Analyzed 2 dump
Top 1: total counts = 1
0017bba7 76616353 0x203a736d
0017bbab 65676e65 iertutil!`string'+0x3b
0017bbaf 2e303120 0x65676e65
0017bbb3 31282039 0x2e303120
0017bbb7 29372e33 0x31282039
0017bbbb 203e2d20 0x29372e33
0017bbbf 322e3031 0x203e2d20
0017bbc3 33312820 0x322e3031
0017bbc7 2029392e 0x33312820
0017bbcb 202c424d 0x2029392e
0017bbcf 20332e35 0x202c424d
0017bbd3 2e30202f 0x20332e35
0017bbd7 736d2030 0x2e30202f
0017bc63 30202f20 winnsi!NsiRpcRegisterChangeNotificationEx+0x18f
0017bc6f 72657661 0x30202f20
0017bc73 20656761 GdiPlus!GpWicPngEncoder::`vftable'+0x41
0017bc77 3d20756d 0x20656761
0017bc7b 302e3120 0x3d20756d
0017bc7f 202c3030 0x302e3120
0017bc83 72727563 0x202c3030
0017bcf3 00000000 GdiPlus!ArabicSimpleShape+0x2a23
65e033da935518c09538c9b34bc9545d_000.dmp
Top 2: total counts = 1
ChildEBP RetAddr
04c7fb24 00e20242 ffi_bindings!ffi_closure_STDCALL+0x25
WARNING: Frame IP not in any known module. Following frames may be wrong.
04c7fb44 6f11fbc3 0xe20242
04c7fb54 77348ad3 nativeutils!::+0x13
04c7fb9c 773557f0 ntdll!RtlpTpWaitCallback+0x93
04c7fbc4 7735573f ntdll!TppExecuteWaitCallback+0x7e
04c7fbdc 773560b4 ntdll!TppWaitCompletion+0x7f
04c7fd98 769dfcc9 ntdll!TppWorkerThread+0x684
04c7fda8 773882ae kernel32!BaseThreadInitThunk+0x19
04c7fe04 7738827e ntdll!__RtlUserThreadStart+0x2f
04c7fe14 00000000 ntdll!_RtlUserThreadStart+0x1b
b910a220a1d544949660ee6c9bb4e452_000.dmp