Analyzed 101 dump

Top 1: total counts = 4

ChildEBP RetAddr  
00f5eebc 75404731 KERNELBASE!RaiseException+0x62
00f5eeec 00000000 bcryptPrimitives!ProcessPrng+0x51

Top 2: total counts = 2

ChildEBP RetAddr  
0031ec48 6843e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0031ed28 6843e7a5 node+0x12ae87c
0031edf8 68815e14 node+0x12ae7a5
0031efd8 68814525 node+0x1685e14
0031f0dc 68813f97 node+0x1684525
0031f168 68829327 node+0x1683f97
0031f1e0 68827b14 node+0x1699327
0031f240 68843c1a node+0x1697b14
0031f268 687f42c7 node+0x16b3c1a
0031f2c8 687f4aad node+0x16642c7
0031f300 68844f1c node+0x1664aad
0031f380 68854d8e node+0x16b4f1c
00000000 00000000 node+0x16c4d8e

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0033c160 5976dc08 node+0x2a2f20b
Map C:\Windows\SysWOW64\user32.dll:
  Image region 6e000:5a400 does not fit in mapping
0033c45f 2f20352e node+0xb2dc08
0033c463 302e3020 0x2f20352e
0033c467 20736d20 0x302e3020
0033c46b 76612820 0x20736d20
0033c483 6e657272 advapi32!EtwpLookupNextBufferIndex+0x10c
0033c48b 30203d20 0x6e657272
0033c48f 3130302e 0x30203d20
0033c493 6c612029 0x3130302e
0033c497 61636f6c 0x6c612029
0033c49b 6e6f6974 0x61636f6c
0033c49f 69616620 0x6e6f6974
0033c4a3 6572756c 0x69616620
0033c4a7 325b0a20 0x6572756c
0033c4ab 3a363339 0x325b0a20
0033c4af 30313230 0x3a363339
0033c4b3 30433338 0x30313230
0033c4b7 3720205d 0x30433338
0033c4bb 39393639 0x3720205d
0033c4bf 6d203032 0x39393639
0033c4c3 53203a73 0x6d203032
0033c4c7 65766163 0x53203a73
0033c4cb 2065676e 0x65766163
0033c4cf 322e3231 0x2065676e
0033c4d3 33312820 0x322e3231
0033c4d7 2029322e 0x33312820
0033c4db 31203e2d 0x2029322e
0033c4df 20322e31 0x31203e2d
0033c4e3 2e333128 0x20322e31
0033c4e7 4d202932 0x2e333128
0033c4eb 30202c42 0x4d202932
0033c4ef 2f20332e 0x30202c42
0033c4f3 302e3020 0x2f20332e
0033c4f7 20736d20 0x302e3020
0033c4fb 76612820 0x20736d20
0033c513 6e657272 advapi32!EtwpLookupNextBufferIndex+0x10c
0033c51b 30203d20 0x6e657272
0033c51f 3130302e 0x30203d20
0033c523 6c612029 0x3130302e
0033c527 61636f6c 0x6c612029
0033c52b 6e6f6974 0x61636f6c
0033c52f 69616620 0x6e6f6974
0033c533 6572756c 0x69616620
0033c537 325b0a20 0x6572756c
0033c53b 3a363339 0x325b0a20
0033c53f 30313230 0x3a363339
0033c543 30433338 0x30313230
0033c547 3720205d 0x30433338
0033c54b 36373739 0x3720205d
0033c54f 6d203531 0x36373739
0033c553 53203a73 0x6d203531
0033c557 65766163 0x53203a73
0033c55b 2065676e 0x65766163
0033c55f 322e3231 0x2065676e
0033c563 33312820 0x322e3231
0033c567 2029322e 0x33312820
0033c56b 31203e2d 0x2029322e
0033c56f 20322e31 0x31203e2d
0033c573 2e333128 0x20322e31
0033c577 4d202934 0x2e333128
0033c57b 31202c42 0x4d202934
0033c57f 382e3136 0x31202c42
0033c583 30202f20 0x382e3136
0033c587 6d20302e 0x30202f20
0033c58b 28202073 0x6d20302e
0033c58f 72657661 0x28202073
0033c593 20656761 uxtheme!__dyn_tls_init_callback+0x5721
0033c597 3d20756d 0x20656761
0033c59b 392e3020 0x3d20756d
0033c59f 202c3034 0x392e3020
0033c5a3 72727563 0x202c3034
0033c647 6f6c6c61 GdiPlus!DpOutputOneDPathGradientSpan::DpOutputOneDPathGradientSpan+0x1b
0033c65f 00000000 0x6f6c6c61

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efeea8 5fb1d1dd node+0x128dd80
00efefe8 60c0e32a node+0x128d1dd
00efefec 00efeff8 node+0x237e32a
00efeff0 00000000 0xefeff8

Top 5: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002fbfc0 65c0dc08 node+0x2a2f20b
002fc303 756c6961 node+0xb2dc08
002fc393 756c6961 shell32!__dyn_tls_init_callback  (shell32+0x5d6961)
002fc423 756c6961 shell32!__dyn_tls_init_callback  (shell32+0x5d6961)
002fc4b3 756c6961 shell32!__dyn_tls_init_callback  (shell32+0x5d6961)
002fc4b7 0a206572 shell32!__dyn_tls_init_callback  (shell32+0x5d6961)
002fc4bb 00000000 0xa206572

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00daf278 61d7d1dd node+0x128dd80
00daf3b8 62e6e32a node+0x128d1dd
00daf3bc 00daf3c8 node+0x237e32a
00daf3c0 00000000 0xdaf3c8

Top 7: total counts = 1

0056f044 6aa0e653 ntdll!RtlQueryPerformanceCounter+0x7c
00000000 00000000 node+0x2f3e653

Top 8: total counts = 1

ChildEBP RetAddr  
0ea3f724 0ea3f7fc KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0ea3f738 0ea3f748 0xea3f7fc
0ea3f73c 19ae6068 0xea3f748
0ea3f748 00000000 0x19ae6068

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133f238 69cdd1dd node+0x128dd80
0133f378 6adce32a node+0x128d1dd
0133f37c 0133f388 node+0x237e32a
0133f380 00000000 0x133f388

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0042f368 6860d1dd node+0x128dd80
0042f4a8 696fe32a node+0x128d1dd
0042f4ac 0042f4b8 node+0x237e32a
0042f4b0 00000000 0x42f4b8

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003bc8a0 6aa0dc08 node+0x2a2f20b
003bcb9f 3a736d20 node+0xb2dc08
003bcba3 72614d20 0x3a736d20
003bcba7 77732d6b 0x72614d20
003bcdf3 00000000 ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x281

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005abcb8 6c81dc08 node+0x2a2f20b
005abfb7 74736575 node+0xb2dc08
005abfbb 5b0a6465 0x74736575
005abfbf 34343033 0x5b0a6465
005abfc3 4531303a 0x34343033
005abfc7 43333438 0x4531303a
005abfcb 20205d30 0x43333438
005abfcf 35383832 0x20205d30
005abfd3 20363437 0x35383832
005abfd7 203a736d 0x20363437
005abfdb 76616353 0x203a736d
005abfdf 65676e65 shell32!__dyn_tls_init_callback  (shell32+0x7f6353)
005abfe3 2e323120 0x65676e65
005abfe7 31282030 0x2e323120
005abfeb 29322e33 0x31282030
005abfef 203e2d20 0x29322e33
005abff3 312e3131 0x203e2d20
005abff7 33312820 0x312e3131
005abffb 2029322e 0x33312820
005abfff 202c424d 0x2029322e
005ac003 2e393331 0x202c424d
005ac007 202f2034 0x2e393331
005ac00b 20302e30 0x202f2034
005ac00f 2020736d 0x20302e30
005ac013 65766128 0x2020736d
005ac017 65676172 0x65766128
005ac01b 20756d20 0x65676172
005ac01f 2e30203d 0x20756d20
005ac023 2c383939 0x2e30203d
005ac027 72756320 0x2c383939
005ac02b 746e6572 0x72756320
005ac02f 20756d20 0x746e6572
005ac033 2e30203d 0x20756d20
005ac037 29313030 0x2e30203d
005ac03b 6c6c6120 0x29313030
005ac03f 7461636f node+0x9d6120
005ac043 206e6f69 0x7461636f
005ac047 6c696166 0x206e6f69
005ac04b 20657275 node+0x9a6166
005ac04f 30335b0a 0x20657275
005ac053 303a3434 0x30335b0a
005ac057 34384531 0x303a3434
005ac05b 5d304333 0x34384531
005ac05f 38322020 0x5d304333
005ac063 30303638 0x38322020
005ac067 736d2036 0x30303638
005ac06b 614d203a 0x736d2036
005ac06f 732d6b72 0x614d203a
005ac0bb 72756320 comctl32!CTaskDialog::SetBasicLayout+0x19f
005ac0c3 20756d20 0x72756320
005ac0c7 2e30203d 0x20756d20
005ac0cb 29363939 0x2e30203d
005ac0cf 776f6c20 0x29363939
005ac0d3 6d656d20 0x776f6c20
005ac0d7 2079726f node+0x1966d20
005ac0db 69746f6e 0x2079726f
005ac0df 61636966 0x69746f6e
005ac0e3 6e6f6974 0x61636966
005ac0e7 20434720 node+0x2a06974
005ac0eb 6f206e69 0x20434720
005ac0ef 7320646c node+0x3516e69
005ac0f3 65636170 0x7320646c
005ac0f7 71657220 0x65636170
005ac0fb 74736575 0x71657220
005ac0ff 5b0a6465 0x74736575
005ac103 34343033 0x5b0a6465
005ac107 4531303a 0x34343033
005ac10b 43333438 0x4531303a
005ac10f 20205d30 0x43333438
005ac113 36383832 0x20205d30
005ac117 20353330 0x36383832
005ac11b 203a736d 0x20353330
005ac11f 6b72614d 0x203a736d
005ac123 6577732d 0x6b72614d
005ac127 31207065 0x6577732d
005ac12b 20302e31 0x31207065
005ac12f 2e333128 0x20302e31
005ac133 2d202932 0x2e333128
005ac137 3131203e 0x2d202932
005ac13b 2820302e 0x3131203e
005ac13f 342e3331 0x2820302e
005ac143 424d2029 0x342e3331
005ac147 3932202c 0x424d2029
005ac14b 2f20302e 0x3932202c
005ac14f 302e3020 0x2f20302e
005ac153 20736d20 0x302e3020
005ac157 76612820 0x20736d20
005ac15b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x7f2820)
005ac15f 756d2065 0x67617265
005ac40b 00000000 msctf!CEnumCategories::_Init+0x23a

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002dc918 108adc08 node+0x2a2f20b
002dcc17 203a736d node+0xb2dc08
002dcc1b 6b72614d 0x203a736d
002dcc1f 6577732d 0x6b72614d
002dcc23 31207065 0x6577732d
002dcc27 20332e31 0x31207065
002dcc2b 2e333128 0x20332e31
002dcc2f 2d202934 0x2e333128
002dcc33 3131203e 0x2d202934
002dcc37 2820332e 0x3131203e
002dcc3b 342e3331 0x2820332e
002dcc3f 424d2029 0x342e3331
002dcc43 3931202c 0x424d2029
002dcc47 2f20362e 0x3931202c
002dcc4b 302e3020 0x2f20362e
002dcc4f 20736d20 0x302e3020
002dcc53 76612820 0x20736d20
002dcc57 67617265 user32!___PchSym_  (user32+0xb2820)
002dcc5b 756d2065 0x67617265
002dcc5f 30203d20 setupapi!GetVersionInfoFromImage+0x8
002dcc6f 756d2074 0x30203d20
002dccb3 30303a30 setupapi!GetVersionInfoFromImage+0x17
002dccc3 38383434 0x30303a30
002dccc7 736d2036 0x38383434
002dcccb 614d203a 0x736d2036
002dcccf 732d6b72 0x614d203a
002dccd3 70656577 0x732d6b72
002dccd7 2e323120 0x70656577
002dccdb 31282033 0x2e323120
002dccdf 29342e33 0x31282033
002dcce3 203e2d20 0x29342e33
002dcce7 342e3131 0x203e2d20
002dcceb 33312820 0x342e3131
002dccef 2029342e 0x33312820
002dccf3 202c424d 0x2029342e
002dccf7 322e3932 0x202c424d
002dccfb 30202f20 0x322e3932
002dccff 6d20302e 0x30202f20
002dcd03 28202073 0x6d20302e
002dcd07 72657661 0x28202073
002dcd0b 20656761 0x72657661
002dcd0f 3d20756d 0x20656761
002dcd13 392e3020 0x3d20756d
002dcd17 202c3939 0x392e3020
002dcd1b 72727563 0x202c3939
002dcd1f 20746e65 0x72727563
002dcd23 3d20756d 0x20746e65
002dcd27 302e3120 0x3d20756d
002dcd2b 20293030 0x302e3120
002dcd2f 20776f6c 0x20293030
002dcd33 6f6d656d 0x20776f6c
002dcd37 6e207972 0x6f6d656d
002dcd3b 6669746f 0x6e207972
002dcd3f 74616369 0x6669746f
002dcd43 206e6f69 0x74616369
002dcd47 69204347 0x206e6f69
002dcd4b 6c6f206e 0x69204347
002dcd4f 70732064 0x6c6f206e
002dcd53 20656361 0x70732064
002dcd57 75716572 0x20656361
002dcd5b 65747365 setupapi!g_bObjectMappingInitialized  (setupapi+0xc6572)
002dcd5f 345b0a64 0x65747365
002dcd63 3a303836 0x345b0a64
002dcd67 30393030 0x3a303836
002dcd6b 30443832 0x30393030
002dcd6f 3333205d 0x30443832
002dcd73 34343131 0x3333205d
002dcd77 20393938 0x34343131
002dcd7b 203a736d 0x20393938
002dcd7f 6b72614d 0x203a736d
002dcd83 6577732d 0x6b72614d
002dcd87 31207065 0x6577732d
002dcd8b 20342e31 0x31207065
002dcd8f 2e333128 0x20342e31
002dcd93 2d202934 0x2e333128
002dcd97 3131203e 0x2d202934
002dcd9b 2820332e 0x3131203e
002dcd9f 342e3331 0x2820332e
002dcda3 424d2029 0x342e3331
002dcda7 3231202c 0x424d2029
002dcdab 2f20392e 0x3231202c
002dcdaf 302e3020 0x2f20392e
002dcdb3 20736d20 0x302e3020
002dcdb7 76612820 0x20736d20
002dcdbb 67617265 user32!___PchSym_  (user32+0xb2820)
002dcdbf 756d2065 0x67617265
002dcdc3 30203d20 setupapi!GetVersionInfoFromImage+0x8
002dcdd3 756d2074 0x30203d20
002dce17 00000000 setupapi!GetVersionInfoFromImage+0x17

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034f1f4 6144d1a1 node+0x247007e
0034f23c 60660e9f node+0x247d1a1
0034f2d0 606606fa node+0x1690e9f
0034f40c 60683bfc node+0x16906fa
0034f438 606342c7 node+0x16b3bfc
0034f498 60634aad node+0x16642c7
0034f4d0 60684f1c node+0x1664aad
0034f550 60694d8e node+0x16b4f1c
00000000 00000000 node+0x16c4d8e

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032ee78 5eb0d1dd node+0x128dd80
0032efb8 5fbfe32a node+0x128d1dd
0032efbc 0032efc8 node+0x237e32a
0032efc0 00000000 0x32efc8

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0041ca00 5d22dc08 node+0x2a2f20b
0041ccff 75716572 node+0xb2dc08
0041cd27 65766163 shell32!CDestinationList::_EnsureAddedItemIsNotRemoved+0xf3
0041cd2f 342e3231 0x65766163
0041cd33 33312820 0x342e3231
0041cd37 2029342e 0x33312820
0041cd3b 31203e2d 0x2029342e
0041cd3f 20342e31 0x31203e2d
0041cd43 2e333128 0x20342e31
0041cd47 4d202934 0x2e333128
0041cd4b 33202c42 0x4d202934
0041cd4f 2f20312e 0x33202c42
0041cd53 302e3020 0x2f20312e
0041cd57 20736d20 0x302e3020
0041cd5b 76612820 0x20736d20
0041cd93 6572756c kernel32!BaseRegCreateMultipartKey+0x15b
0041cdbf 31312070 0x6572756c
0041cdc3 2820362e 0x31312070
0041cdc7 342e3331 0x2820362e
0041cdcb 3e2d2029 0x342e3331
0041cdcf 2e313120 0x3e2d2029
0041cdd3 31282033 0x2e313120
0041cdd7 29342e33 0x31282033
0041cddb 2c424d20 0x29342e33
0041cddf 2e313120 0x2c424d20
0041cde3 202f2032 0x2e313120
0041cde7 20302e30 0x202f2032
0041cdeb 2020736d 0x20302e30
0041cdef 65766128 0x2020736d
0041cdf3 65676172 0x65766128
0041cdf7 20756d20 0x65676172
0041cdfb 2e31203d 0x20756d20
0041cdff 2c303030 0x2e31203d
0041ce03 72756320 0x2c303030
0041ce07 746e6572 0x72756320
0041ce0b 20756d20 0x746e6572
0041ce0f 2e31203d 0x20756d20
0041ce13 29303030 0x2e31203d
0041ce17 776f6c20 0x29303030
0041ce23 69746f6e explorerframe!DirectUI::ClassInfo >::Register+0x1a
0041ce3b 65636170 0x69746f6e
0041ce3f 71657220 0x65636170
0041ce43 74736575 propsys!_IInitializePropertyStoreStubVtbl+0xa4
0041ce47 5b0a6465 sspicli!_NULL_IMPORT_DESCRIPTOR+0x2585
0041ce4b 36313432 0x5b0a6465
0041ce4f 4230303a 0x36313432
0041ce53 38334538 0x4230303a
0041ce57 33205d30 0x38334538
0041ce5b 32363135 0x33205d30
0041ce5f 20313538 0x32363135
0041ce63 203a736d 0x20313538
0041ce67 6b72614d 0x203a736d
0041ce6b 6577732d 0x6b72614d
0041ce6f 31207065 0x6577732d
0041ce73 20332e31 0x31207065
0041ce77 2e333128 0x20332e31
0041ce7b 2d202934 0x2e333128
0041ce7f 3131203e 0x2d202934
0041ce83 2820332e 0x3131203e
0041ce87 342e3331 0x2820332e
0041ce8b 424d2029 0x342e3331
0041ce8f 3331202c 0x424d2029
0041ce93 2f20382e 0x3331202c
0041ce97 302e3020 0x2f20382e
0041ce9b 20736d20 0x302e3020
0041ce9f 76612820 0x20736d20
0041ced7 63696669 kernel32!BaseRegCreateMultipartKey+0x15b
0041cf03 00000000 0x63696669

Top 17: total counts = 1

ChildEBP RetAddr  
00f5ecd4 00f5edb0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f5ece8 00f5ecf8 0xf5edb0
00f5ecec 00f5ed50 0xf5ecf8
00f5ecf8 00000000 0xf5ed50

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fed28 10c8d1dd node+0x128dd80
010fee60 11d7e32a node+0x128d1dd
010fee64 010fee70 node+0x237e32a
010fee68 00000000 0x10fee70

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003fc178 5ea0dc08 node+0x2a2f20b
003fc477 75716572 node+0xb2dc08
003fc47b 65747365 comdlg32!__dyn_tls_init_callback  (comdlg32+0x76572)
003fc47f 315b0a64 0x65747365
003fc483 3a383234 0x315b0a64
003fc487 30463130 0x3a383234
003fc48b 30414643 0x30463130
003fc48f 3820205d 0x30414643
003fc493 35323135 0x3820205d
003fc497 6d203033 0x35323135
003fc49b 53203a73 0x6d203033
003fc49f 65766163 0x53203a73
003fc4a3 2065676e 0x65766163
003fc4a7 312e3231 0x2065676e
003fc4ab 33312820 0x312e3231
003fc4af 2029342e 0x33312820
003fc4b3 31203e2d 0x2029342e
003fc4b7 20322e31 0x31203e2d
003fc4bb 2e333128 0x20322e31
003fc4bf 4d202934 0x2e333128
003fc4c3 30202c42 0x4d202934
003fc4c7 2f20372e 0x30202c42
003fc4cb 302e3020 0x2f20372e
003fc4cf 20736d20 0x302e3020
003fc4d3 76612820 0x20736d20
003fc4d7 67617265 iertutil!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<1> >::Create'::`2'::`dynamic atexit destructor for 'module''+0x1159c
003fc4db 756d2065 0x67617265
003fc4e7 7563202c comdlg32!LoadAlterBitmap+0x18
003fc4f7 3230302e clbcatq!g_pfnFree  (clbcatq+0x8202c)
003fc4fb 6c612029 0x3230302e
003fc4ff 61636f6c 0x6c612029
003fc503 6e6f6974 node+0x3756f6c
003fc507 69616620 0x6e6f6974
003fc50b 6572756c 0x69616620
003fc50f 315b0a20 0x6572756c
003fc513 3a383234 0x315b0a20
003fc517 30463130 0x3a383234
003fc51b 30414643 0x30463130
003fc51f 3820205d 0x30414643
003fc523 32323235 0x3820205d
003fc527 6d203939 0x32323235
003fc52b 4d203a73 0x6d203939
003fc52f 2d6b7261 0x4d203a73
003fc533 65657773 0x2d6b7261
003fc537 31312070 0x65657773
003fc53b 2820342e 0x31312070
003fc53f 342e3331 0x2820342e
003fc543 3e2d2029 0x342e3331
003fc547 2e313120 0x3e2d2029
003fc54b 31282031 0x2e313120
003fc54f 29342e33 0x31282031
003fc553 2c424d20 0x29342e33
003fc557 2e303120 0x2c424d20
003fc55b 202f2038 0x2e303120
003fc55f 20302e30 0x202f2038
003fc563 2020736d 0x20302e30
003fc567 65766128 0x2020736d
003fc56b 65676172 0x65766128
003fc56f 20756d20 0x65676172
003fc573 2e31203d 0x20756d20
003fc577 2c303030 0x2e31203d
003fc57b 72756320 0x2c303030
003fc57f 746e6572 0x72756320
003fc583 20756d20 0x746e6572
003fc587 2e31203d 0x20756d20
003fc58b 29303030 0x2e31203d
003fc58f 776f6c20 0x29303030
003fc5c7 4631303a urlmon!CINetHttp::GetP2PRedirectionState+0x9f
003fc5cb 41464330 0x4631303a
003fc5cf 20205d30 0x41464330
003fc5d3 32323538 0x20205d30
003fc5d7 20383133 0x32323538
003fc5db 203a736d 0x20383133
003fc5df 6b72614d 0x203a736d
003fc5e3 6577732d 0x6b72614d
003fc5e7 31207065 0x6577732d
003fc5eb 20312e31 0x31207065
003fc5ef 2e333128 0x20312e31
003fc5f3 2d202934 0x2e333128
003fc5f7 3131203e 0x2d202934
003fc5fb 2820312e 0x3131203e
003fc5ff 342e3331 0x2820312e
003fc603 424d2029 0x342e3331
003fc607 3831202c 0x424d2029
003fc60b 2f20332e 0x3831202c
003fc60f 302e3020 0x2f20332e
003fc613 20736d20 0x302e3020
003fc617 76612820 0x20736d20
003fc61b 67617265 iertutil!`Microsoft::WRL::Module<1,Microsoft::WRL::Details::DefaultModule<1> >::Create'::`2'::`dynamic atexit destructor for 'module''+0x1159c
003fc61f 756d2065 0x67617265
003fc62b 7563202c comdlg32!LoadAlterBitmap+0x18
003fc63b 3230302e clbcatq!g_pfnFree  (clbcatq+0x8202c)
003fc63f 6f6c2029 0x3230302e
003fc643 656d2077 0x6f6c2029
003fc647 79726f6d 0x656d2077
003fc64b 746f6e20 0x79726f6d
003fc64f 63696669 0x746f6e20
003fc653 6f697461 0x63696669
003fc657 4347206e 0x6f697461
003fc65b 206e6920 0x4347206e
003fc65f 20646c6f 0x206e6920
003fc663 63617073 0x20646c6f
003fc667 65722065 0x63617073
003fc66b 73657571 0x65722065
003fc66f 0a646574 0x73657571
003fc673 00000000 0xa646574

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ff298 553ad1dd node+0x128dd80
003ff3d0 5649e32a node+0x128d1dd
003ff3d4 003ff3e0 node+0x237e32a
003ff3d8 00000000 0x3ff3e0

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0038c8a0 63b6dc08 node+0x2a2f20b
0038cb9f 352e3020 node+0xb2dc08
0038cba3 30202f20 0x352e3020
0038cba7 6d20302e 0x30202f20
0038cbab 28202073 0x6d20302e
0038cbaf 72657661 0x28202073
0038cbb3 20656761 0x72657661
0038cbb7 3d20756d 0x20656761
0038cbbb 392e3020 0x3d20756d
0038cbbf 202c3639 0x392e3020
0038cbc3 72727563 0x202c3639
0038cbc7 20746e65 0x72727563
0038cbcb 3d20756d 0x20746e65
0038cbcf 302e3020 0x3d20756d
0038cbd3 20293230 0x302e3020
0038cbd7 6f6c6c61 0x20293230
0038cbdb 69746163 0x6f6c6c61
0038cbdf 66206e6f 0x69746163
0038cbe3 756c6961 node+0x31c6e6f
0038cbe7 0a206572 0x756c6961
0038cbeb 3634325b 0xa206572
0038cbef 30303a38 0x3634325b
0038cbf3 41413642 0x30303a38
0038cbf7 205d3832 0x41413642
0038cbfb 38313820 0x205d3832
0038cbff 32393030 0x38313820
0038cc03 3a736d20 0x32393030
0038cc07 61635320 0x3a736d20
0038cc0b 676e6576 0x61635320
0038cc0f 32312065 node+0x46a6576
0038cc13 2820332e 0x32312065
0038cc17 342e3331 0x2820332e
0038cc1b 3e2d2029 0x342e3331
0038cc1f 2e313120 0x3e2d2029
0038cc23 31282033 0x2e313120
0038cc27 29342e33 0x31282033
0038cc2b 2c424d20 0x29342e33
0038cc2f 322e3120 0x2c424d20
0038cc33 30202f20 0x322e3120
0038cc37 6d20302e 0x30202f20
0038cc3b 28202073 0x6d20302e
0038cc3f 72657661 0x28202073
0038cc43 20656761 0x72657661
0038cc47 3d20756d 0x20656761
0038cc4b 392e3020 0x3d20756d
0038cc4f 202c3639 0x392e3020
0038cc53 72727563 0x202c3639
0038cc57 20746e65 0x72727563
0038cc5b 3d20756d 0x20746e65
0038cc5f 302e3020 0x3d20756d
0038cc63 20293230 0x302e3020
0038cc67 6f6c6c61 0x20293230
0038cc6b 69746163 0x6f6c6c61
0038cc6f 66206e6f 0x69746163
0038cc73 756c6961 node+0x31c6e6f
0038cc77 0a206572 0x756c6961
0038cc7b 3634325b 0xa206572
0038cc7f 30303a38 0x3634325b
0038cc83 41413642 0x30303a38
0038cc87 205d3832 0x41413642
0038cc8b 38313820 0x205d3832
0038cc8f 38393737 0x38313820
0038cc93 3a736d20 0x38393737
0038cc97 61635320 0x3a736d20
0038cc9b 676e6576 0x61635320
0038cc9f 32312065 node+0x46a6576
0038cca3 2820332e 0x32312065
0038cca7 342e3331 0x2820332e
0038ccab 3e2d2029 0x342e3331
0038ccaf 2e313120 0x3e2d2029
0038ccb3 31282033 0x2e313120
0038ccb7 29342e33 0x31282033
0038ccbb 2c424d20 0x29342e33
0038ccbf 352e3020 0x2c424d20
0038ccc3 30202f20 0x352e3020
0038ccc7 6d20302e 0x30202f20
0038cccb 28202073 0x6d20302e
0038cccf 72657661 0x28202073
0038ccd3 20656761 0x72657661
0038ccd7 3d20756d 0x20656761
0038ccdb 392e3020 0x3d20756d
0038ccdf 202c3639 0x392e3020
0038cce3 72727563 0x202c3639
0038cce7 20746e65 0x72727563
0038cceb 3d20756d 0x20746e65
0038ccef 302e3020 0x3d20756d
0038ccf3 20293230 0x302e3020
0038ccf7 6f6c6c61 0x20293230
0038ccfb 69746163 0x6f6c6c61
0038ccff 66206e6f 0x69746163
0038cd03 756c6961 node+0x31c6e6f
0038cd07 0a206572 0x756c6961
0038cd0b 3634325b 0xa206572
0038cd0f 30303a38 0x3634325b
0038cd13 41413642 0x30303a38
0038cd17 205d3832 0x41413642
0038cd1b 39313820 0x205d3832
0038cd1f 35393835 0x39313820
0038cd23 3a736d20 0x35393835
0038cd27 61635320 0x3a736d20
0038cd2b 676e6576 0x61635320
0038cd2f 32312065 node+0x46a6576
0038cd33 2820332e 0x32312065
0038cd37 342e3331 0x2820332e
0038cd3b 3e2d2029 0x342e3331
0038cd3f 2e313120 0x3e2d2029
0038cd43 31282033 0x2e313120
0038cd47 29342e33 0x31282033
0038cd4b 2c424d20 0x29342e33
0038cd4f 362e3020 0x2c424d20
0038cd53 30202f20 0x362e3020
0038cd57 6d20302e 0x30202f20
0038cd5b 28202073 0x6d20302e
0038cd5f 72657661 0x28202073
0038cd63 20656761 0x72657661
0038cd67 3d20756d 0x20656761
0038cd6b 392e3020 0x3d20756d
0038cd6f 202c3639 0x392e3020
0038cd73 72727563 0x202c3639
0038cd77 20746e65 0x72727563
0038cd7b 3d20756d 0x20746e65
0038cd7f 302e3020 0x3d20756d
0038cd83 20293230 0x302e3020
0038cd87 6f6c6c61 0x20293230
0038cd8b 69746163 0x6f6c6c61
0038cd8f 66206e6f 0x69746163
0038cd93 756c6961 node+0x31c6e6f
0038cd97 0a206572 0x756c6961
0038cd9b 00000000 0xa206572

Top 22: total counts = 1

0045cddb 72756320 0x2c393939
0045cddf 746e6572 GdiPlus+0x46320
0045cdeb 29393939 duser!BaseMsgQ::xwProcessNL+0x7a
0045cdf3 6d656d20 0x29393939
0045cdf7 2079726f 0x6d656d20
0045cdfb 69746f6e 0x2079726f
0045cdff 61636966 0x69746f6e
0045ce03 6e6f6974 0x61636966
0045ce07 20434720 0x6e6f6974
0045ce0b 6f206e69 0x20434720
0045ce0f 7320646c 0x6f206e69
0045ce13 65636170 0x7320646c
0045ce17 71657220 0x65636170
0045ce1b 74736575 0x71657220
0045ce1f 5b0a6465 0x74736575
0045ce23 30383833 0x5b0a6465
0045ce27 4130303a 0x30383833
0045ce2b 39384241 0x4130303a
0045ce2f 20205d30 0x39384241
0045ce33 34323532 0x20205d30
0045ce37 20373437 0x34323532
0045ce3b 203a736d 0x20373437
0045ce3f 6b72614d 0x203a736d
0045ce43 6577732d apphelp!`string'+0x19
0045ce47 31207065 0x6577732d
0045ce4b 20302e31 0x31207065
0045ce4f 2e333128 0x20302e31
0045ce53 2d202932 0x2e333128
0045ce57 3131203e 0x2d202932
0045ce5b 2820302e 0x3131203e
0045ce5f 322e3331 0x2820302e
0045ce63 424d2029 0x322e3331
0045ce67 3532202c 0x424d2029
0045ce6b 2f20342e 0x3532202c
0045ce6f 302e3020 0x2f20342e
0045ce73 20736d20 0x302e3020
0045ce77 76612820 0x20736d20
0045cec3 63617073 iertutil!CreateUriWithFlagsIfNecessary+0xcf
0045cecf 0a646574 0x63617073
0045ced3 3838335b 0xa646574
0045ced7 30303a30 0x3838335b
0045cedb 38424141 0x30303a30
0045cedf 205d3039 0x38424141
0045cee3 36353220 0x205d3039
0045cee7 39323330 0x36353220
0045ceeb 3a736d20 0x39323330
0045ceef 61635320 0x3a736d20
0045cef3 676e6576 0x61635320
0045cef7 32312065 0x676e6576
0045cefb 2820302e 0x32312065
0045ceff 322e3331 0x2820302e
0045cf03 3e2d2029 0x322e3331
0045cf07 2e313120 0x3e2d2029
0045cf0b 31282031 0x2e313120
0045cf0f 29322e33 0x31282031
0045cf13 2c424d20 0x29322e33
0045cf17 352e3120 0x2c424d20
0045cf1b 30202f20 0x352e3120
0045cf1f 6d20302e 0x30202f20
0045cf23 28202073 0x6d20302e
0045cf27 72657661 0x28202073
0045cf2b 20656761 0x72657661
0045cf2f 3d20756d 0x20656761
0045cf33 392e3020 0x3d20756d
0045cf37 202c3939 0x392e3020
0045cf3b 72727563 0x202c3939
0045cf3f 20746e65 GdiPlus+0x17563
0045cf43 3d20756d 0x20746e65
0045cf47 302e3020 0x3d20756d
0045cf4b 20293230 0x302e3020
0045cf4f 6f6c6c61 0x20293230
0045cf53 69746163 0x6f6c6c61
0045cf57 66206e6f 0x69746163
0045cf5b 756c6961 0x66206e6f
0045cf5f 0a206572 shell32!__dyn_tls_init_callback  (shell32+0x406961)
0045cf63 00000000 0xa206572

Top 23: total counts = 1

ChildEBP RetAddr  
0019eb04 0019ebe8 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0019eb18 0019eb28 0x19ebe8
0019eb1c 0019eb88 0x19eb28
0019eb28 00000000 0x19eb88

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0078edc8 6975d1dd node+0x128dd80
0078ef00 6a84e32a node+0x128d1dd
0078ef04 0078ef10 node+0x237e32a
0078ef08 00000000 0x78ef10

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fecd8 5415d1dd node+0x128dd80
010fee10 5524e32a node+0x128d1dd
010fee14 010fee20 node+0x237e32a
010fee18 00000000 0x10fee20

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04fbfa70 6f041420 node+0xa8ff91
04fbfac4 00000000 node+0x1521420

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0038f290 646093ef node+0x19033bd
0038f2c4 6460907d node+0x15193ef
0038f2e4 64608fa6 node+0x151907d
0038f31c 64608f18 node+0x1518fa6
0038f344 64609703 node+0x1518f18
0038f380 646099b5 node+0x1519703
0038f394 6460990e node+0x15199b5
0038f3c8 64609993 node+0x151990e
0038f5f8 655fe4f5 node+0x1519993
0038f63c 655fe39b node+0x250e4f5
0038f6e0 7650630a node+0x250e39b
0038f70c 76506d4a user32!InternalCallWinProc+0x23
0038f784 765077d7 user32!UserCallWinProcCheckWow+0x109
0038f7e4 7650789a user32!DispatchMessageWorker+0x3b5
0038f7f4 6439127f user32!DispatchMessageW+0xf
0038f870 64390f9e node+0x12a127f
0038f8dc 64390acb node+0x12a0f9e
0038f91c 643a23d2 node+0x12a0acb
0038f964 643a22e2 node+0x12b23d2
0038f9a8 637bbd42 node+0x12b22e2
0038f9d0 637bd47d node+0x6cbd42
0038fa10 636fed6c node+0x6cd47d
0038fa6c 636ff379 node+0x60ed6c
0038fa90 636fea8a node+0x60f379
0038fa94 6437a300 node+0x60ea8a
0038fa98 00380000 node+0x128a300
0038fa9c 00000000 0x380000

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efee18 10b3d1dd node+0x128dd80
00efef58 11c2e32a node+0x128d1dd
00efef5c 00efef68 node+0x237e32a
00efef60 00000000 0xefef68

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00eff348 5684d1dd node+0x128dd80
00eff480 5793e32a node+0x128d1dd
00eff484 00eff490 node+0x237e32a
00eff488 00000000 0xeff490

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040de30 584e12a2 node+0x35a8be
0040de34 08e357d8 node+0x3d612a2
0040de38 0040de7c 0x8e357d8
0040de3c 00000000 0x40de7c

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001aeef8 5419d1dd node+0x128dd80
001af038 5528e32a node+0x128d1dd
001af03c 001af048 node+0x237e32a
001af040 00000000 0x1af048

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0135ed58 60cad1dd node+0x128dd80
0135ee90 61d9e32a node+0x128d1dd
0135ee94 0135eea0 node+0x237e32a
0135ee98 00000000 0x135eea0

Top 33: total counts = 1

66206f5b 77006f00 0x64006e00
66206f6b 00000000 wininet!RSetParentHandle+0x1a

Top 34: total counts = 1

ChildEBP RetAddr  
03e0f574 03e0f64c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03e0f588 03e0f598 0x3e0f64c
03e0f58c c0000017 0x3e0f598
03e0f598 00000000 0xc0000017

Top 35: total counts = 1

ChildEBP RetAddr  
0408f354 0408f42c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0408f368 0408f378 0x408f42c
0408f36c c0000017 0x408f378
0408f378 00000000 0xc0000017

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cff338 1032d1dd node+0x128dd80
00cff478 1141e32a node+0x128d1dd
00cff47c 00cff488 node+0x237e32a
00cff480 00000000 0xcff488

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b7f038 6133d1dd node+0x128dd80
00b7f178 6242e32a node+0x128d1dd
00b7f17c 00b7f188 node+0x237e32a
00b7f180 00000000 0xb7f188

Top 38: total counts = 1

ChildEBP RetAddr  
038af1d4 038af2b8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
038af1e8 038af1f8 0x38af2b8
038af1ec fc05094b 0x38af1f8
038af1f8 00000000 0xfc05094b

Top 39: total counts = 1

012fc14f 69204347 0x206e6f69
012fc153 6c6f206e ZfHookExeCtrlPlugin+0x74347
012fc157 70732064 0x6c6f206e
012fc15b 20656361 propsys!QueryFocusedSummary::SimpleTokenizer::getNextWord+0x42
012fc16f 3633303a 0x20656361
012fc173 39313732 0x3633303a
012fc177 31205d38 0x39313732
012fc17b 34353733 0x31205d38
012fc17f 30383330 0x34353733
012fc183 3a736d20 0x30383330
012fc187 72614d20 0x3a736d20
012fc18b 77732d6b 0x72614d20
012fc18f 20706565 0x77732d6b
012fc193 392e3131 0x20706565
012fc197 34312820 0x392e3131
012fc19b 2029322e 0x34312820
012fc19f 31203e2d 0x2029322e
012fc1a3 20392e31 0x31203e2d
012fc1a7 2e343128 0x20392e31
012fc1ab 4d202932 0x2e343128
012fc1af 39202c42 0x4d202932
012fc1b3 2f20312e 0x39202c42
012fc1b7 302e3020 0x2f20312e
012fc1bb 20736d20 0x302e3020
012fc1bf 76612820 0x20736d20
20736d20 00000000 combase!FeatureDevelopmentProperties::InitializeTopLevelKeyInHKLM+0x10

Top 40: total counts = 1

001ced18 65e6e6d1 ffi_bindings!FFI::FFI::FinishAsyncFFICall+0x18c
WARNING: Stack unwind information not available. Following frames may be wrong.
001ced24 65e6e653 node+0x2f3e6d1
00000000 00000000 node+0x2f3e653

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
1682f248 6960d1dd node+0x128dd80
1682f388 6a6fe32a node+0x128d1dd
1682f3ec 77399a52 node+0x237e32a
1682f450 00000000 KERNELBASE!CreateFileMappingNumaW+0x142

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002bea94 659b8046 node+0x10a3293
002beabc 6599ab9b node+0x1078046
002beae8 655844bc node+0x105ab9b
002beb70 65584913 node+0xc444bc
002beb7c 01ecdfb8 node+0xc44913
002beb80 00000000 0x1ecdfb8

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024f0f8 6236d1dd node+0x128dd80
0024f238 6345e32a node+0x128d1dd
0024f23c 0024f248 node+0x237e32a
0024f240 00000000 0x24f248

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0057f198 59ffd1dd node+0x128dd80
0057f2d0 5b0ee32a node+0x128d1dd
0057f370 75bd56c8 node+0x237e32a
0057f374 04d80c7c combase!SyncStubCall::Invoke+0x18
0057f38c 00000000 0x4d80c7c

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00fce644 10b08046 node+0x10a55ff
00fce66c 10aeab9b node+0x1078046
00fce698 106d44bc node+0x105ab9b
00fce720 106d4913 node+0xc444bc
00fce72c 03449f98 node+0xc44913
00000000 00000000 0x3449f98

Top 46: total counts = 1

0019f7f0 0020266c node+0x111f
0019f83c 75365d49 Halowp+0x266c
0019f84c 770fd03b kernel32!BaseThreadInitThunk+0x19
0019f8a4 770fcfc1 ntdll!__RtlUserThreadStart+0x2b
0019f8b4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007bf0f8 62cbd1dd node+0x128dd80
007bf238 63dae32a node+0x128d1dd
007bf23c 007bf248 node+0x237e32a
007bf240 00000000 0x7bf248

Top 48: total counts = 1

ChildEBP RetAddr  
0041f328 10c8e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0041f408 10cd89d7 node+0x12ae87c
0041f49c 10c9f812 node+0x12f89d7
0041f508 10ca89e6 node+0x12bf812
0041f5d4 10ca875e node+0x12c89e6
0041f630 10c80ec3 node+0x12c875e
0041f66c 10c80acb node+0x12a0ec3
0041f6ac 10c923d2 node+0x12a0acb
0041f6f4 10c922e2 node+0x12b23d2
0041f738 100abd42 node+0x12b22e2
0041f760 100ad47d node+0x6cbd42
0041f7a0 0ffeed6c node+0x6cd47d
0041f7fc 0ffef379 node+0x60ed6c
0041f820 0ffeea8a node+0x60f379
0041f824 10c6a300 node+0x60ea8a
0041f828 00410000 node+0x128a300
0041f82c 00000000 0x410000

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007ef1e8 10bfd1dd node+0x128dd80
007ef328 11cee32a node+0x128d1dd
007ef32c 007ef338 node+0x237e32a
007ef330 00000000 0x7ef338

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f9ef08 10c3d1dd node+0x128dd80
00f9f048 11d2e32a node+0x128d1dd
00f9f100 77536361 node+0x237e32a
00f9f108 00f9f160 ntdll!RtlAbPostRelease+0xe
00f9f11c 00000000 0xf9f160