Analyzed 9 dump

Top 1: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ef6c0 1011bac1 wn+0x62844
003ef6e8 77518f88 wn+0x11bac1
003ef78c 77518e2a ntdll!LdrShutdownProcess+0x1aa
003ef7a0 76087a3c ntdll!RtlExitUserProcess+0x74
003ef7b4 00eb275a kernel32!ExitProcessStub+0x12
003ef7c0 00eb26ef srvhost!exit_or_terminate_process+0x40
003ef7f8 00eb2895 srvhost!common_exit+0xee
003ef80c 00ea7e90 srvhost!exit+0x11
003ef84c 7608343d srvhost!__scrt_common_main_seh+0x179
003ef858 774f9812 kernel32!BaseThreadInitThunk+0xe
003ef898 774f97e5 ntdll!__RtlUserThreadStart+0x70
003ef8b0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 1

ChildEBP RetAddr  
04b3dbb8 7781e0c3 ntdll!RtlpLowFragHeapFree+0xc5
04b3dbd0 761a6e2a ntdll!RtlFreeHeap+0x105
04b3dbe4 761a6f14 ole32!CRetailMalloc_Free+0x1c
04b3dbf4 7631b5d1 ole32!CoTaskMemFree+0x13
04b3dc10 762cf5f4 urlmon!CSecurityManager::DeleteMappings+0x4bfc2
04b3dc18 762dcc7e urlmon!CSecurityManager::DeleteSiteAndDomainMappings+0x2e
04b3dc24 762dcc46 urlmon!CSecurityManager::ReadSiteAndDomainMappings+0x17
04b3dc38 762b71e6 urlmon!CSecurityManager::CheckSiteAndDomainMappings+0x7f
04b3de94 762b7a9b urlmon!CSecurityManager::_MapComponentsToZone+0x120
04b3e3ac 762b7988 urlmon!CSecurityManager::_MapUrlToZoneDirect+0xcb
04b3e444 762d23be urlmon!CSecurityManager::MapUrlToZoneEx2Internal+0x530
04b3e488 762b6c50 urlmon!CSecurityManager::GetZoneFromUriInternal+0x127
04b3e4f4 762be760 urlmon!CSecurityManager::MapUrlToZoneEx2Private+0x1f8
04b3e518 762d339e urlmon!CSecurityManager::MapUrlToZoneEx2+0x20
04b3e54c 762d4b06 urlmon!GetIDNFlagsForUri+0x4e
04b3e578 7631f6a1 urlmon!CINetHttp::SetOptionsForUnicodeUrl+0x26
04b3edc0 762d43e2 urlmon!CINetHttp::INetAsyncOpenRequest+0x46d
04b3edf4 7631f1c0 urlmon!CINet::INetAsyncConnect+0x350
04b3ee14 762d4997 urlmon!CINet::INetAsyncOpen+0x1fc
04b3ee58 7630ac67 urlmon!CINet::StartCommon+0x54c
04b3ee94 762c0766 urlmon!COInetProt::StartEx+0x181
04b3f360 763128eb urlmon!CTransaction::StartEx+0xf6e
04b3f3e0 762c2adc urlmon!CBinding::StartBinding+0x921
04b3f42c 762c28e7 urlmon!CUrlMon::StartBinding+0x1a6
04b3f45c 762ef2f3 urlmon!CUrlMon::BindToStorage+0x8e
04b3f4a4 762efa14 urlmon!CBaseBSCB::KickOffDownload+0x93
04b3f6d4 0f878571 urlmon!URLDownloadToCacheFileW+0x84
04b3fb10 0f8fd59d utility!CStatistic::DownloadThreadProc+0x91
04b3fb4c 7527343d utility!thread_start+0x57
04b3fb58 77829802 kernel32!BaseThreadInitThunk+0xe
04b3fb98 778297d5 ntdll!__RtlUserThreadStart+0x70
04b3fbb0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 1

ChildEBP RetAddr  
0469e074 7713b28e ntdll!RtlDosApplyFileIsolationRedirection_Ustr+0x25
0469e0d8 7713eba6 ntdll!LdrpPreprocessDllName+0xde
0469e360 7713f9e9 ntdll!LdrpLoadForwardedDll+0xd6
0469e3fc 7713fad5 ntdll!LdrpGetDelayloadExportDll+0x80
0469e6a8 7713ccbb ntdll!LdrpHandleProtectedDelayload+0x95
0469e700 760a0278 ntdll!LdrResolveDelayLoadedAPI+0x17b
0469e720 760a1bbd gdi32full!__delayLoadHelper2+0x28
0469e830 7609c3dc gdi32full!_tailMerge_textshaping_dll+0xd
0469e870 7609b8a9 gdi32full!ScriptShape+0x17c
0469e8e8 7609afd9 gdi32full!RenderItemNoFallback+0x5f9
0469e920 7609ae98 gdi32full!RenderItemWithFallback+0x119
0469e948 7609ac1e gdi32full!RenderItem+0x28
0469e9a0 76097fd8 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0469ee04 760973af gdi32full!ScriptStringAnalyse+0x738
0469efb4 76096c00 gdi32full!LpkCharsetDraw+0x60f
0469efe0 754dd36d gdi32full!LpkDrawTextEx+0x30
0469f03c 754dd204 user32!DT_DrawStr+0x5f
0469f09c 754dcd3b user32!DT_GetLineBreak+0xa2
0469f16c 754dcb3e user32!DrawTextExWorker+0x1f9
0469f188 7227e71a user32!DrawTextExW+0x1e
0469f1ec 7227dd84 uxtheme!CTextDraw::GetTextExtent+0xa4
0469f234 722743e9 uxtheme!GetThemeTextExtent+0x74
0469f288 72280fc7 uxtheme!_GetNcCaptionTextSize+0x61
0469f37c 7228297c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0469f428 72282a2f uxtheme!_WindowPosChangedWorker+0x7c
0469f434 7227f595 uxtheme!OnOwpPostWindowPosChanged+0x1f
0469f484 754e8473 uxtheme!ThemePostWndProc+0x355
0469f56c 754e804a user32!UserCallWinProcCheckWow+0x363
0469f5d0 754ef467 user32!DispatchClientMessage+0xea
0469f610 77164fbd user32!__fnINLPWINDOWPOS+0x37
0469f660 7229d6cf ntdll!KiUserCallbackDispatcher+0x4d
0469f68c 7228012f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0469f6e8 754e841f uxtheme!ThemePreWndProc+0x43f
0469f7d0 754e61ba user32!UserCallWinProcCheckWow+0x30f
0469f844 754e5f80 user32!DispatchMessageWorker+0x22a
0469f850 7a0b0bc1 user32!DispatchMessageW+0x10
0469f874 7a0b0a7b AcMgr!WTL::CMessageLoop::Run+0xc1
0469f8d0 7a0b477f AcMgr!CPopMgrTrayClient::Process+0x8b
0469f8dc 7a163f20 AcMgr!CThread::ThreadProc+0x1f
0469f918 751f00f9 AcMgr!thread_start+0x57
0469f928 77157bbe kernel32!BaseThreadInitThunk+0x19
0469f984 77157b8e ntdll!__RtlUserThreadStart+0x2f
0469f994 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 1

ChildEBP RetAddr  
04bde2c0 75ad93dd gdi32full!GetFontRealizationInfo+0x1c
04bde870 75adc2dd gdi32full!LoadFont+0x70
04bde894 75adae1d gdi32full!FindOrCreateFaceCache+0x98
04bde998 75aa905d gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04bded38 75aa9446 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x27d
04bdee44 75aa74ba gdi32full!ScriptStringAnalyse+0x3a6
04bdeff4 75aa6720 gdi32full!LpkCharsetDraw+0x62a
04bdf020 74b0de42 gdi32full!LpkDrawTextEx+0x30
04bdf0ac 74b0d83d user32!DT_GetLineBreak+0x122
04bdf16c 74b3313e user32!DrawTextExWorker+0x1ed
04bdf188 70d2b6c6 user32!DrawTextExW+0x1e
04bdf5e8 70d2de2b uxtheme!CThemeWnd::GetNcWindowMetrics+0x8b6
04bdf694 70d2debf uxtheme!_WindowPosChangedWorker+0x77
04bdf6a0 70d2a525 uxtheme!OnOwpPostWindowPosChanged+0x1f
04bdf6f4 74b15043 uxtheme!ThemePostWndProc+0x405
04bdf7dc 74b14b2a user32!UserCallWinProcCheckWow+0x463
04bdf840 74b1e937 user32!DispatchClientMessage+0xea
04bdf880 770341cd user32!__fnINLPWINDOWPOS+0x37
04bdf8d0 70d5379f ntdll!KiUserCallbackDispatcher+0x4d
04bdf8fc 70d2ac20 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04bdf958 74b15016 uxtheme!ThemePreWndProc+0x610
04bdfa40 74b140de user32!UserCallWinProcCheckWow+0x436
04bdfab4 74b13ec0 user32!DispatchMessageWorker+0x20e
04bdfac0 797b0bc1 user32!DispatchMessageW+0x10
04bdfae4 797b0a7b AcMgr!WTL::CMessageLoop::Run+0xc1
04bdfb40 797b477f AcMgr!CPopMgrTrayClient::Process+0x8b
04bdfb4c 79863f20 AcMgr!CThread::ThreadProc+0x1f
04bdfb88 76ed6359 AcMgr!thread_start+0x57
04bdfb98 77027b74 kernel32!BaseThreadInitThunk+0x19
04bdfbf4 77027b44 ntdll!__RtlUserThreadStart+0x2f
04bdfc04 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 1

ChildEBP RetAddr  
04c8fc50 00000000 ntdll!RtlFreeHeap+0x3a

Top 6: total counts = 1

04b9f304 003d006c 0x6c0064
04b9f308 006c0050 winhafnt+0x2006c
04b9f30c 00670075 0x6c0050
04b9f310 006e0069 0x670075
04b9f314 0053005c 0x6e0069
04b9f318 00720063 0x53005c
04b9f31c 00780045 0x720063
04b9f320 00630065 0x780045
04b9f324 0064002e 0x630065
04b9f328 006c006c 0x64002e
04b9f32c 002d0020 0x6c006c
04b9f330 0065002d 0x2d0020
04b9f334 0074006e 0x65002d
04b9f338 00790072 0x74006e
04b9f33c 0057003d 0x790072
04b9f340 00460054 0x57003d
04b9f344 0020006b winhafnt+0xb0054
04b9f348 002d002d 0x20006b
04b9f34c 0061006e 0x2d002d
04b9f350 0065006d 0x61006e
04b9f354 0061003d 0x65006d
04b9f358 00630069 0x61003d
04b9f35c 0065006c 0x630069
04b9f360 006e0061 0x65006c
04b9f364 00720065 0x6e0061
04b9f368 0073005f 0x720065
04b9f36c 005f006d 0x73005f
04b9f370 0042007b 0x5f006d
04b9f374 00310034 winhafnt+0x7007b
04b9f378 00440034 0x310034
04b9f37c 00330037 winhafnt+0x90034
04b9f380 002d0035 0x330037
04b9f384 00340037 0x2d0035
04b9f388 00440042 0x340037
04b9f38c 0034002d winhafnt+0x90042
04b9f390 00360038 0x34002d
04b9f394 002d0030 0x360038
04b9f398 00440038 0x2d0030
04b9f39c 00440042 winhafnt+0x90038
04b9f3a0 0043002d winhafnt+0x90042
04b9f3a4 00320030 winhafnt+0x8002d
04b9f3a8 00360043 0x320030
04b9f3ac 00310046 0x360043
04b9f3b0 00310033 0x310046
04b9f3b4 00310033 0x310033
04b9f3b8 007d0042 0x310033
04b9f3bc 002d0020 0x7d0042
04b9f3c0 006c002d 0x2d0020
04b9f3c4 006e0065 0x6c002d
04b9f3c8 00740067 0x6e0065
04b9f3cc 003d0068 0x740067
04b9f3d0 00330031 winhafnt+0x20068
04b9f3d4 00200030 0x330031
04b9f3d8 002d002d 0x200030
04b9f3dc 00790073 0x2d002d
04b9f3e0 0063006e 0x790073
04b9f3e4 0061003d 0x63006e
04b9f3e8 00630069 0x61003d
04b9f3ec 0065006c 0x630069
04b9f3f0 006e0061 0x65006c
04b9f3f4 00720065 0x6e0061
04b9f3f8 0065005f 0x720065
04b9f3fc 00650076 0x65005f
04b9f400 0074006e 0x650076
04b9f404 007b005f 0x74006e
04b9f408 00300038 0x7b005f
04b9f40c 00450033 0x300038
04b9f410 00380030 winhafnt+0xa0033
04b9f414 00450030 0x380030
04b9f418 0030002d winhafnt+0xa0030
04b9f41c 00450039 0x30002d
04b9f420 002d0043 winhafnt+0xa0039
04b9f424 00300034 0x2d0043
04b9f428 00320061 0x300034
04b9f42c 0039002d 0x320061
04b9f430 00380037 0x39002d
04b9f434 002d0044 0x380037
04b9f438 00410045 0x2d0044
04b9f43c 00460039 winhafnt+0x60045
04b9f440 00300031 winhafnt+0xb0039
04b9f444 00320036 0x300031
04b9f448 00430034 0x320036
04b9f44c 00410035 winhafnt+0x80034
04b9f450 00000000 winhafnt+0x60035

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0298ed70 73905c8f Duckling_73900000+0x2df51
0298edec 75b44e25 Duckling_73900000+0x5c8f
0298ef94 75b44cec imm32!LoadImeDpi+0x115
0298f10c 77312929 imm32!ImmLoadIME+0x12c
0298f120 773058b3 user32!CtfLoadThreadLayout+0x51
0298f37c 773053a2 user32!ImeSystemHandler+0x3e5
0298f3a8 7730504b user32!ImeWndProcWorker+0x332
0298f3cc 77313453 user32!ImeWndProcW+0x4b
0298f3f8 773042a6 user32!_InternalCallWinProc+0x2b
0298f4f0 77303d2a user32!UserCallWinProcCheckWow+0x4c6
0298f554 7730dc3f user32!DispatchClientMessage+0xea
0298f590 77518e0d user32!__fnDWORD+0x3f
0298f5cc 7730680f ntdll!KiUserCallbackDispatcher+0x4d
0298f8ac 7730716a user32!VerNtUserCreateWindowEx+0x25f
0298f988 77307598 user32!CreateWindowInternal+0x32a
0298f9c8 732b8650 user32!CreateWindowExW+0x38
0298fe84 732b8417 GdiPlus!InternalNotificationStartup+0x1ab
0298feb8 732b83ca GdiPlus!BackgroundThreadProc+0x27
0298fed0 753b7ba9 GdiPlus!DllRefCountSafeThreadThunk+0x1a
0298fee0 7750be3b kernel32!BaseThreadInitThunk+0x19
0298ff38 7750bdbf ntdll!__RtlUserThreadStart+0x2b
0298ff48 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 1

0382df38 76132ff1 propsys!CMemoryMappedCacheMgr::Open+0x49
0382df8c 7619c355 shell32!CPrivateProfileCache::_LoadSharedMemCache+0x62
0382dfac 761c4d3a shell32!CPrivateProfileCache::_RetrieveINIFile+0x64
0382dfcc 7619c494 shell32!CPrivateProfile::Initialize+0x10f
0382dfec 7619c546 shell32!SHGetCachedPrivateProfile+0x3a
0382e248 761b345d shell32!CFSFolder::_Bind+0xc8
0382e284 7619c4e2 shell32!CFSFolder::BindToObject+0xc8
0382e2a0 7619c56d shell32!CFSFolder::_GetDesktopIniForItem+0x2c
0382e2cc 761902d9 shell32!CFSFolder::_DiscoverJunctionCLSID+0x64
0382e64c 761903ae shell32!CFSFolder::_CreateIDList+0x2de
0382e698 76190d6f shell32!CFSFolder::_CreateIDListWithBindCtx+0x9f
0382f220 7618fc7a shell32!CFSFolder::_TrySimpleParse+0x372
0382f768 7619bf0f shell32!CFSFolder::ParseDisplayName+0x95
0382f7f0 761979d3 shell32!CDrivesFolder::ParseDisplayName+0x153
0382f874 76199d53 shell32!CRegFolder::ParseDisplayName+0x93
0382f8b4 7619801b shell32!CDesktopFolder::_ChildParseDisplayName+0x47
0382f930 761979d3 shell32!CDesktopFolder::ParseDisplayName+0x112
0382f9b4 76197ef4 shell32!CRegFolder::ParseDisplayName+0x93
0382fa00 76175389 shell32!SHParseDisplayName+0xa8
0382fa24 7617502d shell32!kfapi::_CreateIDListFromPath+0xa0
0382faa0 76174ebe shell32!kfapi::CFolderIDListBuilder::GetIDList+0x189
0382fb88 76199eb6 shell32!kfapi::CFolderCache::GetIDList+0x31a
0382fc10 76199e06 shell32!kfapi::CKFFacade::GetFolderIDList+0xbb
0382fc38 7619bafb shell32!SHGetKnownFolderIDList_Internal+0xa6
0382fc88 76174b24 shell32!SHILAliasTranslate+0x5e
0382fcf4 761979d3 shell32!CDesktopFolder::ParseDisplayName+0x169
0382fd78 76197ef4 shell32!CRegFolder::ParseDisplayName+0x93
0382fdc4 761321a2 shell32!SHParseDisplayName+0xa8
0382fdf4 7613228b shell32!CShellExecute::_InitPidl+0x3f
0382fe00 761321e2 shell32!CShellExecute::_ResolveObject+0xd
0382fe14 76132347 shell32!CShellExecute::_DoExecute+0x19
0382fe28 74f043c0 shell32!CShellExecute::s_ExecuteThreadProc+0x30
0382feb0 74a7344d shlwapi!WrapperThreadProc+0x1b5
0382febc 772d9802 kernel32!BaseThreadInitThunk+0xe
0382fefc 772d97d5 ntdll!__RtlUserThreadStart+0x70
0382ff14 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 1

ChildEBP RetAddr  
0491f2a8 772ee0f3 ntdll!RtlpLowFragHeapFree+0xc5
0491f2c0 75f9df87 ntdll!RtlFreeHeap+0x105
0491f318 75f9dde4 ole32!ReadObjRefExtension+0x1a4
0491f35c 75fbf067 ole32!ReadObjRef+0x2c5
0491f3e0 75fbf629 ole32!CoUnmarshalInterface+0x4b
0491f40c 74b243ff ole32!NdrExtInterfacePointerUnmarshall+0x1ff
0491f454 74b2cb6c rpcrt4!NdrpPointerUnmarshall+0xcb
0491f4c8 74b17d63 rpcrt4!NdrpComplexArrayUnmarshall+0x4bf
0491f4f4 74b0717d rpcrt4!NdrComplexArrayUnmarshall+0x11b
0491f550 74ba015a rpcrt4!NdrpClientUnMarshal+0x157
0491f964 760cf8e2 rpcrt4!NdrClientCall2+0x26f
0491f984 75fc96bd ole32!ObjectStublessClient+0xa2
0491f994 6bd134d4 ole32!ObjectStubless+0xf
0491f9c0 7623ef0c netprofm!CPubIEnumNetworks::Next+0x8e
0491fa54 76214fc6 wininet!NETWORK_MANAGER::ReadGuidsForConnectedNetworks+0x2b4
0491fa78 7623f29b wininet!InternalReadGuidsForConnectedNetworks+0x86
0491faa0 7623e67f wininet!CSwpadSupport::ReadIdsForConnectedNetworks+0x2b
0491facc 7623e3e9 wininet!NETWORK_MANAGER::Init+0x4f
0491fb28 7624f356 wininet!NETWORK_MANAGER::GetWpadInformationForConnectedNetworks+0x56
0491fb7c 7624f64e wininet!SwpadGetDecisionForNetwork+0x10e
0491fc0c 76246af4 wininet!SwpadWpad+0x19e
0491fc70 762458b7 wininet!AutoProxyResolver::DoBackgroundDetection+0x17a
0491fc88 76244d77 wininet!AutoProxyResolver::BackgroundWpadDetection+0x47
0491fcc8 77310eeb wininet!FailFastThreadpoolTimerCallback<&AutoProxyResolver::BackgroundWpadDetection>+0x27
0491fcec 77310991 ntdll!TppTimerpExecuteCallback+0x10f
0491fe3c 7691343d ntdll!TppWorkerThread+0x562
0491fe48 772f9812 kernel32!BaseThreadInitThunk+0xe
0491fe88 772f97e5 ntdll!__RtlUserThreadStart+0x70
0491fea0 00000000 ntdll!_RtlUserThreadStart+0x1b