Analyzed 16 dump

Top 1: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007eed48 6516d1dd node+0x128dd80
007eee80 6625e32a node+0x128d1dd
007eef20 7764e907 node+0x237e32a
007ef0fc 00000000 ntdll!RtlCheckTokenMembershipEx+0x127

f53313c34e00f7bdd9022eb50d53bf04_000.dmp
721edb3b7e30a4ee4bc69d519c0d5a5e_000.dmp

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0016e9ec 669d386a node+0x10a30c6
0016ea04 6698733c node+0x10a386a
0016ea24 2a3e0035 node+0x105733c
0016eb48 74b914bd 0x2a3e0035
0016eb4c 00000000 kernel32!HeapFree+0x14

0e19071ea4a3e4f429bea1c5029b7d25_000.dmp

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fec48 67f4d1dd node+0x128dd80
004fed80 6903e32a node+0x128d1dd
004fee20 7780e011 node+0x237e32a
004fef84 17bfcae4 combase!ServerCall::ContextInvoke+0x4d1
004fef8c 00000000 0x17bfcae4

79890f7ba8f34e1db33f254d4c9d857a_000.dmp

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fee58 6e5bd1dd node+0x128dd80
004fef90 6f6ae32a node+0x128d1dd
004ff030 77c0f525 node+0x237e32a
004ff04c 00000000 ntdll!RtlpAddKnownAce+0xe0

04a1f7f5dfc5145980ad91a23bace545_000.dmp

Top 5: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00fbf0a8 1060d1dd node+0x128dd80
00fbf1e0 116fe32a node+0x128d1dd
00fbf1e4 00fbf1f0 node+0x237e32a
00fbf1e8 00000000 0xfbf1f0

3b9006b1452f2dbf9d3b7527da1c2b8f_000.dmp

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b7ee48 62f9d1dd node+0x128dd80
00b7ef88 6408e32a node+0x128d1dd
00b7ef8c 00b7ef98 node+0x237e32a
00b7ef90 00000000 0xb7ef98

d77624300bd17568381812daa8aa8b67_000.dmp

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x85701

7e0ced0fd892f42e34d55ff350a418fc_000.dmp

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fee08 62e4d1dd node+0x128dd80
006fef40 63f3e32a node+0x128d1dd
006fef44 006fef50 node+0x237e32a
006fef48 00000000 0x6fef50

64ea2e2a26c11f90f032fb7a615dae1f_000.dmp

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0019edd8 6ac4d1dd node+0x128dd80
0019ef10 6bd3e32a node+0x128d1dd
0019ef14 0019ef20 node+0x237e32a
0019ef18 00000000 0x19ef20

51b45d4e996db774437bc2c520544c0d_000.dmp

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dfef58 6d37d1dd node+0x128dd80
00dff090 6e46e32a node+0x128d1dd
00dff130 757056c8 node+0x237e32a
00dff134 73094759 combase!SyncStubCall::Invoke+0x18
00dff14c 00000000 0x73094759

3a13a9da261c93a71617fb2f3b9b5f45_000.dmp

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfed48 6e16d1dd node+0x128dd80
00cfee80 6f25e32a node+0x128d1dd
00cfee84 00cfee90 node+0x237e32a
00cfee88 00000000 0xcfee90

793514463dc73e6c30074d2f813a2266_000.dmp

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0cd8f9e8 0cdbb817 0xfffffa7c
0cd8fa24 0cdc48f7 CleanEngine!GroupNode::GetTraceCount+0x77
0cd8fa60 0cdd25b7 CleanEngine!CategoryNode::GetTraceCount+0x77
0cd8fa9c 0cdd895b CleanEngine!RuleManage::GetTraceCount+0x77
0cd8fab0 05303240 CleanEngine!CleanEngineImp::GetTotalTraceCnt+0x2b
0cd8fae8 0530370e cleanengine2!CleanEngineTS::GetTotalTraceCnt+0xa0
0cd8faf0 0530b08a cleanengine2!mf_bind_t::SimpleInvolk+0xe
0cd8fb04 0530b9a6 cleanengine2!CUIThreadWindow::ProcessWindowMessage+0x2a
0cd8fb60 76aec227 cleanengine2!ATL::CWindowImplBaseT >::WindowProc+0x76
0cd8fb8c 76aec327 user32!InternalCallWinProc+0x23
0cd8fc04 76ae4c66 user32!UserCallWinProcCheckWow+0x14b
0cd8fc60 76ae4cd5 user32!DispatchClientMessage+0xcf
0cd8fc88 77286b4e user32!__fnDWORD+0x24
0cd8fcb4 76aecb20 ntdll!KiUserCallbackDispatcher+0x2e
0cd8fcb8 76aecb53 user32!NtUserGetMessage+0xc
0cd8fcd4 0530b5ad user32!GetMessageW+0x33
0cd8fd44 0530bdda cleanengine2!::operator()+0xed
0cd8fd64 0530b05a cleanengine2!std::_LaunchPad >,std::default_delete > > > >::_Go+0x8a
0cd8fd6c 0533104b cleanengine2!std::_Pad::_Call_func+0xa
0cd8fda8 76e2ef5c cleanengine2!thread_start+0x57
0cd8fdb4 772a369b kernel32!BaseThreadInitThunk+0xe
0cd8fdf4 772a366e ntdll!__RtlUserThreadStart+0x70
0cd8fe0c 00000000 ntdll!_RtlUserThreadStart+0x1b

e4e26fd79f2830757ab2cdbe82937f7f_000.dmp

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fec38 66ebd1dd node+0x128dd80
010fed78 67fae32a node+0x128d1dd
010fee18 777a1f77 node+0x237e32a
010fee64 00000000 ntdll!RtlpLowFragHeapAllocFromContext+0x67

3bba62eebe8d51f2df51130d75e668d4_000.dmp

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001bcf18 0fecdc08 node+0x2a2f20b
001bd217 614d203a node+0xb2dc08
001bd21b 732d6b72 0x614d203a
001bd21f 70656577 0x732d6b72
001bd223 2e313120 0x70656577
001bd227 31282030 0x2e313120
001bd22b 29392e32 0x31282030
001bd22f 203e2d20 0x29392e32
001bd233 302e3131 0x203e2d20
001bd237 33312820 0x302e3131
001bd23b 2029312e 0x33312820
001bd23f 202c424d 0x2029312e
001bd243 362e3132 0x202c424d
001bd247 30202f20 0x362e3132
001bd24b 6d20302e 0x30202f20
001bd24f 28202073 0x6d20302e
001bd253 72657661 0x28202073
001bd2b3 4530303a GdiPlus!Misoriented+0x1bc
001bd2cf 77732d6b 0x4530303a
001bd2d3 20706565 0x77732d6b
001bd2d7 392e3131 0x20706565
001bd2db 33312820 0x392e3131
001bd2df 2029312e 0x33312820
001bd2e3 31203e2d 0x2029312e
001bd2e7 20302e31 0x31203e2d
001bd2eb 2e323128 0x20302e31
001bd2ef 4d202939 0x2e323128
001bd2f3 32202c42 0x4d202939
001bd2f7 20332e32 0x32202c42
001bd2fb 2e30202f 0x20332e32
001bd2ff 736d2030 0x2e30202f
001bd303 61282020 0x736d2030
001bd307 61726576 0x61282020
001bd30b 6d206567 0x61726576
001bd30f 203d2075 0x6d206567
001bd313 39392e30 0x203d2075
001bd317 63202c39 0x39392e30
001bd31b 65727275 0x63202c39
001bd31f 6d20746e 0x65727275
001bd323 203d2075 0x6d20746e
001bd327 30302e31 0x203d2075
001bd32b 6c202930 0x30302e31
001bd32f 6d20776f 0x6c202930
001bd333 726f6d65 0x6d20776f
001bd337 6f6e2079 taskschd!`string'+0x9
001bd33b 69666974 0x6f6e2079
001bd33f 69746163 0x69666974
001bd343 47206e6f 0x69746163
001bd347 6e692043 0x47206e6f
001bd34b 646c6f20 0x6e692043
001bd34f 61707320 0x646c6f20
001bd353 72206563 0x61707320
001bd357 65757165 0x72206563
001bd35b 64657473 0x65757165
001bd35f 39325b0a 0x64657473
001bd363 3a383434 0x39325b0a
001bd367 37453030 0x3a383434
001bd36b 38334545 0x37453030
001bd36f 3036205d 0x38334545
001bd373 37313138 0x3036205d
001bd377 20323830 0x37313138
001bd37b 203a736d 0x20323830
001bd37f 6b72614d 0x203a736d
001bd383 6577732d 0x6b72614d
001bd387 31207065 0x6577732d
001bd38b 20302e31 0x31207065
001bd38f 2e323128 0x20302e31
001bd393 2d202939 0x2e323128
001bd397 3131203e 0x2d202939
001bd39b 2820302e 0x3131203e
001bd39f 312e3331 0x2820302e
001bd3a3 424d2029 0x312e3331
001bd3a7 3731202c 0x424d2029
001bd3ab 2f20302e 0x3731202c
001bd3af 302e3020 0x2f20302e
001bd3b3 20736d20 0x302e3020
001bd3b7 76612820 0x20736d20
001bd3bb 67617265 shell32!__dyn_tls_init_callback  (shell32+0xb22820)
001bd3bf 756d2065 0x67617265
001bd3c3 30203d20 msctf!__dyn_tls_init_callback  (msctf+0xa2065)
001bd3c7 3939392e 0x30203d20
001bd3cb 7563202c 0x3939392e
001bd3cf 6e657272 msctf!CUIFButton2::`vftable'+0x64
001bd3d3 756d2074 0x6e657272
001bd3d7 30203d20 msctf!__dyn_tls_init_callback  (msctf+0xa2074)
001bd3db 3330302e 0x30203d20
001bd3df 6f6c2029 0x3330302e
001bd3e3 656d2077 0x6f6c2029
001bd3e7 79726f6d 0x656d2077
001bd3eb 746f6e20 0x79726f6d
001bd3ef 63696669 0x746f6e20
001bd3f3 6f697461 propsys!___PchSym_  (propsys+0xc6669)
001bd3f7 4347206e 0x6f697461
001bd3fb 206e6920 0x4347206e
001bd3ff 20646c6f 0x206e6920
001bd403 63617073 0x20646c6f
001bd407 65722065 propsys!`string'+0x7db
001bd40b 73657571 0x65722065
001bd40f 0a646574 0x73657571
001bd413 00000000 0xa646574

f69c03afb574ca1f8ef5a4a130341402_000.dmp

Top 15: total counts = 1

0550f724 702e48ea ws2_32!GetAddrInfoW+0x4ab
WARNING: Stack unwind information not available. Following frames may be wrong.
0550f7a0 766a347d node+0x32348ea
0550f7ac 770c9852 kernel32!BaseThreadInitThunk+0xe
0550f7ec 770c9825 ntdll!__RtlUserThreadStart+0x70
0550f804 00000000 ntdll!_RtlUserThreadStart+0x1b

b3e7ca16c2eb396c61d68d9c242bde37_000.dmp