info winproc winproc: KdVersionBlock at linear address 0x8054c038 winproc: DebuggerDataList Head at linear address 0x80691b74 winproc: DebuggerDataList at linear address 0x8054c060 winproc: OwnerTag at address 0x8054c060 is 0x4742444b ('KDBG'), good winproc: PsActiveProcessList Head at linear address 0x805604d8 winproc: about to traverse PsActiveProcessList winproc: 0x805604d8 winproc: First element of PsActiveProcessList is at 0x817ccb98 winproc: PID 0x00000004 - PPID 0x00000000 - DTB 0x00039000,0x00000000 - Filename System - PEB at 0x00000000 winproc: PID 0x0000017c - PPID 0x00000004 - DTB 0x0383a000,0x0383b000 - Filename smss.exe - PEB at 0x7ffdf000 winproc: PID 0x000001d8 - PPID 0x0000017c - DTB 0x0426f000,0x04270000 - Filename csrss.exe - PEB at 0x7ffd8000 winproc: PID 0x000001f0 - PPID 0x0000017c - DTB 0x043b4000,0x043b5000 - Filename winlogon.exe - PEB at 0x7ffd8000 winproc: PID 0x0000026c - PPID 0x000001f0 - DTB 0x04562000,0x04563000 - Filename services.exe - PEB at 0x7ffd6000 winproc: PID 0x00000278 - PPID 0x000001f0 - DTB 0x044c2000,0x04503000 - Filename savedump.exe - PEB at 0x7ffd8000 winproc: PID 0x00000280 - PPID 0x000001f0 - DTB 0x04508000,0x04509000 - Filename lsass.exe - PEB at 0x7ffde000 winproc: PID 0x00000370 - PPID 0x0000026c - DTB 0x05c81000,0x05dc2000 - Filename svchost.exe - PEB at 0x7ffdf000 winproc: PID 0x00000480 - PPID 0x0000026c - DTB 0x06b72000,0x06af3000 - Filename svchost.exe - PEB at 0x7ffdf000 winproc: PID 0x00000510 - PPID 0x0000026c - DTB 0x0710a000,0x070cb000 - Filename svchost.exe - PEB at 0x7ffd6000 winproc: PID 0x0000052c - PPID 0x000004fc - DTB 0x074d6000,0x073d7000 - Filename explorer.exe - PEB at 0x7ffda000 winproc: PID 0x000006b0 - PPID 0x0000026c - DTB 0x092d6000,0x091d7000 - Filename svchost.exe - PEB at 0x7ffdc000