Analyzed 13 dump

Top 1: total counts = 1

ChildEBP RetAddr  
0a33f57c 5daba459 CleanEngine!CleanFileDirect::DoDirectClean+0x3b3
0a33f648 5dabac10 CleanEngine!CleanFileDirect::Clean+0xf9
0a33f66c 5dafd3f3 CleanEngine!CleanFileHelper::DeleteFileW+0x50
0a33f68c 5db0e6f3 CleanEngine!luaD_precall+0x253
0a33f79c 5dafce38 CleanEngine!luaV_execute+0xfa3
0a33f7b0 5daf443f CleanEngine!luaD_call+0x58
0a33f7c4 5dafd5a9 CleanEngine!f_call+0x1f
0a33f834 5dafd006 CleanEngine!luaD_rawrunprotected+0x69
0a33f864 5daf4f0f CleanEngine!luaD_pcall+0x46
0a33f894 5dabb79e CleanEngine!lua_pcall+0x5f
0a33f8b4 5dabb547 CleanEngine!LuaHelper::ExecuteString+0x6e
0a33f8e8 5dad0e5e CleanEngine!LuaEngine::DoScript+0xd7
0a33f980 5dacefaf CleanEngine!RuleNode::OperationImp+0x12e
0a33fa2c 5daca876 CleanEngine!RuleNode::Clean+0x27f
0a33fa70 5daaae07 CleanEngine!Task::CTaskT< >::Execute+0x86
0a33fa90 5daaac5e CleanEngine!Task::CTaskInfo::Execute+0x77
0a33faf0 5daac14f CleanEngine!Task::CTaskQueue::DoTask_Idle+0xae
0a33fb60 5daaca36 CleanEngine!Task::CTaskThread::ThreadProc+0x1df
0a33fba0 5dc34017 CleanEngine!Task::CTaskThread::s_ThreadProc+0x66
0a33fbdc 76417ba9 CleanEngine!thread_start+0x57
0a33fbec 777ec3ab kernel32!BaseThreadInitThunk+0x19
0a33fc44 777ec32f ntdll!__RtlUserThreadStart+0x2b
0a33fc54 00000000 ntdll!_RtlUserThreadStart+0x1b

6b33aaff87cbfda29d6e7295ce84b0a0_000.dmp

Top 2: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0076ec98 104fd1dd node+0x128dd80
0076edd0 115ee32a node+0x128d1dd
0076edd4 0076ede0 node+0x237e32a
0076edd8 0007c10c 0x76ede0
0076ede0 00000000 0x7c10c

2b75a933d076e264465982f615b8cab4_000.dmp

Top 3: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0ca4f834 70aaf3ec 0xd127db8
0ca4f864 70addeb6 CleanEngine!std::list > > const ,ATL::CStringT > > >,std::allocator > > const ,ATL::CStringT > > > > >::clear+0x7c
0ca4f898 70ae0a5e CleanEngine!RuleManage::AsyncScan+0x136
0ca4f8ac 70aaae07 CleanEngine!Task::CTaskT< >::Execute+0x2e
0ca4f8cc 70aaac5e CleanEngine!Task::CTaskInfo::Execute+0x77
0ca4f92c 70aac14f CleanEngine!Task::CTaskQueue::DoTask_Idle+0xae
0ca4f99c 70aaca36 CleanEngine!Task::CTaskThread::ThreadProc+0x1df
0ca4f9dc 70c34017 CleanEngine!Task::CTaskThread::s_ThreadProc+0x66
0ca4fa18 754a343d CleanEngine!thread_start+0x57
0ca4fa24 77d49812 kernel32!BaseThreadInitThunk+0xe
0ca4fa64 77d497e5 ntdll!__RtlUserThreadStart+0x70
0ca4fa7c 00000000 ntdll!_RtlUserThreadStart+0x1b

c4cb9baf36bb54ae7d0f35a171fe7aa5_000.dmp

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001af1f8 6ed5d1dd node+0x128dd80
001af338 6fe4e32a node+0x128d1dd
001af33c 001af348 node+0x237e32a
001af340 00000000 0x1af348

b1a675a9fd587de1d6930d1245c994a6_000.dmp

Top 5: total counts = 1

0014bc83 76612820 0x20736d20
0014bc87 67617265 shell32!StrStrW+0x46fea1
0014bc8b 756d2065 0x67617265
0014bc8f 30203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xe5
0014bc93 3939392e 0x30203d20
0014bc97 7563202c 0x3939392e
0014bc9b 6e657272 advapi32!_NULL_IMPORT_DESCRIPTOR+0x930
0014bc9f 756d2074 node+0x9a7272
0014bca3 30203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xf4
0014bca7 3330302e 0x30203d20
0014bcab 6c612029 0x3330302e
0014bcaf 61636f6c 0x6c612029
0014bcb3 6e6f6974 0x61636f6c
0014bcb7 69616620 node+0xa46974
0014bcbb 6572756c 0x69616620
0014bcbf 325b0a20 0x6572756c
0014bcc3 3a383239 0x325b0a20
0014bcc7 45433030 0x3a383239
0014bccb 30424545 0x45433030
0014bccf 2020205d 0x30424545
0014bcd3 33343734 0x2020205d
0014bcd7 6d203530 0x33343734
0014bcdb 4d203a73 0x6d203530
0014bcdf 2d6b7261 0x4d203a73
0014bce3 65657773 0x2d6b7261
0014bce7 31312070 0x65657773
0014bceb 2820302e 0x31312070
0014bcef 392e3231 0x2820302e
0014bcf3 3e2d2029 0x392e3231
0014bcf7 2e303120 0x3e2d2029
0014bcfb 31282036 0x2e303120
0014bcff 29342e32 0x31282036
0014bd03 2c424d20 0x29342e32
0014bd07 2e343320 0x2c424d20
0014bd0b 202f2030 0x2e343320
0014bd0f 20302e30 0x202f2030
0014bd13 2020736d 0x20302e30
0014bd17 65766128 0x2020736d
0014bd1b 65676172 0x65766128
0014bd1f 20756d20 0x65676172
0014bd23 2e30203d 0x20756d20
0014bd27 2c393939 0x2e30203d
0014bd2b 72756320 0x2c393939
0014bd2f 746e6572 0x72756320
0014bd33 20756d20 0x746e6572
0014bd37 2e30203d 0x20756d20
0014bd3b 29393939 0x2e30203d
0014bd3f 776f6c20 0x29393939
0014bd43 6d656d20 0x776f6c20
0014bd47 2079726f 0x6d656d20
0014bd4b 69746f6e 0x2079726f
0014bd4f 61636966 0x69746f6e
0014bd53 6e6f6974 0x61636966
0014bd57 20434720 node+0xa46974
0014bd5b 6f206e69 0x20434720
0014bd5f 7320646c node+0x1556e69
0014bd63 65636170 0x7320646c
0014bd67 71657220 0x65636170
0014bd6b 74736575 node+0x39a7220
0014bd6f 5b0a6465 propsys!`string'+0x4319
0014bd73 38323932 0x5b0a6465
0014bd77 4330303a 0x38323932
0014bd7b 42454545 0x4330303a
0014bd7f 20205d30 0x42454545
0014bd83 34373420 0x20205d30
0014bd87 20313233 0x34373420
0014bd8b 203a736d 0x20313233
0014bd8f 6b72614d 0x203a736d
0014bd93 6577732d 0x6b72614d
0014bd97 31207065 0x6577732d
0014bd9b 20362e30 0x31207065
0014bd9f 2e323128 0x20362e30
0014bda3 2d202934 0x2e323128
0014bda7 3031203e 0x2d202934
0014bdab 2820362e 0x3031203e
0014bdaf 372e3231 0x2820362e
0014bdb3 424d2029 0x372e3231
0014bdb7 3531202c 0x424d2029
0014bdbb 2f20322e 0x3531202c
0014bdbf 302e3020 0x2f20322e
0014bdc3 20736d20 0x302e3020
0014bdc7 76612820 0x20736d20
0014bdcb 67617265 shell32!StrStrW+0x46fea1
0014bdcf 756d2065 0x67617265
0014bdd3 30203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xe5
0014bdd7 3939392e 0x30203d20
0014bddb 7563202c 0x3939392e
0014bddf 6e657272 advapi32!_NULL_IMPORT_DESCRIPTOR+0x930
0014bde3 756d2074 node+0x9a7272
0014bde7 30203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xf4
0014bdeb 3330302e 0x30203d20
0014bdef 6f6c2029 0x3330302e
0014bdf3 656d2077 node+0x1a12029
0014bdf7 79726f6d 0x656d2077
0014bdfb 746f6e20 0x79726f6d
0014bdff 63696669 0x746f6e20
0014be03 6f697461 cryptsp!l_DllLoadCritSec  (cryptsp+0x16669)
0014be07 4347206e node+0x19e7461
0014be0b 206e6920 0x4347206e
0014be0f 20646c6f 0x206e6920
0014be13 63617073 0x20646c6f
0014be17 65722065 powrprof!`string'+0xf
0014be1b 73657571 0x65722065
0014be1f 0a646574 0x73657571
0014be23 00000000 0xa646574

b54dc9f459e9eeaae51bbe017241afc8_000.dmp

Top 6: total counts = 1

001bf4f8 126b0d4f user32!NtUserDestroyWindow+0xc
001bf534 1282bb07 node+0x3450d4f
001bf568 1282b888 node+0x35cbb07
001bf5a8 12829735 node+0x35cb888
001bf5e8 128297d0 node+0x35c9735
001bf618 128296a4 node+0x35c97d0
001bf654 1282950d node+0x35c96a4
001bf698 12818a7c node+0x35c950d
001bf6a4 12818b5b node+0x35b8a7c
001bf6e4 12818bce node+0x35b8b5b
001bf6f8 7730885c node+0x35b8bce
001bf718 7730df9a ntdll!LdrpCallInitRoutine+0x14
001bf7bc 7730e035 ntdll!LdrShutdownProcess+0x1aa
001bf7d0 76d0be8e ntdll!RtlExitUserProcess+0x74
001bf87c 76cfef5c kernel32!ExitProcessStub+0x12
001bf888 77313756 kernel32!BaseThreadInitThunk+0xe
001bf8c8 77313729 ntdll!__RtlUserThreadStart+0x70
001bf8e0 00000000 ntdll!_RtlUserThreadStart+0x1b

d59807c4f39578b4e44531763a145eb2_000.dmp

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
043fed60 33f88ac5 node+0xce6c1f
043fed64 3ff87204 0x33f88ac5
043fed68 3ff87200 0x3ff87204
043fed6c 3ff871f1 0x3ff87200
043fed70 613b6b45 0x3ff871f1
043fed74 33f88ac5 node+0xce6b45
043fed78 043fee60 0x33f88ac5
043fed7c 613b6a18 0x43fee60
043fee60 02bfe06c node+0xce6a18
043fee64 00000000 0x2bfe06c

dbb279187c4c47776c694499f32d8256_000.dmp

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fed68 5d08d1dd node+0x128dd80
010feea0 5e17e32a node+0x128d1dd
010feea4 010feeb0 node+0x237e32a
010feea8 0002f15c 0x10feeb0
010feeb0 00000000 0x2f15c

f3388c2489e0f175ccc9db3feb62d453_000.dmp

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0484f0b0 00000000 node+0xce6b94

52ef0db32795a9c12d585ffc676269e5_000.dmp

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff368 1096d1dd node+0x128dd80
00aff4a8 11a5e32a node+0x128d1dd
00aff4ac 00aff4b8 node+0x237e32a
00aff4b0 00000000 0xaff4b8

f9c7526ac524749ef781b999e7f1507b_000.dmp

Top 11: total counts = 1

ChildEBP RetAddr  
003ff294 763e4731 KERNELBASE!RaiseException+0x62
003ff2c4 00000000 bcryptPrimitives!ProcessPrng+0x51

dd81726dc17fd4af74c1ca5474f0f2cf_000.dmp

Top 12: total counts = 1

0033d19b 72206563 0x61707320
0033d19f 65757165 ipcService+0x86563
0033d1a3 64657473 0x65757165
0033d1a7 30315b0a 0x64657473
0033d1ab 3a343233 0x30315b0a
0033d1af 30433030 0x3a343233
0033d1b3 38373338 0x30433030
0033d1b7 3431205d 0x38373338
0033d1bb 37383034 0x3431205d
0033d1bf 6d203434 0x37383034
0033d1c3 4d203a73 0x6d203434
0033d1c7 2d6b7261 0x4d203a73
0033d1cb 65657773 0x2d6b7261
0033d1cf 31312070 0x65657773
0033d1d3 2820352e 0x31312070
0033d1d7 342e3331 0x2820352e
0033d1db 3e2d2029 0x342e3331
0033d1df 2e313120 0x3e2d2029
0033d1e3 31282035 0x2e313120
0033d1e7 29342e33 0x31282035
0033d1eb 2c424d20 0x29342e33
0033d1ef 2e363120 0x2c424d20
0033d1f3 202f2035 0x2e363120
0033d1f7 20302e30 0x202f2035
0033d1fb 2020736d 0x20302e30
0033d1ff 65766128 0x2020736d
0033d203 65676172 0x65766128
0033d207 20756d20 0x65676172
0033d20b 2e30203d 0x20756d20
0033d20f 2c393939 0x2e30203d
0033d213 72756320 0x2c393939
0033d217 746e6572 0x72756320
0033d21b 20756d20 0x746e6572
0033d21f 2e30203d 0x20756d20
0033d223 29323030 0x2e30203d
0033d227 776f6c20 0x29323030
0033d22b 6d656d20 0x776f6c20
0033d22f 2079726f 0x6d656d20
0033d233 69746f6e 0x2079726f
0033d237 61636966 0x69746f6e
0033d23b 6e6f6974 0x61636966
0033d23f 20434720 0x6e6f6974
0033d243 6f206e69 0x20434720
0033d247 7320646c 0x6f206e69
0033d24b 65636170 secur32!_hmod__NTDSAPI_dll  (secur32+0x646c)
0033d24f 71657220 0x65636170
0033d253 74736575 uxtheme!_NULL_IMPORT_DESCRIPTOR+0x1aaa
0033d257 5b0a6465 0x74736575
0033d25b 32333031 0x5b0a6465
0033d25f 30303a34 0x32333031
0033d263 33383043 0x30303a34
0033d267 205d3837 0x33383043
0033d26b 33343431 0x205d3837
0033d26f 34313230 0x33343431
0033d273 3a736d20 0x34313230
0033d277 61635320 0x3a736d20
0033d27b 676e6576 0x61635320
0033d27f 32312065 0x676e6576
0033d283 2820382e 0x32312065
0033d287 382e3331 0x2820382e
0033d28b 3e2d2029 0x382e3331
0033d28f 2e313120 0x3e2d2029
0033d293 31282035 0x2e313120
0033d297 29342e33 0x31282035
0033d29b 2c424d20 0x29342e33
0033d29f 332e3120 0x2c424d20
0033d2a3 30202f20 0x332e3120
0033d2a7 6d20302e 0x30202f20
0033d2ab 28202073 0x6d20302e
0033d2af 72657661 0x28202073
0033d2b3 20656761 0x72657661
0033d2b7 3d20756d 0x20656761
0033d2bb 392e3020 0x3d20756d
0033d2bf 202c3939 0x392e3020
0033d2c3 72727563 0x202c3939
0033d2c7 20746e65 0x72727563
0033d2cb 3d20756d 0x20746e65
0033d2cf 302e3020 0x3d20756d
0033d2d3 20293230 0x302e3020
0033d2d7 6f6c6c61 0x20293230
0033d2db 69746163 0x6f6c6c61
0033d2df 66206e6f 0x69746163
0033d2e3 756c6961 0x66206e6f
0033d2e7 0a206572 shell32!__dyn_tls_init_callback  (shell32+0x726961)
0033d2eb 00000000 0xa206572

a7d373a195a2f1ce647461167370f7c1_000.dmp

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0098c9d8 68dadc08 node+0x2a2f20b
0098ccd7 203a736d node+0xb2dc08
0098ccdb 6b72614d 0x203a736d
0098ccdf 6577732d node+0x34a614d
0098cce3 31207065 0x6577732d
0098cce7 20312e31 0x31207065
0098cceb 2e333128 0x20312e31
0098ccef 2d202932 0x2e333128
0098ccf3 3131203e 0x2d202932
0098ccf7 2820312e 0x3131203e
0098ccfb 342e3331 0x2820312e
0098ccff 424d2029 0x342e3331
0098cd03 3131202c 0x424d2029
0098cd07 2f20372e 0x3131202c
0098cd0b 302e3020 0x2f20372e
0098cd0f 20736d20 0x302e3020
0098cd13 76612820 0x20736d20
0098cd17 67617265 KERNELBASE!`string'+0x4
0098cd1b 756d2065 0x67617265
0098cd1f 30203d20 kernel_appcore!`string'+0x5
0098cd23 3939392e 0x30203d20
0098cd27 7563202c 0x3939392e
0098cd2b 6e657272 0x7563202c
0098cd2f 756d2074 0x6e657272
0098cd33 30203d20 kernel_appcore!`string'+0x14
0098cd37 3530302e 0x30203d20
0098cd3b 6f6c2029 0x3530302e
0098cd3f 656d2077 0x6f6c2029
0098cd43 79726f6d 0x656d2077
0098cd47 746f6e20 0x79726f6d
0098cd87 736d2037 wininet!InternetGetCookieExW+0x220
0098cda3 203e2d20 0x736d2037
0098cda7 312e3131 0x203e2d20
0098cdab 33312820 0x312e3131
0098cdaf 2029342e 0x33312820
0098cdb3 202c424d 0x2029342e
0098cdb7 362e3033 0x202c424d
0098cdbb 30202f20 0x362e3033
0098cdbf 6d20302e 0x30202f20
0098cdc3 28202073 0x6d20302e
0098cdc7 72657661 0x28202073
0098ce37 20363132 dxgi!CDXGISwapChain::CreateWindowedIntermediateProxy+0x110
0098ce3b 203a736d 0x20363132
0098ce3f 6b72614d 0x203a736d
0098ce43 6577732d node+0x34a614d
0098ce47 31207065 0x6577732d
0098ce4b 20312e31 0x31207065
0098ce4f 2e333128 0x20312e31
0098ce53 2d202934 0x2e333128
0098ce57 3131203e 0x2d202934
0098ce5b 2820312e 0x3131203e
0098ce5f 342e3331 0x2820312e
0098ce63 424d2029 0x342e3331
0098ce67 3931202c 0x424d2029
0098ce6b 2f20382e 0x3931202c
0098ce6f 302e3020 0x2f20382e
0098ce73 20736d20 0x302e3020
0098ce77 76612820 0x20736d20
0098ce7b 67617265 KERNELBASE!`string'+0x4
0098ce7f 756d2065 0x67617265
0098ce83 30203d20 kernel_appcore!`string'+0x5
0098ce87 3939392e 0x30203d20
0098ce8b 7563202c 0x3939392e
0098ce8f 6e657272 0x7563202c
0098ce93 756d2074 0x6e657272
0098ce97 30203d20 kernel_appcore!`string'+0x14
0098ce9b 3130302e 0x30203d20
0098ce9f 6f6c2029 0x3130302e
0098cea3 656d2077 0x6f6c2029
0098cea7 79726f6d 0x656d2077
0098ceab 746f6e20 0x79726f6d
0098ceeb 00000000 wininet!InternetGetCookieExW+0x220

3a620c0b1cd13ab7800a87d8195ec46e_000.dmp