PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffb18fe0b9e1c4, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8001473b202, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for WdFilter.sys
Could not read faulting driver name
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 2
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DESKTOP-JC78BRD
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 7
Key : Analysis.Memory.CommitPeak.Mb
Value: 71
Key : Analysis.System
Value: CreateObject
ADDITIONAL_XML: 1
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: 50
BUGCHECK_P1: ffffb18fe0b9e1c4
BUGCHECK_P2: 0
BUGCHECK_P3: fffff8001473b202
BUGCHECK_P4: 2
READ_ADDRESS: fffff80011b733b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff80011a2a3d8: Unable to get Flags value from nt!KdVersionBlock
fffff80011a2a3d8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
ffffb18fe0b9e1c4
MM_INTERNAL_CODE: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: TWCU.exe
TRAP_FRAME: ffffb18fead0df80 -- (.trap 0xffffb18fead0df80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffcd86f8fa5660 rbx=0000000000000000 rcx=ffffcd86f2f38380
rdx=ffffb18fead0e1c8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8001473b202 rsp=ffffb18fead0e110 rbp=ffffb18fead0e130
r8=ffffb18fead0e1a8 r9=000000000000003e r10=000000ff00000000
r11=ffffa77c57400000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
WdFilter+0x4b202:
fffff800`1473b202 32affcffe8f5 xor ch,byte ptr [rdi-0A170004h] ds:ffffffff`f5e8fffc=??
Resetting default scope
STACK_TEXT:
ffffb18f`ead0dcd8 fffff800`1182dd34 : 00000000`00000050 ffffb18f`e0b9e1c4 00000000`00000000 ffffb18f`ead0df80 : nt!KeBugCheckEx
ffffb18f`ead0dce0 fffff800`116c91af : 00000000`00000000 00000000`00000000 00000000`00000000 ffffb18f`e0b9e1c4 : nt!MiSystemFault+0x195c94
ffffb18f`ead0dde0 fffff800`117d041e : ffffcd86`fa0072f8 00000000`00000000 00000000`10000004 00000000`000000c0 : nt!MmAccessFault+0x34f
ffffb18f`ead0df80 fffff800`1473b202 : 00000000`00000000 ffffdd86`12c1ac40 ffffcd86`e6974bc0 ffffb18f`ead0e1e9 : nt!KiPageFault+0x35e
ffffb18f`ead0e110 00000000`00000000 : ffffdd86`12c1ac40 ffffcd86`e6974bc0 ffffb18f`ead0e1e9 ffffb18f`ead0e1e9 : WdFilter+0x4b202
SYMBOL_NAME: WdFilter+4b202
MODULE_NAME: WdFilter
IMAGE_NAME: WdFilter.sys
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 4b202
FAILURE_BUCKET_ID: AV_R_INVALID_WdFilter!unknown_function
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {90a95f8f-f779-a86f-19f1-7c77e04a9e0a}
Followup: MachineOwner
---------