Analyzed 3 dump

Top 1: total counts = 1

0016c20f 756d2065 0x67617265
0016c273 00000000 shell32!CSidResolver::ResolveSids+0x3b

Top 2: total counts = 1

ChildEBP RetAddr  
1147f790 006500f2 ffi_bindings!ffi_closure_STDCALL+0x25
WARNING: Frame IP not in any known module. Following frames may be wrong.
1147f7b0 644cfbc3 0x6500f2
1147f7c0 770b01a3 nativeutils!::+0x13
1147f800 77090d48 ntdll!RtlpTpWaitCallback+0x94
1147f828 770909b1 ntdll!TppWaitpExecuteCallback+0x11b
1147f978 756f344d ntdll!TppWorkerThread+0x562
1147f984 77079802 kernel32!BaseThreadInitThunk+0xe
1147f9c4 770797d5 ntdll!__RtlUserThreadStart+0x70
1147f9dc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfbeb0 61a2dc08 node+0x2a2f20b
00cfc1af 302e3020 node+0xb2dc08
00cfc1b3 20736d20 0x302e3020
00cfc1b7 76612820 0x20736d20
00cfc3eb 00000000 shell32!CMenuToolbarBase::_OnNotify+0x2e0