What does BSOD 341 (OS_DATA_TAMPERING) mean?

 
Could be also:
ConstantTypeOS
ERROR_INVALID_PEP_INFO_VERSIONWin32 errorWindows
Previous Next
UNEXPECTED_STORE_EXCEPTION WINSOCK_DETECTED_HUNG_CLOSESOCKET_LIVEDUMP

OS_DATA_TAMPERING

Operating-system data tampering

OS_DATA_TAMPERING is bug check code 0x00000155. The built-in table identifies it as OS_DATA_TAMPERING; the useful diagnostic question is what Windows component raised the stop and which invariant failed.

This bug check belongs to OS integrity protection. It indicates that protected system data was modified or failed validation in a way Windows treats as tampering.

How to read the parameters

  • The dump, stack, and integrity component involved decide whether the issue is memory corruption, malicious modification, boot/integrity policy, or a faulty security driver.
  • It is different from ordinary access denied errors because protected OS data has already failed integrity expectations.
  • Recent kernel drivers and security products are important evidence.

What to check in the dump

  • Check Secure Boot, VBS/HVCI, kernel-mode security products, recent driver installs, and memory corruption signals.
  • Preserve the full dump; minidumps may not contain enough memory around the protected data.
  • Do not “fix” by disabling protections before identifying the component that wrote or corrupted the data.

References


Looking for a different code? Search another status or error code.