Analyzed 273 dump

Top 1: total counts = 9

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0730f3c8 103bd1dd node+0x128dd80
0730f508 114ae32a node+0x128d1dd
0730f56c 773b98a2 node+0x237e32a
0730f5d0 103dac52 KERNELBASE!CreateFileMappingNumaW+0x142
00000000 00000000 node+0x12aac52

Top 2: total counts = 5

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fef78 00000000 node+0x128dd80

Top 3: total counts = 4

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0527f9b4 75a6fcc9 0x0
0527f9c4 76fd82ae kernel32!BaseThreadInitThunk+0x19
0527fa20 76fd827e ntdll!__RtlUserThreadStart+0x2f
0527fa30 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04d1fc88 6e10e8da node+0xc6bd50
04d1fce0 6f5e93e5 node+0xcee8da
04d1fd2c 75aff989 node+0x21c93e5
04d1fd3c 773f7084 kernel32!BaseThreadInitThunk+0x19
04d1fd98 773f7054 ntdll!__RtlUserThreadStart+0x2f
04d1fda8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 4

ChildEBP RetAddr  
002bf1e8 1126e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
002bf2c8 1126e7a5 node+0x12ae87c
002bf398 11645e14 node+0x12ae7a5
002bf578 11644525 node+0x1685e14
002bf67c 11643f97 node+0x1684525
002bf708 11659327 node+0x1683f97
002bf780 11657b14 node+0x1699327
002bf7e0 11673c1a node+0x1697b14
002bf808 116242c7 node+0x16b3c1a
002bf868 11624aad node+0x16642c7
002bf8a0 11674f1c node+0x1664aad
002bf920 11684d8e node+0x16b4f1c
00000000 00000000 node+0x16c4d8e

Top 6: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0d9bf198 60fed1dd node+0x128dd80
0d9bf2d8 620de32a node+0x128d1dd
0d9bf340 77d79b6c node+0x237e32a
0d9bf344 7668289d ntdll!ZwCreateSection+0xc
0d9bf3a4 00000000 KERNELBASE!CreateFileMappingNumaW+0xcd

Top 7: total counts = 3

ChildEBP RetAddr  
0039ea7c 609d2d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 8: total counts = 2

ChildEBP RetAddr  
004cf268 576ce87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
004cf340 577189d7 node+0x12ae87c
004cf360 576fa2d6 node+0x12f89d7
00000000 00000000 node+0x12da2d6

Top 9: total counts = 2

ChildEBP RetAddr  
003ade18 6d87e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003adef0 6d8c89d7 node+0x12ae87c
003adef4 00000000 node+0x12f89d7

Top 10: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
22cbef58 6ea5d1dd node+0x128dd80
22cbf098 6fb4e32a node+0x128d1dd
22cbf0fc 76cd78e2 node+0x237e32a
22cbf160 00000000 KERNELBASE!CreateFileMappingNumaW+0x142

Top 11: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005cef08 57a4d1dd node+0x128dd80
005cf048 58b3e32a node+0x128d1dd
005cf0c4 77762ef6 node+0x237e32a
005cf0d8 00000000 ntdll!RtlpInterlockedPushEntrySList+0x36

Top 12: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0b87f97c 00000000 wnTSF+0x1546f4

Top 13: total counts = 1

002cf4e8 63bd0f92 user32!PeekMessageW+0x108
WARNING: Stack unwind information not available. Following frames may be wrong.
002cf564 63bd0acb node+0x12a0f92
002cf5a4 63be23d2 node+0x12a0acb
002cf5ec 63be22e2 node+0x12b23d2
002cf630 62ffbd42 node+0x12b22e2
002cf658 62ffd47d node+0x6cbd42
002cf698 62f3ed6c node+0x6cd47d
002cf6f4 62f3f379 node+0x60ed6c
002cf718 62f3ea8a node+0x60f379
004b0800 8c000000 node+0x60ea8a
004b0804 004b0808 0x8c000000
004b0808 00000000 0x4b0808

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0049cd88 6b40dc08 node+0x2a2f20b
0049d087 736d2039 node+0xb2dc08
0049d0d3 392e3020 dhcpcsvc6!__DllMainCRTStartup+0x11
0049d0e3 3d20756d 0x392e3020
0049d0e7 302e3020 0x3d20756d
0049d0eb 20293330 0x302e3020
0049d0ef 20776f6c 0x20293330
0049d0f3 6f6d656d 0x20776f6c
0049d0f7 6e207972 winhttp!Microsoft_Windows_Networking_ProviderId  (winhttp+0x5656d)
0049d0fb 6669746f node+0x3927972
0049d0ff 74616369 0x6669746f
0049d103 206e6f69 0x74616369
0049d107 69204347 0x206e6f69
0049d10b 6c6f206e 0x69204347
0049d10f 70732064 node+0x1e1206e
0049d113 20656361 0x70732064
0049d117 75716572 0x20656361
0049d2ef 00000000 ole32!CStreamCache::GetESect+0x142

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0075ec48 6d94d1dd node+0x128dd80
0075ed80 6ea3e32a node+0x128d1dd
0075ed84 0075ed90 node+0x237e32a
0075ed88 00000000 0x75ed90

Top 16: total counts = 1

ChildEBP RetAddr  
0499f414 0499f4f8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0499f428 0499f438 0x499f4f8
0499f42c 9c1559dd 0x499f438
0499f438 00000000 0x9c1559dd

Top 17: total counts = 1

003bc3df 736d2030 0x2e30202f
003bc3e3 61282020 360Util+0x32030
003bc3e7 61726576 0x61282020
003bc3eb 6d206567 0x61726576
003bc3ef 203d2075 0x6d206567
003bc3f3 30302e31 0x203d2075
003bc3f7 63202c30 0x30302e31
003bc3fb 65727275 node+0xb72c30
003bc3ff 6d20746e node+0x3097275
003bc403 203d2075 0x6d20746e
003bc407 30302e31 0x203d2075
003bc40b 6c202930 0x30302e31
003bc40f 6d20776f webio!WaTimerWheel+0xd70
003bc413 726f6d65 0x6d20776f
003bc417 6f6e2079 0x726f6d65
003bc41b 69666974 0x6f6e2079
003bc41f 69746163 0x69666974
003bc423 47206e6f 0x69746163
003bc427 6e692043 0x47206e6f
003bc42b 646c6f20 0x6e692043
003bc42f 61707320 node+0x2036f20
003bc433 72206563 0x61707320
003bc437 65757165 0x72206563
003bc43b 64657473 node+0x30c7165
003bc43f 32345b0a node+0x1fc7473
003bc443 303a3639 0x32345b0a
003bc447 31364631 0x303a3639
003bc44b 5d384145 0x31364631
003bc44f 37333120 0x5d384145
003bc453 38323335 0x37333120
003bc457 6d203236 0x38323335
003bc45b 4d203a73 0x6d203236
003bc45f 2d6b7261 0x4d203a73
003bc463 65657773 0x2d6b7261
003bc467 31312070 node+0x2fc7773
003bc46b 2820332e 0x31312070
003bc46f 332e3331 0x2820332e
003bc473 3e2d2029 0x332e3331
003bc477 2e313120 0x3e2d2029
003bc47b 31282032 0x2e313120
003bc47f 29362e33 0x31282032
003bc483 2c424d20 0x29362e33
003bc487 2e363120 0x2c424d20
003bc48b 202f2036 0x2e363120
003bc48f 20302e30 0x202f2036
003bc493 2020736d 0x20302e30
003bc497 65766128 0x2020736d
003bc49b 65676172 node+0x30d6128
003bc49f 20756d20 node+0x2fe6172
003bc4a3 2e30203d 0x20756d20
003bc4a7 2c393939 0x2e30203d
003bc4ab 72756320 0x2c393939
003bc4af 746e6572 0x72756320
003bc4b3 20756d20 0x746e6572
003bc4b7 2e30203d 0x20756d20
003bc4bb 29323030 0x2e30203d
003bc4bf 776f6c20 0x29323030
003bc4c3 6d656d20 shell32!__dyn_tls_init_callback  (shell32+0xbe6c20)
003bc4c7 2079726f dui70!DirectUI::ScrollViewer::s_pClassInfo
003bc4cb 69746f6e 0x2079726f
003bc4cf 61636966 0x69746f6e
003bc4d3 6e6f6974 0x61636966
003bc4d7 20434720 0x6e6f6974
003bc4db 6f206e69 0x20434720
003bc4eb 74736575 oleacc!CStatusBar32::accHitTest+0x11f
003bc4ff 31205d38 0x74736575
003bc503 34353733 0x31205d38
003bc507 34393530 0x34353733
003bc50b 3a736d20 0x34393530
003bc50f 61635320 0x3a736d20
003bc513 676e6576 0x61635320
003bc517 32312065 0x676e6576
003bc51b 2820322e 0x32312065
003bc51f 362e3331 0x2820322e
003bc523 3e2d2029 0x362e3331
003bc527 2e313120 0x3e2d2029
003bc52b 31282032 0x2e313120
003bc52f 29362e33 0x31282032
003bc533 2c424d20 0x29362e33
003bc537 332e3020 0x2c424d20
003bc53b 30202f20 0x332e3020
003bc53f 6d20302e 0x30202f20
003bc543 28202073 0x6d20302e
003bc547 72657661 0x28202073
003bc54b 20656761 0x72657661
003bc54f 3d20756d 0x20656761
003bc553 392e3020 0x3d20756d
003bc557 202c3939 0x392e3020
003bc55b 72727563 0x202c3939
003bc55f 20746e65 0x72727563
003bc563 3d20756d 0x20746e65
003bc567 302e3020 0x3d20756d
003bc56b 20293230 0x302e3020
003bc56f 6f6c6c61 0x20293230
003bc573 69746163 0x6f6c6c61
003bc577 66206e6f 0x69746163
003bc57b 756c6961 node+0x3b76e6f
003bc57f 0a206572 msvcrt!_invoke_watson+0x1
003bc597 00000000 0xa206572

Top 18: total counts = 1

ChildEBP RetAddr  
0043f628 6607e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0043f708 660c89d7 node+0x12ae87c
0043f760 66144486 node+0x12f89d7
0043f7d8 66144308 node+0x1374486
0043f844 66150029 node+0x1374308
0043f848 00000000 node+0x1380029

Top 19: total counts = 1

0658fd08 6c85e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0658fd74 7738f989 node+0x2f3e6e0
0658fd84 77e77084 kernel32!BaseThreadInitThunk+0x19
0658fde0 77e77054 ntdll!__RtlUserThreadStart+0x2f
0658fdf0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

0050f4f0 6c970f92 user32!PeekMessageW+0x108
0050f56c 6c970acb node+0x12a0f92
0050f5ac 6c9823d2 node+0x12a0acb
0050f5f4 6c9822e2 node+0x12b23d2
0050f638 6bd9bd42 node+0x12b22e2
0050f660 6bd9d47d node+0x6cbd42
0050f6a0 6bcded6c node+0x6cd47d
0050f6fc 6bcdf379 node+0x60ed6c
0050f720 6bcdea8a node+0x60f379
0050f724 6c95a300 node+0x60ea8a
0050f728 00500000 node+0x128a300
0050f72c 00000000 0x500000

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00e3ced8 6606dc08 node+0x2a2f20b
00e3d1d7 37323637 node+0xb2dc08
00e3d1db 3a736d20 0x37323637
00e3d1df 72614d20 0x3a736d20
00e3d1e3 77732d6b 0x72614d20
00e3d1e7 20706565 0x77732d6b
00e3d1eb 372e3031 0x20706565
00e3d1ef 32312820 0x372e3031
00e3d1f3 2029382e 0x32312820
00e3d1f7 31203e2d 0x2029382e
00e3d1fb 20372e30 0x31203e2d
00e3d1ff 2e323128 0x20372e30
00e3d203 4d202938 0x2e323128
00e3d207 35202c42 0x4d202938
00e3d20b 2f20362e 0x35202c42
00e3d20f 302e3020 0x2f20362e
00e3d213 20736d20 0x302e3020
00e3d217 76612820 0x20736d20
00e3d427 00000000 setupapi!ClearEditResConflictList+0x68

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
1577fa34 0fe3a5d2 node+0x5c71a1
1577fadc 10beef53 node+0x5ca5d2
1577fb1c 0ff5d3fe node+0x137ef53
1577fb8c 0ff5d161 node+0x6ed3fe
1577fc2c 10b2f812 node+0x6ed161
1577fc94 10b3c728 node+0x12bf812
1577fd54 10b3bfdb node+0x12cc728
1577fe94 10b4056f node+0x12cbfdb
1577fee0 10b403ff node+0x12d056f
1577ff08 7544fcc9 node+0x12d03ff
1577ff18 773a82ae kernel32!BaseThreadInitThunk+0x19
1577ff74 773a827e ntdll!__RtlUserThreadStart+0x2f
1577ff84 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00daee88 66f9d1dd node+0x128dd80
00daefc8 6808e32a node+0x128d1dd
00daefcc 00daefd8 node+0x237e32a
00daefd0 00028b7c 0xdaefd8
00daefd8 00000000 0x28b7c

Top 24: total counts = 1

12dbdccc 0f4608d2 shell32!ShellExecuteW+0x6b
12dbdfd8 0f46055d SogouPY+0x1508d2
12dbe4d4 0f508d45 SogouPY+0x15055d
12dbebe4 0f50467e SogouPY+0x1f8d45
12dbf0e4 0f504b68 SogouPY+0x1f467e
12dbf164 0f5c596f SogouPY+0x1f4b68
12dbf754 0f5c59e0 SogouPY+0x2b596f
12dbf76c 0f5c5aef SogouPY+0x2b59e0
12dbf7a4 0f5c5cfe SogouPY+0x2b5aef
12dbf7d4 0f8e5282 SogouPY+0x2b5cfe
12dbf80c 75f67ba9 SogouPY+0x5d5282
12dbf81c 7754c3ab kernel32!BaseThreadInitThunk+0x19
12dbf874 7754c32f ntdll!__RtlUserThreadStart+0x2b
12dbf884 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0022cf10 6e58dc08 node+0x2a2f20b
0022d2c3 72614d20 node+0xb2dc08
6d203136 18468bff propsys!IUnknown_SaveKnownImplToStream+0x28
6d20314a 45896451 0x18468bff
6d20314e e44d8d08 0x45896451
6d203152 09e8f08b 0xe44d8d08
6d203156 8dfffce9 0x9e8f08b
6d20315a d0e8f04d 0x8dfffce9
6d20315e 8bfffc57 0xd0e8f04d
6d203162 009ce9c6 0x8bfffc57
6d203166 83660000 0x9ce9c6
6d20316a 0f030c7d 0x83660000
6d20316e 00000000 0xf030c7d

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004aee58 6479d1dd node+0x128dd80
004aef98 6588e32a node+0x128d1dd
004aef9c 004aefa8 node+0x237e32a
004aefa0 00054e14 0x4aefa8
004aefa8 00000000 0x54e14

Top 27: total counts = 1

0030cdef 69204347 0x206e6f69
0030cdf3 6c6f206e PicFace+0x154347
0030ce1b 39303530 d3d9!CEnum::EnumAdapterModes+0x54
0030ce33 2820332e 0x39303530
0030ce37 312e3231 0x2820332e
0030ce3b 3e2d2029 0x312e3231
0030ce3f 2e303120 0x3e2d2029
0030ce43 31282033 0x2e303120
0030ce47 29332e32 0x31282033
0030ce4b 2c424d20 0x29332e32
0030ce4f 38313520 0x2c424d20
0030ce53 2f20372e 0x38313520
0030ce57 302e3020 0x2f20372e
0030ce5b 20736d20 0x302e3020
0030ce5f 76612820 0x20736d20
0030ce63 67617265 kernel32!`string'+0x74
0030ce67 756d2065 0x67617265
0030ce6b 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x432065)
0030ce6f 3736392e 0x30203d20
0030ce73 7563202c 0x3736392e
0030ce77 6e657272 shell32!BindCtx_RegisterFileOperation+0x2c
0030ce87 6f6c2029 node+0x1277272
0030ce8b 656d2077 node+0x22e2029
0030ce8f 79726f6d 0x656d2077
0030ce93 746f6e20 0x79726f6d
0030ce97 63696669 0x746f6e20
0030ce9b 6f697461 0x63696669
0030ce9f 4347206e node+0x22b7461
0030cea3 206e6920 0x4347206e
0030cea7 20646c6f 0x206e6920
0030ceab 63617073 0x20646c6f
0030ceaf 65722065 0x63617073
0030ceb3 73657571 0x65722065
0030ceb7 0a646574 0x73657571
0030cebb 00000000 0xa646574

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0044e800 742b0110 ZfHookFileMmPlugin+0x20110
0044e82c 75ef1194 ZfHookFileMmPlugin+0x20110
0044e87c 00000000 kernel32!WaitForSingleObjectExImplementation+0x75

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fe600 6952ce4c node+0xd5cebd
010fe604 010fe618 node+0xd5ce4c
010fe608 032e8ee0 0x10fe618
010fe618 6932b74a 0x32e8ee0
010fe61c 151350e5 node+0xb5b74a
010fe620 010fe6b4 0x151350e5
010fe624 010fe648 0x10fe6b4
010fe6b4 010fe738 0x10fe648
010fe6b8 010fe7e0 0x10fe738
010fe738 010fe7d4 0x10fe7e0
010fe73c 010fe7dc 0x10fe7d4
010fe7d4 00000000 0x10fe7dc

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133eb88 61a3d1dd node+0x128dd80
0133ecc8 62b2e32a node+0x128d1dd
0133eccc 0133ecd8 node+0x237e32a
0133ecd0 000630fc 0x133ecd8
0133ecd8 00000000 0x630fc

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040be80 6c68dc08 node+0x2a2f20b
0040c17f 37343435 node+0xb2dc08
0040c183 3a736d20 0x37343435
0040c187 72614d20 0x3a736d20
0040c18b 77732d6b 0x72614d20
0040c19f 31203e2d CleanEngine!Concurrency::details::WinRT::Initialize+0x1d
0040c1a3 20352e30 0x31203e2d
0040c1a7 2e323128 0x20352e30
0040c1ab 4d202933 0x2e323128
0040c1af 38202c42 0x4d202933
0040c1b3 2f20302e 0x38202c42
0040c1b7 302e3020 0x2f20302e
0040c1bb 20736d20 0x302e3020
0040c1bf 76612820 0x20736d20
0040c1df 30203d20 urlmon!PercentUTF8DecodeCharacter+0x168
0040c1ef 79726f6d 0x30203d20
0040c1f3 746f6e20 0x79726f6d
0040c637 00000000 shell32!CShellLink::_GetShortcutRelativeParentIDAndOffsetWithUNC+0x6e

Top 32: total counts = 1

0049c013 7563202c 0x3939392e
0049c017 6e657272 kernel32!ExeNameInitialized  (kernel32+0xf202c)
0049c01b 756d2074 node+0x1617272
0049c043 206e6920 urlmon!PackageHostList::GetNormalizedHost+0x48
0049c047 20646c6f 0x206e6920
0049c04b 63617073 0x20646c6f
0049c04f 65722065 0x63617073
0049c053 73657571 0x65722065
0049c057 0a646574 hid!__dyn_tls_init_callback  (hid+0x7571)
0049c05b 00000000 0xa646574

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010ff2a8 6f78d1dd node+0x128dd80
010ff3e8 7087e32a node+0x128d1dd
010ff3ec 010ff3f8 node+0x237e32a
010ff3f0 000f9d18 0x10ff3f8
010ff3f8 00000000 0xf9d18

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00def8a4 10dfe8b9 node+0xc6b8bb
00def8dc 10ddf812 node+0x12de8b9
00def948 10de89e6 node+0x12bf812
00defa14 10de875e node+0x12c89e6
00defa70 10dc0ec3 node+0x12c875e
00defaac 10dc0acb node+0x12a0ec3
00defaec 10dd23d2 node+0x12a0acb
00defb34 10dd22e2 node+0x12b23d2
00defb78 101ebd42 node+0x12b22e2
00defba0 101ed47d node+0x6cbd42
00defbe0 1012ed6c node+0x6cd47d
00defc3c 1012f379 node+0x60ed6c
00defc60 1012ea8a node+0x60f379
00defcf8 77115e1e node+0x60ea8a
00defdac 77113c56 ntdll!RtlAllocateHeap+0x3e
00defdc4 0340e000 ntdll!RtlFreeHeap+0x46
00defdd4 00000000 0x340e000

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00eff318 6128d1dd node+0x128dd80
00eff458 6237e32a node+0x128d1dd
00eff45c 00eff468 node+0x237e32a
00eff460 00000000 0xeff468

Top 36: total counts = 1

0051d2bb 736d2035 0x30363236
0051d2bf 614d203a msi!MsiSetOfflineContextW+0x116f60
0051d2c3 732d6b72 0x614d203a
0051d2c7 70656577 0x732d6b72
0051d2cb 2e313120 node+0x3336577
0051d2cf 31282034 0x2e313120
0051d2d3 29312e33 0x31282034
0051d2d7 203e2d20 0x29312e33
0051d2db 312e3131 0x203e2d20
0051d2df 33312820 0x312e3131
0051d2e3 2029312e 0x33312820
0051d2e7 202c424d 0x2029312e
0051d2eb 39343033 0x202c424d
0051d2ef 20342e34 0x39343033
0051d2f3 2e30202f 0x20342e34
0051d2f7 736d2030 0x2e30202f
0051d2fb 61282020 msi!MsiSetOfflineContextW+0x116f5b
0051d2ff 61726576 0x61282020
0051d303 6d206567 0x61726576
0051d307 203d2075 0x6d206567
0051d30b 37372e30 0x203d2075
0051d30f 63202c30 0x37372e30
0051d313 65727275 0x63202c30
0051d317 6d20746e 0x65727275
0051d31b 203d2075 0x6d20746e
0051d31f 33372e30 0x203d2075
0051d323 6c202930 0x33372e30
0051d327 6d20776f 0x6c202930
0051d32b 726f6d65 0x6d20776f
0051d32f 6f6e2079 0x726f6d65
0051d333 69666974 node+0x23c2079
0051d337 69746163 0x69666974
0051d33b 47206e6f 0x69746163
0051d33f 6e692043 0x47206e6f
0051d343 646c6f20 node+0x1372043
0051d347 61707320 0x646c6f20
0051d34b 72206563 0x61707320
0051d34f 65757165 0x72206563
0051d353 64657473 0x65757165
0051d357 34345b0a 0x64657473
0051d35b 32303a38 0x34345b0a
0051d35f 46383435 0x32303a38
0051d363 205d3842 0x46383435
0051d367 31393231 0x205d3842
0051d36b 31343231 0x31393231
0051d36f 3a736d20 0x31343231
0051d373 72614d20 0x3a736d20
0051d377 77732d6b 0x72614d20
0051d37b 20706565 user32!_imp__GetTokenInformation  (user32+0x2d6b)
0051d37f 312e3131 0x20706565
0051d383 33312820 0x312e3131
0051d387 2029312e 0x33312820
0051d38b 31203e2d 0x2029312e
0051d38f 20312e31 0x31203e2d
0051d393 2e333128 0x20312e31
0051d397 4d202931 0x2e333128
0051d39b 34202c42 0x4d202931
0051d39f 35333638 0x34202c42
0051d3a3 2f20372e 0x35333638
0051d3a7 302e3020 0x2f20372e
0051d3ab 20736d20 0x302e3020
0051d3af 76612820 0x20736d20
0051d3b3 67617265 shell32!__dyn_tls_init_callback  (shell32+0x922820)
0051d3b7 756d2065 0x67617265
0051d3bb 30203d20 shlwapi!$$VProc_ImageExportDirectory+0x2b25
0051d3bf 3534342e 0x30203d20
0051d3c3 7563202c 0x3534342e
0051d3c7 6e657272 msvcrt!_wchartodigit+0x1c1
0051d3cf 30203d20 node+0x1337272
0051d3d3 3030302e 0x30203d20
0051d3d7 6f6c2029 0x3030302e
0051d3db 656d2077 node+0x23a2029
0051d3df 79726f6d 0x656d2077
0051d3e3 746f6e20 0x79726f6d
0051d3e7 63696669 0x746f6e20
0051d3eb 6f697461 0x63696669
0051d3ef 4347206e node+0x2377461
0051d3f3 206e6920 0x4347206e
0051d3f7 20646c6f 0x206e6920
0051d3fb 63617073 0x20646c6f
0051d3ff 65722065 0x63617073
0051d403 73657571 0x65722065
0051d407 0a646574 msi!MsiSetOfflineContextW+0x9c49c
0051d40b 00000000 0xa646574

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fefb8 6f09d1dd node+0x128dd80
008ff0f0 7018e32a node+0x128d1dd
008ff0f4 008ff100 node+0x237e32a
008ff0f8 00143020 0x8ff100
008ff100 00000000 0x143020

Top 38: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0026e3fc 6b953e20 node+0xc70f00
0026e400 15f2dd88 node+0x8f3e20
0026e404 00000000 0x15f2dd88

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b7f268 10b6d1dd node+0x128dd80
00b7f3a8 11c5e32a node+0x128d1dd
00b7f3ac 00b7f3b8 node+0x237e32a
00b7f3b0 00000000 0xb7f3b8

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
049ece44 00000000 node+0xb5d436

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff338 7005d1dd node+0x128dd80
012ff470 7114e32a node+0x128d1dd
012ff528 778d6361 node+0x237e32a
012ff530 012ff588 ntdll!RtlAbPostRelease+0xe
012ff544 00000000 0x12ff588

Top 42: total counts = 1

ChildEBP RetAddr  
0abaf590 75948cc4 ntdll!RtlEnterCriticalSection+0x12
0abaf5b4 75919b38 wininet!INTERNET_HANDLE_OBJECT::SetAbortHandle+0x33
0abaf688 75904f12 wininet!ICSocket::Connect_Start+0x397
0abaf6a0 75944621 wininet!CFsm_SocketConnect::RunSM+0x2a
0abaf6f4 75944c88 wininet!CFsm::Run+0x161
0abaf71c 7590503e wininet!DoFsm+0x60
0abaf730 75982356 wininet!ICSocket::Connect+0x5e
0abaf8d4 75944ed1 wininet!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0xd0e
0abaf8ec 75944621 wininet!CFsm_OpenConnection::RunSM+0x29
0abaf940 75944c88 wininet!CFsm::Run+0x161
0abaf968 75944e73 wininet!DoFsm+0x60
0abaf97c 75944f5a wininet!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection+0x49
0abaf9a4 75945452 wininet!HTTP_REQUEST_HANDLE_OBJECT::MakeConnection_Fsm+0x87
0abaf9bc 75944621 wininet!CFsm_MakeConnection::RunSM+0x2a
0abafa10 75944c88 wininet!CFsm::Run+0x161
0abafa38 75945109 wininet!DoFsm+0x60
0abafb8c 75944fb1 wininet!HTTP_REQUEST_HANDLE_OBJECT::SendRequest_Fsm+0x13b
0abafba4 75944621 wininet!CFsm_SendRequest::RunSM+0x29
0abafbf8 75944c88 wininet!CFsm::Run+0x161
0abafc20 759470ec wininet!DoFsm+0x60
0abafc64 75944860 wininet!HTTP_REQUEST_HANDLE_OBJECT::HttpSendRequest_Start+0x8da
0abafc7c 75944621 wininet!CFsm_HttpSendRequest::RunSM+0x77
0abafcd0 75974d9e wininet!CFsm::Run+0x161
0abafda8 7594ab71 wininet!CFsm::RunWorkItem+0x234
0abafddc 772b7f4c wininet!FailFastThreadPoolCallback<&CFsm::RunWorkItemWrapper>+0x21
0abafdfc 772a9139 ntdll!TppSimplepExecuteCallback+0x102
0abaff4c 7683347d ntdll!TppWorkerThread+0x562
0abaff58 77289732 kernel32!BaseThreadInitThunk+0xe
0abaff98 77289705 ntdll!__RtlUserThreadStart+0x70
0abaffb0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 43: total counts = 1

ChildEBP RetAddr  
03eef338 6d2ce87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
03eef418 6d3189d7 node+0x12ae87c
03eef438 6c0284fe node+0x12f89d7
03eef4f0 7784e434 node+0x84fe
03eef63c 754314ad ntdll!RtlpLowFragHeapAllocFromContext+0xaec
03eef650 6d318c7a kernel32!HeapFree+0x14
03eef67c 6c021422 node+0x12f8c7a
03eef71c 6d5446ca node+0x1422
03eef800 6c628bef node+0x15246ca
03eef820 6d3951aa node+0x608bef
03eef854 6d398064 node+0x13751aa
03eef858 03eef868 node+0x1378064
03eef85c 03eef800 0x3eef868
03eef868 00000000 0x3eef800

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012fed08 109ad1dd node+0x128dd80
012fee40 11a9e32a node+0x128d1dd
012fee44 012fee50 node+0x237e32a
012fee48 000d5918 0x12fee50
012fee50 00000000 0xd5918

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0025cd90 66e5dc08 node+0x2a2f20b
0025d08f 203a736d node+0xb2dc08
0025d093 6b72614d 0x203a736d
0025d097 6577732d 0x6b72614d
0025d09b 31207065 0x6577732d
0025d09f 20362e30 0x31207065
0025d0a3 2e323128 0x20362e30
0025d0a7 2d202936 0x2e323128
0025d0ab 3031203e 0x2d202936
0025d0af 2820352e 0x3031203e
0025d0b3 362e3231 0x2820352e
0025d0b7 424d2029 0x362e3231
0025d0bb 2e37202c 0x424d2029
0025d0bf 202f2030 0x2e37202c
0025d0c3 20302e30 0x202f2030
0025d0c7 2020736d 0x20302e30
0025d0cb 65766128 0x2020736d
0025d0cf 65676172 0x65766128
0025d0d3 20756d20 0x65676172
0025d0d7 2e31203d 0x20756d20
0025d0db 2c303030 0x2e31203d
0025d0df 72756320 0x2c303030
0025d0e3 746e6572 0x72756320
0025d0e7 20756d20 0x746e6572
0025d0eb 2e30203d 0x20756d20
0025d0ef 29363030 0x2e30203d
0025d0f3 776f6c20 0x29363030
0025d0f7 6d656d20 0x776f6c20
0025d0fb 2079726f 0x6d656d20
0025d0ff 69746f6e 0x2079726f
0025d103 61636966 node+0x3416f6e
0025d107 6e6f6974 0x61636966
0025d10b 20434720 0x6e6f6974
0025d10f 6f206e69 0x20434720
0025d113 7320646c 0x6f206e69
0025d117 65636170 0x7320646c
0025d11b 71657220 0x65636170
0025d11f 74736575 0x71657220
0025d123 5b0a6465 0x74736575
0025d127 30323432 0x5b0a6465
0025d12b 3032303a 0x30323432
0025d12f 35333934 0x3032303a
0025d133 31205d30 0x35333934
0025d137 36323736 0x31205d30
0025d13b 31323138 0x36323736
0025d13f 3a736d20 0x31323138
0025d143 72614d20 0x3a736d20
0025d147 77732d6b 0x72614d20
0025d14b 20706565 0x77732d6b
0025d14f 312e3131 0x20706565
0025d153 32312820 0x312e3131
0025d157 2029362e 0x32312820
0025d15b 31203e2d 0x2029362e
0025d15f 20352e30 0x31203e2d
0025d163 2e323128 0x20352e30
0025d167 4d202936 0x2e323128
0025d16b 32202c42 0x4d202936
0025d16f 362e3431 0x32202c42
0025d173 39202f20 0x362e3431
0025d177 6d20332e 0x39202f20
0025d17b 28202073 0x6d20332e
0025d17f 72657661 0x28202073
0025d183 20656761 0x72657661
0025d187 3d20756d 0x20656761
0025d18b 392e3020 0x3d20756d
0025d18f 202c3739 0x392e3020
0025d193 72727563 0x202c3739
0025d197 20746e65 0x72727563
0025d19b 3d20756d 0x20746e65
0025d19f 392e3020 0x3d20756d
0025d1a3 20293639 0x392e3020
0025d1a7 20776f6c 0x20293639
0025d1ab 6f6d656d 0x20776f6c
0025d1af 6e207972 0x6f6d656d
0025d1b3 6669746f 0x6e207972
0025d1b7 74616369 node+0x36746f
0025d1bb 206e6f69 0x74616369
0025d1bf 69204347 0x206e6f69
0025d1c3 6c6f206e node+0x2ed4347
0025d1c7 70732064 0x6c6f206e
0025d1cb 20656361 0x70732064
0025d1cf 75716572 0x20656361
0025d3eb 00000000 shell32!CSFStorage::Stat+0x22

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028edb8 6ddfd1dd node+0x128dd80
0028eef0 6eeee32a node+0x128d1dd
0028eef4 0028ef00 node+0x237e32a
0028eef8 00019458 0x28ef00
0028ef00 00000000 0x19458

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0053beb8 6614dc08 node+0x2a2f20b
0053c1b7 66206e6f node+0xb2dc08
0053c1bb 756c6961 node+0xbe6e6f
0053c1bf 0a206572 wininet!`string'+0x19f91
0053c1c3 3638335b 0xa206572
0053c1c7 31303a34 0x3638335b
0053c1cb 42443846 0x31303a34
0053c1cf 205d3832 0x42443846
0053c1d3 30303520 0x205d3832
0053c1d7 39363835 0x30303520
0053c1db 3a736d20 0x39363835
0053c1df 72614d20 0x3a736d20
0053c1e3 77732d6b 0x72614d20
0053c1e7 20706565 0x77732d6b
0053c1eb 392e3031 0x20706565
0053c1ef 32312820 0x392e3031
0053c1f3 2029382e 0x32312820
0053c1f7 31203e2d 0x2029382e
0053c1fb 20362e30 0x31203e2d
0053c1ff 2e323128 0x20362e30
0053c203 4d202938 0x2e323128
0053c207 38202c42 0x4d202938
0053c20b 2f20332e 0x38202c42
0053c20f 302e3020 0x2f20332e
0053c213 20736d20 0x302e3020
0053c217 76612820 0x20736d20
0053c21b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x762820)
0053c21f 756d2065 node+0x1ff7265
0053c223 30203d20 wininet!`string'+0x25695
0053c227 3939392e 0x30203d20
0053c22b 7563202c 0x3939392e
0053c25f 20646c6f wininet!StrTokEx+0x88
0053c267 65722065 0x20646c6f
0053c26b 73657571 node+0x102065
0053c26f 0a646574 d3d11!ntdll_NULL_THUNK_DATA  (d3d11+0x147571)
0053c273 3638335b 0xa646574
0053c277 31303a34 0x3638335b
0053c27b 42443846 0x31303a34
0053c27f 205d3832 0x42443846
0053c283 30303520 0x205d3832
0053c287 37373835 0x30303520
0053c28b 3a736d20 0x37373835
0053c28f 72614d20 0x3a736d20
0053c293 77732d6b 0x72614d20
0053c297 20706565 0x77732d6b
0053c29b 362e3031 0x20706565
0053c29f 32312820 0x362e3031
0053c2a3 2029382e 0x32312820
0053c2a7 31203e2d 0x2029382e
0053c2ab 20362e30 0x31203e2d
0053c2af 2e323128 0x20362e30
0053c2b3 4d202938 0x2e323128
0053c2b7 37202c42 0x4d202938
0053c2bb 2f20342e 0x37202c42
0053c2bf 302e3020 0x2f20342e
0053c2c3 20736d20 0x302e3020
0053c2c7 76612820 0x20736d20
0053c2cb 67617265 shell32!__dyn_tls_init_callback  (shell32+0x762820)
0053c2cf 756d2065 node+0x1ff7265
0053c2d3 30203d20 wininet!`string'+0x25695
0053c2d7 3939392e 0x30203d20
0053c2db 7563202c 0x3939392e
0053c30f 20646c6f wininet!StrTokEx+0x88
0053c317 65722065 0x20646c6f
0053c31b 73657571 node+0x102065
0053c31f 0a646574 d3d11!ntdll_NULL_THUNK_DATA  (d3d11+0x147571)
0053c323 3638335b 0xa646574
0053c327 31303a34 0x3638335b
0053c32b 42443846 0x31303a34
0053c32f 205d3832 0x42443846
0053c333 32303520 0x205d3832
0053c337 32383634 0x32303520
0053c33b 3a736d20 0x32383634
0053c33f 61635320 0x3a736d20
0053c343 676e6576 0x61635320
0053c347 31312065 node+0x20c6576
0053c34b 2820362e 0x31312065
0053c34f 382e3231 0x2820362e
0053c353 3e2d2029 0x382e3231
0053c357 2e303120 0x3e2d2029
0053c35b 31282036 0x2e303120
0053c35f 29382e32 0x31282036
0053c363 2c424d20 0x29382e32
0053c367 302e3120 0x2c424d20
0053c36b 30202f20 0x302e3120
0053c36f 6d20302e 0x30202f20
0053c373 28202073 0x6d20302e
0053c377 72657661 0x28202073
0053c37b 20656761 0x72657661
0053c37f 3d20756d 0x20656761
0053c383 392e3020 0x3d20756d
0053c387 202c3939 0x392e3020
0053c38b 72727563 0x202c3939
0053c38f 20746e65 0x72727563
0053c393 3d20756d 0x20746e65
0053c397 302e3020 0x3d20756d
0053c39b 20293430 0x302e3020
0053c39f 6f6c6c61 0x20293430
0053c3a3 69746163 0x6f6c6c61
0053c3a7 66206e6f node+0x4126163
0053c3ab 756c6961 node+0xbe6e6f
0053c3af 0a206572 wininet!`string'+0x19f91
0053c3b3 00000000 0xa206572

Top 48: total counts = 1

ChildEBP RetAddr  
002af460 0065006e ModeIdentify!WndEventHelper::ParseWndEvent+0x143
WARNING: Frame IP not in any known module. Following frames may be wrong.
003d0065 bc408d02 0x65006e
003d0069 c341addc 0xbc408d02
003d006d 00000000 0xc341addc

Top 49: total counts = 1

ChildEBP RetAddr  
0a1cf818 682fe87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0a1cf8f0 683489d7 node+0x12ae87c
0a1cf910 670b284b node+0x12f89d7
0a1cf914 00d8444b node+0x6284b
0a1cf918 0fac27d4 0xd8444b
0a1cf91c 0036110a 0xfac27d4
0a1cf920 00240b5d 0x36110a
0a1cf924 226c2db0 0x240b5d
0a1cf928 0fac27a8 0x226c2db0
0a1cf92c 0fac27a8 0xfac27a8
0a1cf930 0a1cf9dc 0xfac27a8
0a1cf934 670b27d8 0xa1cf9dc
0a1cf9dc 68888dab node+0x627d8
0a1cf9f4 67620539 node+0x1838dab
0a1cfa10 6761d4a9 node+0x5d0539
0a1cfb2c 67613632 node+0x5cd4a9
0a1cfc2c 676133f1 node+0x5c3632
0a1cfc30 00000000 node+0x5c33f1

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f5ef28 107fd1dd node+0x128dd80
00f5f068 118ee32a node+0x128d1dd
00f5f06c 00f5f078 node+0x237e32a
00f5f070 00000000 0xf5f078