what in this dump file caused BSOD?

vincent zapata 0 Reputation points
2025-01-25T02:11:26.0366667+00:00

Hello,

I am trying to figure out what caused The BSOD on my HP laptop. I usually get the BSOD about three times a month. Hopfully its something I can fix. Any help in explaining the below would be greatly appreciated. Thank you everyone!

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except.

Typically the address is just plain bad or it is pointing at freed memory.

Arguments:

Arg1: ffffe4878a50ad10, memory referenced.

Arg2: 0000000000000002, X64: bit 0 set if the fault was due to a not-present PTE.

bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the processor decided the fault was due to a corrupted PTE.

bit 4 is set if the fault was due to attempted execute of a no-execute PTE.

- ARM64: bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the fault was due to attempted execute of a no-execute PTE.

Arg3: fffff8055ebb38f3, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

Debugging Details:


KEY_VALUES_STRING: 1

Key  : AV.Type

Value: Write

Key  : Analysis.CPU.mSec

Value: 1671

Key  : Analysis.Elapsed.mSec

Value: 2251

Key  : Analysis.IO.Other.Mb

Value: 6

Key  : Analysis.IO.Read.Mb

Value: 1

Key  : Analysis.IO.Write.Mb

Value: 23

Key  : Analysis.Init.CPU.mSec

Value: 859

Key  : Analysis.Init.Elapsed.mSec

Value: 26251

Key  : Analysis.Memory.CommitPeak.Mb

Value: 91

Key  : Analysis.Version.DbgEng

Value: 10.0.27725.1000

Key  : Analysis.Version.Description

Value: 10.2408.27.01 amd64fre

Key  : Analysis.Version.Ext

Value: 1.2408.27.1

Key  : Bugcheck.Code.LegacyAPI

Value: 0x50

Key  : Bugcheck.Code.TargetModel

Value: 0x50

Key  : Failure.Bucket

Value: AV_W_(null)_nllNetHub!unknown_function

Key  : Failure.Hash

Value: {2531021e-291c-3868-235d-9302c12f0cce}

Key  : Hypervisor.Enlightenments.ValueHex

Value: 7497cf94

Key  : Hypervisor.Flags.AnyHypervisorPresent

Value: 1

Key  : Hypervisor.Flags.ApicEnlightened

Value: 1

Key  : Hypervisor.Flags.ApicVirtualizationAvailable

Value: 0

Key  : Hypervisor.Flags.AsyncMemoryHint

Value: 0

Key  : Hypervisor.Flags.CoreSchedulerRequested

Value: 0

Key  : Hypervisor.Flags.CpuManager

Value: 1

Key  : Hypervisor.Flags.DeprecateAutoEoi

Value: 0

Key  : Hypervisor.Flags.DynamicCpuDisabled

Value: 1

Key  : Hypervisor.Flags.Epf

Value: 0

Key  : Hypervisor.Flags.ExtendedProcessorMasks

Value: 1

Key  : Hypervisor.Flags.HardwareMbecAvailable

Value: 1

Key  : Hypervisor.Flags.MaxBankNumber

Value: 0

Key  : Hypervisor.Flags.MemoryZeroingControl

Value: 0

Key  : Hypervisor.Flags.NoExtendedRangeFlush

Value: 0

Key  : Hypervisor.Flags.NoNonArchCoreSharing

Value: 1

Key  : Hypervisor.Flags.Phase0InitDone

Value: 1

Key  : Hypervisor.Flags.PowerSchedulerQos

Value: 0

Key  : Hypervisor.Flags.RootScheduler

Value: 0

Key  : Hypervisor.Flags.SynicAvailable

Value: 1

Key  : Hypervisor.Flags.UseQpcBias

Value: 0

Key  : Hypervisor.Flags.Value

Value: 38408431

Key  : Hypervisor.Flags.ValueHex

Value: 24a10ef

Key  : Hypervisor.Flags.VpAssistPage

Value: 1

Key  : Hypervisor.Flags.VsmAvailable

Value: 1

Key  : Hypervisor.RootFlags.AccessStats

Value: 1

Key  : Hypervisor.RootFlags.CrashdumpEnlightened

Value: 1

Key  : Hypervisor.RootFlags.CreateVirtualProcessor

Value: 1

Key  : Hypervisor.RootFlags.DisableHyperthreading

Value: 0

Key  : Hypervisor.RootFlags.HostTimelineSync

Value: 1

Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled

Value: 0

Key  : Hypervisor.RootFlags.IsHyperV

Value: 1

Key  : Hypervisor.RootFlags.LivedumpEnlightened

Value: 1

Key  : Hypervisor.RootFlags.MapDeviceInterrupt

Value: 1

Key  : Hypervisor.RootFlags.MceEnlightened

Value: 1

Key  : Hypervisor.RootFlags.Nested

Value: 0

Key  : Hypervisor.RootFlags.StartLogicalProcessor

Value: 1

Key  : Hypervisor.RootFlags.Value

Value: 1015

Key  : Hypervisor.RootFlags.ValueHex

Value: 3f7

Key  : WER.OS.Branch

Value: ge_release

Key  : WER.OS.Version

Value: 10.0.26100.1

BUGCHECK_CODE: 50

BUGCHECK_P1: ffffe4878a50ad10

BUGCHECK_P2: 2

BUGCHECK_P3: fffff8055ebb38f3

BUGCHECK_P4: 2

FILE_IN_CAB: 012325-13265-01.dmp

TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b

FAULTING_THREAD: ffffe4878735c040

READ_ADDRESS: fffff805ca3c34b0: Unable to get MiVisibleState

Unable to get NonPagedPoolStart

Unable to get NonPagedPoolEnd

Unable to get PagedPoolStart

Unable to get PagedPoolEnd

unable to get nt!MmSpecialPagesInUse

ffffe4878a50ad10

MM_INTERNAL_CODE: 2

IMAGE_NAME: nllNetHub.sys

MODULE_NAME: nllNetHub

FAULTING_MODULE: fffff8055eb90000 nllNetHub

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: SearchHost.exe

TRAP_FRAME: ffffe30240ba5c40 -- (.trap 0xffffe30240ba5c40)

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=0000000000000000 rbx=0000000000000000 rcx=7a514ca688990000

rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8055ebb38f3 rsp=ffffe30240ba5dd0 rbp=ffffe30240ba5e59

r8=0000000000000001 r9=0000000000000000 r10=fffff80559b970a8

r11=0000000000000061 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0 nv up ei ng nz na po nc

nllNetHub+0x238f3:

fffff8055ebb38f3 897b40 mov dword ptr [rbx+40h],edi ds:0000000000000040=????????

Resetting default scope

STACK_TEXT:

ffffe30240ba59d8 fffff805c96d3c85 : 0000000000000050 ffffe4878a50ad10 0000000000000002 ffffe30240ba5c40 : nt!KeBugCheckEx

ffffe30240ba59e0 fffff805c967a51f : ffffe4878a50ad10 0000000000001000 0000000000000002 fffff805c9400000 : nt!MiSystemFault+0x735

ffffe30240ba5ad0 fffff805c9a88ecb : 0000000000000000 fffff805c96ef1e3 0000000000000000 ffffe4878735c040 : nt!MmAccessFault+0x2ff

ffffe30240ba5c40 fffff8055ebb38f3 : fffff8055ec108b8 ffffe48700000000 ffffe4878a50acd0 ffffe4878a50acd0 : nt!KiPageFault+0x38b

ffffe30240ba5dd0 fffff8055ec108b8 : ffffe48700000000 ffffe4878a50acd0 ffffe4878a50acd0 ffffe4878e372401 : nllNetHub+0x238f3

ffffe30240ba5dd8 ffffe48700000000 : ffffe4878a50acd0 ffffe4878a50acd0 ffffe4878e372401 ffffe48700000002 : nllNetHub+0x808b8

ffffe30240ba5de0 ffffe4878a50acd0 : ffffe4878a50acd0 ffffe4878e372401 ffffe48700000002 ffffe4876f100000 : 0xffffe487`00000000

ffffe30240ba5de8 ffffe4878a50acd0 : ffffe4878e372401 ffffe48700000002 ffffe4876f100000 ffffe30240ba5ee9 : 0xffffe487`8a50acd0

ffffe30240ba5df0 ffffe4878e372401 : ffffe48700000002 ffffe4876f100000 ffffe30240ba5ee9 0000000000000000 : 0xffffe487`8a50acd0

ffffe30240ba5df8 ffffe48700000002 : ffffe4876f100000 ffffe30240ba5ee9 0000000000000000 fffff805c9607ce6 : 0xffffe487`8e372401

ffffe30240ba5e00 ffffe4876f100000 : ffffe30240ba5ee9 0000000000000000 fffff805c9607ce6 fffff78001200070 : 0xffffe487`00000002

ffffe30240ba5e08 ffffe30240ba5ee9 : 0000000000000000 fffff805c9607ce6 fffff78001200070 fffff80500000000 : 0xffffe487`6f100000

ffffe30240ba5e10 0000000000000000 : fffff805c9607ce6 fffff78001200070 fffff80500000000 0000009b00010601 : 0xffffe302`40ba5ee9

SYMBOL_NAME: nllNetHub+238f3

STACK_COMMAND: .process /r /p 0xffffe4879c716080; .thread 0xffffe4878735c040 ; kb

BUCKET_ID_FUNC_OFFSET: 238f3

FAILURE_BUCKET_ID: AV_W_(null)_nllNetHub!unknown_function

OS_VERSION: 10.0.26100.1

BUILDLAB_STR: ge_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {2531021e-291c-3868-235d-9302c12f0cce}

Followup: MachineOwner


Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
10,673 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Geoff McKenzie 315 Reputation points
    2025-01-30T01:41:28.41+00:00

    Hi Vincent,

    Based on my limited experience....

    I would start by looking at nethub.sys.

    It is a driver of some sort on your system. Find the file and look at its properties and you may be able to identify the software which installed it. Google/bing says Javas GNSS software may be a candidate if you use it ???

    Eitherway, once you find the software which installed it. And assuming it is not something windows needs (I Don't think so but that's why I suggest checking first). Backup your system. Then try removing/uninstalling the software. And see if that makes the problem go away. If it does then see if the vendor has an updated version to try.

    Goodluck.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.