Analyzed 147 dump

Top 1: total counts = 5

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0730f3c8 103bd1dd node+0x128dd80
0730f508 114ae32a node+0x128d1dd
0730f56c 773b98a2 node+0x237e32a
0730f5d0 103dac52 KERNELBASE!CreateFileMappingNumaW+0x142
00000000 00000000 node+0x12aac52

Top 2: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fef78 00000000 node+0x128dd80

Top 3: total counts = 4

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0527f9b4 75a6fcc9 0x0
0527f9c4 76fd82ae kernel32!BaseThreadInitThunk+0x19
0527fa20 76fd827e ntdll!__RtlUserThreadStart+0x2f
0527fa30 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0d9bf198 60fed1dd node+0x128dd80
0d9bf2d8 620de32a node+0x128d1dd
0d9bf340 77d79b6c node+0x237e32a
0d9bf344 7668289d ntdll!ZwCreateSection+0xc
0d9bf3a4 00000000 KERNELBASE!CreateFileMappingNumaW+0xcd

Top 5: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
22cbef58 6ea5d1dd node+0x128dd80
22cbf098 6fb4e32a node+0x128d1dd
22cbf0fc 76cd78e2 node+0x237e32a
22cbf160 00000000 KERNELBASE!CreateFileMappingNumaW+0x142

Top 6: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04d1fc88 6e10e8da node+0xc6bd50
04d1fce0 6f5e93e5 node+0xcee8da
04d1fd2c 75aff989 node+0x21c93e5
04d1fd3c 773f7084 kernel32!BaseThreadInitThunk+0x19
04d1fd98 773f7054 ntdll!__RtlUserThreadStart+0x2f
04d1fda8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0b87f97c 00000000 wnTSF+0x1546f4

Top 8: total counts = 1

002cf4e8 63bd0f92 user32!PeekMessageW+0x108
WARNING: Stack unwind information not available. Following frames may be wrong.
002cf564 63bd0acb node+0x12a0f92
002cf5a4 63be23d2 node+0x12a0acb
002cf5ec 63be22e2 node+0x12b23d2
002cf630 62ffbd42 node+0x12b22e2
002cf658 62ffd47d node+0x6cbd42
002cf698 62f3ed6c node+0x6cd47d
002cf6f4 62f3f379 node+0x60ed6c
002cf718 62f3ea8a node+0x60f379
004b0800 8c000000 node+0x60ea8a
004b0804 004b0808 0x8c000000
004b0808 00000000 0x4b0808

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0075ec48 6d94d1dd node+0x128dd80
0075ed80 6ea3e32a node+0x128d1dd
0075ed84 0075ed90 node+0x237e32a
0075ed88 00000000 0x75ed90

Top 10: total counts = 1

0658fd08 6c85e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0658fd74 7738f989 node+0x2f3e6e0
0658fd84 77e77084 kernel32!BaseThreadInitThunk+0x19
0658fde0 77e77054 ntdll!__RtlUserThreadStart+0x2f
0658fdf0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00e3ced8 6606dc08 node+0x2a2f20b
00e3d1d7 37323637 node+0xb2dc08
00e3d1db 3a736d20 0x37323637
00e3d1df 72614d20 0x3a736d20
00e3d1e3 77732d6b 0x72614d20
00e3d1e7 20706565 0x77732d6b
00e3d1eb 372e3031 0x20706565
00e3d1ef 32312820 0x372e3031
00e3d1f3 2029382e 0x32312820
00e3d1f7 31203e2d 0x2029382e
00e3d1fb 20372e30 0x31203e2d
00e3d1ff 2e323128 0x20372e30
00e3d203 4d202938 0x2e323128
00e3d207 35202c42 0x4d202938
00e3d20b 2f20362e 0x35202c42
00e3d20f 302e3020 0x2f20362e
00e3d213 20736d20 0x302e3020
00e3d217 76612820 0x20736d20
00e3d427 00000000 setupapi!ClearEditResConflictList+0x68

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
1577fa34 0fe3a5d2 node+0x5c71a1
1577fadc 10beef53 node+0x5ca5d2
1577fb1c 0ff5d3fe node+0x137ef53
1577fb8c 0ff5d161 node+0x6ed3fe
1577fc2c 10b2f812 node+0x6ed161
1577fc94 10b3c728 node+0x12bf812
1577fd54 10b3bfdb node+0x12cc728
1577fe94 10b4056f node+0x12cbfdb
1577fee0 10b403ff node+0x12d056f
1577ff08 7544fcc9 node+0x12d03ff
1577ff18 773a82ae kernel32!BaseThreadInitThunk+0x19
1577ff74 773a827e ntdll!__RtlUserThreadStart+0x2f
1577ff84 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 1

12dbdccc 0f4608d2 shell32!ShellExecuteW+0x6b
12dbdfd8 0f46055d SogouPY+0x1508d2
12dbe4d4 0f508d45 SogouPY+0x15055d
12dbebe4 0f50467e SogouPY+0x1f8d45
12dbf0e4 0f504b68 SogouPY+0x1f467e
12dbf164 0f5c596f SogouPY+0x1f4b68
12dbf754 0f5c59e0 SogouPY+0x2b596f
12dbf76c 0f5c5aef SogouPY+0x2b59e0
12dbf7a4 0f5c5cfe SogouPY+0x2b5aef
12dbf7d4 0f8e5282 SogouPY+0x2b5cfe
12dbf80c 75f67ba9 SogouPY+0x5d5282
12dbf81c 7754c3ab kernel32!BaseThreadInitThunk+0x19
12dbf874 7754c32f ntdll!__RtlUserThreadStart+0x2b
12dbf884 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0022cf10 6e58dc08 node+0x2a2f20b
0022d2c3 72614d20 node+0xb2dc08
6d203136 18468bff propsys!IUnknown_SaveKnownImplToStream+0x28
6d20314a 45896451 0x18468bff
6d20314e e44d8d08 0x45896451
6d203152 09e8f08b 0xe44d8d08
6d203156 8dfffce9 0x9e8f08b
6d20315a d0e8f04d 0x8dfffce9
6d20315e 8bfffc57 0xd0e8f04d
6d203162 009ce9c6 0x8bfffc57
6d203166 83660000 0x9ce9c6
6d20316a 0f030c7d 0x83660000
6d20316e 00000000 0xf030c7d

Top 15: total counts = 1

0030cdef 69204347 0x206e6f69
0030cdf3 6c6f206e PicFace+0x154347
0030ce1b 39303530 d3d9!CEnum::EnumAdapterModes+0x54
0030ce33 2820332e 0x39303530
0030ce37 312e3231 0x2820332e
0030ce3b 3e2d2029 0x312e3231
0030ce3f 2e303120 0x3e2d2029
0030ce43 31282033 0x2e303120
0030ce47 29332e32 0x31282033
0030ce4b 2c424d20 0x29332e32
0030ce4f 38313520 0x2c424d20
0030ce53 2f20372e 0x38313520
0030ce57 302e3020 0x2f20372e
0030ce5b 20736d20 0x302e3020
0030ce5f 76612820 0x20736d20
0030ce63 67617265 kernel32!`string'+0x74
0030ce67 756d2065 0x67617265
0030ce6b 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x432065)
0030ce6f 3736392e 0x30203d20
0030ce73 7563202c 0x3736392e
0030ce77 6e657272 shell32!BindCtx_RegisterFileOperation+0x2c
0030ce87 6f6c2029 node+0x1277272
0030ce8b 656d2077 node+0x22e2029
0030ce8f 79726f6d 0x656d2077
0030ce93 746f6e20 0x79726f6d
0030ce97 63696669 0x746f6e20
0030ce9b 6f697461 0x63696669
0030ce9f 4347206e node+0x22b7461
0030cea3 206e6920 0x4347206e
0030cea7 20646c6f 0x206e6920
0030ceab 63617073 0x20646c6f
0030ceaf 65722065 0x63617073
0030ceb3 73657571 0x65722065
0030ceb7 0a646574 0x73657571
0030cebb 00000000 0xa646574

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fe600 6952ce4c node+0xd5cebd
010fe604 010fe618 node+0xd5ce4c
010fe608 032e8ee0 0x10fe618
010fe618 6932b74a 0x32e8ee0
010fe61c 151350e5 node+0xb5b74a
010fe620 010fe6b4 0x151350e5
010fe624 010fe648 0x10fe6b4
010fe6b4 010fe738 0x10fe648
010fe6b8 010fe7e0 0x10fe738
010fe738 010fe7d4 0x10fe7e0
010fe73c 010fe7dc 0x10fe7d4
010fe7d4 00000000 0x10fe7dc

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133eb88 61a3d1dd node+0x128dd80
0133ecc8 62b2e32a node+0x128d1dd
0133eccc 0133ecd8 node+0x237e32a
0133ecd0 000630fc 0x133ecd8
0133ecd8 00000000 0x630fc

Top 18: total counts = 1

0049c013 7563202c 0x3939392e
0049c017 6e657272 kernel32!ExeNameInitialized  (kernel32+0xf202c)
0049c01b 756d2074 node+0x1617272
0049c043 206e6920 urlmon!PackageHostList::GetNormalizedHost+0x48
0049c047 20646c6f 0x206e6920
0049c04b 63617073 0x20646c6f
0049c04f 65722065 0x63617073
0049c053 73657571 0x65722065
0049c057 0a646574 hid!__dyn_tls_init_callback  (hid+0x7571)
0049c05b 00000000 0xa646574

Top 19: total counts = 1

0051d2bb 736d2035 0x30363236
0051d2bf 614d203a msi!MsiSetOfflineContextW+0x116f60
0051d2c3 732d6b72 0x614d203a
0051d2c7 70656577 0x732d6b72
0051d2cb 2e313120 node+0x3336577
0051d2cf 31282034 0x2e313120
0051d2d3 29312e33 0x31282034
0051d2d7 203e2d20 0x29312e33
0051d2db 312e3131 0x203e2d20
0051d2df 33312820 0x312e3131
0051d2e3 2029312e 0x33312820
0051d2e7 202c424d 0x2029312e
0051d2eb 39343033 0x202c424d
0051d2ef 20342e34 0x39343033
0051d2f3 2e30202f 0x20342e34
0051d2f7 736d2030 0x2e30202f
0051d2fb 61282020 msi!MsiSetOfflineContextW+0x116f5b
0051d2ff 61726576 0x61282020
0051d303 6d206567 0x61726576
0051d307 203d2075 0x6d206567
0051d30b 37372e30 0x203d2075
0051d30f 63202c30 0x37372e30
0051d313 65727275 0x63202c30
0051d317 6d20746e 0x65727275
0051d31b 203d2075 0x6d20746e
0051d31f 33372e30 0x203d2075
0051d323 6c202930 0x33372e30
0051d327 6d20776f 0x6c202930
0051d32b 726f6d65 0x6d20776f
0051d32f 6f6e2079 0x726f6d65
0051d333 69666974 node+0x23c2079
0051d337 69746163 0x69666974
0051d33b 47206e6f 0x69746163
0051d33f 6e692043 0x47206e6f
0051d343 646c6f20 node+0x1372043
0051d347 61707320 0x646c6f20
0051d34b 72206563 0x61707320
0051d34f 65757165 0x72206563
0051d353 64657473 0x65757165
0051d357 34345b0a 0x64657473
0051d35b 32303a38 0x34345b0a
0051d35f 46383435 0x32303a38
0051d363 205d3842 0x46383435
0051d367 31393231 0x205d3842
0051d36b 31343231 0x31393231
0051d36f 3a736d20 0x31343231
0051d373 72614d20 0x3a736d20
0051d377 77732d6b 0x72614d20
0051d37b 20706565 user32!_imp__GetTokenInformation  (user32+0x2d6b)
0051d37f 312e3131 0x20706565
0051d383 33312820 0x312e3131
0051d387 2029312e 0x33312820
0051d38b 31203e2d 0x2029312e
0051d38f 20312e31 0x31203e2d
0051d393 2e333128 0x20312e31
0051d397 4d202931 0x2e333128
0051d39b 34202c42 0x4d202931
0051d39f 35333638 0x34202c42
0051d3a3 2f20372e 0x35333638
0051d3a7 302e3020 0x2f20372e
0051d3ab 20736d20 0x302e3020
0051d3af 76612820 0x20736d20
0051d3b3 67617265 shell32!__dyn_tls_init_callback  (shell32+0x922820)
0051d3b7 756d2065 0x67617265
0051d3bb 30203d20 shlwapi!$$VProc_ImageExportDirectory+0x2b25
0051d3bf 3534342e 0x30203d20
0051d3c3 7563202c 0x3534342e
0051d3c7 6e657272 msvcrt!_wchartodigit+0x1c1
0051d3cf 30203d20 node+0x1337272
0051d3d3 3030302e 0x30203d20
0051d3d7 6f6c2029 0x3030302e
0051d3db 656d2077 node+0x23a2029
0051d3df 79726f6d 0x656d2077
0051d3e3 746f6e20 0x79726f6d
0051d3e7 63696669 0x746f6e20
0051d3eb 6f697461 0x63696669
0051d3ef 4347206e node+0x2377461
0051d3f3 206e6920 0x4347206e
0051d3f7 20646c6f 0x206e6920
0051d3fb 63617073 0x20646c6f
0051d3ff 65722065 0x63617073
0051d403 73657571 0x65722065
0051d407 0a646574 msi!MsiSetOfflineContextW+0x9c49c
0051d40b 00000000 0xa646574

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0026e3fc 6b953e20 node+0xc70f00
0026e400 15f2dd88 node+0x8f3e20
0026e404 00000000 0x15f2dd88

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
049ece44 00000000 node+0xb5d436

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff338 7005d1dd node+0x128dd80
012ff470 7114e32a node+0x128d1dd
012ff528 778d6361 node+0x237e32a
012ff530 012ff588 ntdll!RtlAbPostRelease+0xe
012ff544 00000000 0x12ff588

Top 23: total counts = 1

ChildEBP RetAddr  
0abaf590 75948cc4 ntdll!RtlEnterCriticalSection+0x12
0abaf5b4 75919b38 wininet!INTERNET_HANDLE_OBJECT::SetAbortHandle+0x33
0abaf688 75904f12 wininet!ICSocket::Connect_Start+0x397
0abaf6a0 75944621 wininet!CFsm_SocketConnect::RunSM+0x2a
0abaf6f4 75944c88 wininet!CFsm::Run+0x161
0abaf71c 7590503e wininet!DoFsm+0x60
0abaf730 75982356 wininet!ICSocket::Connect+0x5e
0abaf8d4 75944ed1 wininet!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0xd0e
0abaf8ec 75944621 wininet!CFsm_OpenConnection::RunSM+0x29
0abaf940 75944c88 wininet!CFsm::Run+0x161
0abaf968 75944e73 wininet!DoFsm+0x60
0abaf97c 75944f5a wininet!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x49
0abaf9a4 75945452 wininet!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x87
0abaf9bc 75944621 wininet!CFsm_MakeConnection::RunSM+0x2a
0abafa10 75944c88 wininet!CFsm::Run+0x161
0abafa38 75945109 wininet!DoFsm+0x60
0abafb8c 75944fb1 wininet!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x13b
0abafba4 75944621 wininet!CFsm_SendRequest::RunSM+0x29
0abafbf8 75944c88 wininet!CFsm::Run+0x161
0abafc20 759470ec wininet!DoFsm+0x60
0abafc64 75944860 wininet!HTTP_REQUEST_HANDLE_OBJECT::HttpSendRequest_Start+0x8da
0abafc7c 75944621 wininet!CFsm_HttpSendRequest::RunSM+0x77
0abafcd0 75974d9e wininet!CFsm::Run+0x161
0abafda8 7594ab71 wininet!CFsm::RunWorkItem+0x234
0abafddc 772b7f4c wininet!FailFastThreadPoolCallback<&CFsm::RunWorkItemWrapper>+0x21
0abafdfc 772a9139 ntdll!TppSimplepExecuteCallback+0x102
0abaff4c 7683347d ntdll!TppWorkerThread+0x562
0abaff58 77289732 kernel32!BaseThreadInitThunk+0xe
0abaff98 77289705 ntdll!__RtlUserThreadStart+0x70
0abaffb0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 24: total counts = 1

ChildEBP RetAddr  
004cf268 576ce87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
004cf340 577189d7 node+0x12ae87c
004cf360 576fa2d6 node+0x12f89d7
00000000 00000000 node+0x12da2d6

Top 25: total counts = 1

ChildEBP RetAddr  
03eef338 6d2ce87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
03eef418 6d3189d7 node+0x12ae87c
03eef438 6c0284fe node+0x12f89d7
03eef4f0 7784e434 node+0x84fe
03eef63c 754314ad ntdll!RtlpLowFragHeapAllocFromContext+0xaec
03eef650 6d318c7a kernel32!HeapFree+0x14
03eef67c 6c021422 node+0x12f8c7a
03eef71c 6d5446ca node+0x1422
03eef800 6c628bef node+0x15246ca
03eef820 6d3951aa node+0x608bef
03eef854 6d398064 node+0x13751aa
03eef858 03eef868 node+0x1378064
03eef85c 03eef800 0x3eef868
03eef868 00000000 0x3eef800

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028edb8 6ddfd1dd node+0x128dd80
0028eef0 6eeee32a node+0x128d1dd
0028eef4 0028ef00 node+0x237e32a
0028eef8 00019458 0x28ef00
0028ef00 00000000 0x19458

Top 27: total counts = 1

ChildEBP RetAddr  
003ade18 6d87e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003adef0 6d8c89d7 node+0x12ae87c
003adef4 00000000 node+0x12f89d7

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0118c898 5e96dc08 node+0x2a2f20b
0118cb97 736d2035 node+0xb2dc08
0118cb9b 614d203a 0x736d2035
0118cb9f 732d6b72 node+0x369203a
0118cba3 70656577 0x732d6b72
0118cba7 2e303120 0x70656577
0118cbab 31282038 0x2e303120
0118cbaf 29382e32 0x31282038
0118ccaf 776f6c20 0x29382e32
0118cd53 756d2074 ntdll!TppCallbackEpilog+0x1c3
0118cd73 6f697461 shell32!CTopViewSubCommand::`scalar deleting destructor'+0x4
0118d10b 00000000 DWrite!DWriteRenderingParams::CreateRenderingParamsFromDeviceName+0x5e8

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012febc8 10c8d1dd node+0x128dd80
012fed00 11d7e32a node+0x128d1dd
012fed04 012fed10 node+0x237e32a
012fed08 0001db1c 0x12fed10
012fed10 00000000 0x1db1c

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028ecf8 6db7d1dd node+0x128dd80
0028ee30 6ec6e32a node+0x128d1dd
0028ee34 0028ee40 node+0x237e32a
0028ee38 00012434 0x28ee40
0028ee40 00000000 0x12434

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efe7e4 00000000 node+0xd1f698

Top 32: total counts = 1

ChildEBP RetAddr  
03e9f478 6b46e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
03e9f550 6b4b89d7 node+0x12ae87c
03e9f570 6a22284b node+0x12f89d7
03e9f574 00902d93 node+0x6284b
03e9f578 08b3b2fc 0x902d93
03e9f57c 00240b5c 0x8b3b2fc
03e9f580 00180794 0x240b5c
03e9f584 11311e8c 0x180794
03e9f588 08b3b2d0 0x11311e8c
03e9f58c 08b3b2d0 0x8b3b2d0
03e9f68c 73914019 0x8b3b2d0
00000000 00000000 oleacc!SaveAndClearModifiers+0x4

Top 33: total counts = 1

ChildEBP RetAddr  
0411f8e4 0411f9c0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0411f8f8 0411f908 0x411f9c0
0411f8fc 01534000 0x411f908
0411f908 00000000 0x1534000

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b3ef78 708dd1dd node+0x128dd80
00b3f0b0 719ce32a node+0x128d1dd
00b3f0b4 00b3f0c0 node+0x237e32a
00b3f0b8 00000000 0xb3f0c0

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00d5eb98 1055d1dd node+0x128dd80
00d5ecd0 1164e32a node+0x128d1dd
00d5ecd4 00d5ece0 node+0x237e32a
00d5ecd8 0030f46c 0xd5ece0
00d5ece0 00000000 0x30f46c

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006ff1d8 6e0dd1dd node+0x128dd80
006ff318 6f1ce32a node+0x128d1dd
006ff31c 006ff328 node+0x237e32a
006ff320 000c21d4 0x6ff328
006ff328 00000000 0xc21d4

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003dc240 101bdc08 node+0x2a2f20b
003dc53f 202f2032 node+0xb2dc08
003dc543 20302e30 0x202f2032
003dc547 2020736d 0x20302e30
003dc54b 65766128 0x2020736d
003dc54f 65676172 0x65766128
003dc553 20756d20 0x65676172
003dc557 2e30203d 0x20756d20
003dc55b 2c393939 0x2e30203d
003dc55f 72756320 0x2c393939
003dc563 746e6572 0x72756320
003dc567 20756d20 0x746e6572
003dc56b 2e30203d 0x20756d20
003dc56f 29323030 0x2e30203d
003dc573 6c6c6120 0x29323030
003dc577 7461636f 0x6c6c6120
003dc57b 206e6f69 0x7461636f
003dc57f 6c696166 0x206e6f69
003dc583 20657275 0x6c696166
003dc587 32325b0a 0x20657275
003dc58b 303a3834 0x32325b0a
003dc58f 37303832 0x303a3834
003dc593 5d383641 0x37303832
003dc597 35343120 0x5d383641
003dc59b 36323636 0x35343120
003dc59f 6d203535 0x36323636
003dc5a3 53203a73 0x6d203535
003dc5a7 65766163 0x53203a73
003dc5ab 2065676e 0x65766163
003dc5af 372e3231 0x2065676e
003dc5b3 34312820 0x372e3231
003dc5b7 2029312e 0x34312820
003dc5bb 31203e2d 0x2029312e
003dc5bf 20372e31 0x31203e2d
003dc5c3 2e343128 0x20372e31
003dc5c7 4d202931 0x2e343128
003dc5cb 30202c42 0x4d202931
003dc5cf 2f20322e 0x30202c42
003dc5d3 302e3020 0x2f20322e
003dc5d7 20736d20 0x302e3020
003dc5db 76612820 0x20736d20
003dc5df 67617265 rpcrt4!NdrpConformantStringMarshall+0xf8
003dc5e3 756d2065 0x67617265
003dc5e7 30203d20 kernel32!`string'+0xd
003dc5eb 3939392e 0x30203d20
003dc5ef 7563202c 0x3939392e
003dc5f3 6e657272 shlwapi!_imp__SHGetInstanceExplorer
003dc5f7 756d2074 0x6e657272
003dc5fb 30203d20 kernel32!`string'+0xc
003dc5ff 3230302e 0x30203d20
003dc603 6c612029 0x3230302e
003dc607 61636f6c 0x6c612029
003dc60b 6e6f6974 0x61636f6c
003dc60f 69616620 0x6e6f6974
003dc613 6572756c 0x69616620
003dc617 325b0a20 0x6572756c
003dc61b 3a383432 0x325b0a20
003dc61f 30383230 0x3a383432
003dc623 38364137 0x30383230
003dc627 3431205d 0x38364137
003dc62b 33363635 0x3431205d
003dc62f 20383037 0x33363635
003dc633 203a736d 0x20383037
003dc637 76616353 0x203a736d
003dc63b 65676e65 rpcrt4!ReplaceWithEmptyStringIfNull+0x1
003dc643 31282037 0x65676e65
003dc647 29312e34 0x31282037
003dc64b 203e2d20 0x29312e34
003dc64f 372e3131 0x203e2d20
003dc653 34312820 0x372e3131
003dc657 2029312e 0x34312820
003dc65b 202c424d 0x2029312e
003dc65f 20322e30 0x202c424d
003dc663 2e30202f 0x20322e30
003dc667 736d2030 0x2e30202f
003dc66b 61282020 0x736d2030
003dc66f 61726576 0x61282020
003dc673 6d206567 0x61726576
003dc677 203d2075 0x6d206567
003dc67b 39392e30 0x203d2075
003dc67f 63202c39 0x39392e30
003dc683 65727275 0x63202c39
003dc687 6d20746e 0x65727275
003dc68b 203d2075 0x6d20746e
003dc68f 30302e30 0x203d2075
003dc693 61202932 0x30302e30
003dc697 636f6c6c 0x61202932
003dc69b 6f697461 0x636f6c6c
003dc69f 6166206e 0x6f697461
003dc6a3 72756c69 0x6166206e
003dc6a7 5b0a2065 0x72756c69
003dc6ab 38343232 0x5b0a2065
003dc6af 3832303a 0x38343232
003dc6b3 36413730 0x3832303a
003dc6b7 31205d38 0x36413730
003dc6bb 36363534 0x31205d38
003dc6bf 31393734 0x36363534
003dc6c3 3a736d20 0x31393734
003dc6c7 61635320 0x3a736d20
003dc6cb 676e6576 0x61635320
003dc6cf 32312065 0x676e6576
003dc6d3 2820372e 0x32312065
003dc6d7 312e3431 0x2820372e
003dc6db 3e2d2029 0x312e3431
003dc6df 2e313120 0x3e2d2029
003dc6e3 31282037 0x2e313120
003dc6e7 29312e34 0x31282037
003dc6eb 2c424d20 0x29312e34
003dc6ef 322e3020 0x2c424d20
003dc6f3 30202f20 0x322e3020
003dc6f7 6d20302e 0x30202f20
003dc6fb 28202073 0x6d20302e
003dc6ff 72657661 0x28202073
003dc703 20656761 0x72657661
003dc707 3d20756d 0x20656761
003dc70b 392e3020 0x3d20756d
003dc70f 202c3939 0x392e3020
003dc713 72727563 0x202c3939
003dc717 20746e65 0x72727563
003dc71b 3d20756d 0x20746e65
003dc71f 302e3020 0x3d20756d
003dc723 20293230 0x302e3020
003dc727 6f6c6c61 0x20293230
003dc72b 69746163 0x6f6c6c61
003dc72f 66206e6f 0x69746163
003dc733 756c6961 0x66206e6f
003dc737 0a206572 kernel32!`string'+0x1
003dc73b 00000000 0xa206572

Top 38: total counts = 1

ChildEBP RetAddr  
070efb58 67b7e158 winhttp!HTTP_THREAD_POOL::~HTTP_THREAD_POOL+0x2d
070efb64 67b7e10d winhttp!HTTP_THREAD_POOL::`scalar deleting destructor'+0xd
070efb7c 67b7e0da winhttp!WINHTTP_DLL::_Terminate+0x2a
070efb88 77cd967b winhttp!WINHTTP_DLL::_SafeTerminateDll+0x10
070efbac 77cd9121 ntdll!TppTimerpExecuteCallback+0x10f
070efcfc 77163d12 ntdll!TppWorkerThread+0x562
070efd08 77cb9732 kernel32!BaseThreadInitThunk+0xe
070efd48 77cb9705 ntdll!__RtlUserThreadStart+0x70
070efd60 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe894 68c0733c 0x4a2eed2
006fe8b0 68c0cd50 node+0x105733c
006fe8e0 68c0cd50 node+0x105cd50
006fe918 68c0cd50 node+0x105cd50
006fe94c 04a150ef node+0x105cd50
006fe9a0 04a144b4 0x4a150ef
006fe9cc 68c0ac3f 0x4a144b4
006fe9e4 68c0aa5b node+0x105ac3f
006fea10 687f4534 node+0x105aa5b
006feaa4 687dad6d node+0xc44534
006feab4 02b8c208 node+0xc2ad6d
006feab8 00000000 0x2b8c208

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fed8c 66889ab1 node+0xd1f794
008fed90 008fee4c node+0xca9ab1
008fed94 008fee4c 0x8fee4c
008fee4c 1213fb8d 0x8fee4c
008fee50 196a4381 0x1213fb8d
008fee54 00000000 0x196a4381

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b7f188 65e6d1dd node+0x128dd80
00b7f2c8 66f5e32a node+0x128d1dd
00b7f2cc 00b7f2d8 node+0x237e32a
00b7f2d0 00000000 0xb7f2d8

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0aafed78 1071d1dd node+0x128dd80
0aafeeb8 1180e32a node+0x128d1dd
0aafeebc 0aafeec8 node+0x237e32a
0aafeec0 00092a1c 0xaafeec8
0aafeec8 00000000 0x92a1c

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001acd48 100bdc08 node+0x2a2f20b
001ad097 7563202c node+0xb2dc08
001ad09b 6e657272 KERNELBASE!GetThreadUILanguage+0x1c
001ad09f 756d2074 0x6e657272
001ad0c3 4347206e KERNELBASE!GetFinalPathNameByHandleA+0x54
001ad0d7 73657571 0x4347206e
001ad0db 0a646574 0x73657571
001ad0df 3034315b 0xa646574
001ad0e3 303a3434 0x3034315b
001ad0e7 36303532 0x303a3434
001ad0eb 5d383231 0x36303532
001ad0ef 34363220 0x5d383231
001ad0f3 36313338 0x34363220
001ad0f7 736d2031 0x36313338
001ad0fb 614d203a 0x736d2031
001ad1fb 7563202c 0x614d203a
001ad1ff 6e657272 KERNELBASE!GetThreadUILanguage+0x1c
001ad203 756d2074 0x6e657272
001ad227 4347206e KERNELBASE!GetFinalPathNameByHandleA+0x54
001ad23b 73657571 0x4347206e
001ad23f 0a646574 0x73657571
001ad243 00000000 0xa646574

Top 44: total counts = 1

ChildEBP RetAddr  
0e6aefa0 66183113 winhttp!_chkstk+0x27
0e6af5a4 66182f85 winhttp!GetDefaultGatewayMacAddressList+0x77
0e6af5dc 66182eb9 winhttp!GatewayMacList::AddGatewayMacFromAdapter+0xa1
0e6af698 6618452e winhttp!LoadGatewayMacsByAdapter+0x1d7
0e6af6c8 66182b6e winhttp!WinHttpReadGuidsForConnectedNetworks+0xe9
0e6af6ec 6618394e winhttp!NETWORK_MANAGER::Init+0x4a
0e6af724 6618467e winhttp!NETWORK_MANAGER::GetWpadInformationForConnectedNetworks+0x60
0e6af74c 6617620f winhttp!SWpadAsyncCall::OnWorkItem+0x5b
0e6af78c 6617618d winhttp!HTTP_THREAD_POOL::_WorkItemCallback+0xc1
0e6af794 7747fa5f winhttp!HTTP_THREAD_POOL::_StaticWorkItemCallback+0x16
0e6af7b8 774609b1 ntdll!TppWorkpExecuteCallback+0x10f
0e6af908 74ba343d ntdll!TppWorkerThread+0x562
0e6af914 77449802 kernel32!BaseThreadInitThunk+0xe
0e6af954 774497d5 ntdll!__RtlUserThreadStart+0x70
0e6af96c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0113edb8 632ed1dd node+0x128dd80
0113eef0 643de32a node+0x128d1dd
0113eef4 0113ef00 node+0x237e32a
0113eef8 000f4498 0x113ef00
0113ef00 00000000 0xf4498

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024cd58 6d74dc08 node+0x2a2f20b
0024d057 32383933 node+0xb2dc08
0024d05b 3a736d20 0x32383933
0024d05f 72614d20 0x3a736d20
0024d063 77732d6b 0x72614d20
0024d067 20706565 0x77732d6b
0024d06b 352e3031 0x20706565
0024d06f 32312820 0x352e3031
0024d073 2029332e 0x32312820
0024d077 31203e2d 0x2029332e
0024d07b 20352e30 0x31203e2d
0024d07f 2e323128 0x20352e30
0024d083 4d202933 0x2e323128
0024d087 36202c42 0x4d202933
0024d08b 2f20362e 0x36202c42
0024d08f 302e3020 0x2f20362e
0024d093 20736d20 0x302e3020
0024d097 76612820 0x20736d20
0024d09b 67617265 0x76612820
0024d09f 756d2065 0x67617265
0024d0a3 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x7e2065)
0024d0a7 3030302e 0x31203d20
0024d0ab 7563202c 0x3030302e
0024d0af 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x74202c)
0024d0b3 756d2074 node+0x1a37272
0024d0b7 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x7e2074)
0024d0bb 3330302e 0x30203d20
0024d0bf 6f6c2029 0x3330302e
0024d0c3 656d2077 node+0x2aa2029
0024d0c7 79726f6d 0x656d2077
0024d0cb 746f6e20 0x79726f6d
0024d0cf 63696669 0x746f6e20
0024d0d3 6f697461 0x63696669
0024d0d7 4347206e node+0x2a77461
0024d0db 206e6920 0x4347206e
0024d0df 20646c6f 0x206e6920
0024d0e3 63617073 0x20646c6f
0024d0e7 65722065 0x63617073
0024d0eb 73657571 0x65722065
0024d0ef 0a646574 0x73657571
0024d0f3 3030335b 0xa646574
0024d0f7 30303a34 0x3030335b
0024d0fb 30333042 0x30303a34
0024d0ff 205d3039 0x30333042
0024d103 37353034 0x205d3039
0024d107 30383933 0x37353034
0024d10b 3a736d20 0x30383933
0024d10f 72614d20 0x3a736d20
0024d113 77732d6b 0x72614d20
0024d117 20706565 0x77732d6b
0024d11b 302e3131 0x20706565
0024d11f 32312820 0x302e3131
0024d123 2029332e 0x32312820
0024d127 31203e2d 0x2029332e
0024d12b 20352e30 0x31203e2d
0024d12f 2e323128 0x20352e30
0024d133 4d202933 0x2e323128
0024d137 35202c42 0x4d202933
0024d13b 2f20362e 0x35202c42
0024d13f 302e3020 0x2f20362e
0024d143 20736d20 0x302e3020
0024d147 76612820 0x20736d20
0024d14b 67617265 0x76612820
0024d14f 756d2065 0x67617265
0024d153 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x7e2065)
0024d157 3030302e 0x31203d20
0024d15b 7563202c 0x3030302e
0024d15f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x74202c)
0024d163 756d2074 node+0x1a37272
0024d167 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x7e2074)
0024d16b 3030302e 0x31203d20
0024d16f 6f6c2029 0x3030302e
0024d173 656d2077 node+0x2aa2029
0024d177 79726f6d 0x656d2077
0024d17b 746f6e20 0x79726f6d
0024d17f 63696669 0x746f6e20
0024d183 6f697461 0x63696669
0024d187 4347206e node+0x2a77461
0024d18b 206e6920 0x4347206e
0024d18f 20646c6f 0x206e6920
0024d193 63617073 0x20646c6f
0024d197 65722065 0x63617073
0024d19b 73657571 0x65722065
0024d19f 0a646574 0x73657571
0024d1a3 3030335b 0xa646574
0024d1a7 30303a34 0x3030335b
0024d1ab 30333042 0x30303a34
0024d1af 205d3039 0x30333042
0024d1b3 37353034 0x205d3039
0024d1b7 36383933 0x37353034
0024d1bb 3a736d20 0x36383933
0024d1bf 72614d20 0x3a736d20
0024d1c3 77732d6b 0x72614d20
0024d1c7 20706565 0x77732d6b
0024d1cb 352e3031 0x20706565
0024d1cf 32312820 0x352e3031
0024d1d3 2029332e 0x32312820
0024d1d7 31203e2d 0x2029332e
0024d1db 20352e30 0x31203e2d
0024d1df 2e323128 0x20352e30
0024d1e3 4d202933 0x2e323128
0024d1e7 36202c42 0x4d202933
0024d1eb 2f20332e 0x36202c42
0024d1ef 302e3020 0x2f20332e
0024d1f3 20736d20 0x302e3020
0024d1f7 76612820 0x20736d20
0024d1fb 67617265 0x76612820
0024d1ff 756d2065 0x67617265
0024d203 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x7e2065)
0024d207 3030302e 0x31203d20
0024d20b 7563202c 0x3030302e
0024d20f 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x74202c)
0024d213 756d2074 node+0x1a37272
0024d217 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x7e2074)
0024d21b 3330302e 0x30203d20
0024d21f 6f6c2029 0x3330302e
0024d223 656d2077 node+0x2aa2029
0024d227 79726f6d 0x656d2077
0024d22b 746f6e20 0x79726f6d
0024d22f 63696669 0x746f6e20
0024d233 6f697461 0x63696669
0024d237 4347206e node+0x2a77461
0024d23b 206e6920 0x4347206e
0024d23f 20646c6f 0x206e6920
0024d243 63617073 0x20646c6f
0024d247 65722065 0x63617073
0024d24b 73657571 0x65722065
0024d24f 0a646574 0x73657571
0024d253 00000000 0xa646574

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003eed58 003eed90 node+0xca9a86
003eed90 003eeea8 0x3eed90
003eed94 003eee10 0x3eeea8
003eeea8 10d44501 0x3eee10
003eeed0 10d655ea node+0x1084501
003eeeec 10d38046 node+0x10a55ea
003eef14 10d1ab9b node+0x1078046
003eef40 109044bc node+0x105ab9b
003eefc8 10904913 node+0xc444bc
003eefd4 00d769e0 node+0xc44913
003eefd8 00000000 0xd769e0

Top 48: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005cef08 57a4d1dd node+0x128dd80
005cf048 58b3e32a node+0x128d1dd
005cf0c4 77762ef6 node+0x237e32a
005cf0d8 00000000 ntdll!RtlpInterlockedPushEntrySList+0x36

Top 49: total counts = 1

ChildEBP RetAddr  
043bf4b8 10ade87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
043bf590 10b289d7 node+0x12ae87c
043bf5b0 0f89284b node+0x12f89d7
043bf5b4 00902d93 node+0x6284b
043bf5b8 051b0f8c 0x902d93
043bf5bc 00240b5c 0x51b0f8c
043bf5c0 00180794 0x240b5c
043bf5c4 15c81e8c 0x180794
043bf5c8 051b0f60 0x15c81e8c
043bf5cc 051b0f60 0x51b0f60
043bf5d0 043bf67c 0x51b0f60
043bf5d4 0f8927d8 0x43bf67c
043bf67c 11068dab node+0x627d8
043bf694 0fe00539 node+0x1838dab
043bf6b0 0fdfd4a9 node+0x5d0539
043bf7cc 0fdf3632 node+0x5cd4a9
043bf8cc 0fdf33f1 node+0x5c3632
043bf8d0 00000000 node+0x5c33f1

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0018edf8 5a30d1dd node+0x128dd80
0018ef38 5b3fe32a node+0x128d1dd
0018ef3c 0018ef48 node+0x237e32a
0018ef40 00102c4c 0x18ef48
0018ef48 00000000 0x102c4c