We define abstraction as selective ignorance.



[---]

System has 105 active threads

smss.exe has 2 active threads

csrss.exe has 9 active threads

wininit.exe has 5 active threads

csrss.exe has 9 active threads
Thread is 0x88746300
	RequestorMode is 0
	PendingReturned is 0
	FileName is not found!
		IRP(0x887baa20)	Drvobj(0x8608b938)=> \Driver\ACPI
		Fileobj(0x887c1b58)	Devobj(0x860d3128)

Thread is 0x88746300
	RequestorMode is 0
	PendingReturned is 0
	FileName is not found!
		IRP(0x86633c48)	Drvobj(0x857c9218)=> \Driver\PnpManager
		Fileobj(0x8879e7c0)	Devobj(0x857b35a0)

Thread is 0x868dad48
	RequestorMode is 0
	PendingReturned is 0
	FileName is not found!
		IRP(0x859d2610)	Drvobj(0x87f68468)=> \Driver\HidUsb
		Fileobj(0x887c1980)	Devobj(0x87f6c1c8)

Thread is 0x868dad48
	RequestorMode is 0
	PendingReturned is 0
	FileName is not found!
		IRP(0x869d0d50)	Drvobj(0x857c9218)=> \Driver\PnpManager
		Fileobj(0x887c0168)	Devobj(0x857b32a0)

Thread is 0x868dad48
	RequestorMode is 0
	PendingReturned is 0
	FileName is not found!
		IRP(0x8874d620)	Drvobj(0x8608b938)=> \Driver\ACPI
		Fileobj(0x8879eba0)	Devobj(0x860d4f08)


services.exe has 10 active threads

lsass.exe has 8 active threads
	Thread(0x8873f500)
	RequestorMode is 1
	PendingReturned is 0
		FileName: \Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My
		IRP(0x88f7e8b8)	Drvobj(0x860f11e0)=> \Driver\volmgr
		Fileobj(0x859fb5d8)	Devobj(0x865d66f0)

	Thread(0x8873f500)
	RequestorMode is 1
	PendingReturned is 0
		FileName: \Users\Toyota\AppData\Roaming\Microsoft\Credentials
		IRP(0x8593b820)	Drvobj(0x860f11e0)=> \Driver\volmgr
		Fileobj(0x87f7a200)	Devobj(0x865d66f0)

	Thread(0x8873f500)
	RequestorMode is 1
	PendingReturned is 0
		FileName: \Users\Toyota\AppData\Local\Microsoft\Credentials
		IRP(0x858f4e28)	Drvobj(0x860f11e0)=> \Driver\volmgr
		Fileobj(0x87f7a138)	Devobj(0x865d66f0)

	Thread(0x887e7d48)
	RequestorMode is 1
	PendingReturned is 0
		FileName: \Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SystemCertificates\My
		IRP(0x88789e28)	Drvobj(0x860f11e0)=> \Driver\volmgr
		Fileobj(0x88f100a8)	Devobj(0x865d66f0)


lsm.exe has 10 active threads

svchost.exe has 10 active threads

[---]


HOME Windows Crash Dump Analysis Basics


Copyright©Takashi Toyota 2004- 2012
It is 2012-05-20 today.