Analyzed 16 dump

Top 1: total counts = 2

ChildEBP RetAddr  
0018ef2c 11ae2d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

b28195c4a35753f2b3217a49d9c5fad1_000.dmp
eba3f930624783a7cabc96743cfc082e_000.dmp

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0045cce0 6da1dc08 node+0x2a2f20b
0045cfdf 72614d20 node+0xb2dc08
0045cfe3 77732d6b 0x72614d20
0045cfe7 20706565 0x77732d6b
0045cfeb 342e3031 0x20706565
0045cfef 32312820 0x342e3031
0045cff3 2029332e 0x32312820
0045cff7 31203e2d 0x2029332e
0045cffb 20342e30 0x31203e2d
0045cfff 2e323128 0x20342e30
0045d003 4d202933 0x2e323128
0045d007 39202c42 0x4d202933
0045d00b 20332e35 0x39202c42
0045d00f 2e30202f 0x20332e35
0045d013 736d2030 0x2e30202f
0045d017 61282020 0x736d2030
0045d01b 61726576 0x61282020
0045d01f 6d206567 0x61726576
0045d023 203d2075 node+0x316567
0045d027 36392e30 0x203d2075
0045d02b 63202c37 0x36392e30
0045d02f 65727275 0x63202c37
0045d033 6d20746e 0x65727275
0045d037 203d2075 node+0x31746e
0045d03b 30302e30 0x203d2075
0045d03f 6c202930 0x30302e30
0045d043 6d20776f 0x6c202930
0045d047 726f6d65 node+0x31776f
0045d04b 6f6e2079 0x726f6d65
0045d04f 69666974 node+0x27f2079
0045d053 69746163 0x69666974
0045d057 47206e6f 0x69746163
0045d05b 6e692043 0x47206e6f
0045d05f 646c6f20 node+0x17a2043
0045d063 61707320 0x646c6f20
0045d067 72206563 0x61707320
0045d06b 65757165 0x72206563
0045d06f 64657473 0x65757165
0045d073 33315b0a 0x64657473
0045d077 303a3436 0x33315b0a
0045d07b 41353630 0x303a3436
0045d07f 5d383943 0x41353630
0045d083 37313120 0x5d383943
0045d087 31373539 0x37313120
0045d08b 20343833 0x31373539
0045d08f 203a736d 0x20343833
0045d093 6b72614d 0x203a736d
0045d097 6577732d 0x6b72614d
0045d09b 31207065 0x6577732d
0045d09f 20382e30 0x31207065
0045d0a3 2e323128 0x20382e30
0045d0a7 2d202933 0x2e323128
0045d0ab 3031203e 0x2d202933
0045d0af 2820342e 0x3031203e
0045d0b3 332e3231 0x2820342e
0045d0b7 424d2029 0x332e3231
0045d0bb 3338202c 0x424d2029
0045d0bf 392e3633 0x3338202c
0045d0c3 30202f20 0x392e3633
0045d0c7 6d20302e 0x30202f20
0045d0cb 28202073 node+0x31302e
0045d0cf 72657661 0x28202073
0045d0d3 20656761 0x72657661
0045d0d7 3d20756d 0x20656761
0045d0db 382e3020 0x3d20756d
0045d0df 202c3639 0x382e3020
0045d0e3 72727563 0x202c3639
0045d0e7 20746e65 0x72727563
0045d0eb 3d20756d 0x20746e65
0045d0ef 382e3020 0x3d20756d
0045d0f3 20293537 0x382e3020
0045d0f7 20776f6c 0x20293537
0045d0fb 6f6d656d 0x20776f6c
0045d0ff 6e207972 node+0x27e656d
0045d103 6669746f node+0x1317972
0045d107 74616369 0x6669746f
0045d10b 206e6f69 0x74616369
0045d10f 69204347 0x206e6f69
0045d113 6c6f206e 0x69204347
0045d117 70732064 0x6c6f206e
0045d11b 20656361 node+0x3842064
0045d11f 75716572 0x20656361
0045d123 65747365 kernel32!`string'+0x6
0045d127 315b0a64 0x65747365
0045d12b 3a343633 0x315b0a64
0045d12f 35363030 0x3a343633
0045d133 38394341 0x35363030
0045d137 3131205d 0x38394341
0045d13b 37353937 0x3131205d
0045d13f 34393331 0x37353937
0045d143 3a736d20 0x34393331
0045d147 72614d20 0x3a736d20
0045d14b 77732d6b 0x72614d20
0045d14f 20706565 0x77732d6b
0045d153 342e3031 0x20706565
0045d157 32312820 0x342e3031
0045d15b 2029332e 0x32312820
0045d15f 31203e2d 0x2029332e
0045d163 20342e30 0x31203e2d
0045d167 2e323128 0x20342e30
0045d16b 4d202933 0x2e323128
0045d16f 39202c42 0x4d202933
0045d173 2f20362e 0x39202c42
0045d177 302e3020 0x2f20362e
0045d17b 20736d20 0x302e3020
0045d17f 76612820 0x20736d20
0045d197 6e657272 oleaut32!CTypeInfo2::GetIDsOfNamesHnameBase+0x58
0045d1af 79726f6d node+0x1767272
0045d1b3 746f6e20 0x79726f6d
0045d1b7 63696669 0x746f6e20
0045d1bb 6f697461 0x63696669
0045d1bf 4347206e node+0x27a7461
0045d1c3 206e6920 0x4347206e
0045d1c7 20646c6f 0x206e6920
0045d1cb 63617073 0x20646c6f
0045d1cf 65722065 0x63617073
0045d1d3 73657571 0x65722065
0045d1d7 0a646574 0x73657571
0045d1db 00000000 0xa646574

382b5ecf6a1fafb09375b63b874fcaf0_000.dmp

Top 3: total counts = 1

0045d037 70732064 0x6c6f206e
0045d03b 20656361 PicFace+0xa2064
0045d03f 75716572 0x20656361
0045d043 65747365 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x406572)
0045d047 325b0a64 0x65747365
0045d04b 3a363738 0x325b0a64
0045d04f 32413030 0x3a363738
0045d053 38313834 0x32413030
0045d057 3036205d 0x38313834
0045d05b 30313133 0x3036205d
0045d05f 20373238 0x30313133
0045d063 203a736d 0x20373238
0045d067 6b72614d 0x203a736d
0045d06b 6577732d 0x6b72614d
0045d06f 31207065 0x6577732d
0045d073 20342e30 0x31207065
0045d077 2e323128 0x20342e30
0045d07b 2d202935 0x2e323128
0045d07f 3031203e 0x2d202935
0045d083 2820342e 0x3031203e
0045d087 352e3231 0x2820342e
0045d08b 424d2029 0x352e3231
0045d08f 3131202c 0x424d2029
0045d093 2f20372e 0x3131202c
0045d097 302e3020 0x2f20372e
0045d09b 20736d20 0x302e3020
0045d09f 76612820 0x20736d20
0045d0a3 67617265 shell32!__dyn_tls_init_callback  (shell32+0x6b2820)
0045d0a7 756d2065 0x67617265
0045d0ab 31203d20 wininet!`string'+0x255695
0045d0af 3030302e 0x31203d20
0045d0b3 7563202c 0x3030302e
0045d0b7 6e657272 wininet!`string'+0x1b565c
0045d0bb 756d2074 0x6e657272
0045d0bf 30203d20 wininet!`string'+0x2556a4
0045d0c3 3230302e 0x30203d20
0045d0c7 6f6c2029 0x3230302e
0045d0cb 656d2077 0x6f6c2029
0045d0cf 79726f6d 0x656d2077
0045d0d3 746f6e20 0x79726f6d
0045d0eb 63617073 NapiNSP!CInstalledProvider::GetAppropriateProxy+0x10e
0045d0ef 65722065 0x63617073
0045d0f3 73657571 0x65722065
0045d0f7 0a646574 0x73657571
0045d0fb 00000000 0xa646574

72ff3617b9ade3b78f5fe4d679ab33a5_000.dmp

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfcf10 650cdc08 node+0x2a2f20b
00cfd20f 3a736d20 node+0xb2dc08
00cfd213 72614d20 0x3a736d20
00cfd217 77732d6b 0x72614d20
00cfd21b 20706565 ole32!wtdccm_NULL_THUNK_DATA_DLA  (ole32+0x132d6b)
00cfd21f 352e3031 0x20706565
00cfd223 32312820 0x352e3031
00cfd227 2029352e 0x32312820
00cfd22b 31203e2d 0x2029352e
00cfd22f 20352e30 0x31203e2d
00cfd233 2e323128 0x20352e30
00cfd237 4d202935 0x2e323128
00cfd23b 37202c42 0x4d202935
00cfd23f 2f20312e 0x37202c42
00cfd243 302e3020 0x2f20312e
00cfd247 20736d20 0x302e3020
00cfd24b 76612820 0x20736d20
00cfd263 6e657272 msvcrt!std::shared_ptr<__ExceptionPtr>::operator=+0x45
00cfd26b 30203d20 0x6e657272
00cfd26f 3330302e 0x30203d20
00cfd273 6f6c2029 0x3330302e
00cfd277 656d2077 0x6f6c2029
00cfd27b 79726f6d node+0x1132077
00cfd27f 746f6e20 0x79726f6d
00cfd283 63696669 0x746f6e20
00cfd287 6f697461 0x63696669
00cfd28b 4347206e 0x6f697461
00cfd28f 206e6920 0x4347206e
00cfd293 20646c6f 0x206e6920
00cfd297 63617073 0x20646c6f
00cfd29b 65722065 0x63617073
00cfd29f 73657571 node+0x1182065
00cfd6a7 00000000 apphelp!DirectDrawSurface::RealizePalette+0xb8

12836a0bebdcc68832a2e42c608058dc_000.dmp

Top 5: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0015cda0 108edc08 node+0x2a2f20b
0015d09f 20393936 node+0xb2dc08
0015d0a3 203a736d 0x20393936
0015d0a7 6b72614d 0x203a736d
0015d0ab 6577732d 0x6b72614d
0015d0af 31207065 0x6577732d
0015d0b3 20322e30 0x31207065
0015d0b7 2e323128 0x20322e30
0015d0bb 2d202930 0x2e323128
0015d0bf 3031203e 0x2d202930
0015d0c3 2820312e 0x3031203e
0015d0c7 302e3231 0x2820312e
0015d0cb 424d2029 0x302e3231
0015d0cf 2e39202c 0x424d2029
0015d0d3 202f2032 0x2e39202c
0015d0d7 20302e30 0x202f2032
0015d0db 2020736d 0x20302e30
0015d0df 65766128 0x2020736d
0015d0e3 65676172 0x65766128
0015d0e7 20756d20 0x65676172
0015d0eb 2e31203d 0x20756d20
0015d0ef 2c303030 0x2e31203d
0015d0f3 72756320 0x2c303030
0015d0f7 746e6572 rsaenh!g_RsaEnhPolicy+0x1d8
0015d0fb 20756d20 0x746e6572
0015d0ff 2e30203d 0x20756d20
0015d103 29333030 0x2e30203d
0015d107 776f6c20 0x29333030
0015d10b 6d656d20 ntdll!`string'  (ntdll+0x6c20)
0015d10f 2079726f 0x6d656d20
0015d113 69746f6e 0x2079726f
0015d117 61636966 0x69746f6e
0015d11b 6e6f6974 0x61636966
0015d11f 20434720 FWPUCLNT!`string'+0x20
0015d123 6f206e69 0x20434720
0015d127 7320646c 0x6f206e69
0015d12b 65636170 IPHLPAPI!Ipv4UnicastAddressScope+0x2e
0015d133 74736575 0x65636170
0015d137 5b0a6465 0x74736575
0015d13b 38303435 0x5b0a6465
0015d13f 4530303a 0x38303435
0015d143 35443942 0x4530303a
0015d147 20205d38 0x35443942
0015d14b 35373637 0x20205d38
0015d14f 20393836 0x35373637
0015d153 203a736d 0x20393836
0015d157 6b72614d 0x203a736d
0015d15b 6577732d 0x6b72614d
0015d15f 31207065 0x6577732d
0015d163 20372e30 0x31207065
0015d167 2e323128 0x20372e30
0015d16b 2d202930 0x2e323128
0015d16f 3031203e 0x2d202930
0015d173 2820322e 0x3031203e
0015d177 302e3231 0x2820322e
0015d17b 424d2029 0x302e3231
0015d17f 2e37202c 0x424d2029
0015d183 202f2032 0x2e37202c
0015d187 20302e30 0x202f2032
0015d18b 2020736d 0x20302e30
0015d18f 65766128 0x2020736d
0015d193 65676172 0x65766128
0015d197 20756d20 0x65676172
0015d19b 2e31203d 0x20756d20
0015d19f 2c303030 0x2e31203d
0015d1a3 72756320 0x2c303030
0015d1a7 746e6572 rsaenh!g_RsaEnhPolicy+0x1d8
0015d1ab 20756d20 0x746e6572
0015d1af 2e31203d 0x20756d20
0015d1b3 29303030 0x2e31203d
0015d1b7 776f6c20 0x29303030
0015d1bb 6d656d20 ntdll!`string'  (ntdll+0x6c20)
0015d1bf 2079726f 0x6d656d20
0015d1c3 69746f6e 0x2079726f
0015d1c7 61636966 0x69746f6e
0015d1cb 6e6f6974 0x61636966
0015d1cf 20434720 FWPUCLNT!`string'+0x20
0015d1d3 6f206e69 0x20434720
0015d1d7 7320646c 0x6f206e69
0015d1db 65636170 IPHLPAPI!Ipv4UnicastAddressScope+0x2e
0015d1e3 74736575 0x65636170
0015d1e7 5b0a6465 0x74736575
0015d1eb 38303435 0x5b0a6465
0015d1ef 4530303a 0x38303435
0015d1f3 35443942 0x4530303a
0015d1f7 20205d38 0x35443942
0015d1fb 35373637 0x20205d38
0015d1ff 20303037 0x35373637
0015d203 203a736d 0x20303037
0015d207 6b72614d 0x203a736d
0015d20b 6577732d 0x6b72614d
0015d20f 31207065 0x6577732d
0015d213 20322e30 0x31207065
0015d217 2e323128 0x20322e30
0015d21b 2d202930 0x2e323128
0015d21f 3031203e 0x2d202930
0015d223 2820312e 0x3031203e
0015d227 302e3231 0x2820312e
0015d22b 424d2029 0x302e3231
0015d22f 3131202c 0x424d2029
0015d233 2f20372e 0x3131202c
0015d237 302e3020 0x2f20372e
0015d23b 20736d20 0x302e3020
0015d23f 76612820 0x20736d20
0015d243 67617265 kernel32!ExeNameInitialized  (kernel32+0xf2820)
0015d247 756d2065 0x67617265
0015d24b 31203d20 shell32!`string'+0x1a1
0015d24f 3030302e 0x31203d20
0015d253 7563202c 0x3030302e
0015d273 746f6e20 shell32!CDUIViewFrame::_CreateOrSetInnerObject+0x120
0015d27f 4347206e 0x746f6e20
0015d283 206e6920 0x4347206e
0015d287 20646c6f 0x206e6920
0015d28b 63617073 0x20646c6f
0015d28f 65722065 0x63617073
0015d293 73657571 0x65722065
0015d297 0a646574 0x73657571
0015d29b 00000000 0xa646574

e6cbe87931b442633737e21107f0368f_000.dmp

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002cc8a0 6d8cdc08 node+0x2a2f20b
002ccb9f 3a736d20 node+0xb2dc08
002ccba3 72614d20 0x3a736d20
002ccba7 77732d6b 0x72614d20
002ccbcb 31202c42 ntdll!RtlpPopulateListIndex+0x260
002ccbd7 736d2030 0x31202c42
002ccbdb 61282020 0x736d2030
002ccbdf 61726576 0x61282020
002ccbe3 6d206567 0x61726576
002ccbe7 203d2075 node+0x466567
002ccbeb 39392e30 0x203d2075
002ccbef 63202c39 0x39392e30
002ccbf3 65727275 0x63202c39
002ccbf7 6d20746e 0x65727275
002ccbfb 203d2075 node+0x46746e
002ccbff 30302e30 0x203d2075
002ccc03 6c202934 0x30302e30
002ccc07 6d20776f 0x6c202934
002ccc0b 726f6d65 node+0x46776f
002ccc0f 6f6e2079 0x726f6d65
002ccc13 69666974 node+0x2942079
002ccc17 69746163 0x69666974
002ccc1b 47206e6f 0x69746163
002ccc1f 6e692043 0x47206e6f
002ccc23 646c6f20 node+0x18f2043
002ccc27 61707320 0x646c6f20
002ccc2b 72206563 0x61707320
002ccc2f 65757165 0x72206563
002ccc33 64657473 0x65757165
002ccc37 32325b0a 0x64657473
002ccc3b 303a3635 0x32325b0a
002ccc3f 36354330 0x303a3635
002ccc43 5d383332 0x36354330
002ccc47 38343320 0x5d383332
002ccc4b 36383536 0x38343320
002ccc4f 6d203536 0x36383536
002ccc53 4d203a73 node+0x463536
002ccc57 2d6b7261 0x4d203a73
002ccc5b 65657773 0x2d6b7261
002ccc5f 30312070 0x65657773
002ccc63 2820392e 0x30312070
002ccc67 352e3231 0x2820392e
002ccc6b 3e2d2029 0x352e3231
002ccc6f 2e303120 0x3e2d2029
002ccc73 31282034 0x2e303120
002ccc77 29352e32 0x31282034
002ccc7b 2c424d20 0x29352e32
002ccc7f 372e3920 0x2c424d20
002ccc83 30202f20 0x372e3920
002ccc87 6d20302e 0x30202f20
002ccc8b 28202073 node+0x46302e
002ccc8f 72657661 0x28202073
002ccc93 20656761 0x72657661
002ccc97 3d20756d 0x20656761
002ccc9b 302e3120 0x3d20756d
002ccc9f 202c3030 0x302e3120
002ccca3 72727563 0x202c3030
002ccca7 20746e65 0x72727563
002cccab 3d20756d 0x20746e65
002cccaf 302e3120 0x3d20756d
002cccb3 20293030 0x302e3120
002cccb7 20776f6c 0x20293030
002cccbb 6f6d656d 0x20776f6c
002cccbf 6e207972 node+0x293656d
002cccc3 6669746f node+0x1467972
002cccc7 74616369 0x6669746f
002ccccb 206e6f69 0x74616369
002ccccf 69204347 0x206e6f69
002cccd3 6c6f206e 0x69204347
002cccd7 70732064 0x6c6f206e
002cccdb 20656361 node+0x3992064
002cccdf 75716572 0x20656361
002ccce3 65747365 oleaut32!g_rgpfnUnk+0xfa2
002ccce7 325b0a64 0x65747365
002ccceb 3a363532 0x325b0a64
002cccef 35433030 0x3a363532
002cccf3 38333236 0x35433030
002cccf7 3433205d 0x38333236
002cccfb 38353638 0x3433205d
002cccff 20333836 0x38353638
002ccd03 203a736d 0x20333836
002ccd07 6b72614d 0x203a736d
002ccd0b 6577732d 0x6b72614d
002ccd0f 31207065 0x6577732d
002ccd13 20342e30 0x31207065
002ccd17 2e323128 0x20342e30
002ccd1b 2d202935 0x2e323128
002ccd1f 3031203e 0x2d202935
002ccd23 2820342e 0x3031203e
002ccd27 352e3231 0x2820342e
002ccd2b 424d2029 0x352e3231
002ccd2f 3731202c 0x424d2029
002ccd33 2f20362e 0x3731202c
002ccd37 302e3020 0x2f20362e
002ccd3b 20736d20 0x302e3020
002ccd3f 76612820 0x20736d20
002ccd43 67617265 crypt32!winreg_bhandle  (crypt32+0xe2820)
002ccd47 756d2065 0x67617265
002ccd4b 30203d20 oleaut32!CTypeInfo2::InitNew+0x2e
002ccd5b 756d2074 0x30203d20
002ccd5f 30203d20 oleaut32!CTypeInfo2::InitNew+0x3d
002ccd6f 79726f6d 0x30203d20
002ccd73 746f6e20 0x79726f6d
002ccd77 63696669 0x746f6e20
002ccd7b 6f697461 0x63696669
002ccd7f 4347206e node+0x28f7461
002ccd83 206e6920 0x4347206e
002ccd87 20646c6f 0x206e6920
002ccd8b 63617073 0x20646c6f
002ccd8f 65722065 0x63617073
002ccd93 73657571 0x65722065
002ccd97 0a646574 cryptnet!ResultFromHeapReAlloc+0x34
002ccda7 00000000 0xa646574

412cc9007369856bb9a90db9969810af_001.dmp

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028cc28 64c7dc08 node+0x2a2f20b
0028cf27 203a736d node+0xb2dc08
0028cf2b 6b72614d 0x203a736d
0028cf2f 6577732d 0x6b72614d
0028cf33 31207065 node+0x162732d
0028cf37 20342e30 0x31207065
0028cf3b 2e323128 0x20342e30
0028cf3f 2d202935 0x2e323128
0028cf43 3031203e 0x2d202935
0028cf47 2820342e 0x3031203e
0028cf4b 352e3231 0x2820342e
0028cf4f 424d2029 0x352e3231
0028cf53 3234202c 0x424d2029
0028cf57 2f20392e 0x3234202c
0028cf5b 302e3020 0x2f20392e
0028cf5f 20736d20 0x302e3020
0028cf63 76612820 0x20736d20
0028cf67 67617265 shell32!__dyn_tls_init_callback  (shell32+0xbf2820)
0028cf6b 756d2065 node+0x34c7265
0028cf6f 30203d20 msctf!CompData::AddCompData+0x28
0028cf7b 6e657272 0x30203d20
0028cf7f 756d2074 0x6e657272
0028cf83 30203d20 msctf!CompData::CompData+0x1
0028cf93 79726f6d 0x30203d20
0028cf97 746f6e20 0x79726f6d
0028d00f 6d20302e bcryptprimitives!MSBlockDecrypt+0x64
0028d03b 20293030 0x6d20302e
0028d03f 20776f6c 0x20293030
0028d043 6f6d656d 0x20776f6c
0028d047 6e207972 0x6f6d656d
0028d04b 6669746f 0x6e207972
0028d04f 74616369 node+0x254746f
0028d053 206e6f69 mswsock!KnownGuids+0x119
0028d057 69204347 0x206e6f69
0028d05b 6c6f206e 0x69204347
0028d05f 70732064 0x6c6f206e
0028d063 20656361 0x70732064
0028d067 75716572 0x20656361
0028d06b 65747365 msctf!__dyn_tls_init_callback  (msctf+0xb6572)
0028d06f 315b0a64 node+0x15f7365
0028d073 3a363332 0x315b0a64
0028d077 42363130 0x3a363332
0028d07b 38453132 0x42363130
0028d07f 3731205d 0x38453132
0028d083 31313038 0x3731205d
0028d087 20393134 0x31313038
0028d08b 203a736d 0x20393134
0028d08f 6b72614d 0x203a736d
0028d093 6577732d 0x6b72614d
0028d097 31207065 node+0x162732d
0028d09b 20342e30 0x31207065
0028d09f 2e323128 0x20342e30
0028d0a3 2d202935 0x2e323128
0028d0a7 3031203e 0x2d202935
0028d0ab 2820342e 0x3031203e
0028d0af 352e3231 0x2820342e
0028d0b3 424d2029 0x352e3231
0028d0b7 3333202c 0x424d2029
0028d0bb 2f20332e 0x3333202c
0028d0bf 302e3020 0x2f20332e
0028d0c3 20736d20 0x302e3020
0028d0c7 76612820 0x20736d20
0028d0cb 67617265 shell32!__dyn_tls_init_callback  (shell32+0xbf2820)
0028d0cf 756d2065 node+0x34c7265
0028d0d3 30203d20 msctf!CompData::AddCompData+0x28
0028d0df 6e657272 0x30203d20
0028d0e3 756d2074 0x6e657272
0028d0e7 30203d20 msctf!CompData::CompData+0x1
0028d0f7 79726f6d 0x30203d20
0028d0fb 746f6e20 0x79726f6d
0028d173 00000000 bcryptprimitives!MSBlockDecrypt+0x64

fa7e494bdd88d3ae394d747753a5fceb_000.dmp

Top 8: total counts = 1

ChildEBP RetAddr  
0857f348 5545e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0857f428 554a89d7 node+0x12ae87c
0857f42c 00040ccc node+0x12f89d7
0857f430 00c3e670 0x40ccc
0857f434 00000000 0xc3e670

087f598a74f2926b09f06e7bdbf647fa_000.dmp

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001ecad8 56afdc08 node+0x2a2f20b
001ece8f 732d6b72 node+0xb2dc08
001ece9b 31282039 dnsapi!Heap_Initialize+0x10
001ece9f 29352e32 0x31282039
001ecea3 203e2d20 0x29352e32
001ecea7 342e3031 0x203e2d20
001eceab 32312820 0x342e3031
001eceaf 2029352e 0x32312820
001eceb3 202c424d 0x2029352e
001eceb7 362e3832 0x202c424d
001ecebb 30202f20 0x362e3832
001ecebf 6d20312e 0x30202f20
001ecec3 28202073 0x6d20312e
001ecec7 72657661 0x28202073
001ececb 20656761 0x72657661
001ececf 3d20756d 0x20656761
001eced3 392e3020 0x3d20756d
001eced7 202c3939 0x392e3020
001ecedb 72727563 0x202c3939
001ecedf 20746e65 0x72727563
001ecee3 3d20756d 0x20746e65
001ecee7 302e3120 0x3d20756d
001eceeb 20293030 0x302e3120
001eceef 20776f6c 0x20293030
001ecef3 6f6d656d 0x20776f6c
001ecef7 6e207972 0x6f6d656d
001ecefb 6669746f 0x6e207972
001eceff 74616369 0x6669746f
001ecf03 206e6f69 0x74616369
001ecf07 69204347 0x206e6f69
001ecf0b 6c6f206e 0x69204347
001ecf0f 70732064 0x6c6f206e
001ecf13 20656361 0x70732064
001ecf17 75716572 0x20656361
001ecf53 2d202935 Wldap32!LdapGetServiceNameForBind+0x3cd
001ecf63 424d2029 0x2d202935
001ecf67 3231202c 0x424d2029
001ecf6b 2f20372e 0x3231202c
001ecf6f 302e3020 0x2f20372e
001ecf73 20736d20 0x302e3020
001ecf77 76612820 0x20736d20
001ecf7b 67617265 iertutil!`string'+0x98
001ecf7f 756d2065 0x67617265
001ecf83 30203d20 0x756d2065
001ecf87 3939392e 0x30203d20
001ecf8b 7563202c 0x3939392e
001ecf8f 6e657272 user32!___PchSym_  (user32+0xd202c)
7563202c ffb48930 mscms!CLuvToCMYKConverter::ComputeCMYKFromLuv+0x27c
75632038 ff1860a5 0xffb48930
7563203c ff1b64a7 0xff1860a5
75632040 ff1e66a9 0xff1b64a7
75632044 ff2068aa 0xff1e66a9
75632048 ff226aac 0xff2068aa
7563204c ff266dad 0xff226aac
75632050 ff2870ae 0xff266dad
75632054 ff2d72b1 0xff2870ae
75632058 ff2f74b2 0xff2d72b1
7563205c ff3275b3 0xff2f74b2
75632060 ff3479b4 0xff3275b3
75632064 ff387bb6 0xff3479b4
75632068 ff3c7db8 0xff387bb6
7563206c ff3c7fb8 0xff3c7db8
75632070 ff3f7fba 0xff3c7fb8
75632074 ff4182ba 0xff3f7fba
75632078 ff4280bc 0xff4182ba
7563207c ff4281bc 0xff4280bc
75632080 ff4180bc 0xff4281bc
75632084 ff427fbc 0xff4180bc
75632088 ff3f7ebb 0xff427fbc
7563208c ff3d7cba 0xff3f7ebb
75632090 ff3a79b9 0xff3d7cba
75632094 ff3677b8 0xff3a79b9
75632098 ff3575b8 0xff3677b8
7563209c ff3273b7 0xff3575b8
756320a0 ff3072b7 0xff3273b7
756320a4 ff3071b7 0xff3072b7
756320a8 ff3473ba 0xff3071b7
756320ac ff477fc7 0xff3473ba
756320b0 ff6895da 0xff477fc7
756320b4 ff637699 0xff6895da
756320b8 ffc9c5c7 0xff637699
756320bc ffebeaeb 0xffc9c5c7
756320c0 ffd4d4d6 0xffebeaeb
756320c4 ffb9babd 0xffd4d4d6
756320c8 e37a7a7b 0xffb9babd
756320cc 4a1b1b1c 0xe37a7a7b
756320d0 26000000 0x4a1b1b1c
756320d4 12000000 0x26000000
756320d8 06000000 0x12000000
756320dc 01000000 0x6000000
756320e0 00000000 0x1000000

734a132eadeb73941545883343297189_000.dmp

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0041cd80 696cdc08 node+0x2a2f20b
0041d07f 6d203436 node+0xb2dc08
0041d083 4d203a73 node+0x4663436
0041d087 2d6b7261 0x4d203a73
0041d08b 65657773 0x2d6b7261
0041d08f 30312070 0x65657773
0041d093 2820322e 0x30312070
0041d097 302e3231 0x2820322e
0041d09b 3e2d2029 0x302e3231
0041d09f 2e303120 0x3e2d2029
0041d0a3 31282032 0x2e303120
0041d0a7 29332e32 0x31282032
0041d0ab 2c424d20 0x29332e32
0041d0af 372e3520 0x2c424d20
0041d0b3 30202f20 0x372e3520
0041d0b7 6d20302e 0x30202f20
0041d0bb 28202073 node+0x466302e
0041d0bf 72657661 0x28202073
0041d0c3 20656761 taskschd!_GUID_7279fc88_709d_4095_b63d_69fe4b0d9030+0x1
0041d0c7 3d20756d 0x20656761
0041d0cb 302e3120 0x3d20756d
0041d0cf 202c3030 0x302e3120
0041d0d3 72727563 0x202c3030
0041d0d7 20746e65 0x72727563
0041d0db 3d20756d 0x20746e65
0041d0df 302e3020 0x3d20756d
0041d0e3 20293530 0x302e3020
0041d0e7 20776f6c 0x20293530
0041d0eb 6f6d656d 0x20776f6c
0041d0ef 6e207972 0x6f6d656d
0041d0f3 6669746f 0x6e207972
0041d0f7 74616369 0x6669746f
0041d0fb 206e6f69 version!hCabinet+0x9
0041d0ff 69204347 0x206e6f69
0041d103 6c6f206e node+0x664347
0041d107 70732064 node+0x3b5206e
0041d10b 20656361 0x70732064
0041d10f 75716572 0x20656361
0041d113 65747365 shell32!__dyn_tls_init_callback  (shell32+0x866572)
0041d117 345b0a64 0x65747365
0041d11b 3a323339 0x345b0a64
0041d11f 42463130 0x3a323339
0041d123 38444234 0x42463130
0041d127 3220205d 0x38444234
0041d12b 39313436 0x3220205d
0041d12f 6d203838 0x39313436
0041d133 4d203a73 node+0x4663838
0041d137 2d6b7261 0x4d203a73
0041d13b 65657773 0x2d6b7261
0041d13f 30312070 0x65657773
0041d143 2820372e 0x30312070
0041d147 332e3231 0x2820372e
0041d14b 3e2d2029 0x332e3231
0041d14f 2e303120 0x3e2d2029
0041d153 31282032 0x2e303120
0041d157 29302e32 0x31282032
0041d15b 2c424d20 0x29302e32
0041d15f 2e383320 0x2c424d20
0041d163 202f2032 0x2e383320
0041d167 20302e30 0x202f2032
0041d16b 2020736d 0x20302e30
0041d16f 65766128 0x2020736d
0041d173 65676172 0x65766128
0041d177 20756d20 0x65676172
0041d17b 2e30203d 0x20756d20
0041d17f 2c393939 0x2e30203d
0041d183 72756320 0x2c393939
0041d187 746e6572 dnsapi!`string'+0x24
0041d18b 20756d20 0x746e6572
0041d18f 2e30203d 0x20756d20
0041d193 29393939 0x2e30203d
0041d197 776f6c20 0x29393939
0041d19b 6d656d20 0x776f6c20
0041d19f 2079726f 0x6d656d20
0041d1a3 69746f6e 0x2079726f
0041d1a7 61636966 node+0xba6f6e
0041d1ab 6e6f6974 0x61636966
0041d1af 20434720 0x6e6f6974
0041d1b3 6f206e69 0x20434720
0041d1b7 7320646c 0x6f206e69
0041d1bb 65636170 0x7320646c
0041d1bf 71657220 0x65636170
0041d1c3 74736575 0x71657220
0041d1c7 5b0a6465 0x74736575
0041d1cb 32333934 0x5b0a6465
0041d1cf 4631303a 0x32333934
0041d1d3 44423442 0x4631303a
0041d1d7 20205d38 0x44423442
0041d1db 32343632 0x20205d38
0041d1df 20313030 0x32343632
0041d1e3 203a736d 0x20313030
0041d1e7 6b72614d 0x203a736d
0041d1eb 6577732d node+0x2b8614d
0041d1ef 31207065 0x6577732d
0041d1f3 20322e30 0x31207065
0041d1f7 2e323128 0x20322e30
0041d1fb 2d202930 0x2e323128
0041d1ff 3031203e 0x2d202930
0041d203 2820322e 0x3031203e
0041d207 332e3231 0x2820322e
0041d20b 424d2029 0x332e3231
0041d20f 3231202c 0x424d2029
0041d213 2f20352e 0x3231202c
0041d217 302e3020 0x2f20352e
0041d21b 20736d20 0x302e3020
0041d21f 76612820 0x20736d20
0041d223 67617265 kernel32!GetNumaProcessorNodeEx+0x2
0041d22f 3939392e 0x67617265
0041d233 7563202c 0x3939392e
0041d237 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x78202c)
0041d23b 756d2074 0x6e657272
0041d23f 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x822074)
0041d243 3330302e 0x30203d20
0041d247 6f6c2029 0x3330302e
0041d24b 656d2077 0x6f6c2029
0041d24f 79726f6d 0x656d2077
0041d253 746f6e20 0x79726f6d
0041d257 63696669 0x746f6e20
0041d25b 6f697461 0x63696669
0041d25f 4347206e 0x6f697461
0041d263 206e6920 0x4347206e
0041d267 20646c6f 0x206e6920
0041d26b 63617073 0x20646c6f
0041d26f 65722065 0x63617073
0041d273 73657571 0x65722065
0041d277 0a646574 0x73657571
0041d27b 00000000 0xa646574

9d121860c241ba929910ba431e5f1b7d_000.dmp

Top 11: total counts = 1

ChildEBP RetAddr  
03ebf9b8 5ba4e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
03ebfa90 5ba989d7 node+0x12ae87c
03ebfab0 5a80284b node+0x12f89d7
03ebfab4 009bde27 node+0x6284b
03ebfab8 087df264 0x9bde27
03ebfabc 0026f781 0x87df264
03ebfac0 0019fa57 0x26f781
03ebfac4 11f3e998 0x19fa57
03ebfac8 087df238 0x11f3e998
03ebfacc 087df238 0x87df238
03ebfad0 03ebfb7c 0x87df238
03ebfad4 5a8027d8 0x3ebfb7c
03ebfb7c 5bfd8dab node+0x627d8
03ebfb94 5ad70539 node+0x1838dab
03ebfbb0 5ad6d4a9 node+0x5d0539
03ebfccc 5ad63632 node+0x5cd4a9
03ebfdcc 5ad633f1 node+0x5c3632
03ebfdd0 00000000 node+0x5c33f1

54633b01ce80e4c5c2c724c9e0c316f2_000.dmp

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ecdd8 597edc08 node+0x2a2f20b
004ed0d7 72614d20 node+0xb2dc08
004ed0db 77732d6b 0x72614d20
004ed0df 20706565 0x77732d6b
004ed0e3 332e3031 0x20706565
004ed0e7 32312820 0x332e3031
004ed0eb 2029332e 0x32312820
004ed0ef 31203e2d 0x2029332e
004ed0f3 20332e30 0x31203e2d
004ed0f7 2e323128 0x20332e30
004ed0fb 4d202933 0x2e323128
004ed0ff 34202c42 0x4d202933
004ed103 20372e39 0x34202c42
004ed107 2e30202f 0x20372e39
004ed10b 736d2030 0x2e30202f
004ed10f 61282020 0x736d2030
004ed113 61726576 0x61282020
004ed117 6d206567 0x61726576
004ed11b 203d2075 0x6d206567
004ed11f 39392e30 0x203d2075
004ed123 63202c38 0x39392e30
004ed127 65727275 0x63202c38
004ed12b 6d20746e 0x65727275
004ed12f 203d2075 0x6d20746e
004ed133 30302e30 0x203d2075
004ed137 6c202930 0x30302e30
004ed13b 6d20776f 0x6c202930
004ed13f 726f6d65 0x6d20776f
004ed143 6f6e2079 0x726f6d65
004ed147 69666974 0x6f6e2079
004ed14b 69746163 0x69666974
004ed14f 47206e6f 0x69746163
004ed153 6e692043 0x47206e6f
004ed157 646c6f20 0x6e692043
004ed15b 61707320 0x646c6f20
004ed15f 72206563 0x61707320
004ed163 65757165 0x72206563
004ed167 64657473 0x65757165
004ed16b 31325b0a 0x64657473
004ed16f 303a3231 0x31325b0a
004ed173 41443032 0x303a3231
004ed177 5d384542 0x41443032
004ed17b 30333120 node+0x46c4542
004ed17f 36313132 0x30333120
004ed183 20303638 0x36313132
004ed187 203a736d 0x20303638
004ed18b 6b72614d 0x203a736d
004ed18f 6577732d 0x6b72614d
004ed193 31207065 0x6577732d
004ed197 20392e30 0x31207065
004ed19b 2e323128 0x20392e30
004ed19f 2d202933 0x2e323128
004ed1a3 3031203e 0x2d202933
004ed1a7 2820332e 0x3031203e
004ed1ab 332e3231 0x2820332e
004ed1af 424d2029 0x332e3231
004ed1b3 3031202c 0x424d2029
004ed1b7 20312e35 0x3031202c
004ed1bb 2e30202f 0x20312e35
004ed1bf 736d2030 0x2e30202f
004ed1c3 61282020 0x736d2030
004ed1c7 61726576 0x61282020
004ed1cb 6d206567 0x61726576
004ed1cf 203d2075 0x6d206567
004ed1d3 39392e30 0x203d2075
004ed1d7 63202c38 0x39392e30
004ed1db 65727275 0x63202c38
004ed1df 6d20746e 0x65727275
004ed1e3 203d2075 0x6d20746e
004ed1e7 39392e30 0x203d2075
004ed1eb 6c202938 0x39392e30
004ed1ef 6d20776f 0x6c202938
004ed1f3 726f6d65 0x6d20776f
004ed1f7 6f6e2079 0x726f6d65
004ed1fb 69666974 0x6f6e2079
004ed1ff 69746163 0x69666974
004ed203 47206e6f 0x69746163
004ed207 6e692043 0x47206e6f
004ed20b 646c6f20 0x6e692043
004ed20f 61707320 0x646c6f20
004ed213 72206563 0x61707320
004ed217 65757165 0x72206563
004ed21b 64657473 0x65757165
004ed21f 31325b0a 0x64657473
004ed223 303a3231 0x31325b0a
004ed227 41443032 0x303a3231
004ed22b 5d384542 0x41443032
004ed22f 30333120 node+0x46c4542
004ed233 36313132 0x30333120
004ed237 20343838 0x36313132
004ed23b 203a736d 0x20343838
004ed23f 6b72614d 0x203a736d
004ed243 6577732d 0x6b72614d
004ed247 31207065 0x6577732d
004ed24b 20332e30 0x31207065
004ed24f 2e323128 0x20332e30
004ed253 2d202933 0x2e323128
004ed257 3031203e 0x2d202933
004ed25b 2820332e 0x3031203e
004ed25f 332e3231 0x2820332e
004ed263 424d2029 0x332e3231
004ed267 3332202c 0x424d2029
004ed26b 2f20382e 0x3332202c
004ed26f 302e3020 0x2f20382e
004ed273 20736d20 0x302e3020
004ed277 76612820 0x20736d20
004ed27b 67617265 wininet!`string'+0x1e5d70
004ed27f 756d2065 0x67617265
004ed283 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x782065)
004ed287 3839392e 0x30203d20
004ed28b 7563202c 0x3839392e
004ed28f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x6e202c)
004ed293 756d2074 0x6e657272
004ed297 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x782074)
004ed29b 3130302e 0x30203d20
004ed29f 6f6c2029 0x3130302e
004ed2a3 656d2077 0x6f6c2029
004ed2a7 79726f6d 0x656d2077
004ed2ab 746f6e20 0x79726f6d
004ed2af 63696669 0x746f6e20
004ed2b3 6f697461 0x63696669
004ed2b7 4347206e 0x6f697461
004ed2bb 206e6920 0x4347206e
004ed2bf 20646c6f 0x206e6920
004ed2c3 63617073 0x20646c6f
004ed2c7 65722065 0x63617073
004ed2cb 73657571 0x65722065
004ed2cf 0a646574 0x73657571
004ed2d3 00000000 0xa646574

40540a6d4254392c8ae54540a9ea2c26_000.dmp

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040ca68 5347dc08 node+0x2a2f20b
0040cd67 732d6b72 node+0xb2dc08
0040cd6b 70656577 0x732d6b72
0040cd6f 2e303120 0x70656577
0040cd73 31282030 0x2e303120
0040cd77 29302e32 0x31282030
0040cd7b 203e2d20 0x29302e32
0040cd7f 302e3031 0x203e2d20
0040cd83 32312820 0x302e3031
0040cd87 2029302e 0x32312820
0040cd8b 202c424d 0x2029302e
0040cd8f 392e3338 0x202c424d
0040cd93 30202f20 0x392e3338
0040cd97 6d20302e 0x30202f20
0040cd9b 28202073 context!___PchSym_+0x139a
0040cd9f 72657661 0x28202073
0040cda3 20656761 0x72657661
0040cda7 3d20756d 0x20656761
0040cdab 372e3020 0x3d20756d
0040cdaf 202c3130 0x372e3020
0040cdb3 72727563 0x202c3130
0040cdb7 20746e65 0x72727563
0040cdbb 3d20756d 0x20746e65
0040cdbf 302e3020 0x3d20756d
0040cdc3 20293931 0x302e3020
0040cdc7 20776f6c 0x20293931
0040cdcb 6f6d656d 0x20776f6c
0040cdcf 6e207972 0x6f6d656d
0040cdd3 6669746f d2d1!CSRGBToLinearTranslator::s_shaders+0x47962
0040cdd7 74616369 0x6669746f
0040cddb 206e6f69 0x74616369
0040cddf 69204347 0x206e6f69
0040cde3 6c6f206e 0x69204347
0040cde7 70732064 0x6c6f206e
0040cdeb 20656361 0x70732064
0040cdef 75716572 0x20656361
0040cdf3 65747365 setupapi!g_bObjectMappingInitialized  (setupapi+0xd6572)
0040cdf7 345b0a64 0x65747365
0040cdfb 3a303232 0x345b0a64
0040cdff 43303230 0x3a303232
0040ce03 30334644 0x43303230
0040ce07 2020205d 0x30334644
0040ce0b 31343036 0x2020205d
0040ce0f 6d203137 0x31343036
0040ce13 4d203a73 context!___PchSym_+0x14a3
0040ce17 2d6b7261 0x4d203a73
0040ce1b 65657773 0x2d6b7261
0040ce1f 30312070 0x65657773
0040ce23 2820302e 0x30312070
0040ce27 302e3231 0x2820302e
0040ce2b 3e2d2029 0x302e3231
0040ce2f 2e303120 0x3e2d2029
0040ce33 31282030 0x2e303120
0040ce37 29302e32 0x31282030
0040ce3b 2c424d20 0x29302e32
0040ce3f 30323620 0x2c424d20
0040ce43 312e3836 0x30323620
0040ce47 32202f20 0x312e3836
0040ce4b 2e323338 0x32202f20
0040ce4f 736d2036 0x2e323338
0040ce53 61282020 0x736d2036
0040ce57 61726576 0x61282020
0040ce5b 6d206567 0x61726576
0040ce5f 203d2075 context!__use_sse2_mathfcns  (context+0xf6567)
0040ce63 37352e30 0x203d2075
0040ce67 63202c33 0x37352e30
0040ce6b 65727275 0x63202c33
0040ce6f 6d20746e netprofm!__dyn_tls_init_callback  (netprofm+0x47275)
0040ce73 203d2075 context!__use_sse2_mathfcns  (context+0xf746e)
0040ce77 36352e30 0x203d2075
0040ce7b 6c202931 0x36352e30
0040ce7f 6d20776f 0x6c202931
0040ce83 726f6d65 context!__use_sse2_mathfcns  (context+0xf776f)
0040ce87 6f6e2079 0x726f6d65
0040ce8b 69666974 0x6f6e2079
0040ce8f 69746163 0x69666974
0040ce93 47206e6f 0x69746163
0040ce97 6e692043 0x47206e6f
0040ce9b 646c6f20 0x6e692043
0040ce9f 61707320 0x646c6f20
0040cea3 72206563 0x61707320
0040cea7 65757165 0x72206563
0040ceab 64657473 0x65757165
0040ceaf 32345b0a 0x64657473
0040ceb3 303a3032 0x32345b0a
0040ceb7 44433032 0x303a3032
0040cebb 5d303346 0x44433032
0040cebf 36202020 0x5d303346
0040cec3 31383331 0x36202020
0040cec7 736d2036 0x31383331
0040cecb 614d203a 0x736d2036
0040cecf 732d6b72 0x614d203a
0040ced3 70656577 0x732d6b72
0040ced7 2e303120 0x70656577
0040cedb 31282030 0x2e303120
0040cedf 29302e32 0x31282030
0040cee3 203e2d20 0x29302e32
0040cee7 302e3031 0x203e2d20
0040ceeb 32312820 0x302e3031
0040ceef 2029302e 0x32312820
0040cef3 202c424d 0x2029302e
0040cef7 34343337 0x202c424d
0040cefb 2f20362e 0x34343337
0040ceff 302e3020 0x2f20362e
0040cf03 20736d20 0x302e3020
0040cf07 76612820 0x20736d20
0040cf0b 67617265 shell32!__dyn_tls_init_callback  (shell32+0xc12820)
0040cf0f 756d2065 0x67617265
0040cf4f 20646c6f setupapi!SetupGetLineTextA+0x340
0040cf6f 00000000 0x20646c6f

7ca64d5e6aa74656955362aadf424fe8_000.dmp

Top 14: total counts = 1

0030d2b7 71657220 0x65636170
0030d2bb 74736575 ipcService+0x17220
0030d2bf 5b0a6465 userenv!__dyn_tls_init_callback  (userenv+0x16575)
0030d2c3 30303731 0x5b0a6465
0030d2c7 3532303a 0x30303731
0030d2cb 30334331 0x3532303a
0030d2cf 36205d30 0x30334331
0030d2d3 34343337 0x36205d30
0030d2d7 20303636 0x34343337
0030d2db 203a736d 0x20303636
0030d2df 6b72614d 0x203a736d
0030d2e3 6577732d node+0x3e5614d
0030d2e7 31207065 0x6577732d
0030d2eb 20332e30 0x31207065
0030d2ef 2e323128 0x20332e30
0030d2f3 2d202933 0x2e323128
0030d2f7 3031203e 0x2d202933
0030d2fb 2820332e 0x3031203e
0030d2ff 352e3231 0x2820332e
0030d303 424d2029 0x352e3231
0030d307 3631202c 0x424d2029
0030d30b 2f20342e 0x3631202c
0030d30f 302e3020 0x2f20342e
0030d313 20736d20 0x302e3020
0030d317 76612820 0x20736d20
0030d31b 67617265 setupapi!g_bObjectMappingInitialized  (setupapi+0x182820)
0030d31f 756d2065 0x67617265
0030d323 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x7d2065)
0030d327 3639392e 0x30203d20
0030d32b 7563202c 0x3639392e
0030d32f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x73202c)
0030d333 756d2074 0x6e657272
0030d337 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x7d2074)
0030d33b 3230302e 0x30203d20
0030d33f 6f6c2029 0x3230302e
0030d343 656d2077 0x6f6c2029
0030d347 79726f6d 0x656d2077
0030d34b 746f6e20 0x79726f6d
0030d34f 63696669 360Base+0xf6e20
0030d353 6f697461 0x63696669
0030d357 4347206e 0x6f697461
0030d35b 206e6920 0x4347206e
0030d35f 20646c6f 0x206e6920
0030d363 63617073 0x20646c6f
0030d367 65722065 0x63617073
0030d36b 73657571 0x65722065
0030d36f 0a646574 0x73657571
0030d373 00000000 0xa646574

e5c76251792d2b31e5d599d5a1ee3260_000.dmp

Top 15: total counts = 1

001acd3f 732d6b72 0x614d203a
001acd43 70656577 base!`string'+0x6a
001acd47 2e303120 0x70656577
001acd4b 31282036 0x2e303120
001acd4f 29302e32 0x31282036
001acd53 203e2d20 0x29302e32
001acd57 312e3031 0x203e2d20
001acd5b 32312820 0x312e3031
001acd5f 2029302e 0x32312820
001acd63 202c424d 0x2029302e
001acd67 322e3233 0x202c424d
001acd6b 30202f20 0x322e3233
001acd6f 6d20302e 0x30202f20
001acd73 28202073 node+0x283302e
001acd77 72657661 0x28202073
001acd7b 20656761 0x72657661
001acd7f 3d20756d 0x20656761
001acd83 392e3020 0x3d20756d
001acd87 202c3939 0x392e3020
001acd8b 72727563 0x202c3939
001acd8f 20746e65 bcrypt!`string'+0xf
001acd93 3d20756d 0x20746e65
001acd97 392e3020 0x3d20756d
001acd9b 20293939 0x392e3020
001acd9f 20776f6c 0x20293939
001acda3 6f6d656d 0x20776f6c
001acda7 6e207972 0x6f6d656d
001acdab 6669746f node+0x3837972
001acdaf 74616369 0x6669746f
001acdb3 206e6f69 0x74616369
001acdb7 69204347 0x206e6f69
001acdbb 6c6f206e 0x69204347
001acdbf 70732064 node+0x1d2206e
001acdc3 20656361 0x70732064
001acdc7 75716572 0x20656361
001acdcb 65747365 imm32!_imp__RegSetValueExW  (imm32+0x6572)
001acdcf 335b0a64 0x65747365
001acdd3 3a383436 0x335b0a64
001acdd7 44463030 0x3a383436
001acddb 30334244 0x44463030
001acddf 3520205d 0x30334244
001acde3 39333232 0x3520205d
001acde7 6d203737 0x39333232
001acdeb 4d203a73 node+0x2833737
001acdef 2d6b7261 0x4d203a73
001acdf3 65657773 0x2d6b7261
001acdf7 30312070 0x65657773
001acdfb 2820312e 0x30312070
001acdff 302e3231 0x2820312e
001ace03 3e2d2029 0x302e3231
001ace07 2e303120 0x3e2d2029
001ace0b 31282031 0x2e303120
001ace0f 29302e32 0x31282031
001ace13 2c424d20 0x29302e32
001ace17 33313120 0x2c424d20
001ace1b 2f20352e 0x33313120
001ace1f 302e3020 0x2f20352e
001ace23 20736d20 0x302e3020
001ace27 76612820 0x20736d20
001ace3f 6e657272 advapi32!EtwpLookupNextBufferIndex+0x10c
001ace47 30203d20 node+0x3c87272
001ace4b 3030302e 0x30203d20
001ace4f 6f6c2029 0x3030302e
001ace53 656d2077 0x6f6c2029
001ace57 79726f6d 0x656d2077
001ace5b 746f6e20 0x79726f6d
001ace5f 63696669 0x746f6e20
001ace63 6f697461 0x63696669
001ace67 4347206e 0x6f697461
001ace6b 206e6920 0x4347206e
001ace6f 20646c6f 0x206e6920
001ace73 63617073 0x20646c6f
001ace77 65722065 0x63617073
001ace7b 73657571 0x65722065
001ace7f 0a646574 0x73657571
001ace83 00000000 0xa646574

b8da0195c17808e4c9b4418d6ba8e497_000.dmp