Analyzed 132 dump

Top 1: total counts = 15

ChildEBP RetAddr  
03dff59c 00000000 KERNELBASE!RaiseException+0x62

99771c2402221804da9f41baebe10ad2_000.dmp
f15696f2fe447172a642e93eac8d5281_000.dmp
26253cf398c7b131cf26f7de95016dd3_001.dmp
f46ae16b151688c8433a014e22d3df0c_000.dmp
34ebdbc6ad1b5abb08a6be1ce10fd37d_000.dmp

Top 2: total counts = 11

061afb4c 7073aeed rightsmanager!RM_AutorunScan+0x176
061afc48 74eb343d ffi_bindings!ffi_call_win32+0x11
061afc54 77839732 kernel32!BaseThreadInitThunk+0xe
061afc94 77839705 ntdll!__RtlUserThreadStart+0x70
061afcac 00000000 ntdll!_RtlUserThreadStart+0x1b

19c79553687a08aba4e0327bbe09d066_000.dmp
7207f0476be497aa0ee4a08aa4df7b81_000.dmp
7b3b98f5c392d911fd02f9476d20d225_000.dmp
dbcee5dbcee68f13aba499fe945cb0e6_000.dmp
680ab83e7ec8ffffa0e9aea5eecde350_000.dmp

Top 3: total counts = 9

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

9120fc13c4672d294856d93b06dcff32_000.dmp
559363fcd3a462b1a26f6bdfa2d397b4_000.dmp
975f83d60511b0a1a35788700a06a729_000.dmp
62827a3df9b3b56b3b296e77805292e7_000.dmp
f5ab513bdfc4c0f99e94b45a736cea8f_000.dmp

Top 4: total counts = 7

ChildEBP RetAddr  
0021e664 107fe479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0021e678 005fcff2 node+0x12ae479
0021e67c 00000000 0x5fcff2

612ffe4b41658bf759e8c34a83de2041_000.dmp
eb6c18b341440065185471d880fed98f_001.dmp
f7d601f50654d9f4ee11184dc7f2e2ed_010.dmp
8cc01d74ef2db92bef75e94c6800ef35_006.dmp
22526905c65348d7ee8037ffe9706e52_000.dmp

Top 5: total counts = 5

ChildEBP RetAddr  
0032e88c 5820e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0032e8a0 00193201 node+0x12ae479
0032e8a4 00000000 0x193201

8b3d6ddae6767e68c2eea097f9ac20c2_000.dmp
eda13231d016e613eeca32c4f5420bd3_000.dmp
c8c2b309a5dd5c113fb64c1f77046305_000.dmp
3a2e4a771af9fcb931fd34f9de27b94d_002.dmp
6ead0c1e17417eea00b65a54afeb7b47_000.dmp

Top 6: total counts = 5

ChildEBP RetAddr  
0a84f3e8 0fa5e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0a84f428 0fa6738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0a84f678 0fa612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0a85fcc0 0fa5e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0a85fd38 0fa97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0a85ff0c 769a344d rightsmanager!RM_AutorunScan+0x176
0a85ff18 77899802 kernel32!BaseThreadInitThunk+0xe
0a85ff58 778997d5 ntdll!__RtlUserThreadStart+0x70
0a85ff70 00000000 ntdll!_RtlUserThreadStart+0x1b

b3139e97b9262348f93a2fe702954a0e_000.dmp
f4f4adeb2e44e735510419b0b098a79b_000.dmp
7d595ba19976729231610290acdf5c80_000.dmp
41220eb3a0bb2d77778c97aa409dc651_000.dmp
0260a61507a24579dfb59c91e8e3a132_000.dmp

Top 7: total counts = 5

ChildEBP RetAddr  
05a2f340 7c2ce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05a2f380 7c2d738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05a2f5d0 7c2d12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05a3fc18 7c2ce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05a3fc90 7c307f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05a3fe64 76035d49 rightsmanager!RM_AutorunScan+0x176
05a3fe74 7725d03b kernel32!BaseThreadInitThunk+0x19
05a3fecc 7725cfc1 ntdll!__RtlUserThreadStart+0x2b
05a3fedc 00000000 ntdll!_RtlUserThreadStart+0x1b

c2be144393680dba0142dfb44baa9515_000.dmp
724974c95894566d2794481220542fb0_000.dmp
3db08e2b7860c476a43734cfb3eac1ab_000.dmp
01c3e1606053337c03399993284c602f_000.dmp
df52cfb6b2787174e797439cde6e3657_000.dmp

Top 8: total counts = 4

061ffce4 519eaeed rightsmanager!RM_AutorunScan+0x176
061ffde0 762e7ba9 ffi_bindings!ffi_call_win32+0x11
061ffdf0 772abb9b kernel32!BaseThreadInitThunk+0x19
061ffe48 772abb1f ntdll!__RtlUserThreadStart+0x2b
061ffe58 00000000 ntdll!_RtlUserThreadStart+0x1b

968100dc46a61255423560a6a14260f7_000.dmp
a8499b125069c119feeefdd47354f9eb_000.dmp
00e9cc10ef2c490eda4539c5f09c7e34_000.dmp
94f69bf1b04046e372bfbe5374c53053_000.dmp

Top 9: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

fd7bee3c827d0b8ae6e0bd8789991059_000.dmp
2e3adc0fb2a762f0ed145c54ee404a1c_000.dmp
3968e6b7b4b81162ca74ab9d9316e2bd_000.dmp
ffbdf04d6e31be649c3c5ab8feab70f6_000.dmp

Top 10: total counts = 4

05b7fddc 79c6aeed rightsmanager!RM_AutorunScan+0x176
05b7fed8 76d300f9 ffi_bindings!ffi_call_win32+0x11
05b7fee8 77ab7bbe kernel32!BaseThreadInitThunk+0x19
05b7ff44 77ab7b8e ntdll!__RtlUserThreadStart+0x2f
05b7ff54 00000000 ntdll!_RtlUserThreadStart+0x1b

496a958081d6b663f66c663c0fcce530_000.dmp
21c6f43962aff02417f33fa0d6e50c2f_000.dmp
ae5a7f733af4a8f9a7b940456d01be68_000.dmp
928aa64f4b4da9b96978b54be23378da_000.dmp

Top 11: total counts = 4

ChildEBP RetAddr  
0653f438 506ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0653f478 506b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0653f6c8 506b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0654fd10 506ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0654fd88 506e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0654ff5c 7633fcc9 rightsmanager!RM_AutorunScan+0x176
0654ff6c 77ad82ae kernel32!BaseThreadInitThunk+0x19
0654ffc8 77ad827e ntdll!__RtlUserThreadStart+0x2f
0654ffd8 00000000 ntdll!_RtlUserThreadStart+0x1b

b0838ef69f8c233db85a7419f573861b_000.dmp
1eff861917a325bc6da654aa6692b6b9_000.dmp
4c1abdba007a7437f5366c4c0f0b9c35_000.dmp
dcf3a26e4279ba53c84698aa95f1d14d_000.dmp

Top 12: total counts = 2

ChildEBP RetAddr  
04ebec68 73d5e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04ebeca8 73d6738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04ebeef8 73d612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04ecf540 73d5e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04ecf5b8 73d97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04ecf78c 75f0343d rightsmanager!RM_AutorunScan+0x176
04ecf798 771a9732 kernel32!BaseThreadInitThunk+0xe
04ecf7d8 771a9705 ntdll!__RtlUserThreadStart+0x70
04ecf7f0 00000000 ntdll!_RtlUserThreadStart+0x1b

72c920ca683dff40de0853ea41ce1a31_000.dmp
8d8c9e46a8a38a667c8c52a8e100812c_000.dmp

Top 13: total counts = 2

ChildEBP RetAddr  
0562ed98 7958e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0562edd8 7959738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0562f028 795912a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0563f670 7958e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0563f6e8 795c7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0563f8bc 7689fcc9 rightsmanager!RM_AutorunScan+0x176
0563f8cc 779182ae kernel32!BaseThreadInitThunk+0x19
0563f928 7791827e ntdll!__RtlUserThreadStart+0x2f
0563f938 00000000 ntdll!_RtlUserThreadStart+0x1b

b35513a703861cd88dc05651aa5d4239_000.dmp
8d0231a42406a28fa355af58f8e47345_000.dmp

Top 14: total counts = 2

ChildEBP RetAddr  
0030e4dc 6cd2e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0030e4f0 005fcff0 node+0x12ae479
0030e4f4 00000000 0x5fcff0

96605b79503bc079e17c3a74322c6204_000.dmp
023e2a09d808d47cb6e74ee6e304c4e7_000.dmp

Top 15: total counts = 2

ChildEBP RetAddr  
0e6ff3a4 53780081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
0e6ff3e0 5378351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0e6ff8e0 53784624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0e6ff914 537885a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0e6ffa40 5378917a rightsextension!CRegData::MonitorFunction+0x4b3
0e6ffa60 53788a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0e6ffa68 5389864a rightsextension!std::_Pad::_Call_func+0xa
0e6ffaa0 7631fa29 rightsextension!thread_start+0x58
0e6ffab0 77c07b5e kernel32!BaseThreadInitThunk+0x19
0e6ffb0c 77c07b2e ntdll!__RtlUserThreadStart+0x2f
0e6ffb1c 00000000 ntdll!_RtlUserThreadStart+0x1b

8cb0851b8ab9d72aa92325101a9f667e_000.dmp
7391ef39ffc0444b956226b998a87daf_000.dmp

Top 16: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd

3aef57012adbc076ec6e8518eb8a8c74_000.dmp
0a4feb6a68f0c946378a7b6fda49ca58_001.dmp

Top 17: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522427

f51e857b237d4353703f54ca87dad9d1_000.dmp
63667958117b5e5471d47423c04bdd00_000.dmp

Top 18: total counts = 2

ChildEBP RetAddr  
00cfea44 00000000 KERNELBASE!RaiseException+0x64

fd68836b400b5ba924abc287b2f01290_000.dmp
6fb0903b8672351b76f006ee495de857_000.dmp

Top 19: total counts = 1

ChildEBP RetAddr  
0020e408 6de3e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0020e4e8 6de88a79 node+0x12ae87c
0020e4ec 001964f9 node+0x12f8a79
0020e4f0 0282d860 0x1964f9
0020e4f4 00000000 0x282d860

dd0670b8117b195b75d58f10916ddc8f_000.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0c9afbf4 6f48533b node+0x12f5573
0c9afc28 76ff343d node+0x12f533b
0c9afc34 77bc9802 kernel32!BaseThreadInitThunk+0xe
0c9afc74 77bc97d5 ntdll!__RtlUserThreadStart+0x70
0c9afc8c 00000000 ntdll!_RtlUserThreadStart+0x1b

ca4c8168ccb1402d6bc4da6304cfb356_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
001be848 6656e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
001be920 665b8a79 node+0x12ae87c
001be924 001964f9 node+0x12f8a79
001be928 00b0af90 0x1964f9
001be92c 00000000 0xb0af90

ecd161cfc8e158de14d6a5d58ff6f501_000.dmp

Top 22: total counts = 1

ChildEBP RetAddr  
11a9f89c 78a54dcf rightsextension!std::operator<,std::allocator >+0x3a
11a9fd98 78a55fd4 rightsextension!CAppInstallMonitor::RegChange+0x21f
11a9fdcc 78a59f53 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
11a9fef8 78a5ab2a rightsextension!CRegData::MonitorFunction+0x4b3
11a9ff18 78a5a3ca rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
11a9ff20 78b6f16a rightsextension!std::_Pad::_Call_func+0xa
11a9ff58 75a17ba9 rightsextension!thread_start+0x58
11a9ff68 7704c2eb kernel32!BaseThreadInitThunk+0x19
11a9ffc0 7704c26f ntdll!__RtlUserThreadStart+0x2b
11a9ffd0 00000000 ntdll!_RtlUserThreadStart+0x1b

df4dd74d3d49818df368e24726e42e19_000.dmp

Top 23: total counts = 1

012fce63 6f6d656d 0x20776f6c
012fd087 00000000 context!TaskThread+0xdd

762d3d65befa8d625aa939c969545a3a_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028cbe0 65f1dc08 node+0x2a2f20b
0028cedf 70656577 node+0xb2dc08
0028cee3 2e303120 0x70656577
0028cee7 31282033 0x2e303120
0028ceeb 29372e31 0x31282033
0028ceef 203e2d20 0x29372e31
0028cef3 322e3031 0x203e2d20
0028cef7 31312820 0x322e3031
0028cefb 2029372e 0x31312820
0028ceff 202c424d 0x2029372e
0028cf03 38303531 0x202c424d
0028cf07 2f20312e 0x38303531
0028cf0b 302e3020 0x2f20312e
0028cf0f 20736d20 0x302e3020
0028cf13 76612820 0x20736d20
0028cf17 67617265 wininet!$$VProc_ImageExportDirectory+0x78
0028cf1b 756d2065 node+0x2227265
0028cf1f 30203d20 0x756d2065
0028cf23 3637372e 0x30203d20
0028cf27 7563202c 0x3637372e
0028cf2b 6e657272 crypt32!winreg_bhandle  (crypt32+0xf202c)
0028cf2f 756d2074 0x6e657272
0028cf33 30203d20 0x756d2074
0028cf37 3635352e 0x30203d20
0028cf3b 6f6c2029 0x3635352e
0028cf3f 656d2077 0x6f6c2029
0028cf43 79726f6d node+0x2e2077
0028cf47 746f6e20 0x79726f6d
0028cf4b 63696669 0x746f6e20
0028cf4f 6f697461 0x63696669
0028cf53 4347206e 0x6f697461
0028cf57 206e6920 0x4347206e
0028cf5b 20646c6f 0x206e6920
0028cf5f 63617073 0x20646c6f
0028cf63 65722065 0x63617073
0028cf67 73657571 node+0x332065
0028d06f 34363731 dui70!DirectUI::Element::_GetDependencies+0x211
0028d08b 30203d20 0x34363731
0028d08f 3837342e 0x30203d20
0028d093 7563202c 0x3837342e
0028d097 6e657272 crypt32!winreg_bhandle  (crypt32+0xf202c)
0028d09b 756d2074 0x6e657272
0028d09f 30203d20 0x756d2074
0028d0a3 3137332e 0x30203d20
0028d0a7 6f6c2029 0x3137332e
0028d0ab 656d2077 0x6f6c2029
0028d0af 79726f6d node+0x2e2077
0028d0b3 746f6e20 0x79726f6d
0028d0b7 63696669 0x746f6e20
0028d0bb 6f697461 0x63696669
0028d0bf 4347206e 0x6f697461
0028d0c3 206e6920 0x4347206e
0028d0c7 20646c6f 0x206e6920
0028d0cb 63617073 0x20646c6f
0028d0cf 65722065 0x63617073
0028d0d3 73657571 node+0x332065
0028d1db 00000000 dui70!DirectUI::Element::_GetDependencies+0x211

498b5a1ea6dc39d5c82e4a624fb0a658_000.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
04d7f638 0ff7e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04d7f678 0ff8738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04d7f8c8 0ff86a43 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04d7fc00 0ff7e958 rightsmanager!CAutorunsCtrl::EnumServices+0x593
04d7fc78 0ffb7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x68
04d7fe4c 771162c4 rightsmanager!RM_AutorunScan+0x176
04d7fe60 77b11b69 kernel32!BaseThreadInitThunk+0x24
04d7fea8 77b11b34 ntdll!__RtlUserThreadStart+0x2f
04d7feb8 00000000 ntdll!_RtlUserThreadStart+0x1b

94110cd6a74e97a0e9baa7a441d8aedc_000.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
0133e3d4 0133e4b8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0133e3e8 0133e3f8 0x133e4b8
0133e3ec c0000017 0x133e3f8
0133e3f8 00000000 0xc0000017

6ed4a73aa3ce278a71666b779316b95f_000.dmp

Top 27: total counts = 1

ChildEBP RetAddr  
005be594 005be678 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
005be5a8 005be5b8 0x5be678
005be5ac fffffffe 0x5be5b8
005be5b8 00000000 0xfffffffe

98167faee136bfe5d63324c4333bfc38_000.dmp

Top 28: total counts = 1

05d1fa64 6a0de6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
05d1fadc 77909802 node+0x2f3e6e0
05d1fb1c 779097d5 ntdll!__RtlUserThreadStart+0x70
05d1fb34 00000000 ntdll!_RtlUserThreadStart+0x1b

3742b85980fd56e2abef5138f8459c01_000.dmp

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff554 5a148cc5 node+0x12ae60a
00aff5f4 57e03961 node+0x2a18cc5
00aff668 589f89e6 node+0x6d3961
00aff734 589f875e node+0x12c89e6
00aff790 589d0ec3 node+0x12c875e
00aff7cc 589d0acb node+0x12a0ec3
00aff80c 589e23d2 node+0x12a0acb
00aff854 589e22e2 node+0x12b23d2
00aff898 57dfbd42 node+0x12b22e2
00aff8c0 57dfd47d node+0x6cbd42
00aff900 57d3ed6c node+0x6cd47d
00aff95c 57d3f379 node+0x60ed6c
00aff980 57d3ea8a node+0x60f379
00affa20 7784c73e node+0x60ea8a
00affa2c 00affa9c ntdll!RtlAllocateHeap+0x3e
00000000 00000000 0xaffa9c

5b08084fdd864ce3fef971c7beb631b8_000.dmp

Top 30: total counts = 1

ChildEBP RetAddr  
00dde754 00dde830 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00dde768 00dde778 0xdde830
00dde76c fffffffe 0xdde778
00dde778 00000000 0xfffffffe

75b99e64588f80a1baa01d2067228b00_000.dmp

Top 31: total counts = 1

ChildEBP RetAddr  
0034e798 6d2fe87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0034e870 6d348a79 node+0x12ae87c
0034e874 005fcff0 node+0x12f8a79
0034e878 00beb688 0x5fcff0
005fcff0 00000000 0xbeb688

888ac243bb5a3bbd85ce98e4125a1b96_000.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
0040ead8 61bee87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0040ebb8 61c38a79 node+0x12ae87c
0040ebbc 001964f9 node+0x12f8a79
0040ebc0 022d8068 0x1964f9
0040ebc4 00000000 0x22d8068

54bc81831d551df7d9cc778a7258c345_000.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
00dae5a4 00dae688 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00dae5b8 00dae5c8 0xdae688
00dae5bc fffffffe 0xdae5c8
00dae5c8 00000000 0xfffffffe

61633457c1f46c1d4c6a5a686324a1a9_000.dmp

Top 34: total counts = 1

003cd227 74616369 0x6669746f
003cd22b 206e6f69 binding+0x26369
003cd22f 69204347 0x206e6f69
003cd233 6c6f206e 0x69204347
003cd237 70732064 0x6c6f206e
003cd23b 20656361 wship6!_NULL_IMPORT_DESCRIPTOR+0x9e
003cd23f 75716572 0x20656361
003cdf03 00000000 shell32!RunAsNewUser_RunDLLW+0x95

3fc401becace89fec9ca0a3d59ac47ac_000.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0a4ff850 76371ee0 0x796a2cb2
0a4ff854 00000000 user32!NtUserPrintWindow

ab1f1aa70a07bd3386e63fc103e791fe_000.dmp

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

c1b870952ec54b6e433bce46e4107919_000.dmp

Top 37: total counts = 1

ChildEBP RetAddr  
05f3f2fc 7b1f91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05f3f328 7b1f1b3e rightsmanager!AutorunItem::AutorunItem+0x34
05f4f970 7b1ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05f4f9e8 7b227f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05f4fbbc 7620fa29 rightsmanager!RM_AutorunScan+0x176
05f4fbcc 77297a9e kernel32!BaseThreadInitThunk+0x19
05f4fc28 77297a6e ntdll!__RtlUserThreadStart+0x2f
05f4fc38 00000000 ntdll!_RtlUserThreadStart+0x1b

2d5725014778667d5501d50835ae9538_000.dmp

Top 38: total counts = 1

0730f370 6f01dfc9 MozartBreathCore+0x2efff0
0730f538 6f01dceb node+0x12adfc9
0730f844 6e036532 node+0x12adceb
0730f8d8 6e45d229 node+0x2c6532
0730f95c 6e45d122 node+0x6ed229
0730fa04 6f02f412 node+0x6ed122
0730fa6c 6f03c328 node+0x12bf412
0730fb2c 6f03bbdb node+0x12cc328
0730fc6c 6f04016f node+0x12cbbdb
0730fcb4 6f03ffff node+0x12d016f
0730fcdc 76ae344d node+0x12cffff
0730fce8 77d69802 kernel32!BaseThreadInitThunk+0xe
0730fd28 77d697d5 ntdll!__RtlUserThreadStart+0x70
0730fd40 00000000 ntdll!_RtlUserThreadStart+0x1b

f1794291c59103f73bda2c56e2f551ae_000.dmp

Top 39: total counts = 1

ChildEBP RetAddr  
0c8ef688 76b2cd70 msvcrt!_LocaleUpdate::_LocaleUpdate+0x1f
0c8ef918 76b2d220 msvcrt!_output_l+0x73
0c8ef95c 76b2d1c0 msvcrt!_vsnprintf_l+0x8b
0c8ef978 731d54e9 msvcrt!_vsnprintf+0x18
0c8ef99c 731d5469 IPHLPAPI!StringCchPrintfA+0x39
0c8ef9dc 731d5d12 IPHLPAPI!ConvertGuidToStringA+0x56
0c8efa6c 731d6a89 IPHLPAPI!AllocateAndGetAdaptersAddresses+0xb1
0c8efaa4 72fb47fb IPHLPAPI!GetAdaptersAddresses+0x44
0c8efae4 72fb2d24 winhttp!LoadAdapterTables+0x47
0c8efba4 72fb452e winhttp!LoadGatewayMacsByAdapter+0x75
0c8efbd4 72fb2b6e winhttp!WinHttpReadGuidsForConnectedNetworks+0xe9
0c8efbf8 72fb394e winhttp!NETWORK_MANAGER::Init+0x4a
0c8efc30 72fb467e winhttp!NETWORK_MANAGER::GetWpadInformationForConnectedNetworks+0x60
0c8efc58 72fa620f winhttp!SWpadAsyncCall::OnWorkItem+0x5b
0c8efc98 72fa618d winhttp!HTTP_THREAD_POOL::_WorkItemCallback+0xc1
0c8efca0 7726fa5f winhttp!HTTP_THREAD_POOL::_StaticWorkItemCallback+0x16
0c8efcc4 77250991 ntdll!TppWorkpExecuteCallback+0x10f
0c8efe14 75f7343d ntdll!TppWorkerThread+0x562
0c8efe20 77239812 kernel32!BaseThreadInitThunk+0xe
0c8efe60 772397e5 ntdll!__RtlUserThreadStart+0x70
0c8efe78 00000000 ntdll!_RtlUserThreadStart+0x1b

d435ca3708d512d7744d93a2e71a6542_000.dmp

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004fcbb8 615bdc08 node+0x2a2f20b
004fcf6f 732d6b72 node+0xb2dc08
004fd19b 00000000 urlmon!RemoveDNTExceptionFromCache+0x42

8f3e286dd36e27ff0f2b0890e691fd9b_000.dmp

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0033f3c4 65558d6c node+0x12ae60a
0033f42c 63213961 node+0x2a18d6c
0033f4a0 63e089e6 node+0x6d3961
0033f56c 63e0875e node+0x12c89e6
0033f5c8 63de0ec3 node+0x12c875e
0033f604 63de0acb node+0x12a0ec3
0033f644 63df23d2 node+0x12a0acb
0033f68c 63df22e2 node+0x12b23d2
0033f6d0 6320bd42 node+0x12b22e2
0033f6f8 6320d47d node+0x6cbd42
0033f738 6314ed6c node+0x6cd47d
0033f794 6314f379 node+0x60ed6c
0033f7b8 6314ea8a node+0x60f379
0033f7bc 63dca300 node+0x60ea8a
0033f7c0 00330000 node+0x128a300
0033f7c4 00000000 0x330000

89b63550ac44cfce20afe92e0bcb6336_000.dmp

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0019c6d0 6791dc08 node+0x2a2ee0b
0019c9cf 74732036 node+0xb2dc08
0019c9d3 20737065 d3d11!C10and11Resource::SetPrivateData+0x6
0019c9d7 636e6973 0x20737065
0019c9db 74732065 0x636e6973
0019c9df 20747261 d3d11!C10and11View::SetPrivateData+0x5
0019c9e3 6d20666f 0x20747261
0019c9e7 696b7261 0x6d20666f
0019c9eb 202c676e node+0x28c7261
0019c9ef 67676962 0x202c676e
0019c9f3 20747365 node+0x886962
0019c9f7 70657473 0x20747365
0019c9fb 35383120 0x70657473
0019c9ff 6d20342e 0x35383120
0019ca03 77202c73 0x6d20342e
0019ca07 746c6c61 user32!ext-ms-win-edputil-policy-l1-1-0_NULL_THUNK_DATA_DLA  (user32+0x122c73)
0019ca0b 20656d69 d3d11!`string'+0xd
0019ca0f 636e6973 0x20656d69
0019ca13 74732065 0x636e6973
0019ca17 20747261 d3d11!C10and11View::SetPrivateData+0x5
0019ca1b 6d20666f 0x20747261
0019ca1f 696b7261 0x6d20666f
0019ca23 3420676e node+0x28c7261
0019ca27 6d203537 0x3420676e
0019ca2b 28202973 0x6d203537
0019ca2f 72657661 0x28202973
0019ca33 20656761 0x72657661
0019ca37 3d20756d 0x20656761
0019ca3b 392e3020 0x3d20756d
0019ca3f 202c3637 0x392e3020
0019ca43 72727563 0x202c3637
0019ca47 20746e65 0x72727563
0019ca4b 3d20756d 0x20746e65
0019ca4f 392e3020 0x3d20756d
0019ca53 20293734 0x392e3020
0019ca57 616e6966 0x20293734
0019ca5b 657a696c 0x616e6966
0019ca5f 636e6920 0x657a696c
0019ca63 656d6572 0x636e6920
0019ca67 6c61746e 0x656d6572
0019ca6b 3036395b 0x6c61746e
0019ca6f 32303a30 0x3036395b
0019ca73 32363836 0x32303a30
0019ca77 205d3045 0x32363836
0019ca7b 30313931 0x205d3045
0019ca7f 32363435 0x30313931
0019ca83 736d2030 0x32363435
0019ca87 614d203a wininet!WPP_da6caa0d439733861da0911a41cfb1c1_Traceguids+0x81b20
0019ca8b 732d6b72 0x614d203a
0019ca8f 70656577 0x732d6b72
0019ca93 382e3720 0x70656577
0019ca97 2e392820 0x382e3720
0019ca9b 2d202937 0x2e392820
0019ca9f 2e37203e 0x2d202937
0019caa3 39282037 0x2e37203e
0019caa7 2029372e 0x39282037
0019caab 202c424d 0x2029372e
0019caaf 34333531 0x202c424d
0019cab3 2f20312e 0x34333531
0019cab7 31363220 0x2f20312e
0019cabb 6d20302e 0x31363220
0019cabf 28202073 0x6d20302e
0019cac3 72657661 0x28202073
0019cac7 20656761 0x72657661
0019cacb 3d20756d 0x20656761
0019cacf 392e3020 0x3d20756d
0019cad3 202c3237 0x392e3020
0019cad7 72727563 0x202c3237
0019cadb 20746e65 0x72727563
0019cadf 3d20756d 0x20746e65
0019cae3 392e3020 0x3d20756d
0019cae7 20293137 0x392e3020
0019caeb 20776f6c 0x20293137
0019caef 6f6d656d 0x20776f6c
0019caf3 6e207972 0x6f6d656d
0019caf7 6669746f 0x6e207972
0019cafb 74616369 0x6669746f
0019caff 206e6f69 cryptsp!LocalVerifySignatureW+0x2539
0019cb03 69204347 0x206e6f69
0019cb07 6c6f206e node+0x2414347
0019cb0b 70732064 0x6c6f206e
0019cb0f 20656361 0x70732064
0019cb13 75716572 0x20656361
0019cb17 65747365 shell32!Microsoft::WRL::Details::RuntimeClassImpl,1,0,0,IPopupCommandHandler,IPopupCommand>::QueryInterface+0x542
0019cb1b 395b0a64 0x65747365
0019cb1f 3a303036 0x395b0a64
0019cb23 38363230 0x3a303036
0019cb27 30453236 0x38363230
0019cb2b 3931205d 0x30453236
0019cb2f 34353031 0x3931205d
0019cb33 20383537 0x34353031
0019cb37 203a736d 0x20383537
0019cb3b 6b72614d 0x203a736d
0019cb3f 6577732d 0x6b72614d
0019cb43 37207065 0x6577732d
0019cb47 2820372e 0x37207065
0019cb4b 29372e39 0x2820372e
0019cb4f 203e2d20 0x29372e39
0019cb53 20372e37 0x203e2d20
0019cb57 372e3928 0x20372e37
0019cb5b 424d2029 0x372e3928
0019cb5f 3033202c 0x424d2029
0019cb63 2f20372e 0x3033202c
0019cb67 302e3020 0x2f20372e
0019cb6b 20736d20 0x302e3020
0019cb6f 76612820 0x20736d20
0019cb73 67617265 combase!`string'+0x170
0019cb77 756d2065 node+0x827265
0019cb93 3539372e shell32!wil::details::WaitForCompletion *>+0x4d
0019cb9f 79726f6d 0x3539372e
0019cba3 746f6e20 0x79726f6d
0019cbe7 00000000 d3d11!C10and11Resource::C10and11Resource+0x32e

8b2e2e701f6e13812002cae2a403c74e_002.dmp

Top 43: total counts = 1

ChildEBP RetAddr  
004fe7a4 004fe888 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
004fe7b8 004fe7c8 0x4fe888
004fe7bc fffffffe 0x4fe7c8
004fe7c8 00000000 0xfffffffe

e1dbd16eee2f8f947f27e01fe103ce65_000.dmp

Top 44: total counts = 1

ChildEBP RetAddr  
0020eb54 6fed2d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

2122d21c391b0d20a5ab0f612887f480_000.dmp

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
047fedfc 11620289 node+0xce6c1f
00000000 00000000 0x11620289

2f3acd0cccaeb86679f577db4c96b34d_000.dmp

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00faccd0 65a4dc08 node+0x2a2ee0b
00facfcf 3a736d20 node+0xb2dc08
00facfd3 72614d20 0x3a736d20
00facfd7 77732d6b 0x72614d20
00facfdb 20706565 0x77732d6b
00facfdf 20372e37 0x20706565
00facfe3 372e3928 0x20372e37
00facfe7 3e2d2029 0x372e3928
00facfeb 372e3720 0x3e2d2029
00facfef 2e392820 0x372e3720
00facff3 4d202937 0x2e392820
00facff7 31202c42 0x4d202937
00facffb 34363839 0x31202c42
00facfff 20332e39 0x34363839
00fad003 3931202f 0x20332e39
00fad007 372e3030 0x3931202f
00fad00b 20736d20 0x372e3030
00fad00f 76612820 0x20736d20
00fad013 67617265 KERNELBASE!api-ms-win-security-isolationpolicy-l1-2-0_NULL_THUNK_DATA_DLB+0x1012c
00fad017 756d2065 node+0x26f7265
00fad01b 30203d20 clbcatq!StgSortedIndex::`vftable'+0x25
00fad01f 3138312e 0x30203d20
00fad023 7563202c 0x3138312e
00fad027 6e657272 user32!wtdccm_NULL_THUNK_DATA_DLA  (user32+0x13202c)
00fad02b 756d2074 0x6e657272
00fad02f 30203d20 clbcatq!StgSortedIndex::`vftable'+0x34
00fad033 3930302e 0x30203d20
00fad037 6f6c2029 0x3930302e
00fad03b 656d2077 0x6f6c2029
00fad03f 79726f6d node+0x7b2077
00fad043 746f6e20 0x79726f6d
00fad1ef 00000000 windows_storage!SignatureValidation::IsFileSigned+0xd0

d219d8d2858dea8e4fd08f498835fa1b_000.dmp

Top 47: total counts = 1

ChildEBP RetAddr  
0042e428 6063e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0042e500 60688a79 node+0x12ae87c
0042e504 005fcff0 node+0x12f8a79
0042e508 0239bf28 0x5fcff0
0042e50c 00000000 0x239bf28

57a75f6ee91789547accface6095c63b_000.dmp

Top 48: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0039e828 77d329cd node+0xcf0029
05a64a95 12000400 ntdll!RtlQueryPerformanceCounter+0x45
05a64a9d 510f7012 0x12000400
05a64aa1 3e0f7025 0x510f7012
05a64aa5 5d00000e 0x3e0f7025
05a64aa9 513c0402 0x5d00000e
05a64aad 3e0f7026 0x513c0402
05a64ab1 2500000a 0x3e0f7026
05a64ab5 9d3c0402 0x2500000a
05a64ab9 7e0f7028 0x9d3c0402
05a64abd 95000002 0x7e0f7028
05a64ac1 dd3c0402 0x95000002
05a64ac5 200f702e 0xdd3c0402
05a64ac9 02000006 0x200f702e
05a64acd 09000000 0x2000006
05a64ad1 060f700d 0x9000000
05a64ad5 24000000 0x60f700d
05a64ad9 89000000 0x24000000
05a64add 890f7002 0x89000000
05a64ae1 050f7002 0x890f7002
05a64ae5 8d2de81b 0x50f7002
05a64ae9 6d0f7012 0x8d2de81b
05a64aed 550f7006 0x6d0f7012
05a64af1 0905a64b 0x550f7006
05a64af5 753c0500 0x905a64b
05a64af9 8905a64a 0x753c0500
05a64afd 410f7002 0x8905a64a
05a64b01 030f7001 0x410f7002
05a64b05 0e000300 0x30f7001
05a64b09 59000000 0xe000300
05a64b0d 9d0f7012 node+0xa20000
05a64b11 300f7028 0x9d0f7012
05a64b15 0200000a 0x300f7028
05a64b19 f9000000 0x200000a
05a64b1d 300f7031 0xf9000000
05a64b21 02001002 0x300f7031
05a64b25 4d000000 0x2001002
05a64b29 b80f7020 0x4d000000
05a64b2d b7002005 0xb80f7020
05a64b31 d12de81a 0xb7002005
05a64b35 890f7034 0xd12de81a
05a64b39 000f7002 0x890f7034
05a64b3d fe000000 0xf7002
05a64b41 89ffffff 0xfe000000
05a64b45 890f7002 0x89ffffff
05a64b49 020f7002 0x890f7002
05a64b4d 2d000000 0x20f7002
05a64b51 bd2de81b 0x2d000000
05a64b55 6d05a64b 0xbd2de81b
05a64b59 e90f7006 0x6d05a64b
05a64b5d 3905a64a 0xe90f7006
05a64b61 ed1c30c2 0x3905a64a
05a64b65 0905a64b 0xed1c30c2
05a64b69 4105a64c 0x905a64b
05a64b6d 050f7001 0x4105a64c
05a64b71 16000500 0x50f7001
05a64b75 59000000 0x16000500
05a64b79 4d0f7012 node+0xa20000
05a64b7d 300f7020 0x4d0f7012
05a64b81 02000012 0x300f7020
05a64b85 f9000000 0x2000012
05a64b89 300f7031 0xf9000000
05a64b8d 0200100e 0x300f7031
05a64b91 b1000000 0x200100e
05a64b95 200f7026 0xb1000000
05a64b99 02002002 0x200f7026
05a64b9d a5000000 0x2002002
05a64ba1 200f7029 0xa5000000
05a64ba5 0200300a 0x200f7029
05a64ba9 19000000 0x200300a
05a64bad 200f702c 0x19000000
05a64bb1 02004006 0x200f702c
05a64bb5 09000000 0x2004006
05a64bb9 060f700d 0x9000000
05a64bbd d1000000 0x60f700d
05a64bc1 8905a64b 0xd1000000
05a64bc5 890f7002 0x8905a64b
05a64bc9 050f7002 0x890f7002
05a64bcd 6d2de802 0x50f7002
05a64bd1 6d0f7006 0x6d2de802
05a64bd5 910f7006 0x6d0f7006
05a64bd9 053c049a 0x910f7006
05a64bdd 4d05a5cc 0x53c049a
05a64be1 e13c0403 0x4d05a5cc
05a64be5 05155d2f 0xe13c0403
05a64be9 6d2de802 0x5155d2f
05a64bed 6d0f7006 0x6d2de802
05a64bf1 510f7006 0x6d0f7006
05a64bf5 053c049a 0x510f7006
05a64bf9 4d05a5cc 0x53c049a
05a64bfd 213c0403 0x4d05a5cc
05a64c01 05155d2f 0x213c0403
05a64c05 6d2de802 0x5155d2f
05a64c09 6d0f7006 0x6d2de802
05a64c0d 710f7006 0x6d0f7006
05a64c11 053c049a 0x710f7006
05a64c15 4d05a5cc 0x53c049a
05a64c19 813c0403 0x4d05a5cc
05a64c1d 41155d2f 0x813c0403
05a64c21 030f7001 0x41155d2f
05a64c25 0e000300 0x30f7001
05a64c29 59000000 0xe000300
05a64c2d 510f7012 node+0xa20000
05a64c31 3e0f7025 0x510f7012
05a64c35 5d00000a 0x3e0f7025
05a64c39 513c0402 0x5d00000a
05a64c3d 3e0f7026 0x513c0402
05a64c41 25000002 0x3e0f7026
05a64c45 9d3c0402 0x25000002
05a64c49 6e0f7028 0x9d3c0402
05a64c4d 95000006 0x6e0f7028
05a64c51 dd3c0402 0x95000006
05a64c55 212de84c 0xdd3c0402
05a64c59 6d23c82f 0x212de84c
05a64c5d 050f7006 0x6d23c82f
05a64c61 6d2de802 0x50f7006
05a64c65 6d0f7006 0x6d2de802
05a64c69 9d0f7006 0x6d0f7006
05a64c6d 053c04ea 0x9d0f7006
05a64c71 4d05a5cc 0x53c04ea
05a64c75 413c0403 0x4d05a5cc
05a64c79 05155d09 0x413c0403
05a64c7d 6d2de802 0x5155d09
05a64c81 6d0f7006 0x6d2de802
05a64c85 cd0f7006 0x6d0f7006
05a64c89 053c04ea 0xcd0f7006
05a64c8d 4d05a5cc 0x53c04ea
05a64c91 a13c0403 0x4d05a5cc
05a64c95 05155d09 0xa13c0403
05a64c99 6d2de802 0x5155d09
05a64c9d 6d0f7006 0x6d2de802
05a64ca1 fd0f7006 0x6d0f7006
05a64ca5 053c04ea 0xfd0f7006
05a64ca9 4d05a5cc 0x53c04ea
05a64cad 013c0403 0x4d05a5cc
05a64cb1 05155d0a 0x13c0403
05a64cb5 6d2de802 0x5155d0a
05a64cb9 6d0f7006 0x6d2de802
05a64cbd 2d0f7006 0x6d0f7006
05a64cc1 053c04eb 0x2d0f7006
05a64cc5 4d05a5cc 0x53c04eb
05a64cc9 c13c0403 0x4d05a5cc
05a64ccd 05155d07 0xc13c0403
05a64cd1 6d2de802 0x5155d07
05a64cd5 6d0f7006 0x6d2de802
05a64cd9 610f7006 0x6d0f7006
05a64cdd 053c04eb 0x610f7006
05a64ce1 4d05a5cc 0x53c04eb
05a64ce5 213c0403 0x4d05a5cc
05a64ce9 05155d08 0x213c0403
05a64ced 6d2de802 0x5155d08
05a64cf1 6d0f7006 0x6d2de802
05a64cf5 9d0f7006 0x6d0f7006
05a64cf9 053c04eb 0x9d0f7006
05a64cfd 4d05a5cc 0x53c04eb
05a64d01 c13c0403 0x4d05a5cc
05a64d05 05155d0a 0xc13c0403
05a64d09 6d2de802 0x5155d0a
05a64d0d 6d0f7006 0x6d2de802
05a64d11 d50f7006 0x6d0f7006
05a64d15 053c04eb 0xd50f7006
05a64d19 4d05a5cc 0x53c04eb
05a64d1d 213c0403 0x4d05a5cc
05a64d21 05155d0b 0x213c0403
05a64d25 6d2de802 0x5155d0b
05a64d29 6d0f7006 0x6d2de802
05a64d2d 350f7006 0x6d0f7006
05a64d31 053c04ec 0x350f7006
05a64d35 4d05a5cc 0x53c04ec
05a64d39 613c0403 0x4d05a5cc
05a64d3d 05155d0a 0x613c0403
05a64d41 6d2de802 0x5155d0a
05a64d45 6d0f7006 0x6d2de802
05a64d49 f90f7006 0x6d0f7006
05a64d4d 053c04e9 0xf90f7006
05a64d51 4d05a5cc 0x53c04e9
05a64d55 013c0403 0x4d05a5cc
05a64d59 05155d07 0x13c0403
05a64d5d 6d2de802 0x5155d07
05a64d61 6d0f7006 0x6d2de802
05a64d65 290f7006 0x6d0f7006
05a64d69 053c04ea 0x290f7006
05a64d6d 4d05a5cc 0x53c04ea
05a64d71 613c0403 0x4d05a5cc
05a64d75 05155d07 0x613c0403
05a64d79 6d2de802 0x5155d07
05a64d7d 6d0f7006 0x6d2de802
05a64d81 5d0f7006 0x6d0f7006
05a64d85 053c04ea 0x5d0f7006
05a64d89 4d05a5cc 0x53c04ea
05a64d8d 813c0403 0x4d05a5cc
4d05a5cc 00000000 0x813c0403

30bd2f983bd8ce9e92b270d4ac4c914e_000.dmp

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 wetype_tip_core+0x155441

ed760892c3a845705a25ee87175534d4_000.dmp

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fcb60 6bfedc08 node+0x2a2ee0b
010fce5f 5d303238 node+0xb2dc08
010fce63 36332020 0x5d303238
010fce67 32373432 0x36332020
010fce6b 736d2036 0x32373432
010fce6f 614d203a iertutil!`string'+0x12
010fce73 732d6b72 0x614d203a
010fce77 70656577 0x732d6b72
010fce7b 362e3720 0x70656577
010fce7f 2e392820 0x362e3720
010fce83 2d202937 0x2e392820
010fce87 2e37203e 0x2d202937
010fce8b 39282036 0x2e37203e
010fce8f 2029372e 0x39282036
010fce93 202c424d 0x2029372e
010fce97 392e3331 0x202c424d
010fce9b 30202f20 0x392e3331
010fce9f 6d20302e 0x30202f20
010fcea3 28202073 node+0x1d4302e
010fcea7 72657661 0x28202073
010fceab 20656761 0x72657661
010fceaf 3d20756d 0x20656761
010fceb3 392e3020 0x3d20756d
010fceb7 202c3939 0x392e3020
010fcebb 72727563 0x202c3939
010fcebf 20746e65 0x72727563
010fcec3 3d20756d 0x20746e65
010fcec7 302e3020 0x3d20756d
010fcecb 20293330 0x302e3020
010fcecf 20776f6c 0x20293330
010fced3 6f6d656d 0x20776f6c
010fced7 6e207972 node+0x421656d
010fcedb 6669746f node+0x2d47972
010fcf0b 30323837 d3d9!CMipVolume::Create+0xa3
010fcf2f 2029372e 0x30323837
010fcf33 37203e2d 0x2029372e
010fcf37 2820362e 0x37203e2d
010fcf3b 29372e39 0x2820362e
010fcf3f 2c424d20 0x29372e39
010fcf43 2e303120 0x2c424d20
010fcf47 202f2037 0x2e303120
010fcf4b 20312e30 0x202f2037
010fcf4f 2020736d 0x20312e30
010fcf53 65766128 0x2020736d
010fcf57 65676172 0x65766128
010fcf5b 20756d20 CoreUIComponents!ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLA  (CoreUIComponents+0x266172)
010fcf5f 2e31203d 0x20756d20
010fcf63 2c303030 0x2e31203d
010fcf67 72756320 0x2c303030
010fcf6b 746e6572 0x72756320
010fcf6f 20756d20 wldp!wil::manually_managed_shutdown_aware_object::destroy+0x22
010fcf73 2e31203d 0x20756d20
010fcf77 29303030 0x2e31203d
010fcf7b 776f6c20 0x29303030
010fcf7f 6d656d20 0x776f6c20
010fcf83 2079726f node+0x2196d20
010fcf87 69746f6e 0x2079726f
010fcf8b 61636966 0x69746f6e
010fcf8f 6e6f6974 0x61636966
010fcf93 20434720 node+0x3236974
010fcf97 6f206e69 0x20434720
010fcf9b 7320646c node+0x3d46e69
010fcf9f 65636170 dnsapi!WPP_ee7857bda758318aa6c0375f8516a65d_Traceguids+0x50
010fcfa3 71657220 CoreUIComponents!ext-ms-win-session-usermgr-l1-1-0_NULL_THUNK_DATA_DLA  (CoreUIComponents+0x226170)
010fcfa7 74736575 0x71657220
010fcfab 5b0a6465 windows_storage!Windows::Internal::AsyncBaseFTM >::`vftable'+0x1d
010fcfaf 38323736 0x5b0a6465
010fcfb3 3333303a 0x38323736
010fcfb7 32383735 0x3333303a
010fcfbb 20205d30 0x32383735
010fcfbf 34383633 0x20205d30
010fcfc3 20383237 0x34383633
010fcfc7 203a736d 0x20383237
010fcfcb 6b72614d 0x203a736d
010fcfcf 6577732d node+0x26614d
010fcfd3 37207065 0x6577732d
010fcfd7 2820362e 0x37207065
010fcfdb 29372e39 0x2820362e
010fcfdf 203e2d20 0x29372e39
010fcfe3 20362e37 0x203e2d20
010fcfe7 372e3928 0x20362e37
010fcfeb 424d2029 0x372e3928
010fcfef 3331202c 0x424d2029
010fcff3 2f20342e 0x3331202c
010fcff7 302e3020 0x2f20342e
010fcffb 20736d20 0x302e3020
010fcfff 76612820 0x20736d20
010fd033 746f6e20 wintrust!CryptCATAdminAddCatalog+0x150
79726f6d 8bf18b56 wldp!WldpIsAllowedEntryPoint+0x1f0
79726f81 0cd06bff 0x8bf18b56
79726f85 fe38bde8 0xcd06bff
79726f89 89c033ff 0xfe38bde8
79726f8d 04468906 0x89c033ff
79726f91 5f084689 0x4468906
79726f95 086ac35e 0x5f084689
79726f99 731eb1b8 0x86ac35e
79726f9d 8f4ce879 dbghelp!g_CoreHandleCallNames  (dbghelp+0x17b1b8)
79726fa1 f98b0000 0x8f4ce879
79726fa5 33f07d89 0xf98b0000
79726fa9 0447c7db 0x33f07d89
79726fad 00000000 0x447c7db

7d087f3124d57f357d83bbffe4577268_001.dmp