我通过使用Windbg分析该dump文件,似乎已经得出了初步的结论。
以下是Windbg在运行!analysis -v之后的输出字段。可以烦请您帮助我缩小一些排除范围吗?
!analyze -v
!analyze -v
ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory. The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name is printed on
the BugCheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffffd064779f300, Virtual address for the attempted execute.
Arg2: 8a0000084e6aa963, PTE contents.
Arg3: fffffd064779f130, (reserved)
Arg4: 0000000000000000, (reserved)
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 1312
Key : Analysis.Elapsed.mSec
Value: 30274
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 11
Key : Analysis.IO.Write.Mb
Value: 1
Key : Analysis.Init.CPU.mSec
Value: 968
Key : Analysis.Init.Elapsed.mSec
Value: 66918
Key : Analysis.Memory.CommitPeak.Mb
Value: 110
Key : Analysis.Version.DbgEng
Value: 10.0.27920.1001
Key : Analysis.Version.Description
Value: 10.2506.23.01 amd64fre
Key : Analysis.Version.Ext
Value: 1.2506.23.1
Key : Bugcheck.Code.LegacyAPI
Value: 0xfc
Key : Bugcheck.Code.TargetModel
Value: 0xfc
Key : Dump.Attributes.AsUlong
Value: 0x21008
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0x0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: 0xFC_nt!MiCheckSystemNxFault
Key : Failure.Hash
Value: {a6ae5288-6b71-974a-9b09-23f14d998164}
Key : WER.System.BIOSRevision
Value: 1.28.0.0
BUGCHECK_CODE: fc
BUGCHECK_P1: fffffd064779f300
BUGCHECK_P2: 8a0000084e6aa963
BUGCHECK_P3: fffffd064779f130
BUGCHECK_P4: 0
FILE_IN_CAB: 100725-8796-01.dmp
DUMP_FILE_ATTRIBUTES: 0x21008
Kernel Generated Triage Dump
FAULTING_THREAD: ffffaa0d36c7e080
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1 (!blackboxwinlogon)
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: PerfTune.exe
STACK_TEXT:
fffffd06`4779ef38 fffff801`898caa23 : 00000000`000000fc fffffd06`4779f300 8a000008`4e6aa963 fffffd06`4779f130 : nt!KeBugCheckEx
fffffd06`4779ef40 fffff801`898c769f : 00000000`00000003 00000000`00000001 00000000`00000011 fffffd06`4779f000 : nt!MiCheckSystemNxFault+0x3f
fffffd06`4779ef80 fffff801`8988eb7e : fffffd06`4779f300 fffffd06`4779f0c0 00000000`00000011 fffff801`899879b3 : nt!MiRaisedIrqlFault+0x24f
fffffd06`4779efc0 fffff801`89c880cb : 00000000`00000011 fffff801`8998cd5a ffff8481`800053e8 00000000`00000071 : nt!MmAccessFault+0x29e
fffffd06`4779f130 fffffd06`4779f300 : ffffaa0d`4b674070 fffffd06`4779f3b8 fffffd06`4779f3a8 00000000`00000001 : nt!KiPageFault+0x38b
fffffd06`4779f2c8 ffffaa0d`4b674070 : fffffd06`4779f3b8 fffffd06`4779f3a8 00000000`00000001 0000007f`ffffffff : 0xfffffd06`4779f300
fffffd06`4779f2d0 fffffd06`4779f3b8 : fffffd06`4779f3a8 00000000`00000001 0000007f`ffffffff 00000000`00000000 : 0xffffaa0d`4b674070
fffffd06`4779f2d8 fffffd06`4779f3a8 : 00000000`00000001 0000007f`ffffffff 00000000`00000000 0000007f`ffffffff : 0xfffffd06`4779f3b8
fffffd06`4779f2e0 00000000`00000001 : 0000007f`ffffffff 00000000`00000000 0000007f`ffffffff 00000000`00000000 : 0xfffffd06`4779f3a8
fffffd06`4779f2e8 0000007f`ffffffff : 00000000`00000000 0000007f`ffffffff 00000000`00000000 ffff6f17`0f7e2efc : 0x1
fffffd06`4779f2f0 00000000`00000000 : 0000007f`ffffffff 00000000`00000000 ffff6f17`0f7e2efc fffffd06`4779f490 : 0x0000007f`ffffffff
SYMBOL_NAME: nt!MiCheckSystemNxFault+3f
MODULE_NAME: nt
IMAGE_VERSION: 10.0.26100.3323
STACK_COMMAND: .process /r /p 0xffffaa0d2a088080; .thread 0xffffaa0d36c7e080 ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: 3f
FAILURE_BUCKET_ID: 0xFC_nt!MiCheckSystemNxFault
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {a6ae5288-6b71-974a-9b09-23f14d998164}
Followup: MachineOwner
---------