Analyzed 62 dump

Top 1: total counts = 9

0582fd84 0f1eaeed rightsmanager!RM_AutorunScan+0x176
0582fe80 7738336a ffi_bindings!ffi_call_win32+0x11
0582fe8c 77e49902 kernel32!BaseThreadInitThunk+0xe
0582fecc 77e498d5 ntdll!__RtlUserThreadStart+0x70
0582fee4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 6

05ebfd34 5572aeed rightsmanager!RM_AutorunScan+0x176
05ebfe30 760afcc9 ffi_bindings!ffi_call_win32+0x11
05ebfe40 77d37c6e kernel32!BaseThreadInitThunk+0x19
05ebfe9c 77d37c3e ntdll!__RtlUserThreadStart+0x2f
05ebfeac 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 5

063ffdc4 79f1aeed rightsmanager!RM_AutorunScan+0x176
063ffec0 765c7ba9 ffi_bindings!ffi_call_win32+0x11
063ffed0 76fcc3ab kernel32!BaseThreadInitThunk+0x19
063fff28 76fcc32f ntdll!__RtlUserThreadStart+0x2b
063fff38 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 4

ChildEBP RetAddr  
07acf160 0ff0e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
07acf1a0 0ff1738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
07acf3f0 0ff112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
07adfa38 0ff0e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
07adfab0 0ff47f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
07adfc84 7664ef6c rightsmanager!RM_AutorunScan+0x176
07adfc90 77c73618 kernel32!BaseThreadInitThunk+0xe
07adfcd0 77c735eb ntdll!__RtlUserThreadStart+0x70
07adfce8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 4

ChildEBP RetAddr  
05eeefa0 09b8e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05eeefe0 09b9738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05eef230 09b912a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05eff878 09b8e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05eff8f0 09bc7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05effac4 76146839 rightsmanager!RM_AutorunScan+0x176
05effad4 7751906f kernel32!BaseThreadInitThunk+0x19
05effb2c 7751903d ntdll!__RtlUserThreadStart+0x2b
05effb3c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 3

ChildEBP RetAddr  
0586f3f8 73f4e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0586f438 73f5738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0586f688 73f512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0587fcd0 73f4e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0587fd48 73f87f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0587ff1c 7556fcc9 rightsmanager!RM_AutorunScan+0x176
0587ff2c 772782ae kernel32!BaseThreadInitThunk+0x19
0587ff88 7727827e ntdll!__RtlUserThreadStart+0x2f
0587ff98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 3

ChildEBP RetAddr  
0559f070 0f9fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0559f0b0 0fa0738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0559f300 0fa012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
055af948 0f9fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
055af9c0 0fa37f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
055afb94 743c343d rightsmanager!RM_AutorunScan+0x176
055afba0 770f9802 kernel32!BaseThreadInitThunk+0xe
055afbe0 770f97d5 ntdll!__RtlUserThreadStart+0x70
055afbf8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 3

ChildEBP RetAddr  
052af118 7beee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
052af158 7bef738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
052af3a8 7bef12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
052bf9f0 7beee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
052bfa68 7bf27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
052bfc3c 75da00f9 rightsmanager!RM_AutorunScan+0x176
052bfc4c 76fd7bbe kernel32!BaseThreadInitThunk+0x19
052bfca8 76fd7b8e ntdll!__RtlUserThreadStart+0x2f
052bfcb8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0574fb28 69cbe8da node+0xc6bd50
0574fb80 6b1993e5 node+0xcee8da
0574fbcc 7541343d node+0x21c93e5
0574fbd8 77a49802 kernel32!BaseThreadInitThunk+0xe
0574fc18 77a497d5 ntdll!__RtlUserThreadStart+0x70
0574fc30 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 1

0531fb08 6d7ae6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
0531fb10 6d7ae8c1 node+0x2f3e6e0
0531fb14 092e4dfc node+0x2f3e8c1
0531fb18 6d7ae7dd 0x92e4dfc
0531fb1c 0045e504 node+0x2f3e7dd
0531fb20 00000000 0x45e504

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00d3f684 645d8d6c node+0x12ae60a
00d3f6ec 62293961 node+0x2a18d6c
00d3f760 62e889e6 node+0x6d3961
00d3f82c 62e8875e node+0x12c89e6
00d3f888 62e60ec3 node+0x12c875e
00d3f8c4 62e60acb node+0x12a0ec3
00d3f904 62e723d2 node+0x12a0acb
00d3f94c 62e722e2 node+0x12b23d2
00d3f990 6228bd42 node+0x12b22e2
00d3f9b8 6228d47d node+0x6cbd42
00d3f9f8 621ced6c node+0x6cd47d
00d3fa54 621cf379 node+0x60ed6c
00d3fa78 621cea8a node+0x60f379
00d3fb10 774560ae node+0x60ea8a
00d3fbc4 77453ee6 ntdll!RtlAllocateHeap+0x3e
00d3fbdc 74756100 ntdll!RtlFreeHeap+0x46
00d3fbec 00000000 0x74756100

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0035ccd8 6dd7dc08 node+0x2a2f20b
0035cfd7 6d203330 node+0xb2dc08
0035cfdb 4d203a73 UIAutomationCore!__dyn_tls_init_callback  (UIAutomationCore+0x83330)
0035cfdf 2d6b7261 0x4d203a73
0035cfe3 65657773 0x2d6b7261
0035cfe7 30312070 0x65657773
0035cfeb 2820342e 0x30312070
0035cfef 332e3231 0x2820342e
0035cff3 3e2d2029 0x332e3231
0035cff7 2e303120 0x3e2d2029
0035cffb 31282034 0x2e303120
0035cfff 29332e32 0x31282034
0035d003 2c424d20 wpdshext!__dyn_tls_init_callback  (wpdshext+0x192e32)
0035d007 2e333120 0x2c424d20
0035d00b 202f2036 0x2e333120
0035d00f 20302e30 0x202f2036
0035d013 2020736d 0x20302e30
0035d017 65766128 0x2020736d
0035d01b 65676172 0x65766128
0035d01f 20756d20 0x65676172
0035d023 2e30203d 0x20756d20
0035d027 2c393939 0x2e30203d
0035d02b 72756320 0x2c393939
0035d02f 746e6572 0x72756320
0035d033 20756d20 0x746e6572
0035d037 2e30203d 0x20756d20
0035d03b 29323030 0x2e30203d
0035d03f 776f6c20 wpdshext!__dyn_tls_init_callback  (wpdshext+0x183030)
0035d043 6d656d20 ole32!NdrProxyForwardingFunction49+0x18
0035d047 2079726f node+0x406d20
0035d04b 69746f6e 0x2079726f
0035d04f 61636966 0x69746f6e
0035d053 6e6f6974 0x61636966
0035d057 20434720 node+0x14a6974
0035d05b 6f206e69 0x20434720
0035d05f 7320646c node+0x1fb6e69
0035d073 36393032 msi!CResolveSource::InitializeProduct+0x13a
0035d083 37373930 0x36393032
0035d087 20313930 0x37373930
0035d08b 203a736d 0x20313930
0035d08f 6b72614d 0x203a736d
0035d093 6577732d 0x6b72614d
0035d097 31207065 0x6577732d
0035d09b 20392e30 0x31207065
0035d09f 2e323128 0x20392e30
0035d0a3 2d202933 0x2e323128
0035d0a7 3031203e 0x2d202933
0035d0ab 2820342e 0x3031203e
0035d0af 332e3231 0x2820342e
0035d0b3 424d2029 0x332e3231
0035d0b7 2e39202c 0x424d2029
0035d0bb 202f2032 0x2e39202c
0035d0bf 20302e30 0x202f2032
0035d0c3 2020736d 0x20302e30
0035d0c7 65766128 0x2020736d
0035d0cb 65676172 0x65766128
0035d0cf 20756d20 0x65676172
0035d0d3 2e31203d 0x20756d20
0035d0d7 2c303030 0x2e31203d
0035d0db 72756320 0x2c303030
0035d0df 746e6572 0x72756320
0035d0e3 20756d20 0x746e6572
0035d0e7 2e31203d 0x20756d20
0035d0eb 29303030 0x2e31203d
0035d0ef 776f6c20 wpdshext!__dyn_tls_init_callback  (wpdshext+0x163030)
0035d0f3 6d656d20 ole32!NdrProxyForwardingFunction49+0x18
0035d0f7 2079726f node+0x406d20
0035d0fb 69746f6e 0x2079726f
0035d0ff 61636966 0x69746f6e
0035d103 6e6f6974 0x61636966
0035d107 20434720 node+0x14a6974
0035d10b 6f206e69 0x20434720
0035d10f 7320646c node+0x1fb6e69
0035d123 36393032 msi!CResolveSource::InitializeProduct+0x13a
0035d133 37373930 0x36393032
0035d137 20313031 0x37373930
0035d13b 203a736d 0x20313031
0035d13f 6b72614d 0x203a736d
0035d143 6577732d 0x6b72614d
0035d147 31207065 0x6577732d
0035d14b 20342e30 0x31207065
0035d14f 2e323128 0x20342e30
0035d153 2d202933 0x2e323128
0035d157 3031203e 0x2d202933
0035d15b 2820342e 0x3031203e
0035d15f 332e3231 0x2820342e
0035d163 424d2029 0x332e3231
0035d167 3031202c 0x424d2029
0035d16b 2f20342e 0x3031202c
0035d16f 302e3020 0x2f20342e
0035d173 20736d20 0x302e3020
0035d177 76612820 0x20736d20
0035d17b 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa42820)
0035d17f 756d2065 0x67617265
0035d183 30203d20 imagehlp!TypeTiIter::next+0x48
0035d187 3939392e 0x30203d20
0035d18b 7563202c 0x3939392e
0035d1bb 206e6920 advapi32!LookupSecurityDescriptorPartsA+0x155
0035d1db 00000000 0x206e6920

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030f274 6b2f8cc5 node+0x12ae60a
0030f314 68fb3961 node+0x2a18cc5
0030f388 69ba89e6 node+0x6d3961
0030f454 69ba875e node+0x12c89e6
0030f4b0 69b80ec3 node+0x12c875e
0030f4ec 69b80acb node+0x12a0ec3
0030f52c 69b923d2 node+0x12a0acb
0030f574 69b922e2 node+0x12b23d2
0030f5b8 68fabd42 node+0x12b22e2
0030f5e0 68fad47d node+0x6cbd42
0030f620 68eeed6c node+0x6cd47d
0030f67c 68eef379 node+0x60ed6c
0030f6a0 68eeea8a node+0x60f379
0030f6a4 69b6a300 node+0x60ea8a
0030f6a8 00300000 node+0x128a300
0030f6ac 00000000 0x300000

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002dc8c8 5fbadc08 node+0x2a2f20b
002dcbc7 203a736d node+0xb2dc08
002dcbcb 6b72614d 0x203a736d
002dcbcf 6577732d 0x6b72614d
002dcbd3 31207065 0x6577732d
002dcbd7 20342e30 0x31207065
002dcbdb 2e323128 0x20342e30
002dcbdf 2d202933 0x2e323128
002dcbe3 3031203e 0x2d202933
002dcbe7 2820332e 0x3031203e
002dcbeb 332e3231 0x2820332e
002dcbef 424d2029 0x332e3231
002dcbf3 3432202c 0x424d2029
002dcbf7 2f20332e 0x3432202c
002dcbfb 302e3020 0x2f20332e
002dcbff 20736d20 0x302e3020
002dcc03 76612820 0x20736d20
002dcc07 67617265 0x76612820
002dcc0b 756d2065 0x67617265
002dcc0f 30203d20 0x756d2065
002dcc13 3939392e 0x30203d20
002dcc17 7563202c 0x3939392e
002dcc33 79726f6d dnsapi!Dns_PrioritizeSingleRecordSet+0x107
002dcc3f 6f697461 0x79726f6d
002dcc43 4347206e cscui!__dyn_tls_init_callback  (cscui+0x57461)
002dcc47 206e6920 0x4347206e
002dcc4b 20646c6f 0x206e6920
002dcc4f 63617073 0x20646c6f
002dcc53 65722065 node+0x4597073
002dcc57 73657571 0x65722065
002dcc5b 0a646574 0x73657571
002dcc5f 3132325b 0xa646574
002dcc63 30303a36 0x3132325b
002dcc67 42433239 0x30303a36
002dcc6b 205d3839 0x42433239
002dcc6f 30373432 0x205d3839
002dcc73 38353530 0x30373432
002dcc77 736d2032 0x38353530
002dcc7b 614d203a 0x736d2032
002dcc7f 732d6b72 node+0x245203a
002dcc83 70656577 0x732d6b72
002dcc87 2e303120 0x70656577
002dcc8b 31282039 0x2e303120
002dcc8f 29332e32 0x31282039
002dcc93 203e2d20 0x29332e32
002dcc97 332e3031 0x203e2d20
002dcc9b 32312820 0x332e3031
002dcc9f 2029332e 0x32312820
002dcca3 202c424d 0x2029332e
002dcca7 302e3331 0x202c424d
002dccab 30202f20 0x302e3331
002dccaf 6d20302e 0x30202f20
002dccb3 28202073 0x6d20302e
002dccb7 72657661 0x28202073
002dccbb 20656761 0x72657661
002dccbf 3d20756d 0x20656761
002dccc3 302e3120 0x3d20756d
002dccc7 202c3030 0x302e3120
002dcccb 72727563 0x202c3030
002dcccf 20746e65 0x72727563
002dccd3 3d20756d 0x20746e65
002dccd7 302e3120 0x3d20756d
002dccdb 20293030 0x302e3120
002dccdf 20776f6c 0x20293030
002dcce3 6f6d656d 0x20776f6c
002dcce7 6e207972 EhStorShell!__dyn_tls_init_callback  (EhStorShell+0x2656d)
6f6d656d 00000000 mscms!CReverseInterpolater::BasicNewtonSolve+0x24d

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003bf6a4 69ad8d6c node+0x12ae60a
003bf714 67793961 node+0x2a18d6c
003bf788 683889e6 node+0x6d3961
003bf854 6838875e node+0x12c89e6
003bf8b0 68360ec3 node+0x12c875e
003bf8ec 68360acb node+0x12a0ec3
003bf92c 683723d2 node+0x12a0acb
003bf974 683722e2 node+0x12b23d2
003bf9b8 6778bd42 node+0x12b22e2
003bf9e0 6778d47d node+0x6cbd42
003bfa20 676ced6c node+0x6cd47d
003bfa7c 676cf379 node+0x60ed6c
003bfaa0 676cea8a node+0x60f379
003bfaa4 6834a300 node+0x60ea8a
003bfaa8 003b0000 node+0x128a300
003bfaac 00000000 0x3b0000

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004cf6e4 57278d6c node+0x12ae60a
004cf74c 54f33961 node+0x2a18d6c
004cf7c0 55b289e6 node+0x6d3961
004cf88c 55b2875e node+0x12c89e6
004cf8e8 55b00ec3 node+0x12c875e
004cf924 55b00acb node+0x12a0ec3
004cf964 55b123d2 node+0x12a0acb
004cf9ac 55b122e2 node+0x12b23d2
004cf9f0 54f2bd42 node+0x12b22e2
004cfa18 54f2d47d node+0x6cbd42
004cfa58 54e6ed6c node+0x6cd47d
004cfab4 54e6f379 node+0x60ed6c
004cfad8 54e6ea8a node+0x60f379
004cfadc 55aea300 node+0x60ea8a
004cfae0 004c0000 node+0x128a300
004cfae4 00000000 0x4c0000

Top 17: total counts = 1

ChildEBP RetAddr  
0429f608 6b33e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0429f6e4 6b3889d7 node+0x12ae87c
0429f6e8 000208dc node+0x12f89d7
0429f6ec 00b6ab08 0x208dc
0429f6f0 00000000 0xb6ab08

Top 18: total counts = 1

ChildEBP RetAddr  
052af108 7a8ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
052af148 7a8f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
052af398 7a8f12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
052bf9e0 7a8ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
052bfa58 7a927f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
052bfc2c 75fe5d49 rightsmanager!RM_AutorunScan+0x176
052bfc3c 7716cf0b kernel32!BaseThreadInitThunk+0x19
052bfc94 7716ce91 ntdll!__RtlUserThreadStart+0x2b
052bfca4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 19: total counts = 1

055cfea4 6e56e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
055cfeac 6e56e8c1 node+0x2f3e6e0
055cfeb0 0825c25c node+0x2f3e8c1
055cfeb4 6e56e7dd 0x825c25c
055cfeb8 0038e6a4 node+0x2f3e7dd
055cfebc 00000000 0x38e6a4

Top 20: total counts = 1

ChildEBP RetAddr  
0106f1f8 0889e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0106f238 088a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0106f488 088a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0107fad0 0889e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0107fb48 088d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0107fd1c 759e8744 rightsmanager!RM_AutorunScan+0x176
0107fd30 77b558ed kernel32!BaseThreadInitThunk+0x24
0107fd78 77b558bd ntdll!__RtlUserThreadStart+0x2f
0107fd88 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 21: total counts = 1

ChildEBP RetAddr  
09fdef48 0dcee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
09fdef88 0dcf738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
09fdf1d8 0dcf12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
09fef820 0dcee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
09fef898 0dd27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
09fefa6c 762e344d rightsmanager!RM_AutorunScan+0x176
09fefa78 773b9802 kernel32!BaseThreadInitThunk+0xe
09fefab8 773b97d5 ntdll!__RtlUserThreadStart+0x70
09fefad0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f8e3d0 050ad928 node+0xfa8397
00f8e3d4 00f8e44c 0x50ad928
00f8e3d8 050ad928 0xf8e44c
00f8e4d8 77aa5e0e 0x50ad928
00f8e4e4 00000000 ntdll!RtlAllocateHeap+0x3e

Top 23: total counts = 1

ChildEBP RetAddr  
05fbf27c 79f791a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05fbf2a8 79f751c9 rightsmanager!AutorunItem::AutorunItem+0x34
05fbf8c0 79f73ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0x1269
05fbfad0 79f6e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
05fbfb48 79fa7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
05fbfd1c 762a7ba9 rightsmanager!RM_AutorunScan+0x176
05fbfd2c 778bc36b kernel32!BaseThreadInitThunk+0x19
05fbfd84 778bc2ef ntdll!__RtlUserThreadStart+0x2b
05fbfd94 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001bc970 6acddc08 node+0x2a2f20b
001bcc6f 203a736d node+0xb2dc08
001bcc73 6b72614d 0x203a736d
001bcc77 6577732d node+0x157614d
001bcc7b 31207065 0x6577732d
001bcc7f 20342e30 0x31207065
001bcc83 2e323128 0x20342e30
001bcc87 2d202933 0x2e323128
001bcc8b 3031203e 0x2d202933
001bcc8f 2820342e 0x3031203e
001bcc93 332e3231 0x2820342e
001bcc97 424d2029 0x332e3231
001bcc9b 3531202c 0x424d2029
001bcc9f 2f20312e 0x3531202c
001bcca3 302e3020 0x2f20312e
001bcca7 20736d20 0x302e3020
001bccab 76612820 0x20736d20
001bccbb 3939392e shell32!GenRandomFileName+0x39
001bccc7 756d2074 0x3939392e
001bcf23 00000000 msvcrt!_wfindfirst64+0x7f

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff0f4 696a8cc5 node+0x12ae60a
012ff194 67363961 node+0x2a18cc5
012ff208 67f589e6 node+0x6d3961
012ff2d4 67f5875e node+0x12c89e6
012ff330 67f30ec3 node+0x12c875e
012ff36c 67f30acb node+0x12a0ec3
012ff3ac 67f423d2 node+0x12a0acb
012ff3f4 67f422e2 node+0x12b23d2
012ff438 6735bd42 node+0x12b22e2
012ff460 6735d47d node+0x6cbd42
012ff4a0 6729ed6c node+0x6cd47d
012ff4fc 6729f379 node+0x60ed6c
012ff520 6729ea8a node+0x60f379
012ff5b8 770f60ae node+0x60ea8a
012ff66c 770f3ee6 ntdll!RtlAllocateHeap+0x3e
012ff684 72662d00 ntdll!RtlFreeHeap+0x46
012ff694 00000000 d3d11!ext-ms-win-rtcore-ntuser-dc-access-l1-1-0_NULL_THUNK_DATA_DLA  (d3d11+0x1c2d00)

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0036f604 6f4a8d6c node+0x12ae60a
0036f66c 6d163961 node+0x2a18d6c
0036f6e0 6dd589e6 node+0x6d3961
0036f7ac 6dd5875e node+0x12c89e6
0036f808 6dd30ec3 node+0x12c875e
0036f844 6dd30acb node+0x12a0ec3
0036f884 6dd423d2 node+0x12a0acb
0036f8cc 6dd422e2 node+0x12b23d2
0036f910 6d15bd42 node+0x12b22e2
0036f938 6d15d47d node+0x6cbd42
0036f978 6d09ed6c node+0x6cd47d
0036f9d4 6d09f379 node+0x60ed6c
0036f9f8 6d09ea8a node+0x60f379
0036f9fc 6dd1a300 node+0x60ea8a
0036fa00 00360000 node+0x128a300
0036fa04 00000000 0x360000

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff3d4 6ee58cc5 node+0x12ae60a
012ff46c 6cb13961 node+0x2a18cc5
012ff4e0 6d7089e6 node+0x6d3961
012ff5ac 6d70875e node+0x12c89e6
012ff608 6d6e0ec3 node+0x12c875e
012ff644 6d6e0acb node+0x12a0ec3
012ff684 6d6f23d2 node+0x12a0acb
012ff6cc 6d6f22e2 node+0x12b23d2
012ff710 6cb0bd42 node+0x12b22e2
012ff738 6cb0d47d node+0x6cbd42
012ff778 6ca4ed6c node+0x6cd47d
012ff7d4 6ca4f379 node+0x60ed6c
012ff7f8 6ca4ea8a node+0x60f379
012ff890 77d860ae node+0x60ea8a
012ff944 77d83ee6 ntdll!RtlAllocateHeap+0x3e
012ff95c 72662d00 ntdll!RtlFreeHeap+0x46
012ff96c 00000000 FWPUCLNT!ktmw32_NULL_THUNK_DATA_DLA+0xc88

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0033c7a0 6947dc08 node+0x2a2f20b
0033ca9f 736d2034 node+0xb2dc08
0033caa3 614d203a 0x736d2034
0033caa7 732d6b72 0x614d203a
0033caab 70656577 0x732d6b72
0033caaf 2e303120 0x70656577
0033cab3 31282031 0x2e303120
0033cab7 29332e32 0x31282031
0033cabb 203e2d20 0x29332e32
0033cabf 312e3031 0x203e2d20
0033cac3 32312820 0x312e3031
0033cac7 2029332e 0x32312820
0033cacb 202c424d 0x2029332e
0033cacf 362e3431 0x202c424d
0033cad3 30202f20 0x362e3431
0033cad7 6d20302e 0x30202f20
0033cadb 28202073 0x6d20302e
0033cadf 72657661 0x28202073
0033cae3 20656761 0x72657661
0033cae7 3d20756d 0x20656761
0033caeb 392e3020 0x3d20756d
0033caef 202c3939 0x392e3020
0033caf3 72727563 0x202c3939
0033caf7 20746e65 0x72727563
0033cafb 3d20756d 0x20746e65
0033caff 302e3020 0x3d20756d
0033cb03 20293230 0x302e3020
0033cb07 20776f6c 0x20293230
0033cb0b 6f6d656d 0x20776f6c
0033cb0f 6e207972 0x6f6d656d
0033cb13 6669746f 0x6e207972
0033cb17 74616369 0x6669746f
0033cb1b 206e6f69 0x74616369
0033cb1f 69204347 0x206e6f69
0033cb23 6c6f206e node+0x8b4347
0033cb27 70732064 node+0x3da206e
0033cb2b 20656361 0x70732064
0033cb2f 75716572 0x20656361
0033cb33 65747365 shell32!__dyn_tls_init_callback  (shell32+0x756572)
0033cb37 335b0a64 0x65747365
0033cb3b 3a383232 0x335b0a64
0033cb3f 37463230 0x3a383232
0033cb43 30344542 0x37463230
0033cb47 3220205d 0x30344542
0033cb4b 37353335 0x3220205d
0033cb4f 6d203231 0x37353335
0033cb53 4d203a73 0x6d203231
0033cb57 2d6b7261 0x4d203a73
0033cb5b 65657773 0x2d6b7261
0033cb5f 30312070 0x65657773
0033cb63 2820362e 0x30312070
0033cb67 332e3231 0x2820362e
0033cb6b 3e2d2029 0x332e3231
0033cb6f 2e303120 0x3e2d2029
0033cb73 31282032 0x2e303120
0033cb77 29332e32 0x31282032
0033cb7b 2c424d20 0x29332e32
0033cb7f 2e323120 0x2c424d20
0033cb83 202f2039 0x2e323120
0033cb87 20302e30 0x202f2039
0033cb8b 2020736d 0x20302e30
0033cb8f 65766128 0x2020736d
0033cb93 65676172 0x65766128
0033cb97 20756d20 0x65676172
0033cb9b 2e31203d 0x20756d20
0033cb9f 2c303030 0x2e31203d
0033cba3 72756320 0x2c303030
0033cba7 746e6572 0x72756320
0033cbab 20756d20 0x746e6572
0033cbaf 2e31203d 0x20756d20
0033cbb3 29303030 0x2e31203d
0033cbb7 776f6c20 0x29303030
0033cbbb 6d656d20 ntdll!___PchSym_  (ntdll+0x166c20)
776f6c20 00650073 apphelp!ApphelpCheckMsiPackage+0x122
776f6c34 00680054 0x650073
776f6c38 00200065 0x680054
776f6c3c 00700073 0x200065
776f6c40 00630065 0x700073
776f6c44 00660069 0x630065
776f6c48 00650069 0x660069
776f6c4c 00200064 0x650069
776f6c50 006f006e 0x200064
776f6c54 00690074 0x6f006e
776f6c58 00690066 0x690074
776f6c5c 00610063 0x690066
776f6c60 00690074 0x610063
776f6c64 006e006f 0x690074
776f6c68 00750020 0x6e006f
776f6c6c 00650073 0x750020
776f6c70 00200072 0x650073
776f6c74 006f0064 0x200072
776f6c78 00730065 0x6f0064
776f6c7c 006e0020 0x730065
776f6c80 0074006f 0x6e0020
776f6c84 00650020 0x74006f
776f6c88 00690078 0x650020
776f6c8c 00740073 0x690078
776f6c90 0020002e 0x740073
776f6c94 00610046 0x20002e
776f6c98 006c0069 0x610046
776f6c9c 00640065 0x6c0069
776f6ca0 00740020 0x640065
776f6ca4 0020006f 0x740020
776f6ca8 006e0075 0x20006f
776f6cac 00650072 0x6e0075
776f6cb0 00690067 0x650072
776f6cb4 00740073 0x690067
776f6cb8 00720065 0x740073
776f6cbc 00750020 0x720065
776f6cc0 00650073 0x750020
776f6cc4 00200072 0x650073
776f6cc8 006f0066 0x200072
776f6ccc 00200072 0x6f0066
776f6cd0 006f006e 0x200072
776f6cd4 00690074 0x6f006e
776f6cd8 00690066 0x690074
776f6cdc 00610063 0x690066
776f6ce0 00690074 0x610063
776f6ce4 006e006f 0x690074
776f6ce8 002e0073 0x6e006f
776f6cec 000a000d 0x2e0073
776f6cf0 00000000 0xa000d

Top 29: total counts = 1

047bf860 6e1d4815 KERNELBASE!UnregisterWaitEx+0x1b
WARNING: Stack unwind information not available. Following frames may be wrong.
047bf8e4 6d5add98 node+0x12f4815
047bf95c 6d6f612e node+0x6cdd98
047bfa6c 6d5b7711 node+0x81612e
047bfac4 7689fcc9 node+0x6d7711
047bfad4 778282ae kernel32!BaseThreadInitThunk+0x19
047bfb30 7782827e ntdll!__RtlUserThreadStart+0x2f
047bfb40 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 30: total counts = 1

0016cfbf 74616369 node+0x8746f
0016cfc3 206e6f69 msvcr100+0x26369
0016cfc7 69204347 0x206e6f69
0016cfcb 6c6f206e node+0x2bf4347
0016cfcf 70732064 0x6c6f206e
0016cfd3 20656361 0x70732064
0016cfd7 75716572 0x20656361
0016cfdb 65747365 shell32!__dyn_tls_init_callback  (shell32+0xbe6572)
0016cfdf 315b0a64 0x65747365
0016cfe3 3a383036 0x315b0a64
0016cfe7 33323330 0x3a383036
0016cfeb 30393345 0x33323330
0016cfef 3832205d 0x30393345
0016cff3 36383639 0x3832205d
0016cff7 6d203133 0x36383639
0016cffb 4d203a73 0x6d203133
0016cfff 2d6b7261 0x4d203a73
0016d003 65657773 0x2d6b7261
0016d007 30312070 0x65657773
0016d00b 2820362e 0x30312070
0016d00f 302e3231 0x2820362e
0016d013 3e2d2029 0x302e3231
0016d017 2e303120 0x3e2d2029
0016d01b 31282031 0x2e303120
0016d01f 29302e32 0x31282031
0016d023 2c424d20 0x29302e32
0016d027 2e393520 0x2c424d20
0016d02b 202f2034 0x2e393520
0016d02f 20302e30 0x202f2034
0016d033 2020736d 0x20302e30
0016d037 65766128 0x2020736d
0016d03b 65676172 0x65766128
0016d03f 20756d20 0x65676172
0016d043 2e30203d 0x20756d20
0016d047 2c393939 0x2e30203d
0016d04b 72756320 0x2c393939
0016d04f 746e6572 0x72756320
0016d053 20756d20 0x746e6572
0016d057 2e30203d 0x20756d20
0016d05b 29393939 0x2e30203d
0016d05f 776f6c20 0x29393939
0016d063 6d656d20 0x776f6c20
0016d067 2079726f 0x6d656d20
0016d06b 69746f6e 0x2079726f
0016d06f 61636966 node+0x3136f6e
0016d073 6e6f6974 0x61636966
0016d077 20434720 0x6e6f6974
0016d07b 6f206e69 0x20434720
0016d07f 7320646c 0x6f206e69
0016d083 65636170 0x7320646c
0016d087 71657220 0x65636170
0016d08b 74736575 0x71657220
0016d08f 5b0a6465 0x74736575
0016d093 38303631 0x5b0a6465
0016d097 3233303a 0x38303631
0016d09b 39334533 0x3233303a
0016d09f 32205d30 0x39334533
0016d0a3 38363938 0x32205d30
0016d0a7 20313836 0x38363938
0016d0ab 203a736d 0x20313836
0016d0af 6b72614d 0x203a736d
0016d0b3 6577732d 0x6b72614d
0016d0b7 31207065 0x6577732d
0016d0bb 20312e30 0x31207065
0016d0bf 2e323128 0x20312e30
0016d0c3 2d202930 0x2e323128
0016d0c7 3031203e 0x2d202930
0016d0cb 2820312e 0x3031203e
0016d0cf 302e3231 0x2820312e
0016d0d3 424d2029 0x302e3231
0016d0d7 3035202c 0x424d2029
0016d0db 2f20312e 0x3035202c
0016d0df 302e3020 0x2f20312e
0016d0e3 20736d20 0x302e3020
0016d0e7 76612820 0x20736d20
0016d0eb 67617265 kernel32!$$VProc_ImageExportDirectory+0x2554
0016d0ef 756d2065 node+0x1007265
0016d0f3 30203d20 shell32!__dyn_tls_init_callback  (shell32+0xba2065)
0016d0f7 3739392e 0x30203d20
0016d0fb 7563202c 0x3739392e
0016d0ff 6e657272 shell32!__dyn_tls_init_callback  (shell32+0xb0202c)
0016d103 756d2074 0x6e657272
0016d107 30203d20 shell32!__dyn_tls_init_callback  (shell32+0xba2074)
0016d10b 3130302e 0x30203d20
0016d10f 6f6c2029 0x3130302e
0016d113 656d2077 0x6f6c2029
0016d117 79726f6d 0x656d2077
0016d11b 746f6e20 0x79726f6d
0016d11f 63696669 0x746f6e20
0016d123 6f697461 0x63696669
0016d127 4347206e 0x6f697461
0016d12b 206e6920 0x4347206e
0016d12f 20646c6f 0x206e6920
0016d133 63617073 0x20646c6f
0016d137 65722065 0x63617073
0016d13b 73657571 0x65722065
0016d13f 0a646574 0x73657571
0016d143 00000000 0xa646574

Top 31: total counts = 1

055afb8c 0fdcaeed rightsmanager!RM_AutorunScan+0x176
WARNING: Stack unwind information not available. Following frames may be wrong.
055afc88 7565343d ffi_bindings+0xaeed
055afc94 76fc9812 kernel32!BaseThreadInitThunk+0xe
055afcd4 76fc97e5 ntdll!__RtlUserThreadStart+0x70
055afcec 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 32: total counts = 1

0042f42c 5fbc8c7a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0042f43c 5fbc89f3 node+0x12f8c7a
0042f440 6216e874 node+0x12f89f3
0042f444 085db378 node+0x389e874
0042f448 00000000 0x85db378

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fcf28 6767dc08 node+0x2a2f20b
006fd227 614d203a node+0xb2dc08
006fd22b 732d6b72 0x614d203a
006fd22f 70656577 0x732d6b72
006fd233 2e303120 atlthunk!AtlThunk_0xCC+0x47
006fd247 32312820 0x2e303120
006fd24b 2029332e 0x32312820
006fd24f 202c424d 0x2029332e
006fd253 2e393131 0x202c424d
006fd257 202f2033 0x2e393131
006fd25b 20302e30 0x202f2033
006fd25f 2020736d 0x20302e30
006fd263 65766128 0x2020736d
006fd267 65676172 0x65766128
006fd26b 20756d20 0x65676172
006fd26f 2e30203d 0x20756d20
006fd273 2c353839 0x2e30203d
006fd277 72756320 0x2c353839
006fd27b 746e6572 0x72756320
006fd27f 20756d20 0x746e6572
006fd283 2e30203d 0x20756d20
006fd287 29363132 0x2e30203d
006fd28b 776f6c20 0x29363132
006fd28f 6d656d20 0x776f6c20
006fd293 2079726f 0x6d656d20
006fd297 69746f6e 0x2079726f
006fd29b 61636966 node+0x2bf6f6e
006fd29f 6e6f6974 0x61636966
006fd2a3 20434720 0x6e6f6974
006fd2a7 6f206e69 0x20434720
006fd2ab 7320646c 0x6f206e69
006fd2af 65636170 0x7320646c
006fd2b3 71657220 0x65636170
006fd2b7 74736575 0x71657220
006fd2bb 5b0a6465 0x74736575
006fd2bf 30343837 0x5b0a6465
006fd2c3 4432303a 0x30343837
006fd2c7 30344242 0x4432303a
006fd2cb 33205d38 0x30344242
006fd2cf 31333233 0x33205d38
006fd2d3 36313137 0x31333233
006fd2d7 3a736d20 0x36313137
006fd2db 72614d20 0x3a736d20
006fd2e3 20706565 GdiPlus!BuiltLine::GetUntrimmedCharacterCount+0x44
006fd2ef 2029332e 0x20706565
006fd2f3 31203e2d 0x2029332e
006fd2f7 20342e30 0x31203e2d
006fd2fb 2e323128 0x20342e30
006fd2ff 4d202933 0x2e323128
006fd303 38202c42 0x4d202933
006fd307 342e3635 0x38202c42
006fd30b 30202f20 0x342e3635
006fd30f 6d20362e 0x30202f20
006fd313 28202073 0x6d20362e
006fd317 72657661 0x28202073
006fd31b 20656761 GdiPlus!SHLWAPI_NULL_THUNK_DATA_DLA  (GdiPlus+0x157661)
006fd31f 3d20756d 0x20656761
006fd323 392e3020 0x3d20756d
006fd327 202c3638 0x392e3020
006fd32b 72727563 0x202c3638
006fd32f 20746e65 0x72727563
006fd333 3d20756d 0x20746e65
006fd337 392e3020 0x3d20756d
006fd33b 20293638 0x392e3020
006fd33f 20776f6c 0x20293638
006fd343 6f6d656d 0x20776f6c
006fd347 6e207972 0x6f6d656d
006fd34b 6669746f 0x6e207972
006fd34f 74616369 0x6669746f
006fd353 206e6f69 0x74616369
006fd357 69204347 0x206e6f69
006fd35b 6c6f206e node+0x26b4347
006fd35f 70732064 0x6c6f206e
006fd363 20656361 0x70732064
006fd367 75716572 0x20656361
006fd36b 65747365 shell32!`string'+0x12
006fd36f 375b0a64 0x65747365
006fd373 3a303438 0x375b0a64
006fd377 42443230 0x3a303438
006fd37b 38303442 0x42443230
006fd37f 3333205d 0x38303442
006fd383 37313332 0x3333205d
006fd387 20393132 0x37313332
006fd38b 203a736d 0x20393132
006fd38f 6b72614d 0x203a736d
006fd393 6577732d 0x6b72614d
006fd397 31207065 0x6577732d
006fd39b 20342e30 0x31207065
006fd39f 2e323128 0x20342e30
006fd3a3 2d202933 0x2e323128
006fd3a7 3031203e 0x2d202933
006fd3ab 2820342e 0x3031203e
006fd3af 332e3231 0x2820342e
006fd3b3 424d2029 0x332e3231
006fd3b7 3536202c 0x424d2029
006fd3bb 2f20332e 0x3536202c
006fd3bf 302e3020 0x2f20332e
006fd3c3 20736d20 0x302e3020
006fd3c7 76612820 0x20736d20
006fd3cb 67617265 0x76612820
006fd3cf 756d2065 node+0xac7265
006fd3d3 30203d20 shell32!`string'+0x5
006fd3d7 3438392e 0x30203d20
006fd3db 7563202c 0x3438392e
006fd3df 6e657272 setupapi!ext-ms-win-uxtheme-themes-l1-1-0_NULL_THUNK_DATA_DLA  (setupapi+0x41202c)
006fd3e3 756d2074 0x6e657272
006fd3e7 30203d20 shell32!`string'
006fd3eb 3736332e 0x30203d20
006fd3ef 6f6c2029 0x3736332e
006fd3f3 656d2077 0x6f6c2029
006fd3f7 79726f6d 0x656d2077
006fd3fb 746f6e20 0x79726f6d
006fd3ff 63696669 0x746f6e20
006fd403 6f697461 0x63696669
006fd407 4347206e 0x6f697461
006fd40b 206e6920 0x4347206e
006fd40f 20646c6f 0x206e6920
006fd413 63617073 0x20646c6f
006fd417 65722065 0x63617073
006fd41b 73657571 0x65722065
006fd41f 0a646574 0x73657571
006fd423 00000000 0xa646574