Analyzed 1 dump

Top 1: total counts = 1

ChildEBP RetAddr  
00b9e034 7711cfb8 rpcrt4!NdrComplexStructMemorySize+0xb
00b9e088 77111c77 rpcrt4!NdrComplexStructUnmarshall+0x128
00b9e0d0 7711d280 rpcrt4!NdrpPointerUnmarshall+0x417
00b9e130 77111c77 rpcrt4!NdrComplexStructUnmarshall+0x3f0
00b9e178 7711d280 rpcrt4!NdrpPointerUnmarshall+0x417
00b9e1d8 77111c77 rpcrt4!NdrComplexStructUnmarshall+0x3f0
00b9e220 7711d280 rpcrt4!NdrpPointerUnmarshall+0x417
00b9e280 77111c77 rpcrt4!NdrComplexStructUnmarshall+0x3f0
00b9e2c8 7711d280 rpcrt4!NdrpPointerUnmarshall+0x417
00b9e328 77111c77 rpcrt4!NdrComplexStructUnmarshall+0x3f0
00b9e370 7711d82c rpcrt4!NdrpPointerUnmarshall+0x417
00b9e390 77111c77 rpcrt4!NdrPointerUnmarshall+0x3c
00b9e3d8 7711b49d rpcrt4!NdrpPointerUnmarshall+0x417
00b9e460 7710629f rpcrt4!NdrpClientUnMarshal+0x60d
00b9e8a8 77104a64 rpcrt4!NdrClientCall2+0xaef
00b9e8bc 73fa953b rpcrt4!NdrClientCall4+0x14
00b9e96c 73f8d455 dnsapi!SyncResolverQueryRpc+0xb4
00b9e9c4 73f8a864 dnsapi!Rpc_ResolverQuery+0x98
00b9eba4 73f89ecf dnsapi!Query_PrivateExW+0x8f4
00b9ec9c 772a51ec dnsapi!DnsQueryEx+0x25f
00b9ecc8 772a4fb0 ntdll!RtlpQueryInformationActivationContextBasicInformation+0x3c
00b9ed20 72a44f27 ntdll!RtlQueryInformationActivationContext+0x160
00b9ee64 756c20fb mswsock!Rnr_DoDnsLookup+0x2b6
00b9ee90 07b797f8 ws2_32!WinsockThreadpool_SubmitWork+0x11b
WARNING: Frame IP not in any known module. Following frames may be wrong.
00b9eea8 772f8224 0x7b797f8
00b9eefc 772b3ee6 ntdll!RtlpFreeHeapInternal+0x7aa
00b9ef18 756bd207 ntdll!RtlFreeHeap+0x46
00b9ef68 02ce5480 ws2_32!NSSUBJOB::LookupAsyncAndHandleResultsQDNS4F+0xa7
00b9ef9c 756c8807 0x2ce5480
00b9f01c 00b9f074 ws2_32!EventWriteWinsockNSPNextStart+0x3c
00000000 00000000 0xb9f074