Analyzed 9 dump

Top 1: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
003ce9d4 6eb24501 0x2d124c11
003ce9f0 6eb455ea node+0x1084501
003cea0c 6eb18046 node+0x10a55ea
003cea34 6eafab9b node+0x1078046
003cea60 6e6e44bc node+0x105ab9b
003ceae8 6e6e4913 node+0xc444bc
003ceaf4 00d91228 node+0xc44913
003ceaf8 00000000 0xd91228

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ecf18 6648dc08 node+0x2a2f20b
002ed217 203a736d node+0xb2dc08
002ed21b 6b72614d 0x203a736d
002ed21f 6577732d 0x6b72614d
002ed223 31207065 0x6577732d
002ed227 20352e30 0x31207065
002ed22b 2e323128 0x20352e30
002ed22f 2d202936 0x2e323128
002ed233 3031203e 0x2d202936
002ed237 2820352e 0x3031203e
002ed23b 382e3231 0x2820352e
002ed23f 424d2029 0x382e3231
002ed243 3931202c 0x424d2029
002ed247 2f20332e 0x3931202c
002ed24b 302e3020 0x2f20332e
002ed24f 20736d20 0x302e3020
002ed253 76612820 0x20736d20
002ed257 67617265 shell32!__dyn_tls_init_callback  (shell32+0x8d2820)
002ed25b 756d2065 node+0x1cb7265
002ed25f 30203d20 wininet!__dyn_tls_init_callback  (wininet+0xc2065)
002ed263 3939392e 0x30203d20
002ed267 7563202c 0x3939392e
002ed293 4347206e wininet!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x46
002ed29b 20646c6f 0x4347206e
002ed29f 63617073 0x20646c6f
002ed2a3 65722065 0x63617073
002ed2a7 73657571 0x65722065
002ed2ab 0a646574 0x73657571
002ed2af 3236325b 0xa646574
002ed2b3 30303a30 0x3236325b
002ed2b7 38453042 0x30303a30
002ed2bb 205d3836 0x38453042
002ed2bf 37363334 0x205d3836
002ed2c3 33333237 0x37363334
002ed2c7 736d2039 0x33333237
002ed2cb 614d203a 0x736d2039
002ed2cf 732d6b72 0x614d203a
002ed2d3 70656577 0x732d6b72
002ed2d7 2e313120 0x70656577
002ed2db 31282031 0x2e313120
002ed2df 29382e32 0x31282031
002ed2e3 203e2d20 0x29382e32
002ed2e7 352e3031 0x203e2d20
002ed2eb 32312820 0x352e3031
002ed2ef 2029382e 0x32312820
002ed2f3 202c424d 0x2029382e
002ed2f7 342e3331 0x202c424d
002ed2fb 30202f20 0x342e3331
002ed2ff 6d20302e 0x30202f20
002ed303 28202073 0x6d20302e
002ed307 72657661 0x28202073
002ed30b 20656761 0x72657661
002ed30f 3d20756d 0x20656761
002ed313 302e3120 0x3d20756d
002ed317 202c3030 0x302e3120
002ed31b 72727563 0x202c3030
002ed31f 20746e65 0x72727563
002ed323 3d20756d 0x20746e65
002ed327 302e3120 0x3d20756d
002ed32b 20293030 0x302e3120
002ed32f 20776f6c 0x20293030
002ed333 6f6d656d 0x20776f6c
002ed337 6e207972 0x6f6d656d
002ed33b 6669746f 0x6e207972
002ed33f 74616369 node+0xd3746f
002ed343 206e6f69 0x74616369
002ed347 69204347 0x206e6f69
002ed34b 6c6f206e node+0x38a4347
002ed34f 70732064 0x6c6f206e
002ed53b 00000000 comctl32!PageChange+0x196

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00d3cb38 58e4dc08 node+0x2a2f20b
00d3ce37 203a736d node+0xb2dc08
00d3ce3b 6b72614d 0x203a736d
00d3ce3f 6577732d 0x6b72614d
00d3ce43 31207065 0x6577732d
00d3ce47 20352e30 0x31207065
00d3ce4b 2e323128 0x20352e30
00d3ce4f 2d202936 0x2e323128
00d3ce53 3031203e 0x2d202936
00d3ce57 2820352e 0x3031203e
00d3ce5b 362e3231 0x2820352e
00d3ce5f 424d2029 0x362e3231
00d3ce63 3233202c 0x424d2029
00d3ce67 2f20302e 0x3233202c
00d3ce6b 302e3020 0x2f20302e
00d3ce6f 20736d20 0x302e3020
00d3ce73 76612820 0x20736d20
00d3ce77 67617265 gdi32!`string'
00d3ce7b 756d2065 0x67617265
00d3cf03 203e2d20 crypt32!CertDiagWriteX509ObjectBlobToFile+0x75
00d3cf0b 32312820 0x203e2d20
00d3cf0f 2029362e 0x32312820
00d3cf13 202c424d 0x2029362e
00d3cf17 382e3838 0x202c424d
00d3cf1b 30202f20 0x382e3838
00d3cf1f 6d20302e 0x30202f20
00d3cf23 28202073 0x6d20302e
00d3cf27 72657661 0x28202073
00d3cf2f 3d20756d directxdatabasehelper!SdbpCheckSdbCapability+0x41
00d3cf4f 20776f6c 0x3d20756d
00d3cf53 6f6d656d 0x20776f6c
00d3cf57 6e207972 0x6f6d656d
00d3cf5b 6669746f 0x6e207972
00d3cf5f 74616369 0x6669746f
00d3cf63 206e6f69 windows_storage!_IsKeyWRPProtected+0xfc
00d3cf67 69204347 0x206e6f69
00d3cf6b 6c6f206e 0x69204347
00d3cf6f 70732064 0x6c6f206e
00d3cf73 20656361 0x70732064
00d3cf77 75716572 0x20656361
00d3cf83 3a323530 crypt32!ASN1Enc_X942DhOtherInfo+0x92
00d3cf93 38343035 0x3a323530
00d3cf97 20353030 0x38343035
00d3cf9b 203a736d 0x20353030
00d3cf9f 6b72614d 0x203a736d
00d3cfa3 6577732d 0x6b72614d
00d3cfa7 31207065 0x6577732d
00d3cfab 20352e30 0x31207065
00d3cfaf 2e323128 0x20352e30
00d3cfb3 2d202936 0x2e323128
00d3cfb7 3031203e 0x2d202936
00d3cfbb 2820352e 0x3031203e
00d3cfbf 362e3231 0x2820352e
00d3cfc3 424d2029 0x362e3231
00d3cfc7 3138202c 0x424d2029
00d3cfcb 2f20352e 0x3138202c
00d3cfcf 302e3020 0x2f20352e
00d3cfd3 20736d20 0x302e3020
00d3cfd7 76612820 0x20736d20
00d3cfdb 67617265 gdi32!`string'
00d3cfdf 756d2065 0x67617265
00d3d067 00000000 crypt32!CertDiagWriteX509ObjectBlobToFile+0x75

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0049cf50 6901dc08 node+0x2a2f20b
0049d24f 203a736d node+0xb2dc08
0049d253 6b72614d 0x203a736d
0049d257 6577732d node+0x323614d
0049d25b 31207065 0x6577732d
0049d25f 20352e30 0x31207065
0049d263 2e323128 0x20352e30
0049d267 2d202936 0x2e323128
0049d26b 3031203e 0x2d202936
0049d26f 2820352e 0x3031203e
0049d273 362e3231 0x2820352e
0049d277 424d2029 0x362e3231
0049d27b 3132202c 0x424d2029
0049d27f 2f20382e 0x3132202c
0049d283 302e3020 0x2f20382e
0049d287 20736d20 0x302e3020
0049d28b 76612820 0x20736d20
0049d28f 67617265 sechost!SC_MAX_TRIGGER_DATA_SIZE+0x1224
0049d293 756d2065 0x67617265
0049d2f7 38353734 shell32!CreateBitmapFromIcon+0x8d
0049d30f 2e313120 0x38353734
0049d313 31282030 0x2e313120
0049d317 29362e32 0x31282030
0049d31b 203e2d20 0x29362e32
0049d31f 352e3031 0x203e2d20
0049d323 32312820 0x352e3031
0049d327 2029362e 0x32312820
0049d32b 202c424d 0x2029362e
0049d32f 332e3231 0x202c424d
0049d333 30202f20 0x332e3231
0049d337 6d20302e 0x30202f20
0049d33b 28202073 0x6d20302e
0049d33f 72657661 0x28202073
0049d343 20656761 0x72657661
0049d347 3d20756d 0x20656761
0049d34b 302e3120 0x3d20756d
0049d34f 202c3030 0x302e3120
0049d353 72727563 0x202c3030
0049d357 20746e65 comctl32!CLVHeaderControlManager::ConstrainColWidth+0xc
0049d363 20293030 0x20746e65
0049d367 20776f6c 0x20293030
0049d36b 6f6d656d 0x20776f6c
0049d36f 6e207972 0x6f6d656d
0049d373 6669746f 0x6e207972
0049d377 74616369 0x6669746f
0049d37b 206e6f69 0x74616369
0049d37f 69204347 0x206e6f69
0049d383 6c6f206e node+0xd14347
0049d387 70732064 node+0x420206e
0049d38b 20656361 0x70732064
0049d38f 75716572 0x20656361
0049d3a7 3734205d shell32!CLayoutFolder::CompareIDs+0xdf
0049d3bb 6577732d 0x3734205d
0049d3bf 31207065 0x6577732d
0049d3c3 20352e30 0x31207065
0049d3c7 2e323128 0x20352e30
0049d3cb 2d202936 0x2e323128
0049d3cf 3031203e 0x2d202936
0049d3d3 2820352e 0x3031203e
0049d3d7 362e3231 0x2820352e
0049d3db 424d2029 0x362e3231
0049d3df 3931202c 0x424d2029
0049d3e3 2f20392e 0x3931202c
0049d3e7 302e3020 0x2f20392e
0049d3eb 20736d20 0x302e3020
0049d3ef 76612820 0x20736d20
0049d3f3 67617265 sechost!SC_MAX_TRIGGER_DATA_SIZE+0x1224
0049d3f7 756d2065 0x67617265
0049d45b 00000000 shell32!CreateBitmapFromIcon+0x8d

Top 5: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003fce68 6110dc08 node+0x2a2f20b
003fd167 6d203831 node+0xb2dc08
003fd16b 4d203a73 0x6d203831
003fd16f 2d6b7261 0x4d203a73
003fd173 65657773 0x2d6b7261
003fd177 30312070 0x65657773
003fd17b 2820322e 0x30312070
003fd17f 312e3231 0x2820322e
003fd183 3e2d2029 0x312e3231
003fd187 2e303120 0x3e2d2029
003fd18b 31282032 0x2e303120
003fd18f 29312e32 0x31282032
003fd193 2c424d20 0x29312e32
003fd197 322e3620 0x2c424d20
003fd19b 30202f20 0x322e3620
003fd19f 6d20302e 0x30202f20
003fd1a3 28202073 0x6d20302e
003fd1a7 72657661 0x28202073
003fd1ab 20656761 0x72657661
003fd1af 3d20756d 0x20656761
003fd1b3 302e3120 0x3d20756d
003fd1b7 202c3030 0x302e3120
003fd1bb 72727563 0x202c3030
003fd1bf 20746e65 0x72727563
003fd1c3 3d20756d 0x20746e65
003fd1c7 302e3020 0x3d20756d
003fd1cb 20293330 0x302e3020
003fd1cf 20776f6c 0x20293330
003fd1d3 6f6d656d 0x20776f6c
003fd1d7 6e207972 0x6f6d656d
003fd1db 6669746f 0x6e207972
003fd1df 74616369 0x6669746f
003fd1fb 65747365 ntmarta!NtProvSetAccessRightsWorkerThread+0x2b5
003fd203 3a363331 0x65747365
003fd207 45463130 0x3a363331
003fd20b 30303646 0x45463130
003fd20f 3120205d 0x30303646
003fd213 32323434 0x3120205d
003fd217 6d203335 0x32323434
003fd21b 4d203a73 0x6d203335
003fd21f 2d6b7261 0x4d203a73
003fd223 65657773 0x2d6b7261
003fd227 30312070 0x65657773
003fd22b 2820372e 0x30312070
003fd22f 312e3231 0x2820372e
003fd233 3e2d2029 0x312e3231
003fd237 2e303120 0x3e2d2029
003fd23b 31282032 0x2e303120
003fd23f 29312e32 0x31282032
003fd243 2c424d20 0x29312e32
003fd247 2e353420 0x2c424d20
003fd24b 202f2036 0x2e353420
003fd24f 20312e30 0x202f2036
003fd253 2020736d 0x20312e30
003fd257 65766128 0x2020736d
003fd25b 65676172 0x65766128
003fd25f 20756d20 0x65676172
003fd263 2e30203d 0x20756d20
003fd267 2c393939 0x2e30203d
003fd26b 72756320 0x2c393939
2c393939 891a3002 rsaenh!FIsLegalImportSymKey+0xa
2c393949 9d1802f1 0x891a3002
2c39394d 892e4d2b 0x9d1802f1
2c393951 d51a3002 0x892e4d2b
2c393955 892e4d50 0xd51a3002
2c393959 891a3002 0x892e4d50
2c39395d 411a3002 0x891a3002
2c393961 892c1360 0x411a3002
2c393965 891a3002 0x892c1360
2c393969 f91a3002 0x891a3002
2c39396d 89180213 0xf91a3002
2c393971 891a3002 0x89180213
2c393975 891a3002 0x891a3002
2c393979 891a3002 0x891a3002
2c39397d 891a3002 0x891a3002
2c393981 951a3002 0x891a3002
2c393985 891a303a 0x951a3002
2c393989 f51a3002 0x891a303a
2c39398d 9116c5d2 0xf51a3002
2c393991 891802cf 0x9116c5d2
2c393995 891a3002 0x891802cf
2c393999 a11a3002 0x891a3002
2c39399d 8917a2b4 0xa11a3002
2c3939a1 891a3002 0x8917a2b4
2c3939a5 891a3002 0x891a3002
2c3939a9 891a3002 0x891a3002
2c3939ad 891a3002 0x891a3002
2c3939b1 891a3002 0x891a3002
2c3939b5 891a3002 0x891a3002
2c3939b9 211a3002 0x891a3002
2c3939bd 893f0e6a 0x211a3002
2c3939c1 b11a3002 0x893f0e6a
2c3939c5 3516c61b 0xb11a3002
2c3939c9 893248a5 0x3516c61b
2c3939cd 6d1a3002 0x893248a5
2c3939d1 891a3040 0x6d1a3002
2c3939d5 891a3002 0x891a3040
2c3939d9 d11a3002 0x891a3002
2c3939dd c52e4ccc 0xd11a3002
2c3939e1 892e4d7d 0xc52e4ccc
2c3939e5 311a3002 0x892e4d7d
2c3939e9 891803d4 0x311a3002
2c3939ed 891a3002 0x891803d4
2c3939f1 891a3002 0x891a3002
2c3939f5 891a3002 0x891a3002
2c3939f9 f51a3002 0x891a3002
2c3939fd 89180293 0xf51a3002
2c393a01 891a3002 0x89180293
2c393a05 6d1a3002 0x891a3002
2c393a09 91180263 0x6d1a3002
2c393a0d 892e4f8a 0x91180263
2c393a11 491a3002 0x892e4f8a
2c393a15 890475e9 0x491a3002
2c393a19 3d1a3002 0x890475e9
2c393a1d 89348d9e 0x3d1a3002
2c393a21 3d1a3002 0x89348d9e
2c393a25 89180299 0x3d1a3002
2c393a29 891a3002 0x89180299
2c393a2d ed1a3002 0x891a3002
2c393a31 89223ec3 0xed1a3002
2c393a35 891a3002 0x89223ec3
2c393a39 891a3002 0x891a3002
2c393a3d 891a3002 0x891a3002
2c393a41 891a3002 0x891a3002
2c393a45 891a3002 0x891a3002
2c393a49 891a3002 0x891a3002
2c393a4d 4d1a3002 0x891a3002
2c393a51 893f0e36 0x4d1a3002
2c393a55 891a3002 0x893f0e36
2c393a59 891a3002 0x891a3002
2c393a5d 891a3002 0x891a3002
2c393a61 891a3002 0x891a3002
2c393a65 891a3002 0x891a3002
2c393a69 e91a3002 0x891a3002
2c393a6d 2518027a 0xe91a3002
2c393a71 c516c6ce 0x2518027a
2c393a75 79180322 0xc516c6ce
2c393a79 892e4c5e 0x79180322
2c393a7d 891a3002 0x892e4c5e
2c393a81 891a3002 0x891a3002
2c393a85 091a3002 0x891a3002
2c393a89 89223f1c 0x91a3002
2c393a8d 891a3002 0x89223f1c
2c393a91 891a3002 0x891a3002
2c393a95 891a3002 0x891a3002
2c393a99 891a3002 0x891a3002
2c393a9d cd1a3002 0x891a3002
2c393aa1 d5324a9a 0xcd1a3002
2c393aa5 5d16c7ef 0xd5324a9a
2c393aa9 891e8fdf 0x5d16c7ef
2c393aad 811a3002 0x891e8fdf
2c393ab1 853f0f30 0x811a3002
2c393ab5 893decdc 0x853f0f30
2c393ab9 d51a3002 0x893decdc
2c393abd 892dee78 0xd51a3002
2c393ac1 891a3002 0x892dee78
2c393ac5 891a3002 0x891a3002
2c393ac9 891a3002 0x891a3002
2c393acd c11a3002 0x891a3002
2c393ad1 893decef 0xc11a3002
2c393ad5 891a3002 0x893decef
2c393ad9 891a3002 0x891a3002
2c393add b91a3002 0x891a3002
2c393ae1 892dedf4 0xb91a3002
2c393ae5 891a3002 0x892dedf4
2c393ae9 891a3002 0x891a3002
2c393aed 211a3002 0x891a3002
2c393af1 892e4c8e 0x211a3002
2c393af5 391a3002 0x892e4c8e
2c393af9 4d3decc7 0x391a3002
2c393afd 892e4ccf 0x4d3decc7
2c393b01 891a3002 0x892e4ccf
2c393b05 891a3002 0x891a3002
2c393b09 751a3002 0x891a3002
2c393b0d 891a301e 0x751a3002
2c393b11 891a3002 0x891a301e
2c393b15 891a3002 0x891a3002
2c393b19 891a3002 0x891a3002
2c393b1d 891a3002 0x891a3002
2c393b21 891a3002 0x891a3002
2c393b25 9d1a3002 0x891a3002
2c393b29 890a6d33 0x9d1a3002
2c393b2d 191a3002 0x890a6d33
2c393b31 e116c4fc 0x191a3002
2c393b35 892ded5a 0xe116c4fc
2c393b39 411a3002 0x892ded5a
2c393b3d 892dee6d 0x411a3002
2c393b41 891a3002 0x892dee6d
2c393b45 891a3002 0x891a3002
2c393b49 c11a3002 0x891a3002
2c393b4d 5d3f0e87 0xc11a3002
2c393b51 89047605 0x5d3f0e87
2c393b55 2d1a3002 0x89047605
2c393b59 891d4113 0x2d1a3002
2c393b5d f91e8ce6 0x891d4113
2c393b61 3917a3b2 0xf91e8ce6
2c393b65 950a6e4d 0x3917a3b2
2c393b69 a5348dee 0x950a6e4d
2c393b6d 8917a272 0xa5348dee
2c393b71 891a3002 0x8917a272
2c393b75 651a3002 0x891a3002
2c393b79 8916c67a 0x651a3002
2c393b7d d91a3002 0x8916c67a
2c393b81 8903d25c 0xd91a3002
2c393b85 611a3002 0x8903d25c
2c393b89 251e8f33 node+0xbc3002
2c393b8d 89348cd7 0x251e8f33
2c393b91 051a3002 0x89348cd7
2c393b95 891a3003 0x51a3002
2c393b99 f91a3002 0x891a3003
2c393b9d 892e4c2b 0xf91a3002
2c393ba1 891a3002 0x892e4c2b
2c393ba5 411a3002 0x891a3002
2c393ba9 890a6e02 0x411a3002
2c393bad 891a3002 0x890a6e02
2c393bb1 891a3002 0x891a3002
2c393bb5 891a3002 0x891a3002
2c393bb9 051a3002 0x891a3002
2c393bbd 511a3003 0x51a3002
2c393bc1 89223dec 0x511a3003
2c393bc5 891a3002 0x89223dec
2c393bc9 251a3002 0x891a3002
2c393bcd 892decd8 0x251a3002
2c393bd1 011a3002 0x892decd8
2c393bd5 791e8d7a 0x11a3002
2c393bd9 093f0de3 0x791e8d7a
2c393bdd 891e8f7e 0x93f0de3
2c393be1 311a3002 0x891e8f7e
2c393be5 891e8fbf 0x311a3002
2c393be9 891a3002 0x891e8fbf
2c393bed 611a3002 0x891a3002
2c393bf1 892e4c17 node+0xbc3002
2c393bf5 891a3002 0x892e4c17
2c393bf9 891a3002 0x891a3002
2c393bfd 891a3002 0x891a3002
2c393c01 6d1a3002 0x891a3002
2c393c05 893f0e4f 0x6d1a3002
2c393c09 891a3002 0x893f0e4f
2c393c0d 5d1a3002 0x891a3002
2c393c11 892e4c01 0x5d1a3002
2c393c15 891a3002 0x892e4c01
2c393c19 891a3002 0x891a3002
2c393c1d 891a3002 0x891a3002
2c393c21 891a3002 0x891a3002
2c393c25 3d1a3002 0x891a3002
2c393c29 890a6d48 0x3d1a3002
2c393c2d e11a3002 0x890a6d48
2c393c31 f52e4c29 0xe11a3002
e11a3002 00000000 0xf52e4c29

Top 6: total counts = 1

ChildEBP RetAddr  
0d5af020 66690761 KERNELBASE!RaiseException+0x58
0d5af064 6664caad defrag!_CxxThrowException+0x66
0d5af080 0d5af118 defrag!std::_Xbad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
0d5af084 6664048a 0xd5af118
0d5af118 6663faec defrag!file_system::NTFS::SetFileInfo+0x7a
0d5af150 6663ad6c defrag!file_system::NTFS::RecordInfo+0x8c
0d5af270 6663afa1 defrag!file_system::ReadMFT::ReadRecordFromIndex+0x26c
0d5af438 6663f87c defrag!file_system::ReadMFT::ReadRecordFromRange+0x1e1
0d5af59c 6663e4c2 defrag!file_system::NTFS::ReadRecord+0x83c
0d5af788 66640127 defrag!file_system::NTFS::FindFiles+0x4b2
0d5af7f4 6664505a defrag!file_system::NTFS::Scan+0x177
0d5af8a4 66648faa defrag!::operator()+0x2ea
0d5af8c4 6664246a defrag!std::_LaunchPad >,std::default_delete > > > >::_Go+0x8a
0d5af8cc 6669e289 defrag!std::_Pad::_Call_func+0xa
0d5af904 74e2343d defrag!thread_start+0x58
0d5af910 76ec9732 kernel32!BaseThreadInitThunk+0xe
0d5af950 76ec9705 ntdll!__RtlUserThreadStart+0x70
0d5af968 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 1

ChildEBP RetAddr  
0020ea2c 12972d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005ec7e8 5d65dc08 node+0x2a2f20b
005ecae7 736d2038 node+0xb2dc08
005ecaeb 614d203a 0x736d2038
005ecaef 732d6b72 0x614d203a
005ecaf3 70656577 0x732d6b72
005ecaf7 2e303120 0x70656577
005ecafb 31282035 0x2e303120
005ecaff 29362e32 0x31282035
005ecb03 203e2d20 0x29362e32
005ecb07 352e3031 0x203e2d20
005ecb0b 32312820 0x352e3031
005ecb0f 2029382e 0x32312820
005ecb13 202c424d 0x2029382e
005ecb17 20352e37 0x202c424d
005ecb1b 2e30202f 0x20352e37
005ecb1f 736d2030 0x2e30202f
005ecb23 61282020 0x736d2030
005ecb27 61726576 node+0x4752020
005ecb2b 6d206567 0x61726576
005ecb2f 203d2075 0x6d206567
005ecb33 39392e30 0x203d2075
005ecb37 63202c38 0x39392e30
005ecb3b 65727275 0x63202c38
005ecb3f 6d20746e 0x65727275
005ecb43 203d2075 0x6d20746e
005ecb47 30302e30 0x203d2075
005ecb4b 6c202934 0x30302e30
005ecb4f 6d20776f UIAutomationCore!CTreeWalker::GetParentElement+0xc3f84
005ecb53 726f6d65 0x6d20776f
005ecb57 6f6e2079 urlmon!`anonymous namespace'::g_legacy  (urlmon+0x166d65)
005ecb5b 69666974 0x6f6e2079
005ecb5f 69746163 0x69666974
005ecb63 47206e6f 0x69746163
005ecb67 6e692043 0x47206e6f
005ecb6b 646c6f20 0x6e692043
005ecb6f 61707320 0x646c6f20
005ecb73 72206563 0x61707320
005ecb77 65757165 0x72206563
005ecb7b 64657473 0x65757165
005ecb7f 31375b0a 0x64657473
005ecb83 303a3030 0x31375b0a
005ecb87 39414232 0x303a3030
005ecb8b 5d383343 0x39414232
005ecb8f 35373120 node+0x853343
005ecb93 32313238 0x35373120
005ecb97 6d203933 0x32313238
005ecb9b 4d203a73 0x6d203933
005ecb9f 2d6b7261 0x4d203a73
005ecba3 65657773 0x2d6b7261
005ecba7 30312070 0x65657773
005ecbab 2820352e 0x30312070
005ecbaf 382e3231 0x2820352e
005ecbb3 3e2d2029 0x382e3231
005ecbb7 2e303120 0x3e2d2029
005ecbbb 31282035 0x2e303120
005ecbbf 29362e32 0x31282035
005ecbc3 2c424d20 0x29362e32
005ecbc7 2e303120 0x2c424d20
005ecbcb 202f2038 0x2e303120
005ecbcf 20302e30 0x202f2038
005ecbd3 2020736d 0x20302e30
005ecbd7 65766128 0x2020736d
005ecbdb 65676172 0x65766128
005ecbdf 20756d20 0x65676172
005ecbe3 2e30203d 0x20756d20
005ecbe7 2c393939 0x2e30203d
005ecbeb 72756320 0x2c393939
005ecbef 746e6572 0x72756320
005ecbf3 20756d20 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x426572)
005ecbf7 2e31203d 0x20756d20
005ecbfb 29303030 0x2e31203d
005ecbff 776f6c20 0x29303030
005ecc03 6d656d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x3a6c20)
005ecc07 2079726f 0x6d656d20
005ecc0b 69746f6e 0x2079726f
005ecc0f 61636966 0x69746f6e
005ecc13 6e6f6974 0x61636966
005ecc17 20434720 0x6e6f6974
005ecc1b 6f206e69 0x20434720
005ecc1f 7320646c 0x6f206e69
005ecc23 65636170 iertutil!`string'+0x4
005ecc27 71657220 0x65636170
005ecc2b 74736575 0x71657220
005ecc2f 5b0a6465 0x74736575
005ecc33 30303137 0x5b0a6465
005ecc37 4232303a 0x30303137
005ecc3b 33433941 0x4232303a
005ecc3f 31205d38 0x33433941
005ecc43 32383537 0x31205d38
005ecc47 36343231 0x32383537
005ecc4b 3a736d20 0x36343231
005ecc4f 72614d20 0x3a736d20
005ecc53 77732d6b urlmon!wil::details::EnabledStateManager::InvalidateFeatureStateCache+0x7
005ecc5f 32312820 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x3e2d6b)
005ecc63 2029362e 0x32312820
005ecc67 31203e2d 0x2029362e
005ecc6b 20352e30 0x31203e2d
005ecc6f 2e323128 0x20352e30
005ecc73 4d202938 0x2e323128
005ecc77 37202c42 0x4d202938
005ecc7b 2f20312e 0x37202c42
005ecc7f 302e3020 0x2f20312e
005ecc83 20736d20 0x302e3020
005ecc87 76612820 0x20736d20
005ed4cb 00000000 shell32!CSizeCategorizer::OnGetFilterCondition+0x100

Top 9: total counts = 1

ChildEBP RetAddr  
0d9df52c 0cf29d9d Safelive!MD5Update+0x44
0d9df5dc 0cf0e8fc Safelive!Utils::GetFileOriginalMd5+0x119
0d9df5f8 0cf0e33b Safelive!CFileQueryCache::_GetFileInfo+0x29
0d9df63c 0cf0ed72 Safelive!CFileQueryCache::QueryCacheFileInfo+0x145
0d9df8a0 0cf0ee13 Safelive!CacheCalcFileMD5+0x31
0d9df8b4 0cf0ee44 Safelive!CacheCalcFileMD5_ExtCombin+0x31
0d9df99c 0cf12ec0 Safelive!CacheCompareFileMD5+0x2c
0d9df9d4 0cf13018 Safelive!CLocalConfig::__GetLocalFileInfo+0xd4
0d9df9e8 0cf124dc Safelive!CLocalConfig::__GetLocalFileVersion+0x10
0d9dfa34 0cf26c22 Safelive!CLocalConfig::GetLocalVersionAndFile+0x60
0d9dfa74 0cf257cf Safelive!CUpdateClass::_IsNeedUpdateFile+0xb7
0d9dfb14 0cf25922 Safelive!CUpdateClass::_CheckSingleFile+0x64
0d9dfb4c 0cf2432d Safelive!CUpdateClass::_CheckSingleModule+0x5c
0d9dfb84 0cf2439b Safelive!CUpdateClass::CheckModuleList+0x5a
0d9dfbb0 0cf2575d Safelive!CUpdateClass::CheckProduct+0x4a
0d9dfbc0 0cf24f72 Safelive!CUpdateClass::_CheckDatVersion+0x48
0d9dfcdc 0cf276c3 Safelive!CUpdateClass::UpdateThread+0x64d
0d9dfcec 0cf49b19 Safelive!CUpdateClass::_UpdateNowThread+0x13
0d9dfd28 7551344d Safelive!thread_start+0x57
0d9dfd34 77349802 kernel32!BaseThreadInitThunk+0xe
0d9dfd74 773497d5 ntdll!__RtlUserThreadStart+0x70
0d9dfd8c 00000000 ntdll!_RtlUserThreadStart+0x1b