@ipg this is also how I kill Windows processes that get stuck waiting in a blocking kernelmode call somewhere and can't be terminated normally. open a handle to it, make a new thread in some garbage location, force it to crash the whole thing. also tends to work if you unmap random memory pages.