Analyzed 23 dump

Top 1: total counts = 3

ChildEBP RetAddr  
002ded84 69ee2d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 2: total counts = 2

ChildEBP RetAddr  
0031f1e8 0065006e ModeIdentify!WndEventHelper::ParseWndEvent+0x143
WARNING: Frame IP not in any known module. Following frames may be wrong.
003d0065 28000000 0x65006e
003d0069 00000000 0x28000000

Top 3: total counts = 1

012fc3e7 65722065 0x20646c6f
012fc3eb 73657571 sppc+0x2065
012fc657 00000000 winhttp!LOGON::Logon+0x27c

Top 4: total counts = 1

ChildEBP RetAddr  
1153f4a4 501a77d0 KERNELBASE!RaiseException+0x58
1153f4e8 5019458e fse!_CxxThrowException+0x66
1153f510 50194559 fse!std::_Throw_Cpp_error+0x34
1153f51c 5018093c fse!std::_Throw_C_error+0x2c
1153f52c 5017fa76 fse!std::_Pad::_Launch+0x2c
1153f758 5018083a fse!EbService::EverythingWatcherProc+0x326
1153f778 501781ca fse!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1153f780 501b3720 fse!std::_Pad::_Call_func+0xa
1153f7b8 76c2344d fse!thread_start+0x58
1153f7c4 771a9802 kernel32!BaseThreadInitThunk+0xe
1153f804 771a97d5 ntdll!__RtlUserThreadStart+0x70
1153f81c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 1

0986f5a4 64f36025 winhttp!WinHttpGetIEProxyConfigForCurrentUser+0xbd
WARNING: Stack unwind information not available. Following frames may be wrong.
0986f764 6548d787 node+0x2c16025
0986f864 626a7c11 node+0x316d787
0986f8d4 635ec6d4 node+0x387c11
0986f994 635ebfdb node+0x12cc6d4
0986fad4 635f056f node+0x12cbfdb
0986fb20 635f03cb node+0x12d056f
0986fb48 75a4343d node+0x12d03cb
0986fb54 773b9812 kernel32!BaseThreadInitThunk+0xe
0986fb94 773b97e5 ntdll!__RtlUserThreadStart+0x70
0986fbac 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dbef08 6dc1d1dd node+0x128dd80
00dbf048 6ed0e32a node+0x128d1dd
00dbf0e8 777adcff node+0x237e32a
00dbf128 00dbf160 ntdll!RtlWow64GetProcessMachines+0x9f
00dbf17c 00dbf1e0 0xdbf160
00dbf180 6ee1b256 0xdbf1e0
00dbf1e0 6e0629c1 node+0x248b256
00dbf23c 6cf2cf68 node+0x16d29c1
00dbf290 6e065869 node+0x59cf68
00dbf294 5b3bb9a0 node+0x16d5869
00dbf298 00dbf2b0 0x5b3bb9a0
00dbf29c 6dd08064 0xdbf2b0
00dbf2b0 00000000 node+0x1378064

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b8ee28 646ed1dd node+0x128dd80
00b8ef60 657de32a node+0x128d1dd
00b8ef64 00b8ef70 node+0x237e32a
00b8ef68 0005004c 0xb8ef70
00b8ef70 00000000 0x5004c

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001ccb88 5f47dc08 node+0x2a2f20b
001cce87 36303831 node+0xb2dc08
001cce8b 3a736d20 0x36303831
001cce8f 72614d20 0x3a736d20
001cce93 77732d6b 0x72614d20
001cce97 20706565 crypt32!_TraceLoggingMetadata+0x173
001cce9b 312e3131 0x20706565
001cce9f 32312820 0x312e3131
001ccea3 2029342e 0x32312820
001ccea7 31203e2d 0x2029342e
001cceab 20352e30 0x31203e2d
001cceaf 2e323128 0x20352e30
001cceb3 4d202934 0x2e323128
001cceb7 35202c42 0x4d202934
001ccebb 2f20322e 0x35202c42
001ccebf 302e3020 0x2f20322e
001ccec3 20736d20 0x302e3020
001ccec7 76612820 0x20736d20
001ccecb 67617265 shell32!CManageLibraryDialog::v_GetDefaultSaveLocationValue+0x10
001cced7 3030302e 0x67617265
001ccedb 7563202c 0x3030302e
001ccf6f 302e3020 wtsapi32!WTSQuerySessionInformationW+0x4fc
001ccf87 3030302e 0x302e3020
001ccf8b 7563202c 0x3030302e
001cd01f 302e3020 wtsapi32!WTSQuerySessionInformationW+0x4fc
001cd037 3030302e 0x302e3020
001cd03b 7563202c 0x3030302e
001cd0cf 00000000 wtsapi32!WTSQuerySessionInformationW+0x4fc

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ff368 5755d1dd node+0x128dd80
004ff4a0 5864e32a node+0x128d1dd
004ff4a4 004ff4b0 node+0x237e32a
004ff4a8 00000000 0x4ff4b0

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ee2d4 57353e20 node+0x21cb393
002ee2d8 10b61848 node+0x8f3e20
002ee2dc 00000000 0x10b61848

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0043eed8 6bc6d1dd node+0x128dd80
0043f010 6cd5e32a node+0x128d1dd
0043f014 0043f020 node+0x237e32a
0043f018 00635f68 0x43f020
0043f020 00000000 0x635f68

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
14c7f428 60dcd1dd node+0x128dd80
14c7f568 61ebe32a node+0x128d1dd
14c7f5d0 77b09b6c node+0x237e32a
14c7f5d4 773b289d ntdll!ZwCreateSection+0xc
14c7f634 00000000 KERNELBASE!CreateFileMappingNumaW+0xcd

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0461f860 5b75e8da node+0xc6bd50
0461f8b8 5cc393e5 node+0xcee8da
0461f904 76417d59 node+0x21c93e5
0461f914 7742b74b kernel32!BaseThreadInitThunk+0x19
0461f96c 7742b6cf ntdll!__RtlUserThreadStart+0x2b
0461f97c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0053f2a8 6bf7d1dd node+0x128dd80
0053f3e8 6d06e32a node+0x128d1dd
0053f3ec 0053f3f8 node+0x237e32a
0053f3f0 00000000 0x53f3f8

Top 15: total counts = 1

ChildEBP RetAddr  
006fee5c 74b4bbe1 KERNELBASE!RaiseException+0x62
006fee8c 00000000 bcryptPrimitives!ProcessPrng+0x51

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afefb8 61a3d1dd node+0x128dd80
00aff0f8 62b2e32a node+0x128d1dd
00aff0fc 00aff108 node+0x237e32a
00aff100 000104ac 0xaff108
00aff108 00000000 0x104ac

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b8f178 10fed1dd node+0x128dd80
00b8f2b8 120de32a node+0x128d1dd
00b8f2bc 00b8f2c8 node+0x237e32a
00b8f2c0 0006c4fc 0xb8f2c8
00b8f2c8 00000000 0x6c4fc

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004be9cc 10388046 node+0x10a55fc
004be9f4 1036ab9b node+0x1078046
004bea20 0ff544bc node+0x105ab9b
004beaa8 0ff54913 node+0xc444bc
004beab4 02022438 node+0xc44913
00000000 00000000 0x2022438

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007fca28 5f3ddc08 node+0x2a2f20b
007fcd27 203a736d node+0xb2dc08
007fcd2b 6b72614d 0x203a736d
007fcd2f 6577732d 0x6b72614d
007fcd33 31207065 0x6577732d
007fcd37 20322e30 0x31207065
007fcd3b 2e323128 0x20322e30
007fcd3f 2d202931 0x2e323128
007fcd43 3031203e 0x2d202931
007fcd47 2820322e 0x3031203e
007fcd4b 312e3231 0x2820322e
007fcd4f 424d2029 0x312e3231
007fcd53 2e35202c 0x424d2029
007fcd57 202f2036 0x2e35202c
007fcd5b 20302e30 0x202f2036
007fcd5f 2020736d 0x20302e30
007fcd63 65766128 0x2020736d
007fcd67 65676172 0x65766128
007fcd6b 20756d20 0x65676172
007fcd6f 2e31203d 0x20756d20
007fcd73 2c303030 0x2e31203d
007fcd77 72756320 0x2c303030
007fcd7b 746e6572 0x72756320
007fcd7f 20756d20 windows_storage!_TI1?AVCAtlExceptionATL+0xc902
007fcd83 2e30203d 0x20756d20
007fcd87 29343030 0x2e30203d
007fcd8b 776f6c20 0x29343030
007fcd8f 6d656d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x306c20)
007fcd93 2079726f 0x6d656d20
007fcd97 69746f6e 0x2079726f
007fcd9b 61636966 0x69746f6e
007fcd9f 6e6f6974 node+0x2d86966
007fcda3 20434720 0x6e6f6974
007fcda7 6f206e69 0x20434720
007fcdab 7320646c 0x6f206e69
007fcdaf 65636170 0x7320646c
007fcdb3 71657220 0x65636170
007fcdb7 74736575 dhcpcsvc6!ext-ms-win32-subsystem-query-l1-1-0_NULL_THUNK_DATA_DLB+0x3e4
007fcdbb 5b0a6465 windows_storage!wkscli_NULL_THUNK_DATA_DLA  (windows_storage+0x5c6575)
007fcdbf 32313031 0x5b0a6465
007fcdc3 32303a30 0x32313031
007fcdc7 39364443 0x32303a30
007fcdcb 205d3031 0x39364443
007fcdcf 34343120 0x205d3031
007fcdd3 30393932 0x34343120
007fcdd7 3a736d20 0x30393932
007fcddb 72614d20 0x3a736d20
007fcddf 77732d6b 0x72614d20
007fcde3 20706565 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x342d6b)
007fcde7 382e3031 0x20706565
007fcdeb 32312820 0x382e3031
007fcdef 2029312e 0x32312820
007fcdf3 31203e2d 0x2029312e
007fcdf7 20322e30 0x31203e2d
007fcdfb 2e323128 0x20322e30
007fcdff 4d202931 0x2e323128
007fce03 31202c42 0x4d202931
007fce07 382e3937 0x31202c42
007fce0b 30202f20 0x382e3937
007fce0f 6d20302e 0x30202f20
007fce13 28202073 0x6d20302e
007fce17 72657661 0x28202073
007fce1b 20656761 0x72657661
007fce1f 3d20756d 0x20656761
007fce23 392e3020 0x3d20756d
007fce27 202c3839 0x392e3020
007fce2b 72727563 0x202c3839
007fce2f 20746e65 0x72727563
007fce33 3d20756d 0x20746e65
007fce37 392e3020 0x3d20756d
007fce3b 20293739 0x392e3020
007fce3f 20776f6c 0x20293739
007fce43 6f6d656d 0x20776f6c
007fce47 6e207972 0x6f6d656d
007fce4b 6669746f 0x6e207972
007fce4f 74616368 0x6669746f
007fce53 206e6f69 windows_storage!AssocGetDetailsOfPropKey+0x18
007fce6b 65747365 0x206e6f69
007fce6f 315b0a64 0x65747365
007fce73 30323130 0x315b0a64
007fce77 4332303a 0x30323130
007fce7b 31393644 0x4332303a
007fce7f 20205d30 0x31393644
007fce83 33343431 0x20205d30
007fce87 20313530 0x33343431
007fce8b 203a736d 0x20313530
007fce8f 6b72614d 0x203a736d
007fce93 6577732d 0x6b72614d
007fce97 31207065 0x6577732d
007fce9b 20322e30 0x31207065
007fce9f 2e323128 0x20322e30
007fcea3 2d202931 0x2e323128
007fcea7 3031203e 0x2d202931
007fceab 2820322e 0x3031203e
007fceaf 312e3231 0x2820322e
007fceb3 424d2029 0x312e3231
007fceb7 3136202c 0x424d2029
007fcebb 2f20332e 0x3136202c
007fcebf 302e3020 0x2f20332e
007fcec3 20736d20 0x302e3020
007fcec7 76612820 0x20736d20
007fcecb 67617265 Wldap32!`string'+0x18
007fcecf 756d2065 0x67617265
007fced3 30203d20 winsta!__guard_fids_table+0x341
007fced7 3639392e 0x30203d20
007fcedb 7563202c 0x3639392e
007fcedf 6e657272 0x7563202c
007fcee3 756d2074 0x6e657272
007fcee7 30203d20 winsta!__guard_fids_table+0x350
007fceeb 3130302e 0x30203d20
007fceef 6f6c2029 0x3130302e
007fcef3 656d2077 0x6f6c2029
007fcef7 79726f6d 0x656d2077
007fcefb 746f6e20 0x79726f6d
007fceff 63696669 windows_storage!_TI1?AVCAtlExceptionATL+0x1d1b0
007fcf03 6f697461 0x63696669
007fcf07 4347206e 0x6f697461
007fcf0b 206e6920 0x4347206e
007fcf0f 20646c6f 0x206e6920
007fcf13 63617073 0x20646c6f
007fcf17 65722065 0x63617073
007fcf1b 73657571 0x65722065
007fcf1f 0a646574 0x73657571
007fcf23 00000000 0xa646574

Top 20: total counts = 1

ChildEBP RetAddr  
00fbf85c 60aa4846 KERNELBASE!RaiseException+0x62
00fbf920 75f8ac46 fse!_EH_epilog3_GS+0xb
00fbf92c 00000000 KERNELBASE!CloseHandle+0x26