360Hvm64.sys导致蓝屏

使用Windbg查看蓝屏dmp文件

1. 
   
2. Microsoft (R) Windows Debugger Version 10.0.19041.5609 AMD64
   
3. Copyright (c) Microsoft Corporation. All rights reserved.
   
4. 
   
5. 
   
6. Loading Dump File [C:\Windows\Minidump\122125-13281-01.dmp]
   
7. Mini Kernel Dump File: Only registers and stack trace are available
   
8. 
   
9. 
   
10. ************* Path validation summary **************
    
11. Response                         Time (ms)     Location
    
12. Deferred                                      
    
13. Symbol search path is
    
14. Executable search path is:
    
15. Windows 10 Kernel Version 19041 MP (16 procs) Free x64
    
16. Product: WinNt, suite: TerminalServer SingleUserTS
    
17. Built by: 19041.1.amd64fre.vb_release.191206-1406
    
18. Machine Name:
    
19. Kernel base = 0xfffff806`61e00000 PsLoadedModuleList = 0xfffff806`62a2a930
    
20. Debug session time: Sun Dec 21 23:23:21.916 2025 (UTC + 8:00)
    
21. System Uptime: 0 days 0:25:12.685
    
22. Loading Kernel Symbols
    
23. ...............................................................
    
24. ................................................................
    
25. ................................................................
    
26. .................................
    
27. Loading User Symbols
    
28. Loading unloaded module list
    
29. .....................
    
30. For analysis of this file, run !analyze -v
    
31. 8: kd> !analyze -v
    
32. *******************************************************************************
    
33. *                                                                             *
    
34. *                        Bugcheck Analysis                                    *
    
35. *                                                                             *
    
36. *******************************************************************************
    
37. 
    
38. ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
    
39. An attempt was made to write to readonly memory.  The guilty driver is on the
    
40. stack trace (and is typically the current instruction pointer).
    
41. When possible, the guilty driver's name (Unicode string) is printed on
    
42. the bugcheck screen and saved in KiBugCheckDriver.
    
43. Arguments:
    
44. Arg1: fffff8066be0af9d, Virtual address for the attempted write.
    
45. Arg2: 090000040cb80121, PTE contents.
    
46. Arg3: ffff8d89001487b0, (reserved)
    
47. Arg4: 000000000000000b, (reserved)
    
48. 
    
49. Debugging Details:
    
50. ------------------
    
51. 
    
52. *** WARNING: Unable to verify timestamp for 360Hvm64.sys
    
53. 
    
54. KEY_VALUES_STRING: 1
    
55. 
    
56.     Key  : Analysis.CPU.Sec
    
57.     Value: 3
    
58. 
    
59.     Key  : Analysis.DebugAnalysisProvider.CPP
    
60.     Value: Create: 8007007e on DESKTOP-2QRH2K5
    
61. 
    
62.     Key  : Analysis.DebugData
    
63.     Value: CreateObject
    
64. 
    
65.     Key  : Analysis.DebugModel
    
66.     Value: CreateObject
    
67. 
    
68.     Key  : Analysis.Elapsed.Sec
    
69.     Value: 25
    
70. 
    
71.     Key  : Analysis.Memory.CommitPeak.Mb
    
72.     Value: 82
    
73. 
    
74.     Key  : Analysis.System
    
75.     Value: CreateObject
    
76. 
    
77. 
    
78. BUGCHECK_CODE:  be
    
79. 
    
80. BUGCHECK_P1: fffff8066be0af9d
    
81. 
    
82. BUGCHECK_P2: 90000040cb80121
    
83. 
    
84. BUGCHECK_P3: ffff8d89001487b0
    
85. 
    
86. BUGCHECK_P4: b
    
87. 
    
88. BLACKBOXBSD: 1 (!blackboxbsd)
    
89. 
    
90. 
    
91. BLACKBOXNTFS: 1 (!blackboxntfs)
    
92. 
    
93. 
    
94. BLACKBOXPNP: 1 (!blackboxpnp)
    
95. 
    
96. 
    
97. BLACKBOXWINLOGON: 1
    
98. 
    
99. CUSTOMER_CRASH_COUNT:  1
    
100. 
     
101. PROCESS_NAME:  PNXClientHost.exe
     
102. 
     
103. TRAP_FRAME:  ffff8d89001487b0 -- (.trap 0xffff8d89001487b0)
     
104. NOTE: The trap frame does not contain all registers.
     
105. Some register values may be zeroed or incorrect.
     
106. rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000011
     
107. rdx=ffff8d89001489d0 rsi=0000000000000000 rdi=0000000000000000
     
108. rip=fffff8066be0ae72 rsp=ffff8d8900148940 rbp=ffff8d8900148b00
     
109. r8=ffff8d8900148a70  r9=ffff8d89001489f0 r10=0000000000000000
     
110. r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
     
111. r14=0000000000000000 r15=0000000000000000
     
112. iopl=0         nv up ei pl zr na po nc
     
113. 360Hvm64+0xae72:
     
114. fffff806`6be0ae72 f0834718ff      lock add dword ptr [rdi+18h],0FFFFFFFFh ds:00000000`00000018=????????
     
115. Resetting default scope
     
116. 
     
117. STACK_TEXT:  
     
118. ffff8d89`00148508 fffff806`62248c59 : 00000000`000000be fffff806`6be0af9d 09000004`0cb80121 ffff8d89`001487b0 : nt!KeBugCheckEx
     
119. ffff8d89`00148510 fffff806`6200d450 : 00000000`00000000 00000000`00000003 ffff8d89`00148830 00000000`00000000 : nt!MiSystemFault+0x1b71d9
     
120. ffff8d89`00148610 fffff806`6220d66d : 00000000`00000000 00000000`00000000 00000000`00000000 fffff806`620cb16e : nt!MmAccessFault+0x400
     
121. ffff8d89`001487b0 fffff806`6be0ae72 : 00000000`00000000 00000000`00000000 00000000`77566d4d ffff8d89`00148998 : nt!KiPageFault+0x36d
     
122. ffff8d89`00148940 00000000`00000000 : 00000000`00000000 00000000`77566d4d ffff8d89`00148998 00000000`77104660 : 360Hvm64+0xae72
     
123. 
     
124. 
     
125. SYMBOL_NAME:  360Hvm64+ae72
     
126. 
     
127. MODULE_NAME: 360Hvm64
     
128. 
     
129. IMAGE_NAME:  360Hvm64.sys
     
130. 
     
131. STACK_COMMAND:  .thread ; .cxr ; kb
     
132. 
     
133. BUCKET_ID_FUNC_OFFSET:  ae72
     
134. 
     
135. FAILURE_BUCKET_ID:  0xBE_360Hvm64!unknown_function
     
136. 
     
137. OS_VERSION:  10.0.19041.1
     
138. 
     
139. BUILDLAB_STR:  vb_release
     
140. 
     
141. OSPLATFORM_TYPE:  x64
     
142. 
     
143. OSNAME:  Windows 10
     
144. 
     
145. FAILURE_ID_HASH:  {6a5bb82a-2dcf-a9b2-e07b-b4ed901a5685}
     
146. 
     
147. Followup:     MachineOwner
     
148. ---------
     
149. 
     
150. 8: kd> lmvm 360Hvm64
     
151. Browse full module list
     
152. start             end                 module name
     
153. fffff806`6be00000 fffff806`6befe000   360Hvm64 T (no symbols)           
     
154.     Loaded symbol image file: 360Hvm64.sys
     
155.     Image path: \SystemRoot\System32\Drivers\360Hvm64.sys
     
156.     Image name: 360Hvm64.sys
     
157.     Browse all global symbols  functions  data
     
158.     Timestamp:        Mon Jul 14 14:40:56 2025 (6874A678)
     
159.     CheckSum:         00075FA4
     
160.     ImageSize:        000FE000
     
161.     Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
     
162.     Information from resource tables:
     

复制代码

通过360AI云盘分享的文件：蓝屏dmp文件
360AI云盘无需下载，在线播放视频，畅享超清原画、极速播放
链接：
surl_yNKaPr6wN8t
（提取码：cfed）
复制这段内容打开「360AI云盘APP」即可获取

感谢您的反馈，我们同步技术去分析