Analyzed 63 dump

Top 1: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f3ecf8 1094d1dd node+0x128dd80
00f3ee30 11a3e32a node+0x128d1dd
00f3eed0 757b3608 node+0x237e32a
00f3ef8c 777a7ad6 combase!SyncStubCall::Invoke+0x18
00f3efac 00000000 ntdll!RtlFreeHeap+0x46

fe393f1a2f25e070265ef3a541f1025b_000.dmp
1c11da77d6400143f12451d59fd00eef_000.dmp

Top 2: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b9eea8 1042d1dd node+0x128dd80
00b9efe8 1151e32a node+0x128d1dd
00b9f088 7777e967 node+0x237e32a
00b9f264 00000000 ntdll!RtlCheckTokenMembershipEx+0x127

813da7d1afb2d89f95552df5bca5f2c0_000.dmp
88853b8287cd302a8f9d0d2f19c02a1e_000.dmp

Top 3: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0e86f814 00000000 wnTSF+0x1546f4

4aee370e7057e25dfa89aaefaa21137e_000.dmp
e38a7c61d2440396f35f5a2f0efdef32_000.dmp

Top 4: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030ceb8 6cc8dc08 node+0x2a2f20b
0030d1b7 6d203132 node+0xb2dc08
0030d1bb 4d203a73 node+0x10a3132
0030d1bf 2d6b7261 0x4d203a73
0030d1c3 65657773 0x2d6b7261
0030d1c7 30312070 0x65657773
0030d1cb 2820322e 0x30312070
0030d1cf 312e3231 0x2820322e
0030d1d3 3e2d2029 0x312e3231
0030d1d7 2e303120 0x3e2d2029
0030d1db 31282031 0x2e303120
0030d1df 29312e32 0x31282031
0030d1e3 2c424d20 0x29312e32
0030d1e7 2e303120 0x2c424d20
0030d1eb 202f2031 0x2e303120
0030d1ef 20302e30 0x202f2031
0030d1f3 2020736d 0x20302e30
0030d1f7 65766128 0x2020736d
0030d1fb 65676172 0x65766128
0030d1ff 20756d20 0x65676172
0030d203 2e31203d 0x20756d20
0030d207 2c303030 0x2e31203d
0030d20b 72756320 0x2c303030
0030d25f 20205d30 GdiPlus!CConvolve::FilterFlatRGBALineUp+0x11
0030d273 6577732d 0x20205d30
0030d277 31207065 0x6577732d
0030d27b 20382e30 0x31207065
0030d27f 2e323128 0x20382e30
0030d283 2d202931 0x2e323128
0030d287 3031203e 0x2d202931
0030d28b 2820322e 0x3031203e
0030d28f 312e3231 0x2820322e
0030d293 424d2029 0x312e3231
0030d297 3031202c 0x424d2029
0030d29b 2f20302e 0x3031202c
0030d29f 302e3020 0x2f20302e
0030d2a3 20736d20 0x302e3020
0030d2a7 76612820 0x20736d20
0030d2ab 67617265 crypt32!winreg_bhandle  (crypt32+0xe2820)
0030d2af 756d2065 0x67617265
0030d2b3 31203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xe5
0030d2b7 3030302e 0x31203d20
0030d2bb 7563202c 0x3030302e
0030d2bf 6e657272 ole32!g_pfnFree  (ole32+0x15202c)
0030d2c3 756d2074 node+0x24f7272
0030d2c7 31203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xf4
0030d2cb 3030302e 0x31203d20
0030d2cf 6f6c2029 0x3030302e
0030d2d3 656d2077 node+0x3562029
0030d2d7 79726f6d 0x656d2077
0030d2db 746f6e20 0x79726f6d
0030d2df 63696669 0x746f6e20
0030d2e3 6f697461 0x63696669
0030d2e7 4347206e node+0x3537461
0030d2eb 206e6920 0x4347206e
0030d2ef 20646c6f 0x206e6920
0030d2f3 63617073 0x20646c6f
0030d2f7 65722065 0x63617073
0030d2fb 73657571 0x65722065
0030d2ff 0a646574 0x73657571
0030d303 3937325b 0xa646574
0030d307 30303a36 0x3937325b
0030d30b 37453141 0x30303a36
0030d30f 205d3034 0x37453141
0030d313 38342020 0x205d3034
0030d317 32323338 0x38342020
0030d31b 3a736d20 0x32323338
0030d31f 72614d20 0x3a736d20
0030d327 20706565 GdiPlus!GpElementaryBrush::TranslateTransform+0xa
0030d337 31203e2d 0x20706565
0030d33b 20322e30 0x31203e2d
0030d33f 2e323128 0x20322e30
0030d343 4d202931 0x2e323128
0030d347 38202c42 0x4d202931
0030d34b 2f20342e 0x38202c42
0030d34f 302e3020 0x2f20342e
0030d353 20736d20 0x302e3020
0030d357 76612820 0x20736d20
0030d35b 67617265 crypt32!winreg_bhandle  (crypt32+0xe2820)
0030d35f 756d2065 0x67617265
0030d363 31203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xe5
0030d367 3030302e 0x31203d20
0030d36b 7563202c 0x3030302e
0030d36f 6e657272 ole32!g_pfnFree  (ole32+0x15202c)
0030d373 756d2074 node+0x24f7272
0030d377 30203d20 cfgmgr32!$$VProc_ImageExportDirectory+0xf4
0030d37b 3430302e 0x30203d20
0030d37f 6f6c2029 0x3430302e
0030d383 656d2077 node+0x3562029
0030d387 79726f6d 0x656d2077
0030d38b 746f6e20 0x79726f6d
0030d38f 63696669 0x746f6e20
0030d393 6f697461 0x63696669
0030d397 4347206e node+0x3537461
0030d39b 206e6920 0x4347206e
0030d39f 20646c6f 0x206e6920
0030d3a3 63617073 0x20646c6f
0030d3a7 65722065 0x63617073
0030d3ab 73657571 0x65722065
0030d3af 0a646574 0x73657571
0030d3b3 00000000 0xa646574

9a8b0491414d43c2abc3a4217bb5b278_000.dmp

Top 5: total counts = 1

ChildEBP RetAddr  
001ff8b0 0065006e ModeIdentify!WndEventHelper::ParseWndEvent+0x143
WARNING: Frame IP not in any known module. Following frames may be wrong.
003d0065 74000000 0x65006e
003d0069 02000000 0x74000000
003d006d 01000000 0x2000000
003d0071 d4000000 0x1000000
003d0075 10000000 0xd4000000
003d0079 01000002 Safelive!__acrt_signal_action_table_size
003d007d 04000000 0x1000002
003d0081 e4000000 0x4000000
003d0085 28000002 0xe4000000
003d0089 02000000 0x28000002
003d008d 05000000 0x2000000
003d0091 0c000000 0x5000000
003d0095 28000003 0xc000000
003d0099 02000000 0x28000003
003d009d 06000000 0x2000000
003d00a1 34000000 0x6000000
003d00a5 28000003 0x34000000
003d00a9 02000000 0x28000003
003d00ad 09000000 0x2000000
003d00b1 5c000000 0x9000000
003d00b5 28000003 0x5c000000
003d00b9 02000000 0x28000003
003d00bd 0b000000 0x2000000
003d00c1 84000000 0xb000000
003d00c5 04000003 0x84000000
003d00c9 01000000 0x4000003
003d00cd 53000000 0x1000000
003d00d1 2c644873 0x53000000
003d00d5 01000000 0x2c644873
003d00d9 01000000 0x1000000
003d00dd 03000000 0x1000000
003d00e1 01000000 0x3000000
003d00e5 ec000000 0x1000000
003d00e9 01000000 0xec000000
003d00ed 00000000 0x1000000

fec5ff9ea696c5e3d332af9d14c13fa7_000.dmp

Top 6: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00ddf128 64f0d1dd node+0x128dd80
00ddf260 65ffe32a node+0x128d1dd
00ddf264 00ddf270 node+0x237e32a
00ddf268 00000000 0xddf270

b9f299b4a5a63271adcef676d296c58f_000.dmp

Top 7: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b4ed48 6b86d1dd node+0x128dd80
00b4ee88 6c95e32a node+0x128d1dd
00b4ee8c 00b4ee98 node+0x237e32a
00b4ee90 00019d78 0xb4ee98
00b4ee98 00000000 0x19d78

ebe71b5cd8f7715a93e7de8f27e5b40e_000.dmp

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006ff028 6f33d1dd node+0x128dd80
006ff160 7042e32a node+0x128d1dd
006ff164 006ff170 node+0x237e32a
006ff168 000b0eac 0x6ff170
006ff170 00000000 0xb0eac

7b5d20fcb1659f5a228f552d7f60c970_000.dmp

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0111ed48 02d0d1dd node+0x128dd80
0111ee88 03dfe32a node+0x128d1dd
0111ee8c 0111ee98 node+0x237e32a
0111ee90 0020759c 0x111ee98
0111ee98 00000000 0x20759c

d251411a2fbc34320182312f950e3355_000.dmp

Top 10: total counts = 1

07edf7a4 6e468c7a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
07edf7e0 07edf81c node+0x12f8c7a
07edf7e4 07edf844 0x7edf81c
07edf81c 00000000 0x7edf844

66ed38dc4da8fd81962f3b0ff227f6c7_001.dmp

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fef48 1091d1dd node+0x128dd80
008ff080 11a0e32a node+0x128d1dd
008ff084 008ff090 node+0x237e32a
008ff088 000c6a38 0x8ff090
008ff090 00000000 0xc6a38

c087b3fbcf0e7b9e769bd748e229a20a_000.dmp

Top 12: total counts = 1

ChildEBP RetAddr  
04aaf274 04aaf350 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
04aaf288 04aaf298 0x4aaf350
04aaf28c 01eb2000 0x4aaf298
04aaf298 00000000 0x1eb2000

8a968f33ade0f2358215cc7f9fa9fc06_000.dmp

Top 13: total counts = 1

007be51c 782aaf11 ylh_sdk+0x452f3
007be538 782a8ff0 ffi_bindings!ffi_call_win32+0x35
007be580 782a544a ffi_bindings!ffi_call+0xf0
007be664 e9b4d712 ffi_bindings!FFI::FFI::FFICall+0x25a
007be66c 782a6df9 0xe9b4d712
007be6d8 782a6d63 ffi_bindings!Napi::details::WrapCallback< >+0x59
007be6e4 00000000 ffi_bindings!Napi::details::CallbackData::Wrapper+0x13

8002eed0a949a004422330b972bbd3e7_000.dmp

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034f07c ffffb7c8 node+0xd4a647
0034f080 02133858 0xffffb7c8
0034f084 0211e8e0 0x2133858
0034f088 02133858 0x211e8e0
0034f08c 0219982c 0x2133858
0034f090 0f2a3fc5 0x219982c
0034f094 0f2b8387 0xf2a3fc5
0034f098 00000000 0xf2b8387

fb9d84972b8f651191e351567ddacb50_000.dmp

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0115ee98 6b9bd1dd node+0x128dd80
0115efd8 6caae32a node+0x128d1dd
0115efdc 0115efe8 node+0x237e32a
0115efe0 00000000 0x115efe8

a9ed370ecf47234c7a1018b1f7e6a3de_000.dmp

Top 16: total counts = 1

004fd287 63696669 shell32!CWSDPublisher::_s_PublishMessageThreadProc+0x1af
004fd28b 6f697461 SogouTSF+0x166669
004fd28f 4347206e 0x6f697461
004fd293 206e6920 0x4347206e
004fd297 20646c6f 0x206e6920
004fd29b 63617073 0x20646c6f
004fd29f 65722065 SogouTSF+0xe7073
004fd2a3 73657571 0x65722065
004fd2a7 0a646574 0x73657571
004fd2ab 3433345b 0xa646574
004fd2af 32303a34 0x3433345b
004fd2b3 43313237 0x32303a34
004fd2b7 205d3839 0x43313237
004fd2bb 36353120 0x205d3839
004fd2bf 35393330 0x36353120
004fd2c3 3a736d20 0x35393330
004fd2c7 72614d20 0x3a736d20
004fd2cb 77732d6b 0x72614d20
004fd2cf 20706565 0x77732d6b
004fd2d3 312e3131 0x20706565
004fd2d7 32312820 0x312e3131
004fd2db 2029362e 0x32312820
004fd2df 31203e2d 0x2029362e
004fd2e3 20352e30 0x31203e2d
004fd2e7 2e323128 0x20352e30
004fd2eb 4d202936 0x2e323128
004fd2ef 39202c42 0x4d202936
004fd2f3 2f20342e 0x39202c42
004fd2f7 302e3020 0x2f20342e
004fd2fb 20736d20 0x302e3020
004fd2ff 76612820 0x20736d20
004fd303 67617265 windows_storage!Windows::Internal::CMarshaledInterfaceResult *> >::Get+0x3a
004fd307 756d2065 0x67617265
004fd30b 31203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x1382065)
004fd30f 3030302e 0x31203d20
004fd313 7563202c 0x3030302e
004fd317 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x12e202c)
004fd31b 756d2074 0x6e657272
004fd31f 31203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x1382074)
004fd323 3030302e 0x31203d20
004fd327 6f6c2029 0x3030302e
004fd32b 656d2077 0x6f6c2029
004fd32f 79726f6d 0x656d2077
004fd333 746f6e1f 0x79726f6d
004fd337 63696669 shell32!CWSDPublisher::_s_PublishMessageThreadProc+0x1af
004fd33b 6f697461 SogouTSF+0x166669
004fd33f 4347206e 0x6f697461
004fd343 206e6920 0x4347206e
004fd347 20646c6f 0x206e6920
004fd34b 63617073 0x20646c6f
004fd34f 65722065 SogouTSF+0xe7073
004fd353 73657571 0x65722065
004fd357 0a646574 0x73657571
004fd35b 3433345b 0xa646574
004fd35f 32303a34 0x3433345b
004fd363 43313237 0x32303a34
004fd367 205d3839 0x43313237
004fd36b 36353120 0x205d3839
004fd36f 32303430 0x36353120
004fd373 3a736d20 0x32303430
004fd377 72614d20 0x3a736d20
004fd37b 77732d6b 0x72614d20
004fd37f 20706565 0x77732d6b
004fd383 352e3031 0x20706565
004fd387 32312820 0x352e3031
004fd38b 2029362e 0x32312820
004fd38f 31203e2d 0x2029362e
004fd393 20352e30 0x31203e2d
004fd397 2e323128 0x20352e30
004fd39b 4d202936 0x2e323128
004fd39f 37202c42 0x4d202936
004fd3a3 2f20382e 0x37202c42
004fd3a7 302e3020 0x2f20382e
004fd3ab 20736d20 0x302e3020
004fd3af 76612820 0x20736d20
004fd3b3 67617265 windows_storage!Windows::Internal::CMarshaledInterfaceResult *> >::Get+0x3a
004fd3b7 756d2065 0x67617265
004fd3bb 31203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x1382065)
004fd3bf 3030302e 0x31203d20
004fd3c3 7563202c 0x3030302e
004fd3c7 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x12e202c)
004fd3cb 756d2074 0x6e657272
004fd3cf 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x1382074)
004fd3d3 3330302e 0x30203d20
004fd3d7 6f6c2029 0x3330302e
004fd3db 656d2077 0x6f6c2029
004fd3df 79726f6d 0x656d2077
004fd3e3 746f6e1f 0x79726f6d
004fd3e7 63696669 shell32!CWSDPublisher::_s_PublishMessageThreadProc+0x1af
004fd3eb 6f697461 SogouTSF+0x166669
004fd3ef 4347206e 0x6f697461
004fd3f3 206e6920 0x4347206e
004fd3f7 20646c6f 0x206e6920
004fd3fb 63617073 0x20646c6f
004fd3ff 65722065 SogouTSF+0xe7073
004fd403 73657571 0x65722065
004fd407 0a646574 0x73657571
004fd40b 00000000 0xa646574

7c2279cb3177cfa52d07a98083159cc3_000.dmp

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efe590 00efe608 node+0xc75264
00efe594 00efe5e0 0xefe608
00efe608 00000000 0xefe5e0

e2e6d1fbc836023eb854be66f4acf1b6_000.dmp

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001ff1a8 10c3d1dd node+0x128dd80
001ff2e8 11d2e32a node+0x128d1dd
001ff2ec 001ff2f8 node+0x237e32a
001ff2f0 000c608c 0x1ff2f8
001ff2f8 00000000 0xc608c

1468d07a6d6c84cb1ebd23f44680f320_000.dmp

Top 19: total counts = 1

00fac0e7 736d2033 0x31313232
00fac0eb 6353203a ipcService+0x82033
00fac0ef 6e657661 0x6353203a
00fac0f3 31206567 node+0x3057661
00fac0f7 20372e31 0x31206567
00fac0fb 2e323128 0x20372e31
00fac0ff 2d202938 0x2e323128
00fac103 3031203e 0x2d202938
00fac107 2820372e 0x3031203e
00fac10b 382e3231 0x2820372e
00fac10f 424d2029 0x382e3231
00fac113 3031202c 0x424d2029
00fac117 322e3331 0x3031202c
00fac11b 30202f20 0x322e3331
00fac11f 6d20302e 0x30202f20
00fac123 28202073 node+0x1c0302e
00fac127 72657661 0x28202073
00fac12b 20656761 mswsock!Tcpip6_Winsock2Protocols+0x3b1
00fac12f 3d20756d 0x20656761
00fac133 302e3120 0x3d20756d
00fac137 202c3030 0x302e3120
00fac13b 72727563 0x202c3030
00fac13f 20746e65 0x72727563
00fac143 3d20756d 0x20746e65
00fac147 302e3020 0x3d20756d
00fac14b 20293230 0x302e3020
00fac14f 6f6c6c61 0x20293230
00fac153 69746163 node+0x40c6c61
00fac157 66206e6f 0x69746163
00fac15b 756c6961 0x66206e6f
00fac15f 0a206572 advapi32!LookupAccountSidW+0x142d1
00fac163 3437375b 0xa206572
00fac167 33303a38 0x3437375b
00fac16b 35454234 0x33303a38
00fac16f 205d3842 0x35454234
00fac173 33383031 0x205d3842
00fac177 32363233 0x33383031
00fac17b 3a736d20 0x32363233
00fac17f 72614d20 0x3a736d20
00fac183 77732d6b cryptnet!_NULL_IMPORT_DESCRIPTOR+0x650
00fac187 20706565 combase!CObjectContext::InternalRelease+0x36b
00fac18b 302e3131 0x20706565
00fac18f 32312820 0x302e3131
00fac193 2029382e 0x32312820
00fac197 31203e2d 0x2029382e
00fac19b 20372e30 0x31203e2d
00fac19f 2e323128 0x20372e30
00fac1a3 4d202938 0x2e323128
00fac1a7 35202c42 0x4d202938
00fac1ab 2f20392e 0x35202c42
00fac1af 302e3020 0x2f20392e
00fac1b3 20736d20 0x302e3020
00fac1b7 76612820 0x20736d20
00fac1bb 67617265 gdi32full!EnumMetaFile+0x10
00fac1cf 6e657272 0x67617265
00fac1d3 756d2074 node+0x3057272
00fac437 00000000 advapi32!SaferpSetSingleIdentificationHash+0x86

267e703df7aa1cf3abf72462962f7c1d_001.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0400f95c 705d6807 node+0xe562b8
0400f9d0 70624c0d node+0xe56807
0400fa40 706b487c node+0xea4c0d
0400fb7c 7077a52f node+0xf3487c
0400fbd4 77a03c56 node+0xffa52f
0400fbe0 00000000 ntdll!RtlFreeHeap+0x46

54bc3741d888ff05fde8020cefaa8e51_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133efb8 693dd1dd node+0x128dd80
0133f0f8 6a4ce32a node+0x128d1dd
0133f0fc 0133f108 node+0x237e32a
0133f100 00000000 0x133f108

97abb23fbac7b216870f48059daaf829_000.dmp

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0113ec88 029ed1dd node+0x128dd80
0113edc0 03ade32a node+0x128d1dd
0113edc4 0113edd0 node+0x237e32a
0113edc8 00000000 0x113edd0

c4f7915dc52b62806c2bcfccf13dd3f8_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003fcdc8 1039dc08 node+0x2a2f20b
003fd0c7 6c696166 node+0xb2dc08
003fd0cb 20657275 0x6c696166
003fd0cf 31315b0a 0x20657275
003fd0d3 3a363130 0x31315b0a
003fd0d7 46423030 0x3a363130
003fd0db 30464134 0x46423030
003fd0df 3138205d 0x30464134
003fd0e3 36323831 0x3138205d
003fd0e7 6d203330 0x36323831
003fd0eb 4d203a73 0x6d203330
003fd0ef 2d6b7261 0x4d203a73
003fd0f3 65657773 0x2d6b7261
003fd0f7 31312070 0x65657773
003fd0fb 2820372e 0x31312070
003fd0ff 362e3331 0x2820372e
003fd103 3e2d2029 0x362e3331
003fd107 2e313120 0x3e2d2029
003fd10b 31282033 0x2e313120
003fd10f 29362e33 0x31282033
003fd113 2c424d20 0x29362e33
003fd117 302e3720 0x2c424d20
003fd11b 30202f20 0x302e3720
003fd11f 6d20302e 0x30202f20
003fd123 28202073 0x6d20302e
003fd127 72657661 0x28202073
003fd12b 20656761 0x72657661
003fd12f 3d20756d 0x20656761
003fd133 302e3120 0x3d20756d
003fd137 202c3030 0x302e3120
003fd13b 72727563 0x202c3030
003fd13f 20746e65 0x72727563
003fd143 3d20756d 0x20746e65
003fd147 302e3120 0x3d20756d
003fd14b 20293030 0x302e3120
003fd14f 20776f6c 0x20293030
003fd153 6f6d656d 0x20776f6c
003fd157 6e207972 0x6f6d656d
003fd15b 6669746f 0x6e207972
003fd15f 74616369 0x6669746f
003fd163 206e6f69 ole32!`string'+0x15
003fd167 69204347 0x206e6f69
003fd16b 6c6f206e 0x69204347
003fd16f 70732064 0x6c6f206e
003fd173 20656361 0x70732064
003fd177 75716572 0x20656361
003fd183 36313031 Wldap32!CLdapBer::HrGetValue+0x11
003fd197 20313136 0x36313031
003fd19b 203a736d 0x20313136
003fd19f 6b72614d 0x203a736d
003fd1a3 6577732d 0x6b72614d
003fd1a7 31207065 0x6577732d
003fd1ab 20332e31 0x31207065
003fd1af 2e333128 0x20332e31
003fd1b3 2d202936 0x2e333128
003fd1b7 3131203e 0x2d202936
003fd1bb 2820332e 0x3131203e
003fd1bf 362e3331 0x2820332e
003fd1c3 424d2029 0x362e3331
003fd1c7 2e38202c 0x424d2029
003fd1cb 202f2030 0x2e38202c
003fd1cf 20302e30 0x202f2030
003fd1d3 2020736d 0x20302e30
003fd1d7 65766128 0x2020736d
003fd1db 65676172 0x65766128
003fd1df 20756d20 0x65676172
003fd1e3 2e31203d 0x20756d20
003fd1e7 2c303030 0x2e31203d
003fd1eb 72756320 0x2c303030
003fd1ef 746e6572 0x72756320
003fd237 30303a36 kernel32!SetUpConsoleInfo+0x3d
003fd243 32323138 0x30303a36
003fd247 37383039 0x32323138
003fd24b 3a736d20 0x37383039
003fd24f 61635320 0x3a736d20
003fd253 676e6576 0x61635320
003fd257 32312065 0x676e6576
003fd25b 2820342e 0x32312065
003fd25f 362e3331 0x2820342e
003fd263 3e2d2029 0x362e3331
003fd267 2e313120 0x3e2d2029
003fd26b 31282035 0x2e313120
003fd26f 29362e33 0x31282035
003fd273 2c424d20 0x29362e33
003fd277 362e3020 0x2c424d20
003fd27b 30202f20 0x362e3020
003fd27f 6d20302e 0x30202f20
003fd283 28202073 0x6d20302e
003fd287 72657661 0x28202073
003fd28b 20656761 0x72657661
003fd28f 3d20756d 0x20656761
003fd293 302e3120 0x3d20756d
003fd297 202c3030 0x302e3120
003fd29b 72727563 0x202c3030
003fd29f 20746e65 0x72727563
003fd2a3 3d20756d 0x20746e65
003fd2a7 302e3020 0x3d20756d
003fd2ab 20293230 0x302e3020
003fd2af 6f6c6c61 0x20293230
003fd2b3 69746163 0x6f6c6c61
003fd2b7 66206e6f 0x69746163
003fd2bb 756c6961 0x66206e6f
003fd2bf 0a206572 crypt32!winreg_bhandle  (crypt32+0xe6961)
003fd2c3 00000000 0xa206572

5ee086032b98f1ad0db55cb0946f23be_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ff318 6b1cd1dd node+0x128dd80
004ff458 6c2be32a node+0x128d1dd
004ff45c 004ff468 node+0x237e32a
004ff460 00355b14 0x4ff468
004ff468 00000000 0x355b14

93fc10d6dc8c9d358a205eebb9995987_000.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afef68 6bfcd1dd node+0x128dd80
00aff0a8 6d0be32a node+0x128d1dd
00aff124 773704d6 node+0x237e32a
00aff138 00000000 ntdll!RtlpInterlockedPushEntrySList+0x36

5d73441bc24742f107df71b41b40e517_000.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfee08 10a8d1dd node+0x128dd80
00cfef48 11b7e32a node+0x128d1dd
00cfef4c 00cfef58 node+0x237e32a
00cfef50 000eee7c 0xcfef58
00cfef58 00000000 0xeee7c

2db8eba9366627298b485a0dc6974bbd_000.dmp

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afef08 5f7bd1dd node+0x128dd80
00aff048 608ae32a node+0x128d1dd
00aff04c 00aff058 node+0x237e32a
00aff050 00033114 0xaff058
00aff058 00000000 0x33114

797700c9921c5abc3bdd241a9244ab37_000.dmp

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f5ecc8 00000000 node+0x128dd80

0275e2e081aeb04cde041ea106fbbcb0_000.dmp

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff028 1049d1dd node+0x128dd80
012ff168 1158e32a node+0x128d1dd
012ff16c 012ff178 node+0x237e32a
012ff170 0003bf54 0x12ff178
012ff178 00000000 0x3bf54

0482376b7ad97e652d03919a1fad0abd_000.dmp

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00faed08 029dd1dd node+0x128dd80
00faee48 03ace32a node+0x128d1dd
00faee4c 00faee58 node+0x237e32a
00faee50 001db210 0xfaee58
00faee58 00000000 0x1db210

60556e42f633362cd1d6224da321ed1b_000.dmp

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007ded30 6f58a3cc node+0x75bdf7
007ded4c 6f6c5a85 node+0x77a3cc
007ded9c 6f6c5bf6 node+0x8b5a85
007deddc 6ee1c7db node+0x8b5bf6
007deec4 6ee16128 node+0xc7db
007deeec 71d56208 node+0x6128
007def5c 6f5dbc09 node+0x2f46208
007def80 70334df1 node+0x7cbc09
007defe0 6f4193c9 node+0x1524df1
007defe4 08db7164 node+0x6093c9
007defe8 007df000 0x8db7164
007defec 70188064 0x7df000
007df000 00000000 node+0x1378064

6c3ba005bbb8f6ace066eff7dce3a297_000.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0035dd84 6dbf866a 0x62205d59
0035de44 77a4e0c3 node+0x220866a
0035de7c 77a4ed0a ntdll!RtlFreeHeap+0x105
0035de98 0035ded8 ntdll!bsearch+0x70
0035dec4 77a5df81 0x35ded8
0035def4 752c2b46 ntdll!RtlpFindUnicodeStringInSection+0x237
0035e124 00000000 CRYPTBASE!AesCtrRng_Update+0x7e

3e91d25025b5b53ce631a496cc1cb458_002.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009febc8 69b6d1dd node+0x128dd80
009fed00 6ac5e32a node+0x128d1dd
009fed04 009fed10 node+0x237e32a
009fed08 0008a5f8 0x9fed10
009fed10 00000000 0x8a5f8

2716701356d431883758020d60d473f8_000.dmp

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030cbc8 6e3ddc08 node+0x2a2f20b
0030cec7 736d2039 node+0xb2dc08
0030cecb 614d203a api_ms_win_core_synch_l1_2_0+0x2039
0030cecf 732d6b72 0x614d203a
0030ced3 70656577 GdiPlus!otlCacheManager::GetNextLookup+0x6
0030ceef 2029332e node+0x2da6577
0030cef3 202c424d 0x2029332e
0030cef7 372e3931 0x202c424d
0030cefb 30202f20 0x372e3931
0030ceff 6d20302e 0x30202f20
0030cf03 28202073 winhttp!Microsoft_Windows_Networking_ProviderId  (winhttp+0x5302e)
0030cf07 72657661 0x28202073
0030cf0b 20656761 0x72657661
0030cf0f 3d20756d 0x20656761
0030cf13 392e3020 0x3d20756d
0030cf17 202c3739 0x392e3020
0030cf1b 72727563 0x202c3739
0030cf1f 20746e65 0x72727563
0030cf23 3d20756d 0x20746e65
0030cf27 302e3020 0x3d20756d
0030cf2b 20293230 0x302e3020
0030cf2f 20776f6c 0x20293230
0030cf33 6f6d656d 0x20776f6c
0030cf37 6e207972 node+0x1e2656d
0030cf3b 6669746f node+0x957972
0030cf3f 74616369 0x6669746f
0030cf43 206e6f69 0x74616369
0030cf47 69204347 0x206e6f69
0030cf4b 6c6f206e 0x69204347
0030cf4f 70732064 0x6c6f206e
0030cf53 20656361 node+0x2e82064
0030cf57 75716572 0x20656361
0030cf5b 65747365 kernel32!ExeNameInitialized+0x50ee
0030cf5f 315b0a64 0x65747365
0030cf63 3a363930 0x315b0a64
0030cf67 32313230 0x3a363930
0030cf6b 30394642 0x32313230
0030cf6f 3220205d 0x30394642
0030cf73 31313532 0x3220205d
0030cf77 6d203935 0x31313532
0030cf7b 4d203a73 winhttp!Microsoft_Windows_Networking_ProviderId  (winhttp+0x53935)
0030cf7f 2d6b7261 0x4d203a73
0030cf83 65657773 0x2d6b7261
0030cf87 31312070 0x65657773
0030cf8b 2820322e 0x31312070
0030cf8f 332e3231 0x2820322e
0030cf93 3e2d2029 0x332e3231
0030cf97 2e303120 0x3e2d2029
0030cf9b 31282033 0x2e303120
0030cf9f 29332e32 0x31282033
0030cfa3 2c424d20 0x29332e32
0030cfa7 2e303120 0x2c424d20
0030cfab 202f2039 0x2e303120
0030cfaf 20302e30 0x202f2039
0030cfb3 2020736d 0x20302e30
0030cfb7 65766128 0x2020736d
0030cfbb 65676172 0x65766128
0030cfbf 20756d20 0x65676172
0030cfc3 2e30203d 0x20756d20
0030cfc7 2c393939 0x2e30203d
0030cfcb 72756320 0x2c393939
0030cfcf 746e6572 0x72756320
0030cfd3 20756d20 0x746e6572
0030cfd7 2e31203d 0x20756d20
0030cfdb 29303030 0x2e31203d
0030cfdf 776f6c20 0x29303030
0030cfe3 6d656d20 0x776f6c20
0030cfe7 2079726f propsys!IID_ICreateObject+0x8
0030cfeb 69746f6e 0x2079726f
0030cfef 61636966 0x69746f6e
0030cff3 6e6f6974 0x61636966
0030cff7 20434720 node+0xe46974
0030cffb 6f206e69 0x20434720
0030cfff 7320646b node+0x1956e69
0030d003 65636170 GdiPlus!PathSelfIntersectRemover::RemoveSelfIntersects+0xb6
0030d007 71657220 0x65636170
0030d00b 74736575 node+0x3da7220
0030d00f 5b0a6465 0x74736575
0030d013 36393031 0x5b0a6465
0030d017 3132303a 0x36393031
0030d01b 39464232 0x3132303a
0030d01f 20205d30 0x39464232
0030d023 31353232 0x20205d30
0030d027 20383931 0x31353232
0030d02b 203a736d 0x20383931
0030d02f 6b72614d 0x203a736d
0030d033 6577732d 0x6b72614d
0030d037 31207065 0x6577732d
0030d03b 20332e30 0x31207065
0030d03f 2e323128 0x20332e30
0030d043 2d202933 0x2e323128
0030d047 3031203e 0x2d202933
0030d04b 2820322e 0x3031203e
0030d04f 332e3231 0x2820322e
0030d053 424d2029 0x332e3231
0030d057 3933202c 0x424d2029
0030d05b 2f20302e 0x3933202c
0030d05f 302e3020 0x2f20302e
0030d063 20736d20 0x302e3020
0030d067 76612820 0x20736d20
0030d06b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x592820)
0030d06f 756d2065 0x67617265
0030d2cb 00000000 kernel32!PEWriteResource<_IMAGE_NT_HEADERS>+0xa3d

c5ffbb8212aecdd361f41334e132aa41_001.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
03abfcf0 761ffcc9 0x0
03abfd00 772780ce kernel32!BaseThreadInitThunk+0x19
03abfd5c 7727809e ntdll!__RtlUserThreadStart+0x2f
03abfd6c 00000000 ntdll!_RtlUserThreadStart+0x1b

653ffb919bbd51918408ad21eafecca4_002.dmp

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003df338 10f0d1dd node+0x128dd80
003df470 11ffe32a node+0x128d1dd
003df474 003df480 node+0x237e32a
003df478 00039a68 0x3df480
003df480 00000000 0x39a68

8383bd52d87bb47e09d2affc10556770_010.dmp

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fee28 6783d1dd node+0x128dd80
006fef60 6892e32a node+0x128d1dd
006fef64 006fef70 node+0x237e32a
006fef68 000a095c 0x6fef70
006fef70 00000000 0xa095c

d81ad39fd2bcf2096c7f05e0017ba6d3_000.dmp

Top 38: total counts = 1

WARNING: Stack unwind information not available. Following frames may be wrong.
0035e03c 67b0a40b node+0x8dbd8
0035e368 67b25520 node+0xc2a40b
0035e3c4 67ca84f0 node+0xc45520
0035e3c8 0035e3d0 node+0xdc84f0
0035e3cc 00000000 0x35e3d0

481542ff5b7ba639223608cacdf697f7_000.dmp

Top 39: total counts = 1

ChildEBP RetAddr  
0066f104 0066f1e0 KERNELBASE!RaiseException+0x48
WARNING: Frame IP not in any known module. Following frames may be wrong.
0066f118 0066f128 0x66f1e0
0066f11c 0066f180 0x66f128
0066f128 00000000 0x66f180

c3cbe5e4f29b6833323413d015439411_000.dmp

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006feeb8 6415d1dd node+0x128dd80
006feff8 6524e32a node+0x128d1dd
006feffc 006ff008 node+0x237e32a
006ff000 00000000 0x6ff008

f34704856925d0dad54e8f9d09d06ab3_000.dmp

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0075e79c 66b7307f node+0x1077d80
0075e7b4 66b7386a node+0x10a307f
0075e7cc 66b2733c node+0x10a386a
0075e7ec 12d9c26f node+0x105733c
0075e840 12d94f34 0x12d9c26f
0075e86c 66b2ac3f 0x12d94f34
0075e884 66b2aa5b node+0x105ac3f
0075e8b0 66714534 node+0x105aa5b
0075e944 666fad6d node+0xc44534
0075e954 046495d0 node+0xc2ad6d
0075e958 00000000 0x46495d0

821935726b54bb129515c5699d82b99b_000.dmp

Top 42: total counts = 1

ChildEBP RetAddr  
03f0f594 03f0f670 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03f0f5a8 03f0f5b8 0x3f0f670
03f0f5ac 03f0f638 0x3f0f5b8
03f0f5b8 00000000 0x3f0f638

e211f4dd65ce622ea05979ca45a8e6fb_003.dmp

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fef78 6838d1dd node+0x128dd80
008ff0b0 6947e32a node+0x128d1dd
008ff0b4 008ff0c0 node+0x237e32a
008ff0b8 00000000 0x8ff0c0

5bbcbb1e4331552bb53d5002ddebbc62_000.dmp

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0019f368 7048d1dd node+0x128dd80
0019f4a8 7157e32a node+0x128d1dd
0019f4ac 0019f4b8 node+0x237e32a
0019f4b0 00000000 0x19f4b8

62f85bbdde3ab97a4bf949e08a4b4a62_000.dmp

Top 45: total counts = 1

ChildEBP RetAddr  
0336f0fc 00410034 ModeIdentify!WndEventHelper::ParseWndEvent+0x143
WARNING: Frame IP not in any known module. Following frames may be wrong.
0336f1f0 77756dac 0x410034
0336f208 77756dac ntdll!KiUserCallbackDispatcher+0x4c
0336f244 7561109c ntdll!KiUserCallbackDispatcher+0x4c
0336f2f4 7561563c win32u!NtUserPeekMessage+0xc
0336f310 00000000 win32u!NtUserGetQueueStatus+0xc

aaee2699e72e48addaeadf040f7ea4aa_002.dmp

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133eea8 60bfd1dd node+0x128dd80
0133efe8 61cee32a node+0x128d1dd
0133efec 0133eff8 node+0x237e32a
0133eff0 00000000 0x133eff8

34c410c307b3c51d09a20251d2a46a1e_000.dmp

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0014eb38 6729ca34 node+0x2c591ab
0014eb94 66c38a09 node+0x126ca34
0014ec08 66c09e75 node+0xc08a09
00000000 00000000 node+0xbd9e75

0561714868ac1f8bdf78ceb190e8f45c_000.dmp

Top 48: total counts = 1

ChildEBP RetAddr  
010fed94 010fee78 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
010feda8 010fedb8 0x10fee78
010fedac 010fee18 0x10fedb8
010fedb8 00000000 0x10fee18

882454e290ae53b7e06897689ab8798e_000.dmp

Top 49: total counts = 1

ChildEBP RetAddr  
0028ed38 1100e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0028ee10 1100e7a5 node+0x12ae87c
0028eee0 113e5e14 node+0x12ae7a5
0028f0c0 113e4525 node+0x1685e14
0028f1c4 113e3f97 node+0x1684525
0028f250 113f9327 node+0x1683f97
0028f2c8 113f7b14 node+0x1699327
0028f328 11413c1a node+0x1697b14
0028f350 113c42c7 node+0x16b3c1a
0028f3b0 113c4aad node+0x16642c7
0028f3e8 11414f1c node+0x1664aad
0028f468 11424d8e node+0x16b4f1c
00000000 00000000 node+0x16c4d8e

253f9ee74793a66be2806ddb985f71a3_000.dmp

Top 50: total counts = 1

004ff018 000b9468 0x4ff020
004ff020 00000000 WXClean+0x19468

2c228541ea7341cd184692fd79acbcf3_000.dmp