NomadThanatos

BSOD

Jun 23rd, 2023 (edited)
172
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.85 KB | None | 0 0
  1. *******************************************************************************
  2. * *
  3. * Bugcheck Analysis *
  4. * *
  5. *******************************************************************************
  6.  
  7. ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
  8. An attempt was made to execute non-executable memory. The guilty driver
  9. is on the stack trace (and is typically the current instruction pointer).
  10. When possible, the guilty driver's name is printed on
  11. the BugCheck screen and saved in KiBugCheckDriver.
  12. Arguments:
  13. Arg1: ffffe1021edac000, Virtual address for the attempted execute.
  14. Arg2: 8a00000afaa009e3, PTE contents.
  15. Arg3: ffff83816ab235a0, (reserved)
  16. Arg4: 0000000000000003, (reserved)
  17.  
  18. Debugging Details:
  19. ------------------
  20.  
  21.  
  22. KEY_VALUES_STRING: 1
  23.  
  24. Key : Analysis.CPU.mSec
  25. Value: 265
  26.  
  27. Key : Analysis.Elapsed.mSec
  28. Value: 1274
  29.  
  30. Key : Analysis.IO.Other.Mb
  31. Value: 0
  32.  
  33. Key : Analysis.IO.Read.Mb
  34. Value: 0
  35.  
  36. Key : Analysis.IO.Write.Mb
  37. Value: 0
  38.  
  39. Key : Analysis.Init.CPU.mSec
  40. Value: 124
  41.  
  42. Key : Analysis.Init.Elapsed.mSec
  43. Value: 5456
  44.  
  45. Key : Analysis.Memory.CommitPeak.Mb
  46. Value: 110
  47.  
  48. Key : Bugcheck.Code.KiBugCheckData
  49. Value: 0xfc
  50.  
  51. Key : Bugcheck.Code.LegacyAPI
  52. Value: 0xfc
  53.  
  54. Key : Dump.Attributes.AsUlong
  55. Value: 1800
  56.  
  57. Key : Dump.Attributes.DiagDataWrittenToHeader
  58. Value: 1
  59.  
  60. Key : Dump.Attributes.ErrorCode
  61. Value: 0
  62.  
  63. Key : Dump.Attributes.LastLine
  64. Value: Dumping physical memory to disk: 100%
  65.  
  66. Key : Dump.Attributes.ProgressPercentage
  67. Value: 100
  68.  
  69. Key : Failure.Bucket
  70. Value: 0xFC_nt!MiCheckSystemNxFault
  71.  
  72. Key : Failure.Hash
  73. Value: {a6ae5288-6b71-974a-9b09-23f14d998164}
  74.  
  75. Key : Hypervisor.Enlightenments.ValueHex
  76. Value: 1417df84
  77.  
  78. Key : Hypervisor.Flags.AnyHypervisorPresent
  79. Value: 1
  80.  
  81. Key : Hypervisor.Flags.ApicEnlightened
  82. Value: 0
  83.  
  84. Key : Hypervisor.Flags.ApicVirtualizationAvailable
  85. Value: 1
  86.  
  87. Key : Hypervisor.Flags.AsyncMemoryHint
  88. Value: 0
  89.  
  90. Key : Hypervisor.Flags.CoreSchedulerRequested
  91. Value: 0
  92.  
  93. Key : Hypervisor.Flags.CpuManager
  94. Value: 1
  95.  
  96. Key : Hypervisor.Flags.DeprecateAutoEoi
  97. Value: 1
  98.  
  99. Key : Hypervisor.Flags.DynamicCpuDisabled
  100. Value: 1
  101.  
  102. Key : Hypervisor.Flags.Epf
  103. Value: 0
  104.  
  105. Key : Hypervisor.Flags.ExtendedProcessorMasks
  106. Value: 1
  107.  
  108. Key : Hypervisor.Flags.HardwareMbecAvailable
  109. Value: 1
  110.  
  111. Key : Hypervisor.Flags.MaxBankNumber
  112. Value: 0
  113.  
  114. Key : Hypervisor.Flags.MemoryZeroingControl
  115. Value: 0
  116.  
  117. Key : Hypervisor.Flags.NoExtendedRangeFlush
  118. Value: 0
  119.  
  120. Key : Hypervisor.Flags.NoNonArchCoreSharing
  121. Value: 1
  122.  
  123. Key : Hypervisor.Flags.Phase0InitDone
  124. Value: 1
  125.  
  126. Key : Hypervisor.Flags.PowerSchedulerQos
  127. Value: 0
  128.  
  129. Key : Hypervisor.Flags.RootScheduler
  130. Value: 0
  131.  
  132. Key : Hypervisor.Flags.SynicAvailable
  133. Value: 1
  134.  
  135. Key : Hypervisor.Flags.UseQpcBias
  136. Value: 0
  137.  
  138. Key : Hypervisor.Flags.Value
  139. Value: 21631230
  140.  
  141. Key : Hypervisor.Flags.ValueHex
  142. Value: 14a10fe
  143.  
  144. Key : Hypervisor.Flags.VpAssistPage
  145. Value: 1
  146.  
  147. Key : Hypervisor.Flags.VsmAvailable
  148. Value: 1
  149.  
  150. Key : Hypervisor.RootFlags.AccessStats
  151. Value: 1
  152.  
  153. Key : Hypervisor.RootFlags.CrashdumpEnlightened
  154. Value: 1
  155.  
  156. Key : Hypervisor.RootFlags.CreateVirtualProcessor
  157. Value: 1
  158.  
  159. Key : Hypervisor.RootFlags.DisableHyperthreading
  160. Value: 0
  161.  
  162. Key : Hypervisor.RootFlags.HostTimelineSync
  163. Value: 1
  164.  
  165. Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
  166. Value: 0
  167.  
  168. Key : Hypervisor.RootFlags.IsHyperV
  169. Value: 1
  170.  
  171. Key : Hypervisor.RootFlags.LivedumpEnlightened
  172. Value: 1
  173.  
  174. Key : Hypervisor.RootFlags.MapDeviceInterrupt
  175. Value: 1
  176.  
  177. Key : Hypervisor.RootFlags.MceEnlightened
  178. Value: 1
  179.  
  180. Key : Hypervisor.RootFlags.Nested
  181. Value: 0
  182.  
  183. Key : Hypervisor.RootFlags.StartLogicalProcessor
  184. Value: 1
  185.  
  186. Key : Hypervisor.RootFlags.Value
  187. Value: 1015
  188.  
  189. Key : Hypervisor.RootFlags.ValueHex
  190. Value: 3f7
  191.  
  192. Key : SecureKernel.HalpHvciEnabled
  193. Value: 1
  194.  
  195. Key : WER.OS.Branch
  196. Value: ni_release
  197.  
  198. Key : WER.OS.Version
  199. Value: 10.0.22621.1
  200.  
  201.  
  202. BUGCHECK_CODE: fc
  203.  
  204. BUGCHECK_P1: ffffe1021edac000
  205.  
  206. BUGCHECK_P2: 8a00000afaa009e3
  207.  
  208. BUGCHECK_P3: ffff83816ab235a0
  209.  
  210. BUGCHECK_P4: 3
  211.  
  212. FILE_IN_CAB: MEMORY.DMP
  213.  
  214. TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
  215.  
  216.  
  217. DUMP_FILE_ATTRIBUTES: 0x1800
  218.  
  219. PROCESS_NAME: System
  220.  
  221. TRAP_FRAME: ffff83816ab235a0 -- (.trap 0xffff83816ab235a0)
  222. NOTE: The trap frame does not contain all registers.
  223. Some register values may be zeroed or incorrect.
  224. rax=ffff937cb8a00000 rbx=0000000000000000 rcx=00000000002e0484
  225. rdx=0000000000b81210 rsi=0000000000000000 rdi=0000000000000000
  226. rip=ffffe1021edac000 rsp=ffff83816ab23730 rbp=00000000ff7820ff
  227. r8=00000000ff7820ff r9=ffff83816ab236c0 r10=fffff8053ae43440
  228. r11=ffff83816ab236b0 r12=0000000000000000 r13=0000000000000000
  229. r14=0000000000000000 r15=0000000000000000
  230. iopl=0 nv up ei ng nz na po nc
  231. ffffe102`1edac000 4832883b05f8ff xor cl,byte ptr [rax-7FAC5h] ds:ffff937c`b898053b=6f
  232. Resetting default scope
  233.  
  234. STACK_TEXT:
  235. ffff8381`6ab233e8 fffff805`088e42a8 : 00000000`000000fc ffffe102`1edac000 8a00000a`faa009e3 ffff8381`6ab235a0 : nt!KeBugCheckEx
  236. ffff8381`6ab233f0 fffff805`088de502 : 00000000`00000011 00000000`00000003 00000000`00000000 ffff8381`6ab234c0 : nt!MiCheckSystemNxFault+0x194c98
  237. ffff8381`6ab23430 fffff805`0863401f : 00000000`00000000 00000000`00000011 ffff8381`6ab23539 00000000`00000000 : nt!MiRaisedIrqlFault+0x1a09a2
  238. ffff8381`6ab23480 fffff805`0883ce29 : 00000000`00000000 00000000`00b8101c ffffe102`28485000 00000000`00000000 : nt!MmAccessFault+0x3af
  239. ffff8381`6ab235a0 ffffe102`1edac000 : 00000000`ff7820ff 00000000`00000000 00000000`00000000 fffff805`3af0d2db : nt!KiPageFault+0x369
  240. ffff8381`6ab23730 00000000`ff7820ff : 00000000`00000000 00000000`00000000 fffff805`3af0d2db ffffe102`00000000 : 0xffffe102`1edac000
  241. ffff8381`6ab23738 00000000`00000000 : 00000000`00000000 fffff805`3af0d2db ffffe102`00000000 ffffe102`1edac000 : 0xff7820ff
  242.  
  243.  
  244. SYMBOL_NAME: nt!MiCheckSystemNxFault+194c98
  245.  
  246. MODULE_NAME: nt
  247.  
  248. STACK_COMMAND: .cxr; .ecxr ; kb
  249.  
  250. IMAGE_NAME: ntkrnlmp.exe
  251.  
  252. BUCKET_ID_FUNC_OFFSET: 194c98
  253.  
  254. FAILURE_BUCKET_ID: 0xFC_nt!MiCheckSystemNxFault
  255.  
  256. OS_VERSION: 10.0.22621.1
  257.  
  258. BUILDLAB_STR: ni_release
  259.  
  260. OSPLATFORM_TYPE: x64
  261.  
  262. OSNAME: Windows 10
  263.  
  264. FAILURE_ID_HASH: {a6ae5288-6b71-974a-9b09-23f14d998164}
  265.  
  266. Followup: MachineOwner
  267. ---------
Advertisement
Add Comment
Please, Sign In to add comment