*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory. The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name is printed on
the BugCheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: ffffe1021edac000, Virtual address for the attempted execute.
Arg2: 8a00000afaa009e3, PTE contents.
Arg3: ffff83816ab235a0, (reserved)
Arg4: 0000000000000003, (reserved)
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 265
Key : Analysis.Elapsed.mSec
Value: 1274
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 124
Key : Analysis.Init.Elapsed.mSec
Value: 5456
Key : Analysis.Memory.CommitPeak.Mb
Value: 110
Key : Bugcheck.Code.KiBugCheckData
Value: 0xfc
Key : Bugcheck.Code.LegacyAPI
Value: 0xfc
Key : Dump.Attributes.AsUlong
Value: 1800
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.LastLine
Value: Dumping physical memory to disk: 100%
Key : Dump.Attributes.ProgressPercentage
Value: 100
Key : Failure.Bucket
Value: 0xFC_nt!MiCheckSystemNxFault
Key : Failure.Hash
Value: {a6ae5288-6b71-974a-9b09-23f14d998164}
Key : Hypervisor.Enlightenments.ValueHex
Value: 1417df84
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 21631230
Key : Hypervisor.Flags.ValueHex
Value: 14a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7
Key : SecureKernel.HalpHvciEnabled
Value: 1
Key : WER.OS.Branch
Value: ni_release
Key : WER.OS.Version
Value: 10.0.22621.1
BUGCHECK_CODE: fc
BUGCHECK_P1: ffffe1021edac000
BUGCHECK_P2: 8a00000afaa009e3
BUGCHECK_P3: ffff83816ab235a0
BUGCHECK_P4: 3
FILE_IN_CAB: MEMORY.DMP
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
DUMP_FILE_ATTRIBUTES: 0x1800
PROCESS_NAME: System
TRAP_FRAME: ffff83816ab235a0 -- (.trap 0xffff83816ab235a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff937cb8a00000 rbx=0000000000000000 rcx=00000000002e0484
rdx=0000000000b81210 rsi=0000000000000000 rdi=0000000000000000
rip=ffffe1021edac000 rsp=ffff83816ab23730 rbp=00000000ff7820ff
r8=00000000ff7820ff r9=ffff83816ab236c0 r10=fffff8053ae43440
r11=ffff83816ab236b0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
ffffe102`1edac000 4832883b05f8ff xor cl,byte ptr [rax-7FAC5h] ds:ffff937c`b898053b=6f
Resetting default scope
STACK_TEXT:
ffff8381`6ab233e8 fffff805`088e42a8 : 00000000`000000fc ffffe102`1edac000 8a00000a`faa009e3 ffff8381`6ab235a0 : nt!KeBugCheckEx
ffff8381`6ab233f0 fffff805`088de502 : 00000000`00000011 00000000`00000003 00000000`00000000 ffff8381`6ab234c0 : nt!MiCheckSystemNxFault+0x194c98
ffff8381`6ab23430 fffff805`0863401f : 00000000`00000000 00000000`00000011 ffff8381`6ab23539 00000000`00000000 : nt!MiRaisedIrqlFault+0x1a09a2
ffff8381`6ab23480 fffff805`0883ce29 : 00000000`00000000 00000000`00b8101c ffffe102`28485000 00000000`00000000 : nt!MmAccessFault+0x3af
ffff8381`6ab235a0 ffffe102`1edac000 : 00000000`ff7820ff 00000000`00000000 00000000`00000000 fffff805`3af0d2db : nt!KiPageFault+0x369
ffff8381`6ab23730 00000000`ff7820ff : 00000000`00000000 00000000`00000000 fffff805`3af0d2db ffffe102`00000000 : 0xffffe102`1edac000
ffff8381`6ab23738 00000000`00000000 : 00000000`00000000 fffff805`3af0d2db ffffe102`00000000 ffffe102`1edac000 : 0xff7820ff
SYMBOL_NAME: nt!MiCheckSystemNxFault+194c98
MODULE_NAME: nt
STACK_COMMAND: .cxr; .ecxr ; kb
IMAGE_NAME: ntkrnlmp.exe
BUCKET_ID_FUNC_OFFSET: 194c98
FAILURE_BUCKET_ID: 0xFC_nt!MiCheckSystemNxFault
OS_VERSION: 10.0.22621.1
BUILDLAB_STR: ni_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {a6ae5288-6b71-974a-9b09-23f14d998164}
Followup: MachineOwner
---------
Comments