WIndbg does not recognize !k command. I guess you meant ‘k’ . But I am not getting the complete callstack using ‘k L100’ . I think its because the dump is a kernel dump and has only kernel information.
Here is the output for !process 0 7 services.exe:
0: kd> !process 0 7 services.exe
PROCESS fffffa8007b12b10
SessionId: 0 Cid: 0220 Peb: 7fffffdf000 ParentCid: 01b8
DirBase: 20ca7d000 ObjectTable: fffff8a0020ed010 HandleCount: 628.
Image: services.exe
VadRoot fffffa8007b1d830 Vads 146 Clone 0 Private 2233. Modified 4900541. Locked 35.
DeviceMap fffff8a000008820
Token fffff8a0020dd060
ElapsedTime 27 Days 16:41:03.120
UserTime 00:46:49.468
KernelTime 01:46:07.671
QuotaPoolUsage[PagedPool] 124296
QuotaPoolUsage[NonPagedPool] 38792
Working Set Sizes (now,min,max) (2196, 50, 345) (8784KB, 200KB, 1380KB)
PeakWorkingSetSize 4765
VirtualSize 72 Mb
PeakVirtualSize 209 Mb
PageFaultCount 5210240
MemoryPriority BACKGROUND
BasePriority 9
CommitCharge 2866
THREAD fffffa800720a2c0 Cid 0220.0270 Teb: 000007fffffdb000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
fffffa800720a7d0 SynchronizationTimer
fffffa8007b84ad0 SynchronizationTimer
fffffa8007470b10 ProcessObject
fffffa80074ad060 ProcessObject
fffffa8008205b10 ProcessObject
fffffa8008228380 ProcessObject
fffffa800823ab10 ProcessObject
fffffa800824eb10 ProcessObject
fffffa800826fb10 ProcessObject
fffffa80082898e0 ProcessObject
fffffa8007a0b060 ProcessObject
fffffa8007b2e320 ProcessObject
fffffa8007bd1320 ProcessObject
fffffa80083046a0 ProcessObject
fffffa8008763060 ProcessObject
fffffa8008869060 ProcessObject
fffffa800889c060 ProcessObject
fffffa80088c9730 ProcessObject
fffffa80089a7b10 ProcessObject
fffffa8008a27b10 ProcessObject
fffffa8008a16b10 ProcessObject
fffffa80089c6060 ProcessObject
fffffa80089f8b10 ProcessObject
fffffa8008c0ab10 ProcessObject
fffffa8008c3a530 ProcessObject
fffffa8008c79b10 ProcessObject
fffffa8008d6cb10 ProcessObject
fffffa8008c36b10 ProcessObject
fffffa8008e38cc0 SynchronizationEvent
fffffa8008d804a0 SynchronizationTimer
fffffa8008228380 ProcessObject
fffffa800824eb10 ProcessObject
fffffa80089f8b10 ProcessObject
fffffa800826fb10 ProcessObject
fffffa800826fb10 ProcessObject
fffffa800823ab10 ProcessObject
fffffa800826fb10 ProcessObject
fffffa8008c3a530 ProcessObject
fffffa80089c6060 ProcessObject
fffffa8008d6cb10 ProcessObject
fffffa8007b2e320 ProcessObject
fffffa8008a16b10 ProcessObject
fffffa8008228380 ProcessObject
fffffa8008228380 ProcessObject
fffffa8008228380 ProcessObject
fffffa8008228380 ProcessObject
fffffa80074ad060 ProcessObject
fffffa80074ad060 ProcessObject
fffffa8008a27b10 ProcessObject
fffffa8008228380 ProcessObject
fffffa8007470b10 ProcessObject
fffffa8008c79b10 ProcessObject
fffffa8007470b10 ProcessObject
fffffa80089a7b10 ProcessObject
fffffa8008fd8060 ProcessObject
fffffa800824eb10 ProcessObject
fffffa801ac86060 ProcessObject
fffffa800bab55d0 ProcessObject
fffffa800f65b060 ProcessObject
fffffa800ebcfb10 ProcessObject
fffffa8007a332a0 SynchronizationTimer
fffffa80082afe30 SynchronizationTimer
fffffa8008ec9990 SynchronizationTimer
fffffa800720bef0 SynchronizationTimer
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153148235 Ticks: 1555 (0:00:00:24.296)
Context Switch Count 127463 IdealProcessor: 0
UserTime 00:00:00.000
KernelTime 00:00:00.218
Win32 Start Address 0x000000007799a280
Stack Init fffff88003d76db0 Current fffff88003d75fc0
Base fffff88003d77000 Limit fffff88003d71000 Call 0000000000000000
Priority 9 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff88003d76000 fffff800
01ec4142 : fffffa800720a380 fffffa80
0720a2c0 fffff88003d76320 fffff800
00000006 : nt!KiSwapContext+0x7a
fffff88003d76140 fffff800
01ec365a : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiCommitThreadWait+0x1d2
fffff88003d761d0 fffff800
021b9c2f : fffff88000000040 fffff880
03d76520 0000000000000001 00000000
00000006 : nt!KeWaitForMultipleObjects+0x272
fffff88003d76490 fffff800
021b9fa6 : fffffa8007208701 fffff800
01ec1a73 0000000000000001 00000000
00000001 : nt!ObpWaitForMultipleObjects+0x294
fffff88003d76960 fffff800
01ebe0d3 : fffffa800720a2c0 00000000
00b7fad8 fffff88003d76bc8 fffff880
03d76c00 : nt!NtWaitForMultipleObjects+0xe5
fffff88003d76bb0 00000000
779cc2ea : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88003d76c20) 00000000
00b7fab8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cc2ea
THREAD fffffa800746aa00 Cid 0220.028c Teb: 000007fffffac000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
fffffa8008bf9670 SynchronizationEvent
fffffa800746e530 SynchronizationEvent
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153051456 Ticks: 98334 (0:00:25:36.468)
Context Switch Count 11294 IdealProcessor: 0
UserTime 00:00:00.015
KernelTime 00:00:00.093
Win32 Start Address 0x000007fefccd04fc
Stack Init fffff88003dd9db0 Current fffff88003dd8fc0
Base fffff88003dda000 Limit fffff88003dd4000 Call 0000000000000000
Priority 9 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff88003dd9000 fffff800
01ec4142 : fffffa800746aac0 fffffa80
0746aa00 0000000000000000 fffffa80
00000009 : nt!KiSwapContext+0x7a
fffff88003dd9140 fffff800
01ec365a : 000000000000007b 00000000
000000ff 0000000000000000 fffffa80
05815470 : nt!KiCommitThreadWait+0x1d2
fffff88003dd91d0 fffff800
021b9c2f : fffff88000000002 fffff880
03dd9520 0000000000000001 fffff880
00000006 : nt!KeWaitForMultipleObjects+0x272
fffff88003dd9490 fffff800
021b9fa6 : 0000000000169501 00000000
00000003 fffff80000000001 ffffffff
ffffff00 : nt!ObpWaitForMultipleObjects+0x294
fffff88003dd9960 fffff800
01ebe0d3 : fffffa800746aa00 00000000
00eff488 fffff88003dd9bc8 fffff880
03dd9c28 : nt!NtWaitForMultipleObjects+0xe5
fffff88003dd9bb0 00000000
779cc2ea : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88003dd9c20) 00000000
00eff468 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cc2ea
THREAD fffffa80074af6f0 Cid 0220.02c4 Teb: 000007fffffaa000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
fffffa8007480a40 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153147012 Ticks: 2778 (0:00:00:43.406)
Context Switch Count 46385 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.031
Win32 Start Address 0x000000007799f6f0
Stack Init fffff880047b6db0 Current fffff880047b67c0
Base fffff880047b7000 Limit fffff880047b1000 Call 0000000000000000
Priority 9 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff880047b6800 fffff800
01ec4142 : fffffa80074af7b0 fffffa80
074af6f0 0000000000000000 fffffa80
00000008 : nt!KiSwapContext+0x7a
fffff880047b6940 fffff800
01ec71a3 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000040 : nt!KiCommitThreadWait+0x1d2
fffff880047b69d0 fffff800
021aa217 : fffffa80078b1500 fffff800
01ec1a01 fffff880047b6c01 fffff800
00000000 : nt!KeRemoveQueueEx+0x323
fffff880047b6a90 fffff800
01eab3a6 : 0000000000000000 fffff880
047b6ba8 fffff880047b6bc8 00000000
00000001 : nt!IoRemoveIoCompletion+0x47
fffff880047b6b20 fffff800
01ebe0d3 : fffffa80074af6f0 00000000
77a7f5c0 0000000000000000 00000000
00000000 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff880047b6c20 00000000
779cd63a : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880047b6c20) 00000000
00a4f5c8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cd63a
THREAD fffffa8008e54060 Cid 0220.0c98 Teb: 000007fffff54000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
fffffa8008e40c50 SynchronizationEvent
fffffa8008e5ffe0 SynchronizationEvent
fffffa80071b4110 SynchronizationEvent
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153044980 Ticks: 104810 (0:00:27:17.656)
Context Switch Count 9737 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.046
Win32 Start Address 0x000000018005a33c
Stack Init fffff880065e7db0 Current fffff880065e6fc0
Base fffff880065e8000 Limit fffff880065e2000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff880065e7000 fffff800
01ec4142 : fffffa8008e54120 fffffa80
08e54060 0000000000000000 fffffa80
00000008 : nt!KiSwapContext+0x7a
fffff880065e7140 fffff800
01ec365a : 000000000000023f 00000000
00000000 0000000000000000 00000000
00001f80 : nt!KiCommitThreadWait+0x1d2
fffff880065e71d0 fffff800
021b9c2f : fffff88000000003 fffff880
065e7520 0000000000000001 00000000
00000006 : nt!KeWaitForMultipleObjects+0x272
fffff880065e7490 fffff800
021b9fa6 : fffff880065e7901 fffff800
021ac35a fffffa8000000001 fffffa80
08298c00 : nt!ObpWaitForMultipleObjects+0x294
fffff880065e7960 fffff800
01ebe0d3 : fffffa8008e54060 00000000
03aff348 fffff880065e7bc8 00000000
00000000 : nt!NtWaitForMultipleObjects+0xe5
fffff880065e7bb0 00000000
779cc2ea : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880065e7c20) 00000000
03aff328 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cc2ea
THREAD fffffa8008e3c5b0 Cid 0220.0c9c Teb: 000007fffff52000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Non-Alertable
fffffa8008defe40 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153044980 Ticks: 104810 (0:00:27:17.656)
Context Switch Count 9295 IdealProcessor: 0
UserTime 00:00:00.000
KernelTime 00:00:00.078
Win32 Start Address 0x000000018005a33c
Stack Init fffff88006ccedb0 Current fffff88006cce7a0
Base fffff88006ccf000 Limit fffff88006cc9000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff88006cce7e0 fffff800
01ec4142 : fffffa8008e3c670 fffffa80
08e3c5b0 0000000000000000 fffffa80
0000000a : nt!KiSwapContext+0x7a
fffff88006cce920 fffff800
01ec71a3 : 0000000000000002 fffffa80
07b12ea8 fffff88000000000 fffff800
01ecf91e : nt!KiCommitThreadWait+0x1d2
fffff88006cce9b0 fffff800
021aa217 : 0000000000000000 00000000
00000001 0000000000000000 00000000
00000000 : nt!KeRemoveQueueEx+0x323
fffff88006ccea70 fffff800
0217c0a5 : 0000000000000000 fffff880
06cceb68 fffff88006cceb60 fffff800
0203ce01 : nt!IoRemoveIoCompletion+0x47
fffff88006cceb00 fffff800
01ebe0d3 : fffffa8008e3c5b0 00000000
03bbf9f8 fffff88006ccebc8 00000000
00000000 : nt!NtRemoveIoCompletion+0x145
fffff88006ccebb0 00000000
779cbdca : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88006ccec20) 00000000
03bbf9d8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cbdca
THREAD fffffa800904cb50 Cid 0220.0ca0 Teb: 000007fffff4e000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Non-Alertable
fffffa8008defe40 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153044980 Ticks: 104810 (0:00:27:17.656)
Context Switch Count 9539 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.046
Win32 Start Address 0x000000018005a33c
Stack Init fffff88007078db0 Current fffff880070787a0
Base fffff88007079000 Limit fffff88007073000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff880070787e0 fffff800
01ec4142 : fffffa800904cc10 fffffa80
0904cb50 0000000000000000 fffffa80
00000008 : nt!KiSwapContext+0x7a
fffff88007078920 fffff800
01ec71a3 : 0000000000000002 fffffa80
07b12ea8 fffff88000000000 fffff800
01ecf91e : nt!KiCommitThreadWait+0x1d2
fffff880070789b0 fffff800
021aa217 : 0000000000000000 00000000
00000001 0000000000000000 00000000
00000000 : nt!KeRemoveQueueEx+0x323
fffff88007078a70 fffff800
0217c0a5 : 0000000000000000 fffff880
07078b68 fffff88007078b60 fffff800
0203ce01 : nt!IoRemoveIoCompletion+0x47
fffff88007078b00 fffff800
01ebe0d3 : fffffa800904cb50 00000000
03defab8 fffff88007078bc8 00000000
00000000 : nt!NtRemoveIoCompletion+0x145
fffff88007078bb0 00000000
779cbdca : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88007078c20) 00000000
03defa98 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cbdca
THREAD fffffa8008f60b50 Cid 0220.0ca4 Teb: 000007fffff4c000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Non-Alertable
fffffa8008defe40 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153044980 Ticks: 104810 (0:00:27:17.656)
Context Switch Count 9219 IdealProcessor: 0
UserTime 00:00:00.000
KernelTime 00:00:00.031
Win32 Start Address 0x000000018005a33c
Stack Init fffff8800707fdb0 Current fffff8800707f7a0
Base fffff88007080000 Limit fffff8800707a000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff8800707f7e0 fffff800
01ec4142 : fffffa8008f60c10 fffffa80
08f60b50 0000000000000000 fffffa80
0000000a : nt!KiSwapContext+0x7a
fffff8800707f920 fffff800
01ec71a3 : 0000000000000002 fffffa80
07b12ea8 fffff88000000000 fffff800
01ecf91e : nt!KiCommitThreadWait+0x1d2
fffff8800707f9b0 fffff800
021aa217 : 00000000026df500 00000000
00000001 0000000000000000 fffff880
0707fc20 : nt!KeRemoveQueueEx+0x323
fffff8800707fa70 fffff800
0217c0a5 : 0000000000000000 fffff880
0707fb68 fffff8800707fb60 ffffd6ee
ce01d101 : nt!IoRemoveIoCompletion+0x47
fffff8800707fb00 fffff800
01ebe0d3 : fffffa8008f60b50 00000000
026df838 fffff8800707fbc8 00000000
00000000 : nt!NtRemoveIoCompletion+0x145
fffff8800707fbb0 00000000
779cbdca : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff8800707fc20) 00000000
026df818 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cbdca
THREAD fffffa8008f64060 Cid 0220.0ca8 Teb: 000007fffff4a000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Non-Alertable
fffffa8008defe40 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153044980 Ticks: 104810 (0:00:27:17.656)
Context Switch Count 9572 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.015
Win32 Start Address 0x000000018005a33c
Stack Init fffff88007086db0 Current fffff880070867a0
Base fffff88007087000 Limit fffff88007081000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff880070867e0 fffff800
01ec4142 : fffffa8008f64120 fffffa80
08f64060 0000000000000000 fffffa80
00000008 : nt!KiSwapContext+0x7a
fffff88007086920 fffff800
01ec71a3 : 0000000000000002 fffffa80
07b12ea8 fffff88000000000 fffff800
01ecf91e : nt!KiCommitThreadWait+0x1d2
fffff880070869b0 fffff800
021aa217 : 0000000000000000 00000000
00000001 0000000000000000 00000000
00000000 : nt!KeRemoveQueueEx+0x323
fffff88007086a70 fffff800
0217c0a5 : 0000000000000000 fffff880
07086b68 fffff88007086b60 fffff800
0203ce01 : nt!IoRemoveIoCompletion+0x47
fffff88007086b00 fffff800
01ebe0d3 : fffffa8008f64060 00000000
03f0f9b8 fffff88007086bc8 00000000
00000000 : nt!NtRemoveIoCompletion+0x145
fffff88007086bb0 00000000
779cbdca : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88007086c20) 00000000
03f0f998 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cbdca
THREAD fffffa8008f647d0 Cid 0220.0cac Teb: 000007fffff48000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Non-Alertable
fffffa8008defe40 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153044980 Ticks: 104810 (0:00:27:17.656)
Context Switch Count 9162 IdealProcessor: 0
UserTime 00:00:00.000
KernelTime 00:00:00.078
Win32 Start Address 0x000000018005a33c
Stack Init fffff8800708ddb0 Current fffff8800708d7a0
Base fffff8800708e000 Limit fffff88007088000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff8800708d7e0 fffff800
01ec4142 : fffffa8008f64890 fffffa80
08f647d0 0000000000000000 fffffa80
0000000b : nt!KiSwapContext+0x7a
fffff8800708d920 fffff800
01ec71a3 : 0000000000000002 fffffa80
07b12ea8 fffff88000000000 fffff800
01ecf91e : nt!KiCommitThreadWait+0x1d2
fffff8800708d9b0 fffff800
021aa217 : 000000000382f500 00000000
00000001 0000000000000000 fffff880
0708dc20 : nt!KeRemoveQueueEx+0x323
fffff8800708da70 fffff800
0217c0a5 : 0000000000000000 fffff880
0708db68 fffff8800708db60 ffffd6ee
ce0ef101 : nt!IoRemoveIoCompletion+0x47
fffff8800708db00 fffff800
01ebe0d3 : fffffa8008f647d0 00000000
0382f8f8 fffff8800708dbc8 00000000
00000000 : nt!NtRemoveIoCompletion+0x145
fffff8800708dbb0 00000000
779cbdca : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff8800708dc20) 00000000
0382f8d8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cbdca
THREAD fffffa8008f6db50 Cid 0220.0cc4 Teb: 000007fffff56000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Alertable
fffffa8008e11580 SynchronizationTimer
fffffa800824eb10 ProcessObject
fffffa80088c9730 ProcessObject
fffffa80082898e0 ProcessObject
fffffa800824eb10 ProcessObject
fffffa8008c0ab10 ProcessObject
fffffa8007a0b060 ProcessObject
fffffa800889c060 ProcessObject
fffffa8008869060 ProcessObject
fffffa8008c36b10 ProcessObject
fffffa8008763060 ProcessObject
fffffa80083046a0 ProcessObject
fffffa8008205b10 ProcessObject
fffffa80082898e0 ProcessObject
fffffa8008228380 ProcessObject
fffffa8008228380 ProcessObject
fffffa8008228380 ProcessObject
fffffa8008228380 ProcessObject
fffffa800824eb10 ProcessObject
fffffa8008205b10 ProcessObject
fffffa80082898e0 ProcessObject
fffffa8007bd1320 ProcessObject
fffffa8008205b10 ProcessObject
fffffa8007470b10 ProcessObject
fffffa80082898e0 ProcessObject
fffffa8008228380 ProcessObject
fffffa8007a0b060 ProcessObject
fffffa8008f6cb10 ProcessObject
fffffa8008f6cb10 ProcessObject
fffffa8007b51be0 NotificationEvent
fffffa8008228380 ProcessObject
fffffa80092cf790 ProcessObject
fffffa80092cf790 ProcessObject
fffffa800938c350 ProcessObject
fffffa800938c350 ProcessObject
fffffa8007a0b060 ProcessObject
fffffa80092039c0 ProcessObject
fffffa80092039c0 ProcessObject
fffffa80094c2b10 ProcessObject
fffffa800826fb10 ProcessObject
fffffa80094c2b10 ProcessObject
fffffa80082898e0 ProcessObject
fffffa8008228380 ProcessObject
fffffa800bab55d0 ProcessObject
fffffa80152c5060 ProcessObject
fffffa80105f1060 ProcessObject
fffffa80105f1060 ProcessObject
fffffa800f65b060 ProcessObject
fffffa800ebcfb10 ProcessObject
fffffa80178a2060 ProcessObject
fffffa80178a2060 ProcessObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153056886 Ticks: 92904 (0:00:24:11.625)
Context Switch Count 57235 IdealProcessor: 0
UserTime 00:00:00.109
KernelTime 00:00:01.109
Win32 Start Address 0x000000007799a280
Stack Init fffff880065eedb0 Current fffff880065edfc0
Base fffff880065ef000 Limit fffff880065e9000 Call 0000000000000000
Priority 11 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Kernel stack not resident.
Child-SP RetAddr : Args to Child : Call Site
fffff880065ee000 fffff800
01ec4142 : fffffa8008f6db50 fffffa80
08f6db50 0000000000000000 fffffa80
0000000a : nt!KiSwapContext+0x7a
fffff880065ee140 fffff800
01ec365a : 0000000000000014 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiCommitThreadWait+0x1d2
fffff880065ee1d0 fffff800
021b9c2f : fffff88000000033 fffff880
065ee520 0000000000000001 00000000
00000006 : nt!KeWaitForMultipleObjects+0x272
fffff880065ee490 fffff800
021b9fa6 : 0000000000000001 00000000
00000000 0000000000000001 00000000
00000001 : nt!ObpWaitForMultipleObjects+0x294
fffff880065ee960 fffff800
01ebe0d3 : fffffa8008f6db50 00000000
0370fad8 fffff880065eebc8 fffff8a0
022a0330 : nt!NtWaitForMultipleObjects+0xe5
fffff880065eebb0 00000000
779cc2ea : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff880065eec20) 00000000
0370fab8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cc2ea
THREAD fffffa8009691340 Cid 0220.17b4 Teb: 000007fffffd5000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
fffffa80071e3cc0 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153141990 Ticks: 7800 (0:00:02:01.875)
Context Switch Count 14 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x000000007799f6f0
Stack Init fffff8800b0badb0 Current fffff8800b0ba7c0
Base fffff8800b0bb000 Limit fffff8800b0b5000 Call 0000000000000000
Priority 9 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff8800b0ba800 fffff800
01ec4142 : 0000000000000000 fffffa80
09691340 fffffa800faa3620 00000000
00000008 : nt!KiSwapContext+0x7a
fffff8800b0ba940 fffff800
01ec71a3 : fffffa8009691340 00000000
00000000 ffffffff00000000 fffff8a0
00000030 : nt!KiCommitThreadWait+0x1d2
fffff8800b0ba9d0 fffff800
021aa217 : fffffa80078a2700 fffff800
01eb3501 fffff8800b0bac01 fffffa80
071e3e18 : nt!KeRemoveQueueEx+0x323
fffff8800b0baa90 fffff800
01eab3a6 : 0000000000000000 fffff880
0b0baba8 fffff8800b0babc8 00000000
00000001 : nt!IoRemoveIoCompletion+0x47
fffff8800b0bab20 fffff800
01ebe0d3 : fffffa8009691340 00000000
77a7f5c0 0000000000000000 00000000
00000001 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff8800b0bac20 00000000
779cd63a : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff8800b0bac20) 00000000
00c7f918 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cd63a
THREAD fffffa800ec603d0 Cid 0220.19c8 Teb: 000007fffffa6000 Win32Thread: 0000000000000000 WAIT: (UserRequest) UserMode Non-Alertable
fffffa800821c660 SynchronizationEvent
fffffa8008228380 ProcessObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153148354 Ticks: 1436 (0:00:00:22.437)
Context Switch Count 376 IdealProcessor: 1
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x000000007799f6f0
Stack Init fffff8800ad4fdb0 Current fffff8800ad4efc0
Base fffff8800ad50000 Limit fffff8800ad4a000 Call 0000000000000000
Priority 9 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff8800ad4f000 fffff800
01ec4142 : fffffa800ec603d0 fffffa80
0ec603d0 0000000000000000 00000000
00000008 : nt!KiSwapContext+0x7a
fffff8800ad4f140 fffff800
01ec365a : fffff8a028606568 fffffa80
10399000 0000000000000042 fffff8a0
28606578 : nt!KiCommitThreadWait+0x1d2
fffff8800ad4f1d0 fffff800
021b9c2f : fffff8a000000002 fffff880
0ad4f520 0000000000000001 00000000
00000006 : nt!KeWaitForMultipleObjects+0x272
fffff8800ad4f490 fffff800
021b9fa6 : fffff8a01c059001 00000000
00000654 0000000000000001 fffff800
02175200 : nt!ObpWaitForMultipleObjects+0x294
fffff8800ad4f960 fffff800
01ebe0d3 : fffffa800ec603d0 00000000
010ae798 fffff8800ad4fbc8 fffffa80
00000000 : nt!NtWaitForMultipleObjects+0xe5
fffff8800ad4fbb0 00000000
779cc2ea : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff8800ad4fc20) 00000000
010ae778 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cc2ea
THREAD fffffa801152b2c0 Cid 0220.1cbc Teb: 000007fffffd3000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
fffffa8007208700 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153146327 Ticks: 3463 (0:00:00:54.109)
Context Switch Count 3855 IdealProcessor: 1
UserTime 00:00:00.062
KernelTime 00:00:00.031
Win32 Start Address 0x000000007799f6f0
Stack Init fffff88007d70db0 Current fffff88007d707c0
Base fffff88007d71000 Limit fffff88007d6b000 Call 0000000000000000
Priority 10 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff88007d70800 fffff800
01ec4142 : fffffa801152b2c0 fffffa80
1152b2c0 fffff88007d70b58 00000000
00000009 : nt!KiSwapContext+0x7a
fffff88007d70940 fffff800
01ec71a3 : fffff8a013737d00 00000000
000008c4 0000000000000097 fffff800
021d2312 : nt!KiCommitThreadWait+0x1d2
fffff88007d709d0 fffff800
021aa217 : 0000000000000000 00000000
00000001 0000000000000001 00000000
00000000 : nt!KeRemoveQueueEx+0x323
fffff88007d70a90 fffff800
01eab3a6 : 000007feff5aee00 fffff880
07d70ba8 fffff88007d70bc8 00000000
00000001 : nt!IoRemoveIoCompletion+0x47
fffff88007d70b20 fffff800
01ebe0d3 : fffffa801152b2c0 00000000
77a7f5c0 0000000000000000 00000000
015eed40 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff88007d70c20 00000000
779cd63a : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88007d70c20) 00000000
015efbf8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cd63a
THREAD fffffa80121bbb50 Cid 0220.25e8 Teb: 000007fffffae000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
fffffa8007208700 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153148994 Ticks: 796 (0:00:00:12.437)
Context Switch Count 3807 IdealProcessor: 1
UserTime 00:00:00.062
KernelTime 00:00:00.078
Win32 Start Address 0x000000007799f6f0
Stack Init fffff8800a73bdb0 Current fffff8800a73b7c0
Base fffff8800a73c000 Limit fffff8800a736000 Call 0000000000000000
Priority 10 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff8800a73b800 fffff800
01ec4142 : fffffa80121bbb50 fffffa80
121bbb50 fffff8800a73bb58 00000000
00000009 : nt!KiSwapContext+0x7a
fffff8800a73b940 fffff800
01ec71a3 : fffff8a01c269d00 00000000
0000037c 0000000000000002 fffff800
021d2312 : nt!KiCommitThreadWait+0x1d2
fffff8800a73b9d0 fffff800
021aa217 : 0000000000000000 00000000
00000001 0000000000000001 00000000
00000000 : nt!KeRemoveQueueEx+0x323
fffff8800a73ba90 fffff800
01eab3a6 : 000007feff5aee00 fffff880
0a73bba8 fffff8800a73bbc8 00000000
00000001 : nt!IoRemoveIoCompletion+0x47
fffff8800a73bb20 fffff800
01ebe0d3 : fffffa80121bbb50 00000000
77a7f5c0 0000000000000000 00000000
00000000 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff8800a73bc20 00000000
779cd63a : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff8800a73bc20) 00000000
0172f6f8 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cd63a
THREAD fffffa800e3e4060 Cid 0220.0d5c Teb: 000007fffffdd000 Win32Thread: 0000000000000000 WAIT: (WrQueue) UserMode Alertable
fffffa8007208700 QueueObject
Not impersonating
DeviceMap fffff8a000008820
Owning Process fffffa8007b12b10 Image: services.exe
Attached Process N/A Image: N/A
Wait Start TickCount 153149787 Ticks: 3 (0:00:00:00.046)
Context Switch Count 496 IdealProcessor: 0
UserTime 00:00:00.000
KernelTime 00:00:00.000
Win32 Start Address 0x000000007799f6f0
Stack Init fffff88007e64db0 Current fffff88007e647c0
Base fffff88007e65000 Limit fffff88007e5f000 Call 0000000000000000
Priority 9 BasePriority 9 PriorityDecrement 0 IoPriority 2 PagePriority 5
Child-SP RetAddr : Args to Child : Call Site
fffff88007e64800 fffff800
01ec4142 : fffffa800e3e4060 fffffa80
0e3e4060 fffff88007e64b58 00000000
00000009 : nt!KiSwapContext+0x7a
fffff88007e64940 fffff800
01ec71a3 : fffff8a04e181030 00000000
00000524 000000000000001b fffff800
021d2312 : nt!KiCommitThreadWait+0x1d2
fffff88007e649d0 fffff800
021aa217 : 0000000000000000 00000000
00000001 0000000000000001 00000000
00000000 : nt!KeRemoveQueueEx+0x323
fffff88007e64a90 fffff800
01eab3a6 : 000007feff5aee00 fffff880
07e64ba8 fffff88007e64bc8 00000000
00000001 : nt!IoRemoveIoCompletion+0x47
fffff88007e64b20 fffff800
01ebe0d3 : fffffa800e3e4060 00000000
77a7f5c0 0000000000000000 00000000
00000000 : nt!NtWaitForWorkViaWorkerFactory+0x285
fffff88007e64c20 00000000
779cd63a : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x13 (TrapFrame @ fffff88007e64c20) 00000000
0112f508 0000000000000000 : 00000000
00000000 0000000000000000 00000000
00000000 00000000`00000000 : 0x779cd63a
Thanks,
Kunal