Analyzed 195 dump

Top 1: total counts = 36

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034dec8 6c3fd1af node+0x128dd02
0034dffc 6c5eed74 node+0x128d1af
0034e07c 6c5f60bd node+0x147ed74
0034e088 00000000 node+0x14860bd

Top 2: total counts = 16

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009ade18 106ed1af node+0x128dd02
009adf4c 108ded74 node+0x128d1af
009adfcc 108e60bd node+0x147ed74
009ae024 75fc99a5 node+0x14860bd
009ae028 75fdc550 gdi32!IsEdgeGdiProcess+0x14
009ae078 7747f3b9 gdi32!Feature_Servicing_LockHandleCache_TVS__private_featureState+0x8
009ae12c 7747f3b9 ntdll!RtlAllocateHeap+0xa9
056d3f48 00000000 ntdll!RtlAllocateHeap+0xa9

Top 3: total counts = 6

057bf83c 7b71aeed rightsmanager!RM_AutorunScan+0x176
057bf938 763dfcc9 ffi_bindings!ffi_call_win32+0x11
057bf948 778082ae kernel32!BaseThreadInitThunk+0x19
057bf9a4 7780827e ntdll!__RtlUserThreadStart+0x2f
057bf9b4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 5

0682fe94 6ec7e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0682ff00 76db05c9 node+0x2f3e6e0
0682ff10 77687c5d kernel32!BaseThreadInitThunk+0x19
0682ff6c 77687c2d ntdll!__RtlUserThreadStart+0x2f
0682ff7c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 5

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001ae2d8 10a7d1af node+0x128dd02
001ae414 10c6ed74 node+0x128d1af
001ae494 10c760bd node+0x147ed74
001ae4ec 756396d5 node+0x14860bd
001ae4f0 7564b4e8 gdi32!IsEdgeGdiProcess+0x14
001ae540 7780f299 gdi32!g_pEdgeGdi+0x8
001ae5f4 7780f299 ntdll!RtlAllocateHeap+0xa9
09e16cb8 00000000 ntdll!RtlAllocateHeap+0xa9

Top 6: total counts = 4

0695f6bc 6468aeed rightsmanager!RM_AutorunScan+0x176
0695f7b8 7591344d ffi_bindings!ffi_call_win32+0x11
0695f7c4 779b9802 kernel32!BaseThreadInitThunk+0xe
0695f804 779b97d5 ntdll!__RtlUserThreadStart+0x70
0695f81c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00d8ea10 11bd2185 node+0x129985e
00d8eb34 11bceef1 node+0x2512185
00d8eb70 11bce39b node+0x250eef1
00000000 00000000 node+0x250e39b

Top 8: total counts = 3

ChildEBP RetAddr  
0018e8a4 6a8e2d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 9: total counts = 3

0619fb20 5be3e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0619fb8c 7616343d node+0x2f3e6e0
0619fb98 77d29802 kernel32!BaseThreadInitThunk+0xe
0619fbd8 77d297d5 ntdll!__RtlUserThreadStart+0x70
0619fbf0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 3

ChildEBP RetAddr  
06affc7c 52b4a47b rightsmanager!memcpy+0x4e
06affca8 52b2e9f3 rightsmanager!std::basic_string,std::allocator >::assign+0xfb
06affd28 52b67f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x103
06affefc 7677fcc9 rightsmanager!RM_AutorunScan+0x176
06afff0c 77d482ae kernel32!BaseThreadInitThunk+0x19
06afff68 77d4827e ntdll!__RtlUserThreadStart+0x2f
06afff78 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0be3fe40 00000000 wnTSF+0x1546f4

Top 12: total counts = 2

05dbf6ac 636caeed rightsmanager!RM_AutorunScan+0x176
05dbf7a8 777b7ba9 ffi_bindings!ffi_call_win32+0x11
05dbf7b8 77d3bdab kernel32!BaseThreadInitThunk+0x19
05dbf810 77d3bd2f ntdll!__RtlUserThreadStart+0x2b
05dbf820 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 2

06b9fd84 6541e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
06b9fdf0 76436739 node+0x2f3e6e0
06b9fe00 77ba8aff kernel32!BaseThreadInitThunk+0x19
06b9fe58 77ba8acd ntdll!__RtlUserThreadStart+0x2b
06b9fe68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0057ddc8 6da5d1af node+0x128dd02
0057defc 6dc4ed74 node+0x128d1af
0057df7c 6dc560bd node+0x147ed74
0057dfd4 77bf6084 node+0x14860bd
0057dfd8 77c0d4f8 gdi32!IsEdgeGdiProcess+0x14
0057dfdc 77bf77ff gdi32!g_pEdgeGdi+0xc
0057dfe0 0057e040 gdi32!CreateHalftonePalette+0x2f
0057dfe4 2542f288 0x57e040
0057e040 0057e088 0x2542f288
0057e044 04c0e0f0 0x57e088
0057e088 1db1c4fc 0x4c0e0f0
0057e0a0 253cba68 0x1db1c4fc
00000000 00000000 0x253cba68

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
043afd20 6e94e8da node+0xc6bd50
043afd78 6fe293e5 node+0xcee8da
043afdc4 757b344d node+0x21c93e5
043afdd0 77a79802 kernel32!BaseThreadInitThunk+0xe
043afe10 77a797d5 ntdll!__RtlUserThreadStart+0x70
043afe28 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 1

ChildEBP RetAddr  
061eeedc 63c17815 fse!abort+0x39
061eef0c 63c16830 fse!terminate+0x3b
061eef74 63c16ac7 fse!FindHandler<__FrameHandler3>+0x38d
061eefa8 63c13dd8 fse!__InternalCxxFrameHandler<__FrameHandler3>+0xf7
061eefe4 77d334a1 fse!__CxxFrameHandler3+0x26
061ef008 77d33473 ntdll!ExecuteHandler2+0x26
061ef02c 77d33414 ntdll!ExecuteHandler+0x24
061ef0b8 77ce0133 ntdll!RtlDispatchException+0x127
061ef0b8 00000000 ntdll!KiUserExceptionDispatcher+0xf

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfe288 1049d1af node+0x128dd02
00cfe3bc 1068ed74 node+0x128d1af
00cfe43c 106960bd node+0x147ed74
00cfe494 765a5fa4 node+0x14860bd
00cfe498 765bc4e8 gdi32!IsEdgeGdiProcess+0x14
00cfe49c 765a770f gdi32!g_pEdgeGdi+0xc
00cfe4a0 00cfe500 gdi32!CreateHalftonePalette+0x2f
00cfe4a4 27be2830 0xcfe500
00cfe500 00cfe548 0x27be2830
00cfe504 0536e040 0xcfe548
00cfe548 055abb24 0x536e040
00cfe560 274dae08 0x55abb24
00000000 00000000 0x274dae08

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0060df18 1094d1af node+0x128dd02
0060e04c 10b3ed74 node+0x128d1af
0060e0cc 10b460bd node+0x147ed74
0060e124 77835fa4 node+0x14860bd
0060e128 7784c4e8 gdi32!IsEdgeGdiProcess+0x14
0060e12c 7783770f gdi32!g_pEdgeGdi+0xc
0060e130 0060e190 gdi32!CreateHalftonePalette+0x2f
0060e134 0b9d2680 0x60e190
0060e190 0060e1d8 0xb9d2680
0060e194 0b78a030 0x60e1d8
0060e1d8 0bada78c 0xb78a030
0060e1f0 1daf4de8 0xbada78c
00000000 00000000 0x1daf4de8

Top 19: total counts = 1

ChildEBP RetAddr  
001fd8e8 6499e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
001fd9c0 649e89d7 node+0x12ae87c
001fd9c4 00040ae4 node+0x12f89d7
001fd9c8 00aaf320 0x40ae4
001fd9cc 00000000 0xaaf320

Top 20: total counts = 1

ChildEBP RetAddr  
0f47ef38 776102aa ntdll!RtlpWaitOnCriticalSection+0x93
0f47ef70 776100f9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
0f47ef78 72d6772e ntdll!RtlEnterCriticalSection+0x49
0f47ef90 63cf4ff1 GdiPlus!GdipGetImageEncodersSize+0x1e
0f47f008 63c936b7 uninstaller!Utils::SaveFileIconAsPng+0xa1
0f47f098 63caec28 uninstaller!CLogoGenerator::AddMissingInformation+0x1f7
0f47f0e4 63ccfd49 uninstaller!CAppUnintallFactory::GeneratMissingInfo+0xb8
0f47facc 63cd3333 uninstaller!CRegistryFactory::EnumRegKey2+0x3c9
0f47fdc8 63cdb751 uninstaller!CRegistryFactory::HandleRegChanged+0x3f3
0f47fe30 63cac85f uninstaller!CRegistryFactory::UninstRegMonitor+0x231
0f47fe8c 63cb4caa uninstaller!::operator()+0x17f
0f47feac 63cb369a uninstaller!std::_LaunchPad >,std::default_delete > > > >::_Go+0x8a
0f47feb4 63d9c2f5 uninstaller!std::_Pad::_Call_func+0xa
0f47feec 7641fcc9 uninstaller!thread_start+0x58
0f47fefc 776382ae kernel32!BaseThreadInitThunk+0x19
0f47ff58 7763827e ntdll!__RtlUserThreadStart+0x2f
0f47ff68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003fe0e8 68bcd1af node+0x128dd02
003fe21c 68dbed74 node+0x128d1af
003fe29c 68dc60bd node+0x147ed74
003fe2f4 764a5fe4 node+0x14860bd
003fe2f8 764bc4f0 gdi32!IsEdgeGdiProcess+0x14
003fe2fc 764a774f gdi32!g_pEdgeGdi+0xc
003fe300 003fe360 gdi32!CreateHalftonePalette+0x2f
003fe304 124e0da0 0x3fe360
003fe360 003fe3a8 0x124e0da0
003fe364 1235ffd8 0x3fe3a8
003fe3a8 1e30bd8c 0x1235ffd8
003fe3c0 1e649f60 0x1e30bd8c
00000000 00000000 0x1e649f60

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007fbb18 6eb1dc08 node+0x2a2f20b
007fbe17 756d2074 node+0xb2dc08
007fbe23 6c612029 rpcrt4!NdrpConformanceRangeSizeCheck+0x43
007fbe2b 6e6f6974 0x6c612029
007fbe2f 69616620 node+0x706974
007fbe33 6572756c 0x69616620
007fbe37 365b0a20 0x6572756c
007fbe3b 3a343434 0x365b0a20
007fbe3f 39433230 0x3a343434
007fbe43 38413243 0x39433230
007fbe47 3720205d 0x38413243
007fbe4b 36363332 0x3720205d
007fbe4f 6d203730 0x36363332
36363332 0153d3c0 uxtheme!CThemeServices::Client_LoadGlobalTheme+0x104
3636333e 002b0000 0x153d3c0
36363342 00440000 0x2b0000
36363346 005c003a 0x440000
3636334a 6df39ad8 0x5c003a
3636334e 859b005c UIAutomationCore!icu_NULL_THUNK_DATA_DLA  (UIAutomationCore+0x229ad8)
36363352 9f9957ce 0x859b005c
36363356 8f665464 0x9f9957ce
3636335a 00200020 0x8f665464
3636335e 00200020 0x200020
36363362 00200020 0x200020
36363366 00200020 0x200020
3636336a 00320020 0x200020
3636336e 00310030 0x320020
36363372 002e0035 0x310030
36363376 00350030 0x2e0035
3636337a 0030002e 0x350030
3636337e 005c0031 0x30002e
36363382 0054005f 0x5c0031
36363386 00410036 0x54005f
3636338a 00350038 0x410036
3636338e 00320039 0x350038
36363392 0043002e 0x320039
36363396 00320052 0x43002e
3636339a 0ba10044 0x320052
3636339e 00000000 0xba10044

Top 23: total counts = 1

ChildEBP RetAddr  
07ddf658 620ee87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
07ddf738 621389d7 node+0x12ae87c
07ddf758 60ea284b node+0x12f89d7
07ddf75c 0067e97b node+0x6284b
07ddf760 620fdb5a 0x67e97b
07ddf764 0019fa56 node+0x12bdb5a
07ddf768 00115190 0x19fa56
07ddf76c 23b5467c 0x115190
07ddf770 09d1b270 0x23b5467c
07ddf774 09d1b270 0x9d1b270
07ddf778 07ddf824 0x9d1b270
07ddf77c 60ea27d8 0x7ddf824
07ddf824 62678dab node+0x627d8
07ddf83c 61410539 node+0x1838dab
07ddf858 6140d4a9 node+0x5d0539
07ddf974 61403632 node+0x5cd4a9
07ddfa74 614033f1 node+0x5c3632
07ddfa78 00000000 node+0x5c33f1

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fc870 0fc2dc08 node+0x2a2f20b
010fcb6f 736d2031 node+0xb2dc08
010fcb73 614d203a dhcpcsvc!`string'+0x29
010fcb77 732d6b72 0x614d203a
010fcb7b 70656577 Windows_FileExplorer_Common!memmove+0x8ae
010fcb7f 2e313120 0x70656577
010fcb83 31282036 0x2e313120
010fcb87 29352e33 0x31282036
010fcb8b 203e2d20 0x29352e33
010fcb8f 362e3131 0x203e2d20
010fcb93 33312820 0x362e3131
010fcb97 2029352e 0x33312820
010fcb9b 202c424d 0x2029352e
010fcb9f 20362e36 0x202c424d
010fcba3 2e30202f 0x20362e36
010fcba7 736d2030 0x2e30202f
010fcbab 61282020 dhcpcsvc!`string'+0x28
010fcbaf 61726576 0x61282020
010fcbb3 6d206567 0x61726576
010fcbb7 203d2075 0x6d206567
010fcbbb 39392e30 0x203d2075
010fcbbf 63202c39 0x39392e30
010fcbc3 65727275 0x63202c39
010fcbc7 6d20746e 0x65727275
010fcbcb 203d2075 0x6d20746e
010fcbcf 36312e30 0x203d2075
010fcbd3 6c202931 0x36312e30
010fcbd7 6d20776f 0x6c202931
010fcbdb 726f6d65 0x6d20776f
010fcbdf 6f6e2079 0x726f6d65
010fcbe3 69666974 0x6f6e2079
010fcbe7 69746163 0x69666974
010fcbeb 47206e6f 0x69746163
010fcbef 6e692043 0x47206e6f
010fcbf3 646c6f20 0x6e692043
010fcbf7 61707320 0x646c6f20
010fcbfb 72206563 0x61707320
010fcbff 65757165 0x72206563
010fcc03 64657473 0x65757165
010fcc07 38325b0a MMDevAPI!wistd::default_delete::operator()+0x370bd
010fcc0b 303a3032 0x38325b0a
010fcc0f 36453433 0x303a3032
010fcc13 5d383035 0x36453433
010fcc17 35333420 0x5d383035
010fcc1b 36303033 0x35333420
010fcc1f 6d203734 0x36303033
010fcc23 4d203a73 0x6d203734
010fcd23 7563202c 0x4d203a73
010fcd27 6e657272 combase!CPackagedComCatalog::ResolveAndReadEntry+0x4
010fcd43 746f6e20 0x6e657272
010fcf57 00000000 comctl32!DPISCALEINFO::CreateMessageFont+0x6b

Top 25: total counts = 1

ChildEBP RetAddr  
0589f580 0771e780 KERNELBASE!RaiseException+0x58
0589f5c4 076f94fd rightsmanager!_CxxThrowException+0x66
0589f5e0 076c865a rightsmanager!std::_Xlength_error+0x1f
0589f5e8 076ca4d0 rightsmanager!std::basic_string,std::allocator >::_Xlen+0xa
0589f608 076ae9f3 rightsmanager!std::basic_string,std::allocator >::assign+0x150
0589f688 076e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x103
0589f85c 760e343d rightsmanager!RM_AutorunScan+0x176
0589f868 774c9802 kernel32!BaseThreadInitThunk+0xe
0589f8a8 774c97d5 ntdll!__RtlUserThreadStart+0x70
0589f8c0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 26: total counts = 1

ChildEBP RetAddr  
063ced78 7a8ce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
063cedb8 7a8d738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
063cf008 7a8d12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
063df650 7a8ce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
063df6c8 7a907f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
063df89c 7649fcc9 rightsmanager!RM_AutorunScan+0x176
063df8ac 777b82ae kernel32!BaseThreadInitThunk+0x19
063df908 777b827e ntdll!__RtlUserThreadStart+0x2f
063df918 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0043de78 107ad1af node+0x128dd02
0043dfb4 1099ed74 node+0x128d1af
0043e034 109a60bd node+0x147ed74
0043e08c 77135fa4 node+0x14860bd
0043e090 7714c4e8 gdi32!IsEdgeGdiProcess+0x14
0043e094 7713770f gdi32!g_pEdgeGdi+0xc
0043e098 0043e0f8 gdi32!CreateHalftonePalette+0x2f
0043e09c 04ef7568 0x43e0f8
0043e0f8 0043e140 0x4ef7568
0043e0fc 04c4d838 0x43e140
0043e140 04e74334 0x4c4d838
0043e158 2525d238 0x4e74334
00000000 00000000 0x2525d238

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032c848 660ddc08 node+0x2a2f20b
0032cb47 736d2032 node+0xb2dc08
0032cb4b 614d203a 0x736d2032
0032cb4f 732d6b72 0x614d203a
0032cb53 70656577 webio!WapUriParseHostStringA+0x40e
0032cb57 2e313120 fse!Crc32Lookup+0x2117
0032cb5b 31282035 0x2e313120
0032cb5f 29392e33 0x31282035
0032cb63 203e2d20 0x29392e33
0032cb67 352e3131 0x203e2d20
0032cb6b 33312820 0x352e3131
0032cb6f 2029392e 0x33312820
0032cb73 202c424d 0x2029392e
0032cb77 362e3831 0x202c424d
0032cb7b 30202f20 0x362e3831
0032cb7f 6d20302e 0x30202f20
0032cb83 28202073 0x6d20302e
0032cb87 72657661 0x28202073
0032cb8b 20656761 0x72657661
0032cb8f 3d20756d 0x20656761
0032cb93 392e3020 0x3d20756d
0032cb97 202c3939 0x392e3020
0032cb9b 72727563 0x202c3939
0032cb9f 20746e65 0x72727563
0032cba3 3d20756d 0x20746e65
0032cba7 302e3020 0x3d20756d
0032cbab 20293230 0x302e3020
0032cbaf 20776f6c 0x20293230
0032cbb3 6f6d656d 0x20776f6c
0032cbc3 206e6f69 CleanEngine!Concurrency::details::SchedulerBase::Finalize+0x33
0032cbc7 69204347 0x206e6f69
0032cbcb 6c6f206e node+0x3c54347
0032cbcf 70732064 0x6c6f206e
0032cbd3 20656361 0x70732064
0032cbd7 75716572 0x20656361
0032cbdb 65747365 ole32!CClientCall::Cancel+0xb
0032cbe7 33323230 node+0x197365
0032cbeb 30393944 0x33323230
0032cbef 3431205d 0x30393944
0032cbf3 30303539 0x3431205d
0032cbf7 6d203439 0x30303539
0032cbfb 4d203a73 0x6d203439
0032cbff 2d6b7261 0x4d203a73
0032cc03 65657773 0x2d6b7261
0032cc07 32312070 node+0xa7773
0032cc0b 2820322e 0x32312070
0032cc0f 392e3331 0x2820322e
0032cc13 3e2d2029 0x392e3331
0032cc17 2e313120 0x3e2d2029
0032cc1b 31282035 0x2e313120
0032cc1f 29392e33 0x31282035
0032cc23 2c424d20 0x29392e33
0032cc27 2e363120 0x2c424d20
0032cc2b 202f2034 0x2e363120
0032cc2f 20302e30 0x202f2034
0032cc33 2020736d 0x20302e30
0032cc37 65766128 0x2020736d
0032cc3b 65676172 node+0x1b6128
0032cc3f 20756d20 node+0xc6172
0032cc43 2e31203d 0x20756d20
0032cc47 2c303030 0x2e31203d
0032cc4b 72756320 0x2c303030
0032cc4f 746e6572 0x72756320
0032cc53 20756d20 0x746e6572
0032cc57 2e31203d 0x20756d20
0032cc5b 29303030 0x2e31203d
0032cc5f 776f6c20 0x29303030
0032cc83 65636170 msctf!CAsyncReconvQueueItem::DoDispatch+0x11a
0032cc8b 74736575 node+0x86170
0032cc8f 5b0a6465 0x74736575
0032cc93 34303731 0x5b0a6465
0032cc97 3232303a 0x34303731
0032cc9b 39394433 0x3232303a
0032cc9f 31205d30 0x39394433
0032cca3 30353934 0x31205d30
0032cca7 20323131 0x30353934
0032ccab 203a736d 0x20323131
0032ccaf 6b72614d 0x203a736d
0032ccb3 6577732d 0x6b72614d
0032ccb7 31207065 node+0x1c732d
0032ccbb 20352e31 0x31207065
0032ccbf 2e333128 0x20352e31
0032ccc3 2d202939 0x2e333128
0032ccc7 3131203e 0x2d202939
0032cccb 2820352e 0x3131203e
0032cccf 392e3331 0x2820352e
0032ccd3 424d2029 0x392e3331
0032ccd7 3831202c 0x424d2029
0032ccdb 2f20322e 0x3831202c
0032ccdf 302e3020 0x2f20322e
0032cce3 20736d20 0x302e3020
0032cce7 76612820 0x20736d20
0032cceb 67617265 crypt32!RegOpenHKCUKeyExU+0xa1
0032ccff 6e657272 node+0x2067265
0032cd03 756d2074 0x6e657272
0032cd6f 00000000 ole32!CStdMarshal::MarshalInterface+0xef

Top 29: total counts = 1

ChildEBP RetAddr  
0a2df940 04b606a2 ffi_bindings!ffi_closure_STDCALL+0x25
WARNING: Frame IP not in any known module. Following frames may be wrong.
0a2df954 77a5a853 0x4b606a2
0a2df99c 77a88a47 ntdll!RtlpTpWaitCallback+0x93
0a2df9c4 77a88af9 ntdll!TppExecuteWaitCallback+0x7d
0a2df9dc 77a8620b ntdll!TppWaitCompletion+0x79
0a2dfb9c 756f5d49 ntdll!TppWorkerThread+0x59b
0a2dfbac 77a9d1ab kernel32!BaseThreadInitThunk+0x19
0a2dfc04 77a9d131 ntdll!__RtlUserThreadStart+0x2b
0a2dfc14 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b3e398 6845d1af node+0x128dd02
00b3e4d4 6864ed74 node+0x128d1af
00b3e554 686560bd node+0x147ed74
00b3e5ac 760a5ea4 node+0x14860bd
00b3e5b0 760bc4e4 gdi32!IsEdgeGdiProcess+0x14
00b3e5b4 760a760f gdi32!g_pEdgeGdi+0x8
00b3e5b8 00b3e618 gdi32!CreateHalftonePalette+0x2f
00b3e5bc 1ad7ff98 0xb3e618
00b3e618 00b3e660 0x1ad7ff98
00b3e61c 0629c7e8 0xb3e660
00b3e660 0655c57c 0x629c7e8
00b3e678 20459a50 0x655c57c
00000000 00000000 0x20459a50

Top 31: total counts = 1

ChildEBP RetAddr  
043af638 69f9e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
043af70c 69fe89d7 node+0x12ae87c
00000000 00000000 node+0x12f89d7

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
155bf398 7bf3f0bc SS2DevProps+0x9532
155bf3cc 7bf639c1 CleanEngine!common_util::GetNtVerNumbers+0x4c
155bf3fc 7bf50993 CleanEngine!CommonHelper::GetNtVerNumbers+0x51
155bf41c 7bf61c93 CleanEngine!luaD_precall+0x253
155bf528 7bf503d8 CleanEngine!luaV_execute+0xfa3
155bf53c 7bf479df CleanEngine!luaD_call+0x58
155bf550 7bf50b49 CleanEngine!f_call+0x1f
155bf5c0 7bf505a6 CleanEngine!luaD_rawrunprotected+0x69
155bf5f0 7bf484af CleanEngine!luaD_pcall+0x46
155bf620 7bf0a93e CleanEngine!lua_pcall+0x5f
155bf640 7bf0a6e7 CleanEngine!LuaHelper::ExecuteString+0x6e
155bf674 7bf1ffee CleanEngine!LuaEngine::DoScript+0xd7
155bf70c 7bf2065b CleanEngine!RuleNode::OperationImp+0x12e
155bf7c4 7bf19ade CleanEngine!RuleNode::Scan+0x4db
155bf7f4 7bef9fb7 CleanEngine!Task::CTaskT< >::Execute+0x5e
155bf814 7bef9e0e CleanEngine!Task::CTaskInfo::Execute+0x77
155bf874 7befb2ff CleanEngine!Task::CTaskQueue::DoTask_Idle+0xae
155bf8e4 7befbbe6 CleanEngine!Task::CTaskThread::ThreadProc+0x1df
155bf924 7c09bad7 CleanEngine!Task::CTaskThread::s_ThreadProc+0x66
155bf960 7701fcc9 CleanEngine!thread_start+0x57
155bf970 779a82ae kernel32!BaseThreadInitThunk+0x19
155bf9cc 779a827e ntdll!__RtlUserThreadStart+0x2f
155bf9dc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0019e348 10e9d1af node+0x128dd02
0019e484 1108ed74 node+0x128d1af
0019e504 110960bd node+0x147ed74
0019e55c 77c29c44 node+0x14860bd
0019e560 77c3c4d8 gdi32!IsEdgeGdiProcess+0x14
0019e564 77c29c0f gdi32!Feature_Servicing_CFONTPrintLeak__private_featureState+0x8
0019e568 0019e5c8 gdi32!D3DKMTOpenAdapterFromHdc+0x4f
0019e56c 08ba1dc0 0x19e5c8
0019e5c8 0019e610 0x8ba1dc0
0019e5e4 00000000 0x19e610

Top 34: total counts = 1

ChildEBP RetAddr  
0015e220 010e2340 WinOptimize!ValidateLocalCookies+0xb
0015e258 77338011 WinOptimize!_except_handler4+0x30
0015e27c 77337fe3 ntdll!ExecuteHandler2+0x26
0015e2a0 77337f85 ntdll!ExecuteHandler+0x24
0015e32c 772f0133 ntdll!RtlDispatchException+0x127
0015e32c 00000000 ntdll!KiUserExceptionDispatcher+0xf

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030c378 621fdc08 node+0x2a2f20b
0030c677 31312070 node+0xb2dc08
0030c67b 2820342e 0x31312070
0030c67f 352e3331 0x2820342e
0030c683 3e2d2029 0x352e3331
0030c687 2e313120 0x3e2d2029
0030c68b 31282034 0x2e313120
0030c68f 29352e33 0x31282034
0030c693 2c424d20 0x29352e33
0030c697 39313120 0x2c424d20
0030c69b 352e3139 0x39313120
0030c69f 31202f20 0x352e3139
0030c6a3 322e3434 0x31202f20
0030c6a7 20736d20 0x322e3434
0030c6ab 76612820 0x20736d20
0030c6af 67617265 shell32!__dyn_tls_init_callback  (shell32+0x8e2820)
0030c6b3 756d2065 0x67617265
0030c6ef 206e6920 crypt32!I_CertDllOpenSystemRegistryStoreProvW+0x1b4
0030c70f 46434141 0x206e6920
0030c713 205d3837 0x46434141
0030c717 38303435 0x205d3837
0030c71b 37383434 0x38303435
0030c71f 736d2031 0x37383434
0030c723 614d203a 0x736d2031
0030c727 732d6b72 0x614d203a
0030c72b 70656577 0x732d6b72
0030c72f 2e313120 0x70656577
0030c733 31282035 0x2e313120
0030c737 29352e33 0x31282035
0030c73b 203e2d20 0x29352e33
0030c73f 342e3131 0x203e2d20
0030c743 33312820 0x342e3131
0030c747 2029352e 0x33312820
0030c74b 202c424d 0x2029352e
0030c74f 30333031 0x202c424d
0030c753 332e3638 0x30333031
0030c757 37202f20 0x332e3638
0030c75b 342e3132 0x37202f20
0030c75f 20736d20 0x342e3132
0030c763 76612820 0x20736d20
0030c767 67617265 shell32!__dyn_tls_init_callback  (shell32+0x8e2820)
0030c76b 756d2065 0x67617265
0030c7a7 206e6920 crypt32!I_CertDllOpenSystemRegistryStoreProvW+0x1b4
0030c7c7 46434141 0x206e6920
0030c7cb 205d3837 0x46434141
0030c7cf 38303435 0x205d3837
0030c7d3 32383734 0x38303435
0030c7d7 736d2035 0x32383734
0030c7db 614d203a 0x736d2035
0030c7df 732d6b72 0x614d203a
0030c7e3 70656577 0x732d6b72
0030c7e7 2e313120 0x70656577
0030c7eb 31282034 0x2e313120
0030c7ef 29352e33 0x31282034
0030c7f3 203e2d20 0x29352e33
0030c7f7 342e3131 0x203e2d20
0030c7fb 33312820 0x342e3131
0030c7ff 2029352e 0x33312820
0030c803 202c424d 0x2029352e
0030c807 34393532 0x202c424d
0030c80b 2f20352e 0x34393532
0030c80f 302e3020 0x2f20352e
0030c813 20736d20 0x302e3020
0030c817 76612820 0x20736d20
0030c81b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x8e2820)
0030c81f 756d2065 0x67617265
0030c85b 206e6920 crypt32!I_CertDllOpenSystemRegistryStoreProvW+0x1b4
0030c87b 00000000 0x206e6920

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003cc980 6d0fdc08 node+0x2a2f20b
003ccc7f 736d2032 node+0xb2dc08
003ccc83 614d203a 0x736d2032
003ccc87 732d6b72 0x614d203a
003ccc8b 70656577 0x732d6b72
003ccc8f 2e313120 node+0x4086577
003ccc93 31282031 0x2e313120
003ccc97 29322e33 0x31282031
003ccc9b 203e2d20 0x29322e33
003ccc9f 312e3131 0x203e2d20
003ccca3 33312820 0x312e3131
003ccca7 2029322e 0x33312820
003cccab 202c424d 0x2029322e
003cccaf 302e3332 0x202c424d
003cccb3 30202f20 0x302e3332
003cccb7 6d20302e 0x30202f20
003cccbb 28202073 node+0xc3302e
003cccbf 72657661 0x28202073
003cccc3 20656761 propsys!`string'+0x19
003cccc7 3d20756d 0x20656761
003ccccb 392e3020 0x3d20756d
003ccccf 202c3939 0x392e3020
003cccd3 72727563 0x202c3939
003cccd7 20746e65 propsys!___PchSym_  (propsys+0xe7563)
003cccdb 3d20756d 0x20746e65
003cccdf 302e3020 0x3d20756d
003ccce3 20293230 0x302e3020
003ccce7 20776f6c 0x20293230
003ccceb 6f6d656d 0x20776f6c
003cccef 6e207972 node+0x310656d
003cccf3 6669746f node+0x1c37972
003ccd73 65676172 d3d9!CSwapChain::PresentMain+0x545
003ccd8b 20756d20 explorerframe!`string'+0x32
003ccd8f 2e31203d 0x20756d20
003ccd93 29303030 0x2e31203d
003ccd97 776f6c20 0x29303030
003ccd9b 6d656d20 0x776f6c20
003ccd9f 2079726f node+0x1086d20
003ccda3 69746f6e 0x2079726f
003ccda7 61636966 0x69746f6e
003ccdab 6e6f6974 0x61636966
003ccdaf 20434720 node+0x2126974
003ccdb3 6f206e69 0x20434720
003ccdb7 7320646c node+0x2c36e69
003ccdbb 65636170 0x7320646c
003ccdbf 71657220 0x65636170
003ccdc3 74736575 0x71657220
003ccdc7 5b0a6465 0x74736575
003ccdcb 34323332 0x5b0a6465
003ccdcf 3032303a 0x34323332
003ccdd3 35434442 0x3032303a
003ccdd7 31205d30 0x35434442
003ccddb 34383331 0x31205d30
003ccddf 20323037 0x34383331
003ccde3 203a736d 0x20323037
003ccde7 6b72614d 0x203a736d
003ccdeb 6577732d 0x6b72614d
003ccdef 31207065 explorerframe!__dyn_tls_init_callback  (explorerframe+0x12732d)
003ccdf3 20312e31 0x31207065
003ccdf7 2e333128 0x20312e31
003ccdfb 2d202932 0x2e333128
003ccdff 3131203e 0x2d202932
003cce03 2820312e 0x3131203e
003cce07 322e3331 0x2820312e
003cce0b 424d2029 0x322e3331
003cce0f 3332202c 0x424d2029
003cce13 2f20392e 0x3332202c
003cce17 302e3020 0x2f20392e
003cce1b 20736d20 0x302e3020
003cce1f 76612820 0x20736d20
003cce23 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa62820)
003cce27 756d2065 0x67617265
003cce2b 30203d20 kernel32!c_Omap_urlmon+0x155
003cce2f 3939392e 0x30203d20
003cce33 7563202c 0x3939392e
003cce37 6e657272 0x7563202c
003cce3b 756d2074 node+0x2087272
003cce3f 30203d20 kernel32!c_Omap_urlmon+0x164
003cce43 3230302e 0x30203d20
003cce47 6f6c2029 0x3230302e
003cce4b 656d2077 node+0x30f2029
003cce5b 6f697461 explorerframe!OrderList_LoadFromStream+0x46
003cce6b 63617073 node+0x30c7461
003cce6f 65722065 0x63617073
003cce77 0a646574 explorerframe!CToolTipManager::_GetEventActionCB+0x3
003cce8b 00000000 0xa646574

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe328 7053733c 0x2dd64f72
012fe34c 2dd584ff node+0x105733c
012fe370 7053733c 0x2dd584ff
012fe38c 7053cd50 node+0x105733c
012fe3c4 70564501 node+0x105cd50
012fe3e0 705855ea node+0x1084501
012fe3fc 70558046 node+0x10a55ea
012fe424 7053ab9b node+0x1078046
012fe450 701244bc node+0x105ab9b
012fe4d8 70124913 node+0xc444bc
012fe4e4 035e6f20 node+0xc44913
00000000 00000000 0x35e6f20

Top 38: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfdd78 1061d1af node+0x128dd02
00cfdeac 1080ed74 node+0x128d1af
00cfdf2c 108160bd node+0x147ed74
00cfdf84 758c5fa4 node+0x14860bd
00cfdf88 758dc4e8 gdi32!IsEdgeGdiProcess+0x14
00cfdf8c 758c770f gdi32!g_pEdgeGdi+0xc
00cfdf90 00cfdff0 gdi32!CreateHalftonePalette+0x2f
00cfdf94 059bae20 0xcfdff0
00cfdff0 00cfe038 0x59bae20
00cfdff4 058c73f8 0xcfe038
00cfe038 2f6ae354 0x58c73f8
00cfe050 05c1e1e8 0x2f6ae354
00000000 00000000 0x5c1e1e8

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0053e3c8 1045d1af node+0x128dd02
0053e504 1064ed74 node+0x128d1af
0053e584 106560bd node+0x147ed74
0053e5dc 752d5fa4 node+0x14860bd
0053e5e0 752ec4e8 gdi32!IsEdgeGdiProcess+0x14
0053e5e4 752d770f gdi32!g_pEdgeGdi+0xc
0053e5e8 0053e648 gdi32!CreateHalftonePalette+0x2f
0053e5ec 0d09c810 0x53e648
0053e648 0053e690 0xd09c810
0053e64c 0cebe628 0x53e690
0053e690 0d1f244c 0xcebe628
0053e6a8 1de1e848 0xd1f244c
00000000 00000000 0x1de1e848

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0075e288 6cdad1af node+0x128dd02
0075e3c4 6cf9ed74 node+0x128d1af
0075e444 6cfa60bd node+0x147ed74
0075e49c 75805fa4 node+0x14860bd
0075e4a0 7581c4e8 gdi32!IsEdgeGdiProcess+0x14
0075e4a4 7580770f gdi32!g_pEdgeGdi+0xc
0075e4a8 0075e508 gdi32!CreateHalftonePalette+0x2f
0075e4ac 15c4a188 0x75e508
0075e508 0075e550 0x15c4a188
0075e50c 04c28910 0x75e550
0075e550 0451275c 0x4c28910
0075e568 04e367f8 0x451275c
00000000 00000000 0x4e367f8

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fe3a8 6e87d1af node+0x128dd02
010fe4dc 6ea6ed74 node+0x128d1af
010fe55c 6ea760bd node+0x147ed74
010fe5b4 75bd99f4 node+0x14860bd
010fe5b8 75beb4c8 gdi32!IsEdgeGdiProcess+0x14
010fe5bc 75bd99bf gdi32!g_pEdgeGdi+0x8
010fe5c0 010fe620 gdi32!D3DKMTOpenAdapterFromHdc+0x4f
010fe5c4 08d8c5e8 0x10fe620
010fe620 010fe668 0x8d8c5e8
010fe63c 00000000 0x10fe668

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00bde1d8 110ad1af node+0x128dd02
00bde30c 1129ed74 node+0x128d1af
00bde38c 112a60bd node+0x147ed74
00bde3e4 76f35fc4 node+0x14860bd
00bde3e8 76f4d4f8 gdi32!IsEdgeGdiProcess+0x14
00bde3ec 76f375ff gdi32!g_pEdgeGdi+0xc
00bde3f0 00bde450 gdi32!LpkpInitializeEditControl+0x2f
00bde3f4 1831d4a8 0xbde450
00bde450 00bde498 0x1831d4a8
00bde454 083ee250 0xbde498
00bde498 18300f74 0x83ee250
00bde4b0 18266b68 0x18300f74
00000000 00000000 0x18266b68

Top 43: total counts = 1

ChildEBP RetAddr  
0588fce0 00000000 rightsmanager!memcpy+0x4e

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030cac0 104bdc08 node+0x2a2f20b
0030cdbf 736d2031 node+0xb2dc08
0030cddf 342e3131 IPHLPAPI!GetUdpTableInternal+0x157
0030cdf7 6d20302e 0x342e3131
0030cdfb 28202073 0x6d20302e
0030cdff 72657661 0x28202073
0030ce03 20656761 taskschd!ATL::IDispatchImpl::_tih+0x11
0030ce07 3d20756d 0x20656761
0030ce0b 302e3120 0x3d20756d
0030ce0f 202c3030 0x302e3120
0030ce13 72727563 0x202c3030
202c3030 00000000 dnsapi!WPP_SF_S+0x2e

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009fdde8 10e7d1af node+0x128dd02
009fdf24 1106ed74 node+0x128d1af
009fdfa4 110760bd node+0x147ed74
009fdffc 76a55ef4 node+0x14860bd
009fe000 76a6c4e0 gdi32!IsEdgeGdiProcess+0x14
009fe004 76a5751f gdi32!___PchSym_+0x8
009fe008 009fe068 gdi32!LpkpInitializeEditControl+0x2f
009fe00c 065346d8 0x9fe068
009fe068 009fe0b0 0x65346d8
009fe06c 0638aee0 0x9fe0b0
009fe0b0 064828d4 0x638aee0
009fe0c8 24d302b8 0x64828d4
00000000 00000000 0x24d302b8

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007ce398 6530d1af node+0x128dd02
007ce4d4 654fed74 node+0x128d1af
007ce554 655060bd node+0x147ed74
007ce5ac 760699f4 node+0x14860bd
007ce5b0 7607b4c8 gdi32!IsEdgeGdiProcess+0x14
007ce5b4 760699bf gdi32!g_pEdgeGdi+0x8
007ce5b8 007ce618 gdi32!D3DKMTOpenAdapterFromHdc+0x4f
007ce5bc 131a8480 0x7ce618
007ce618 007ce660 0x131a8480
007ce634 00000000 0x7ce660

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
001fdc60 6eaab396 0x831bf6b
001fdcc4 6d1d3e20 node+0x21cb396
001fdcc8 1644add0 node+0x8f3e20
001fdccc 00000000 0x1644add0

Top 48: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
043cfac8 672be8da node+0xce6c1f
043cfb20 687993e5 node+0xcee8da
043cfb6c 7716fcc9 node+0x21c93e5
043cfb7c 777b82ae kernel32!BaseThreadInitThunk+0x19
043cfbd8 777b827e ntdll!__RtlUserThreadStart+0x2f
043cfbe8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0035bb38 6bbddc08 node+0x2a2f20b
0035be37 736d2030 node+0xb2dc08
0035be3b 614d203a 0x736d2030
0035be3f 732d6b72 0x614d203a
0035be43 70656577 0x732d6b72
0035be47 2e313120 0x70656577
0035be4b 31282032 0x2e313120
0035be4f 29302e33 0x31282032
0035be53 203e2d20 0x29302e33
0035be57 322e3131 0x203e2d20
0035be5b 33312820 0x322e3131
0035be5f 2029302e 0x33312820
0035be63 202c424d 0x2029302e
0035be67 392e3831 0x202c424d
0035be6b 30202f20 0x392e3831
0035be6f 6d20302e 0x30202f20
0035be73 28202073 node+0x215302e
0035be77 72657661 0x28202073
0035be7b 20656761 0x72657661
0035be7f 3d20756d 0x20656761
0035be83 392e3020 0x3d20756d
0035be87 202c3839 0x392e3020
0035be8b 72727563 0x202c3839
0035be8f 20746e65 0x72727563
0035be93 3d20756d 0x20746e65
0035be97 302e3020 0x3d20756d
0035be9b 20293230 0x302e3020
0035be9f 20776f6c 0x20293230
0035bea3 6f6d656d 0x20776f6c
0035bea7 6e207972 node+0x462656d
0035beab 6669746f node+0x3157972
0035beaf 74616369 0x6669746f
0035beb3 206e6f69 0x74616369
0035beb7 69204347 0x206e6f69
0035bebb 6c6f206e 0x69204347
0035bebf 70732064 node+0x164206e
0035bec3 20656361 0x70732064
0035bec7 75716572 0x20656361
0035becb 65747365 shell32!__dyn_tls_init_callback  (shell32+0x8f6572)
0035becf 325b0a64 0x65747365
0035bed3 3a363935 0x325b0a64
0035bed7 43313130 0x3a363935
0035bedb 38304546 0x43313130
0035bedf 3231205d 0x38304546
0035bee3 36383534 0x3231205d
0035bee7 6d203235 0x36383534
0035beeb 4d203a73 node+0x2153235
0035beef 2d6b7261 0x4d203a73
0035bef3 65657773 0x2d6b7261
0035bef7 31312070 0x65657773
0035befb 2820392e 0x31312070
0035beff 302e3331 0x2820392e
0035bf03 3e2d2029 0x302e3331
0035bf07 2e313120 0x3e2d2029
0035bf0b 31282032 0x2e313120
0035bf0f 29302e33 0x31282032
0035bf13 2c424d20 0x29302e33
0035bf17 2e393120 0x2c424d20
0035bf1b 202f2032 0x2e393120
0035bf1f 20302e30 0x202f2032
0035bf23 2020736d 0x20302e30
0035bf27 65766128 0x2020736d
0035bf2b 65676172 0x65766128
0035bf2f 20756d20 0x65676172
0035bf33 2e30203d 0x20756d20
0035bf37 2c393939 0x2e30203d
0035bf3b 72756320 0x2c393939
0035bf43 20756d20 gpapi!XImpersonate::Revert+0x19
0035bf47 2e31203d 0x20756d20
0035bf4b 29303030 0x2e31203d
0035bf4f 776f6c20 0x29303030
0035bf53 6d656d20 0x776f6c20
0035bf57 2079726f node+0x25a6d20
0035bf5b 69746f6e 0x2079726f
0035bf5f 61636966 0x69746f6e
0035bf63 6e6f6974 0x61636966
0035bf67 20434720 node+0x3646974
0035bf6b 6f206e69 0x20434720
0035bf6f 7320646c node+0x4156e69
0035bf73 65636170 0x7320646c
0035bf77 71657220 0x65636170
0035bf7b 74736575 0x71657220
0035bf7f 5b0a6465 0x74736575
0035bf83 36393532 0x5b0a6465
0035bf87 3131303a 0x36393532
0035bf8b 30454643 0x3131303a
0035bf8f 31205d38 0x30454643
0035bf93 38353432 0x31205d38
0035bf97 20363636 0x38353432
0035bf9b 203a736d 0x20363636
0035bf9f 6b72614d 0x203a736d
0035bfa3 6577732d node+0x67614d
0035bfa7 31207065 0x6577732d
0035bfab 20322e31 0x31207065
0035bfaf 2e333128 0x20322e31
0035bfb3 2d202930 0x2e333128
0035bfb7 3131203e 0x2d202930
0035bfbb 2820322e 0x3131203e
0035bfbf 302e3331 0x2820322e
0035bfc3 424d2029 0x302e3331
0035bfc7 3231202c 0x424d2029
0035bfcb 2f20372e 0x3231202c
0035bfcf 302e3020 0x2f20372e
0035bfd3 20736d20 0x302e3020
0035bfd7 76612820 0x20736d20
0035bfdf 756d2065 wininet!_aulldvrm+0x4f
0035bff3 756d2074 shell32!__dyn_tls_init_callback  (shell32+0x8b2065)
0035bff7 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x8b2074)
0035bffb 3434302e 0x30203d20
0035bfff 6f6c2029 0x3434302e
0035c003 656d2077 node+0x4612029
0035c007 79726f6d 0x656d2077
0035c00b 746f6e20 0x79726f6d
0035c00f 63696669 0x746f6e20
0035c013 6f697461 0x63696669
0035c017 4347206e node+0x45e7461
0035c01b 206e6920 0x4347206e
0035c01f 20646c6f 0x206e6920
0035c023 63617073 0x20646c6f
0035c027 65722065 0x63617073
0035c02b 73657571 0x65722065
0035c02f 0a646574 0x73657571
0035c033 00000000 0xa646574

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fde88 6f59d1af node+0x128dd02
006fdfbc 6f78ed74 node+0x128d1af
006fe03c 6f7960bd node+0x147ed74
006fe094 77585ef4 node+0x14860bd
006fe098 7759c4e0 gdi32!IsEdgeGdiProcess+0x14
006fe09c 7758751f gdi32!___PchSym_+0x8
006fe0a0 006fe100 gdi32!LpkpInitializeEditControl+0x2f
006fe0a4 0fbe7758 0x6fe100
006fe100 006fe148 0xfbe7758
006fe104 0f8ca860 0x6fe148
006fe148 1c976b44 0xf8ca860
006fe160 1c7712d8 0x1c976b44
00000000 00000000 0x1c7712d8