BSOD in Easy Anticheat on Latest Windows Update

Full report 

 

************* Preparing the environment for Debugger Extensions Gallery repositories **************

ExtensionRepository : Implicit

UseExperimentalFeatureForNugetShare : true

AllowNugetExeUpdate : true

NonInteractiveNuget : true

AllowNugetMSCredentialProviderInstall : true

AllowParallelInitializationOfLocalRepositories : true

 

EnableRedirectToV8JsProvider : false

 

-- Configuring repositories

----> Repository : LocalInstalled, Enabled: true

----> Repository : UserExtensions, Enabled: true

 

>>>>>>>>>>>>> Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.032 seconds

 

************* Waiting for Debugger Extensions Gallery to Initialize **************

 

>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.156 seconds

----> Repository : UserExtensions, Enabled: true, Packages count: 0

----> Repository : LocalInstalled, Enabled: true, Packages count: 29

 

Microsoft (R) Windows Debugger Version 10.0.26100.1 AMD64

Copyright (c) Microsoft Corporation. All rights reserved.

 

 

Loading Dump File [C:\Windows\Minidump\030426-22562-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available

 

Symbol search path is: srv*

Executable search path is:

Windows 10 Kernel Version 26100 MP (24 procs) Free x64

Product: WinNt, suite: TerminalServer SingleUserTS

Kernel base = 0xfffff800`a2c00000 PsLoadedModuleList = 0xfffff800`a3af5040

Debug session time: Wed Mar 4 00:53:54.322 2026 (UTC + 3:00)

System Uptime: 0 days 0:02:16.433

Loading Kernel Symbols

...............................................................

................................................................

................................................................

...............................................

Loading User Symbols

 

Loading unloaded module list

............

For analysis of this file, run !analyze -v

10: kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************

 

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except.

Typically the address is just plain bad or it is pointing at freed memory.

Arguments:

Arg1: ffffe10f04800014, memory referenced.

Arg2: 0000000000000000, X64: bit 0 set if the fault was due to a not-present PTE.

bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the processor decided the fault was due to a corrupted PTE.

bit 4 is set if the fault was due to attempted execute of a no-execute PTE.

- ARM64: bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the fault was due to attempted execute of a no-execute PTE.

Arg3: fffff8005cb8152c, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

 

Debugging Details:

------------------

 

*** WARNING: Unable to verify timestamp for EasyAntiCheat_EOS.sys

 

KEY_VALUES_STRING: 1

 

Key : AV.Type

Value: Read

 

Key : Analysis.CPU.mSec

Value: 1249

 

Key : Analysis.Elapsed.mSec

Value: 3600

 

Key : Analysis.IO.Other.Mb

Value: 0

 

Key : Analysis.IO.Read.Mb

Value: 0

 

Key : Analysis.IO.Write.Mb

Value: 0

 

Key : Analysis.Init.CPU.mSec

Value: 952

 

Key : Analysis.Init.Elapsed.mSec

Value: 9056

 

Key : Analysis.Memory.CommitPeak.Mb

Value: 89

 

Key : Bugcheck.Code.LegacyAPI

Value: 0x50

 

Key : Dump.Attributes.AsUlong

Value: 21808

 

Key : Dump.Attributes.DiagDataWrittenToHeader

Value: 1

 

Key : Dump.Attributes.ErrorCode

Value: 0

 

Key : Dump.Attributes.KernelGeneratedTriageDump

Value: 1

 

Key : Dump.Attributes.LastLine

Value: Dump completed successfully.

 

Key : Dump.Attributes.ProgressPercentage

Value: 0

 

Key : Failure.Bucket

Value: AV_R_(null)_EasyAntiCheat_EOS!unknown_function

 

Key : Failure.Hash

Value: {45dd0642-eada-f8ea-b49a-7d037a621134}

 

Key : Hypervisor.Enlightenments.ValueHex

Value: 7417df84

 

Key : Hypervisor.Flags.AnyHypervisorPresent

Value: 1

 

Key : Hypervisor.Flags.ApicEnlightened

Value: 0

 

Key : Hypervisor.Flags.ApicVirtualizationAvailable

Value: 1

 

Key : Hypervisor.Flags.AsyncMemoryHint

Value: 0

 

Key : Hypervisor.Flags.CoreSchedulerRequested

Value: 0

 

Key : Hypervisor.Flags.CpuManager

Value: 1

 

Key : Hypervisor.Flags.DeprecateAutoEoi

Value: 1

 

Key : Hypervisor.Flags.DynamicCpuDisabled

Value: 1

 

Key : Hypervisor.Flags.Epf

Value: 0

 

Key : Hypervisor.Flags.ExtendedProcessorMasks

Value: 1

 

Key : Hypervisor.Flags.HardwareMbecAvailable

Value: 1

 

Key : Hypervisor.Flags.MaxBankNumber

Value: 0

 

Key : Hypervisor.Flags.MemoryZeroingControl

Value: 0

 

Key : Hypervisor.Flags.NoExtendedRangeFlush

Value: 0

 

Key : Hypervisor.Flags.NoNonArchCoreSharing

Value: 1

 

Key : Hypervisor.Flags.Phase0InitDone

Value: 1

 

Key : Hypervisor.Flags.PowerSchedulerQos

Value: 0

 

Key : Hypervisor.Flags.RootScheduler

Value: 0

 

Key : Hypervisor.Flags.SynicAvailable

Value: 1

 

Key : Hypervisor.Flags.UseQpcBias

Value: 0

 

Key : Hypervisor.Flags.Value

Value: 55185662

 

Key : Hypervisor.Flags.ValueHex

Value: 34a10fe

 

Key : Hypervisor.Flags.VpAssistPage

Value: 1

 

Key : Hypervisor.Flags.VsmAvailable

Value: 1

 

Key : Hypervisor.RootFlags.AccessStats

Value: 1

 

Key : Hypervisor.RootFlags.CrashdumpEnlightened

Value: 1

 

Key : Hypervisor.RootFlags.CreateVirtualProcessor

Value: 1

 

Key : Hypervisor.RootFlags.DisableHyperthreading

Value: 0

 

Key : Hypervisor.RootFlags.HostTimelineSync

Value: 1

 

Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled

Value: 0

 

Key : Hypervisor.RootFlags.IsHyperV

Value: 1

 

Key : Hypervisor.RootFlags.LivedumpEnlightened

Value: 1

 

Key : Hypervisor.RootFlags.MapDeviceInterrupt

Value: 1

 

Key : Hypervisor.RootFlags.MceEnlightened

Value: 1

 

Key : Hypervisor.RootFlags.Nested

Value: 0

 

Key : Hypervisor.RootFlags.StartLogicalProcessor

Value: 1

 

Key : Hypervisor.RootFlags.Value

Value: 1015

 

Key : Hypervisor.RootFlags.ValueHex

Value: 3f7

 

 

BUGCHECK_CODE: 50

 

BUGCHECK_P1: ffffe10f04800014

 

BUGCHECK_P2: 0

 

BUGCHECK_P3: fffff8005cb8152c

 

BUGCHECK_P4: 2

 

FILE_IN_CAB: 030426-22562-01.dmp

 

TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b

 

 

DUMP_FILE_ATTRIBUTES: 0x21808

Kernel Generated Triage Dump

 

READ_ADDRESS: fffff800a3bc44c8: Unable to get MiVisibleState

Unable to get NonPagedPoolStart

Unable to get NonPagedPoolEnd

Unable to get PagedPoolStart

Unable to get PagedPoolEnd

unable to get nt!MmSpecialPagesInUse

ffffe10f04800014

 

MM_INTERNAL_CODE: 2

 

IMAGE_NAME: EasyAntiCheat_EOS.sys

 

MODULE_NAME: EasyAntiCheat_EOS

 

FAULTING_MODULE: fffff8005a5d0000 EasyAntiCheat_EOS

 

BLACKBOXBSD: 1 (!blackboxbsd)

 

 

BLACKBOXNTFS: 1 (!blackboxntfs)

 

 

BLACKBOXPNP: 1 (!blackboxpnp)

 

 

BLACKBOXWINLOGON: 1

 

CUSTOMER_CRASH_COUNT: 1

 

PROCESS_NAME: System

 

TRAP_FRAME: ffff878aaf70e9a0 -- (.trap 0xffff878aaf70e9a0)

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=9b1cdc7b47978094 rbx=0000000000000000 rcx=ffffe10f04800014

rdx=0000000000000011 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8005cb8152c rsp=ffff878aaf70eb30 rbp=0000000000ea9030

r8=00000000fffe1e00 r9=ffff878aaf70ec30 r10=0000000000000000

r11=0000000000000000 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0 nv up ei pl nz na po nc

EasyAntiCheat_EOS+0x25b152c:

fffff800`5cb8152c 8b01 mov eax,dword ptr [rcx] ds:ffffe10f`04800014=????????

Resetting default scope

 

STACK_TEXT:

ffff878a`af70e738 fffff800`a2f37750 : 00000000`00000050 ffffe10f`04800014 00000000`00000000 ffff878a`af70e9a0 : nt!KeBugCheckEx

ffff878a`af70e740 fffff800`a2f246b6 : ffffe10e`f2272080 ffff8000`00000000 ffffe10f`04800014 0000007f`fffffff8 : nt!MiSystemFault+0x850

ffff878a`af70e830 fffff800`a32b97cb : 00000000`6d800575 00000000`00000000 2a1efdd9`b69ed86e 0000006c`973ecfa0 : nt!MmAccessFault+0x646

ffff878a`af70e9a0 fffff800`5cb8152c : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`3ffe1e2a : nt!KiPageFault+0x38b

ffff878a`af70eb30 00000000`00000000 : 00000000`00000001 00000000`00000000 00000000`3ffe1e2a 00000000`00000000 : EasyAntiCheat_EOS+0x25b152c

 

 

SYMBOL_NAME: EasyAntiCheat_EOS+25b152c

 

STACK_COMMAND: .cxr; .ecxr ; kb

 

BUCKET_ID_FUNC_OFFSET: 25b152c

 

FAILURE_BUCKET_ID: AV_R_(null)_EasyAntiCheat_EOS!unknown_function

 

OSPLATFORM_TYPE: x64

 

OSNAME: Windows 10

 

FAILURE_ID_HASH: {45dd0642-eada-f8ea-b49a-7d037a621134}

 

Followup: MachineOwner

---------