Ideas
Additional ETW/WPA tracing shows a strong and reproducible time correlation between the recurring Apex Transition-fault bursts and working-set-related activity associated with Easy Anti-Cheat.
I recorded an approximately 856-second xperf trace with CPU sampled stacks and page-fault stack walking enabled. REFSET/reference-set profiling was not used.
The anomaly reproduced three times, approximately 315 seconds apart:
Across the full trace, there were 1,001 matching sampled stacks, and all 1,001 occurred within these same three Transition-fault burst periods.
The three intervals also contained 6,239,455 of 6,324,114 total Apex Transition faults (~98.66%) recorded in the trace.
This does not establish causation or identify the exact virtual-address ranges involved. However, the timing correlation reproduced across all three recurrences and appears strong.
These are the same periodic events in which my CapFrameX measurements show severe frame-time instability, even when average FPS remains close to the cap.
The attached WPA screenshots show the full trace and each affected interval using the same filters.