*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffffffffffffd0, memory referenced.
Arg2: 0000000000000002, value 0 = read operation, 1 = write operation.
Arg3: fffff80533c7da22, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : AV.Type
Value: Write
Key : Analysis.CPU.mSec
Value: 5108
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 13105
Key : Analysis.Init.CPU.mSec
Value: 1312
Key : Analysis.Init.Elapsed.mSec
Value: 57611
Key : Analysis.Memory.CommitPeak.Mb
Value: 94
FILE_IN_CAB: 031422-8437-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: 50
BUGCHECK_P1: ffffffffffffffd0
BUGCHECK_P2: 2
BUGCHECK_P3: fffff80533c7da22
BUGCHECK_P4: 2
READ_ADDRESS: fffff805346fa390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
ffffffffffffffd0
MM_INTERNAL_CODE: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
TRAP_FRAME: fffffa8e3f699070 -- (.trap 0xfffffa8e3f699070)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8e3f6992e0 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80533c7da22 rsp=fffffa8e3f699200 rbp=0000000000000200
r8=0000000000000000 r9=0000000000000000 r10=00000000696d6167
r11=fffffa8e3f699508 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!ObReferenceObjectByPointerWithTag+0x52:
fffff805`33c7da22 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:ffffffff`ffffffd0=????????????????
Resetting default scope
STACK_TEXT:
fffffa8e`3f698dc8 fffff805`33e4a86f : 00000000`00000050 ffffffff`ffffffd0 00000000`00000002 fffffa8e`3f699070 : nt!KeBugCheckEx
fffffa8e`3f698dd0 fffff805`33c9f550 : fffffa8e`3f699170 00000000`00000002 fffffa8e`3f6990f0 00000000`00000000 : nt!MiSystemFault+0x18d2ff
fffffa8e`3f698ed0 fffff805`33e0575e : ffffe082`da340690 fffff805`33c07d6b 00000000`00000000 ffffe082`dcfbb968 : nt!MmAccessFault+0x400
fffffa8e`3f699070 fffff805`33c7da22 : fffffa8e`3f699200 fffffa8e`3f699200 fffffa8e`3f699210 fffffa8e`3f699210 : nt!KiPageFault+0x35e
fffffa8e`3f699200 fffff805`34068963 : 00000000`00000000 00000000`00000000 ffffe082`cee00280 fffff805`33c8a2c9 : nt!ObReferenceObjectByPointerWithTag+0x52
fffffa8e`3f699240 fffff805`7bce1191 : ffffe082`00000002 ffffe082`d9688b08 ffffe082`696d6167 fffff805`3034c9dd : nt!ObOpenObjectByPointer+0x93
fffffa8e`3f6994c0 ffffe082`00000002 : ffffe082`d9688b08 ffffe082`696d6167 fffff805`3034c9dd 00000000`00000000 : AscFileFilter+0x1191
fffffa8e`3f6994c8 ffffe082`d9688b08 : ffffe082`696d6167 fffff805`3034c9dd 00000000`00000000 00000000`00000200 : 0xffffe082`00000002
fffffa8e`3f6994d0 ffffe082`696d6167 : fffff805`3034c9dd 00000000`00000000 00000000`00000200 fffffa8e`3f699528 : 0xffffe082`d9688b08
fffffa8e`3f6994d8 fffff805`3034c9dd : 00000000`00000000 00000000`00000200 fffffa8e`3f699528 ffffe082`db9dacb0 : 0xffffe082`696d6167
fffffa8e`3f6994e0 fffff805`7bce1c47 : ffffe082`d9688b08 fffffa8e`3f699699 00000000`00000400 00000000`00000000 : FLTMGR!FltGetRequestorProcess+0x1d
fffffa8e`3f699510 ffffe082`d9688b08 : fffffa8e`3f699699 00000000`00000400 00000000`00000000 fffffa8e`3f6995a0 : AscFileFilter+0x1c47
fffffa8e`3f699518 fffffa8e`3f699699 : 00000000`00000400 00000000`00000000 fffffa8e`3f6995a0 fffff805`33c21de5 : 0xffffe082`d9688b08
fffffa8e`3f699520 00000000`00000400 : 00000000`00000000 fffffa8e`3f6995a0 fffff805`33c21de5 00000000`00000005 : 0xfffffa8e`3f699699
fffffa8e`3f699528 00000000`00000000 : fffffa8e`3f6995a0 fffff805`33c21de5 00000000`00000005 00000000`00040000 : 0x400
SYMBOL_NAME: AscFileFilter+1191
MODULE_NAME: AscFileFilter
IMAGE_NAME: AscFileFilter.sys
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 1191
FAILURE_BUCKET_ID: AV_W_(null)_AscFileFilter!unknown_function
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {d011b206-4a59-a3e7-5d3e-983bf7dba9b2}
Followup: MachineOwner
