Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	Nov. 27, 2023, 9:23 a.m.	Nov. 27, 2023, 9:30 a.m.

Size	5.8MB
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`36bd43b2792ce1ea475f91074eb2ef61`
SHA256	`b8a0f9eb3dbf5e78c15777915fdb57b44748c1ece2d1c0e89cc2da8706ef7e16`
CRC32	`82A3BE80`
ssdeep	`98304:HbJtyoEqHYztcfN3Ks24t5TPC3oRdZci:NVBHEtcfBKKDzZci`
PDB Path	variable_for_equations_and_functions.pdb
Yara	IsPE32 - (no description) PE_Header_Zero - PE File Signature Admin_Tool_IN_Zero - Admin Tool Sysinternals Is_DotNET_EXE - (no description) Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult UPX_Zero - UPX packed file

hv.exe "C:\Users\test22\AppData\Local\Temp\hv.exe"
2100

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks if process is being debugged by a debugger (2 events)

Time & API	Arguments	Status	Return	Repeated
IsDebuggerPresent Nov. 27, 2023, 9:23 a.m.			0	0
IsDebuggerPresent Nov. 27, 2023, 9:23 a.m.			0	0

Uses Windows APIs to generate a cryptographic key (6 events)

Time & API	Arguments	Status	Return
CryptExportKey Nov. 27, 2023, 9:24 a.m.	buffer: <INVALID POINTER> crypto_handle: 0x00351220 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Nov. 27, 2023, 9:24 a.m.	buffer: <INVALID POINTER> crypto_handle: 0x00351260 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Nov. 27, 2023, 9:24 a.m.	buffer: <INVALID POINTER> crypto_handle: 0x00351260 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Nov. 27, 2023, 9:24 a.m.	buffer: <INVALID POINTER> crypto_handle: 0x003514e0 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Nov. 27, 2023, 9:24 a.m.	buffer: <INVALID POINTER> crypto_handle: 0x003514e0 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Nov. 27, 2023, 9:24 a.m.	buffer: <INVALID POINTER> crypto_handle: 0x003515a0 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1

This executable has a PDB path (1 event)

pdb_path

variable_for_equations_and_functions.pdb

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Nov. 27, 2023, 9:23 a.m.		1	1	0

The executable contains unknown PE section names indicative of a packer (could be a false positive) (1 event)

section

.sdata

One or more processes crashed (36 events)

Time & API	Arguments	Status
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d mscorlib+0x2cb060 @ 0x7288b060 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d microsoft+0x50c17 @ 0x70770c17 microsoft+0x3f05f @ 0x7075f05f microsoft+0x3e4d4 @ 0x7075e4d4 microsoft+0x3cda4 @ 0x7075cda4 0xa210d6 0xa21231 0xa207d5 system+0x1f9799 @ 0x71219799 system+0x1f92c8 @ 0x712192c8 system+0x1eca74 @ 0x7120ca74 system+0x1ec868 @ 0x7120c868 system+0x1f82b8 @ 0x712182b8 system+0x1ee54d @ 0x7120e54d system+0x1f70ea @ 0x712170ea system+0x1e56c0 @ 0x712056c0 system+0x1f8215 @ 0x71218215 system+0x1f6f75 @ 0x71216f75 system+0x1ee251 @ 0x7120e251 system+0x1ee229 @ 0x7120e229 system+0x1ee170 @ 0x7120e170 0x57a08e gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x755f6d3a GetThreadDesktop+0x185 GetWindowLongW-0x216 user32+0x16de8 @ 0x755f6de8 GetThreadDesktop+0x1e1 GetWindowLongW-0x1ba user32+0x16e44 @ 0x755f6e44 KiUserCallbackDispatcher+0x2e KiUserExceptionDispatcher-0x1a ntdll+0x1011a @ 0x778b011a system+0x1ebc85 @ 0x7120bc85 system+0x1f683b @ 0x7121683b system+0x1a5e44 @ 0x711c5e44 system+0x1fd8a0 @ 0x7121d8a0 system+0x1fd792 @ 0x7121d792 system+0x1a14bd @ 0x711c14bd 0xa2006a exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2939396 registers.edi: 83284064 registers.eax: 0 registers.ebp: 2939448 registers.edx: 83284072 registers.ebx: 83284072 registers.esi: 1542823798 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2933308 registers.edi: 83283824 registers.eax: 0 registers.ebp: 2933360 registers.edx: 83283832 registers.ebx: 83283832 registers.esi: 1542823060 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 RtlFreeSid+0x1b RtlAllocateAndInitializeSid-0x15 ntdll+0x393cd @ 0x778d93cd GetComputerNameA+0xa7a GetFileInformationByHandleEx-0x635 kernel32+0x2c15a @ 0x7580c15a GetComputerNameA+0xaef GetFileInformationByHandleEx-0x5c0 kernel32+0x2c1cf @ 0x7580c1cf GetComputerNameA+0xab1 GetFileInformationByHandleEx-0x5fe kernel32+0x2c191 @ 0x7580c191 MapViewOfFileEx+0x21 InitializeCriticalSectionEx-0x84 kernel32+0x14ca4 @ 0x757f4ca4 RegOpenKeyExW+0xf6 LocalFree-0x935 kernel32+0x12407 @ 0x757f2407 RegOpenKeyExW+0x21 LocalFree-0xa0a kernel32+0x12332 @ 0x757f2332 New_advapi32_RegOpenKeyExW@20+0x4f New_advapi32_RegQueryInfoKeyA@48-0x173 @ 0x74663ca1 CreateAssemblyNameObject+0xc283 GetMetaDataInternalInterface-0x2c1ec clr+0x3971c @ 0x73f6971c StrongNameSignatureVerification+0x9a32 GetMetaDataPublicInterfaceFromInternal-0x1e1e clr+0x1934e8 @ 0x740c34e8 StrongNameSignatureVerification+0x9bcc GetMetaDataPublicInterfaceFromInternal-0x1c84 clr+0x193682 @ 0x740c3682 GetMetaDataPublicInterfaceFromInternal+0x641 CopyPDBs-0x2fb clr+0x195947 @ 0x740c5947 GetMetaDataPublicInterfaceFromInternal+0x850 CopyPDBs-0xec clr+0x195b56 @ 0x740c5b56 GetMetaDataPublicInterfaceFromInternal+0x23d CopyPDBs-0x6ff clr+0x195543 @ 0x740c5543 StrongNameSignatureVerification+0x839b GetMetaDataPublicInterfaceFromInternal-0x34b5 clr+0x191e51 @ 0x740c1e51 StrongNameSignatureVerification+0x854e GetMetaDataPublicInterfaceFromInternal-0x3302 clr+0x192004 @ 0x740c2004 mscorlib+0x355147 @ 0x72915147 mscorlib+0x985c14 @ 0x72f45c14 mscorlib+0x9b45cf @ 0x72f745cf mscorlib+0xd224c1 @ 0x732e24c1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2925144 registers.edi: 83283472 registers.eax: 0 registers.ebp: 2925196 registers.edx: 83283480 registers.ebx: 83283480 registers.esi: 1542823096 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f CreateAssemblyNameObject+0x263 GetMetaDataInternalInterface-0x3820c clr+0x2d6fc @ 0x73f5d6fc CreateAssemblyNameObject+0x1af GetMetaDataInternalInterface-0x382c0 clr+0x2d648 @ 0x73f5d648 GetPrivateContextsPerfCounters+0x925 DllGetActivationFactoryImpl-0x13f40 clr+0x888a7 @ 0x73fb88a7 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 RtlFreeSid+0x1b RtlAllocateAndInitializeSid-0x15 ntdll+0x393cd @ 0x778d93cd GetComputerNameA+0xa7a GetFileInformationByHandleEx-0x635 kernel32+0x2c15a @ 0x7580c15a GetComputerNameA+0xaef GetFileInformationByHandleEx-0x5c0 kernel32+0x2c1cf @ 0x7580c1cf GetComputerNameA+0xab1 GetFileInformationByHandleEx-0x5fe kernel32+0x2c191 @ 0x7580c191 MapViewOfFileEx+0x21 InitializeCriticalSectionEx-0x84 kernel32+0x14ca4 @ 0x757f4ca4 RegOpenKeyExW+0xf6 LocalFree-0x935 kernel32+0x12407 @ 0x757f2407 RegOpenKeyExW+0x21 LocalFree-0xa0a kernel32+0x12332 @ 0x757f2332 New_advapi32_RegOpenKeyExW@20+0x4f New_advapi32_RegQueryInfoKeyA@48-0x173 @ 0x74663ca1 CreateAssemblyNameObject+0xc283 GetMetaDataInternalInterface-0x2c1ec clr+0x3971c @ 0x73f6971c StrongNameSignatureVerification+0x9a32 GetMetaDataPublicInterfaceFromInternal-0x1e1e clr+0x1934e8 @ 0x740c34e8 StrongNameSignatureVerification+0x9bcc GetMetaDataPublicInterfaceFromInternal-0x1c84 clr+0x193682 @ 0x740c3682 GetMetaDataPublicInterfaceFromInternal+0x641 CopyPDBs-0x2fb clr+0x195947 @ 0x740c5947 GetMetaDataPublicInterfaceFromInternal+0x850 CopyPDBs-0xec clr+0x195b56 @ 0x740c5b56 GetMetaDataPublicInterfaceFromInternal+0x23d CopyPDBs-0x6ff clr+0x195543 @ 0x740c5543 StrongNameSignatureVerification+0x839b GetMetaDataPublicInterfaceFromInternal-0x34b5 clr+0x191e51 @ 0x740c1e51 StrongNameSignatureVerification+0x854e GetMetaDataPublicInterfaceFromInternal-0x3302 clr+0x192004 @ 0x740c2004 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b f8 0b da 89 exception.symbol: RtlInitUnicodeString+0xec RtlMultiByteToUnicodeN-0x251 ntdll+0x2e2f4 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189172 exception.address: 0x778ce2f4 registers.esp: 2918808 registers.edi: 17 registers.eax: 83535144 registers.ebp: 2918940 registers.edx: 3241928 registers.ebx: 66 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f CreateAssemblyNameObject+0x263 GetMetaDataInternalInterface-0x3820c clr+0x2d6fc @ 0x73f5d6fc CreateAssemblyNameObject+0x1af GetMetaDataInternalInterface-0x382c0 clr+0x2d648 @ 0x73f5d648 GetPrivateContextsPerfCounters+0x925 DllGetActivationFactoryImpl-0x13f40 clr+0x888a7 @ 0x73fb88a7 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 RtlFreeSid+0x1b RtlAllocateAndInitializeSid-0x15 ntdll+0x393cd @ 0x778d93cd GetComputerNameA+0xa7a GetFileInformationByHandleEx-0x635 kernel32+0x2c15a @ 0x7580c15a GetComputerNameA+0xaef GetFileInformationByHandleEx-0x5c0 kernel32+0x2c1cf @ 0x7580c1cf GetComputerNameA+0xab1 GetFileInformationByHandleEx-0x5fe kernel32+0x2c191 @ 0x7580c191 MapViewOfFileEx+0x21 InitializeCriticalSectionEx-0x84 kernel32+0x14ca4 @ 0x757f4ca4 RegOpenKeyExW+0xf6 LocalFree-0x935 kernel32+0x12407 @ 0x757f2407 RegOpenKeyExW+0x21 LocalFree-0xa0a kernel32+0x12332 @ 0x757f2332 New_advapi32_RegOpenKeyExW@20+0x4f New_advapi32_RegQueryInfoKeyA@48-0x173 @ 0x74663ca1 CreateAssemblyNameObject+0xc283 GetMetaDataInternalInterface-0x2c1ec clr+0x3971c @ 0x73f6971c StrongNameSignatureVerification+0x9a32 GetMetaDataPublicInterfaceFromInternal-0x1e1e clr+0x1934e8 @ 0x740c34e8 StrongNameSignatureVerification+0x9bcc GetMetaDataPublicInterfaceFromInternal-0x1c84 clr+0x193682 @ 0x740c3682 GetMetaDataPublicInterfaceFromInternal+0x641 CopyPDBs-0x2fb clr+0x195947 @ 0x740c5947 GetMetaDataPublicInterfaceFromInternal+0x850 CopyPDBs-0xec clr+0x195b56 @ 0x740c5b56 GetMetaDataPublicInterfaceFromInternal+0x23d CopyPDBs-0x6ff clr+0x195543 @ 0x740c5543 StrongNameSignatureVerification+0x839b GetMetaDataPublicInterfaceFromInternal-0x34b5 clr+0x191e51 @ 0x740c1e51 StrongNameSignatureVerification+0x854e GetMetaDataPublicInterfaceFromInternal-0x3302 clr+0x192004 @ 0x740c2004 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2918808 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2918940 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 RtlFreeSid+0x1b RtlAllocateAndInitializeSid-0x15 ntdll+0x393cd @ 0x778d93cd GetComputerNameA+0xa7a GetFileInformationByHandleEx-0x635 kernel32+0x2c15a @ 0x7580c15a GetComputerNameA+0xaef GetFileInformationByHandleEx-0x5c0 kernel32+0x2c1cf @ 0x7580c1cf GetComputerNameA+0xab1 GetFileInformationByHandleEx-0x5fe kernel32+0x2c191 @ 0x7580c191 MapViewOfFileEx+0x21 InitializeCriticalSectionEx-0x84 kernel32+0x14ca4 @ 0x757f4ca4 RegOpenKeyExW+0xf6 LocalFree-0x935 kernel32+0x12407 @ 0x757f2407 RegOpenKeyExW+0x21 LocalFree-0xa0a kernel32+0x12332 @ 0x757f2332 New_advapi32_RegOpenKeyExW@20+0x4f New_advapi32_RegQueryInfoKeyA@48-0x173 @ 0x74663ca1 CreateAssemblyNameObject+0xc283 GetMetaDataInternalInterface-0x2c1ec clr+0x3971c @ 0x73f6971c StrongNameSignatureVerification+0x9a32 GetMetaDataPublicInterfaceFromInternal-0x1e1e clr+0x1934e8 @ 0x740c34e8 StrongNameSignatureVerification+0x9bcc GetMetaDataPublicInterfaceFromInternal-0x1c84 clr+0x193682 @ 0x740c3682 GetMetaDataPublicInterfaceFromInternal+0x641 CopyPDBs-0x2fb clr+0x195947 @ 0x740c5947 GetMetaDataPublicInterfaceFromInternal+0x850 CopyPDBs-0xec clr+0x195b56 @ 0x740c5b56 GetMetaDataPublicInterfaceFromInternal+0x23d CopyPDBs-0x6ff clr+0x195543 @ 0x740c5543 StrongNameSignatureVerification+0x839b GetMetaDataPublicInterfaceFromInternal-0x34b5 clr+0x191e51 @ 0x740c1e51 StrongNameSignatureVerification+0x854e GetMetaDataPublicInterfaceFromInternal-0x3302 clr+0x192004 @ 0x740c2004 mscorlib+0x355147 @ 0x72915147 exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2919068 registers.edi: 83283824 registers.eax: 0 registers.ebp: 2919120 registers.edx: 83283832 registers.ebx: 83283832 registers.esi: 1542823060 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2912840 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2912972 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2913704 registers.edi: 83333488 registers.eax: 0 registers.ebp: 2913756 registers.edx: 83333496 registers.ebx: 83333496 registers.esi: 1542829908 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2907480 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2907612 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2908344 registers.edi: 83281776 registers.eax: 3628072 registers.ebp: 2908396 registers.edx: 83281784 registers.ebx: 83281784 registers.esi: 1539490236 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2902120 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2902252 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2902984 registers.edi: 83285880 registers.eax: 6162576 registers.ebp: 2903036 registers.edx: 83285888 registers.ebx: 83285888 registers.esi: 1537971973 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2896760 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2896892 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b f8 0b da 89 exception.symbol: RtlInitUnicodeString+0xec RtlMultiByteToUnicodeN-0x251 ntdll+0x2e2f4 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189172 exception.address: 0x778ce2f4 registers.esp: 2897340 registers.edi: 8 registers.eax: 83568848 registers.ebp: 2897472 registers.edx: 3242032 registers.ebx: 1006 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2897340 registers.edi: 1006 registers.eax: 83568848 registers.ebp: 2897472 registers.edx: 2351693833 registers.ebx: 8 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d85dc @ 0x728985dc mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2896736 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2896868 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d85dc @ 0x728985dc mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b f8 0b da 89 exception.symbol: RtlInitUnicodeString+0xec RtlMultiByteToUnicodeN-0x251 ntdll+0x2e2f4 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189172 exception.address: 0x778ce2f4 registers.esp: 2897316 registers.edi: 8 registers.eax: 83568848 registers.ebp: 2897448 registers.edx: 3242032 registers.ebx: 1007 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d85dc @ 0x728985dc mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2897316 registers.edi: 1007 registers.eax: 83568848 registers.ebp: 2897448 registers.edx: 2351693833 registers.ebx: 8 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d8b4f @ 0x72898b4f mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2896664 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2896796 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d8b4f @ 0x72898b4f mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b f8 0b da 89 exception.symbol: RtlInitUnicodeString+0xec RtlMultiByteToUnicodeN-0x251 ntdll+0x2e2f4 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189172 exception.address: 0x778ce2f4 registers.esp: 2897248 registers.edi: 8 registers.eax: 83568848 registers.ebp: 2897380 registers.edx: 3242032 registers.ebx: 1008 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d8b4f @ 0x72898b4f mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2897248 registers.edi: 1008 registers.eax: 83568848 registers.ebp: 2897380 registers.edx: 2351693833 registers.ebx: 8 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d8b5e @ 0x72898b5e mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2896640 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2896772 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d8b5e @ 0x72898b5e mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b f8 0b da 89 exception.symbol: RtlInitUnicodeString+0xec RtlMultiByteToUnicodeN-0x251 ntdll+0x2e2f4 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189172 exception.address: 0x778ce2f4 registers.esp: 2897224 registers.edi: 8 registers.eax: 83568848 registers.ebp: 2897356 registers.edx: 3242032 registers.ebx: 1009 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d CoUninitializeEE+0x31ff CreateAssemblyNameObject-0xaa56 clr+0x22a43 @ 0x73f52a43 CoUninitializeEE+0xd6cf CreateAssemblyNameObject-0x586 clr+0x2cf13 @ 0x73f5cf13 GetPrivateContextsPerfCounters+0x1154 DllGetActivationFactoryImpl-0x13711 clr+0x890d6 @ 0x73fb90d6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d8b5e @ 0x72898b5e mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2897224 registers.edi: 1009 registers.eax: 83568848 registers.ebp: 2897356 registers.edx: 2351693833 registers.ebx: 8 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 RtlEncodeSystemPointer+0x30 RtlFindClearBits-0x761 ntdll+0x3e088 @ 0x778de088 RtlEncodeSystemPointer+0x411 RtlFindClearBits-0x380 ntdll+0x3e469 @ 0x778de469 RtlEncodeSystemPointer+0x4ea RtlFindClearBits-0x2a7 ntdll+0x3e542 @ 0x778de542 LdrResFindResourceDirectory+0x51d RtlEncodeSystemPointer-0x126 ntdll+0x3df32 @ 0x778ddf32 LdrResSearchResource+0x943 LdrResFindResourceDirectory-0x376 ntdll+0x3d69f @ 0x778dd69f LdrLoadDll+0x7b _strcmpi-0x304 ntdll+0x3c4b5 @ 0x778dc4b5 New_ntdll_LdrLoadDll@16+0x7b New_ntdll_LdrUnloadDll@4-0xb7 @ 0x7466d4cf LoadLibraryExW+0x178 LoadLibraryExA-0x2a kernelbase+0x11d2a @ 0x755a1d2a LoadLibraryExA+0x26 FreeLibrary-0x18 kernelbase+0x11d7a @ 0x755a1d7a DllGetClassObjectInternal+0x53eae CorDllMainForThunk-0x3864d clr+0x118f27 @ 0x74048f27 CopyPDBs+0x4ee4 DllCanUnloadNowInternal-0x3c0f3 clr+0x19ab26 @ 0x740cab26 DllGetClassObjectInternal+0x35b9f CorDllMainForThunk-0x5695c clr+0xfac18 @ 0x7402ac18 CreateHistoryReader+0x601ad PostErrorVA-0x108db2 clr+0x26f9f2 @ 0x7419f9f2 CreateHistoryReader+0x5ef45 PostErrorVA-0x10a01a clr+0x26e78a @ 0x7419e78a CreateHistoryReader+0x5fe22 PostErrorVA-0x10913d clr+0x26f667 @ 0x7419f667 CreateHistoryReader+0x60ecc PostErrorVA-0x108093 clr+0x270711 @ 0x741a0711 CreateHistoryReader+0x14646 PostErrorVA-0x154919 clr+0x223e8b @ 0x74153e8b CreateHistoryReader+0x14356 PostErrorVA-0x154c09 clr+0x223b9b @ 0x74153b9b CreateHistoryReader+0x9844c PostErrorVA-0xd0b13 clr+0x2a7c91 @ 0x741d7c91 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b f8 0b da 89 exception.symbol: RtlInitUnicodeString+0xec RtlMultiByteToUnicodeN-0x251 ntdll+0x2e2f4 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189172 exception.address: 0x778ce2f4 registers.esp: 2898368 registers.edi: 8 registers.eax: 83568848 registers.ebp: 2898500 registers.edx: 3242032 registers.ebx: 1010 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 RtlEncodeSystemPointer+0x30 RtlFindClearBits-0x761 ntdll+0x3e088 @ 0x778de088 RtlEncodeSystemPointer+0x411 RtlFindClearBits-0x380 ntdll+0x3e469 @ 0x778de469 RtlEncodeSystemPointer+0x4ea RtlFindClearBits-0x2a7 ntdll+0x3e542 @ 0x778de542 LdrResFindResourceDirectory+0x51d RtlEncodeSystemPointer-0x126 ntdll+0x3df32 @ 0x778ddf32 LdrResSearchResource+0x943 LdrResFindResourceDirectory-0x376 ntdll+0x3d69f @ 0x778dd69f LdrLoadDll+0x7b _strcmpi-0x304 ntdll+0x3c4b5 @ 0x778dc4b5 New_ntdll_LdrLoadDll@16+0x7b New_ntdll_LdrUnloadDll@4-0xb7 @ 0x7466d4cf LoadLibraryExW+0x178 LoadLibraryExA-0x2a kernelbase+0x11d2a @ 0x755a1d2a LoadLibraryExA+0x26 FreeLibrary-0x18 kernelbase+0x11d7a @ 0x755a1d7a DllGetClassObjectInternal+0x53eae CorDllMainForThunk-0x3864d clr+0x118f27 @ 0x74048f27 CopyPDBs+0x4ee4 DllCanUnloadNowInternal-0x3c0f3 clr+0x19ab26 @ 0x740cab26 DllGetClassObjectInternal+0x35b9f CorDllMainForThunk-0x5695c clr+0xfac18 @ 0x7402ac18 CreateHistoryReader+0x601ad PostErrorVA-0x108db2 clr+0x26f9f2 @ 0x7419f9f2 CreateHistoryReader+0x5ef45 PostErrorVA-0x10a01a clr+0x26e78a @ 0x7419e78a CreateHistoryReader+0x5fe22 PostErrorVA-0x10913d clr+0x26f667 @ 0x7419f667 CreateHistoryReader+0x60ecc PostErrorVA-0x108093 clr+0x270711 @ 0x741a0711 CreateHistoryReader+0x14646 PostErrorVA-0x154919 clr+0x223e8b @ 0x74153e8b CreateHistoryReader+0x14356 PostErrorVA-0x154c09 clr+0x223b9b @ 0x74153b9b CreateHistoryReader+0x9844c PostErrorVA-0xd0b13 clr+0x2a7c91 @ 0x741d7c91 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 GetPrivateContextsPerfCounters+0xf4 DllGetActivationFactoryImpl-0x14771 clr+0x88076 @ 0x73fb8076 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2898368 registers.edi: 1010 registers.eax: 83568848 registers.ebp: 2898500 registers.edx: 2351693833 registers.ebx: 8 registers.esi: 83568856 registers.ecx: 3628080	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 CoUninitializeEE+0xd8a2 CreateAssemblyNameObject-0x3b3 clr+0x2d0e6 @ 0x73f5d0e6 CoUninitializeEE+0xd911 CreateAssemblyNameObject-0x344 clr+0x2d155 @ 0x73f5d155 LoadStringRCEx+0x2a3 LookupHistoryAssembly-0x184 clr+0x1d736e @ 0x7410736e _EH_prolog+0x6f _inp-0x39 msvcr110_clr0400+0x29e7 @ 0x73e529e7 0x2cc5e8 exception.instruction_r: 8b 46 04 89 45 f4 c6 47 07 80 c6 47 06 00 8b 5e exception.symbol: RtlInitUnicodeString+0x196 RtlMultiByteToUnicodeN-0x1a7 ntdll+0x2e39e exception.instruction: mov eax, dword ptr [esi + 4] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 189342 exception.address: 0x778ce39e registers.esp: 2929668 registers.edi: 83292072 registers.eax: 0 registers.ebp: 2929720 registers.edx: 83292080 registers.ebx: 83292080 registers.esi: 1542822031 registers.ecx: 3211264	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d85ca @ 0x728985ca mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 CoUninitializeEE+0xd8a2 CreateAssemblyNameObject-0x3b3 clr+0x2d0e6 @ 0x73f5d0e6 CoUninitializeEE+0xd911 CreateAssemblyNameObject-0x344 clr+0x2d155 @ 0x73f5d155 LoadStringRCEx+0x2a3 LookupHistoryAssembly-0x184 clr+0x1d736e @ 0x7410736e _EH_prolog+0x6f _inp-0x39 msvcr110_clr0400+0x29e7 @ 0x73e529e7 0x2cc5e8 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2923432 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2923564 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d85dc @ 0x728985dc mscorlib+0x2d7e2a @ 0x72897e2a mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 CoUninitializeEE+0xd8a2 CreateAssemblyNameObject-0x3b3 clr+0x2d0e6 @ 0x73f5d0e6 CoUninitializeEE+0xd911 CreateAssemblyNameObject-0x344 clr+0x2d155 @ 0x73f5d155 LoadStringRCEx+0x2a3 LookupHistoryAssembly-0x184 clr+0x1d736e @ 0x7410736e _EH_prolog+0x6f _inp-0x39 msvcr110_clr0400+0x29e7 @ 0x73e529e7 0x2cc5e8 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2923408 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2923540 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d8b4f @ 0x72898b4f mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 CoUninitializeEE+0xd8a2 CreateAssemblyNameObject-0x3b3 clr+0x2d0e6 @ 0x73f5d0e6 CoUninitializeEE+0xd911 CreateAssemblyNameObject-0x344 clr+0x2d155 @ 0x73f5d155 LoadStringRCEx+0x2a3 LookupHistoryAssembly-0x184 clr+0x1d736e @ 0x7410736e _EH_prolog+0x6f _inp-0x39 msvcr110_clr0400+0x29e7 @ 0x73e529e7 0x2cc5e8 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2923336 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2923468 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f GetPrivateContextsPerfCounters+0x900 DllGetActivationFactoryImpl-0x13f65 clr+0x88882 @ 0x73fb8882 GetPrivateContextsPerfCounters+0x5f2 DllGetActivationFactoryImpl-0x14273 clr+0x88574 @ 0x73fb8574 CreateAssemblyNameObject+0x8d GetMetaDataInternalInterface-0x383e2 clr+0x2d526 @ 0x73f5d526 CreateAssemblyNameObject+0xcdc GetMetaDataInternalInterface-0x37793 clr+0x2e175 @ 0x73f5e175 GetPrivateContextsPerfCounters+0xde DllGetActivationFactoryImpl-0x14787 clr+0x88060 @ 0x73fb8060 GetPrivateContextsPerfCounters+0x10c5 DllGetActivationFactoryImpl-0x137a0 clr+0x89047 @ 0x73fb9047 mscorlib+0x2d866e @ 0x7289866e mscorlib+0x2d876c @ 0x7289876c mscorlib+0x2d8b5e @ 0x72898b5e mscorlib+0x2d8a35 @ 0x72898a35 mscorlib+0x2d89a9 @ 0x728989a9 mscorlib+0x2d8891 @ 0x72898891 mscorlib+0x2d7e43 @ 0x72897e43 mscorlib+0x2d79ea @ 0x728979ea mscorlib+0x2d74ff @ 0x728974ff mscorlib+0x2d71c3 @ 0x728971c3 mscorlib+0x2d6c3c @ 0x72896c3c mscorlib+0x2fcfb1 @ 0x728bcfb1 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0x79c6 CoUninitializeEE-0x5a72 clr+0x19dd2 @ 0x73f49dd2 DllGetClassObjectInternal+0x38b0b CorDllMainForThunk-0x539f0 clr+0xfdb84 @ 0x7402db84 DllGetClassObjectInternal+0x38c16 CorDllMainForThunk-0x538e5 clr+0xfdc8f @ 0x7402dc8f mscorlib+0x2fce7e @ 0x728bce7e mscorlib+0x2fcd8c @ 0x728bcd8c mscorlib+0x2fcd0b @ 0x728bcd0b DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f DllRegisterServerInternal+0xa89 CoUninitializeEE-0xc9af clr+0x12e95 @ 0x73f42e95 DllGetClassObjectInternal+0x6069a CorDllMainForThunk-0x2be61 clr+0x125713 @ 0x74055713 DllGetClassObjectInternal+0x6075c CorDllMainForThunk-0x2bd9f clr+0x1257d5 @ 0x740557d5 mscorlib+0x9bc1c8 @ 0x72f7c1c8 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f CoUninitializeEE+0xa5b4 CreateAssemblyNameObject-0x36a1 clr+0x29df8 @ 0x73f59df8 CoUninitializeEE+0xa5eb CreateAssemblyNameObject-0x366a clr+0x29e2f @ 0x73f59e2f DllGetClassObjectInternal+0xc874 CorDllMainForThunk-0x7fc87 clr+0xd18ed @ 0x740018ed DllGetClassObjectInternal+0xcb84 CorDllMainForThunk-0x7f977 clr+0xd1bfd @ 0x74001bfd CreateHistoryReader+0x13d0e PostErrorVA-0x155251 clr+0x223553 @ 0x74153553 LookupHistoryAssembly+0x1550 CoEEShutDownCOM-0x2c2c clr+0x1d8a42 @ 0x74108a42 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 CoUninitializeEE+0xd8a2 CreateAssemblyNameObject-0x3b3 clr+0x2d0e6 @ 0x73f5d0e6 CoUninitializeEE+0xd911 CreateAssemblyNameObject-0x344 clr+0x2d155 @ 0x73f5d155 LoadStringRCEx+0x2a3 LookupHistoryAssembly-0x184 clr+0x1d736e @ 0x7410736e _EH_prolog+0x6f _inp-0x39 msvcr110_clr0400+0x29e7 @ 0x73e529e7 0x2cc5e8 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2923312 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2923444 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: DllGetClassObjectInternal+0x5f11f CorDllMainForThunk-0x2d3dc clr+0x124198 @ 0x74054198 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d mscorlib+0x2cb060 @ 0x7288b060 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d microsoft+0x50c17 @ 0x70770c17 microsoft+0x3f05f @ 0x7075f05f microsoft+0x3e4d4 @ 0x7075e4d4 microsoft+0x3cda4 @ 0x7075cda4 0xa210d6 0xa21231 0xa207d5 system+0x1f9799 @ 0x71219799 system+0x1f92c8 @ 0x712192c8 system+0x1eca74 @ 0x7120ca74 system+0x1ec868 @ 0x7120c868 system+0x1f82b8 @ 0x712182b8 system+0x1ee54d @ 0x7120e54d system+0x1f70ea @ 0x712170ea system+0x1e56c0 @ 0x712056c0 system+0x1f8215 @ 0x71218215 system+0x1f6f75 @ 0x71216f75 system+0x1ee251 @ 0x7120e251 system+0x1ee229 @ 0x7120e229 system+0x1ee170 @ 0x7120e170 0x57a08e gapfnScSendMessage+0x332 GetAppCompatFlags2-0x8ea user32+0x162fa @ 0x755f62fa GetThreadDesktop+0xd7 GetWindowLongW-0x2c4 user32+0x16d3a @ 0x755f6d3a GetThreadDesktop+0x185 GetWindowLongW-0x216 user32+0x16de8 @ 0x755f6de8 GetThreadDesktop+0x1e1 GetWindowLongW-0x1ba user32+0x16e44 @ 0x755f6e44 KiUserCallbackDispatcher+0x2e KiUserExceptionDispatcher-0x1a ntdll+0x1011a @ 0x778b011a exception.instruction_r: 81 38 05 00 00 c0 0f 84 92 1f 10 00 8b c7 5f c9 exception.instruction: cmp dword ptr [eax], 0xc0000005 exception.exception_code: 0xc0000005 exception.symbol: DllGetClassObjectInternal+0x5dc89 CorDllMainForThunk-0x2e872 clr+0x122d02 exception.address: 0x74052d02 registers.esp: 2937060 registers.edi: 0 registers.eax: 0 registers.ebp: 2937096 registers.edx: 3367016 registers.ebx: 2941872 registers.esi: 3367408 registers.ecx: 0	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d DllRegisterServerInternal+0x8dbc CoUninitializeEE-0x467c clr+0x1b1c8 @ 0x73f4b1c8 CoUninitializeEE+0xb886 CreateAssemblyNameObject-0x23cf clr+0x2b0ca @ 0x73f5b0ca LogHelp_TerminateOnAssert+0x1761 GetPrivateContextsPerfCounters-0x17ce1 clr+0x702a1 @ 0x73fa02a1 LogHelp_TerminateOnAssert+0x10c41 GetPrivateContextsPerfCounters-0x8801 clr+0x7f781 @ 0x73faf781 CreateHistoryReader+0xe7ef PostErrorVA-0x15a770 clr+0x21e034 @ 0x7414e034 CreateHistoryReader+0xee95 PostErrorVA-0x15a0ca clr+0x21e6da @ 0x7414e6da CreateHistoryReader+0x140db PostErrorVA-0x154e84 clr+0x223920 @ 0x74153920 CopyPDBs+0xc235 DllCanUnloadNowInternal-0x34da2 clr+0x1a1e77 @ 0x740d1e77 CopyPDBs+0xc37d DllCanUnloadNowInternal-0x34c5a clr+0x1a1fbf @ 0x740d1fbf CopyPDBs+0xc05c DllCanUnloadNowInternal-0x34f7b clr+0x1a1c9e @ 0x740d1c9e strncpy+0x2cf RtlRemoveVectoredExceptionHandler-0x42 ntdll+0x75eff @ 0x77915eff RtlCaptureContext+0x187 RtlUnwind-0x87 ntdll+0x46cb2 @ 0x778e6cb2 RtlDosSearchPath_Ustr+0x994 RtlCaptureContext-0x1b8 ntdll+0x46973 @ 0x778e6973 New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 DllGetClassObjectInternal+0x5f11f CorDllMainForThunk-0x2d3dc clr+0x124198 @ 0x74054198 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d mscorlib+0x2cb060 @ 0x7288b060 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d microsoft+0x50c17 @ 0x70770c17 microsoft+0x3f05f @ 0x7075f05f microsoft+0x3e4d4 @ 0x7075e4d4 microsoft+0x3cda4 @ 0x7075cda4 0xa210d6 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2931232 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2931364 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d DllRegisterServerInternal+0x8dbc CoUninitializeEE-0x467c clr+0x1b1c8 @ 0x73f4b1c8 CoUninitializeEE+0xb886 CreateAssemblyNameObject-0x23cf clr+0x2b0ca @ 0x73f5b0ca LogHelp_TerminateOnAssert+0x1761 GetPrivateContextsPerfCounters-0x17ce1 clr+0x702a1 @ 0x73fa02a1 LogHelp_TerminateOnAssert+0x10c41 GetPrivateContextsPerfCounters-0x8801 clr+0x7f781 @ 0x73faf781 CreateHistoryReader+0xe818 PostErrorVA-0x15a747 clr+0x21e05d @ 0x7414e05d CreateHistoryReader+0xee95 PostErrorVA-0x15a0ca clr+0x21e6da @ 0x7414e6da CreateHistoryReader+0x140db PostErrorVA-0x154e84 clr+0x223920 @ 0x74153920 CopyPDBs+0xc235 DllCanUnloadNowInternal-0x34da2 clr+0x1a1e77 @ 0x740d1e77 CopyPDBs+0xc37d DllCanUnloadNowInternal-0x34c5a clr+0x1a1fbf @ 0x740d1fbf CopyPDBs+0xc05c DllCanUnloadNowInternal-0x34f7b clr+0x1a1c9e @ 0x740d1c9e strncpy+0x2cf RtlRemoveVectoredExceptionHandler-0x42 ntdll+0x75eff @ 0x77915eff RtlCaptureContext+0x187 RtlUnwind-0x87 ntdll+0x46cb2 @ 0x778e6cb2 RtlDosSearchPath_Ustr+0x994 RtlCaptureContext-0x1b8 ntdll+0x46973 @ 0x778e6973 New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 DllGetClassObjectInternal+0x5f11f CorDllMainForThunk-0x2d3dc clr+0x124198 @ 0x74054198 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d mscorlib+0x2cb060 @ 0x7288b060 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d microsoft+0x50c17 @ 0x70770c17 microsoft+0x3f05f @ 0x7075f05f microsoft+0x3e4d4 @ 0x7075e4d4 microsoft+0x3cda4 @ 0x7075cda4 0xa210d6 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2931232 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2931364 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 DllUnregisterServerInternal-0x7fe0 clr+0x2114 @ 0x73f32114 DllUnregisterServerInternal-0x7fa5 clr+0x214f @ 0x73f3214f DllRegisterServerInternal+0x9fdd CoUninitializeEE-0x345b clr+0x1c3e9 @ 0x73f4c3e9 DllRegisterServerInternal+0xcb31 CoUninitializeEE-0x907 clr+0x1ef3d @ 0x73f4ef3d CoUninitializeEE+0x6a19 CreateAssemblyNameObject-0x723c clr+0x2625d @ 0x73f5625d DllRegisterServerInternal+0x8dbc CoUninitializeEE-0x467c clr+0x1b1c8 @ 0x73f4b1c8 CoUninitializeEE+0xb886 CreateAssemblyNameObject-0x23cf clr+0x2b0ca @ 0x73f5b0ca LogHelp_TerminateOnAssert+0x1761 GetPrivateContextsPerfCounters-0x17ce1 clr+0x702a1 @ 0x73fa02a1 LogHelp_TerminateOnAssert+0x10c41 GetPrivateContextsPerfCounters-0x8801 clr+0x7f781 @ 0x73faf781 CreateHistoryReader+0xe840 PostErrorVA-0x15a71f clr+0x21e085 @ 0x7414e085 CreateHistoryReader+0xee95 PostErrorVA-0x15a0ca clr+0x21e6da @ 0x7414e6da CreateHistoryReader+0x140db PostErrorVA-0x154e84 clr+0x223920 @ 0x74153920 CopyPDBs+0xc235 DllCanUnloadNowInternal-0x34da2 clr+0x1a1e77 @ 0x740d1e77 CopyPDBs+0xc37d DllCanUnloadNowInternal-0x34c5a clr+0x1a1fbf @ 0x740d1fbf CopyPDBs+0xc05c DllCanUnloadNowInternal-0x34f7b clr+0x1a1c9e @ 0x740d1c9e strncpy+0x2cf RtlRemoveVectoredExceptionHandler-0x42 ntdll+0x75eff @ 0x77915eff RtlCaptureContext+0x187 RtlUnwind-0x87 ntdll+0x46cb2 @ 0x778e6cb2 RtlDosSearchPath_Ustr+0x994 RtlCaptureContext-0x1b8 ntdll+0x46973 @ 0x778e6973 New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 DllGetClassObjectInternal+0x5f11f CorDllMainForThunk-0x2d3dc clr+0x124198 @ 0x74054198 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d mscorlib+0x2cb060 @ 0x7288b060 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d microsoft+0x50c17 @ 0x70770c17 microsoft+0x3f05f @ 0x7075f05f microsoft+0x3e4d4 @ 0x7075e4d4 microsoft+0x3cda4 @ 0x7075cda4 0xa210d6 exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2931232 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2931364 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1
__exception__ Nov. 27, 2023, 9:24 a.m.	stacktrace: RtlAllocateHeap+0xac RtlFreeAnsiString-0x54 ntdll+0x2e0d2 @ 0x778ce0d2 SimpleTypeAlignment-0x22a rpcrt4+0x10636 @ 0x754b0636 SimpleTypeAlignment-0x250 rpcrt4+0x10610 @ 0x754b0610 NdrConformantVaryingArrayBufferSize+0x84d RpcBindingFromStringBindingW-0x1c4 rpcrt4+0x20ff5 @ 0x754c0ff5 RpcBindingFromStringBindingW+0x58 RpcStringBindingComposeW-0x20f rpcrt4+0x21211 @ 0x754c1211 RegOpenKeyW+0x162 ElfRegisterEventSourceW-0x6e advapi32+0x125bb @ 0x754125bb RpcBindingFree+0x569 I_RpcBindingCopy-0xb81 rpcrt4+0x1add4 @ 0x754badd4 RpcBindingFree+0x597 I_RpcBindingCopy-0xb53 rpcrt4+0x1ae02 @ 0x754bae02 NdrClientCall2+0x1f9 RpcAsyncInitializeHandle-0x10 rpcrt4+0xb01fe @ 0x755501fe ElfRegisterEventSourceW+0xe1 RegisterEventSourceW-0x12 advapi32+0x1270a @ 0x7541270a ElfRegisterEventSourceW+0x68 RegisterEventSourceW-0x8b advapi32+0x12691 @ 0x75412691 RegisterEventSourceW+0x32 SetEntriesInAclW-0x318 advapi32+0x1274e @ 0x7541274e PostErrorVA+0x69e7 ClearDownloadCache-0xcfb7 clr+0x37f18b @ 0x742af18b CreateHistoryReader+0xf3037 PostErrorVA-0x75f28 clr+0x30287c @ 0x7423287c CreateHistoryReader+0xee95 PostErrorVA-0x15a0ca clr+0x21e6da @ 0x7414e6da CreateHistoryReader+0x140db PostErrorVA-0x154e84 clr+0x223920 @ 0x74153920 CopyPDBs+0xc235 DllCanUnloadNowInternal-0x34da2 clr+0x1a1e77 @ 0x740d1e77 CopyPDBs+0xc37d DllCanUnloadNowInternal-0x34c5a clr+0x1a1fbf @ 0x740d1fbf CopyPDBs+0xc05c DllCanUnloadNowInternal-0x34f7b clr+0x1a1c9e @ 0x740d1c9e strncpy+0x2cf RtlRemoveVectoredExceptionHandler-0x42 ntdll+0x75eff @ 0x77915eff RtlCaptureContext+0x187 RtlUnwind-0x87 ntdll+0x46cb2 @ 0x778e6cb2 RtlDosSearchPath_Ustr+0x994 RtlCaptureContext-0x1b8 ntdll+0x46973 @ 0x778e6973 New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 DllGetClassObjectInternal+0x5f11f CorDllMainForThunk-0x2d3dc clr+0x124198 @ 0x74054198 DllGetClassObjectInternal+0x5fe1c CorDllMainForThunk-0x2c6df clr+0x124e95 @ 0x74054e95 DllGetClassObjectInternal+0x5fd5f CorDllMainForThunk-0x2c79c clr+0x124dd8 @ 0x74054dd8 RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x778e6ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x778e6a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x7467482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x778b0143 RtlFreeHeap+0x7e RtlAllocateHeap-0x23 ntdll+0x2e003 @ 0x778ce003 HeapFree+0x14 GetProcessHeap-0xc kernel32+0x114dd @ 0x757f14dd DllUnregisterServerInternal-0x7f84 clr+0x2170 @ 0x73f32170 DllUnregisterServerInternal-0x7f5f clr+0x2195 @ 0x73f32195 DllUnregisterServerInternal-0x7f4e clr+0x21a6 @ 0x73f321a6 LogHelp_TerminateOnAssert+0xa56e GetPrivateContextsPerfCounters-0xeed4 clr+0x790ae @ 0x73fa90ae LogHelp_TerminateOnAssert+0xa8aa GetPrivateContextsPerfCounters-0xeb98 clr+0x793ea @ 0x73fa93ea DllGetClassObjectInternal+0x2b514 CorDllMainForThunk-0x60fe7 clr+0xf058d @ 0x7402058d DllGetClassObjectInternal+0x2bba1 CorDllMainForThunk-0x6095a clr+0xf0c1a @ 0x74020c1a DllGetClassObjectInternal+0x2bbb7 CorDllMainForThunk-0x60944 clr+0xf0c30 @ 0x74020c30 CoUninitializeEE+0xa055 CreateAssemblyNameObject-0x3c00 clr+0x29899 @ 0x73f59899 CoUninitializeEE+0x9fee CreateAssemblyNameObject-0x3c67 clr+0x29832 @ 0x73f59832 DllRegisterServerInternal+0x98c9 CoUninitializeEE-0x3b6f clr+0x1bcd5 @ 0x73f4bcd5 DllUnregisterServerInternal-0x760b clr+0x2ae9 @ 0x73f32ae9 0xd53072 0xa29375 0xd52d73 0xa29375 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d mscorlib+0x2cb060 @ 0x7288b060 DllUnregisterServerInternal-0x7aa2 clr+0x2652 @ 0x73f32652 DllRegisterServerInternal+0x243 CoUninitializeEE-0xd1f5 clr+0x1264f @ 0x73f4264f LogHelp_TerminateOnAssert+0x12cf8 GetPrivateContextsPerfCounters-0x674a clr+0x81838 @ 0x73fb1838 LogHelp_TerminateOnAssert+0x12bf7 GetPrivateContextsPerfCounters-0x684b clr+0x81737 @ 0x73fb1737 mscorlib+0x2d36ad @ 0x728936ad mscorlib+0x308f2d @ 0x728c8f2d microsoft+0x50c17 @ 0x70770c17 microsoft+0x3f05f @ 0x7075f05f exception.instruction_r: 0f b7 06 99 0f a4 c2 10 c1 e0 10 0b d8 0b fa 89 exception.symbol: LdrUnlockLoaderLock+0x2cc RtlInitUnicodeStringEx-0xe6b ntdll+0x36f08 exception.instruction: movzx eax, word ptr [esi] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 225032 exception.address: 0x778d6f08 registers.esp: 2930052 registers.edi: 66 registers.eax: 83535144 registers.ebp: 2930184 registers.edx: 2058813458 registers.ebx: 17 registers.esi: 83535152 registers.ecx: 83298288	1

One or more potentially interesting buffers were extracted, these generally contain injected code, configuration data, etc.

Allocates read-write-execute memory (usually to unpack itself) (50 out of 62 events)

Time & API	Arguments	Status
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 983040 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00530000 allocation_type: 8192 (MEM_RESERVE) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e0000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtProtectVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73f31000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73f32000 process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 1966080 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00c00000 allocation_type: 8192 (MEM_RESERVE) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00da0000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00562000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00595000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0059b000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00597000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0057c000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0057d000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0057e000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0057f000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a00000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a01000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a02000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a20000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a03000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 327680 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7ef50000 allocation_type: 1056768 (MEM_RESERVE\|MEM_TOP_DOWN) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7ef50000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7ef50000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7ef58000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 65536 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7ef40000 allocation_type: 1056768 (MEM_RESERVE\|MEM_TOP_DOWN) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x7ef40000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0056a000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0058a000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00587000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0057a000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:23 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00586000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a21000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0056c000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 8192 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e1000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 8192 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e3000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e5000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e6000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e7000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e8000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 16384 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005e9000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 69632 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005ed000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005fe000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 8192 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x005ff000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00601000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a22000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00602000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00603000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a23000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00d5f000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00d50000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2100 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00a24000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1

Creates executable files on the filesystem (1 event)

file	C:\Users\test22\AppData\Local\Temp\Protect544cd51a.dll

Drops an executable to the user AppData folder (1 event)

file	C:\Users\test22\AppData\Local\Temp\Protect544cd51a.dll

The binary likely contains encrypted or compressed data indicative of a packer (3 events)

section

{u'size_of_data': u'0x005c0e00', u'virtual_address': u'0x00002000', u'entropy': 7.578801466552725, u'name': u'.text', u'virtual_size': u'0x005c0c84'}

entropy

7.57880146655

description

A section with a high entropy has been found

section

{u'size_of_data': u'0x00017000', u'virtual_address': u'0x005c6000', u'entropy': 7.524078702670614, u'name': u'.rsrc', u'virtual_size': u'0x00016f90'}

entropy

7.52407870267

description

A section with a high entropy has been found

entropy

0.999749373434

description

Overall entropy of this PE file is high

Terminates another process (2 events)

Time & API	Arguments	Status	Return	Repeated
NtTerminateProcess Nov. 27, 2023, 9:24 a.m.	status_code: 0x00000000 process_identifier: 2528 process_handle: 0x00000294		0	0
NtTerminateProcess Nov. 27, 2023, 9:24 a.m.	status_code: 0x00000000 process_identifier: 2528 process_handle: 0x00000294	1	0	0

Allocates execute permission to another process indicative of possible code injection (2 events)

Time & API	Arguments	Status	Return	Repeated
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2528 region_size: 860160 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x00000294		3221225496	0
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2564 region_size: 860160 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x00000298	1	0	0

Manipulates memory of a non-child process indicative of process injection (6 events)

Time & API	Arguments	Status	Return	Repeated
Process injection	Process 2100 manipulating memory of non-child process 2528
Process injection	Process 2100 manipulating memory of non-child process 2564
NtUnmapViewOfSection Nov. 27, 2023, 9:24 a.m.	base_address: 0x00400000 region_size: 1036288 process_identifier: 2528 process_handle: 0x00000294		3221225497	0
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2528 region_size: 860160 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x00000294		3221225496	0
NtUnmapViewOfSection Nov. 27, 2023, 9:24 a.m.	base_address: 0x00400000 region_size: 1999372288 process_identifier: 2564 process_handle: 0x00000298		3221225497	0
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2564 region_size: 860160 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x00000298	1	0	0

Potential code injection by writing to the memory of another process (5 events)

Time & API	Arguments	Status	Return	Repeated
Process injection	Process 2100 injected into non-child 2564
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $PELv\eà°>Ï @ ðÎKà H.textD¯ ° `.rsrcà²@@.reloc ¸@B base_address: 0x00400000 process_identifier: 2564 process_handle: 0x00000298	1	1	0
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: P8h àÔtãêÔ4VS_VERSION_INFO½ïþ?DVarFileInfo$Translation°4StringFileInfo000004b0Comments"CompanyNameFileDescription0FileVersion1.0.0.08InternalNamebladfin.exe&LegalCopyrightLegalTrademarks@OriginalFilenamebladfin.exe"ProductName4ProductVersion1.0.0.08Assembly Version1.0.0.0ï»¿<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly> base_address: 0x004ce000 process_identifier: 2564 process_handle: 0x00000298	1	1	0
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: À@? base_address: 0x004d0000 process_identifier: 2564 process_handle: 0x00000298	1	1	0
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: @ base_address: 0x7efde008 process_identifier: 2564 process_handle: 0x00000298	1	1	0

Code injection by writing an executable or DLL to the memory of another process (2 events)

Time & API	Arguments	Status	Return	Repeated
Process injection	Process 2100 injected into non-child 2564
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $PELv\eà°>Ï @ ðÎKà H.textD¯ ° `.rsrcà²@@.reloc ¸@B base_address: 0x00400000 process_identifier: 2564 process_handle: 0x00000298	1	1	0

File has been identified by 15 AntiVirus engines on VirusTotal as malicious (15 events)

Skyhigh	Artemis
Sangfor	Trojan.Win32.Agent.Vij3
Symantec	Trojan.Gen.9
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Webroot	W32.Malware.Gen
Google	Detected
Microsoft	Trojan:Win32/Znyonm
Gridinsoft	Trojan.Win32.Gen.tr
ZoneAlarm	UDS:DangerousObject.Multi.Generic
McAfee	Artemis!36BD43B2792C
Ikarus	Trojan-Spy.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.AKAG!tr
DeepInstinct	MALICIOUS

Used NtSetContextThread to modify a thread in a remote process indicative of process injection (2 events)

Time & API	Arguments	Status	Return	Repeated
Process injection	Process 2100 called NtSetContextThread to modify thread in remote process 2564
NtSetContextThread Nov. 27, 2023, 9:24 a.m.	registers.eip: 2005598660 registers.esp: 3537500 registers.edi: 0 registers.eax: 5033790 registers.ebp: 0 registers.edx: 0 registers.ebx: 2130567168 registers.esi: 0 registers.ecx: 0 thread_handle: 0x0000029c process_identifier: 2564	1	0	0

Executed a process and injected code into it, probably while unpacking (16 events)

Time & API	Arguments	Status	Return
NtResumeThread Nov. 27, 2023, 9:23 a.m.	thread_handle: 0x000000dc suspend_count: 1 process_identifier: 2100	1	0
NtResumeThread Nov. 27, 2023, 9:23 a.m.	thread_handle: 0x0000014c suspend_count: 1 process_identifier: 2100	1	0
NtResumeThread Nov. 27, 2023, 9:23 a.m.	thread_handle: 0x00000190 suspend_count: 1 process_identifier: 2100	1	0
CreateProcessInternalW Nov. 27, 2023, 9:24 a.m.	thread_identifier: 2532 thread_handle: 0x00000290 process_identifier: 2528 current_directory: filepath: track: 1 command_line: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe filepath_r: stack_pivoted: 0 creation_flags: 564 (CREATE_NEW_CONSOLE\|CREATE_NEW_PROCESS_GROUP\|CREATE_SUSPENDED\|NORMAL_PRIORITY_CLASS) inherit_handles: 0 process_handle: 0x00000294	1	1
NtUnmapViewOfSection Nov. 27, 2023, 9:24 a.m.	base_address: 0x00400000 region_size: 1036288 process_identifier: 2528 process_handle: 0x00000294		3221225497
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2528 region_size: 860160 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x00000294		3221225496
CreateProcessInternalW Nov. 27, 2023, 9:24 a.m.	thread_identifier: 2568 thread_handle: 0x0000029c process_identifier: 2564 current_directory: filepath: track: 1 command_line: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe filepath_r: stack_pivoted: 0 creation_flags: 564 (CREATE_NEW_CONSOLE\|CREATE_NEW_PROCESS_GROUP\|CREATE_SUSPENDED\|NORMAL_PRIORITY_CLASS) inherit_handles: 0 process_handle: 0x00000298	1	1
NtUnmapViewOfSection Nov. 27, 2023, 9:24 a.m.	base_address: 0x00400000 region_size: 1999372288 process_identifier: 2564 process_handle: 0x00000298		3221225497
NtAllocateVirtualMemory Nov. 27, 2023, 9:24 a.m.	process_identifier: 2564 region_size: 860160 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00400000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x00000298	1	0
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: MZÿÿ¸@º´ Í!¸LÍ!This program cannot be run in DOS mode. $PELv\eà°>Ï @ ðÎKà H.textD¯ ° `.rsrcà²@@.reloc ¸@B base_address: 0x00400000 process_identifier: 2564 process_handle: 0x00000298	1	1
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: base_address: 0x00402000 process_identifier: 2564 process_handle: 0x00000298	1	1
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: P8h àÔtãêÔ4VS_VERSION_INFO½ïþ?DVarFileInfo$Translation°4StringFileInfo000004b0Comments"CompanyNameFileDescription0FileVersion1.0.0.08InternalNamebladfin.exe&LegalCopyrightLegalTrademarks@OriginalFilenamebladfin.exe"ProductName4ProductVersion1.0.0.08Assembly Version1.0.0.0ï»¿<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly> base_address: 0x004ce000 process_identifier: 2564 process_handle: 0x00000298	1	1
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: À@? base_address: 0x004d0000 process_identifier: 2564 process_handle: 0x00000298	1	1
NtGetContextThread Nov. 27, 2023, 9:24 a.m.	thread_handle: 0x0000029c	1	0
WriteProcessMemory Nov. 27, 2023, 9:24 a.m.	buffer: @ base_address: 0x7efde008 process_identifier: 2564 process_handle: 0x00000298	1	1
NtSetContextThread Nov. 27, 2023, 9:24 a.m.	registers.eip: 2005598660 registers.esp: 3537500 registers.edi: 0 registers.eax: 5033790 registers.ebp: 0 registers.edx: 0 registers.ebx: 2130567168 registers.esi: 0 registers.ecx: 0 thread_handle: 0x0000029c process_identifier: 2564	1	0

hv.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All