what in this dump file caused BSOD?

vincent zapata 0 Reputation points
2025-01-25T02:11:26.0366667+00:00

Hello,

I am trying to figure out what caused The BSOD on my HP laptop. I usually get the BSOD about three times a month. Hopfully its something I can fix. Any help in explaining the below would be greatly appreciated. Thank you everyone!

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except.

Typically the address is just plain bad or it is pointing at freed memory.

Arguments:

Arg1: ffffe4878a50ad10, memory referenced.

Arg2: 0000000000000002, X64: bit 0 set if the fault was due to a not-present PTE.

bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the processor decided the fault was due to a corrupted PTE.

bit 4 is set if the fault was due to attempted execute of a no-execute PTE.

- ARM64: bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the fault was due to attempted execute of a no-execute PTE.

Arg3: fffff8055ebb38f3, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

Debugging Details:


KEY_VALUES_STRING: 1

Key  : AV.Type

Value: Write

Key  : Analysis.CPU.mSec

Value: 1671

Key  : Analysis.Elapsed.mSec

Value: 2251

Key  : Analysis.IO.Other.Mb

Value: 6

Key  : Analysis.IO.Read.Mb

Value: 1

Key  : Analysis.IO.Write.Mb

Value: 23

Key  : Analysis.Init.CPU.mSec

Value: 859

Key  : Analysis.Init.Elapsed.mSec

Value: 26251

Key  : Analysis.Memory.CommitPeak.Mb

Value: 91

Key  : Analysis.Version.DbgEng

Value: 10.0.27725.1000

Key  : Analysis.Version.Description

Value: 10.2408.27.01 amd64fre

Key  : Analysis.Version.Ext

Value: 1.2408.27.1

Key  : Bugcheck.Code.LegacyAPI

Value: 0x50

Key  : Bugcheck.Code.TargetModel

Value: 0x50

Key  : Failure.Bucket

Value: AV_W_(null)_nllNetHub!unknown_function

Key  : Failure.Hash

Value: {2531021e-291c-3868-235d-9302c12f0cce}

Key  : Hypervisor.Enlightenments.ValueHex

Value: 7497cf94

Key  : Hypervisor.Flags.AnyHypervisorPresent

Value: 1

Key  : Hypervisor.Flags.ApicEnlightened

Value: 1

Key  : Hypervisor.Flags.ApicVirtualizationAvailable

Value: 0

Key  : Hypervisor.Flags.AsyncMemoryHint

Value: 0

Key  : Hypervisor.Flags.CoreSchedulerRequested

Value: 0

Key  : Hypervisor.Flags.CpuManager

Value: 1

Key  : Hypervisor.Flags.DeprecateAutoEoi

Value: 0

Key  : Hypervisor.Flags.DynamicCpuDisabled

Value: 1

Key  : Hypervisor.Flags.Epf

Value: 0

Key  : Hypervisor.Flags.ExtendedProcessorMasks

Value: 1

Key  : Hypervisor.Flags.HardwareMbecAvailable

Value: 1

Key  : Hypervisor.Flags.MaxBankNumber

Value: 0

Key  : Hypervisor.Flags.MemoryZeroingControl

Value: 0

Key  : Hypervisor.Flags.NoExtendedRangeFlush

Value: 0

Key  : Hypervisor.Flags.NoNonArchCoreSharing

Value: 1

Key  : Hypervisor.Flags.Phase0InitDone

Value: 1

Key  : Hypervisor.Flags.PowerSchedulerQos

Value: 0

Key  : Hypervisor.Flags.RootScheduler

Value: 0

Key  : Hypervisor.Flags.SynicAvailable

Value: 1

Key  : Hypervisor.Flags.UseQpcBias

Value: 0

Key  : Hypervisor.Flags.Value

Value: 38408431

Key  : Hypervisor.Flags.ValueHex

Value: 24a10ef

Key  : Hypervisor.Flags.VpAssistPage

Value: 1

Key  : Hypervisor.Flags.VsmAvailable

Value: 1

Key  : Hypervisor.RootFlags.AccessStats

Value: 1

Key  : Hypervisor.RootFlags.CrashdumpEnlightened

Value: 1

Key  : Hypervisor.RootFlags.CreateVirtualProcessor

Value: 1

Key  : Hypervisor.RootFlags.DisableHyperthreading

Value: 0

Key  : Hypervisor.RootFlags.HostTimelineSync

Value: 1

Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled

Value: 0

Key  : Hypervisor.RootFlags.IsHyperV

Value: 1

Key  : Hypervisor.RootFlags.LivedumpEnlightened

Value: 1

Key  : Hypervisor.RootFlags.MapDeviceInterrupt

Value: 1

Key  : Hypervisor.RootFlags.MceEnlightened

Value: 1

Key  : Hypervisor.RootFlags.Nested

Value: 0

Key  : Hypervisor.RootFlags.StartLogicalProcessor

Value: 1

Key  : Hypervisor.RootFlags.Value

Value: 1015

Key  : Hypervisor.RootFlags.ValueHex

Value: 3f7

Key  : WER.OS.Branch

Value: ge_release

Key  : WER.OS.Version

Value: 10.0.26100.1

BUGCHECK_CODE: 50

BUGCHECK_P1: ffffe4878a50ad10

BUGCHECK_P2: 2

BUGCHECK_P3: fffff8055ebb38f3

BUGCHECK_P4: 2

FILE_IN_CAB: 012325-13265-01.dmp

TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b

FAULTING_THREAD: ffffe4878735c040

READ_ADDRESS: fffff805ca3c34b0: Unable to get MiVisibleState

Unable to get NonPagedPoolStart

Unable to get NonPagedPoolEnd

Unable to get PagedPoolStart

Unable to get PagedPoolEnd

unable to get nt!MmSpecialPagesInUse

ffffe4878a50ad10

MM_INTERNAL_CODE: 2

IMAGE_NAME: nllNetHub.sys

MODULE_NAME: nllNetHub

FAULTING_MODULE: fffff8055eb90000 nllNetHub

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: SearchHost.exe

TRAP_FRAME: ffffe30240ba5c40 -- (.trap 0xffffe30240ba5c40)

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=0000000000000000 rbx=0000000000000000 rcx=7a514ca688990000

rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8055ebb38f3 rsp=ffffe30240ba5dd0 rbp=ffffe30240ba5e59

r8=0000000000000001 r9=0000000000000000 r10=fffff80559b970a8

r11=0000000000000061 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0 nv up ei ng nz na po nc

nllNetHub+0x238f3:

fffff8055ebb38f3 897b40 mov dword ptr [rbx+40h],edi ds:0000000000000040=????????

Resetting default scope

STACK_TEXT:

ffffe30240ba59d8 fffff805c96d3c85 : 0000000000000050 ffffe4878a50ad10 0000000000000002 ffffe30240ba5c40 : nt!KeBugCheckEx

ffffe30240ba59e0 fffff805c967a51f : ffffe4878a50ad10 0000000000001000 0000000000000002 fffff805c9400000 : nt!MiSystemFault+0x735

ffffe30240ba5ad0 fffff805c9a88ecb : 0000000000000000 fffff805c96ef1e3 0000000000000000 ffffe4878735c040 : nt!MmAccessFault+0x2ff

ffffe30240ba5c40 fffff8055ebb38f3 : fffff8055ec108b8 ffffe48700000000 ffffe4878a50acd0 ffffe4878a50acd0 : nt!KiPageFault+0x38b

ffffe30240ba5dd0 fffff8055ec108b8 : ffffe48700000000 ffffe4878a50acd0 ffffe4878a50acd0 ffffe4878e372401 : nllNetHub+0x238f3

ffffe30240ba5dd8 ffffe48700000000 : ffffe4878a50acd0 ffffe4878a50acd0 ffffe4878e372401 ffffe48700000002 : nllNetHub+0x808b8

ffffe30240ba5de0 ffffe4878a50acd0 : ffffe4878a50acd0 ffffe4878e372401 ffffe48700000002 ffffe4876f100000 : 0xffffe487`00000000

ffffe30240ba5de8 ffffe4878a50acd0 : ffffe4878e372401 ffffe48700000002 ffffe4876f100000 ffffe30240ba5ee9 : 0xffffe487`8a50acd0

ffffe30240ba5df0 ffffe4878e372401 : ffffe48700000002 ffffe4876f100000 ffffe30240ba5ee9 0000000000000000 : 0xffffe487`8a50acd0

ffffe30240ba5df8 ffffe48700000002 : ffffe4876f100000 ffffe30240ba5ee9 0000000000000000 fffff805c9607ce6 : 0xffffe487`8e372401

ffffe30240ba5e00 ffffe4876f100000 : ffffe30240ba5ee9 0000000000000000 fffff805c9607ce6 fffff78001200070 : 0xffffe487`00000002

ffffe30240ba5e08 ffffe30240ba5ee9 : 0000000000000000 fffff805c9607ce6 fffff78001200070 fffff80500000000 : 0xffffe487`6f100000

ffffe30240ba5e10 0000000000000000 : fffff805c9607ce6 fffff78001200070 fffff80500000000 0000009b00010601 : 0xffffe302`40ba5ee9

SYMBOL_NAME: nllNetHub+238f3

STACK_COMMAND: .process /r /p 0xffffe4879c716080; .thread 0xffffe4878735c040 ; kb

BUCKET_ID_FUNC_OFFSET: 238f3

FAILURE_BUCKET_ID: AV_W_(null)_nllNetHub!unknown_function

OS_VERSION: 10.0.26100.1

BUILDLAB_STR: ge_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {2531021e-291c-3868-235d-9302c12f0cce}

Followup: MachineOwner


Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Geoff McKenzie 865 Reputation points
    2025-01-30T01:41:28.41+00:00

    Hi Vincent,

    Based on my limited experience....

    I would start by looking at nethub.sys.

    It is a driver of some sort on your system. Find the file and look at its properties and you may be able to identify the software which installed it. Google/bing says Javas GNSS software may be a candidate if you use it ???

    Eitherway, once you find the software which installed it. And assuming it is not something windows needs (I Don't think so but that's why I suggest checking first). Backup your system. Then try removing/uninstalling the software. And see if that makes the problem go away. If it does then see if the vendor has an updated version to try.

    Goodluck.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.