Analyzed 4 dump

Top 1: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0017ce88 105bdc08 node+0x2a2f20b
0017d187 203a736d node+0xb2dc08
0017d18b 6b72614d 0x203a736d
0017d18f 6577732d 0x6b72614d
0017d193 31207065 0x6577732d
0017d197 20322e30 0x31207065
0017d19b 2e323128 0x20322e30
0017d19f 2d202930 0x2e323128
0017d1a3 3031203e 0x2d202930
0017d1a7 2820322e 0x3031203e
0017d1ab 332e3231 0x2820322e
0017d1af 424d2029 0x332e3231
0017d1b3 3232202c 0x424d2029
0017d1b7 2f20322e 0x3232202c
0017d1bb 302e3020 0x2f20322e
0017d1bf 20736d20 0x302e3020
0017d1c3 76612820 0x20736d20
0017d1c7 67617265 wintrust!CryptCATPutCatAttrInfo+0x1b
0017d1df 756d2074 0x67617265
0017d1e3 30203d20 0x756d2074
0017d1e7 3230302e 0x30203d20
0017d1eb 6f6c2029 0x3230302e
0017d1ef 656d2077 0x6f6c2029
0017d1f3 79726f6d 0x656d2077
0017d1f7 746f6e20 0x79726f6d
0017d1fb 63696669 0x746f6e20
0017d1ff 6f697461 0x63696669
0017d203 4347206e 0x6f697461
0017d207 206e6920 0x4347206e
0017d20b 20646c6f 0x206e6920
0017d20f 63617073 0x20646c6f
0017d213 65722065 0x63617073
0017d217 73657571 0x65722065
0017d32b 67617265 taskschd!TaskXmlWriter::StartDocument+0xaa
0017d32f 756d2065 0x67617265
0017d333 30203d20 0x756d2065
0017d337 3839392e 0x30203d20
0017d33b 7563202c 0x3839392e
0017d33f 6e657272 0x7563202c
0017d343 756d2074 base!sha256_transf+0x1b92
0017d347 30203d20 0x756d2074
0017d34b 3230302e 0x30203d20
0017d34f 6f6c2029 0x3230302e
0017d353 656d2077 0x6f6c2029
0017d357 79726f6d 0x656d2077
0017d35b 746f6e20 0x79726f6d
0017d35f 63696669 0x746f6e20
0017d363 6f697461 0x63696669
0017d367 4347206e 0x6f697461
0017d36b 206e6920 0x4347206e
0017d36f 20646c6f 0x206e6920
0017d373 63617073 0x20646c6f
0017d377 65722065 0x63617073
0017d37b 73657571 0x65722065
0017d48f 00000000 taskschd!TaskXmlWriter::StartDocument+0xaa

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b7edd8 10d1d1dd node+0x128dd80
00b7ef18 11e0e32a node+0x128d1dd
00b7ef1c 00b7ef28 node+0x237e32a
00b7ef20 00000000 0xb7ef28

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010ff278 6efbd1dd node+0x128dd80
010ff3b8 700ae32a node+0x128d1dd
010ff3bc 010ff3c8 node+0x237e32a
010ff3c0 00000000 0x10ff3c8

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afef28 10ded1dd node+0x128dd80
00aff060 11ede32a node+0x128d1dd
00aff064 00aff070 node+0x237e32a
00aff068 00000000 0xaff070