Windows Driver Kit: Driver Development Tools
Bug Check 0xFC: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
The ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY bug check has a value of 0x000000FC. This indicates that an attempt was made to execute non-executable memory.
Parameters
The following parameters are displayed on the blue screen.
| Parameter | Description |
|---|
| 1 | The virtual address whose execution was attempted |
| 2 | The contents of the page table entry (PTE) |
| 3 | Reserved |
| 4 | Reserved |
Resolving the Problem
When possible, the Unicode string of the driver name that attempted to execute non-executable memory is printed on the bug check screen and is also saved in KiBugCheckDriver. Otherwise, the driver in question can often be found by running a stack trace and then reviewing the current instruction pointer.