Analyzed 18 dump

Top 1: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0052cd18 612cdc08 node+0x2a2f20b
0052d017 4d203a73 node+0xb2dc08
0052d01b 2d6b7261 0x4d203a73
0052d01f 65657773 0x2d6b7261
0052d023 30312070 0x65657773
0052d027 2820352e 0x30312070
0052d02b 352e3231 0x2820352e
0052d02f 3e2d2029 0x352e3231
0052d033 2e303120 0x3e2d2029
0052d037 31282035 0x2e303120
0052d03b 29382e32 0x31282035
0052d03f 2c424d20 0x29382e32
0052d043 2e383120 0x2c424d20
0052d047 202f2036 0x2e383120
0052d04b 20302e30 0x202f2036
0052d04f 2020736d 0x20302e30
0052d053 65766128 0x2020736d
0052d057 65676172 0x65766128
0052d05b 20756d20 0x65676172
0052d05f 2e30203d 0x20756d20
0052d063 2c363939 0x2e30203d
0052d067 72756320 0x2c363939
0052d06b 746e6572 0x72756320
0052d06f 20756d20 0x746e6572
0052d073 2e30203d 0x20756d20
0052d077 29343332 0x2e30203d
0052d07b 776f6c20 0x29343332
0052d07f 6d656d20 0x776f6c20
0052d083 2079726f 0x6d656d20
0052d087 69746f6e 0x2079726f
0052d08b 61636966 0x69746f6e
0052d08f 6e6f6974 node+0xe96966
0052d093 20434720 0x6e6f6974
0052d097 6f206e69 0x20434720
0052d09b 7320646c 0x6f206e69
0052d09f 65636170 0x7320646c
0052d0a3 71657220 0x65636170
0052d0a7 74736575 0x71657220
0052d0ab 5b0a6465 0x74736575
0052d0af 34363034 0x5b0a6465
0052d0b3 3032303a 0x34363034
0052d0b7 34374535 0x3032303a
0052d0bb 38205d38 0x34374535
0052d0bf 39363537 0x38205d38
0052d0c3 30333734 0x39363537
0052d0c7 3a736d20 0x30333734
0052d0cb 72614d20 0x3a736d20
0052d0cf 77732d6b 0x72614d20
0052d0d3 20706565 0x77732d6b
0052d0d7 302e3131 0x20706565
0052d0db 32312820 0x302e3131
0052d0df 2029382e 0x32312820
0052d0e3 31203e2d 0x2029382e
0052d0e7 20352e30 0x31203e2d
0052d0eb 2e323128 0x20352e30
0052d0ef 4d202935 0x2e323128
0052d0f3 37202c42 0x4d202935
0052d0f7 322e3535 0x37202c42
0052d0fb 34202f20 0x322e3535
0052d0ff 6d20372e 0x34202f20
0052d103 28202073 0x6d20372e
0052d107 72657661 0x28202073
0052d10b 20656761 0x72657661
0052d10f 3d20756d 0x20656761
0052d113 392e3020 0x3d20756d
0052d117 202c3039 0x392e3020
0052d11b 72727563 0x202c3039
0052d11f 20746e65 0x72727563
0052d123 3d20756d 0x20746e65
0052d127 392e3020 0x3d20756d
0052d12b 20293838 0x392e3020
0052d12f 20776f6c 0x20293838
0052d133 6f6d656d 0x20776f6c
0052d137 6e207972 0x6f6d656d
0052d13b 6669746f 0x6e207972
0052d13f 74616369 0x6669746f
0052d143 206e6f69 0x74616369
0052d147 69204347 0x206e6f69
0052d14b 6c6f206e 0x69204347
0052d14f 70732064 0x6c6f206e
0052d153 20656361 0x70732064
0052d157 75716572 0x20656361
0052d15b 65747365 setupapi!`string'+0x16
0052d15f 345b0a64 0x65747365
0052d163 3a343630 0x345b0a64
0052d167 35303230 0x3a343630
0052d16b 38343745 0x35303230
0052d16f 3738205d 0x38343745
0052d173 34393635 0x3738205d
0052d177 20313637 0x34393635
0052d17b 203a736d 0x20313637
0052d17f 6b72614d 0x203a736d
0052d183 6577732d 0x6b72614d
0052d187 31207065 0x6577732d
0052d18b 20352e30 0x31207065
0052d18f 2e323128 0x20352e30
0052d193 2d202935 0x2e323128
0052d197 3031203e 0x2d202935
0052d19b 2820352e 0x3031203e
0052d19f 382e3231 0x2820352e
0052d1a3 424d2029 0x382e3231
0052d1a7 3532202c 0x424d2029
0052d1ab 2f20332e 0x3532202c
0052d1af 302e3020 0x2f20332e
0052d1b3 20736d20 0x302e3020
0052d1b7 76612820 0x20736d20
0052d1bb 67617265 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xd2820)
0052d1bf 756d2065 0x67617265
0052d1ff 20646c6f setupapi!pSetupRestoreThreadPrivileges+0x118
0052d207 65722065 0x20646c6f
0052d20b 73657571 0x65722065
0052d20f 0a646574 0x73657571
0052d213 00000000 0xa646574

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0033cb90 6a1ddc08 node+0x2a2f20b
0033ce8f 3a736d20 node+0xb2dc08
0033ce93 72614d20 0x3a736d20
0033ce97 77732d6b 0x72614d20
0033ce9b 20706565 0x77732d6b
0033ce9f 342e3031 0x20706565
0033cea3 32312820 0x342e3031
0033cea7 2029352e 0x32312820
0033ceab 31203e2d 0x2029352e
0033ceaf 20342e30 0x31203e2d
0033ceb3 2e323128 0x20342e30
0033ceb7 4d202935 0x2e323128
0033cebb 32202c42 0x4d202935
0033cebf 20312e35 0x32202c42
0033cec3 2e30202f 0x20312e35
0033cec7 736d2030 0x2e30202f
0033cecb 61282020 0x736d2030
0033cecf 61726576 0x61282020
0033ced3 6d206567 0x61726576
0033ced7 203d2075 node+0x3b56567
0033cedb 39392e30 0x203d2075
0033cedf 63202c39 0x39392e30
0033cee3 65727275 0x63202c39
0033cee7 6d20746e 0x65727275
0033ceeb 203d2075 node+0x3b5746e
0033ceef 30302e30 0x203d2075
0033cef3 6c202931 0x30302e30
0033cef7 6d20776f node+0x2b52931
0033cefb 726f6d65 node+0x3b5776f
0033ceff 6f6e2079 0x726f6d65
0033cf03 69666974 0x6f6e2079
0033cf07 69746163 0x69666974
0033cf0b 47206e6f node+0x96163
0033cf0f 6e692043 0x47206e6f
0033cf13 646c6f20 0x6e692043
0033cf17 61707320 0x646c6f20
0033cf1b 72206563 0x61707320
0033cf8f 2c393939 explorerframe!CAddressBand::_AddressBandWndProc+0x287
0033cfa3 29393939 0x2c393939
0033cfa7 776f6c20 0x29393939
0033cfab 6d656d20 0x776f6c20
0033cfaf 2079726f node+0x3fa6d20
0033cfb3 69746f6e 0x2079726f
0033cfb7 61636966 node+0x96f6e
0033cfbb 6e6f6974 0x61636966
0033cfbf 20434720 0x6e6f6974
0033cfc3 6f206e69 0x20434720
0033cfc7 7320646c 0x6f206e69
0033cfe7 34205d30 MMDevAPI!CKsPartActivator::ActivateControl+0xce
0033cfff 20706565 0x34205d30
0033d003 342e3031 0x20706565
0033d007 32312820 0x342e3031
0033d00b 2029352e 0x32312820
0033d00f 31203e2d 0x2029352e
0033d013 20342e30 0x31203e2d
0033d017 2e323128 0x20342e30
0033d01b 4d202935 0x2e323128
0033d01f 38202c42 0x4d202935
0033d023 2f20352e 0x38202c42
0033d027 302e3020 0x2f20352e
0033d02b 20736d20 0x302e3020
0033d02f 76612820 0x20736d20
0033d033 67617265 imagehlp!EnumNMT::`vftable'+0x714
0033d037 756d2065 0x67617265
0033d03b 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x792065)
0033d03f 3939392e 0x30203d20
0033d043 7563202c 0x3939392e
0033d047 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x6f202c)
0033d04b 756d2074 0x6e657272
0033d04f 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x792074)
0033d053 3330302e 0x30203d20
0033d057 6f6c2029 0x3330302e
0033d05b 656d2077 0x6f6c2029
0033d05f 79726f6d 0x656d2077
0033d063 746f6e20 0x79726f6d
0033d067 63696669 0x746f6e20
0033d06b 6f697461 0x63696669
0033d06f 4347206e 0x6f697461
0033d073 206e6920 0x4347206e
0033d077 20646c6f 0x206e6920
0033d07b 63617073 0x20646c6f
0033d07f 65722065 0x63617073
0033d083 73657571 0x65722065
0033d087 0a646574 0x73657571
0033d08b 00000000 0xa646574

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fc8d0 6527dc08 node+0x2a2f20b
006fcbcf 203a736d node+0xb2dc08
006fcbd3 6b72614d 0x203a736d
006fcbd7 6577732d 0x6b72614d
006fcbdb 31207065 node+0x102732d
006fcbdf 20332e30 0x31207065
006fcbe3 2e323128 0x20332e30
006fcbe7 2d202935 0x2e323128
006fcbeb 3031203e 0x2d202935
006fcbef 2820332e 0x3031203e
006fcbf3 352e3231 0x2820332e
006fcbf7 424d2029 0x352e3231
006fcbfb 3038202c 0x424d2029
006fcbff 2f20352e 0x3038202c
006fcc03 302e3020 0x2f20352e
006fcc07 20736d20 0x302e3020
006fcc0b 76612820 0x20736d20
006fcc0f 67617265 user32!ext-ms-win-edputil-policy-l1-1-0_NULL_THUNK_DATA_DLA  (user32+0x162820)
006fcc13 756d2065 node+0x2ec7265
006fcc17 30203d20 bcryptPrimitives!rgpszChainModeNameArray+0x225
006fcc1b 3639392e 0x30203d20
006fcc1f 7563202c 0x3639392e
006fcc23 6e657272 0x7563202c
006fcc27 756d2074 0x6e657272
006fcc2b 30203d20 bcryptPrimitives!SymCryptHmacSha256Algorithm
006fcc2f 3130302e 0x30203d20
006fcc33 6f6c2029 0x3130302e
006fcc37 656d2077 0x6f6c2029
006fcc3b 79726f6d node+0xf82077
006fcc3f 746f6e20 0x79726f6d
006fcc43 63696669 0x746f6e20
006fcc47 6f697461 0x63696669
006fcc4b 4347206e 0x6f697461
006fcc4f 206e6920 0x4347206e
006fcc53 20646c6f 0x206e6920
006fcc57 63617073 0x20646c6f
006fcc5b 65722065 0x63617073
006fcc5f 73657571 node+0xfd2065
006fcc63 0a646574 0x73657571
006fcc67 3837365b 0xa646574
006fcc6b 30303a30 0x3837365b
006fcc6f 33364643 0x30303a30
006fcc73 205d3039 0x33364643
006fcc77 39303131 0x205d3039
006fcc7b 39373630 0x39303131
006fcc7f 736d2038 0x39373630
006fcc83 614d203a windows_storage!__guard_fids_table+0xfb4
006fcc87 732d6b72 0x614d203a
006fcc8b 70656577 0x732d6b72
006fcc8f 2e303120 0x70656577
006fcc93 31282038 0x2e303120
006fcc97 29352e32 0x31282038
006fcc9b 203e2d20 0x29352e32
006fcc9f 332e3031 0x203e2d20
006fcca3 32312820 0x332e3031
006fcca7 2029352e 0x32312820
006fccab 202c424d 0x2029352e
006fccaf 312e3035 0x202c424d
006fccb3 30202f20 0x312e3035
006fccb7 6d20302e 0x30202f20
006fccbb 28202073 0x6d20302e
006fccbf 72657661 0x28202073
006fccc3 20656761 0x72657661
006fccc7 3d20756d 0x20656761
006fcccb 392e3020 0x3d20756d
006fcccf 202c3839 0x392e3020
006fccd3 72727563 0x202c3839
006fccd7 20746e65 0x72727563
006fccdb 3d20756d 0x20746e65
006fccdf 392e3020 0x3d20756d
006fcce3 20293939 0x392e3020
006fcce7 20776f6c 0x20293939
006fcceb 6f6d656d 0x20776f6c
006fccef 6e207972 0x6f6d656d
006fccf3 6669746f 0x6e207972
006fccf7 74616369 node+0x1f4746f
006fccfb 206e6f69 0x74616369
006fccff 69204347 0x206e6f69
006fcd03 6c6f206e 0x69204347
006fcd07 70732064 0x6c6f206e
006fcd0b 20656361 0x70732064
006fcd0f 75716572 0x20656361
006fd54b 00000000 bcryptPrimitives!SymCryptParallelSha256AppendBlocks_ymm+0x3f0

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efcf30 609edc08 node+0x2a2f20b
00efd22f 736d2034 node+0xb2dc08
00efd233 614d203a dhcpcsvc!`string'+0x24
00efd237 732d6b72 node+0x161203a
00efd23f 2e303120 dnsapi!WPP_SF_SsDDD+0x4b
00efd257 2029352e 0x2e303120
00efd25b 202c424d 0x2029352e
00efd25f 352e3133 0x202c424d
00efd263 30202f20 0x352e3133
00efd267 6d20302e 0x30202f20
00efd26b 28202073 0x6d20302e
00efd26f 72657661 0x28202073
00efd273 20656761 0x72657661
00efd277 3d20756d 0x20656761
00efd27b 392e3020 0x3d20756d
00efd27f 202c3939 0x392e3020
00efd283 72727563 0x202c3939
00efd287 20746e65 0x72727563
00efd28b 3d20756d 0x20746e65
00efd28f 392e3020 0x3d20756d
00efd293 20293939 0x392e3020
00efd297 20776f6c 0x20293939
00efd29b 6f6d656d 0x20776f6c
00efd29f 6e207972 0x6f6d656d
00efd2a3 6669746f 0x6e207972
00efd2a7 74616369 0x6669746f
00efd2b7 70732064 windows_storage!UnadviseResultSetManager+0x1b
00efd2bb 20656361 0x70732064
00efd2bf 75716572 0x20656361
00efd2d3 38433935 wininet!AppCacheCommitUrl+0x58
00efd2ff 2e303120 0x38433935
00efd303 31282034 0x2e303120
00efd307 29352e32 0x31282034
00efd30b 2c424d20 0x29352e32
00efd30f 2e363220 0x2c424d20
00efd313 202f2033 0x2e363220
00efd317 20302e30 0x202f2033
00efd31b 2020736d 0x20302e30
00efd31f 65766128 0x2020736d
00efd323 65676172 0x65766128
00efd327 20756d20 0x65676172
00efd32b 2e30203d 0x20756d20
00efd32f 2c383939 0x2e30203d
00efd333 72756320 0x2c383939
00efd337 746e6572 propsys!_IProduceAggregateMultipleValuesProxyVtbl+0x8
72756320 727b1a70 windows_storage!CIDLTree::RemoveData+0x1d
727b1c80 cccc7280 propsys!IUnknown_AddRef_Proxy
727b1c84 cccccccc 0xcccc7280
727b1c88 cccccccc 0xcccccccc
727b1c8c 003025ff 0xcccccccc
727b1c90 cccc7280 0x3025ff
727b1c94 cccccccc 0xcccc7280
727b1c98 cccccccc 0xcccccccc
727b1c9c 003425ff 0xcccccccc
727b1ca0 e0b87280 0x3425ff
727b1ca4 e9728031 0xe0b87280
727b1ca8 fffffd56 0xe9728031
727b1cac 31e025ff 0xfffffd56
727b1cb0 d8b87280 0x31e025ff
727b1cb4 e9728031 0xd8b87280
727b1cb8 fffffd46 0xe9728031
727b1cbc 31d825ff 0xfffffd46
727b1cc0 d4b87280 0x31d825ff
727b1cc4 e9728031 0xd4b87280
727b1cc8 fffffd36 0xe9728031
727b1ccc 31d425ff 0xfffffd36
727b1cd0 cccc7280 0x31d425ff
727b1cd4 cccccccc 0xcccc7280
727b1cd8 cccccccc 0xcccccccc
727b1cdc 003825ff 0xcccccccc
727b1ce0 cccc7280 0x3825ff
727b1ce4 cccccccc 0xcccc7280
727b1ce8 cccccccc 0xcccccccc
727b1cec 004025ff 0xcccccccc
727b1cf0 d0b87280 0x4025ff
727b1cf4 e9728031 0xd0b87280
727b1cf8 fffffd06 0xe9728031
727b1cfc 31d025ff 0xfffffd06
727b1d00 ccb87280 0x31d025ff
727b1d04 e9728031 0xccb87280
727b1d08 fffffcf6 0xe9728031
727b1d0c 31cc25ff 0xfffffcf6
727b1d10 c8b87280 0x31cc25ff
727b1d14 e9728031 0xc8b87280
727b1d18 fffffce6 0xe9728031
727b1d1c 31c825ff 0xfffffce6
727b1d20 c4b87280 0x31c825ff
727b1d24 e9728031 0xc4b87280
727b1d28 fffffcd6 0xe9728031
727b1d2c 31c425ff 0xfffffcd6
727b1d30 c0b87280 0x31c425ff
727b1d34 e9728031 0xc0b87280
727b1d38 fffffcc6 0xe9728031
727b1d3c 31c025ff 0xfffffcc6
727b1d40 bcb87280 0x31c025ff
727b1d44 e9728031 0xbcb87280
727b1d48 fffffcb6 0xe9728031
727b1d4c 31bc25ff 0xfffffcb6
727b1d50 b8b87280 0x31bc25ff
727b1d54 e9728031 0xb8b87280
727b1d58 fffffca6 0xe9728031
727b1d5c 31b825ff 0xfffffca6
727b1d60 b4b87280 0x31b825ff
727b1d64 e9728031 0xb4b87280
727b1d68 fffffc96 0xe9728031
727b1d6c 31b425ff 0xfffffc96
727b1d70 98b87280 0x31b425ff
727b1d74 e9728031 0x98b87280
727b1d78 fffffc86 0xe9728031
727b1d7c 319825ff 0xfffffc86
727b1d80 88b87280 0x319825ff
727b1d84 e9728031 0x88b87280
727b1d88 fffffc76 0xe9728031
727b1d8c 318825ff 0xfffffc76
727b1d90 01b07280 0x318825ff
727b1d94 c3c033c3 0x1b07280
727b1d98 8b55ff8b 0xc3c033c3
727b1d9c 3d8351ec 0x8b55ff8b
727b1da0 727ff68c 0x3d8351ec
727b1da4 81667c01 propsys!__isa_available
727b1da8 02b4087d 0x81667c01
727b1dac 0974c000 0x2b4087d
727b1db0 b5087d81 0x974c000
727b1db4 75c00002 0xb5087d81
727b2df8 ffe32fe8 KERNELBASE!BaseCopyStream+0x335
727b2e38 8ddc4589 0xffe32fe8
727b2e3c 51500847 0x8ddc4589
727b2e40 89dc4d8d 0x51500847
727b2e44 d7e8f475 0x89dc4d8d
727b2e48 89fffff9 0xd7e8f475
727b2e4c 106aec45 0x89fffff9
727b2e50 75c0855a 0x106aec45
727b2e54 f04d8b74 KERNELBASE!BasepGetModuleHandleExParameterValidation+0x1
727b2e5c 69ebd98b 0xf04d8b74
727b2e60 00000000 0x69ebd98b

Top 5: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00ddced0 6113dc08 node+0x2a2f20b
00ddd1cf 4d203a73 node+0xb2dc08
00ddd1d3 2d6b7261 0x4d203a73
00ddd1d7 65657773 0x2d6b7261
00ddd1db 30312070 0x65657773
00ddd1df 2820342e 0x30312070
00ddd1e3 352e3231 0x2820342e
00ddd1e7 3e2d2029 0x352e3231
00ddd1eb 2e303120 0x3e2d2029
00ddd1ef 31282034 0x2e303120
00ddd1f3 29352e32 0x31282034
00ddd1f7 2c424d20 0x29352e32
00ddd1fb 382e3620 0x2c424d20
00ddd1ff 30202f20 0x382e3620
00ddd203 6d20302e 0x30202f20
00ddd207 28202073 0x6d20302e
00ddd20b 72657661 0x28202073
00ddd267 3a343031 mswsock!ConnectThread+0x21
00ddd26f 38324436 0x3a343031
00ddd273 3331205d 0x38324436
00ddd277 33303431 0x3331205d
00ddd27b 32323634 0x33303431
00ddd27f 736d2038 0x32323634
00ddd283 614d203a winhttp!websocket_NULL_THUNK_DATA_DLA  (winhttp+0xb2038)
00ddd287 732d6b72 node+0xec203a
00ddd3c7 0a646574 comctl32!CToolbar::DrawButton+0x152
00ddd3e3 00000000 0xa646574

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001fcbb8 5754dc08 node+0x2a2f20b
001fceb7 203a736d node+0xb2dc08
001fcebb 6b72614d 0x203a736d
001fcebf 6577732d 0x6b72614d
001fcec3 31207065 0x6577732d
001fcec7 20332e30 0x31207065
001fcecb 2e323128 0x20332e30
001fcecf 2d202933 0x2e323128
001fced3 3031203e 0x2d202933
001fced7 2820332e 0x3031203e
001fcedb 332e3231 0x2820332e
001fcedf 424d2029 0x332e3231
001fcee3 3432202c 0x424d2029
001fcee7 2f20372e 0x3432202c
001fceeb 302e3020 0x2f20372e
001fceef 20736d20 0x302e3020
001fcef3 76612820 0x20736d20
001fcef7 67617265 shell32!__dyn_tls_init_callback  (shell32+0x7d2820)
001fcefb 756d2065 0x67617265
001fceff 30203d20 oleaut32!$$VProc_ImageExportDirectory+0x9e5
001fcf03 3939392e 0x30203d20
001fcf07 7563202c 0x3939392e
001fcf1f 656d2077 msctf!CProperty::_SetStoreInternal+0x63
001fcf33 4347206e 0x656d2077
001fcf37 206e6920 0x4347206e
001fcf3b 20646c6f 0x206e6920
001fcf3f 63617073 0x20646c6f
001fcf43 65722065 0x63617073
001fcf47 73657571 0x65722065
001fcf4b 0a646574 0x73657571
001fcf4f 3333315b 0xa646574
001fcf53 30303a32 0x3333315b
001fcf57 46303436 0x30303a32
001fcf5b 205d3038 0x46303436
001fcf5f 36313433 0x205d3038
001fcf63 37313431 0x36313433
001fcf67 736d2030 0x37313431
001fcff3 20656361 winnsi!NsiRpcRegisterChangeNotificationEx+0x18f
001fcfff 315b0a64 0x20656361
001fd003 3a323333 0x315b0a64
001fd007 34363030 0x3a323333
001fd00b 30384630 0x34363030
001fd00f 3433205d 0x30384630
001fd013 34313631 0x3433205d
001fd017 20353931 0x34313631
001fd01b 203a736d 0x20353931
001fd01f 6b72614d 0x203a736d
001fd023 6577732d 0x6b72614d
001fd027 31207065 0x6577732d
001fd02b 20332e30 0x31207065
001fd02f 2e323128 0x20332e30
001fd033 2d202933 0x2e323128
001fd037 3031203e 0x2d202933
001fd03b 2820332e 0x3031203e
001fd03f 332e3231 0x2820332e
001fd043 424d2029 0x332e3231
001fd047 3532202c 0x424d2029
001fd04b 2f20322e 0x3532202c
001fd04f 302e3020 0x2f20322e
001fd053 20736d20 0x302e3020
001fd057 76612820 0x20736d20
001fd05b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x7d2820)
001fd05f 756d2065 0x67617265
001fd063 30203d20 oleaut32!$$VProc_ImageExportDirectory+0x9e5
001fd067 3939392e 0x30203d20
001fd06b 7563202c 0x3939392e
001fd083 656d2077 msctf!CProperty::_SetStoreInternal+0x63
001fd097 4347206e 0x656d2077
001fd09b 206e6920 0x4347206e
001fd09f 20646c6f 0x206e6920
001fd0a3 63617073 0x20646c6f
001fd0a7 65722065 0x63617073
001fd0ab 73657571 0x65722065
001fd0af 0a646574 0x73657571
001fd0b3 00000000 0xa646574

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0093ccf0 567cdc08 node+0x2a2f20b
0093cfef 3a736d20 node+0xb2dc08
0093cff3 72614d20 0x3a736d20
0093d35b 00000000 comctl32!GetCommonBitDepthForAllMonitors+0x64

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fc7c8 61f3dc08 node+0x2a2f20b
004fcac7 72614d20 node+0xb2dc08
004fcb0b 3d20756d context!store_winword+0x401
004fcb27 20293535 0x3d20756d
004fcb2b 20776f6c 0x20293535
004fcb2f 6f6d656d 0x20776f6c
004fcb33 6e207972 0x6f6d656d
004fcb37 6669746f 0x6e207972
004fcb3b 74616369 0x6669746f
004fcb3f 206e6f69 0x74616369
004fcb43 69204347 0x206e6f69
004fcb47 6c6f206e 0x69204347
004fcb4b 70732064 0x6c6f206e
004fcb6b 3633205d comctl32!CCalInfo::_FindEraStart+0x7e
004fcb77 203a736d 0x3633205d
004fcb7b 6b72614d 0x203a736d
004fcb7f 6577732d 0x6b72614d
004fcb83 31207065 node+0x436732d
004fcb87 20382e30 0x31207065
004fcb8b 2e323128 0x20382e30
004fcb8f 2d202933 0x2e323128
004fcb93 3031203e 0x2d202933
004fcb97 2820332e 0x3031203e
004fcb9b 332e3231 0x2820332e
004fcb9f 424d2029 0x332e3231
004fcba3 3832202c 0x424d2029
004fcba7 20322e39 0x3832202c
004fcbab 2e30202f 0x20322e39
004fcbaf 736d2030 0x2e30202f
004fcbb3 61282020 0x736d2030
004fcbb7 61726576 0x61282020
004fcbbb 6d206567 node+0x316576
004fcbbf 203d2075 0x6d206567
004fcbc3 36392e30 0x203d2075
004fcbc7 63202c36 0x36392e30
004fcbcb 65727275 node+0x1df2c36
004fcbcf 6d20746e node+0x4317275
004fcbd3 203d2075 0x6d20746e
004fcbd7 39392e30 0x203d2075
004fcbdb 6c202934 0x39392e30
004fcbdf 6d20776f 0x6c202934
004fcbe3 726f6d65 0x6d20776f
004fcbe7 6f6e2079 0x726f6d65
004fcbeb 69666974 0x6f6e2079
004fcbef 69746163 0x69666974
004fcbf3 47206e6f 0x69746163
004fcbf7 6e692043 0x47206e6f
004fcbfb 646c6f20 0x6e692043
004fcbff 61707320 node+0x32b6f20
004fcc03 72206563 node+0x2f7320
004fcc07 65757165 0x72206563
004fcc0b 64657473 node+0x4347165
004fcc0f 30365b0a node+0x3247473
004fcc13 303a3830 0x30365b0a
004fcc17 36333830 0x303a3830
004fcc1b 5d303539 0x36333830
004fcc1f 31363320 0x5d303539
004fcc23 33333135 0x31363320
004fcc27 6d203037 0x33333135
004fcc2b 4d203a73 0x6d203037
004fcc2f 2d6b7261 0x4d203a73
004fcc33 65657773 0x2d6b7261
004fcc37 30312070 node+0x4247773
004fcc3b 2820332e 0x30312070
004fcc3f 332e3231 0x2820332e
004fcc43 3e2d2029 0x332e3231
004fcc47 2e303120 0x3e2d2029
004fcc4b 31282033 0x2e303120
004fcc4f 29332e32 0x31282033
004fcc53 2c424d20 0x29332e32
004fcc57 31313120 0x2c424d20
004fcc5b 2f20352e 0x31313120
004fcc5f 302e3020 0x2f20352e
004fcc63 20736d20 0x302e3020
004fcc67 76612820 0x20736d20
004fcc6b 67617265 ole32!CComCat::`vftable'+0x8
004fcc6f 756d2065 0x67617265
004fcc73 30203d20 0x756d2065
004fcc77 3336392e 0x30203d20
004fcc7b 7563202c 0x3336392e
004fcc7f 6e657272 0x7563202c
004fcc83 756d2074 0x6e657272
004fcc87 30203d20 0x756d2074
004fcc8b 3030302e 0x30203d20
004fcc8f 6f6c2029 0x3030302e
004fcc93 656d2077 0x6f6c2029
004fcc97 79726f6d node+0x42c2077
004fcc9b 746f6e20 0x79726f6d
004fcc9f 63696669 0x746f6e20
004fcca3 6f697461 node+0x2286669
004fcca7 4347206e 0x6f697461
004fccab 206e6920 0x4347206e
004fccaf 20646c6f 0x206e6920
004fccb3 63617073 0x20646c6f
004fccb7 65722065 node+0x2207073
004fccbb 73657571 node+0x4312065
004fccbf 0a646574 0x73657571
004fccc3 00000000 0xa646574

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001fcf38 5e25dc08 node+0x2a2f20b
001fd237 3a736d20 node+0xb2dc08
001fd23b 72614d20 0x3a736d20
001fd28b 6e657272 srvcli!NetShareEnum+0x1a0
001fd2ab 63696669 0x6e657272
001fd2af 6f697461 0x63696669
001fd2b3 4347206e 0x6f697461
001fd2b7 206e6920 0x4347206e
001fd2bb 20646c6f 0x206e6920
001fd2bf 63617073 0x20646c6f
001fd2c3 65722065 0x63617073
001fd2c7 73657571 0x65722065
001fd2cb 0a646574 0x73657571
001fd2cf 3230315b 0xa646574
001fd2d3 303a3235 0x3230315b
001fd2d7 36393832 0x303a3235
001fd2db 5d384346 0x36393832
001fd2df 38303620 0x5d384346
001fd2e3 31323830 0x38303620
001fd2e7 6d203532 0x31323830
001fd2fb 2820302e apphelp!GetMsiPropertiesFromProcessId+0x70
001fd2ff 382e3231 0x2820302e
001fd303 3e2d2029 0x382e3231
001fd307 2e303120 0x3e2d2029
001fd30b 31282034 0x2e303120
001fd30f 29382e32 0x31282034
001fd313 2c424d20 0x29382e32
001fd317 382e3520 0x2c424d20
001fd31b 30202f20 0x382e3520
001fd31f 6d20302e 0x30202f20
001fd323 28202073 apphelp!ApphelpGetNTVDMInfo+0x9e
001fd347 302e3120 0x28202073
001fd34b 20293030 0x302e3120
001fd34f 20776f6c 0x20293030
001fd353 6f6d656d 0x20776f6c
001fd357 6e207972 0x6f6d656d
001fd35b 6669746f 0x6e207972
001fd35f 74616369 0x6669746f
001fd7c7 00000000 wininet!GetExtensibleContainersList+0x1b59

Top 10: total counts = 1

0041d10f 76612820 0x20736d20
0041d113 67617265 shell32!__dyn_tls_init_callback  (shell32+0x862820)
0041d117 756d2065 0x67617265
0041d11b 30203d20 iertutil!`string'+0x11
0041d11f 3939392e 0x30203d20
0041d123 7563202c 0x3939392e
0041d127 6e657272 iertutil!c_OmapEntries_shell32+0x424
0041d12b 756d2074 0x6e657272
0041d12f 30203d20 iertutil!`string'+0x4
0041d133 3330302e 0x30203d20
0041d137 6f6c2029 0x3330302e
0041d13b 656d2077 0x6f6c2029
0041d13f 79726f6d 0x656d2077
0041d143 746f6e20 0x79726f6d
0041d147 63696669 0x746f6e20
0041d14b 6f697461 0x63696669
0041d14f 4347206e 0x6f697461
0041d153 206e6920 0x4347206e
0041d157 20646c6f 0x206e6920
0041d15b 63617073 0x20646c6f
0041d15f 65722065 0x63617073
0041d163 73657571 0x65722065
0041d167 0a646574 0x73657571
0041d16b 00000000 0xa646574

Top 11: total counts = 1

0867f96c 6132e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0867f9d8 76cd343d node+0x2f3e6e0
0867f9e4 77769812 kernel32!BaseThreadInitThunk+0xe
0867fa24 777697e5 ntdll!__RtlUserThreadStart+0x70
0867fa3c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0044f564 5ac369ef node+0x2afe06
0044f5c8 5ac3682e node+0x9169ef
0044f600 5ac37325 node+0x91682e
0044f640 5a39afe7 node+0x917325
0044f6d0 5b5c0f9e node+0x7afe7
0044f73c 5b5c0acb node+0x12a0f9e
0044f77c 5b5d23d2 node+0x12a0acb
0044f7c4 5b5d22e2 node+0x12b23d2
0044f808 5a9ebd42 node+0x12b22e2
0044f830 5a9ed47d node+0x6cbd42
0044f870 5a92ed6c node+0x6cd47d
0044f8cc 5a92f379 node+0x60ed6c
0044f8f0 5a92ea8a node+0x60f379
0044f8f4 5b5aa300 node+0x60ea8a
0044f8f8 00440000 node+0x128a300
0044f8fc 00000000 0x440000

Top 13: total counts = 1

0035d07f 614d203a node+0xb2dc08
0035d083 732d6b72 NetBase+0xf203a
0035d087 70656577 0x732d6b72
0035d08b 2e303120 0x70656577
0035d08f 31282034 0x2e303120
0035d093 29352e32 0x31282034
0035d097 203e2d20 0x29352e32
0035d09b 342e3031 0x203e2d20
0035d09f 32312820 0x342e3031
0035d0a3 2029352e 0x32312820
0035d0a7 202c424d 0x2029352e
0035d0ab 372e3533 0x202c424d
0035d0af 30202f20 0x372e3533
0035d0b3 6d20302e 0x30202f20
0035d0b7 28202073 node+0x2a0302e
0035d0bb 72657661 0x28202073
0035d0bf 20656761 0x72657661
0035d0c3 3d20756d 0x20656761
0035d0c7 392e3020 0x3d20756d
0035d0cb 202c3939 0x392e3020
0035d0cf 72727563 0x202c3939
0035d0d3 20746e65 rsaenh!g_dwPerThreadRngTlsSlot+0xfb
0035d0d7 3d20756d 0x20746e65
0035d0db 302e3020 0x3d20756d
0035d0df 20293130 0x302e3020
0035d0e3 20776f6c 0x20293130
0035d0e7 6f6d656d 0x20776f6c
0035d0eb 6e207972 0x6f6d656d
0035d0ef 6669746f node+0x3a07972
0035d0f3 74616369 0x6669746f
0035d0f7 206e6f69 0x74616369
0035d0fb 69204347 0x206e6f69
0035d0ff 6c6f206e 0x69204347
0035d103 70732064 node+0x1ef206e
0035d107 20656361 0x70732064
0035d10b 75716572 0x20656361
0035d10f 65747365 msctf!ATL::CComQIPtr::CComQIPtr+0x21
0035d117 3a343434 0x65747365
0035d11b 36383230 0x3a343434
0035d11f 30344546 0x36383230
0035d123 3231205d 0x30344546
0035d127 37353436 0x3231205d
0035d12b 36383534 0x37353436
0035d12f 3a736d20 0x36383534
0035d133 72614d20 0x3a736d20
0035d147 2029352e bcryptprimitives!MSCryptDsaOpenProvider+0x43
0035d157 4d202935 0x2029352e
0035d15b 31202c42 0x4d202935
0035d15f 20362e35 0x31202c42
0035d163 2e30202f 0x20362e35
0035d167 736d2030 0x2e30202f
0035d16b 61282020 0x736d2030
0035d16f 61726576 0x61282020
0035d173 6d206567 defrag!out_buf+0x1682e
0035d177 203d2075 node+0x2a06567
0035d17b 39392e30 0x203d2075
0035d17f 63202c39 0x39392e30
0035d183 65727275 0x63202c39
0035d187 6d20746e 0x65727275
0035d18b 203d2075 node+0x2a0746e
0035d18f 30302e31 0x203d2075
0035d193 6c202930 0x30302e31
0035d197 6d20776f node+0x1a02930
0035d19b 726f6d65 node+0x2a0776f
0035d2df 00000000 rsaenh!SHATransformP3+0xa58

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fc970 5ceadc08 node+0x2a2f20b
004fcc6f 6d203735 node+0xb2dc08
004fcc73 4d203a73 0x6d203735
004fcc77 2d6b7261 0x4d203a73
004fcc7b 65657773 0x2d6b7261
004fcc7f 30312070 0x65657773
004fcc83 2820332e 0x30312070
004fcc87 302e3231 0x2820332e
004fcc8b 3e2d2029 0x302e3231
004fcc8f 2e303120 0x3e2d2029
004fcc93 31282033 0x2e303120
004fcd93 746f6e20 0x31282033
004fcfc7 00000000 setupapi!pResourcePickerDlgProc+0x440

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0044ca00 518edc08 node+0x2a2f20b
0044ccff 203a736d node+0xb2dc08
0044cd03 6b72614d 0x203a736d
0044cd07 6577732d 0x6b72614d
0044cd0b 31207065 0x6577732d
0044cd0f 20342e30 0x31207065
0044cd13 2e323128 0x20342e30
0044cd17 2d202933 0x2e323128
0044cd1b 3031203e 0x2d202933
0044cd1f 2820332e 0x3031203e
0044cd23 332e3231 0x2820332e
0044cd27 424d2029 0x332e3231
0044cd2b 3631202c 0x424d2029
0044cd2f 2f20342e 0x3631202c
0044cd33 302e3020 0x2f20342e
0044cd37 20736d20 0x302e3020
0044cd3b 76612820 0x20736d20
0044cd3f 67617265 comdlg32!`string'+0x8
0044cd43 756d2065 0x67617265
0044cd47 30203d20 iertutil!_tls_end  (iertutil+0x232065)
0044cd4b 3839392e 0x30203d20
0044cd4f 7563202c 0x3839392e
0044cd53 6e657272 iertutil!`string'+0xc
0044cd57 756d2074 0x6e657272
0044cd5b 30203d20 iertutil!_tls_end  (iertutil+0x232074)
0044cd5f 3130302e 0x30203d20
0044cd63 6f6c2029 0x3130302e
0044cd67 656d2077 0x6f6c2029
0044cd6b 79726f6d 0x656d2077
0044cd6f 746f6e20 0x79726f6d
0044cd73 63696669 0x746f6e20
0044cd77 6f697461 0x63696669
0044cd7b 4347206e 0x6f697461
0044cd7f 206e6920 0x4347206e
0044cd83 20646c6f 0x206e6920
0044cd87 63617073 0x20646c6f
0044cd8b 65722065 0x63617073
0044cd8f 73657571 0x65722065
0044cd93 0a646574 0x73657571
0044cd97 3833335b 0xa646574
0044cd9b 32303a30 0x3833335b
0044cd9f 45443430 0x32303a30
0044cda3 205d3044 0x45443430
0044cda7 32353231 0x205d3044
0044cdab 31363939 0x32353231
0044cdaf 736d2035 0x31363939
0044cdb3 614d203a 0x736d2035
0044cdb7 732d6b72 0x614d203a
0044cdbb 70656577 0x732d6b72
0044cdbf 2e303120 0x70656577
0044cdc3 31282038 0x2e303120
0044cdc7 29332e32 0x31282038
0044cdcb 203e2d20 0x29332e32
0044cdcf 332e3031 0x203e2d20
0044cdd3 32312820 0x332e3031
0044cdd7 2029332e 0x32312820
0044cddb 202c424d 0x2029332e
0044cddf 312e3334 0x202c424d
0044cde3 30202f20 0x312e3334
0044cde7 6d20302e 0x30202f20
0044cdeb 28202073 0x6d20302e
0044cdef 72657661 0x28202073
0044cdf3 20656761 0x72657661
0044cdf7 3d20756d 0x20656761
0044cdfb 392e3020 0x3d20756d
0044cdff 202c3939 0x392e3020
0044ce03 72727563 0x202c3939
0044ce07 20746e65 0x72727563
0044ce0b 3d20756d 0x20746e65
0044ce0f 392e3020 0x3d20756d
0044ce13 20293939 0x392e3020
0044ce17 20776f6c 0x20293939
0044ce1b 6f6d656d 0x20776f6c
0044ce1f 6e207972 0x6f6d656d
0044ce23 6669746f 0x6e207972
0044ce27 74616369 0x6669746f
0044ce2b 206e6f69 0x74616369
0044ce2f 69204347 0x206e6f69
0044ce33 6c6f206e 0x69204347
0044ce37 70732064 0x6c6f206e
0044ce3b 20656361 0x70732064
0044ce3f 75716572 0x20656361
0044ce6b 6577732d crypt32!CertRDNValueToStrA+0x38b
0044ce7b 2d202933 0x6577732d
0044ce7f 3031203e 0x2d202933
0044ce83 2820332e 0x3031203e
0044ce87 332e3231 0x2820332e
0044ce8b 424d2029 0x332e3231
0044ce8f 3831202c 0x424d2029
0044ce93 2f20312e 0x3831202c
0044ce97 302e3020 0x2f20312e
0044ce9b 20736d20 0x302e3020
0044ce9f 76612820 0x20736d20
0044cea3 67617265 comdlg32!`string'+0x8
0044cea7 756d2065 0x67617265
0044ceab 30203d20 iertutil!_tls_end  (iertutil+0x232065)
0044ceaf 3939392e 0x30203d20
0044ceb3 7563202c 0x3939392e
0044ceb7 6e657272 iertutil!`string'+0xc
0044cebb 756d2074 0x6e657272
0044cebf 30203d20 iertutil!_tls_end  (iertutil+0x232074)
0044cec3 3230302e 0x30203d20
0044cec7 6f6c2029 0x3230302e
0044cecb 656d2077 0x6f6c2029
0044cecf 79726f6d 0x656d2077
0044ced3 746f6e20 0x79726f6d
0044ced7 63696669 0x746f6e20
0044cedb 6f697461 0x63696669
0044cedf 4347206e 0x6f697461
0044cee3 206e6920 0x4347206e
0044cee7 20646c6f 0x206e6920
0044ceeb 63617073 0x20646c6f
0044ceef 65722065 0x63617073
0044cef3 73657571 0x65722065
0044cef7 0a646574 0x73657571
0044cefb 00000000 0xa646574

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0020c808 560ddc08 node+0x2a2f20b
0020cb07 203a736d node+0xb2dc08
0020cb0b 6b72614d 0x203a736d
0020cb0f 6577732d 0x6b72614d
0020cb13 31207065 0x6577732d
0020cb17 20342e30 0x31207065
0020cb1b 2e323128 0x20342e30
0020cb1f 2d202933 0x2e323128
0020cb23 3031203e 0x2d202933
0020cb27 2820342e 0x3031203e
0020cb2b 332e3231 0x2820342e
0020cb2f 424d2029 0x332e3231
0020cb33 2e37202c 0x424d2029
0020cb37 202f2036 0x2e37202c
0020cb3b 20302e30 0x202f2036
0020cb3f 2020736d 0x20302e30
0020cb43 65766128 0x2020736d
0020cb47 65676172 0x65766128
0020cb4b 20756d20 0x65676172
0020cb4f 2e30203d 0x20756d20
0020cb53 2c353839 0x2e30203d
0020cb57 72756320 0x2c353839
0020cb5b 746e6572 0x72756320
0020cbcb 32312820 GdiPlus!ArabicSimpleShape+0x109e
0020cbf7 65766128 0x32312820
0020cbfb 65676172 0x65766128
0020cbff 20756d20 0x65676172
0020cc03 2e30203d 0x20756d20
0020cc07 2c303839 0x2e30203d
0020cc0b 72756320 0x2c303839
0020cc0f 746e6572 0x72756320
0020cc7f 32312820 GdiPlus!ArabicSimpleShape+0x109e
0020ccab 67617265 0x32312820
0020ccaf 756d2065 0x67617265
0020ccb3 30203d20 comdlg32!McGenEventUnregister+0x1b
0020ccbb 7563202c 0x30203d20
0020ccbf 6e657272 ws2_32!__dyn_tls_init_callback  (ws2_32+0x3202c)
0020ccc3 756d2074 0x6e657272
0020ccc7 30203d20 comdlg32!McGenEventUnregister+0x2a
0020cccf 6f6c2029 0x30203d20
0020ccd3 656d2077 0x6f6c2029
0020ccd7 79726f6d 0x656d2077
0020ccdb 746f6e20 0x79726f6d
0020ccdf 63696669 GdiPlus!CopyStaticHebrewFSM+0x2c
0020cceb 206e6920 0x63696669
0020ccef 20646c6f 0x206e6920
0020ccf3 63617073 0x20646c6f
0020ccf7 65722065 0x63617073
0020ccfb 73657571 0x65722065
0020ccff 0a646574 0x73657571
0020cd03 00000000 0xa646574

Top 17: total counts = 1

ChildEBP RetAddr  
04e3fac4 52649812 defrag!file_system::ReadMFT::FindAttribute+0x55
04e3fadc 5264e847 defrag!file_system::ReadMFT::FindAttribute+0x12
04e3fb20 526554d0 defrag!file_system::NTFS::Init+0x187
04e3fc44 52654e4a defrag!DefragHelper::CreateFS+0x270
04e3fd00 52658faa defrag!::operator()+0xda
04e3fd20 5265246a defrag!std::_LaunchPad >,std::default_delete > > > >::_Go+0x8a
04e3fd28 526ae289 defrag!std::_Pad::_Call_func+0xa
04e3fd60 76fe7ba9 defrag!thread_start+0x58
04e3fd70 7789c3ab kernel32!BaseThreadInitThunk+0x19
04e3fdc8 7789c32f ntdll!__RtlUserThreadStart+0x2b
04e3fdd8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 18: total counts = 1

0093ce83 74616369 0x6669746f
0093ce87 206e6f69 360Base+0x56369
0093ce8b 69204347 0x206e6f69
0093ce8f 6c6f206e 0x69204347
0093ce93 70732064 0x6c6f206e
0093ce97 20656361 0x70732064
0093ce9b 75716572 0x20656361
0093ceab 4532303a shell32!CCommandStateBase::~CCommandStateBase+0x68
0093ceaf 46423542 0x4532303a
0093cfaf 76612820 0x46423542
0093cfc3 7563202c imm32!ImmGetSaveContext+0x70
0093cfc7 6e657272 shell32!CMultipleValues::`vftable'+0x5c
0093cfcb 756d2074 0x6e657272
0093d0f3 00000000 shell32!_tlgWriteTemplate::Write<_tlgWrapperByRef<8>,_tlgWrapperByVal<4>,_tlgWrapSz,_tlgWrapperByVal<4>,_tlgWrapSz,_tlgWrapperByVal<4>,_tlgWrapSz,_tlgWrapperByVal<4>,_tlgWrapSz,_tlgWrapperByVal<4>,_tlgWrapSz,_tlgWrapSz,_tlgWrapperByVal<4>,_tlgWrapSz,_tlgWrapSz >+0x73