Analyzed 9 dump

Top 1: total counts = 1

ChildEBP RetAddr  
0046f5b8 5b25e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0046f690 5b2a89d7 node+0x12ae87c
0046f6e8 5b324486 node+0x12f89d7
0046f760 5b324308 node+0x1374486
0046f7cc 5b330029 node+0x1374308
0046f7d0 00000000 node+0x1380029

Top 2: total counts = 1

0032d1bf 75716572 0x20656361
0032d1c3 65747365 shell32+0xb86572
0032d1c7 315b0a64 0x65747365
0032d1cb 3a383231 0x315b0a64
0032d1cf 45363230 0x3a383231
0032d1d3 38434539 0x45363230
0032d1d7 3533205d 0x38434539
0032d1db 36343134 0x3533205d
0032d1df 20323233 0x36343134
0032d1e3 203a736d 0x20323233
0032d1e7 6b72614d 0x203a736d
0032d1eb 6577732d 0x6b72614d
0032d1ef 31207065 0x6577732d
0032d1f3 20352e30 0x31207065
0032d1f7 2e323128 0x20352e30
0032d1fb 2d202936 0x2e323128
0032d1ff 3031203e 0x2d202936
0032d203 2820352e 0x3031203e
0032d207 362e3231 0x2820352e
0032d20b 424d2029 0x362e3231
0032d20f 3231202c 0x424d2029
0032d213 2f20332e 0x3231202c
0032d217 302e3020 0x2f20332e
0032d21b 20736d20 0x302e3020
0032d21f 76612820 0x20736d20
0032d267 20646c6f kernel32!DosPathToSessionPathA+0x124
0032d277 0a646574 0x20646c6f
0032d27b 00000000 0xa646574

Top 3: total counts = 1

003ee76c 5467ac3f 0x30cd4c54
003ee784 5467aa5b node+0x105ac3f
003ee7b0 54264534 node+0x105aa5b
003ee844 5424ad6d node+0xc44534
003ee854 0068e400 node+0xc2ad6d
0068e550 01250000 0x68e400
0068e554 00000000 0x1250000

Top 4: total counts = 1

0798f14c 000832ac node+0x12f89d7
0798f150 026ebeb0 Defragger+0x32ac
0798f154 00000000 0x26ebeb0

Top 5: total counts = 1

ChildEBP RetAddr  
042af334 042af418 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
042af348 042af358 0x42af418
042af34c fa5bb82d 0x42af358
042af358 00000000 0xfa5bb82d

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0672f49c 76d019fa npggNT+0x1719
0672f9bc 77052967 user32!PowerNotificationCallback+0x1a
0672fa74 7707e1ef ntdll!RtlpWnfWalkUserSubscriptionList+0x2b3
0672fa90 7705f8ee ntdll!RtlpWnfProcessCurrentDescriptor+0xcc
0672fac4 77048ac7 ntdll!RtlpWnfNotificationThread+0x7e
0672faec 77048b79 ntdll!TppExecuteWaitCallback+0x7d
0672fb04 7704628b ntdll!TppWaitCompletion+0x79
0672fcc4 75c35d49 ntdll!TppWorkerThread+0x59b
0672fcd4 7705d03b kernel32!BaseThreadInitThunk+0x19
0672fd2c 7705cfc1 ntdll!__RtlUserThreadStart+0x2b
0672fd3c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ae578 003ae5b8 node+0x162994e
003ae57c 00000000 0x3ae5b8

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003bce58 5625dc08 node+0x2a2f20b
003bd157 20303436 node+0xb2dc08
003bd15b 203a736d 0x20303436
003bd15f 6b72614d 0x203a736d
003bd1a3 2e30203d WindowsCodecs!CGifCodec::GetInit+0x358
003bd1ab 72756320 0x2e30203d
003bd1af 746e6572 0x72756320
003bd1b3 20756d20 0x746e6572
003bd1b7 2e30203d 0x20756d20
003bd1bb 29333030 0x2e30203d
003bd1bf 776f6c20 0x29333030
003bd1c3 6d656d20 0x776f6c20
003bd1c7 2079726f 0x6d656d20
003bd1cb 69746f6e 0x2079726f
003bd1cf 61636966 0x69746f6e
003bd1d3 6e6f6974 0x61636966
003bd1d7 20434720 0x6e6f6974
003bd1db 6f206e69 0x20434720
003bd1df 7320646c 0x6f206e69
003bd1e3 65636170 0x7320646c
003bd1e7 71657220 0x65636170
003bd1eb 74736575 0x71657220
003bd1ef 5b0a6465 0x74736575
003bd1f3 38323334 0x5b0a6465
003bd1f7 4430303a 0x38323334
003bd1fb 39414146 0x4430303a
003bd1ff 20205d38 0x39414146
003bd203 30323631 0x20205d38
003bd207 20363236 0x30323631
003bd20b 203a736d 0x20363236
003bd20f 6b72614d 0x203a736d
003bd253 2e31203d WindowsCodecs!CGifCodec::GetInit+0x358
003bd25b 72756320 0x2e31203d
003bd25f 746e6572 0x72756320
003bd263 20756d20 0x746e6572
003bd267 2e31203d 0x20756d20
003bd26b 29303030 0x2e31203d
003bd26f 776f6c20 0x29303030
003bd273 6d656d20 0x776f6c20
003bd277 2079726f 0x6d656d20
003bd27b 69746f6e 0x2079726f
003bd27f 61636966 0x69746f6e
003bd283 6e6f6974 0x61636966
003bd287 20434720 0x6e6f6974
003bd28b 6f206e69 0x20434720
003bd28f 7320646c 0x6f206e69
003bd293 65636170 0x7320646c
003bd297 71657220 0x65636170
003bd29b 74736575 0x71657220
003bd29f 5b0a6465 0x74736575
003bd2a3 38323334 0x5b0a6465
003bd2a7 4430303a 0x38323334
003bd2ab 39414146 0x4430303a
003bd2af 20205d38 0x39414146
003bd2b3 30323631 0x20205d38
003bd2b7 20343436 0x30323631
003bd2bb 203a736d 0x20343436
003bd2bf 6b72614d 0x203a736d
003bd303 30203d20 WindowsCodecs!CGifCodec::GetInit+0x358
003bd30b 7563202c 0x30203d20
003bd30f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x46202c)
003bd313 756d2074 0x6e657272
003bd317 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x502074)
003bd31b 3230302e 0x30203d20
003bd31f 6f6c2029 0x3230302e
003bd323 656d2077 0x6f6c2029
003bd327 79726f6d 0x656d2077
003bd32b 746f6e20 0x79726f6d
003bd32f 63696669 0x746f6e20
003bd333 6f697461 0x63696669
003bd337 4347206e 0x6f697461
003bd33b 206e6920 0x4347206e
003bd33f 20646c6f 0x206e6920
003bd343 63617073 0x20646c6f
003bd347 65722065 0x63617073
003bd34b 73657571 0x65722065
003bd34f 0a646574 0x73657571
003bd353 00000000 0xa646574

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fc8f0 1028dc08 node+0x2a2f20b
010fcbef 3a736d20 node+0xb2dc08
010fcbf3 72614d20 0x3a736d20
010fcbf7 77732d6b 0x72614d20
010fcbfb 20706565 0x77732d6b
010fcbff 352e3031 0x20706565
010fcc03 32312820 0x352e3031
010fcc07 2029382e 0x32312820
010fcc0b 31203e2d 0x2029382e
010fcc0f 20352e30 0x31203e2d
010fcc13 2e323128 0x20352e30
010fcc17 4d202938 0x2e323128
010fcc1b 37202c42 0x4d202938
010fcc1f 2f20332e 0x37202c42
010fcc23 302e3020 0x2f20332e
010fcc27 20736d20 0x302e3020
010fcc2b 76612820 0x20736d20
010fcc2f 67617265 setupapi!ext-ms-win-security-slc-l1-1-0_NULL_THUNK_DATA_DLB+0x4abc
010fcc33 756d2065 0x67617265
010fcc4f 3330302e wintrust!RegCreateHKCUKeyExU+0x12
010fcc6f 206e6920 0x3330302e
010fcc73 20646c6f 0x206e6920
010fcc77 63617073 0x20646c6f
010fcc7b 65722065 0x63617073
010fcc7f 73657571 0x65722065
010fcc83 0a646574 0x73657571
010fcc87 3236385b 0xa646574
010fcc8b 33303a38 0x3236385b
010fcc8f 46363332 0x33303a38
010fcc93 205d3041 0x46363332
010fcc97 37313231 0x205d3041
010fcc9b 36373632 0x37313231
010fcc9f 6d203239 0x36373632
010fcca3 4d203a73 0x6d203239
010fcca7 2d6b7261 0x4d203a73
010fccab 65657773 0x2d6b7261
010fccaf 31312070 0x65657773
010fccb3 2820302e 0x31312070
010fccb7 382e3231 0x2820302e
010fccbb 3e2d2029 0x382e3231
010fccbf 2e303120 0x3e2d2029
010fccc3 31282035 0x2e303120
010fccc7 29382e32 0x31282035
010fcccb 2c424d20 0x29382e32
010fcccf 352e3720 0x2c424d20
010fccd3 30202f20 0x352e3720
010fccd7 6d20302e 0x30202f20
010fccdb 28202073 0x6d20302e
010fccdf 72657661 0x28202073
010fcce3 20656761 0x72657661
010fcce7 3d20756d 0x20656761
010fcceb 302e3120 0x3d20756d
010fccef 202c3030 0x302e3120
010fccf3 72727563 0x202c3030
010fccf7 20746e65 0x72727563
010fccfb 3d20756d 0x20746e65
010fccff 302e3120 0x3d20756d
010fcd03 20293030 0x302e3120
010fcd07 20776f6c 0x20293030
010fcd0b 6f6d656d 0x20776f6c
010fcd0f 6e207972 0x6f6d656d
010fcd13 6669746f 0x6e207972
010fcd17 74616369 0x6669746f
010fcd1b 206e6f69 0x74616369
010fcd1f 69204347 0x206e6f69
010fcd23 6c6f206e 0x69204347
010fcd27 70732064 0x6c6f206e
010fcd2b 20656361 0x70732064
010fcd2f 75716572 0x20656361
010fcd93 67617265 user32!AnimateBlend+0x18e
010fcdab 756d2074 0x67617265
010fcdc7 63696669 wintrust!RegCreateHKCUKeyExU+0x21
010fcde7 0a646574 0x63696669
010fcdeb 00000000 0xa646574