 : 000001ec`30a33f28 00000000`00000001 00007ffc`ba9877a0 00007ffc`b9e2cb53 : mpengine+0x3e6dc 000000ea`ccff9310 00007ffc`b9e0bdc5 : 000001ec`334ac6f8 000000ea`ccff9909 000001ec`30f44070 00000000`00000001 : mpengine+0x3d162 000000ea`ccff9540 00007ffc`b9e52cd6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine+0x3bdc5 000000ea`ccff98b0 00007ffc`ba1bb713 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : mpengine+0x82cd6 000000ea`ccff9970 00007ffc`ba1b8460 : 000001ec`3b8fb098 000001ec`00000000 000001ec`3b8faef8 000000ea`ccffad0c : mpengine+0x3eb713 000000ea`ccff9ef0 00007ffc`b9ef1904 : 000001ec`34e3dc80 000000ea`ccffd000 00000000`00000000 000001ec`3d0c1060 : mpengine+0x3e8460 000000ea`ccff9f20 00007ffc`b9eeffda : 00000000`0000001f 00007ffc`00000000 000001ec`3d0c1540 000001ec`3d0c1060 : mpengine+0x121904 000000ea`ccffcf00 00007ffc`b9eee245 : 000001ec`34e3dc00 000001ec`34e3dc01 000001ec`3d0c3fe8 000001ec`3d0c3fe8 : mpengine+0x11ffda 000000ea`ccffd060 00007ffc`b9fc9875 : 000001ec`33525c60 00007ffc`b9e8a520 000001ec`3d0c1060 000000ea`ccffd140 : mpengine+0x11e245 000000ea`ccffd0d0 00007ffc`b9fc7d96 : 000001ec`3bb83f80 000001ec`3bb83f80 00000000`00000000 000000ea`ccffd1e0 : mpengine+0x1f9875 000000ea`ccffd160 00007ffc`b9e8252e : 00000000`00000000 00000000`00000000 000000ea`ccffd760 00000000`00000000 : mpengine+0x1f7d96 000000ea`ccffd220 00007ffc`ba110b95 : 00000000`00000000 000000ea`ccffd760 000000ea`ccffd840 000000ea`ccffd401 : mpengine+0xb252e 000000ea`ccffd2d0 00007ffc`ba1cf099 : 000000ea`ccffd840 00007ffc`ba76299f 00000000`00000029 000000ea`ccffd858 : mpengine+0x340b95 000000ea`ccffd560 00007ffc`ba273221 : 00007ffc`badb6260 000001ec`3c7d2400 000001ec`302c2b40 00000000`00000001 : mpengine+0x3ff099 000000ea`ccffd800 00007ffc`ba274286 : 00000000`00000000 00007ffc`ba99f8b0 00007ffc`ba9dc490 000000ea`ccffd990 : mpengine!rsignal+0x314b1 000000ea`ccffd880 00007ffc`ba27341c : 000001ec`00000000 000001ec`3c189ee0 00000000`00000000 000001ec`302c2b40 : mpengine!rsignal+0x32516 000000ea`ccffda60 00007ffc`ba0cf67c : 00000000`00000000 00000000`000003e3 00000000`00000000 000001ec`302c2b40 : mpengine!rsignal+0x316ac 000000ea`ccffdb90 00007ffc`ba521a2e : 000001ec`12a00340 00007ffc`baa0b3d8 000001ec`2507000a 00000000`00000000 : mpengine+0x2ff67c 000000ea`ccffdd40 00007ffc`ba2710cd : 000001ec`3b7ef1c0 000001ec`349f5490 000000ea`ccffdee0 00000004`57587122 : mpengine!_rsignal+0x269a0e 000000ea`ccffdde0 00007ffc`ba270264 : 000001ec`3b7ef1c0 000001ec`3b7ef1c0 00000000`00000000 00000000`00000000 : mpengine!rsignal+0x2f35d 000000ea`ccffde50 00007ffc`ba26fc30 : 00007ffc`baa810e0 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine!rsignal+0x2e4f4 000000ea`ccffdee0 00007ffc`ba529564 : 00000000`00000030 000000ea`ccffe050 00000000`00000000 00000000`00000600 : mpengine!rsignal+0x2dec0 000000ea`ccffdf20 00007ffc`ba529145 : 00000000`00000083 000001ec`12b0e4a0 00007ffc`baa8d558 00007ffc`ba02c56e : mpengine!_rsignal+0x271544 000000ea`ccffe0b0 00007ffc`ba21d852 : 00007ffc`ba9bd048 000001ec`3c7cc2b0 000001ec`12b7eed8 00007ffc`ba02973c : mpengine!_rsignal+0x271125 000000ea`ccffe160 00007ffc`ba50278a : 00007ffc`badb6260 000000ea`ccffe979 00000000`00000000 00000000`00010001 : mpengine!MpContainerGetNext+0x3fe2 000000ea`ccffe2b0 00007ffc`ba87a809 : 000001ec`30dc35f0 00000000`00000000 00000000`00000000 00000000`00000000 : mpengine!_rsignal+0x24a76a 000000ea`ccffe4b0 00007ffc`ba2c5aa5 : 000001ec`2ebfd5a0 00007ffc`e6de6268 000001ec`30dc35f0 00007ffc`badb6260 : mpengine!MpBootStrap+0x8699 000000ea`ccffe8c0 00007ffc`ba1cf861 : 00000000`00000004 00000000`00000078 000001ec`2ebfd5a0 00000000`0000800c : mpengine!_rsignal+0xda85 000000ea`ccffe9e0 00007ffc`ba2b902c : 00000002`fffffffe 00610048`00000000 000000ea`ccffee9a 00520001`00000003 : mpengine+0x3ff861 000000ea`ccffec80 00007ffc`ba2b8104 : 00000000`00000000 000000ea`ccfff5f0 00000000`00000000 00000000`00000000 : mpengine!_rsignal+0x100c 000000ea`ccffece0 00007ffc`e688e395 : 00000000`00004026 00000000`00000078 000001ec`343ecac0 000059d5`36c0813f : mpengine!_rsignal+0xe4 000000ea`ccfff4d0 00007ffc`e68d6b3e : 000001ec`343ecac0 000001ec`343ecac0 000001ec`343ecac0 00000000`00000000 : MpSvc+0x3e395 000000ea`ccfff590 00007ffc`e698509a : 000001ec`2eb72780 000001ec`2eb72780 000001ec`12882480 00007ffc`e6cbd550 : MpSvc+0x86b3e 000000ea`ccfff620 00007ffc`e6984f33 : 00000000`00000000 000001ec`2eb72780 000001ec`121ccb90 00000000`00000000 : MpSvc+0x13509a 000000ea`ccfff690 00007ffc`e69b9a9d : 00000000`00000001 00007ffd`034db2a0 000001ec`2eb72780 000001ec`2eb72790 : MpSvc+0x134f33 000000ea`ccfff6d0 00007ffc`e5a0be98 : 00000000`00000000 000000ea`ccfffab8 00000000`00000000 00000000`00000000 : MpSvc+0x169a9d 000000ea`ccfff700 00007ffc`e5a0bd83 : 000001ec`12882480 000001ec`12882490 00000000`00000000 000001ec`12882480 : MpClient+0x2be98 000000ea`ccfff750 00007ffd`03475230 : 000000ea`ccfffab8 000000ea`ccfff8c0 00000000`7ffe0386 00007ffd`0341c81e : MpClient+0x2bd83 000000ea`ccfff7c0 00007ffd`03476281 : 00000000`00000000 00000000`00000001 00007ffd`034da410 00000000`00000000 : ntdll!TppWorkpExecuteCallback+0x4d0 000000ea`ccfff920 00007ffd`019fe8d7 : 00000000`00000800 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x801 000000ea`ccfffc80 00007ffd`0348c3fc : 00000000`00000000 00000000`00000000 00000000`00000001 000000ea`cd07f000 : kernel32!BaseThreadInitThunk+0x17 000000ea`ccfffcb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x2c IP_IN_PAGED_CODE: mpengine+2ac82 00007ffc`b9dfac82 4833c4 xor rax,rsp SYMBOL_NAME: mpengine+2ac82 MODULE_NAME: mpengine IMAGE_NAME: mpengine.dll STACK_COMMAND: ~47s; .ecxr ; kb FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_mpengine.dll!Unknown OS_VERSION: 10.0.26100.1 BUILDLAB_STR: ge_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 IMAGE_VERSION: 1.1.26030.3008 FAILURE_ID_HASH: {62d27a8e-047e-eb78-f3f9-dbd66d5cbd1d} -
Timothy Wilhite 0 Reputation points
2026-04-25T06:25:11.4633333+00:00 Hi Dave, apparently not. I can see it in the reply window, and when I add comment it looks like it goes through, but when I refresh it says deleted due to code of conduct (you might be able to see that, first time using this forum)
-
DaveM121 882.8K Reputation points Independent Advisor
2026-04-25T06:26:31.7833333+00:00 Actually, it is okay, the Spam filter on this forum is very sensitive, I was able to undelete your dump file printout.There is no underlying cause of the Defender crashes listed, the best option would be to perform an in-place repair with the Windows 11 ISO.
Please ensure you download the ISO in the same language as you use for the Windows UI, follow the steps, this is then not like re-installing Windows, it is just like an update and your personal files, settings and installed software will not be affected.
Click this link:
https://www.microsoft.com/software-download/windows11
to download the Windows 11 ISO
When the ISO file completes downloading
Disconnect from the Internet
Disconnect all external devices with the exception of a mouse or keyboard.
Temporarily disable any 3rd party Anti-virus you may have installed
Then, in Windows File Explorer, double click the ISO and then run Setup.exe and select the Install option.
Very Important - ensure you select the option to keep your files and apps.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 23%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
RSC 0 Reputation points2026-04-30T03:33:14.9866667+00:00 Im having the same issue. reset the platform and no joy. it litterally just crashes when scanning or just sitting there, Im guessing a buggy engine causing the crashes. Even would crash on a clean install of windows when i started installing programs. This is a microsoft problem, not a computer problem. save your time
Sign in to comment -
-
DaveM121 882.8K Reputation points Independent Advisor
2026-04-25T05:51:48.12+00:00 1
Please post a copy and paste of the full output from the WinDBG window.
2
Click your Start Button, type winver and hit Enter
Please provide a screenshot of the resulting dialog.
3
When Defender is crashing, what are you doing on your PC, are you using one specific app or game.