0x00000795

Decimal: 1941 · Signed: 1941

As HRESULT:As NTSTATUS:

Associated Modules

ModuleFound inDescription
microsoft-windows-system-events.dll10Process '%2' (PID %5) was blocked from making the NtFsControlFile system call.
microsoft-windows-system-events.dll11Process '%2' (PID %5) has encountered a shadow stack return address mismatch. The process will be terminated. Process shadow stack strict mode: %15 Appcompat options: %16 Return instruction executed from module '%12'. (Instruction address: %18, module offset: %19, module compatible with shadow stacks: %20) Attempting to return to module '%14'. (Instruction address: %21, module offset: %22, module compatible with shadow stacks: %23)
2 entries

Associated Headers

HeaderSymbolicDescription
0 entries