Task 21611282

Name	wah2_sam50_n5ao_201412_24_808_011813146_0
Workunit	11813146
Created	12 Apr 2019, 8:08:19 UTC
Sent	17 Apr 2019, 16:42:44 UTC
Report deadline	29 Mar 2020, 22:02:44 UTC
Received	18 Apr 2019, 5:04:59 UTC
Server state	Over
Outcome	Computation error
Client state	Compute error
Exit status	-1073741819 (0xC0000005) STATUS_ACCESS_VIOLATION
Computer ID	1259008
Run time	13 min 54 sec
CPU time	13 min 35 sec
Validate state	Invalid
Credit	0.00
Device peak FLOPS	3.57 GFLOPS
Application version	Weather At Home 2 (wah2) v8.24 windows_intelx86
Peak working set size	190.03 MB
Peak swap size	187.56 MB
Peak disk usage	0.02 MB
Stderr	<core_client_version>7.4.42</core_client_version> <![CDATA[ <message> (unknown error) - exit code -1073741819 (0xc0000005) </message> <stderr_txt> Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... 19:14:02 (468): start_timer_thread(): CreateThread() failed, errno 0 19:14:04 (3180): start_timer_thread(): CreateThread() failed, errno 0 Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Suspended CPDN Monitor - Suspend request from BOINC... Unhandled Exception Detected... - Unhandled Exception Record - Reason: Access Violation (0xc0000005) at address 0x00463007 read attempt to address 0x012E03AC Engaging BOINC Windows Runtime Debugger... ****************** BOINC Windows Runtime Debugger Version 7.7.0 Dump Timestamp : 04/17/19 19:33:59 Install Directory : Data Directory : C:\ProgramData\BOINC Project Symstore : LoadLibraryA( C:\ProgramData\BOINC\dbghelp.dll ): GetLastError = 126 Loaded Library : dbghelp.dll LoadLibraryA( C:\ProgramData\BOINC\symsrv.dll ): GetLastError = 126 LoadLibraryA( symsrv.dll ): GetLastError = 126 LoadLibraryA( C:\ProgramData\BOINC\srcsrv.dll ): GetLastError = 126 LoadLibraryA( srcsrv.dll ): GetLastError = 126 LoadLibraryA( C:\ProgramData\BOINC\version.dll ): GetLastError = 126 Loaded Library : version.dll Debugger Engine : 4.0.5.0 Symbol Search Path: C:\ProgramData\BOINC\slots\0;C:\ProgramData\BOINC\projects\climateprediction.net ModLoad: 0000000000400000 0000000000152000 C:\ProgramData\BOINC\projects\climateprediction.net\wah2_8.24_windows_intelx86.exe (-nosymbols- Symbols Loaded) Linked PDB Filename : ModLoad: 00000000770e0000 000000000018d000 C:\WINDOWS\SYSTEM32\ntdll.dll (6.2.15063.1324) (-exported- Symbols Loaded) Linked PDB Filename : wntdll.pdb File Version : 10.0.15063.1266 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.1266 ModLoad: 0000000076290000 00000000000d0000 C:\WINDOWS\System32\KERNEL32.DLL (6.2.15063.1058) (-exported- Symbols Loaded) Linked PDB Filename : wkernel32.pdb File Version : 10.0.15063.1266 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.1266 ModLoad: 0000000076700000 00000000001c2000 C:\WINDOWS\System32\KERNELBASE.dll (6.2.15063.1266) (-exported- Symbols Loaded) Linked PDB Filename : wkernelbase.pdb File Version : 10.0.15063.1266 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.1266 ModLoad: 0000000073900000 0000000000071000 C:\WINDOWS\System32\tmumh\20019\AddOn\6.80.0.1007\TmUmEvt.dll (6.80.0.1007) (-exported- Symbols Loaded) Linked PDB Filename : D:\Eyes_6.8_win32\src\user\Win32\Release\TmUmEvt.pdb File Version : 6.80.0.1007 Company Name : Trend Micro Inc. Product Name : Trend Micro Eyes Product Version : 6.80 ModLoad: 00000000764b0000 0000000000006000 C:\WINDOWS\System32\PSAPI.DLL (6.2.15063.0) (-exported- Symbols Loaded) Linked PDB Filename : psapi.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.0 ModLoad: 0000000073d60000 0000000000045000 C:\WINDOWS\System32\SHLWAPI.dll (6.2.15063.1058) (-exported- Symbols Loaded) Linked PDB Filename : shlwapi.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.0 ModLoad: 0000000075530000 00000000000bd000 C:\WINDOWS\System32\msvcrt.dll (7.0.15063.0) (-exported- Symbols Loaded) Linked PDB Filename : msvcrt.pdb File Version : 7.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 7.0.15063.0 ModLoad: 0000000076050000 0000000000238000 C:\WINDOWS\System32\combase.dll (6.2.15063.1155) (-exported- Symbols Loaded) Linked PDB Filename : combase.pdb File Version : 10.0.15063.296 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.296 ModLoad: 0000000073bb0000 0000000000118000 C:\WINDOWS\System32\ucrtbase.dll (6.2.15063.1182) (-exported- Symbols Loaded) Linked PDB Filename : ucrtbase.pdb File Version : 10.0.15063.1182 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.1182 ModLoad: 0000000076c70000 00000000000c0000 C:\WINDOWS\System32\RPCRT4.dll (6.2.15063.1155) (-exported- Symbols Loaded) Linked PDB Filename : wrpcrt4.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.0 ModLoad: 0000000073b90000 0000000000020000 C:\WINDOWS\System32\SspiCli.dll (6.2.15063.674) (-exported- Symbols Loaded) Linked PDB Filename : wsspicli.pdb File Version : 10.0.15063.674 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.674 ModLoad: 0000000073b80000 000000000000a000 C:\WINDOWS\System32\CRYPTBASE.dll (6.2.15063.0) (-exported- Symbols Loaded) Linked PDB Filename : cryptbase.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.0 ModLoad: 0000000076450000 0000000000057000 C:\WINDOWS\System32\bcryptPrimitives.dll (6.2.15063.994) (-exported- Symbols Loaded) Linked PDB Filename : bcryptprimitives.pdb File Version : 10.0.15063.994 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.994 ModLoad: 0000000076000000 0000000000041000 C:\WINDOWS\System32\sechost.dll (6.2.15063.1356) (-exported- Symbols Loaded) Linked PDB Filename : sechost.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.0 ModLoad: 00000000768f0000 0000000000021000 C:\WINDOWS\System32\GDI32.dll (6.2.15063.1324) (-exported- Symbols Loaded) Linked PDB Filename : wgdi32.pdb File Version : 10.0.15063.1324 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.1324 ModLoad: 00000000764c0000 0000000000158000 C:\WINDOWS\System32\gdi32full.dll (6.2.15063.1387) (-exported- Symbols Loaded) Linked PDB Filename : wgdi32full.pdb File Version : 10.0.15063.1387 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.1387 ModLoad: 0000000076af0000 0000000000079000 C:\WINDOWS\System32\msvcp_win.dll (6.2.15063.936) (-exported- Symbols Loaded) Linked PDB Filename : msvcp_win.pdb File Version : 10.0.15063.936 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.936 ModLoad: 0000000076eb0000 000000000013c000 C:\WINDOWS\System32\USER32.dll (6.2.15063.966) (-exported- Symbols Loaded) Linked PDB Filename : wuser32.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.0 ModLoad: 0000000076ad0000 0000000000016000 C:\WINDOWS\System32\win32u.dll (6.2.15063.608) (-exported- Symbols Loaded) Linked PDB Filename : wwin32u.pdb File Version : 10.0.15063.608 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.608 ModLoad: 0000000076620000 0000000000077000 C:\WINDOWS\System32\ADVAPI32.dll (6.2.15063.1356) (-exported- Symbols Loaded) Linked PDB Filename : advapi32.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.0 ModLoad: 00000000737e0000 000000000011a000 C:\WINDOWS\System32\tmumh\20019\TmMon\1.6.0.1206\tmmon.dll (1.6.0.1206) (-exported- Symbols Loaded) Linked PDB Filename : D:\TMUMH_1.6\src\binWin32\Release_WFBS\tmmon.pdb File Version : 1.6.0.1206 Company Name : Trend Micro Inc. Product Name : Trend Micro User Mode Hooking Product Version : 1.6 ModLoad: 0000000073ab0000 0000000000028000 C:\WINDOWS\SYSTEM32\ntmarta.dll (6.2.15063.1155) (-exported- Symbols Loaded) Linked PDB Filename : ntmarta.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Sistema operativo Microsoft® Windows® Product Version : 10.0.15063.0 ModLoad: 0000000073680000 000000000015d000 C:\WINDOWS\SYSTEM32\dbghelp.dll (6.2.15063.1155) (-exported- Symbols Loaded) Linked PDB Filename : dbghelp.pdb File Version : 10.0.15063.1155 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.1155 ModLoad: 0000000073b70000 0000000000008000 C:\WINDOWS\SYSTEM32\version.dll (6.2.15063.0) (-exported- Symbols Loaded) Linked PDB Filename : version.pdb File Version : 10.0.15063.0 (WinBuild.160101.0800) Company Name : Microsoft Corporation Product Name : Microsoft® Windows® Operating System Product Version : 10.0.15063.0 * Dump of the Process Statistics: * - I/O Operations Counters - Read: 17963, Write: 0, Other 78619 - I/O Transfers Counters - Read: 0, Write: 2675, Other 0 - Paged Pool Usage - QuotaPagedPoolUsage: 213152, QuotaPeakPagedPoolUsage: 216328 QuotaNonPagedPoolUsage: 10456, QuotaPeakNonPagedPoolUsage: 10608 - Virtual Memory Usage - VirtualSize: 118669312, PeakVirtualSize: 118669312 - Pagefile Usage - PagefileUsage: 3944448, PeakPagefileUsage: 3944448 - Working Set Size - WorkingSetSize: 81813504, PeakWorkingSetSize: 81813504, PageFaultCount: 21276 * Dump of thread ID 9880 (state: Waiting): * - Information - Status: Wait Reason: UserRequest, , Kernel Time: 0.000000, User Time: 0.000000, Wait Time: 2894381.000000 - Unhandled Exception Record - Reason: Access Violation (0xc0000005) at address 0x00463007 read attempt to address 0x012E03AC - Registers - eax=00000015 ebx=fffffffe ecx=00000000 edx=00000000 esi=01210020 edi=00000000 eip=00463007 esp=0605fe7c ebp=0605fe80 cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010216 - Callstack - ChildEBP RetAddr Args to Child 0605fe80 0044826f 01210020 00000000 01210020 fffffffe wah2_8.24_windows_intelx86!+0x0 0605fe98 0044fa68 01210020 00000000 0051d6b0 0605fee8 wah2_8.24_windows_intelx86!+0x0 0605feac 004856fc 00000015 6e722393 00000006 0048566c wah2_8.24_windows_intelx86!+0x0 0605fee8 7683fe19 00000006 18b7d1c4 7683fc60 7683fc60 wah2_8.24_windows_intelx86!+0x0 0605ff80 762a8744 80000006 762a8720 180dd79f 0605ffdc KERNELBASE!CtrlRoutine+0x0 0605ff94 771458ed 80000006 19211c97 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0 0605ffdc 771458bd ffffffff 77166ce8 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 0605ffec 00000000 7683fc60 80000006 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 * Dump of thread ID 7912 (state: Waiting): * - Information - Status: Wait Reason: ExecutionDelay, , Kernel Time: 12343750.000000, User Time: 54531248.000000, Wait Time: 2894379.000000 - Registers - eax=00000000 ebx=0019ed30 ecx=00000000 edx=00000000 esi=00000000 edi=0000016b eip=7715295c esp=0019ecf0 ebp=0019ed54 cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000216 - Callstack - ChildEBP RetAddr Args to Child 0019ed54 767f808f 000000c8 00000000 0019ed78 00468ec1 ntdll!NtDelayExecution+0x0 0019ed64 00468ec1 000000c8 000000c8 00000000 0019edc4 KERNELBASE!Sleep+0x0 0019ed78 0040761d a0000000 027f9999 00000000 00000050 wah2_8.24_windows_intelx86!+0x0 0019edc4 00407a7a 00000001 00000000 004d0c50 00000020 wah2_8.24_windows_intelx86!+0x0 0019edf8 004092c5 00000000 686e203b 00485cce 00000000 wah2_8.24_windows_intelx86!+0x0 0019fd40 004094b7 0019fef0 00409535 004d1370 0019fd60 wah2_8.24_windows_intelx86!+0x0 0019fd48 00409535 004d1370 0019fd60 006428b8 0019fd60 wah2_8.24_windows_intelx86!+0x0 0019fef0 00485c7b 00400000 00000000 006428f6 0000000a wah2_8.24_windows_intelx86!+0x0 0019ff80 762a8744 003da000 762a8720 1e11d79f 0019ffdc wah2_8.24_windows_intelx86!+0x0 0019ff94 771458ed 003da000 1f3d1c97 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0 0019ffdc 771458bd ffffffff 77166ce8 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 0019ffec 00000000 00485cce 003da000 00000000 78746341 ntdll!RtlGetAppContainerNamedObjectPath+0x0 * Dump of thread ID 6984 (state: Waiting): * - Information - Status: Wait Reason: UserRequest, , Kernel Time: 0.000000, User Time: 0.000000, Wait Time: 2894377.000000 - Registers - eax=00000000 ebx=0120fed4 ecx=00000000 edx=00000000 esi=00000000 edi=73843bdd eip=7715295c esp=0120fe94 ebp=0120fef8 cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 - Callstack - ChildEBP RetAddr Args to Child 0120fef8 767f808f 00000064 00000000 0120ff3c 737ec605 ntdll!NtDelayExecution+0x0 0120ff08 737ec605 00000064 006725c8 00000102 00000102 KERNELBASE!Sleep+0x0 0120ff3c 73843b31 00000000 1aea7a57 73843bdd 00664f78 tmmon!+0x0 0120ff74 73843c59 73843bdd 0120ff94 762a8744 006586b0 tmmon!StartHook+0x0 0120ff80 762a8744 006586b0 762a8720 1f28d79f 0120ffdc tmmon!StartHook+0x0 0120ff94 771458ed 006586b0 1e041c97 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0 0120ffdc 771458bd ffffffff 77166ce8 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 0120ffec 00000000 73843bdd 006586b0 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 * Dump of thread ID 9624 (state: Waiting): * - Information - Status: Wait Reason: UserRequest, , Kernel Time: 0.000000, User Time: 0.000000, Wait Time: 2816532.000000 - Registers - eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=00000002 edi=00000002 eip=77152bcc esp=0148fda0 ebp=0148ff30 cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000216 - Callstack - ChildEBP RetAddr Args to Child 0148ff30 767f7648 00000002 0148ff64 00000000 ffffffff ntdll!ZwWaitForMultipleObjects+0x0 0148ff4c 73917041 00000002 0148ff64 00000000 ffffffff KERNELBASE!WaitForMultipleObjects+0x0 0148ff80 762a8744 00000000 762a8720 1f40d79f 0148ffdc TmUmEvt!TmmonDestoryAddonObject+0x0 0148ff94 771458ed 00000000 1e6c1c97 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0 0148ffdc 771458bd ffffffff 77166ce8 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 0148ffec 00000000 73916cf0 00000000 00000000 83e58955 ntdll!RtlGetAppContainerNamedObjectPath+0x0 * Dump of thread ID 9504 (state: Waiting): * - Information - Status: Wait Reason: ExecutionDelay, , Kernel Time: 0.000000, User Time: 0.000000, Wait Time: 2894377.000000 - Registers - eax=00000000 ebx=0178fd1c ecx=00000000 edx=00000000 esi=00000000 edi=00000001 eip=7715295c esp=0178fcdc ebp=0178fd40 cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 - Callstack - ChildEBP RetAddr Args to Child 0178fd40 767f808f 00000064 00000000 0178ff80 00478b44 ntdll!NtDelayExecution+0x0 0178fd50 00478b44 00000064 00478b20 00478b20 00000000 KERNELBASE!Sleep+0x0 0178ff80 762a8744 00000000 762a8720 1f70d79f 0178ffdc wah2_8.24_windows_intelx86!+0x0 0178ff94 771458ed 00000000 1e5c1c97 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0 0178ffdc 771458bd ffffffff 77166ce8 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 0178ffec 00000000 00478b20 00000000 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 * Dump of thread ID 6260 (state: Waiting): * - Information - Status: Wait Reason: EventPairLow, , Kernel Time: 0.000000, User Time: 0.000000, Wait Time: 2894355.000000 - Registers - eax=00000000 ebx=006407b0 ecx=00000000 edx=00000000 esi=00664308 edi=006644c8 eip=7715426c esp=0134fd7c ebp=0134ff80 cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202 - Callstack - ChildEBP RetAddr Args to Child 0134ff80 762a8744 006407b0 762a8720 1f3cd79f 0134ffdc ntdll!ZwWaitForWorkViaWorkerFactory+0x0 0134ff94 771458ed 006407b0 1e101c97 00000000 00000000 KERNEL32!BaseThreadInitThunk+0x0 0134ffdc 771458bd ffffffff 77166ce8 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 0134ffec 00000000 77112000 006407b0 00000000 00000000 ntdll!RtlGetAppContainerNamedObjectPath+0x0 * Debug Message Dump ** * Foreground Window Data *** Window Name : Window Class : Window Process ID: 0 Window Thread ID : 0 Exiting... </stderr_txt> ]]>