Anton Akhmetshyn

BSOD memory dump and blackbone driver binary + pdb symbols will help.

Hard to tell. Does the thread simply die after first instruction? What's the memory protection of payload region before and after execution?

Can I test it myself somehow?

Does it work if you mmap dll from file and not from memory?

10.0.0.16299 isn't supported in driver yet

I've just tested "NoThreads" flag with my x64 dll and everything worked flawlessly. Perhaps your dll is causing this? Does it work without the flag or using native injection? The...

I'll think about it. Maybe also add it to NuGet.

Implemented for x64. Will add x86 support later.

Any logs? And why on Earth would you want to run matlab from memory?

I guess it's caused by lots of VM exits. EPT violations for DMA regions can also be an issue here. You can try to disable unneeded VM exit triggers and/or...