Analyzed 72 dump

Top 1: total counts = 11

066af6cc 0f3faeed rightsmanager!RM_AutorunScan+0x176
066af7c8 75e2347d ffi_bindings!ffi_call_win32+0x11
066af7d4 77639852 kernel32!BaseThreadInitThunk+0xe
066af814 77639825 ntdll!__RtlUserThreadStart+0x70
066af82c 00000000 ntdll!_RtlUserThreadStart+0x1b

e5ff6d653da7c4a5008042e8ff15f9d9_000.dmp
8338fddcece9b554d118ab4581a5d793_000.dmp
ee3c5f01c642d3a5fe78deb1cd9d1f9a_000.dmp
b9d8f37fbddced68338396adfbf1eb77_000.dmp
73a86d02ae8b3de7cded9150deb65e6c_000.dmp

Top 2: total counts = 7

06c3fe3c 7b4aaeed rightsmanager!RM_AutorunScan+0x176
06c3ff38 76135d49 ffi_bindings!ffi_call_win32+0x11
06c3ff48 7767d03b kernel32!BaseThreadInitThunk+0x19
06c3ffa0 7767cfc1 ntdll!__RtlUserThreadStart+0x2b
06c3ffb0 00000000 ntdll!_RtlUserThreadStart+0x1b

d2dffe07cda7f88a777ff85788cf5ebc_000.dmp
92780361a275497f564846dc3bea9858_000.dmp
175938c2dcfb9bf071732f975ec5472f_001.dmp
e89611d0b3d04499b0789493268778c3_000.dmp
c92d2e9996f237f54ac6184ab33e8f0c_000.dmp

Top 3: total counts = 6

ChildEBP RetAddr  
05c3f328 79e5e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05c3f368 79e6738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05c3f5b8 79e612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05c4fc00 79e5e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05c4fc78 79e97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05c4fe4c 778300c9 rightsmanager!RM_AutorunScan+0x176
05c4fe5c 779c7b1e kernel32!BaseThreadInitThunk+0x19
05c4feb8 779c7aee ntdll!__RtlUserThreadStart+0x2f
05c4fec8 00000000 ntdll!_RtlUserThreadStart+0x1b

be6dfdf45d52f9cc3656888ab3fff5aa_000.dmp
6d80b0eef15d6c008b28fa41ac8c08e9_000.dmp
1af15cf241f57247d4a25fab64660928_000.dmp
dc2bb59a14550826c47ff6b3afb60331_000.dmp
d06b6788fb6c8fea6a11bff1101c8a5d_000.dmp

Top 4: total counts = 5

ChildEBP RetAddr  
067deec0 564fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
067def00 5650738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
067df150 565012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
067ef798 564fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
067ef810 56537f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
067ef9e4 75d7343d rightsmanager!RM_AutorunScan+0x176
067ef9f0 77659802 kernel32!BaseThreadInitThunk+0xe
067efa30 776597d5 ntdll!__RtlUserThreadStart+0x70
067efa48 00000000 ntdll!_RtlUserThreadStart+0x1b

35df21125e9f00294ed62265975f883b_000.dmp
15f4acbc2364a2c50a2725d0ec3a2b88_000.dmp
377c88297a11519f2cb2c359f2c443fc_000.dmp
71122059bbdbe5f66b0039c6dfb0edfb_000.dmp
38a07d5d7edbdc814096455daf54176b_000.dmp

Top 5: total counts = 4

05affa5c 650daeed rightsmanager!RM_AutorunScan+0x176
05affb58 75e800f9 ffi_bindings!ffi_call_win32+0x11
05affb68 77017bbe kernel32!BaseThreadInitThunk+0x19
05affbc4 77017b8e ntdll!__RtlUserThreadStart+0x2f
05affbd4 00000000 ntdll!_RtlUserThreadStart+0x1b

4b8a87c0f91f1d2454b72ae581a48629_000.dmp
95f65703d0cc24f5fc1a4ddd4b001d54_000.dmp
074d4c1a866f8dcad8a7fd7bf4e57fd2_000.dmp
16d33856cdfcc10ae1a062f5403224de_000.dmp

Top 6: total counts = 4

ChildEBP RetAddr  
05a2f238 7a22e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05a2f278 7a23738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05a2f4c8 7a2312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05a3fb10 7a22e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05a3fb88 7a267f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05a3fd5c 75627ba9 rightsmanager!RM_AutorunScan+0x176
05a3fd6c 773ac36b kernel32!BaseThreadInitThunk+0x19
05a3fdc4 773ac2ef ntdll!__RtlUserThreadStart+0x2b
05a3fdd4 00000000 ntdll!_RtlUserThreadStart+0x1b

91f239005602f2281c6e299916264041_000.dmp
924b381502b8c780ee04f5a1fb458b7f_000.dmp
21d643e709c043f098348f52b11474cb_000.dmp
b143db98568e780d99f5e15815d6457f_000.dmp

Top 7: total counts = 3

ChildEBP RetAddr  
053ef0d0 787ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
053ef110 787b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
053ef360 787b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
053ff9a8 787ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
053ffa20 787e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
053ffbf4 7580fcc9 rightsmanager!RM_AutorunScan+0x176
053ffc04 774582ae kernel32!BaseThreadInitThunk+0x19
053ffc60 7745827e ntdll!__RtlUserThreadStart+0x2f
053ffc70 00000000 ntdll!_RtlUserThreadStart+0x1b

751736f21de1ea3f4984d0fc99fd2c39_000.dmp
ea8674908469cdee0ae19ccbdae9483c_000.dmp
a66bcc3918818f9af594783b5a726b3a_000.dmp

Top 8: total counts = 2

ChildEBP RetAddr  
0503f278 7aeae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0503f2b8 7aeb738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0503f508 7aeb12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0504fb50 7aeae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0504fbc8 7aee7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0504fd9c 76377ba9 rightsmanager!RM_AutorunScan+0x176
0504fdac 7779c0cb kernel32!BaseThreadInitThunk+0x19
0504fe04 7779c04f ntdll!__RtlUserThreadStart+0x2b
0504fe14 00000000 ntdll!_RtlUserThreadStart+0x1b

a813dbc2414bd2d7b4bd9de30d49844a_000.dmp
55d043bea2ac230710ed28b4032eb975_000.dmp

Top 9: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030f1c4 6f0f8d6c node+0x12ae60a
0030f234 6cdb3961 node+0x2a18d6c
0030f2a8 6d9a89e6 node+0x6d3961
0030f374 6d9a875e node+0x12c89e6
0030f3d0 6d980ec3 node+0x12c875e
0030f40c 6d980acb node+0x12a0ec3
0030f44c 6d9923d2 node+0x12a0acb
0030f494 6d9922e2 node+0x12b23d2
0030f4d8 6cdabd42 node+0x12b22e2
0030f500 6cdad47d node+0x6cbd42
0030f540 6cceed6c node+0x6cd47d
0030f59c 6ccef379 node+0x60ed6c
0030f5c0 6cceea8a node+0x60f379
0030f5c4 6d96a300 node+0x60ea8a
0030f5c8 00300000 node+0x128a300
0030f5cc 00000000 0x300000

9bfd3695d8b8447bc6c65f535d146f64_000.dmp
25b2c6a97591a2ab0e05c30623899def_000.dmp

Top 10: total counts = 1

ChildEBP RetAddr  
0a94f11c 0d8a91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0a94f148 0d8a1b3e rightsmanager!AutorunItem::AutorunItem+0x34
0a95f790 0d89e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0a95f808 0d8d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0a95f9dc 7565343d rightsmanager!RM_AutorunScan+0x176
0a95f9e8 77479812 kernel32!BaseThreadInitThunk+0xe
0a95fa28 774797e5 ntdll!__RtlUserThreadStart+0x70
0a95fa40 00000000 ntdll!_RtlUserThreadStart+0x1b

a245998f739eae5f72402acdd605a1a1_000.dmp

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009ecee8 5c8cdc08 node+0x2a2f20b
009ed1e7 4d203a73 node+0xb2dc08
009ed1eb 2d6b7261 0x4d203a73
009ed1ef 65657773 0x2d6b7261
009ed1f3 30312070 0x65657773
009ed1f7 2820342e 0x30312070
009ed1fb 332e3231 0x2820342e
009ed1ff 3e2d2029 0x332e3231
009ed203 2e303120 0x3e2d2029
009ed207 31282034 0x2e303120
009ed20b 29332e32 0x31282034
009ed20f 2c424d20 0x29332e32
009ed213 342e3520 0x2c424d20
009ed217 30202f20 0x342e3520
009ed21b 6d20302e 0x30202f20
009ed21f 28202073 0x6d20302e
009ed223 72657661 0x28202073
009ed227 20656761 0x72657661
009ed22b 3d20756d 0x20656761
009ed22f 392e3020 0x3d20756d
009ed233 202c3639 0x392e3020
009ed237 72727563 0x202c3639
009ed23b 20746e65 FWPUCLNT!`string'+0x13
009ed23f 3d20756d 0x20746e65
009ed243 372e3020 0x3d20756d
009ed247 20293231 0x372e3020
009ed24b 20776f6c 0x20293231
009ed24f 6f6d656d 0x20776f6c
009ed253 6e207972 0x6f6d656d
009ed257 6669746f 0x6e207972
009ed25b 74616369 0x6669746f
009ed62f 00000000 windows_storage!SHILAliasTranslate+0xe9

5ff3bc064859c04870c68fcbbc0d7cd9_000.dmp

Top 12: total counts = 1

054ff954 0f33aeed rightsmanager!RM_AutorunScan+0x176
054ffa50 75538494 ffi_bindings!ffi_call_win32+0x11
054ffa64 77a241c8 kernel32!BaseThreadInitThunk+0x24
054ffaac 77a24198 ntdll!__RtlUserThreadStart+0x2f
054ffabc 00000000 ntdll!_RtlUserThreadStart+0x1b

ba13b96c740448f4692417f45e696192_000.dmp

Top 13: total counts = 1

ChildEBP RetAddr  
05e5f8dc 09f67f09 rightsmanager!AutorunItem::~AutorunItem+0x3
05e5f8ec 09f68f18 rightsmanager!std::vector >::_Tidy+0x19
05e5f8fc 09f5e96c rightsmanager!std::_Destroy_range,std::allocator >,std::vector > > > >+0x18
05e5f978 09f97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x7c
05e5fb4c 7722343d rightsmanager!RM_AutorunScan+0x176
05e5fb58 77c59802 kernel32!BaseThreadInitThunk+0xe
05e5fb98 77c597d5 ntdll!__RtlUserThreadStart+0x70
05e5fbb0 00000000 ntdll!_RtlUserThreadStart+0x1b

93f5cfcc0ab44e50542f629dbad0f8ac_000.dmp

Top 14: total counts = 1

05fefc20 6feee6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
05fefc28 6feee8c1 node+0x2f3e6e0
05fefc2c 09160eac node+0x2f3e8c1
05fefc30 6feee7dd 0x9160eac
05fefc34 0014e75c node+0x2f3e7dd
05fefc38 00000000 0x14e75c

d4ee951ba3e2e3aa159909467792db65_000.dmp

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ecc58 5a9edc08 node+0x2a2f20b
003ecf57 3a736d20 node+0xb2dc08
003ecf5b 72614d20 0x3a736d20
003ecf5f 77732d6b 0x72614d20
003ecf63 20706565 0x77732d6b
003ecf67 342e3031 0x20706565
003ecf6b 32312820 0x342e3031
003ecf6f 2029332e 0x32312820
003ecf73 31203e2d 0x2029332e
003ecf77 20342e30 0x31203e2d
003ecf7b 2e323128 0x20342e30
003ecf7f 4d202933 0x2e323128
003ecf83 34202c42 0x4d202933
003ecf87 362e3236 0x34202c42
003ecf8b 30202f20 0x362e3236
003ecf8f 6d20302e 0x30202f20
003ecf93 28202073 0x6d20302e
003ecf97 72657661 0x28202073
003ecf9b 20656761 0x72657661
003ecf9f 3d20756d 0x20656761
003ecfa3 392e3020 0x3d20756d
003ecfa7 202c3338 0x392e3020
003ecfab 72727563 0x202c3338
003ecfaf 20746e65 0x72727563
003ecfb3 3d20756d 0x20746e65
003ecfb7 302e3020 0x3d20756d
003ecfbb 20293030 0x302e3020
003ecfbf 20776f6c 0x20293030
003ecfc3 6f6d656d 0x20776f6c
003ecfc7 6e207972 0x6f6d656d
003ecfcb 6669746f 0x6e207972
003ecfcf 74616369 0x6669746f
003ecfd3 206e6f69 0x74616369
003ecfd7 69204347 0x206e6f69
003ecfdb 6c6f206e 0x69204347
003ecfdf 70732064 0x6c6f206e
003ecfe3 20656361 0x70732064
003ecfe7 75716572 0x20656361
003ecfef 325b0a64 comdlg32!PrintInitPrintDlg+0x14d
003ecfff 3132205d 0x325b0a64
003ed003 34323136 0x3132205d
003ed007 20313837 0x34323136
003ed00b 203a736d 0x20313837
003ed00f 6b72614d 0x203a736d
003ed013 6577732d 0x6b72614d
003ed017 31207065 0x6577732d
003ed01b 20392e30 0x31207065
003ed01f 2e323128 0x20392e30
003ed023 2d202933 0x2e323128
003ed027 3031203e 0x2d202933
003ed02b 2820342e 0x3031203e
003ed02f 332e3231 0x2820342e
003ed033 424d2029 0x332e3231
003ed037 2e38202c 0x424d2029
003ed03b 202f2035 0x2e38202c
003ed03f 20302e30 0x202f2035
003ed043 2020736d 0x20302e30
003ed047 65766128 0x2020736d
003ed04b 65676172 0x65766128
003ed04f 20756d20 0x65676172
003ed053 2e30203d 0x20756d20
003ed057 2c363939 0x2e30203d
003ed05b 72756320 0x2c363939
003ed05f 746e6572 0x72756320
003ed063 20756d20 0x746e6572
003ed067 2e31203d 0x20756d20
003ed06b 29303030 0x2e31203d
003ed06f 776f6c20 0x29303030
003ed073 6d656d20 0x776f6c20
003ed077 2079726f 0x6d656d20
003ed07b 69746f6e 0x2079726f
003ed07f 61636966 0x69746f6e
003ed083 6e6f6974 0x61636966
003ed087 20434720 0x6e6f6974
003ed08b 6f206e69 0x20434720
003ed08f 7320646c 0x6f206e69
003ed093 65636170 0x7320646c
003ed097 71657220 0x65636170
003ed09b 74736575 0x71657220
003ed09f 5b0a6465 0x74736575
003ed0a3 38343432 node+0x11e6465
003ed0a7 3832303a 0x38343432
003ed0ab 42464138 0x3832303a
003ed0af 32205d38 0x42464138
003ed0b3 32313631 0x32205d38
003ed0b7 30393734 0x32313631
003ed0bb 3a736d20 0x30393734
003ed0bf 72614d20 0x3a736d20
003ed0c3 77732d6b 0x72614d20
003ed0c7 20706565 0x77732d6b
003ed0cb 342e3031 0x20706565
003ed0cf 32312820 0x342e3031
003ed0d3 2029332e 0x32312820
003ed0d7 31203e2d 0x2029332e
003ed0db 20342e30 0x31203e2d
003ed0df 2e323128 0x20342e30
003ed0e3 4d202933 0x2e323128
003ed0e7 38202c42 0x4d202933
003ed0eb 2f20382e 0x38202c42
003ed0ef 302e3020 0x2f20382e
003ed0f3 20736d20 0x302e3020
003ed0f7 76612820 0x20736d20
003ed0fb 67617265 shell32!__dyn_tls_init_callback  (shell32+0x712820)
003ed0ff 756d2065 0x67617265
003ed103 30203d20 imagehlp!DBI1::initFileInfo+0x9
003ed10f 6e657272 0x30203d20
003ed113 756d2074 0x6e657272
003ed117 30203d20 imagehlp!DBI1::initFileInfo+0x18
003ed123 656d2077 0x30203d20
003ed127 79726f6d 0x656d2077
003ed12b 746f6e20 0x79726f6d
003ed12f 63696669 0x746f6e20
003ed133 6f697461 0x63696669
003ed137 4347206e 0x6f697461
003ed13b 206e6920 0x4347206e
003ed13f 20646c6f 0x206e6920
003ed143 63617073 0x20646c6f
003ed147 65722065 0x63617073
003ed14b 73657571 0x65722065
003ed14f 0a646574 0x73657571
003ed153 00000000 0xa646574

226480f73531046edffd1d7d9b1ad399_000.dmp

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
009ecae8 673fdc08 node+0x2a2f20b
009ece5f 74616369 node+0xb2dc08
009ece6f 70732064 msctf!UIComposition::~UIComposition+0x77
009ece73 20656361 0x70732064
009ece77 75716572 0x20656361
009ece7b 65747365 KERNELBASE!`string'+0x16
009ece7f 315b0a64 0x65747365
009ece83 38383134 0x315b0a64
009ece87 3031303a 0x38383134
009ece8b 35414443 0x3031303a
009ece8f 32205d38 0x35414443
009ece93 32363630 0x32205d38
009ece97 20383338 0x32363630
009ece9b 203a736d 0x20383338
009ece9f 6b72614d 0x203a736d
009ecea3 6577732d 0x6b72614d
009ecea7 31207065 0x6577732d
009eceab 20372e30 0x31207065
009eceaf 2e323128 0x20372e30
009eceb3 2d202933 0x2e323128
009eceb7 3031203e 0x2d202933
009ecebb 2820322e 0x3031203e
009ecebf 332e3231 0x2820322e
009ecec3 424d2029 0x332e3231
009ecec7 2e39202c 0x424d2029
009ececb 202f2033 0x2e39202c
009ececf 20302e30 0x202f2033
009eced3 2020736d 0x20302e30
009eced7 65766128 0x2020736d
009ecedb 65676172 0x65766128
009ecedf 20756d20 0x65676172
009ecee3 2e30203d 0x20756d20
009ecee7 2c393939 0x2e30203d
009eceeb 72756320 0x2c393939
009eceef 746e6572 0x72756320
009ecef3 20756d20 msctf!api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA  (msctf+0x106572)
009ecef7 2e31203d 0x20756d20
009ecefb 29303030 0x2e31203d
009eceff 776f6c20 0x29303030
009ecf2b 74736575 ntdll!RtlpWakeByAddress+0xe2
009ecf63 2029332e oleaut32!VarUdateFromDate+0x1e5
009ecf77 37202c42 0x2029332e
009ecf7b 2f20302e 0x37202c42
009ecf7f 302e3020 0x2f20302e
009ecf83 20736d20 0x302e3020
009ecf87 76612820 0x20736d20
009ed167 00000000 shell32!TaskCondEval_IsPresentationSettingsEnabled+0x38b0

5ba9042b9aba58bd1969c8ace2579ba6_000.dmp

Top 17: total counts = 1

0609fc1c 6dbce6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0609fc94 77e49802 node+0x2f3e6e0
0609fcd4 77e497d5 ntdll!__RtlUserThreadStart+0x70
0609fcec 00000000 ntdll!_RtlUserThreadStart+0x1b

f4224a2ab740f7bc45f32b8965b15a52_000.dmp

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0d21fa18 00000000 node+0x12b8869

476d752d857a889c312378fc63ddcc1f_000.dmp

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0044eb88 6e3055ea 0x38687e40
0044eba4 6e2d8046 node+0x10a55ea
0044ebcc 6e2bab9b node+0x1078046
0044ebf8 6dea44bc node+0x105ab9b
0044ec80 6dea4913 node+0xc444bc
0044ec8c 027a7b10 node+0xc44913
0044ec90 00000000 0x27a7b10

202ba300654c79db718eed9e7b0987d1_000.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
0656f344 045ee780 KERNELBASE!RaiseException+0x58
0656f388 045c94c0 rightsmanager!_CxxThrowException+0x66
0656f3a4 0656f3bc rightsmanager!std::_Xbad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
0656f3a8 0459c603 0x656f3bc
0656f3bc 0459bd34 rightsmanager!std::vector >::vector >+0x43
0656f504 0458653b rightsmanager!ServiceController::InternalEnumerateServices+0xf4
0656f860 0457e958 rightsmanager!CAutorunsCtrl::EnumServices+0x8b
0656f8d8 045b7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x68
0656faac 7532343d rightsmanager!RM_AutorunScan+0x176
0656fab8 77bb9812 kernel32!BaseThreadInitThunk+0xe
0656faf8 77bb97e5 ntdll!__RtlUserThreadStart+0x70
0656fb10 00000000 ntdll!_RtlUserThreadStart+0x1b

631ebf1ef98f6e3d86ce00160aa8ed07_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
03eaf840 6c21edc6 node+0x12ae60a
03eaf890 6b637cc2 node+0x12aedc6
03eaf948 6c35629c node+0x6c7cc2
03eaf988 6d22f0b4 node+0x13e629c
03eafa18 6d22e9f1 node+0x22bf0b4
03eafa60 76f0e0a3 node+0x22be9f1
03eafa74 03eafaec ntdll!RtlFreeHeap+0x105
00000000 00000000 0x3eafaec

888b5b5f05e78451890b0fe519ce2fee_000.dmp

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dece20 6a82dc08 node+0x2a2f20b
00ded16f 7563202c node+0xb2dc08
00ded47b 00000000 shell32!CAccessible::get_accKeyboardShortcut+0xdc

2ad339e8173e98aa7e3ef777296b9c90_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
04fdee28 519be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
04fdee68 519c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04fdf0b8 519c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04fef700 519be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04fef778 519f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04fef94c 7531fcc9 rightsmanager!RM_AutorunScan+0x176
04fef95c 770882ae kernel32!BaseThreadInitThunk+0x19
04fef9b8 7708827e ntdll!__RtlUserThreadStart+0x2f
04fef9c8 00000000 ntdll!_RtlUserThreadStart+0x1b

41bea6c9ccf0905cbb50c2e5a903e4d6_000.dmp

Top 24: total counts = 1

0046f5bc 0fd15f9e kernel32!HeapFree+0x14
0046f5d0 0fd1344c ffi_bindings!_free_base+0x1c
0046f5e0 0fd0ca70 ffi_bindings!free+0x18
0046f5ec 779795a5 ffi_bindings!__vcrt_freefls+0x17
0046f60c 76754008 ntdll!RtlFlsFree+0xa0
0046f618 0fd0dc77 KERNELBASE!FlsFree+0xe
0046f628 0fd0cb8e ffi_bindings!__vcrt_FlsFree+0x30
0046f630 0fd0c609 ffi_bindings!__vcrt_uninitialize_ptd+0x10
0046f634 0fd0b781 ffi_bindings!__vcrt_uninitialize_critical+0x5
0046f638 0fd0b75a ffi_bindings!dllmain_crt_process_detach+0xa7
0046f670 0fd0b5ce ffi_bindings!dllmain_crt_process_detach+0x80
0046f67c 0fd0b83e ffi_bindings!dllmain_crt_dispatch+0x4e
0046f6bc 0fd0b8dc ffi_bindings!dllmain_dispatch+0xb4
0046f6d0 77959280 ffi_bindings!_DllMainCRTStartup+0x1c
0046f6f0 77978f88 ntdll!LdrpCallInitRoutine+0x14
0046f794 77978e2a ntdll!LdrShutdownProcess+0x1aa
0046f7a8 752a7a3c ntdll!RtlExitUserProcess+0x74
0046f854 752a343d kernel32!ExitProcessStub+0x12
0046f860 77959812 kernel32!BaseThreadInitThunk+0xe
0046f8a0 779597e5 ntdll!__RtlUserThreadStart+0x70
0046f8b8 00000000 ntdll!_RtlUserThreadStart+0x1b

6201b8f8711e5fb1a94b817dd2d5dcb5_000.dmp

Top 25: total counts = 1

065cfe84 6204e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
065cfe8c 6204e8c1 node+0x2f3e6e0
065cfe90 0a7a7cfc node+0x2f3e8c1
065cfe94 6204e7dd 0xa7a7cfc
065cfe98 003fe38c node+0x2f3e7dd
065cfe9c 00000000 0x3fe38c

f21c3ef54e5e3bb7cb2bc143de1b79fd_000.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
004fe064 004fe144 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
004fe078 004fe088 0x4fe144
004fe07c 004fe108 0x4fe088
004fe088 00000000 0x4fe108

fd5772908e608053b457b2db921c389b_000.dmp

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f3c768 6387dc08 node+0x2a2f20b
00f3ca67 203a736d node+0xb2dc08
00f3ca6b 6b72614d 0x203a736d
00f3ca6f 6577732d 0x6b72614d
00f3ca73 31207065 node+0x2a2732d
00f3ca77 20352e30 0x31207065
00f3ca7b 2e323128 0x20352e30
00f3ca7f 2d202935 0x2e323128
00f3ca83 3031203e 0x2d202935
00f3ca87 2820342e 0x3031203e
00f3ca8b 382e3231 0x2820342e
00f3ca8f 424d2029 0x382e3231
00f3ca93 2e37202c 0x424d2029
00f3ca97 202f2030 0x2e37202c
00f3ca9b 20302e30 0x202f2030
00f3ca9f 2020736d 0x20302e30
00f3caa3 65766128 0x2020736d
00f3caa7 65676172 node+0x2a16128
00f3cba7 75716572 node+0x2926172
20656361 50385077 ucrtbase!_isprint_l+0x92
2065636d 384a4f4a 0x50385077
20656371 73376e45 0x384a4f4a
20656375 532b356e 0x73376e45
20656379 74434557 CoreUIComponents!Cn::Engine::Event::PoolCreateAutomatic+0x1e
532b356e 558d51ec windows_storage!CLibraryFolder::_GetLocationCount+0x46
532b3572 e8c932fc 0x558d51ec
532b3576 ffffff1b 0xe8c932fc
532b357a 8b084d8b 0xffffff1b
532b357e 0189fc45 0x8b084d8b
532b3582 0004c2c9 0x189fc45
532b3586 51ec8b55 0x4c2c9
532b358a 3a8a24a1 0x51ec8b55
532b358e 0fc08553 0x3a8a24a1
532b3592 00000000 0xfc08553

a37db0f9b2c2529044830987f19ad382_000.dmp

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff0f4 710d8cc5 node+0x12ae60a
00aff194 6ed93961 node+0x2a18cc5
00aff208 6f9889e6 node+0x6d3961
00aff2d4 6f98875e node+0x12c89e6
00aff330 6f960ec3 node+0x12c875e
00aff36c 6f960acb node+0x12a0ec3
00aff3ac 6f9723d2 node+0x12a0acb
00aff3f4 6f9722e2 node+0x12b23d2
00aff438 6ed8bd42 node+0x12b22e2
00aff460 6ed8d47d node+0x6cbd42
00aff4a0 6ecced6c node+0x6cd47d
00aff4fc 6eccf379 node+0x60ed6c
00aff520 6eccea8a node+0x60f379
00aff5b8 77345e6e node+0x60ea8a
00aff5c4 00000000 ntdll!RtlAllocateHeap+0x3e

3ecd69bdd654911bff7494512e1ebdd3_000.dmp

Top 29: total counts = 1

0032cfeb 76612820 0x20736d20
0032cfef 67617265 api_ms_win_downlevel_ole32_l1_1_0+0x2820
0032cff3 756d2065 0x67617265
0032cff7 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x422065)
0032cffb 3939392e 0x30203d20
0032cfff 7563202c 0x3939392e
0032d02b 4347206e shell32!Stub_CreateStubWindow+0x58
0032d03b 65722065 0x4347206e
0032d03f 73657571 0x65722065
0032d04f 42424635 IPHLPAPI!AddGatewaysAndPrefixesToAdapter+0x56
0032d06b 70656577 0x42424635
0032d06f 2e303120 node+0x4436577
0032d073 31282033 0x2e303120
0032d077 29332e32 0x31282033
0032d07b 203e2d20 0x29332e32
0032d07f 312e3031 0x203e2d20
0032d083 32312820 0x312e3031
0032d087 2029332e 0x32312820
0032d08b 202c424d 0x2029332e
0032d08f 392e3031 0x202c424d
0032d093 30202f20 0x392e3031
0032d097 6d20302e 0x30202f20
0032d09b 28202073 node+0xfe302e
0032d09f 72657661 0x28202073
0032d0a3 20656761 0x72657661
0032d0a7 3d20756d 0x20656761
0032d0ab 302e3120 0x3d20756d
0032d0af 202c3030 0x302e3120
0032d0b3 72727563 0x202c3030
0032d0b7 20746e65 0x72727563
0032d0bb 3d20756d 0x20746e65
0032d0bf 302e3120 0x3d20756d
0032d0c3 20293030 0x302e3120
0032d0c7 20776f6c 0x20293030
0032d0cb 6f6d656d 0x20776f6c
0032d0cf 6e207972 node+0x34b656d
0032d0d3 6669746f node+0x1fe7972
0032d0d7 74616369 0x6669746f
0032d0db 206e6f69 0x74616369
0032d0df 69204347 0x206e6f69
0032d0e3 6c6f206e 0x69204347
0032d0e7 70732064 node+0x4d206e
0032d0eb 20656361 node+0x4512064
0032d0ef 75716572 0x20656361
0032d0f3 65747365 shell32!__dyn_tls_init_callback  (shell32+0x466572)
0032d0f7 325b0a64 0x65747365
0032d0fb 3a363734 0x325b0a64
0032d0ff 46353230 0x3a363734
0032d103 38414242 0x46353230
0032d107 3433205d 0x38414242
0032d10b 32393238 0x3433205d
0032d10f 20383833 0x32393238
0032d113 203a736d 0x20383833
0032d117 6b72614d 0x203a736d
0032d11b 6577732d 0x6b72614d
0032d11f 31207065 0x6577732d
0032d123 20312e30 0x31207065
0032d127 2e323128 0x20312e30
0032d12b 2d202933 0x2e323128
0032d12f 3031203e 0x2d202933
0032d133 2820312e 0x3031203e
0032d137 332e3231 0x2820312e
0032d13b 424d2029 0x332e3231
0032d13f 3231202c 0x424d2029
0032d143 2f20342e 0x3231202c
0032d147 302e3020 0x2f20342e
0032d14b 20736d20 0x302e3020
0032d14f 76612820 0x20736d20
0032d153 67617265 api_ms_win_downlevel_ole32_l1_1_0+0x2820
0032d157 756d2065 0x67617265
0032d15b 31203d20 shell32!__dyn_tls_init_callback  (shell32+0x422065)
0032d15f 3030302e 0x31203d20
0032d163 7563202c 0x3030302e
0032d18f 4347206e shell32!Stub_CreateStubWindow+0x58
0032d19f 65722065 0x4347206e
0032d1a3 73657571 0x65722065
0032d1b3 00000000 IPHLPAPI!AddGatewaysAndPrefixesToAdapter+0x56

f7af15a60f14a04a5e6230e372ad718f_000.dmp

Top 30: total counts = 1

ChildEBP RetAddr  
0d0ef9f4 754c1775 ntdll!NtWaitForMultipleObjects+0x15
0d0efa90 769c19fc KERNELBASE!WaitForMultipleObjectsEx+0x100
0d0efad8 75a708b2 kernel32!WaitForMultipleObjectsExImplementation+0xe0
0d0efb2c 75a70bb1 user32!RealMsgWaitForMultipleObjectsEx+0x14d
0d0efb48 6d3f7927 user32!MsgWaitForMultipleObjects+0x1f
0d0efb94 6d3f7846 GdiPlus!BackgroundThreadProc+0x59
0d0efbac 769c343d GdiPlus!DllRefCountSafeThreadThunk+0x10
0d0efbb8 77a69802 kernel32!BaseThreadInitThunk+0xe
0d0efbf8 77a697d5 ntdll!__RtlUserThreadStart+0x70
0d0efc10 00000000 ntdll!_RtlUserThreadStart+0x1b

f9086097aca8897eeabb7406df04e895_000.dmp

Top 31: total counts = 1

003dcfd7 756d2065 0x67617265
003dcfdb 30203d20 usp10+0x2065
003dcfdf 3939392e 0x30203d20
003dcfe3 7563202c 0x3939392e
003dcfe7 6e657272 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x40202c)
003dcfeb 756d2074 node+0x1987272
003dcfef 30203d20 usp10+0x2074
003dcff3 3230302e 0x30203d20
003dcff7 6f6c2029 0x3230302e
003dcffb 656d2077 node+0x29f2029
003dcfff 79726f6d 0x656d2077
003dd003 746f6e20 0x79726f6d
003dd007 63696669 0x746f6e20
003dd00b 6f697461 0x63696669
003dd00f 4347206e node+0x29c7461
003dd013 206e6920 0x4347206e
003dd017 20646c6f 0x206e6920
003dd01b 63617073 0x20646c6f
003dd01f 65722065 0x63617073
003dd023 73657571 0x65722065
003dd027 0a646574 0x73657571
003dd02b 00000000 0xa646574

741876e0c95d38aa9b08d5c1b80a2c2f_000.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00bbf234 6d8c8cc5 node+0x12ae60a
00bbf2cc 6b583961 node+0x2a18cc5
00bbf340 6c1789e6 node+0x6d3961
00bbf40c 6c17875e node+0x12c89e6
00bbf468 6c150ec3 node+0x12c875e
00bbf4a4 6c150acb node+0x12a0ec3
00bbf4e4 6c1623d2 node+0x12a0acb
00bbf52c 6c1622e2 node+0x12b23d2
00bbf570 6b57bd42 node+0x12b22e2
00bbf598 6b57d47d node+0x6cbd42
00bbf5d8 6b4bed6c node+0x6cd47d
00bbf634 6b4bf379 node+0x60ed6c
00bbf658 6b4bea8a node+0x60f379
00bbf6f0 77c65e0e node+0x60ea8a
00bbf7c0 743d6d6f ntdll!RtlAllocateHeap+0x3e
00bbf8e0 76d6fcc9 urlmon!CINetHttpEdge::ComputeSameSiteCookiePolicy+0x1ef
00bbf8f0 77c87c5e kernel32!BaseThreadInitThunk+0x19
00bbf94c 77c87c2e ntdll!__RtlUserThreadStart+0x2f
00bbf95c 00000000 ntdll!_RtlUserThreadStart+0x1b

bbed8e56259b96f521cf2f4fe00afbbc_000.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003af684 6f5d8d6c node+0x12ae60a
003af6ec 6d293961 node+0x2a18d6c
003af760 6de889e6 node+0x6d3961
003af82c 6de8875e node+0x12c89e6
003af888 6de60ec3 node+0x12c875e
003af8c4 6de60acb node+0x12a0ec3
003af904 6de723d2 node+0x12a0acb
003af94c 6de722e2 node+0x12b23d2
003af990 6d28bd42 node+0x12b22e2
003af9b8 6d28d47d node+0x6cbd42
003af9f8 6d1ced6c node+0x6cd47d
003afa54 6d1cf379 node+0x60ed6c
003afa78 6d1cea8a node+0x60f379
00643700 00000000 node+0x60ea8a

616159824637a1bc88dbe62d5c624680_000.dmp

Top 34: total counts = 1

003cd227 76612820 0x20736d20
003cd22b 67617265 iertutil!__dyn_tls_init_callback  (iertutil+0x1a2820)
003cd22f 756d2065 0x67617265
003cd233 30203d20 rpcrt4!Microsoft_Windows_Networking_ProviderId+0x10ed
003cd237 3839392e 0x30203d20
003cd23b 7563202c 0x3839392e
003cd23f 6e657272 rpcrt4!NdrComplexStructBufferSize+0x2c9
003cd243 756d2074 node+0x2737272
003cd247 30203d20 rpcrt4!Microsoft_Windows_Networking_ProviderId+0x10fc
003cd24b 3230302e 0x30203d20
003cd24f 6f6c2029 0x3230302e
003cd253 656d2077 node+0x37a2029
003cd257 79726f6d 0x656d2077
003cd25b 746f6e20 0x79726f6d
003cd25f 63696669 0x746f6e20
003cd263 6f697461 0x63696669
003cd267 4347206e node+0x3777461
003cd26b 206e6920 0x4347206e
003cd26f 20646c6f 0x206e6920
003cd273 63617073 0x20646c6f
003cd277 65722065 0x63617073
003cd27b 73657571 0x65722065
003cd27f 0a646574 0x73657571
003cd283 00000000 0xa646574

5300a14b44fd80e957505e21e805563b_000.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0038f694 6cea8cc5 node+0x12ae60a
0038f72c 6ab63961 node+0x2a18cc5
0038f7a0 6b7589e6 node+0x6d3961
0038f86c 6b75875e node+0x12c89e6
0038f8c8 6b730ec3 node+0x12c875e
0038f904 6b730acb node+0x12a0ec3
0038f944 6b7423d2 node+0x12a0acb
0038f98c 6b7422e2 node+0x12b23d2
0038f9d0 6ab5bd42 node+0x12b22e2
0038f9f8 6ab5d47d node+0x6cbd42
0038fa38 6aa9ed6c node+0x6cd47d
0038fa94 6aa9f379 node+0x60ed6c
0038fab8 6aa9ea8a node+0x60f379
0038fabc 6b71a300 node+0x60ea8a
0038fac0 00380000 node+0x128a300
0038fac4 00000000 0x380000

35dc9fda1146304b62a6d088ede57e68_000.dmp

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fcdd8 67d6dc08 node+0x2a2f20b
008fd0d7 6d203535 node+0xb2dc08
008fd0db 4d203a73 0x6d203535
008fd0df 2d6b7261 0x4d203a73
008fd0e3 65657773 0x2d6b7261
008fd0e7 30312070 0x65657773
008fd0eb 2820332e 0x30312070
008fd0ef 302e3231 0x2820332e
008fd0f3 3e2d2029 0x302e3231
008fd0f7 2e303120 0x3e2d2029
008fd0fb 31282033 0x2e303120
008fd0ff 29302e32 0x31282033
008fd103 2c424d20 0x29302e32
008fd107 362e3920 0x2c424d20
008fd10b 30202f20 0x362e3920
008fd10f 6d20302e 0x30202f20
008fd113 28202073 0x6d20302e
008fd117 72657661 0x28202073
008fd11b 20656761 GdiPlus!DpPath::Offset+0x2a
008fd127 202c3030 0x20656761
008fd12b 72727563 0x202c3030
008fd12f 20746e65 0x72727563
008fd133 3d20756d 0x20746e65
008fd137 302e3020 0x3d20756d
008fd13b 20293430 0x302e3020
008fd13f 20776f6c 0x20293430
008fd143 6f6d656d 0x20776f6c
008fd17b 38363336 urlmon!CRegZoneContainer::Attach+0x21
008fd187 20363430 0x38363336
008fd18b 203a736d 0x20363430
008fd18f 6b72614d 0x203a736d
008fd193 6577732d node+0x44e614d
008fd197 31207065 0x6577732d
008fd19b 20382e30 0x31207065
008fd19f 2e323128 0x20382e30
008fd1a3 2d202930 0x2e323128
008fd1a7 3031203e 0x2d202930
008fd1ab 2820332e 0x3031203e
008fd1af 302e3231 0x2820332e
008fd1b3 424d2029 0x302e3231
008fd1b7 2e38202c 0x424d2029
008fd1bb 202f2036 0x2e38202c
008fd1bf 20302e30 0x202f2036
008fd1c3 2020736d 0x20302e30
008fd1c7 65766128 0x2020736d
008fd1cb 65676172 0x65766128
008fd1cf 20756d20 0x65676172
008fd1d3 2e31203d 0x20756d20
008fd1d7 2c303030 0x2e31203d
008fd1db 72756320 0x2c303030
008fd1df 746e6572 0x72756320
008fd1e3 20756d20 0x746e6572
008fd1e7 2e31203d 0x20756d20
008fd1eb 29303030 0x2e31203d
008fd1ef 776f6c20 0x29303030
008fd203 6e6f6974 ntdll!RtlQueryApplicationKeyOption+0xf
008fd21f 5b0a6465 0x6e6f6974
008fd223 34323935 0x5b0a6465
008fd227 4132303a 0x34323935
008fd22b 36333637 0x4132303a
008fd22f 32205d38 0x36333637
008fd233 36353331 0x32205d38
008fd237 35353032 0x36353331
008fd23b 3a736d20 0x35353032
008fd23f 72614d20 0x3a736d20
008fd25f 2e323128 GdiPlus!GpDevice::GpDevice+0xbf
008fd267 39202c42 0x2e323128
008fd26b 2f20302e 0x39202c42
008fd26f 302e3020 0x2f20302e
008fd273 20736d20 0x302e3020
008fd277 76612820 0x20736d20
008fd2c3 63617073 KERNELBASE!GetSortNode+0x330
008fd2cb 73657571 0x63617073
008fd2cf 0a646574 0x73657571
008fd2d3 00000000 0xa646574

68f41dc3d5f2f3b19e70f7d49b9b20d7_000.dmp

Top 37: total counts = 1

ChildEBP RetAddr  
057ef448 0750e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
057ef488 0751738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
057ef6d8 075112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
057ffd20 0750e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
057ffd98 07547f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
057fff6c 75f38494 rightsmanager!RM_AutorunScan+0x176
057fff80 77b840e8 kernel32!BaseThreadInitThunk+0x24
057fffc8 77b840b8 ntdll!__RtlUserThreadStart+0x2f
057fffd8 00000000 ntdll!_RtlUserThreadStart+0x1b

380c9066c10c5386fc0bf0c1a89c2658_000.dmp