Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
- Copyright (c) Microsoft Corporation. All rights reserved.
- Loading Dump File [C:\Windows\livekd.dmp]
- Kernel Complete Dump File: Full address space is available
- Comment: 'LiveKD live system view'
- Symbol search path is: srv*c:\websymbols
- *http://msdl.microsoft.com/download/symbols
- Executable search path is:
- Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
- Product: WinNt, suite: TerminalServer SingleUserTS
- Built by: 7601.22436.amd64fre.win7sp1_ldr.130828-1532
- Machine Name:
- Kernel base = 0xfffff800`03c16000 PsLoadedModuleList = 0xfffff800`03e5a6d0
- Debug session time: Thu Apr 3 16:44:07.702 2014 (UTC + 2:00)
- System Uptime: 0 days 12:06:53.658
- Loading Kernel Symbols
- ...............................................................
- ................................................................
- ................................................................
- ...................
- Loading User Symbols
- ................................................................
- ..........................
- Loading unloaded module list
- ..........................*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -
- 0: kd> *** ERROR: Module load completed but symbols could not be loaded for LiveKdD.SYS
- PROCESS fffffa8019b91060
- SessionId: 1 Cid: 4dd4 Peb: 7fffffdc000 ParentCid: 1428
- DirBase: ade7a000 ObjectTable: fffff8a020bb04f0 HandleCount: 446.
- Image: VirtualBox.exe
- VadRoot fffffa8016f6ecf0 Vads 148 Clone 0 Private 5224. Modified 162362. Locked 0.
- DeviceMap fffff8a0030b5a80
- Token fffff8a020c3fa90
- ElapsedTime 01:01:07.043
- UserTime 00:00:01.076
- KernelTime 00:00:00.280
- QuotaPoolUsage[PagedPool] 262144
- QuotaPoolUsage[NonPagedPool] 17944
- Working Set Sizes (now,min,max) (10963, 50, 345) (43852KB, 200KB, 1380KB)
- PeakWorkingSetSize 11019
- VirtualSize 153 Mb
- PeakVirtualSize 176 Mb
- PageFaultCount 495637
- MemoryPriority BACKGROUND
- BasePriority 8
- CommitCharge 6167
- THREAD fffffa8019bffb50 Cid 4dd4.57e0 Teb: 000007fffffde000 Win32Thread: fffff900c34dcc20 WAIT: (UserRequest) UserMode Alertable
- fffffa8016466320 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796417
- Context Switch Count 94612 IdealProcessor: 2 LargeStack
- UserTime 00:00:00.967
- KernelTime 00:00:00.546
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for VirtualBox.exe -
- Win32 Start Address VirtualBox!TrustedMain (0x000000013fcba7ac)
- Stack Init fffff88013016c70 Current fffff88013015e80
- Base fffff88013017000 Limit fffff8801300d000 Call 0
- Priority 11 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`13015ec0 fffff800`03c7ff72 : 00000000`00000202 fffffa80`19bffb50 00000000`00000000 fffff800`03c897d3 : nt!KiSwapContext+0x7a
- fffff880`13016000 fffff800`03c8caea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`13016090 fffff800`03f8313f : fffff880`00000001 fffff880`130163e0 00000000`00000001 fffff880`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`13016350 fffff800`03f834ae : 00000000`00000101 fffff800`0000000d 00000000`00000001 fffff900`c4983c01 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`13016820 fffff800`03c897d3 : fffffa80`19bffb50 00000000`002cc298 fffff880`13016a88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`13016a70 00000000`772d0b6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`13016ae0)
- 00000000`002cc278 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForMultipleObjects+0xa
- THREAD fffffa800c75a060 Cid 4dd4.4eec Teb: 000007fffffda000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa80186bd3f0 SynchronizationTimer
- fffffa801819c430 SynchronizationTimer
- fffffa801954f6a0 SynchronizationTimer
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2574188 Ticks: 221541 (0:00:57:36.061)
- Context Switch Count 15 IdealProcessor: 4
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ntdll!TpIsTimerSet (0x000000007729a870)
- Stack Init fffff8801358cc70 Current fffff8801358be80
- Base fffff8801358d000 Limit fffff88013587000 Call 0
- Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1358bec0 fffff800`03c7ff72 : 00000000`7729f2e0 fffffa80`0c75a060 00000000`00000000 00000000`00000008 : nt!KiSwapContext+0x7a
- fffff880`1358c000 fffff800`03c8caea : 00000000`00000000 00000000`00001f80 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`1358c090 fffff800`03f8313f : 00000000`00000003 fffff880`1358c3e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`1358c350 fffff800`03f834ae : fffffa80`19af8b01 fffff8a0`01165c00 fffff8a0`00000001 fffff800`03f83901 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`1358c820 fffff800`03c897d3 : fffffa80`0c75a060 00000000`029ff8c8 fffff880`1358ca88 fffff880`1358ca00 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`1358ca70 00000000`772d0b6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1358cae0)
- 00000000`029ff8a8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForMultipleObjects+0xa
- THREAD fffffa8019135770 Cid 4dd4.5a98 Teb: 000007fffff04000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa801930b060 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2791568 Ticks: 4161 (0:00:01:04.912)
- Context Switch Count 17 IdealProcessor: 3
- UserTime 00:00:00.015
- KernelTime 00:00:00.000
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for ole32.dll -
- Win32 Start Address ole32!ObjectStublessClient24 (0x000007fefeb90168)
- Stack Init fffff880135a6c70 Current fffff880135a67c0
- Base fffff880135a7000 Limit fffff880135a1000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`135a6800 fffff800`03c7ff72 : fffffa80`19135770 fffffa80`19135770 fffff8a0`00000000 fffff800`00000006 : nt!KiSwapContext+0x7a
- fffff880`135a6940 fffff800`03c9139f : 00000000`00000664 ffffb83b`0b6edb17 00000000`000000af 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`135a69d0 fffff800`03f82e0e : fffff880`135a6b00 fffffa80`00000006 00000000`00000001 00000000`00000000 : nt!KeWaitForSingleObject+0x19f
- fffff880`135a6a70 fffff800`03c897d3 : fffffa80`19135770 00000000`000493e0 fffff880`135a6ab8 fffffa80`1930b060 : nt!NtWaitForSingleObject+0xde
- fffff880`135a6ae0 00000000`772d05fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`135a6ae0)
- 00000000`0629fcb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- THREAD fffffa8019c9ab50 Cid 4dd4.3fa8 Teb: 000007fffff0c000 Win32Thread: fffff900c34dd010 WAIT: (UserRequest) UserMode Alertable
- fffffa801683fa60 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563892 Ticks: 231837 (0:01:00:16.680)
- Context Switch Count 1457 IdealProcessor: 2 LargeStack
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for WINMM.dll -
- Win32 Start Address WINMM!timeEndPeriod (0x000007fefa6da850)
- Stack Init fffff880142e3c70 Current fffff880142e2e80
- Base fffff880142e4000 Limit fffff880142dd000 Call 0
- Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`142e2ec0 fffff800`03c7ff72 : 00000000`00000000 fffffa80`19c9ab50 00000000`00000000 00000000`0000000b : nt!KiSwapContext+0x7a
- fffff880`142e3000 fffff800`03c8caea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`142e3090 fffff800`03f8313f : fffff880`00000001 fffff880`142e33e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`142e3350 fffff800`03f834ae : fffff880`03565101 fffff800`03c953c0 ffffffff`00000001 fffff880`03565101 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`142e3820 fffff800`03c897d3 : fffffa80`19c9ab50 00000000`0352f978 fffff880`142e3a88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`142e3a70 00000000`772d0b6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`142e3ae0)
- 00000000`0352f958 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForMultipleObjects+0xa
- THREAD fffffa80189cfb50 Cid 4dd4.4f5c Teb: 000007fffffd4000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) UserMode Non-Alertable
- fffffa8019815220 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2793557 Ticks: 2172 (0:00:00:33.883)
- Context Switch Count 30 IdealProcessor: 1
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ole32!ObjectStublessClient24 (0x000007fefeb90168)
- Stack Init fffff880148a6c70 Current fffff880148a6830
- Base fffff880148a7000 Limit fffff880148a1000 Call 0
- Priority 9 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`148a6870 fffff800`03c7ff72 : fffffa80`189cfb50 fffffa80`189cfb50 00000065`00000000 fffff800`00000000 : nt!KiSwapContext+0x7a
- fffff880`148a69b0 fffff800`03c90392 : 00000000`00000001 00000000`00000000 fffff880`0000005b fffff880`148a6b60 : nt!KiCommitThreadWait+0x1d2
- fffff880`148a6a40 fffff800`03f82e9e : fffffa80`189cfb50 ffffffff`ee1e5d00 00000000`00000000 00000000`0000005b : nt!KeDelayExecutionThread+0x186
- fffff880`148a6ab0 fffff800`03c897d3 : fffffa80`189cfb50 00000000`00007530 ffffffff`dc3cba00 fffffa80`19815220 : nt!NtDelayExecution+0x59
- fffff880`148a6ae0 00000000`772d08fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`148a6ae0)
- 00000000`02fef788 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!ZwDelayExecution+0xa
- THREAD fffffa800c8b8aa0 Cid 4dd4.8b1c Teb: 000007fffffd6000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
- fffffa8017e3ca00 QueueObject
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2795572 Ticks: 157 (0:00:00:02.449)
- Context Switch Count 298 IdealProcessor: 0
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ntdll!RtlValidateHeap (0x000000007729f2e0)
- Stack Init fffff8801135dc70 Current fffff8801135d680
- Base fffff8801135e000 Limit fffff88011358000 Call 0
- Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1135d6c0 fffff800`03c7ff72 : fffffa80`0c8b8aa0 fffffa80`0c8b8aa0 00000000`00000000 fffff800`00000009 : nt!KiSwapContext+0x7a
- fffff880`1135d800 fffff800`03c91be3 : 00000000`00000000 fffff800`03c7d96d fffff800`000000fa fffff800`03f9a887 : nt!KiCommitThreadWait+0x1d2
- fffff880`1135d890 fffff800`03f75417 : 00000000`19761400 fffff800`04204b01 ffffffff`80000f01 00000000`00001000 : nt!KeRemoveQueueEx+0x323
- fffff880`1135d950 fffff800`03c75836 : 00000000`77383600 fffff880`1135da68 fffff880`1135da88 00000000`00000001 : nt!IoRemoveIoCompletion+0x47
- fffff880`1135d9e0 fffff800`03c897d3 : fffffa80`0c8b8aa0 00000000`773835c0 00000000`00000000 fffffa80`184c9ad0 : nt!NtWaitForWorkViaWorkerFactory+0x285
- fffff880`1135dae0 00000000`772d1eba : 00000be8`00000006 00000001`00003304 000027d4`80080008 80080008`00000001 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1135dae0)
- 00000000`0388f778 00000be8`00000006 : 00000001`00003304 000027d4`80080008 80080008`00000001 00000001`0000246c : ntdll!ZwWaitForWorkViaWorkerFactory+0xa
- 00000000`0388f780 00000001`00003304 : 000027d4`80080008 80080008`00000001 00000001`0000246c 00010f84`00000228 : 0x00000be8`00000006
- 00000000`0388f788 000027d4`80080008 : 80080008`00000001 00000001`0000246c 00010f84`00000228 80030003`00000001 : 0x00000001`00003304
- 00000000`0388f790 80080008`00000001 : 00000001`0000246c 00010f84`00000228 80030003`00000001 00000001`00010fa0 : 0x000027d4`80080008
- 00000000`0388f798 00000001`0000246c : 00010f84`00000228 80030003`00000001 00000001`00010fa0 00007a38`00000010 : 0x80080008`00000001
- 00000000`0388f7a0 00010f84`00000228 : 80030003`00000001 00000001`00010fa0 00007a38`00000010 00100024`00000002 : 0x00000001`0000246c
- 00000000`0388f7a8 80030003`00000001 : 00000001`00010fa0 00007a38`00000010 00100024`00000002 00000000`80190019 : 0x00010f84`00000228
- 00000000`0388f7b0 00000001`00010fa0 : 00007a38`00000010 00100024`00000002 00000000`80190019 00100409`007800b8 : 0x80030003`00000001
- 00000000`0388f7b8 00007a38`00000010 : 00100024`00000002 00000000`80190019 00100409`007800b8 80030003`00000001 : 0x00000001`00010fa0
- 00000000`0388f7c0 00100024`00000002 : 00000000`80190019 00100409`007800b8 80030003`00000001 00000001`00010fe4 : 0x00007a38`00000010
- 00000000`0388f7c8 00000000`80190019 : 00100409`007800b8 80030003`00000001 00000001`00010fe4 80190019`00110060 : 0x00100024`00000002
- 00000000`0388f7d0 00100409`007800b8 : 80030003`00000001 00000001`00010fe4 80190019`00110060 015800c0`00000000 : 0x80190019
- 00000000`0388f7d8 80030003`00000001 : 00000001`00010fe4 80190019`00110060 015800c0`00000000 00000006`00114409 : 0x00100409`007800b8
- 00000000`0388f7e0 00000001`00010fe4 : 80190019`00110060 015800c0`00000000 00000006`00114409 00003304`00000be8 : 0x80030003`00000001
- 00000000`0388f7e8 80190019`00110060 : 015800c0`00000000 00000006`00114409 00003304`00000be8 80080008`00000001 : 0x00000001`00010fe4
- 00000000`0388f7f0 015800c0`00000000 : 00000006`00114409 00003304`00000be8 80080008`00000001 00000001`0000d164 : 0x80190019`00110060
- 00000000`0388f7f8 00000006`00114409 : 00003304`00000be8 80080008`00000001 00000001`0000d164 0000d178`80080008 : 0x015800c0`00000000
- 00000000`0388f800 00003304`00000be8 : 80080008`00000001 00000001`0000d164 0000d178`80080008 80030003`00000001 : 0x00000006`00114409
- 00000000`0388f808 80080008`00000001 : 00000001`0000d164 0000d178`80080008 80030003`00000001 00000001`00010ff8 : 0x00003304`00000be8
- 00000000`0388f810 00000001`0000d164 : 0000d178`80080008 80030003`00000001 00000001`00010ff8 00011018`00000648 : 0x80080008`00000001
- 00000000`0388f818 0000d178`80080008 : 80030003`00000001 00000001`00010ff8 00011018`00000648 00000230`00000002 : 0x00000001`0000d164
- 00000000`0388f820 80030003`00000001 : 00000001`00010ff8 00011018`00000648 00000230`00000002 0000000a`000036c0 : 0x0000d178`80080008
- 00000000`0388f828 00000001`00010ff8 : 00011018`00000648 00000230`00000002 0000000a`000036c0 80190019`00120018 : 0x80030003`00000001
- 00000000`0388f830 00011018`00000648 : 00000230`00000002 0000000a`000036c0 80190019`00120018 005800c8`00000000 : 0x00000001`00010ff8
- 00000000`0388f838 00000230`00000002 : 0000000a`000036c0 80190019`00120018 005800c8`00000000 00000000`00120409 : 0x00011018`00000648
- 00000000`0388f840 0000000a`000036c0 : 80190019`00120018 005800c8`00000000 00000000`00120409 80190019`00130048 : 0x00000230`00000002
- 00000000`0388f848 80190019`00120018 : 005800c8`00000000 00000000`00120409 80190019`00130048 012800d0`00000000 : 0x0000000a`000036c0
- 00000000`0388f850 005800c8`00000000 : 00000000`00120409 80190019`00130048 012800d0`00000000 00000004`00134409 : 0x80190019`00120018
- 00000000`0388f858 00000000`00120409 : 80190019`00130048 012800d0`00000000 00000004`00134409 00003304`00000be8 : 0x005800c8`00000000
- 00000000`0388f860 80190019`00130048 : 012800d0`00000000 00000004`00134409 00003304`00000be8 00000670`00000001 : 0x120409
- 00000000`0388f868 012800d0`00000000 : 00000004`00134409 00003304`00000be8 00000670`00000001 00000001`0000d1a8 : 0x80190019`00130048
- 00000000`0388f870 00000004`00134409 : 00003304`00000be8 00000670`00000001 00000001`0000d1a8 00011018`00000648 : 0x012800d0`00000000
- 00000000`0388f878 00003304`00000be8 : 00000670`00000001 00000001`0000d1a8 00011018`00000648 00000230`00000002 : 0x00000004`00134409
- 00000000`0388f880 00000670`00000001 : 00000001`0000d1a8 00011018`00000648 00000230`00000002 0000000a`000036c0 : 0x00003304`00000be8
- THREAD fffffa802432fb50 Cid 4dd4.819c Teb: 000007fffffd8000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
- fffffa8017e3ca00 QueueObject
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8019b91060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796482
- Context Switch Count 65 IdealProcessor: 2
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ntdll!RtlValidateHeap (0x000000007729f2e0)
- Stack Init fffff880125c4c70 Current fffff880125c4680
- Base fffff880125c5000 Limit fffff880125bf000 Call 0
- Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`125c46c0 fffff800`03c7ff72 : fffffa80`2432fb50 fffffa80`2432fb50 00000000`00000000 00000000`00000002 : nt!KiSwapContext+0x7a
- fffff880`125c4800 fffff800`03c91be3 : fffffa80`19954e60 fffff800`03f992c9 fffff800`000000ca fffff800`03f9a887 : nt!KiCommitThreadWait+0x1d2
- fffff880`125c4890 fffff800`03f75417 : 00000000`00000000 fffff800`04204b01 fffffa80`166e1201 00000000`00001000 : nt!KeRemoveQueueEx+0x323
- fffff880`125c4950 fffff800`03c75836 : 00000000`77383600 fffff880`125c4a68 fffff880`125c4a88 00000000`00000001 : nt!IoRemoveIoCompletion+0x47
- fffff880`125c49e0 fffff800`03c897d3 : fffffa80`2432fb50 00000000`773835c0 fffff880`00000000 fffffa80`19733cd0 : nt!NtWaitForWorkViaWorkerFactory+0x285
- fffff880`125c4ae0 00000000`772d1eba : f7a33f47`eebb7732 234e047f`10a78a54 f04b0f86`6af77af8 4f3e9f90`ab822f57 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`125c4ae0)
- 00000000`033ef9f8 f7a33f47`eebb7732 : 234e047f`10a78a54 f04b0f86`6af77af8 4f3e9f90`ab822f57 4df27237`f2a78362 : ntdll!ZwWaitForWorkViaWorkerFactory+0xa
- 00000000`033efa00 234e047f`10a78a54 : f04b0f86`6af77af8 4f3e9f90`ab822f57 4df27237`f2a78362 887f2e25`fdf801f0 : 0xf7a33f47`eebb7732
- 00000000`033efa08 f04b0f86`6af77af8 : 4f3e9f90`ab822f57 4df27237`f2a78362 887f2e25`fdf801f0 92ff8e35`e39dbfcb : 0x234e047f`10a78a54
- 00000000`033efa10 4f3e9f90`ab822f57 : 4df27237`f2a78362 887f2e25`fdf801f0 92ff8e35`e39dbfcb c999737e`58d3a5e3 : 0xf04b0f86`6af77af8
- 00000000`033efa18 4df27237`f2a78362 : 887f2e25`fdf801f0 92ff8e35`e39dbfcb c999737e`58d3a5e3 43c0e4eb`8e3faf94 : 0x4f3e9f90`ab822f57
- 00000000`033efa20 887f2e25`fdf801f0 : 92ff8e35`e39dbfcb c999737e`58d3a5e3 43c0e4eb`8e3faf94 6c617c7f`93857e5c : 0x4df27237`f2a78362
- 00000000`033efa28 92ff8e35`e39dbfcb : c999737e`58d3a5e3 43c0e4eb`8e3faf94 6c617c7f`93857e5c bc7007e3`8978e25e : 0x887f2e25`fdf801f0
- 00000000`033efa30 c999737e`58d3a5e3 : 43c0e4eb`8e3faf94 6c617c7f`93857e5c bc7007e3`8978e25e e59bd3bc`7297f1c0 : 0x92ff8e35`e39dbfcb
- 00000000`033efa38 43c0e4eb`8e3faf94 : 6c617c7f`93857e5c bc7007e3`8978e25e e59bd3bc`7297f1c0 5e3933f1`c5bc71c7 : 0xc999737e`58d3a5e3
- 00000000`033efa40 6c617c7f`93857e5c : bc7007e3`8978e25e e59bd3bc`7297f1c0 5e3933f1`c5bc71c7 cb887c72`17e5853d : 0x43c0e4eb`8e3faf94
- 00000000`033efa48 bc7007e3`8978e25e : e59bd3bc`7297f1c0 5e3933f1`c5bc71c7 cb887c72`17e5853d 0b87fe5c`cbc7077f : 0x6c617c7f`93857e5c
- 00000000`033efa50 e59bd3bc`7297f1c0 : 5e3933f1`c5bc71c7 cb887c72`17e5853d 0b87fe5c`cbc7077f 5ffa8c3f`90d3fad9 : 0xbc7007e3`8978e25e
- 00000000`033efa58 5e3933f1`c5bc71c7 : cb887c72`17e5853d 0b87fe5c`cbc7077f 5ffa8c3f`90d3fad9 35822ced`7832f1cd : 0xe59bd3bc`7297f1c0
- 00000000`033efa60 cb887c72`17e5853d : 0b87fe5c`cbc7077f 5ffa8c3f`90d3fad9 35822ced`7832f1cd 824ce7ed`193e1f1c : 0x5e3933f1`c5bc71c7
- 00000000`033efa68 0b87fe5c`cbc7077f : 5ffa8c3f`90d3fad9 35822ced`7832f1cd 824ce7ed`193e1f1c 857f832f`06de395b : 0xcb887c72`17e5853d
- 00000000`033efa70 5ffa8c3f`90d3fad9 : 35822ced`7832f1cd 824ce7ed`193e1f1c 857f832f`06de395b f4ca820c`ff9a4de3 : 0x0b87fe5c`cbc7077f
- 00000000`033efa78 35822ced`7832f1cd : 824ce7ed`193e1f1c 857f832f`06de395b f4ca820c`ff9a4de3 2afeb0d1`7fde84bc : 0x5ffa8c3f`90d3fad9
- 00000000`033efa80 824ce7ed`193e1f1c : 857f832f`06de395b f4ca820c`ff9a4de3 2afeb0d1`7fde84bc 9d5e5fcf`bfd4f3cd : 0x35822ced`7832f1cd
- 00000000`033efa88 857f832f`06de395b : f4ca820c`ff9a4de3 2afeb0d1`7fde84bc 9d5e5fcf`bfd4f3cd 91fcdafb`520bf7d1 : 0x824ce7ed`193e1f1c
- 00000000`033efa90 f4ca820c`ff9a4de3 : 2afeb0d1`7fde84bc 9d5e5fcf`bfd4f3cd 91fcdafb`520bf7d1 be428ff3`5e8a6ff4 : 0x857f832f`06de395b
- 00000000`033efa98 2afeb0d1`7fde84bc : 9d5e5fcf`bfd4f3cd 91fcdafb`520bf7d1 be428ff3`5e8a6ff4 69b8c93b`1bf31e51 : 0xf4ca820c`ff9a4de3
- 00000000`033efaa0 9d5e5fcf`bfd4f3cd : 91fcdafb`520bf7d1 be428ff3`5e8a6ff4 69b8c93b`1bf31e51 83ffefdd`4b9d9d01 : 0x2afeb0d1`7fde84bc
- 00000000`033efaa8 91fcdafb`520bf7d1 : be428ff3`5e8a6ff4 69b8c93b`1bf31e51 83ffefdd`4b9d9d01 7e29e0db`e47155dc : 0x9d5e5fcf`bfd4f3cd
- 00000000`033efab0 be428ff3`5e8a6ff4 : 69b8c93b`1bf31e51 83ffefdd`4b9d9d01 7e29e0db`e47155dc a7cd95bc`5fea4451 : 0x91fcdafb`520bf7d1
- 00000000`033efab8 69b8c93b`1bf31e51 : 83ffefdd`4b9d9d01 7e29e0db`e47155dc a7cd95bc`5fea4451 78feb9d3`fbc3c92e : 0xbe428ff3`5e8a6ff4
- 00000000`033efac0 83ffefdd`4b9d9d01 : 7e29e0db`e47155dc a7cd95bc`5fea4451 78feb9d3`fbc3c92e 5b081bc7`0af96c6b : 0x69b8c93b`1bf31e51
- 00000000`033efac8 7e29e0db`e47155dc : a7cd95bc`5fea4451 78feb9d3`fbc3c92e 5b081bc7`0af96c6b 1502ce31`cbf28740 : 0x83ffefdd`4b9d9d01
- 00000000`033efad0 a7cd95bc`5fea4451 : 78feb9d3`fbc3c92e 5b081bc7`0af96c6b 1502ce31`cbf28740 ee5ad006`81d40aa0 : 0x7e29e0db`e47155dc
- 00000000`033efad8 78feb9d3`fbc3c92e : 5b081bc7`0af96c6b 1502ce31`cbf28740 ee5ad006`81d40aa0 65fe996b`6337ee5e : 0xa7cd95bc`5fea4451
- 00000000`033efae0 5b081bc7`0af96c6b : 1502ce31`cbf28740 ee5ad006`81d40aa0 65fe996b`6337ee5e e37c6e22`dff5c4de : 0x78feb9d3`fbc3c92e
- 00000000`033efae8 1502ce31`cbf28740 : ee5ad006`81d40aa0 65fe996b`6337ee5e e37c6e22`dff5c4de 99fc5e38`578e72f8 : 0x5b081bc7`0af96c6b
- 00000000`033efaf0 ee5ad006`81d40aa0 : 65fe996b`6337ee5e e37c6e22`dff5c4de 99fc5e38`578e72f8 fe6cc51b`fc722f95 : 0x1502ce31`cbf28740
- 00000000`033efaf8 65fe996b`6337ee5e : e37c6e22`dff5c4de 99fc5e38`578e72f8 fe6cc51b`fc722f95 97b7c9c4`5f9606f0 : 0xee5ad006`81d40aa0
- 00000000`033efb00 e37c6e22`dff5c4de : 99fc5e38`578e72f8 fe6cc51b`fc722f95 97b7c9c4`5f9606f0 fa78e21f`1cedfcb2 : 0x65fe996b`6337ee5e
- PROCESS fffffa8016715280
- SessionId: 1 Cid: 58a4 Peb: 7fffffdb000 ParentCid: 5570
- DirBase: 3e161d000 ObjectTable: 00000000 HandleCount: 0.
- Image: VirtualBox.exe
- VadRoot 0000000000000000 Vads 0 Clone 0 Private 1. Modified 141. Locked 0.
- DeviceMap fffff8a0030b5a80
- Token fffff8a020e8ea90
- ElapsedTime 01:00:45.943
- UserTime 00:00:00.202
- KernelTime 00:00:00.343
- QuotaPoolUsage[PagedPool] 0
- QuotaPoolUsage[NonPagedPool] 0
- Working Set Sizes (now,min,max) (5, 50, 345) (20KB, 200KB, 1380KB)
- PeakWorkingSetSize 14497
- VirtualSize 150 Mb
- PeakVirtualSize 222 Mb
- PageFaultCount 41074
- MemoryPriority BACKGROUND
- BasePriority 8
- CommitCharge 0
- No active threads
- PROCESS fffffa8018615060
- SessionId: 1 Cid: 5ad0 Peb: 7fffffda000 ParentCid: 5570
- DirBase: 3ab9de000 ObjectTable: fffff8a01a0bf370 HandleCount: 652.
- Image: VirtualBox.exe
- VadRoot fffffa8018036960 Vads 327 Clone 0 Private 9411. Modified 94954. Locked 0.
- DeviceMap fffff8a0030b5a80
- Token fffff8a020b1ea90
- ElapsedTime 01:00:18.509
- UserTime 00:00:00.046
- KernelTime 00:00:00.031
- QuotaPoolUsage[PagedPool] 317224
- QuotaPoolUsage[NonPagedPool] 39504
- Working Set Sizes (now,min,max) (16274, 50, 345) (65096KB, 200KB, 1380KB)
- PeakWorkingSetSize 16712
- VirtualSize 232 Mb
- PeakVirtualSize 242 Mb
- PageFaultCount 1630369
- MemoryPriority BACKGROUND
- BasePriority 8
- CommitCharge 15615
- THREAD fffffa8019cc0060 Cid 5ad0.5afc Teb: 000007fffffde000 Win32Thread: fffff900c35bf010 WAIT: (UserRequest) UserMode Alertable
- fffffa801663bb40 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796561
- Context Switch Count 406357 IdealProcessor: 5 LargeStack
- UserTime 00:00:01.154
- KernelTime 00:00:00.873
- Win32 Start Address VirtualBox!TrustedMain (0x000000013fcba7ac)
- Stack Init fffff88014362c70 Current fffff88014361e80
- Base fffff88014363000 Limit fffff88014359000 Call 0
- Priority 12 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for KERNELBASE.dll -
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for kernel32.dll -
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`14361ec0 fffff800`03c7ff72 : 00000000`00000202 fffffa80`19cc0060 fffff880`00000000 fffffa80`17380b50 : nt!KiSwapContext+0x7a
- fffff880`14362000 fffff800`03c8caea : fffffa80`136a4500 fffffa80`17380b50 fffffa80`00000000 fffffa80`17380c58 : nt!KiCommitThreadWait+0x1d2
- fffff880`14362090 fffff800`03f8313f : fffff880`00000001 fffff880`143623e0 00000000`00000001 fffff880`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`14362350 fffff800`03f834ae : 0000000a`00000001 fffff880`03717180 fffffa80`00000001 fffff880`009b3101 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`14362820 fffff800`03c897d3 : fffffa80`19cc0060 00000000`0014c268 fffff880`14362a88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`14362a70 00000000`772d0b6a : 000007fe`fd2b1420 00000000`00000001 00000000`00000001 00000000`0014c298 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`14362ae0)
- 00000000`0014c248 000007fe`fd2b1420 : 00000000`00000001 00000000`00000001 00000000`0014c298 00000000`501fe525 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0014c250 00000000`77082cd3 : 00000000`0014c388 00000000`0014c380 00000000`00000000 00000000`00000000 : KERNELBASE!GetCurrentProcess+0x40
- 00000000`0014c350 00000000`0014c388 : 00000000`0014c380 00000000`00000000 00000000`00000000 00000000`00000001 : kernel32!WaitForMultipleObjectsEx+0xb3
- 00000000`0014c358 00000000`0014c380 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`77199bef : 0x14c388
- 00000000`0014c360 00000000`00000000 : 00000000`00000000 00000000`00000001 00000000`77199bef 00000000`00000028 : 0x14c380
- THREAD fffffa8019c21640 Cid 5ad0.4aa0 Teb: 000007fffffdc000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa8019c93580 SynchronizationTimer
- fffffa8017d51060 SynchronizationTimer
- fffffa801998bce0 SynchronizationTimer
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2579166 Ticks: 216563 (0:00:56:18.404)
- Context Switch Count 6 IdealProcessor: 7
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ntdll!TpIsTimerSet (0x000000007729a870)
- Stack Init fffff88010ee5c70 Current fffff88010ee4e80
- Base fffff88010ee6000 Limit fffff88010ee0000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`10ee4ec0 fffff800`03c7ff72 : 00000000`7729f2e0 fffffa80`19c21640 00000000`00000000 00000000`0000000a : nt!KiSwapContext+0x7a
- fffff880`10ee5000 fffff800`03c8caea : 00000000`00000000 00000000`00001f80 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`10ee5090 fffff800`03f8313f : fffff880`00000003 fffff880`10ee53e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`10ee5350 fffff800`03f834ae : fffffa80`19ceb901 fffff8a0`04404240 fffff8a0`00000001 fffff800`03f83901 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`10ee5820 fffff800`03c897d3 : fffffa80`19c21640 00000000`02a9fa88 fffff880`10ee5a88 fffff880`10ee5a00 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`10ee5a70 00000000`772d0b6a : 00000000`7729a9b7 00000000`00000002 00000000`00000000 00000000`77383550 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`10ee5ae0)
- 00000000`02a9fa68 00000000`7729a9b7 : 00000000`00000002 00000000`00000000 00000000`77383550 00000000`77383550 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`02a9fa70 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TpIsTimerSet+0x907
- THREAD fffffa8019bff640 Cid 5ad0.5838 Teb: 000007fffffd4000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) UserMode Non-Alertable
- fffffa8016496710 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2794917 Ticks: 812 (0:00:00:12.667)
- Context Switch Count 125 IdealProcessor: 4
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ole32!ObjectStublessClient24 (0x000007fefeb90168)
- Stack Init fffff880143d9c70 Current fffff880143d9830
- Base fffff880143da000 Limit fffff880143d4000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`143d9870 fffff800`03c7ff72 : fffffa80`19bff640 fffffa80`19bff640 00000065`00000000 fffff800`00000006 : nt!KiSwapContext+0x7a
- fffff880`143d99b0 fffff800`03c90392 : 00000000`00000001 00000000`00000000 fffff880`000000ab fffff880`143d9b60 : nt!KiCommitThreadWait+0x1d2
- fffff880`143d9a40 fffff800`03f82e9e : fffffa80`19bff640 ffffffff`ee1e5d00 00000000`00000000 00000000`000000ab : nt!KeDelayExecutionThread+0x186
- fffff880`143d9ab0 fffff800`03c897d3 : fffffa80`19bff640 00000000`00007530 ffffffff`dc3cba00 fffffa80`16496710 : nt!NtDelayExecution+0x59
- fffff880`143d9ae0 00000000`772d08fa : 000007fe`fd2b1203 00000000`0323f898 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`143d9ae0)
- 00000000`0323f7d8 000007fe`fd2b1203 : 00000000`0323f898 00000000`00000000 00000000`00000000 00000000`00000248 : ntdll!ZwDelayExecution+0xa
- 00000000`0323f7e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNELBASE!SleepEx+0xb3
- THREAD fffffa8019d11060 Cid 5ad0.5a0c Teb: 000007fffff06000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa8019c66650 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2794554 Ticks: 1175 (0:00:00:18.330)
- Context Switch Count 18 IdealProcessor: 7
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ole32!ObjectStublessClient24 (0x000007fefeb90168)
- Stack Init fffff88003006c70 Current fffff880030067c0
- Base fffff88003007000 Limit fffff88003001000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`03006800 fffff800`03c7ff72 : fffffa80`19d11060 fffffa80`19d11060 fffffa80`00000000 00000000`00000006 : nt!KiSwapContext+0x7a
- fffff880`03006940 fffff800`03c9139f : 00000000`00000440 00000000`00001ffb fffffa80`00000059 00000000`00001f00 : nt!KiCommitThreadWait+0x1d2
- fffff880`030069d0 fffff800`03f82e0e : 00000000`00000000 00000000`00000006 00000000`00000001 fffff880`03006a00 : nt!KeWaitForSingleObject+0x19f
- fffff880`03006a70 fffff800`03c897d3 : fffffa80`19d11060 00000000`000493e0 fffff880`03006ab8 fffffa80`19c66650 : nt!NtWaitForSingleObject+0xde
- fffff880`03006ae0 00000000`772d05fa : 000007fe`fd2b10ac ffffffff`00000000 00000000`03c3f648 00000000`03c3f648 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`03006ae0)
- 00000000`03c3f638 000007fe`fd2b10ac : ffffffff`00000000 00000000`03c3f648 00000000`03c3f648 000007fe`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`03c3f640 000007fe`feb8b354 : 00000000`00000440 00000000`00000001 000007fe`00000000 00000000`00000440 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`03c3f6e0 00000000`00000440 : 00000000`00000001 000007fe`00000000 00000000`00000440 00000000`02acaf20 : ole32!CoRevokeInitializeSpy+0x5f0
- 00000000`03c3f6e8 00000000`00000001 : 000007fe`00000000 00000000`00000440 00000000`02acaf20 000007fe`fece3e50 : 0x440
- 00000000`03c3f6f0 000007fe`00000000 : 00000000`00000440 00000000`02acaf20 000007fe`fece3e50 00000000`02acaf20 : 0x1
- 00000000`03c3f6f8 00000000`00000440 : 00000000`02acaf20 000007fe`fece3e50 00000000`02acaf20 00000000`00000000 : 0x000007fe`00000000
- 00000000`03c3f700 00000000`02acaf20 : 000007fe`fece3e50 00000000`02acaf20 00000000`00000000 00000000`02acaf20 : 0x440
- 00000000`03c3f708 000007fe`fece3e50 : 00000000`02acaf20 00000000`00000000 00000000`02acaf20 000007fe`feba3032 : 0x2acaf20
- 00000000`03c3f710 00000000`02acaf20 : 00000000`00000000 00000000`02acaf20 000007fe`feba3032 00000000`00000000 : ole32!CoUnloadingWOW+0x110
- 00000000`03c3f718 00000000`00000000 : 00000000`02acaf20 000007fe`feba3032 00000000`00000000 00000000`02b356b0 : 0x2acaf20
- THREAD fffffa8019d02b50 Cid 5ad0.5bf0 Teb: 000007fffff02000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa8015e11810 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796542
- Context Switch Count 11040 IdealProcessor: 2
- UserTime 00:00:00.015
- KernelTime 00:00:00.000
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for MSVCR100.dll -
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff88003087c70 Current fffff880030877c0
- Base fffff88003088000 Limit fffff88003082000 Call 0
- Priority 12 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxRT.dll -
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`03087800 fffff800`03c7ff72 : fffffa80`19d02b50 fffffa80`19d02b50 fffff8a0`00000000 fffff8a0`00000006 : nt!KiSwapContext+0x7a
- fffff880`03087940 fffff800`03c9139f : 00000000`00000490 00000000`02b12048 00000000`0000007e 00000000`0427eb10 : nt!KiCommitThreadWait+0x1d2
- fffff880`030879d0 fffff800`03f82e0e : fffffa80`19d02b00 fffff880`00000006 00000000`00000001 fffff880`03087a01 : nt!KeWaitForSingleObject+0x19f
- fffff880`03087a70 fffff800`03c897d3 : fffffa80`19d02b50 00000000`000003e7 fffff880`03087ab8 fffffa80`15e11810 : nt!NtWaitForSingleObject+0xde
- fffff880`03087ae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`027a91f0 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`03087ae0)
- 00000000`0427fc08 000007fe`fd2b10ac : 00000000`027a91f0 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`0427fc10 000007fe`e5f81cd8 : 00000000`027d95b0 00000000`000003e7 000027ad`00000001 00000000`00000490 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0427fcb0 000007fe`e5f72be4 : 00000000`027b9370 00000000`00005bf0 000027ad`00000000 00000000`00000000 : VBoxRT!RTSemEventWaitNoResume+0x78
- 00000000`0427fce0 00000000`027b9370 : 00000000`00005bf0 000027ad`00000000 00000000`00000000 000027ad`c8209d9d : VBoxRT!RTSemEventWait+0x44
- 00000000`0427fce8 00000000`00005bf0 : 000027ad`00000000 00000000`00000000 000027ad`c8209d9d 000007fe`e5f5337d : 0x27b9370
- 00000000`0427fcf0 000027ad`00000000 : 00000000`00000000 000027ad`c8209d9d 000007fe`e5f5337d 00000000`027d9480 : 0x5bf0
- 00000000`0427fcf8 00000000`00000000 : 000027ad`c8209d9d 000007fe`e5f5337d 00000000`027d9480 431bde82`d7b634db : 0x000027ad`00000000
- THREAD fffffa8019cc9060 Cid 5ad0.58c4 Teb: 000007fffff00000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa80184e9fe0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563787 Ticks: 231942 (0:01:00:18.318)
- Context Switch Count 2 IdealProcessor: 4
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8800308ec70 Current fffff8800308e7c0
- Base fffff8800308f000 Limit fffff88003089000 Call 0
- Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxC.dll -
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`0308e800 fffff800`03c7ff72 : fffff8a0`019a1d80 fffffa80`19cc9060 00000000`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`0308e940 fffff800`03c9139f : 00000000`00000518 ffffb83b`1b3c5b17 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`0308e9d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000000 : nt!KeWaitForSingleObject+0x19f
- fffff880`0308ea70 fffff800`03c897d3 : fffffa80`19cc9060 00000000`ffffffff 00000000`00000000 fffffa80`184e9fe0 : nt!NtWaitForSingleObject+0xde
- fffff880`0308eae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`00000000 000007fe`fd2b2d10 00000000`026e8640 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0308eae0)
- 00000000`0445faa8 000007fe`fd2b10ac : 00000000`00000000 000007fe`fd2b2d10 00000000`026e8640 000007fe`e5f73e80 : ntdll!NtWaitForSingleObject+0xa
- 00000000`0445fab0 000007fe`e30b0963 : 00000000`000004c0 00000000`00000514 00000000`00000000 00000000`00000518 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0445fb50 00000000`000004c0 : 00000000`00000514 00000000`00000000 00000000`00000518 00000000`000058c4 : VBoxC+0x30963
- 00000000`0445fb58 00000000`00000514 : 00000000`00000000 00000000`00000518 00000000`000058c4 000007fe`e5f1e0af : 0x4c0
- 00000000`0445fb60 00000000`00000000 : 00000000`00000518 00000000`000058c4 000007fe`e5f1e0af 00000000`027f0d40 : 0x514
- THREAD fffffa8019cb8060 Cid 5ad0.5ae0 Teb: 000007ffffefc000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa8014d6c3a0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2795559 Ticks: 170 (0:00:00:02.652)
- Context Switch Count 1512 IdealProcessor: 1
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8800f03ec70 Current fffff8800f03e7c0
- Base fffff8800f03f000 Limit fffff8800f039000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`0f03e800 fffff800`03c7ff72 : fffffa80`19cb8060 fffffa80`19cb8060 000007fe`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`0f03e940 fffff800`03c9139f : 00000000`00000608 ffffb83b`17375b17 00000000`00000000 000007fe`e3080000 : nt!KiCommitThreadWait+0x1d2
- fffff880`0f03e9d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`0f03ea70 fffff800`03c897d3 : fffffa80`19cb8060 00000000`ffffffff 00000000`00000000 fffffa80`14d6c3a0 : nt!NtWaitForSingleObject+0xde
- fffff880`0f03eae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`0880e670 00000000`00000004 00000000`00000002 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0f03eae0)
- 00000000`0699f658 000007fe`fd2b10ac : 00000000`0880e670 00000000`00000004 00000000`00000002 00000000`7708302a : ntdll!NtWaitForSingleObject+0xa
- 00000000`0699f660 000007fe`e5f8217c : 00000000`00000050 ffffffff`ffffffff 00000000`00000001 00000000`00000608 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0699f700 000007fe`e31ae827 : 00000000`0880d230 00000000`02725be0 00000000`80000001 00000000`00000004 : VBoxRT!RTSemEventMultiReset+0x1fc
- 00000000`0699f740 00000000`0880d230 : 00000000`02725be0 00000000`80000001 00000000`00000004 00000000`00000000 : VBoxC!VBoxDriversRegister+0x44707
- 00000000`0699f748 00000000`02725be0 : 00000000`80000001 00000000`00000004 00000000`00000000 000007fe`e31aee36 : 0x880d230
- 00000000`0699f750 00000000`80000001 : 00000000`00000004 00000000`00000000 000007fe`e31aee36 00000000`0880d230 : 0x2725be0
- 00000000`0699f758 00000000`00000004 : 00000000`00000000 000007fe`e31aee36 00000000`0880d230 00000000`0699f800 : 0x80000001
- 00000000`0699f760 00000000`00000000 : 000007fe`e31aee36 00000000`0880d230 00000000`0699f800 00000000`02725be0 : 0x4
- THREAD fffffa8019cb8630 Cid 5ad0.2f00 Teb: 000007ffffefa000 Win32Thread: fffff900c4ba64c0 RUNNING on processor 2
- IRP List:
- fffffa80241660d0: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801706ffc0: (ffc0,1706) Flags: 15b07620 Mdl: fffffa801706ffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2795753
- Context Switch Count 1377759 IdealProcessor: 3 LargeStack
- UserTime 00:00:16.068
- KernelTime 00:55:47.329
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8800f537c70 Current fffff8800f5374f0
- Base fffff8800f538000 Limit fffff8800f52f000 Call 0
- Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for VMMR0.r0 -
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`0f537530 00000000`00091da2 : fffff880`13d2c000 0000034e`1559f611 fffff880`144f6cc0 fffff880`9a9218fc : 0x00000318`cb90a0ce
- fffff880`0f537538 fffff880`13d2c000 : 0000034e`1559f611 fffff880`144f6cc0 fffff880`9a9218fc 00000000`00000000 : 0x91da2
- fffff880`0f537540 0000034e`1559f611 : fffff880`144f6cc0 fffff880`9a9218fc 00000000`00000000 00000000`00000000 : 0xfffff880`13d2c000
- fffff880`0f537548 fffff880`144f6cc0 : fffff880`9a9218fc 00000000`00000000 00000000`00000000 fffff880`144e05a7 : 0x0000034e`1559f611
- fffff880`0f537550 fffff880`9a9218fc : 00000000`00000000 00000000`00000000 fffff880`144e05a7 fffff880`00000000 : VMMR0!RTLogDefaultInstance+0x197a
- fffff880`0f537558 00000000`00000000 : 00000000`00000000 fffff880`144e05a7 fffff880`00000000 fffff880`13d2c000 : 0xfffff880`9a9218fc
- THREAD fffffa8019cb45c0 Cid 5ad0.5418 Teb: 000007ffffef8000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa80186145c0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563834 Ticks: 231895 (0:01:00:17.585)
- Context Switch Count 7 IdealProcessor: 5
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff88014396c70 Current fffff880143967c0
- Base fffff88014397000 Limit fffff88014391000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`14396800 fffff800`03c7ff72 : 00000000`00000110 fffffa80`19cb45c0 000007fe`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`14396940 fffff800`03c9139f : 00000000`000006e0 ffffb83b`0c0ddb17 00000000`00000000 000007fe`e3080000 : nt!KiCommitThreadWait+0x1d2
- fffff880`143969d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`14396a70 fffff800`03c897d3 : fffffa80`19cb45c0 00000000`ffffffff 00000000`00000000 fffffa80`186145c0 : nt!NtWaitForSingleObject+0xde
- fffff880`14396ae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`ffffffff 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`14396ae0)
- 00000000`04e4fb18 000007fe`fd2b10ac : 00000000`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`04e4fb20 000007fe`e5f8217c : 00000000`00000050 ffffffff`ffffffff 00000000`00000001 00000000`000006e0 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`04e4fbc0 000007fe`e31ae827 : 00000000`00000000 00000000`026e0cd0 00000000`80000003 000007fe`e5f81fb4 : VBoxRT!RTSemEventMultiReset+0x1fc
- 00000000`04e4fc00 00000000`00000000 : 00000000`026e0cd0 00000000`80000003 000007fe`e5f81fb4 00000000`00000000 : VBoxC!VBoxDriversRegister+0x44707
- THREAD fffffa8019bc3b50 Cid 5ad0.509c Teb: 000007ffffef6000 Win32Thread: fffff900c565aa40 WAIT: (WrUserRequest) UserMode Non-Alertable
- fffffa801953e5b0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796083
- Context Switch Count 2928 IdealProcessor: 7 LargeStack
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8800f57bc70 Current fffff8800f57b5b0
- Base fffff8800f57c000 Limit fffff8800f574000 Call 0
- Priority 12 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for USER32.dll -
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`0f57b5f0 fffff800`03c7ff72 : fffff900`c565aa40 fffffa80`19bc3b50 fffffa80`00000002 fffff880`0000000a : nt!KiSwapContext+0x7a
- fffff880`0f57b730 fffff800`03c9139f : 000007fe`fbf024e0 00000000`772c0970 00000000`00000000 fffff880`0f57b8d8 : nt!KiCommitThreadWait+0x1d2
- fffff880`0f57b7c0 fffff960`0018d7b7 : fffff900`c565aa00 00000000`0000000d fffff880`00000001 00000000`00000000 : nt!KeWaitForSingleObject+0x19f
- fffff880`0f57b860 fffff960`0018d851 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000000 : win32k!xxxRealSleepThread+0x257
- fffff880`0f57b900 fffff960`0018be9c : fffff900`c565aa40 fffff880`0f57bb60 00000000`00000001 00000000`00000000 : win32k!xxxSleepThread+0x59
- fffff880`0f57b930 fffff960`0018bfa5 : 00000000`00000000 fffff800`000025ff 00000000`00000000 fffffa80`ffffffff : win32k!xxxRealInternalGetMessage+0x7dc
- fffff880`0f57ba10 fffff960`0018d979 : 00000000`00000113 00000000`00000000 fffff880`0f57ba88 fffff800`03c897d3 : win32k!xxxInternalGetMessage+0x35
- fffff880`0f57ba50 fffff800`03c897d3 : fffffa80`19bc3b50 00000000`00000000 00000000`00000020 00000000`00000000 : win32k!NtUserGetMessage+0x75
- fffff880`0f57bae0 00000000`77199e6a : 00000000`7719615e 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0f57bae0)
- 00000000`04f8f648 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : USER32!SfmDxSetSwapChainStats+0x1a
- THREAD fffffa8019d2bb50 Cid 5ad0.52d4 Teb: 000007ffffef4000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa801670e8d0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563834 Ticks: 231895 (0:01:00:17.585)
- Context Switch Count 7 IdealProcessor: 0
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff88014335c70 Current fffff880143357c0
- Base fffff88014336000 Limit fffff88014330000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`14335800 fffff800`03c7ff72 : 00000000`00000110 fffffa80`19d2bb50 fffffa80`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`14335940 fffff800`03c9139f : 00000000`00000714 ffffb83b`0c07eb17 00000000`00000000 000007fe`e3080000 : nt!KiCommitThreadWait+0x1d2
- fffff880`143359d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`14335a70 fffff800`03c897d3 : fffffa80`19d2bb50 00000000`ffffffff 00000000`00000000 fffffa80`1670e8d0 : nt!NtWaitForSingleObject+0xde
- fffff880`14335ae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`ffffffff 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`14335ae0)
- 00000000`0519f938 000007fe`fd2b10ac : 00000000`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`0519f940 000007fe`e5f8217c : 00000000`00000050 ffffffff`ffffffff 00000000`00000001 00000000`00000714 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0519f9e0 000007fe`e31ae827 : 00000000`00000000 00000000`026e0e90 00000000`8000000a 000007fe`e5f81fb4 : VBoxRT!RTSemEventMultiReset+0x1fc
- 00000000`0519fa20 00000000`00000000 : 00000000`026e0e90 00000000`8000000a 000007fe`e5f81fb4 00000000`00000000 : VBoxC!VBoxDriversRegister+0x44707
- THREAD fffffa8019ca6060 Cid 5ad0.50ec Teb: 000007ffffef2000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa8019577a80 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796201
- Context Switch Count 744 IdealProcessor: 2
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff88004c3ac70 Current fffff88004c3a7c0
- Base fffff88004c3b000 Limit fffff88004c35000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`04c3a800 fffff800`03c7ff72 : fffffa80`19ca6060 fffffa80`19ca6060 000007fe`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`04c3a940 fffff800`03c9139f : 00000000`0000072c ffffb83b`1cf71b17 00000000`00000000 000007fe`e3080000 : nt!KiCommitThreadWait+0x1d2
- fffff880`04c3a9d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`04c3aa70 fffff800`03c897d3 : fffffa80`19ca6060 00000000`ffffffff 00000000`00000000 fffffa80`19577a80 : nt!NtWaitForSingleObject+0xde
- fffff880`04c3aae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`00000020 00000000`00000000 00000000`0000001f : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`04c3aae0)
- 00000000`0534f6f8 000007fe`fd2b10ac : 00000000`00000020 00000000`00000000 00000000`0000001f 13617b1b`758e4628 : ntdll!NtWaitForSingleObject+0xa
- 00000000`0534f700 000007fe`e5f8217c : 00000000`00000050 ffffffff`ffffffff 00000000`00000001 00000000`0000072c : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0534f7a0 000007fe`e31ae827 : 00000000`00000000 00000000`026e1050 00000000`80000011 000007fe`fbdc6204 : VBoxRT!RTSemEventMultiReset+0x1fc
- 00000000`0534f7e0 00000000`00000000 : 00000000`026e1050 00000000`80000011 000007fe`fbdc6204 00000000`00000000 : VBoxC!VBoxDriversRegister+0x44707
- THREAD fffffa8019cb4060 Cid 5ad0.5bc8 Teb: 000007ffffef0000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa80152e0da0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563834 Ticks: 231895 (0:01:00:17.585)
- Context Switch Count 6 IdealProcessor: 4
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801359fc70 Current fffff8801359f7c0
- Base fffff880135a0000 Limit fffff8801359a000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1359f800 fffff800`03c7ff72 : 00000000`00000110 fffffa80`19cb4060 fffffa80`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`1359f940 fffff800`03c9139f : 00000000`00000748 ffffb83b`0b6d4b17 00000000`00000000 000007fe`e3080000 : nt!KiCommitThreadWait+0x1d2
- fffff880`1359f9d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`1359fa70 fffff800`03c897d3 : fffffa80`19cb4060 00000000`ffffffff 00000000`00000000 fffffa80`152e0da0 : nt!NtWaitForSingleObject+0xde
- fffff880`1359fae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`ffffffff 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1359fae0)
- 00000000`0561f8b8 000007fe`fd2b10ac : 00000000`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`0561f8c0 000007fe`e5f8217c : 00000000`00000050 ffffffff`ffffffff 00000000`00000001 00000000`00000748 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0561f960 000007fe`e31ae827 : 00000000`00000000 00000000`026e1210 00000000`80000024 000007fe`e5f81fb4 : VBoxRT!RTSemEventMultiReset+0x1fc
- 00000000`0561f9a0 00000000`00000000 : 00000000`026e1210 00000000`80000024 000007fe`e5f81fb4 00000000`00000000 : VBoxC!VBoxDriversRegister+0x44707
- THREAD fffffa8019ca8b50 Cid 5ad0.5be4 Teb: 000007ffffeee000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa8019a79330 NotificationTimer
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796444
- Context Switch Count 363156 IdealProcessor: 6
- UserTime 00:00:00.031
- KernelTime 00:00:00.015
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801438fc70 Current fffff8801438f7c0
- Base fffff88014390000 Limit fffff8801438a000 Call 0
- Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1438f800 fffff800`03c7ff72 : 00000000`00000000 fffffa80`19ca8b50 00000000`00000000 00000000`0000000f : nt!KiSwapContext+0x7a
- fffff880`1438f940 fffff800`03c9139f : 00000000`0000076c 00000000`00000000 fffffa80`00000000 fffffa80`19a79418 : nt!KiCommitThreadWait+0x1d2
- fffff880`1438f9d0 fffff800`03f82e0e : fffff880`00000000 fffffa80`00000006 00000000`00000001 fffff800`03c86100 : nt!KeWaitForSingleObject+0x19f
- fffff880`1438fa70 fffff800`03c897d3 : fffffa80`19ca8b50 00000000`ffffffff 00000000`00000000 fffffa80`19a79330 : nt!NtWaitForSingleObject+0xde
- fffff880`1438fae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`0000076c 00000000`057dfda0 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1438fae0)
- 00000000`057dfca8 000007fe`fd2b10ac : 00000000`0000076c 00000000`057dfda0 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`057dfcb0 000007fe`e5f838b0 : 00000000`00000000 00000000`0485e600 00000000`00000000 00000000`0000076c : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`057dfd50 000007fe`e5f1e0af : 00000000`0485e600 ffffffff`fffe7960 ffffffff`fffe7960 00000000`00005be4 : VBoxRT!RTTimeLocalExplode+0x1f0
- 00000000`057dfd90 000007fe`e5f8316a : 00000000`02789070 00000000`02789070 00000000`00000000 00000000`00000000 : VBoxRT!RTThreadFromNative+0x20f
- 00000000`057dfdc0 00000000`73e01d9f : 00000000`02789070 00000000`00000000 00000000`00000000 00000000`00000000 : VBoxRT!RTSymlinkRead+0x31a
- 00000000`057dfdf0 00000000`73e01e3b : 00000000`73e92ac0 00000000`02789070 00000000`00000000 00000000`00000000 : MSVCR100!endthreadex+0x43
- 00000000`057dfe20 00000000`7707651d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : MSVCR100!endthreadex+0xdf
- 00000000`057dfe50 00000000`772aba01 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
- 00000000`057dfe80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
- THREAD fffffa8019ca8640 Cid 5ad0.593c Teb: 000007ffffeec000 Win32Thread: 0000000000000000 WAIT: (DelayExecution) UserMode Non-Alertable
- fffffa801704f7b0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2796440
- Context Switch Count 36544 IdealProcessor: 1
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801439dc70 Current fffff8801439d830
- Base fffff8801439e000 Limit fffff88014398000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1439d870 fffff800`03c7ff72 : fffffa80`19ca8640 fffffa80`19ca8640 00000000`00000000 00000000`00000002 : nt!KiSwapContext+0x7a
- fffff880`1439d9b0 fffff800`03c90392 : 00000000`00000000 00000000`00000000 00000000`0000004d 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`1439da40 fffff800`03f82e9e : fffffa80`19ca8640 00000000`044e4090 00000000`00000000 00000000`0000004d : nt!KeDelayExecutionThread+0x186
- fffff880`1439dab0 fffff800`03c897d3 : 00000000`04500960 fffff880`1439db60 ffffffff`fff0bdc0 00000000`044e4090 : nt!NtDelayExecution+0x59
- fffff880`1439dae0 00000000`772d08fa : 000007fe`fd2b1203 00000000`054bfdc8 000007fe`feba2da1 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1439dae0)
- 00000000`054bfd08 000007fe`fd2b1203 : 00000000`054bfdc8 000007fe`feba2da1 00000000`00000000 00000000`0000593c : ntdll!ZwDelayExecution+0xa
- 00000000`054bfd10 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : KERNELBASE!SleepEx+0xb3
- THREAD fffffa8019cd3640 Cid 5ad0.5034 Teb: 000007ffffeea000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa8019a136b0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563838 Ticks: 231891 (0:01:00:17.522)
- Context Switch Count 5 IdealProcessor: 3
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff88011343c70 Current fffff880113437c0
- Base fffff88011344000 Limit fffff8801133e000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`11343800 fffff800`03c7ff72 : 00000000`00000110 fffffa80`19cd3640 fffffa80`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`11343940 fffff800`03c9139f : 00000000`0000080c ffffb83b`09008b17 00000000`00000000 000007fe`e3080000 : nt!KiCommitThreadWait+0x1d2
- fffff880`113439d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`11343a70 fffff800`03c897d3 : fffffa80`19cd3640 00000000`ffffffff 00000000`00000000 fffffa80`19a136b0 : nt!NtWaitForSingleObject+0xde
- fffff880`11343ae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`ffffffff 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`11343ae0)
- 00000000`08fbf858 000007fe`fd2b10ac : 00000000`ffffffff 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`08fbf860 000007fe`e5f8217c : 00000000`00000050 ffffffff`ffffffff 00000000`00000001 00000000`0000080c : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`08fbf900 000007fe`e31ae827 : 00000000`00000000 00000000`026e14b0 00000000`80000029 000007fe`e5f81fb4 : VBoxRT!RTSemEventMultiReset+0x1fc
- 00000000`08fbf940 00000000`00000000 : 00000000`026e14b0 00000000`80000029 000007fe`e5f81fb4 00000000`00000000 : VBoxC!VBoxDriversRegister+0x44707
- THREAD fffffa8019d0f640 Cid 5ad0.5be8 Teb: 000007ffffee8000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa8019881fe0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2571476 Ticks: 224253 (0:00:58:18.369)
- Context Switch Count 3 IdealProcessor: 5
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801172bc70 Current fffff8801172b7c0
- Base fffff8801172c000 Limit fffff88011726000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1172b800 fffff800`03c7ff72 : 00000000`00000110 fffffa80`19d0f640 00000000`00000000 fffff800`04204b7f : nt!KiSwapContext+0x7a
- fffff880`1172b940 fffff800`03c9139f : 00000000`00000840 ffffb83b`09460b17 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`1172b9d0 fffff800`03f82e0e : 00000000`00000000 fffff800`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`1172ba70 fffff800`03c897d3 : fffffa80`19d0f640 00000000`ffffffff 00000000`00000000 fffffa80`19881fe0 : nt!NtWaitForSingleObject+0xde
- fffff880`1172bae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`02500100 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1172bae0)
- 00000000`0687fa78 000007fe`fd2b10ac : 00000000`02500100 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`0687fa80 000007fe`e5f81cd8 : 00000000`081e1630 00000000`ffffffff 00000000`00000001 00000000`00000840 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`0687fb20 000007fe`e5f72bcb : 00000000`0277a5c0 00000000`0277bca0 00000000`00000001 00000000`02500100 : VBoxRT!RTSemEventWaitNoResume+0x78
- 00000000`0687fb50 00000000`0277a5c0 : 00000000`0277bca0 00000000`00000001 00000000`02500100 00000000`00000000 : VBoxRT!RTSemEventWait+0x2b
- 00000000`0687fb58 00000000`0277bca0 : 00000000`00000001 00000000`02500100 00000000`00000000 000007fe`e1fa6f05 : 0x277a5c0
- 00000000`0687fb60 00000000`00000001 : 00000000`02500100 00000000`00000000 000007fe`e1fa6f05 00000000`081e1630 : 0x277bca0
- 00000000`0687fb68 00000000`02500100 : 00000000`00000000 000007fe`e1fa6f05 00000000`081e1630 00000000`02500100 : 0x1
- 00000000`0687fb70 00000000`00000000 : 000007fe`e1fa6f05 00000000`081e1630 00000000`02500100 00000000`0277bca0 : 0x2500100
- THREAD fffffa8019cc8b50 Cid 5ad0.5944 Teb: 000007ffffee6000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa80193102d0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2571870 Ticks: 223859 (0:00:58:12.222)
- Context Switch Count 3524 IdealProcessor: 7
- UserTime 00:00:00.015
- KernelTime 00:00:00.015
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801174ec70 Current fffff8801174e7c0
- Base fffff8801174f000 Limit fffff88011749000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1174e800 fffff800`03c7ff72 : fffffa80`19bc19b0 fffffa80`19cc8b50 00000000`00000000 fffffa80`14f0d920 : nt!KiSwapContext+0x7a
- fffff880`1174e940 fffff800`03c9139f : 00000000`00000854 00000000`00000008 fffff880`00000000 00000000`06acf648 : nt!KiCommitThreadWait+0x1d2
- fffff880`1174e9d0 fffff800`03f82e0e : 00000000`00000000 fffffa80`00000006 00000000`00000001 fffff880`1174ea01 : nt!KeWaitForSingleObject+0x19f
- fffff880`1174ea70 fffff800`03c897d3 : fffffa80`19cc8b50 00000000`ffffffff 00000000`00000000 fffffa80`193102d0 : nt!NtWaitForSingleObject+0xde
- fffff880`1174eae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`00000000 000007fe`e36a01a2 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1174eae0)
- 00000000`06acf9e8 000007fe`fd2b10ac : 00000000`00000000 000007fe`e36a01a2 00000000`00000000 00000000`0000000e : ntdll!NtWaitForSingleObject+0xa
- 00000000`06acf9f0 000007fe`e5f81cd8 : 00000000`081e7f10 00000000`ffffffff 00000000`00000001 00000000`00000854 : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`06acfa90 000007fe`e5f72bcb : 00000000`02779aa0 00000000`00000000 00000000`04fb20d8 00000000`00000000 : VBoxRT!RTSemEventWaitNoResume+0x78
- 00000000`06acfac0 00000000`02779aa0 : 00000000`00000000 00000000`04fb20d8 00000000`00000000 000007fe`e1f20000 : VBoxRT!RTSemEventWait+0x2b
- 00000000`06acfac8 00000000`00000000 : 00000000`04fb20d8 00000000`00000000 000007fe`e1f20000 000007fe`e1f47b05 : 0x2779aa0
- THREAD fffffa8019cc8640 Cid 5ad0.53dc Teb: 000007ffffee4000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa801990b060 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2571870 Ticks: 223859 (0:00:58:12.222)
- Context Switch Count 64 IdealProcessor: 0
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801177bc70 Current fffff8801177b7c0
- Base fffff8801177c000 Limit fffff88011776000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1177b800 fffff800`03c7ff72 : fffffa80`1a0cf9b0 fffffa80`19cc8640 fffffa80`00000000 fffffa80`14f0d920 : nt!KiSwapContext+0x7a
- fffff880`1177b940 fffff800`03c9139f : 00000000`0000087c 00000000`00000008 fffff880`00000000 00000000`09d1f6f8 : nt!KiCommitThreadWait+0x1d2
- fffff880`1177b9d0 fffff800`03f82e0e : 00000000`00000000 fffffa80`00000006 00000000`00000001 fffff880`1177ba01 : nt!KeWaitForSingleObject+0x19f
- fffff880`1177ba70 fffff800`03c897d3 : fffffa80`19cc8640 00000000`ffffffff 00000000`00000000 fffffa80`1990b060 : nt!NtWaitForSingleObject+0xde
- fffff880`1177bae0 00000000`772d05fa : 000007fe`fd2b10ac 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1177bae0)
- 00000000`09d1fa98 000007fe`fd2b10ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`0000000f : ntdll!NtWaitForSingleObject+0xa
- 00000000`09d1faa0 000007fe`e5f81cd8 : 00000000`081e87f0 00000000`ffffffff 00000000`00000001 00000000`0000087c : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`09d1fb40 000007fe`e5f72bcb : 00000000`027796a0 00000000`00000000 00000000`00000000 00000000`00000000 : VBoxRT!RTSemEventWaitNoResume+0x78
- 00000000`09d1fb70 00000000`027796a0 : 00000000`00000000 00000000`00000000 00000000`00000000 000007fe`e1f20000 : VBoxRT!RTSemEventWait+0x2b
- 00000000`09d1fb78 00000000`00000000 : 00000000`00000000 00000000`00000000 000007fe`e1f20000 000007fe`e1f47b05 : 0x27796a0
- THREAD fffffa8019cc8130 Cid 5ad0.5954 Teb: 000007ffffee2000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
- fffffa80198d55f0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563888 Ticks: 231841 (0:01:00:16.742)
- Context Switch Count 4 IdealProcessor: 2
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff88011789c70 Current fffff880117897c0
- Base fffff8801178a000 Limit fffff88011784000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`11789800 fffff800`03c7ff72 : fffffa80`19964780 fffffa80`19cc8130 00000000`00000000 fffffa80`14f0d920 : nt!KiSwapContext+0x7a
- fffff880`11789940 fffff800`03c9139f : 00000000`000008bc 00000000`00000034 fffff880`00000000 00000000`09e9f7f8 : nt!KiCommitThreadWait+0x1d2
- fffff880`117899d0 fffff800`03f82e0e : fffff880`11789b00 fffffa80`00000006 00000000`00000001 00000000`00000001 : nt!KeWaitForSingleObject+0x19f
- fffff880`11789a70 fffff800`03c897d3 : fffffa80`19cc8130 00000000`ffffffff 00000000`00000000 fffffa80`198d55f0 : nt!NtWaitForSingleObject+0xde
- fffff880`11789ae0 00000000`772d05fa : 000007fe`fd2b10ac 62697264`64726962 00000048`00000048 00000000`42000042 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`11789ae0)
- 00000000`09e9f908 000007fe`fd2b10ac : 62697264`64726962 00000048`00000048 00000000`42000042 fffff880`13d2c000 : ntdll!NtWaitForSingleObject+0xa
- 00000000`09e9f910 000007fe`e5f81cd8 : 00000000`082e8540 00000000`ffffffff 00000000`00000001 00000000`000008bc : KERNELBASE!WaitForSingleObjectEx+0x9c
- 00000000`09e9f9b0 000007fe`e5f72bcb : 00000000`026f55d0 00000000`ffffffd9 00000000`00000000 000007fe`e35c674d : VBoxRT!RTSemEventWaitNoResume+0x78
- 00000000`09e9f9e0 00000000`026f55d0 : 00000000`ffffffd9 00000000`00000000 000007fe`e35c674d 00000000`ffffffff : VBoxRT!RTSemEventWait+0x2b
- 00000000`09e9f9e8 00000000`ffffffd9 : 00000000`00000000 000007fe`e35c674d 00000000`ffffffff 000007fe`e1fcd2f3 : 0x26f55d0
- 00000000`09e9f9f0 00000000`00000000 : 000007fe`e35c674d 00000000`ffffffff 000007fe`e1fcd2f3 00000000`04fb32c0 : 0xffffffd9
- THREAD fffffa8019cbc1b0 Cid 5ad0.5a40 Teb: 000007ffffee0000 Win32Thread: 0000000000000000 WAIT: (Executive) UserMode Alertable
- fffffa80193a6fe8 SynchronizationEvent
- IRP List:
- fffffa8019426d10: (0006,0118) Flags: 00060070 Mdl: 00000000
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563843 Ticks: 231886 (0:01:00:17.444)
- Context Switch Count 3 IdealProcessor: 4
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8801180bc70 Current fffff8801180b500
- Base fffff8801180c000 Limit fffff88011806000 Call 0
- Priority 13 BasePriority 10 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxDrv.sys -
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxDD.DLL -
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`1180b540 fffff800`03c7ff72 : fffff700`01080000 fffffa80`19cbc1b0 fffff683`00000000 fffffa80`186153f8 : nt!KiSwapContext+0x7a
- fffff880`1180b680 fffff800`03c9139f : 00000000`00000000 000007fe`e1f8fac0 00000000`00000000 fffffa80`00581940 : nt!KiCommitThreadWait+0x1d2
- fffff880`1180b710 fffff880`07c13d60 : fffffa80`13572600 fffffa80`00000000 00000000`00000001 fffff880`07c1a901 : nt!KeWaitForSingleObject+0x19f
- fffff880`1180b7b0 fffff880`07c0889c : 00000000`ffffffff 00000000`ffffffff fffffa80`13572670 00000000`00000000 : VBoxDrv!RTSemEventSignal+0x1b0
- fffff880`1180b800 fffff880`07c0764a : fffffa80`19ca4850 fffffa80`17633c00 fffffa80`19426de0 00000000`00000001 : VBoxDrv!SUPSemEventSignal+0x16c
- fffff880`1180b830 fffff880`07c0d01b : fffffa80`17633c00 fffffa80`19426e28 fffffa80`13572520 fffffa80`19ca4850 : VBoxDrv!SUPR0PageFree+0x299a
- fffff880`1180b890 fffff800`03fa8fb7 : fffffa80`14f0d8d0 fffff880`1180bb60 fffffa80`14f0d8d0 fffffa80`19426d10 : VBoxDrv!SUPR0TracerFireProbe+0x396
- fffff880`1180b8d0 fffff800`03fa9816 : fffff880`009b3180 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0x607
- fffff880`1180ba00 fffff800`03c897d3 : 00000000`00000000 fffff800`03f7592c fffff880`1180bb60 00000000`00000000 : nt!NtDeviceIoControlFile+0x56
- fffff880`1180ba70 00000000`772d062a : 000007fe`fd2b9ed9 00000000`0000027f 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1180bae0)
- 00000000`0a04f978 000007fe`fd2b9ed9 : 00000000`0000027f 00000000`00000000 00000000`00000000 0000ffff`00001f80 : ntdll!NtDeviceIoControlFile+0xa
- 00000000`0a04f980 00000000`7707682f : 00000000`00228260 00000000`00239920 00000000`00230458 00000000`772d27d8 : KERNELBASE!DeviceIoControl+0x79
- 00000000`0a04f9f0 000007fe`e5f8b7d5 : 00000000`081e34a0 00000000`00000000 00000000`044d8000 00000000`081e34a0 : kernel32!DeviceIoControl+0x7f
- 00000000`0a04fa40 000007fe`e5f86925 : 00000000`082e8e50 00000000`000008a8 00000000`00000018 000007fe`fd2b2553 : VBoxRT!SUPR3LoadVMM+0x745
- 00000000`0a04fa90 000007fe`e5f86b39 : 00000000`00000070 ffffffff`ffffffff ffffffff`ffffffff 000007fe`e5f1d6cf : VBoxRT!SUPTracerFireProbe+0x1d5
- 00000000`0a04fb00 000007fe`e1f8fc03 : 00000000`00000000 000007fe`e5f821c3 00000000`00000050 000007fe`e5f81f54 : VBoxRT!SUPSemEventWaitNoResume+0x19
- 00000000`0a04fb40 00000000`00000000 : 000007fe`e5f821c3 00000000`00000050 000007fe`e5f81f54 00000000`00000001 : VBoxDD!VBoxUsbRegister+0x6e6b3
- THREAD fffffa8019cfa640 Cid 5ad0.5628 Teb: 000007ffffede000 Win32Thread: fffff900c33d2c20 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa8019c0c670 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563840 Ticks: 231889 (0:01:00:17.491)
- Context Switch Count 16 IdealProcessor: 1 LargeStack
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for dsound.dll -
- Win32 Start Address dsound (0x000007feecac2040)
- Stack Init fffff880142f6c70 Current fffff880142f5e80
- Base fffff880142f7000 Limit fffff880142f0000 Call 0
- Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`142f5ec0 fffff800`03c7ff72 : 00000000`00000000 fffffa80`19cfa640 00000000`00000000 00000000`00000000 : nt!KiSwapContext+0x7a
- fffff880`142f6000 fffff800`03c8caea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`142f6090 fffff800`03f8313f : fffff880`00000001 fffff880`142f63e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`142f6350 fffff800`03f834ae : 00000000`00000001 fffffa80`19cfaa08 00000000`00000001 00000000`00000000 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`142f6820 fffff800`03c897d3 : fffffa80`19cfa640 00000000`0a29f7a8 fffff880`142f6a88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`142f6a70 00000000`772d0b6a : 000007fe`fd2b1420 000007fe`fda3c0b0 000007fe`fda3c4f0 000007fe`fda3c1d0 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`142f6ae0)
- 00000000`0a29f788 000007fe`fd2b1420 : 000007fe`fda3c0b0 000007fe`fda3c4f0 000007fe`fda3c1d0 000007fe`fda3eaa0 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0a29f790 00000000`77071210 : 00000000`0a29f8c8 00000000`0a29f8c0 00000000`00000000 00000000`00000001 : KERNELBASE!GetCurrentProcess+0x40
- 00000000`0a29f890 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!WaitForMultipleObjects+0xb0
- THREAD fffffa8019cd3b50 Cid 5ad0.1140 Teb: 000007ffffedc000 Win32Thread: fffff900c35f05d0 WAIT: (UserRequest) UserMode Alertable
- fffffa80168375a0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563840 Ticks: 231889 (0:01:00:17.491)
- Context Switch Count 54 IdealProcessor: 3 LargeStack
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for MMDevApi.dll -
- Win32 Start Address MMDevApi!Ordinal5 (0x000007fefb986204)
- Stack Init fffff8801354ac70 Current fffff88013549e80
- Base fffff8801354b000 Limit fffff88013543000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`13549ec0 fffff800`03c7ff72 : 00000000`00000000 fffffa80`19cd3b50 fffffa80`00000000 fffff880`1354a100 : nt!KiSwapContext+0x7a
- fffff880`1354a000 fffff800`03c8caea : 00000000`00000000 fffff880`1354aae0 00010040`00000000 00000000`00000004 : nt!KiCommitThreadWait+0x1d2
- fffff880`1354a090 fffff800`03f8313f : fffff8a0`00000001 fffff880`1354a3e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`1354a350 fffff800`03f834ae : 00000000`00000001 fffffa80`19cd3f18 00000000`00000001 00000000`00000001 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`1354a820 fffff800`03c897d3 : fffffa80`19cd3b50 00000000`0a84fa98 fffff880`1354aa88 00000000`02aa3420 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`1354aa70 00000000`772d0b6a : 000007fe`fd2b1420 00000000`00001140 fe88c6e4`00000009 00000000`000007fe : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`1354aae0)
- 00000000`0a84fa78 000007fe`fd2b1420 : 00000000`00001140 fe88c6e4`00000009 00000000`000007fe 037b1860`00000000 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0a84fa80 00000000`77082cd3 : 00000000`0a84fbb8 00000000`0a84fbb0 00000000`00000000 00000000`00000000 : KERNELBASE!GetCurrentProcess+0x40
- 00000000`0a84fb80 00000000`0a84fbb8 : 00000000`0a84fbb0 00000000`00000000 00000000`00000000 00000000`00000001 : kernel32!WaitForMultipleObjectsEx+0xb3
- 00000000`0a84fb88 00000000`0a84fbb0 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`77199bef : 0xa84fbb8
- 00000000`0a84fb90 00000000`00000000 : 00000000`00000000 00000000`00000001 00000000`77199bef 00000000`00000938 : 0xa84fbb0
- THREAD fffffa8019d0fb50 Cid 5ad0.5a28 Teb: 000007ffffeda000 Win32Thread: fffff900c3433c20 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa8017f834c0 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2797138
- Context Switch Count 12021 IdealProcessor: 5 LargeStack
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address dsound (0x000007feecac2040)
- Stack Init fffff880093d4c70 Current fffff880093d3e80
- Base fffff880093d5000 Limit fffff880093ce000 Call 0
- Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`093d3ec0 fffff800`03c7ff72 : fffffa80`19d0fb50 fffffa80`19d0fb50 00000000`00000000 00000000`00000006 : nt!KiSwapContext+0x7a
- fffff880`093d4000 fffff800`03c8caea : 00000000`00000000 00000000`00000000 00000000`00000013 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`093d4090 fffff800`03f8313f : fffff880`00000001 fffff880`093d43e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`093d4350 fffff800`03f834ae : 00000000`00000001 00000000`00000000 00000000`00000001 00000000`02c50000 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`093d4820 fffff800`03c897d3 : fffffa80`19d0fb50 00000000`0aaaf9b8 fffff880`093d4a88 fffff880`093d4af8 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`093d4a70 00000000`772d0b6a : 000007fe`fd2b1420 00000000`0aaafce8 00000000`00000c00 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`093d4ae0)
- 00000000`0aaaf998 000007fe`fd2b1420 : 00000000`0aaafce8 00000000`00000c00 00000000`00000000 000007fe`fb9e0894 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0aaaf9a0 00000000`77071210 : 00000000`0aaafad8 00000000`0aaafad0 00000000`00000000 00000000`057e0080 : KERNELBASE!GetCurrentProcess+0x40
- 00000000`0aaafaa0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!WaitForMultipleObjects+0xb0
- THREAD fffffa8019cc5060 Cid 5ad0.58d8 Teb: 000007ffffed8000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa8019cfa0b0 SynchronizationEvent
- fffffa8019b50c50 NotificationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563843 Ticks: 231886 (0:01:00:17.444)
- Context Switch Count 12 IdealProcessor: 7
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- *** ERROR: Symbol file could not be found. Defaulted to export symbols for wdmaud.drv -
- Win32 Start Address wdmaud!widMessage (0x000007fef3962908)
- Stack Init fffff880118ecc70 Current fffff880118ebe80
- Base fffff880118ed000 Limit fffff880118e7000 Call 0
- Priority 22 BasePriority 5 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`118ebec0 fffff800`03c7ff72 : fffff880`118ec019 fffffa80`19cc5060 00000000`00b00000 ffffffff`00000009 : nt!KiSwapContext+0x7a
- fffff880`118ec000 fffff800`03c8caea : fffff880`118ec260 00000000`00000002 00000000`00000000 00000000`00000001 : nt!KiCommitThreadWait+0x1d2
- fffff880`118ec090 fffff800`03f8313f : fffff8a0`00000002 fffff880`118ec3e0 fffff8a0`00000001 fffff8a0`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`118ec350 fffff800`03f834ae : 00000000`00000001 00000000`00000000 00000000`00000001 000007fe`fac68400 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`118ec820 fffff800`03c897d3 : fffffa80`19cc5060 00000000`0af0f4e8 fffff880`118eca88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`118eca70 00000000`772d0b6a : 000007fe`fd2b1420 00000000`0031f610 00000000`0031f678 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`118ecae0)
- 00000000`0af0f4c8 000007fe`fd2b1420 : 00000000`0031f610 00000000`0031f678 00000000`00000000 00000000`02624b1f : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0af0f4d0 00000000`77082cd3 : 00000000`0af0f610 00000000`0af0f600 00000000`00000000 00000000`00000000 : KERNELBASE!GetCurrentProcess+0x40
- 00000000`0af0f5d0 00000000`0af0f610 : 00000000`0af0f600 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!WaitForMultipleObjectsEx+0xb3
- 00000000`0af0f5d8 00000000`0af0f600 : 00000000`00000000 00000000`00000000 00000000`00000000 000007fe`f39615e2 : 0xaf0f610
- 00000000`0af0f5e0 00000000`00000000 : 00000000`00000000 00000000`00000000 000007fe`f39615e2 00000000`00000994 : 0xaf0f600
- THREAD fffffa8019d01060 Cid 5ad0.5870 Teb: 000007ffffed6000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
- fffffa800d0668b0 SynchronizationEvent
- fffffa80185f5ad0 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2563843 Ticks: 231886 (0:01:00:17.444)
- Context Switch Count 2 IdealProcessor: 0
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address dsound!DllCanUnloadNow (0x000007feecaf1e80)
- Stack Init fffff88014304c70 Current fffff88014303e80
- Base fffff88014305000 Limit fffff880142ff000 Call 0
- Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`14303ec0 fffff800`03c7ff72 : 00000000`00000000 fffffa80`19d01060 00000000`00000000 00000000`77280000 : nt!KiSwapContext+0x7a
- fffff880`14304000 fffff800`03c8caea : 00000000`0000023f 00000000`00000000 00000000`00000000 00000000`00001f80 : nt!KiCommitThreadWait+0x1d2
- fffff880`14304090 fffff800`03f8313f : 00000000`00000002 fffff880`143043e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`14304350 fffff800`03f834ae : 00000000`00000001 00000000`00000000 00000a79`00000001 00000000`00000000 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`14304820 fffff800`03c897d3 : fffffa80`19d01060 00000000`0a15fa18 fffff880`14304a88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`14304a70 00000000`772d0b6a : 000007fe`fd2b1420 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`14304ae0)
- 00000000`0a15f9f8 000007fe`fd2b1420 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0a15fa00 00000000`77071210 : 00000000`0a15fb40 00000000`0a15fb30 00000000`00000000 000007fe`fd2c49fa : KERNELBASE!GetCurrentProcess+0x40
- 00000000`0a15fb00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!WaitForMultipleObjects+0xb0
- THREAD fffffa8019db3b50 Cid 5ad0.5970 Teb: 000007fffff0c000 Win32Thread: fffff900c4d3ec20 WAIT: (UserRequest) UserMode Alertable
- fffffa801953e450 SynchronizationEvent
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2572844 Ticks: 222885 (0:00:57:57.028)
- Context Switch Count 2088 IdealProcessor: 3 LargeStack
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address WINMM!timeEndPeriod (0x000007fefa6da850)
- Stack Init fffff8800de1ec70 Current fffff8800de1de80
- Base fffff8800de1f000 Limit fffff8800de18000 Call 0
- Priority 15 BasePriority 15 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Kernel stack not resident.
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`0de1dec0 fffff800`03c7ff72 : 00000000`00000000 fffffa80`19db3b50 00000000`00000000 00000000`0000000a : nt!KiSwapContext+0x7a
- fffff880`0de1e000 fffff800`03c8caea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiCommitThreadWait+0x1d2
- fffff880`0de1e090 fffff800`03f8313f : fffff880`00000001 fffff880`0de1e3e0 00000000`00000001 00000000`00000006 : nt!KeWaitForMultipleObjects+0x272
- fffff880`0de1e350 fffff800`03f834ae : fffff880`009b3101 fffff800`03c953c0 ffffffff`00000001 fffff880`009b3101 : nt!ObpWaitForMultipleObjects+0x294
- fffff880`0de1e820 fffff800`03c897d3 : fffffa80`19db3b50 00000000`0374f978 fffff880`0de1ea88 00000000`00000000 : nt!NtWaitForMultipleObjects+0xe5
- fffff880`0de1ea70 00000000`772d0b6a : 000007fe`fa6da8af 00000000`08808560 00000000`000003b0 000007fe`fa700400 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`0de1eae0)
- 00000000`0374f958 000007fe`fa6da8af : 00000000`08808560 00000000`000003b0 000007fe`fa700400 00000000`08808560 : ntdll!NtWaitForMultipleObjects+0xa
- 00000000`0374f960 00000000`7707651d : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : WINMM!timeEndPeriod+0x147
- 00000000`0374fab0 00000000`772aba01 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
- 00000000`0374fae0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
- THREAD fffffa8023f10b50 Cid 5ad0.85c0 Teb: 000007fffffd8000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
- fffffa8015de4900 QueueObject
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2797164
- Context Switch Count 4651 IdealProcessor: 4
- UserTime 00:00:00.015
- KernelTime 00:00:00.000
- Win32 Start Address ntdll!RtlValidateHeap (0x000000007729f2e0)
- Stack Init fffff88013acfc70 Current fffff88013acf680
- Base fffff88013ad0000 Limit fffff88013aca000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- Child-SP RetAddr : Args to Child : Call Site
- fffff880`13acf6c0 fffff800`03c7ff72 : fffffa80`23f10b50 fffffa80`23f10b50 00000000`00000000 fffff800`00000004 : nt!KiSwapContext+0x7a
- fffff880`13acf800 fffff800`03c91be3 : 00000000`00000000 fffff800`03c7d96d fffff800`00000032 fffff800`03f9a887 : nt!KiCommitThreadWait+0x1d2
- fffff880`13acf890 fffff800`03f75417 : 00000000`195ff200 fffff800`e0000001 ffffffff`80000f01 00000000`00001000 : nt!KeRemoveQueueEx+0x323
- fffff880`13acf950 fffff800`03c75836 : 00000000`00000a00 fffff880`13acfa68 fffff880`13acfa88 fffff880`009b3101 : nt!IoRemoveIoCompletion+0x47
- fffff880`13acf9e0 fffff800`03c897d3 : fffffa80`23f10b50 00000000`773835c0 00000000`00000000 fffffa80`1a0cf4a0 : nt!NtWaitForWorkViaWorkerFactory+0x285
- fffff880`13acfae0 00000000`772d1eba : 00000000`7729f52b 00000000`00000001 00000000`00000000 00000000`773835e8 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880`13acfae0)
- 00000000`04a8f7b8 00000000`7729f52b : 00000000`00000001 00000000`00000000 00000000`773835e8 00000000`0000ffff : ntdll!ZwWaitForWorkViaWorkerFactory+0xa
- 00000000`04a8f7c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlValidateHeap+0x3bb
- THREAD fffffa8024340b50 Cid 5ad0.85f8 Teb: 000007fffffd6000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
- fffffa8015de4900 QueueObject
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2797327
- Context Switch Count 64 IdealProcessor: 5
- UserTime 00:00:00.000
- KernelTime 00:00:00.000
- Win32 Start Address ntdll!RtlValidateHeap (0x000000007729f2e0)
- Stack Init fffff88014835c70 Current fffff88014835680
- Base fffff88014836000 Limit fffff88014830000 Call 0
- Priority 10 BasePriority 8 UnusualBoost 0 ForegroundBoost 2 IoPriority 2 PagePriority 5
- 0: kd> *** ERROR: Module load completed but symbols could not be loaded for Npfs.SYS
- Irp is active with 1 stacks 1 is current (= 0xfffffa80241661a0)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801706ff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> IRP signature does not match, probably not an IRP. Use any flag to force.
- 0: kd> Irp is active with 1 stacks 1 is current (= 0xfffffa8023b97840)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801a1cff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> IRP signature does not match, probably not an IRP. Use any flag to force.
- 0: kd> Irp is active with 9 stacks 24 is current (= 0x10000000f)
- No Mdl: No System Buffer: Thread fffffa801a1cc050: Irp is completed. Pending has been returned
- Flags = 165e0760
- ThreadListEntry.Flink = fffffa8023b97790
- ThreadListEntry.Blink = fffffa8023b97790
- IoStatus.Status = 00000000
- IoStatus.Information = 00000000
- RequestorMode = 00000019
- Cancel = 01
- CancelIrql = 0
- ApcEnvironment = 00
- UserIosb = 106800001068
- UserEvent = 00000048
- Overlay.AsynchronousParameters.UserApcRoutine = fffffa801a1c0010
- Overlay.AsynchronousParameters.UserApcContext = fffffa801a1e0010
- Overlay.AllocationSize = 00000000 - 00000000
- CancelRoutine = 00000004
- UserBuffer = fffffa8019c93820
- &Tail.Overlay.DeviceQueueEntry = fffffa801a1d0038
- Tail.Overlay.Thread = fffffa801a1cc050
- Tail.Overlay.AuxiliaryBuffer = fffffa80174465e0
- Tail.Overlay.ListEntry.Flink = ffff01ff0001
- Tail.Overlay.ListEntry.Blink = 200fffe0001
- Tail.Overlay.CurrentStackLocation = 10000000f
- Tail.Overlay.OriginalFileObject = 100408a00
- Tail.Apc = 00000000
- Tail.CompletionKey = 00000000
- cmd flg cl Device File Completion-Context
- [ 2,8a] 40 0 100408a07 100408a08 100408a09-100408a0a
- 100408a07: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a03 100408a04 100408a05 100408a06
- [ b,8a] 40 0 100408a10 100408a11 100408a12-100408a13
- 100408a10: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a0c 100408a0d 100408a0e 100408a0f
- [ 14,8a] 40 0 100408a19 100408a1a 100408a1b-100408a1c
- 100408a19: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a15 100408a16 100408a17 100408a18
- [ 1d,8a] 40 0 100408a22 100408a23 100408a24-100408a25
- 100408a22: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a1e 100408a1f 100408a20 100408a21
- [ 26,8a] 40 0 100408a2b 100408a2c 100408a2d-100408a2e
- 100408a2b: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a27 100408a28 100408a29 100408a2a
- [ 2f,8a] 40 0 100408a34 100408a35 100408a36-100408a37
- 100408a34: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a30 100408a31 100408a32 100408a33
- [ 38,8a] 40 0 100408a3d 100408a3e 100408a3f-100408a40
- 100408a3d: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a39 100408a3a 100408a3b 100408a3c
- [ 41,8a] 40 0 100408a46 100408a47 100408a48-100408a49
- 100408a46: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a42 100408a43 100408a44 100408a45
- [ 4a,8a] 40 0 100408a4f 100408a50 100408a51-100408a52
- 100408a4f: Could not read device object or _DEVICE_OBJECT not found
- Args: 100408a4b 100408a4c 100408a4d 100408a4e
- 0: kd> Irp is active with 1 stacks 1 is current (= 0xfffffa80241661a0)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801706ff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> No export device found
- 0: kd> Irp is active with 1 stacks 1 is current (= 0xfffffa80241661a0)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- Flags = 00062900
- ThreadListEntry.Flink = fffffa801706ffe0
- ThreadListEntry.Blink = fffffa801706ffe0
- IoStatus.Status = 00000000
- IoStatus.Information = 00000000
- RequestorMode = 00000001
- Cancel = 00
- CancelIrql = 0
- ApcEnvironment = 00
- UserIosb = 0787e424
- UserEvent = 00000000
- Overlay.AsynchronousParameters.UserApcRoutine = fffffa8017145062
- Overlay.AsynchronousParameters.UserApcContext = 0787e424
- Overlay.AllocationSize = 00000000 - 00000000
- CancelRoutine = fffff88007bd1008 Npfs
- UserBuffer = 0787d408
- &Tail.Overlay.DeviceQueueEntry = fffffa8024166148
- Tail.Overlay.Thread = fffffa801573c9e0
- Tail.Overlay.AuxiliaryBuffer = 00000000
- Tail.Overlay.ListEntry.Flink = 00000000
- Tail.Overlay.ListEntry.Blink = 00000000
- Tail.Overlay.CurrentStackLocation = fffffa80241661a0
- Tail.Overlay.OriginalFileObject = fffffa801706ff20
- Tail.Apc = 00000000
- Tail.CompletionKey = 00000000
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801706ff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> Device object (fffffa8013546bd0) is for:
- NamedPipe \FileSystem\Npfs DriverObject fffffa801354a710
- Current Irp 00000000 RefCount 369 Type 00000011 Flags 00000240
- Dacl fffff9a10009a6d1 DevExt fffffa8013546d20 DevObjExt fffffa8013546d70
- ExtensionFlags (0x00000800) DOE_DEFAULT_SD_PRESENT
- Characteristics (0000000000)
- Device queue is not busy.
- 0: kd> Driver object (fffffa801354a710) is for:
- \FileSystem\Npfs
- Driver Extension List: (id , addr)
- Device Object list:
- fffffa8013546bd0
- 0: kd> !DevObj !DrvObj !DevExt ObjectName
- > fffffa8013546bd0 \FileSystem\Npfs fffffa8013546d20 NamedPipe
- 0: kd> THREAD fffffa8019cb8630 Cid 5ad0.2f00 Teb: 000007ffffefa000 Win32Thread: fffff900c4ba64c0 RUNNING on processor 2
- 0: kd> THREAD fffffa8019cb8630 Cid 5ad0.2f00 Teb: 000007ffffefa000 Win32Thread: fffff900c4ba64c0 RUNNING on processor 2
- IRP List:
- fffffa80241660d0: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801706ffc0: (ffc0,1706) Flags: 15b07620 Mdl: fffffa801706ffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- fffffa801a1cffc0: (ffc0,1a1c) Flags: 165e0760 Mdl: fffffa801a1cffc0
- fffffa8023b97770: (0006,0118) Flags: 00062900 Mdl: 00000000
- Not impersonating
- DeviceMap fffff8a0030b5a80
- Owning Process fffffa8018615060 Image: VirtualBox.exe
- Attached Process N/A Image: N/A
- Wait Start TickCount 2795753
- Context Switch Count 1377759 IdealProcessor: 3 LargeStack
- UserTime 00:00:16.068
- KernelTime 00:55:47.329
- Win32 Start Address MSVCR100!endthreadex (0x0000000073e01dbc)
- Stack Init fffff8800f537c70 Current fffff8800f5374f0
- Base fffff8800f538000 Limit fffff8800f52f000 Call 0
- Priority 8 BasePriority 8 UnusualBoost 0 ForegroundBoost 0 IoPriority 2 PagePriority 5
- Child-SP RetAddr Call Site
- fffff880`0f537530 00000000`00091da2 0x00000318`cb90a0ce
- fffff880`0f537538 fffff880`13d2c000 0x91da2
- fffff880`0f537540 0000034e`1559f611 0xfffff880`13d2c000
- fffff880`0f537548 fffff880`144f6cc0 0x0000034e`1559f611
- fffff880`0f537550 fffff880`9a9218fc VMMR0!RTLogDefaultInstance+0x197a
- fffff880`0f537558 00000000`00000000 0xfffff880`9a9218fc
- 0: kd> Irp is active with 1 stacks 1 is current (= 0xfffffa80241661a0)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801706ff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> Device object (fffffa8013546bd0) is for:
- NamedPipe \FileSystem\Npfs DriverObject fffffa801354a710
- Current Irp 00000000 RefCount 369 Type 00000011 Flags 00000240
- Dacl fffff9a10009a6d1 DevExt fffffa8013546d20 DevObjExt fffffa8013546d70
- ExtensionFlags (0x00000800) DOE_DEFAULT_SD_PRESENT
- Characteristics (0000000000)
- Device queue is not busy.
- 0: kd> *** ERROR: Symbol file could not be found. Defaulted to export symbols for CLASSPNP.SYS -
- *************************************************************************
- *** ***
- *** ***
- *** Either you specified an unqualified symbol, or your debugger ***
- *** doesn't have full symbol information. Unqualified symbol ***
- *** resolution is turned off by default. Please either specify a ***
- *** fully qualified symbol module!symbolname, or enable resolution ***
- *** of unqualified symbols by typing ".symopt- 100". Note that ***
- *** enabling unqualified symbol resolution with network symbol ***
- *** server shares in the symbol path may cause the debugger to ***
- *** appear to hang for long periods of time when an incorrect ***
- *** symbol name is typed or the network symbol server is down. ***
- *** ***
- *** For some commands to work properly, your symbol path ***
- *** must point to .pdb files that have full type information. ***
- *** ***
- *** Certain .pdb files (such as the public OS symbols) do not ***
- *** contain the required information. Contact the group that ***
- *** provided you with these symbols if you need this command to ***
- *** work. ***
- *** ***
- *** Type referenced: classpnp!_FUNCTIONAL_DEVICE_EXTENSION ***
- *** ***
- *************************************************************************
- Symbol classpnp!_FUNCTIONAL_DEVICE_EXTENSION not found.
- 0: kd> *************************************************************************
- *** ***
- *** ***
- *** Either you specified an unqualified symbol, or your debugger ***
- *** doesn't have full symbol information. Unqualified symbol ***
- *** resolution is turned off by default. Please either specify a ***
- *** fully qualified symbol module!symbolname, or enable resolution ***
- *** of unqualified symbols by typing ".symopt- 100". Note that ***
- *** enabling unqualified symbol resolution with network symbol ***
- *** server shares in the symbol path may cause the debugger to ***
- *** appear to hang for long periods of time when an incorrect ***
- *** symbol name is typed or the network symbol server is down. ***
- *** ***
- *** For some commands to work properly, your symbol path ***
- *** must point to .pdb files that have full type information. ***
- *** ***
- *** Certain .pdb files (such as the public OS symbols) do not ***
- *** contain the required information. Contact the group that ***
- *** provided you with these symbols if you need this command to ***
- *** work. ***
- *** ***
- *** Type referenced: classpnp!_FUNCTIONAL_DEVICE_EXTENSION ***
- *** ***
- *************************************************************************
- Symbol classpnp!_FUNCTIONAL_DEVICE_EXTENSION not found.
- 0: kd> Driver object (fffffa801354a710) is for:
- \FileSystem\Npfs
- Driver Extension List: (id , addr)
- Device Object list:
- fffffa8013546bd0
- 0: kd> Device object (fffffa8013546bd0) is for:
- NamedPipe \FileSystem\Npfs DriverObject fffffa801354a710
- Current Irp 00000000 RefCount 369 Type 00000011 Flags 00000240
- Dacl fffff9a10009a6d1 DevExt fffffa8013546d20 DevObjExt fffffa8013546d70
- ExtensionFlags (0x00000800) DOE_DEFAULT_SD_PRESENT
- Characteristics (0000000000)
- Device queue is not busy.
- 0: kd> !DevObj !DrvObj !DevExt ObjectName
- > fffffa8013546bd0 \FileSystem\Npfs fffffa8013546d20 NamedPipe
- 0: kd> Device object is for:
- DriverObject 1354a710
- Current Irp 00000000 RefCount 369 Type 00000011 DevFlags 00000240
- Device queue is not busy.
- Device Object Extension: fffffa8013546d70:
- PowerFlags: 00000000 =>SystemState=0 DeviceState=0
- Dope: 00000000:
- 0: kd> Irp is active with 1 stacks 1 is current (= 0xfffffa8023b97840)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801a1cff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> Irp is active with 1 stacks 1 is current (= 0xfffffa80241661a0)
- No Mdl: No System Buffer: Thread fffffa801573c9e0: Irp stack trace.
- cmd flg cl Device File Completion-Context
- >[ 3, 0] 0 1 fffffa8013546bd0 fffffa801706ff20 00000000-00000000 pending
- \FileSystem\Npfs
- Args: 00001000 00000000 00000000 00000000
- 0: kd> PopAction: fffff80003e2ed10
- State..........: 0 - Idle
- Updates........: 0
- Action.........: None
- Lightest State.: Unspecified
- Flags..........: 10000003 QueryApps|UIAllowed
- Irp minor......: ??
- System State...: Unspecified
- Hiber Context..: 0000000000000000
- Allocated power irps (PopIrpList - fffff80003e3cb70)
- Irp worker threads (PopIrpThreadList - fffff80003e3c4c0)
- Error resolving nt!_POP_CURRENT_BROADCAST...
- 0: kd> All active Power Irps from PoRequestPowerIrp
- PopReqestedPowerIrpList
- FieldOffset = 0000000000000008
- 0: kd> Device object is for:
- DriverObject 1354a710
- Current Irp 00000000 RefCount 369 Type 00000011 DevFlags 00000240
- Device queue is not busy.
- Device Object Extension: fffffa8013546d70:
- PowerFlags: 00000000 =>SystemState=0 DeviceState=0
- Dope: 00000000:
- 0: kd> All active Power Irps from PoRequestPowerIrp
- PopReqestedPowerIrpList
- FieldOffset = 0000000000000008
- 0: kd> PopAction: fffff80003e2ed10
- State..........: 0 - Idle
- Updates........: 0
- Action.........: None
- Lightest State.: Unspecified
- Flags..........: 10000003 QueryApps|UIAllowed
- Irp minor......: ??
- System State...: Unspecified
- Hiber Context..: 0000000000000000
- Allocated power irps (PopIrpList - fffff80003e3cb70)
- Irp worker threads (PopIrpThreadList - fffff80003e3c4c0)
- Error resolving nt!_POP_CURRENT_BROADCAST...
- 0: kd> quit:
- LiveKd v5.31 - Execute kd/windbg on a live system
- Sysinternals - www.sysinternals.com
- Copyright (C) 2000-2013 Mark Russinovich and Ken Johnson
- Launching H:\Program Files\Windows SDK\Debuggers\x64\kd.exe:
- Execute Kd again? (y/n)
- Exiting LiveKd.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement