Analyzed 5 dump

Top 1: total counts = 1

ChildEBP RetAddr  
0439f7c4 0439f89c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0439f7d8 0439f7e8 0x439f89c
0439f7dc c0000017 0x439f7e8
0439f7e8 00000000 0xc0000017

65132a6c87c4c9affd0e919b523e40e8_000.dmp

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0019ee58 62c3d1dd node+0x128dd80
0019ef98 63d2e32a node+0x128d1dd
0019f038 77a5be5f node+0x237e32a
0019f0f4 77a43c16 ntdll!RtlWow64GetProcessMachines+0x9f
0019f10c 00000000 ntdll!RtlFreeHeap+0x46

286779c9aabf9105c1180dbe691a8a36_000.dmp

Top 3: total counts = 1

ChildEBP RetAddr  
0027ea48 61dae87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0027eb20 61dae7a5 node+0x12ae87c
0027ebf0 62185e14 node+0x12ae7a5
0027edd0 62184525 node+0x1685e14
0027eed4 62183f97 node+0x1684525
0027ef60 62199327 node+0x1683f97
0027efd8 62197b14 node+0x1699327
0027f038 621b3c1a node+0x1697b14
0027f060 621642c7 node+0x16b3c1a
0027f0c0 62164aad node+0x16642c7
0027f0f8 621b4f1c node+0x1664aad
0027f178 621c4d8e node+0x16b4f1c
00000000 00000000 node+0x16c4d8e

48f81365cfeb160ce94e826e6f68c273_000.dmp

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012fc788 6c8fdc08 node+0x2a2f20b
012fca87 6d203431 node+0xb2dc08
012fca8b 4d203a73 node+0x1433431
012fca8f 2d6b7261 0x4d203a73
012fca93 65657773 0x2d6b7261
012fca97 30312070 0x65657773
012fca9b 2820332e 0x30312070
012fca9f 332e3231 0x2820332e
012fcaa3 3e2d2029 0x332e3231
012fcaa7 2e303120 0x3e2d2029
012fcaab 31282032 0x2e303120
012fcaaf 29332e32 0x31282032
012fcab3 2c424d20 0x29332e32
012fcab7 332e3820 0x2c424d20
012fcabb 30202f20 0x332e3820
012fcabf 6d20302e 0x30202f20
012fcac3 28202073 node+0x143302e
012fcac7 72657661 0x28202073
012fdb3f 00000000 urlmon!CCodeDownload::CompleteOne+0x33f

cb4b8b1c31bdb23686ab99432e911edf_000.dmp

Top 5: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001ece28 6ea5dc08 node+0x2a2f20b
001ed127 70656577 node+0xb2dc08
001ed12b 2e313120 node+0x2726577
001ed12f 31282032 0x2e313120
001ed133 29382e32 0x31282032
001ed137 203e2d20 0x29382e32
001ed13b 362e3031 0x203e2d20
001ed13f 32312820 0x362e3031
001ed143 2029382e 0x32312820
001ed147 202c424d 0x2029382e
001ed14b 39303532 0x202c424d
001ed14f 20302e37 0x39303532
001ed153 3331202f 0x20302e37
001ed157 352e3339 0x3331202f
001ed15b 20736d20 0x352e3339
001ed15f 76612820 0x20736d20
001ed163 67617265 kernel32!_NULL_IMPORT_DESCRIPTOR+0x15f0
001ed167 756d2065 0x67617265
001ed187 6f6c2029 windows_storage!IsObjectSecurelyCallableInProcess+0x80
001ed18b 656d2077 node+0x1792029
001ed18f 79726f6d 0x656d2077
001ed193 746f6e20 pcbase!COSVersionCheck::IsWow64+0x73d
001ed197 63696669 wininet!`string'+0x29f44
001ed19b 6f697461 0x63696669
001ed19f 4347206e node+0x1767461
001ed1a3 206e6920 0x4347206e
001ed1a7 20646c6f 0x206e6920
001ed1ab 63617073 0x20646c6f
001ed1af 65722065 0x63617073
001ed1b3 73657571 0x65722065
001ed1b7 0a646574 0x73657571
001ed1bb 3035365b 0xa646574
001ed1bf 32303a38 0x3035365b
001ed1c3 37304337 0x32303a38
001ed1c7 205d3838 0x37304337
001ed1cb 34363632 0x205d3838
001ed1cf 36383937 0x34363632
001ed1d3 736d2038 0x36383937
001ed1d7 614d203a winsta!WARBIRD::g_FuncAddress+0x28
001ed1db 732d6b72 0x614d203a
001ed1ef 203e2d20 mswsock!GetTypeByNameA+0x52
001ed1fb 2029382e 0x203e2d20
001ed1ff 202c424d 0x2029382e
001ed203 30333431 0x202c424d
001ed207 2f20382e 0x30333431
001ed20b 302e3020 0x2f20382e
001ed20f 20736d20 0x302e3020
001ed213 76612820 0x20736d20
001ed217 67617265 kernel32!_NULL_IMPORT_DESCRIPTOR+0x15f0
001ed21b 756d2065 0x67617265
001ed23b 6f6c2029 windows_storage!IsObjectSecurelyCallableInProcess+0x80
001ed23f 656d2077 node+0x1792029
001ed243 79726f6d 0x656d2077
001ed247 746f6e20 pcbase!COSVersionCheck::IsWow64+0x73d
001ed24b 63696669 wininet!`string'+0x29f44
001ed24f 6f697461 0x63696669
001ed253 4347206e node+0x1767461
001ed257 206e6920 0x4347206e
001ed25b 20646c6f 0x206e6920
001ed25f 63617073 0x20646c6f
001ed263 65722065 0x63617073
001ed267 73657571 0x65722065
001ed26b 0a646574 0x73657571
001ed26f 3035365b 0xa646574
001ed273 32303a38 0x3035365b
001ed277 37304337 0x32303a38
001ed27b 205d3838 0x37304337
001ed27f 35363632 0x205d3838
001ed283 36393930 0x35363632
001ed287 736d2037 0x36393930
001ed28b 614d203a winsta!WARBIRD::g_FuncAddress+0x27
001ed28f 732d6b72 0x614d203a
001ed2a3 203e2d20 mswsock!GetTypeByNameA+0x52
001ed2af 2029382e 0x203e2d20
001ed2b3 202c424d 0x2029382e
001ed2b7 37383131 0x202c424d
001ed2bb 2f20352e 0x37383131
001ed2bf 302e3020 0x2f20352e
001ed2c3 20736d20 0x302e3020
001ed2c7 76612820 0x20736d20
001ed2cb 67617265 kernel32!_NULL_IMPORT_DESCRIPTOR+0x15f0
001ed2cf 756d2065 0x67617265
001ed2ef 6f6c2029 windows_storage!IsObjectSecurelyCallableInProcess+0x80
001ed2f3 656d2077 node+0x1792029
001ed2f7 79726f6d 0x656d2077
001ed2fb 746f6e20 pcbase!COSVersionCheck::IsWow64+0x73d
001ed2ff 63696669 wininet!`string'+0x29f44
001ed303 6f697461 0x63696669
001ed307 4347206e node+0x1767461
001ed30b 206e6920 0x4347206e
001ed30f 20646c6f 0x206e6920
001ed313 63617073 0x20646c6f
001ed317 65722065 0x63617073
001ed31b 73657571 0x65722065
001ed31f 0a646574 0x73657571
001ed323 00000000 0xa646574

3eff59e7ddb4583e990fdf9668b41da1_000.dmp