******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc) An attempt was made to execute non-executable memory. The guilty driver is on the stack trace (and is typically the current instruction pointer). When possible, the guilty driver's name is printed on the BugCheck screen and saved in KiBugCheckDriver. Arguments: Arg1: ffffe1021edac000, Virtual address for the attempted execute. Arg2: 8a00000afaa009e3, PTE contents. Arg3: ffff83816ab235a0, (reserved) Arg4: 0000000000000003, (reserved) Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 265 Key : Analysis.Elapsed.mSec Value: 1274 Key : Analysis.IO.Other.Mb Value: 0 Key : Analysis.IO.Read.Mb Value: 0 Key : Analysis.IO.Write.Mb Value: 0 Key : Analysis.Init.CPU.mSec Value: 124 Key : Analysis.Init.Elapsed.mSec Value: 5456 Key : Analysis.Memory.CommitPeak.Mb Value: 110 Key : Bugcheck.Code.KiBugCheckData Value: 0xfc Key : Bugcheck.Code.LegacyAPI Value: 0xfc Key : Dump.Attributes.AsUlong Value: 1800 Key : Dump.Attributes.DiagDataWrittenToHeader Value: 1 Key : Dump.Attributes.ErrorCode Value: 0 Key : Dump.Attributes.LastLine Value: Dumping physical memory to disk: 100% Key : Dump.Attributes.ProgressPercentage Value: 100 Key : Failure.Bucket Value: 0xFC_nt!MiCheckSystemNxFault Key : Failure.Hash Value: {a6ae5288-6b71-974a-9b09-23f14d998164} Key : Hypervisor.Enlightenments.ValueHex Value: 1417df84 Key : Hypervisor.Flags.AnyHypervisorPresent Value: 1 Key : Hypervisor.Flags.ApicEnlightened Value: 0 Key : Hypervisor.Flags.ApicVirtualizationAvailable Value: 1 Key : Hypervisor.Flags.AsyncMemoryHint Value: 0 Key : Hypervisor.Flags.CoreSchedulerRequested Value: 0 Key : Hypervisor.Flags.CpuManager Value: 1 Key : Hypervisor.Flags.DeprecateAutoEoi Value: 1 Key : Hypervisor.Flags.DynamicCpuDisabled Value: 1 Key : Hypervisor.Flags.Epf Value: 0 Key : Hypervisor.Flags.ExtendedProcessorMasks Value: 1 Key : Hypervisor.Flags.HardwareMbecAvailable Value: 1 Key : Hypervisor.Flags.MaxBankNumber Value: 0 Key : Hypervisor.Flags.MemoryZeroingControl Value: 0 Key : Hypervisor.Flags.NoExtendedRangeFlush Value: 0 Key : Hypervisor.Flags.NoNonArchCoreSharing Value: 1 Key : Hypervisor.Flags.Phase0InitDone Value: 1 Key : Hypervisor.Flags.PowerSchedulerQos Value: 0 Key : Hypervisor.Flags.RootScheduler Value: 0 Key : Hypervisor.Flags.SynicAvailable Value: 1 Key : Hypervisor.Flags.UseQpcBias Value: 0 Key : Hypervisor.Flags.Value Value: 21631230 Key : Hypervisor.Flags.ValueHex Value: 14a10fe Key : Hypervisor.Flags.VpAssistPage Value: 1 Key : Hypervisor.Flags.VsmAvailable Value: 1 Key : Hypervisor.RootFlags.AccessStats Value: 1 Key : Hypervisor.RootFlags.CrashdumpEnlightened Value: 1 Key : Hypervisor.RootFlags.CreateVirtualProcessor Value: 1 Key : Hypervisor.RootFlags.DisableHyperthreading Value: 0 Key : Hypervisor.RootFlags.HostTimelineSync Value: 1 Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled Value: 0 Key : Hypervisor.RootFlags.IsHyperV Value: 1 Key : Hypervisor.RootFlags.LivedumpEnlightened Value: 1 Key : Hypervisor.RootFlags.MapDeviceInterrupt Value: 1 Key : Hypervisor.RootFlags.MceEnlightened Value: 1 Key : Hypervisor.RootFlags.Nested Value: 0 Key : Hypervisor.RootFlags.StartLogicalProcessor Value: 1 Key : Hypervisor.RootFlags.Value Value: 1015 Key : Hypervisor.RootFlags.ValueHex Value: 3f7 Key : SecureKernel.HalpHvciEnabled Value: 1 Key : WER.OS.Branch Value: ni_release Key : WER.OS.Version Value: 10.0.22621.1 BUGCHECK_CODE: fc BUGCHECK_P1: ffffe1021edac000 BUGCHECK_P2: 8a00000afaa009e3 BUGCHECK_P3: ffff83816ab235a0 BUGCHECK_P4: 3 FILE_IN_CAB: MEMORY.DMP TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b DUMP_FILE_ATTRIBUTES: 0x1800 PROCESS_NAME: System TRAP_FRAME: ffff83816ab235a0 -- (.trap 0xffff83816ab235a0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=ffff937cb8a00000 rbx=0000000000000000 rcx=00000000002e0484 rdx=0000000000b81210 rsi=0000000000000000 rdi=0000000000000000 rip=ffffe1021edac000 rsp=ffff83816ab23730 rbp=00000000ff7820ff r8=00000000ff7820ff r9=ffff83816ab236c0 r10=fffff8053ae43440 r11=ffff83816ab236b0 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na po nc ffffe102`1edac000 4832883b05f8ff xor cl,byte ptr [rax-7FAC5h] ds:ffff937c`b898053b=6f Resetting default scope STACK_TEXT: ffff8381`6ab233e8 fffff805`088e42a8 : 00000000`000000fc ffffe102`1edac000 8a00000a`faa009e3 ffff8381`6ab235a0 : nt!KeBugCheckEx ffff8381`6ab233f0 fffff805`088de502 : 00000000`00000011 00000000`00000003 00000000`00000000 ffff8381`6ab234c0 : nt!MiCheckSystemNxFault+0x194c98 ffff8381`6ab23430 fffff805`0863401f : 00000000`00000000 00000000`00000011 ffff8381`6ab23539 00000000`00000000 : nt!MiRaisedIrqlFault+0x1a09a2 ffff8381`6ab23480 fffff805`0883ce29 : 00000000`00000000 00000000`00b8101c ffffe102`28485000 00000000`00000000 : nt!MmAccessFault+0x3af ffff8381`6ab235a0 ffffe102`1edac000 : 00000000`ff7820ff 00000000`00000000 00000000`00000000 fffff805`3af0d2db : nt!KiPageFault+0x369 ffff8381`6ab23730 00000000`ff7820ff : 00000000`00000000 00000000`00000000 fffff805`3af0d2db ffffe102`00000000 : 0xffffe102`1edac000 ffff8381`6ab23738 00000000`00000000 : 00000000`00000000 fffff805`3af0d2db ffffe102`00000000 ffffe102`1edac000 : 0xff7820ff SYMBOL_NAME: nt!MiCheckSystemNxFault+194c98 MODULE_NAME: nt STACK_COMMAND: .cxr; .ecxr ; kb IMAGE_NAME: ntkrnlmp.exe BUCKET_ID_FUNC_OFFSET: 194c98 FAILURE_BUCKET_ID: 0xFC_nt!MiCheckSystemNxFault OS_VERSION: 10.0.22621.1 BUILDLAB_STR: ni_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {a6ae5288-6b71-974a-9b09-23f14d998164} Followup: MachineOwner ---------