WeMod Windows 11 bug causing BSODS

I don’t understand a lot of this stuff but what I did manage to ascertain is appears to be with regard to wrong symbols suggesting WeMod might be calling the wrong code? or poking a value in the wrong place? or maybe just can’t find something?

Either way it is causing a System Service Exception.

BUGCHECK_CODE: 3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff80660dc29bc

BUGCHECK_P3: ffff8e830eb2dab0

BUGCHECK_P4: 0

PROCESS_NAME: ntoskrnl.wrong.symbols.exe

IMAGE_NAME: ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME: nt_wrong_symbols!D697AA931048000

FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_10.0.22621.2215_(WinBuild.160101.0800)_TIMESTAMP_840201-171707_D697AA93_nt_wrong_symbols!D697AA931048000

FAILURE_ID_HASH: {046b1a85-eb6b-e27c-530b-ba863b7f6d20}

Followup: MachineOwner

NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\atlmfc.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\ObjectiveC.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\concurrency.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\cpp_rest.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Kernel.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\stl.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Data.Json.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Geolocation.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Devices.Sensors.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Windows.Media.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\windows.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\winrt.natvis’
NatVis script unloaded from ‘C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2306.14001.0_x64__8wekyb3d8bbwe\amd64\Visualizers\Usb4Kd.natvis’

1 Like