Analyzed 159 dump

Top 1: total counts = 28

ChildEBP RetAddr  
009ee864 00000000 KERNELBASE!RaiseException+0x62

47862dbca28b6491e0da0fbe2aab064c_000.dmp
6669e7c2399849f398b2d9c8b831e1c8_000.dmp
047f4cf5b5c00ec7ac53537c2bec5f72_000.dmp
9f0320825ff4441f61cca00a6af1ae08_000.dmp
476712ac6d92179543e2ba7fffcbcf6f_000.dmp

Top 2: total counts = 9

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

22f2ec2b4107c1f6a81d7f62a600bb2f_000.dmp
9f799c0b3a0e2297f64a63e0d8590f97_000.dmp
f71d70b48050f38039108e80b99316eb_000.dmp
4ae260dafb3805ef78ec429e34b02f69_000.dmp
5a847fc1bcd628c53f985497909446e0_000.dmp

Top 3: total counts = 9

0582fd84 0f1eaeed rightsmanager!RM_AutorunScan+0x176
0582fe80 7738336a ffi_bindings!ffi_call_win32+0x11
0582fe8c 77e49902 kernel32!BaseThreadInitThunk+0xe
0582fecc 77e498d5 ntdll!__RtlUserThreadStart+0x70
0582fee4 00000000 ntdll!_RtlUserThreadStart+0x1b

31fed50fe18122fe347f8308f5267557_000.dmp
f3d88aa15d7544c4fb0bade1d6b8d73c_000.dmp
153508544fa5d111a599e1d9ddd75cfd_000.dmp
6561b149881d7f9f6b097c8f2e66063c_000.dmp
66589ef269c9b0c4134c4532b053bf2b_000.dmp

Top 4: total counts = 9

ChildEBP RetAddr  
002ce664 6c73e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
002ce678 005fcff2 node+0x12ae479
002ce67c 00000000 0x5fcff2

85ff6ac223e2392106f74b820d8b0c5e_000.dmp
691e85bf474ef7bbcde675b28b7e7d36_000.dmp
f6d3aea6d7dd32e135db44ece9e74ce4_001.dmp
9245c65b621a58acb85cb29870a97ae9_000.dmp
a6abfec685ffcfc22e046860995b411b_000.dmp

Top 5: total counts = 6

05ebfd34 5572aeed rightsmanager!RM_AutorunScan+0x176
05ebfe30 760afcc9 ffi_bindings!ffi_call_win32+0x11
05ebfe40 77d37c6e kernel32!BaseThreadInitThunk+0x19
05ebfe9c 77d37c3e ntdll!__RtlUserThreadStart+0x2f
05ebfeac 00000000 ntdll!_RtlUserThreadStart+0x1b

97bb0810caf894e30c78a516e4a92351_000.dmp
fcc561c05ce78fbf6e131dd20ae4c421_000.dmp
1b5c161427dc70020f62c977dd4ba141_000.dmp
bc29f2392574d6305a94916bc631e41c_000.dmp
d40224adac71a64c0e9b109d4eeae504_000.dmp

Top 6: total counts = 5

063ffdc4 79f1aeed rightsmanager!RM_AutorunScan+0x176
063ffec0 765c7ba9 ffi_bindings!ffi_call_win32+0x11
063ffed0 76fcc3ab kernel32!BaseThreadInitThunk+0x19
063fff28 76fcc32f ntdll!__RtlUserThreadStart+0x2b
063fff38 00000000 ntdll!_RtlUserThreadStart+0x1b

dc9935d8d4fd904303b747acf02e1f87_000.dmp
1e745fd52f2ad05ddc2ccdf2d0b05c2b_000.dmp
ba0ba04ae364cb4814a3ba08128ada1f_000.dmp
7517f4ef173bc937cfc21fbd5262dc7d_000.dmp
91dd08946fb456f67bbc338ba1e8f9ad_000.dmp

Top 7: total counts = 5

ChildEBP RetAddr  
001eea44 570ce479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
001eea58 00193201 node+0x12ae479
001eea5c 00000000 0x193201

d861894222b8bda7f871df9a1e15f85a_000.dmp
48cf86fc297aa9ed3968a79443174f5d_000.dmp
ef624c9e39a3175c4e13abd4b0e9bc62_000.dmp
6dcd0a160a955deb9dd6e91d48d62c45_000.dmp
f77e60b88689e4e146405d25e25fdb4b_000.dmp

Top 8: total counts = 5

ChildEBP RetAddr  
0040e584 637fe479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0040e598 005fcff0 node+0x12ae479
0040e59c 00000000 0x5fcff0

ed4d593b787a81ee396e9f3129d32956_000.dmp
35675b87039fe0264d0b98a554a66f8f_000.dmp
2c346e2acba327edaf49021abd7bb4cb_000.dmp
84e045addbef06dd291cc01e8acfb6e0_000.dmp
974612a85c4a9e345cc048fb58b2efbf_000.dmp

Top 9: total counts = 5

ChildEBP RetAddr  
0cf4f608 64b30081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
0cf4f644 64b3351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0cf4fb44 64b34624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0cf4fb78 64b385a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0cf4fca4 64b3917a rightsextension!CRegData::MonitorFunction+0x4b3
0cf4fcc4 64b38a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0cf4fccc 64c4864a rightsextension!std::_Pad::_Call_func+0xa
0cf4fd04 7699fa29 rightsextension!thread_start+0x58
0cf4fd14 771d7a9e kernel32!BaseThreadInitThunk+0x19
0cf4fd70 771d7a6e ntdll!__RtlUserThreadStart+0x2f
0cf4fd80 00000000 ntdll!_RtlUserThreadStart+0x1b

79be025d413c9c22d22f05f5219f01b7_001.dmp
bd2dd0532d4601410fb1e5452e8204da_000.dmp
000ab9cce5e4d368c448e22bc68d99af_001.dmp
1652e3faa26d3f479f6f6b49b82b79a5_000.dmp
da1d8f939268c3169bb7f60b5ee0a6ed_000.dmp

Top 10: total counts = 4

ChildEBP RetAddr  
07acf160 0ff0e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
07acf1a0 0ff1738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
07acf3f0 0ff112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
07adfa38 0ff0e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
07adfab0 0ff47f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
07adfc84 7664ef6c rightsmanager!RM_AutorunScan+0x176
07adfc90 77c73618 kernel32!BaseThreadInitThunk+0xe
07adfcd0 77c735eb ntdll!__RtlUserThreadStart+0x70
07adfce8 00000000 ntdll!_RtlUserThreadStart+0x1b

8b8884b700c8d3da07d33e949e9d5f6c_000.dmp
1f50c3a23e5875e4ab6ce1e85ad53f13_000.dmp
733bed8f0cf688bf5778e881a349b157_000.dmp
a99dd30f18a6ab01e816ca44acc776eb_000.dmp

Top 11: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

b9313aca187ccf87684e57dd6050aaeb_000.dmp
afc924994f7b7da68b0b80794b5ca77f_000.dmp
5a20045f0e385e71a2f6ca6b379234a4_000.dmp
218fe1b2d9d84f7698c8732074f45a24_000.dmp

Top 12: total counts = 4

ChildEBP RetAddr  
05eeefa0 09b8e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05eeefe0 09b9738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05eef230 09b912a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05eff878 09b8e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05eff8f0 09bc7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05effac4 76146839 rightsmanager!RM_AutorunScan+0x176
05effad4 7751906f kernel32!BaseThreadInitThunk+0x19
05effb2c 7751903d ntdll!__RtlUserThreadStart+0x2b
05effb3c 00000000 ntdll!_RtlUserThreadStart+0x1b

1d62c72f4238b8dd24d160422f095f63_000.dmp
ce5ca0c3de84c77f8b89e41ee7ec9012_000.dmp
24dbe1012850478dbdc8b8a1231111b1_000.dmp
255ff1e0794c54e7ac4af8534ca2e099_000.dmp

Top 13: total counts = 4

ChildEBP RetAddr  
00fbe67c 00000000 KERNELBASE!RaiseException+0x64

6574267af9f27b2b12ce6ddf43f273a0_000.dmp
758a50f06d6989df2dcafbf58400ab67_000.dmp
afca2ca0269d468cf1866b6dbbfe2c31_000.dmp
42c187385306fe709fb026331c02480b_000.dmp

Top 14: total counts = 3

ChildEBP RetAddr  
0586f3f8 73f4e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0586f438 73f5738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0586f688 73f512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0587fcd0 73f4e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0587fd48 73f87f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0587ff1c 7556fcc9 rightsmanager!RM_AutorunScan+0x176
0587ff2c 772782ae kernel32!BaseThreadInitThunk+0x19
0587ff88 7727827e ntdll!__RtlUserThreadStart+0x2f
0587ff98 00000000 ntdll!_RtlUserThreadStart+0x1b

4273e5c2ccda5f2c810ad688bf141dcc_000.dmp
51a592f4cb5095db282358009e58f42b_000.dmp
72d5b142f8c60a0f3f118e0fe9bf985d_000.dmp

Top 15: total counts = 3

ChildEBP RetAddr  
0559f070 0f9fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0559f0b0 0fa0738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0559f300 0fa012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
055af948 0f9fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
055af9c0 0fa37f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
055afb94 743c343d rightsmanager!RM_AutorunScan+0x176
055afba0 770f9802 kernel32!BaseThreadInitThunk+0xe
055afbe0 770f97d5 ntdll!__RtlUserThreadStart+0x70
055afbf8 00000000 ntdll!_RtlUserThreadStart+0x1b

b7c9ce1cac01321977ca616e92b30967_000.dmp
96e4268b933c00898ef100ccd49f4403_000.dmp
e8de8833bca68ebdba082e3a0a488ef6_000.dmp

Top 16: total counts = 3

ChildEBP RetAddr  
052af118 7beee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
052af158 7bef738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
052af3a8 7bef12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
052bf9f0 7beee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
052bfa68 7bf27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
052bfc3c 75da00f9 rightsmanager!RM_AutorunScan+0x176
052bfc4c 76fd7bbe kernel32!BaseThreadInitThunk+0x19
052bfca8 76fd7b8e ntdll!__RtlUserThreadStart+0x2f
052bfcb8 00000000 ntdll!_RtlUserThreadStart+0x1b

7fb0150eb7cfc05c703324b605d5e39d_000.dmp
8fbb6a9c2193fd0c7b82e82a68c0fe40_000.dmp
1374e2c76aa7daee92d036304e0a450c_000.dmp

Top 17: total counts = 2

ChildEBP RetAddr  
120ff524 65040081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
120ff560 6504351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
120ffa60 65044624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
120ffa94 650485a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
120ffbc0 6504917a rightsextension!CRegData::MonitorFunction+0x4b3
120ffbe0 65048a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
120ffbe8 6515864a rightsextension!std::_Pad::_Call_func+0xa
120ffc20 75ee7ba9 rightsextension!thread_start+0x58
120ffc30 7716c36b kernel32!BaseThreadInitThunk+0x19
120ffc88 7716c2ef ntdll!__RtlUserThreadStart+0x2b
120ffc98 00000000 ntdll!_RtlUserThreadStart+0x1b

527fb95272b8c2528a480b54c760f86a_000.dmp
0f09f67446f1e96617ffb03b3cb8bb5f_000.dmp

Top 18: total counts = 2

ChildEBP RetAddr  
00dfe354 00000000 KERNELBASE!RaiseException+0x48

58eb81438070e2f2c98e7afab1ba19ed_000.dmp
dbebc3936b155b8a1d3caab3d873e1f3_000.dmp

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0574fb28 69cbe8da node+0xc6bd50
0574fb80 6b1993e5 node+0xcee8da
0574fbcc 7541343d node+0x21c93e5
0574fbd8 77a49802 kernel32!BaseThreadInitThunk+0xe
0574fc18 77a497d5 ntdll!__RtlUserThreadStart+0x70
0574fc30 00000000 ntdll!_RtlUserThreadStart+0x1b

448010458cf6d22ff5341a97c413aa99_002.dmp

Top 20: total counts = 1

0531fb08 6d7ae6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
0531fb10 6d7ae8c1 node+0x2f3e6e0
0531fb14 092e4dfc node+0x2f3e8c1
0531fb18 6d7ae7dd 0x92e4dfc
0531fb1c 0045e504 node+0x2f3e7dd
0531fb20 00000000 0x45e504

60f074546778713f399e05263059eab9_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00d3f684 645d8d6c node+0x12ae60a
00d3f6ec 62293961 node+0x2a18d6c
00d3f760 62e889e6 node+0x6d3961
00d3f82c 62e8875e node+0x12c89e6
00d3f888 62e60ec3 node+0x12c875e
00d3f8c4 62e60acb node+0x12a0ec3
00d3f904 62e723d2 node+0x12a0acb
00d3f94c 62e722e2 node+0x12b23d2
00d3f990 6228bd42 node+0x12b22e2
00d3f9b8 6228d47d node+0x6cbd42
00d3f9f8 621ced6c node+0x6cd47d
00d3fa54 621cf379 node+0x60ed6c
00d3fa78 621cea8a node+0x60f379
00d3fb10 774560ae node+0x60ea8a
00d3fbc4 77453ee6 ntdll!RtlAllocateHeap+0x3e
00d3fbdc 74756100 ntdll!RtlFreeHeap+0x46
00d3fbec 00000000 0x74756100

db95e20ba60f82b01f681b828765a363_000.dmp

Top 22: total counts = 1

006fce57 73203320 0x6e692073
006fce5b 73706574 LdUserInjectDll32+0x23320
006fce83 2e302070 windows_storage!Windows::Foundation::Collections::Internal::Vector,Windows::Foundation::Collections::Internal::DefaultLifetimeTraits,Windows::Foundation::Collections::Internal::VectorOptions >::GetAt+0x34
006fce93 7320656d 0x2e302070
006fce97 65636e69 LdUserInjectDll32+0x2656d
006fce9b 61747320 node+0x16b6e69
006fce9f 6f207472 0x61747320
006fcea3 616d2066 0x6f207472
006fcea7 6e696b72 0x616d2066
006fceab 35322067 0x6e696b72
006fceaf 736d2032 0x35322067
006fcebb 6d206567 windows_storage!Microsoft::WRL::RuntimeClass::RuntimeClass+0x40
006fcebf 203d2075 CoreUIComponents!System::Boolean$R::s_rgMethodEntries+0x3f
006fcec3 39392e30 0x203d2075
006fcec7 63202c36 0x39392e30
006fcecb 65727275 0x63202c36
006fcecf 6d20746e node+0x17a7275
006fced3 203d2075 CoreUIComponents!Microsoft::CoreUI::Navigation::Server::Session$R::s_rgReferenceFields+0x2a
006fced7 39392e30 0x203d2075
006fcedb 66202936 0x39392e30
006fcedf 6c616e69 node+0x2282936
006fcee3 20657a69 0x6c616e69
006fcee7 72636e69 0x20657a69
006fceeb 6e656d65 0x72636e69
006fceef 206c6174 0x6e656d65
006fcef3 35325b6d 0x206c6174
006fcef7 303a3233 0x35325b6d
006fcefb 36373536 0x303a3233
006fceff 5d384145 0x36373536
006fcf03 30313120 0x5d384145
006fcf07 38393538 0x30313120
006fcf0b 6d203032 0x38393538
006fcf0f 4d203a73 CoreUIComponents!HighContrastOverride$R::s_EnumNames+0xa
006fcf13 2d6b7261 0x4d203a73
006fcf17 65657773 0x2d6b7261
006fcf1b 2e372070 node+0x16d7773
006fcf1f 31282037 0x2e372070
006fcf23 29302e30 0x31282037
006fcf27 203e2d20 0x29302e30
006fcf2b 20372e37 0x203e2d20
006fcf2f 2e303128 0x20372e37
006fcf33 4d202930 0x2e303128
006fcf37 31202c42 0x4d202930
006fcf3b 2f20312e 0x31202c42
006fcf3f 302e3020 0x2f20312e
006fcf43 20736d20 0x302e3020
006fcf47 202b2820 0x20736d20
006fcf4b 352e3931 0x202b2820
006fcf4f 20736d20 0x352e3931
006fcf53 33206e69 0x20736d20
006fcf57 65747320 0x33206e69
006fcf5b 73207370 node+0x17c7320
006fcf5f 65636e69 LdUserInjectDll32+0x27370
006fcf63 61747320 node+0x16b6e69
006fcf67 6f207472 0x61747320
006fcf6b 616d2066 0x6f207472
006fcf6f 6e696b72 0x616d2066
006fcf73 62202c67 0x6e696b72
006fcf77 65676769 0x62202c67
006fcf7b 73207473 node+0x16f6769
006fcf7f 20706574 LdUserInjectDll32+0x27473
006fcf83 352e3931 0x20706574
006fcf87 2c736d20 0x352e3931
006fcf8b 6c617720 0x2c736d20
006fcf8f 6d69746c 0x6c617720
006fcf93 69732065 0x6d69746c
006fcf97 2065636e 0x69732065
006fcf9b 72617473 0x2065636e
006fcf9f 666f2074 0x72617473
006fcfa3 72616d20 node+0x2772074
006fcfa7 676e696b 0x72616d20
006fcfab 20393420 node+0x376696b
006fcfaf 2029736d 0x20393420
006fcfb3 65766128 0x2029736d
006fcfb7 65676172 node+0x17e6128
006fcfbb 20756d20 node+0x16f6172
006fcfbf 2e30203d 0x20756d20
006fcfc3 2c353939 0x2e30203d
006fcfc7 72756320 0x2c353939
006fcfcb 746e6572 0x72756320
006fcff3 00000000 wininet!CDependentHostList::Commit+0x25

e935b6262f278c527329bc4f55cb077a_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0038f758 6c6c93ed 0x101
0038fb50 6d6e2e3c node+0x25293ed
0038fb54 0e798768 node+0x3542e3c
0038fb58 6d13089f 0xe798768
0038fb5c 00000000 node+0x2f9089f

972b2dcea0bd85251b85aea7bc06b54c_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

1c7f5774fabf5309b53c1271338f32b4_000.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00fbc620 6e36dc08 node+0x2a2ee0b
00fbc91f 73203320 node+0xb2dc08
00fbc923 73706574 iertutil!SettingStore::s_rgKeys+0xa48
00fbc927 6e697320 windows_storage!winrt::implements::`vector deleting destructor'+0x5594
00fbc92b 73206563 node+0xe57320
00fbc92f 74726174 iertutil!SettingStore::s_rgKeys+0x3c8b
73206563 00000000 wininet!AutoProxyBase::SetState+0x20

b7c88557f67dce8d5d7ff679ed299a08_000.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0035ccd8 6dd7dc08 node+0x2a2f20b
0035cfd7 6d203330 node+0xb2dc08
0035cfdb 4d203a73 UIAutomationCore!__dyn_tls_init_callback  (UIAutomationCore+0x83330)
0035cfdf 2d6b7261 0x4d203a73
0035cfe3 65657773 0x2d6b7261
0035cfe7 30312070 0x65657773
0035cfeb 2820342e 0x30312070
0035cfef 332e3231 0x2820342e
0035cff3 3e2d2029 0x332e3231
0035cff7 2e303120 0x3e2d2029
0035cffb 31282034 0x2e303120
0035cfff 29332e32 0x31282034
0035d003 2c424d20 wpdshext!__dyn_tls_init_callback  (wpdshext+0x192e32)
0035d007 2e333120 0x2c424d20
0035d00b 202f2036 0x2e333120
0035d00f 20302e30 0x202f2036
0035d013 2020736d 0x20302e30
0035d017 65766128 0x2020736d
0035d01b 65676172 0x65766128
0035d01f 20756d20 0x65676172
0035d023 2e30203d 0x20756d20
0035d027 2c393939 0x2e30203d
0035d02b 72756320 0x2c393939
0035d02f 746e6572 0x72756320
0035d033 20756d20 0x746e6572
0035d037 2e30203d 0x20756d20
0035d03b 29323030 0x2e30203d
0035d03f 776f6c20 wpdshext!__dyn_tls_init_callback  (wpdshext+0x183030)
0035d043 6d656d20 ole32!NdrProxyForwardingFunction49+0x18
0035d047 2079726f node+0x406d20
0035d04b 69746f6e 0x2079726f
0035d04f 61636966 0x69746f6e
0035d053 6e6f6974 0x61636966
0035d057 20434720 node+0x14a6974
0035d05b 6f206e69 0x20434720
0035d05f 7320646c node+0x1fb6e69
0035d073 36393032 msi!CResolveSource::InitializeProduct+0x13a
0035d083 37373930 0x36393032
0035d087 20313930 0x37373930
0035d08b 203a736d 0x20313930
0035d08f 6b72614d 0x203a736d
0035d093 6577732d 0x6b72614d
0035d097 31207065 0x6577732d
0035d09b 20392e30 0x31207065
0035d09f 2e323128 0x20392e30
0035d0a3 2d202933 0x2e323128
0035d0a7 3031203e 0x2d202933
0035d0ab 2820342e 0x3031203e
0035d0af 332e3231 0x2820342e
0035d0b3 424d2029 0x332e3231
0035d0b7 2e39202c 0x424d2029
0035d0bb 202f2032 0x2e39202c
0035d0bf 20302e30 0x202f2032
0035d0c3 2020736d 0x20302e30
0035d0c7 65766128 0x2020736d
0035d0cb 65676172 0x65766128
0035d0cf 20756d20 0x65676172
0035d0d3 2e31203d 0x20756d20
0035d0d7 2c303030 0x2e31203d
0035d0db 72756320 0x2c303030
0035d0df 746e6572 0x72756320
0035d0e3 20756d20 0x746e6572
0035d0e7 2e31203d 0x20756d20
0035d0eb 29303030 0x2e31203d
0035d0ef 776f6c20 wpdshext!__dyn_tls_init_callback  (wpdshext+0x163030)
0035d0f3 6d656d20 ole32!NdrProxyForwardingFunction49+0x18
0035d0f7 2079726f node+0x406d20
0035d0fb 69746f6e 0x2079726f
0035d0ff 61636966 0x69746f6e
0035d103 6e6f6974 0x61636966
0035d107 20434720 node+0x14a6974
0035d10b 6f206e69 0x20434720
0035d10f 7320646c node+0x1fb6e69
0035d123 36393032 msi!CResolveSource::InitializeProduct+0x13a
0035d133 37373930 0x36393032
0035d137 20313031 0x37373930
0035d13b 203a736d 0x20313031
0035d13f 6b72614d 0x203a736d
0035d143 6577732d 0x6b72614d
0035d147 31207065 0x6577732d
0035d14b 20342e30 0x31207065
0035d14f 2e323128 0x20342e30
0035d153 2d202933 0x2e323128
0035d157 3031203e 0x2d202933
0035d15b 2820342e 0x3031203e
0035d15f 332e3231 0x2820342e
0035d163 424d2029 0x332e3231
0035d167 3031202c 0x424d2029
0035d16b 2f20342e 0x3031202c
0035d16f 302e3020 0x2f20342e
0035d173 20736d20 0x302e3020
0035d177 76612820 0x20736d20
0035d17b 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa42820)
0035d17f 756d2065 0x67617265
0035d183 30203d20 imagehlp!TypeTiIter::next+0x48
0035d187 3939392e 0x30203d20
0035d18b 7563202c 0x3939392e
0035d1bb 206e6920 advapi32!LookupSecurityDescriptorPartsA+0x155
0035d1db 00000000 0x206e6920

d6c89c20108f0ed2e53540997e882730_001.dmp

Top 27: total counts = 1

0030d303 746c6c61 kernel32!IsBadCodePtr+0xf
0030d30b 636e6973 PicFace+0x1b6c61
0030d30f 74732065 0x636e6973
0030d313 20747261 PicFace+0x222065
0030d317 6d20666f 0x20747261
0030d31b 696b7261 node+0x424666f
0030d31f 3120676e node+0x6f7261
0030d323 736d2031 0x3120676e
0030d327 61282029 secur32!$$VProc_ImageExportDirectory+0xe9d
0030d32b 61726576 0x61282029
0030d32f 6d206567 rightsextension!_CT??_R0?AVLogicErrorJson+0x464e
0030d333 203d2075 node+0x4246567
0030d337 38392e30 0x203d2075
0030d33b 63202c37 0x38392e30
0030d33f 65727275 0x63202c37
0030d343 6d20746e 0x65727275
0030d347 203d2075 node+0x424746e
0030d34b 30302e31 0x203d2075
0030d34f 66202930 0x30302e31
0030d353 6c616e69 0x66202930
0030d357 20657a69 node+0x3656e69
0030d35b 72636e69 0x20657a69
0030d35f 6e656d65 0x72636e69
0030d363 206c6174 0x6e656d65
0030d367 6b72616d 0x206c6174
0030d36b 30315b69 node+0x276616d
0030d36f 303a3237 0x30315b69
0030d373 34303131 0x303a3237
0030d377 5d304342 0x34303131
0030d37b 38373120 0x5d304342
0030d37f 39313938 0x38373120
0030d383 736d2034 0x39313938
0030d387 614d203a secur32!$$VProc_ImageExportDirectory+0xea0
0030d38b 732d6b72 0x614d203a
0030d38f 70656577 0x732d6b72
0030d393 362e3720 0x70656577
0030d397 30312820 0x362e3720
0030d39b 2029302e 0x30312820
0030d39f 37203e2d 0x2029302e
0030d3a3 2820362e 0x37203e2d
0030d3a7 302e3031 0x2820362e
0030d3ab 424d2029 0x302e3031
0030d3af 2e30202c 0x424d2029
0030d3b3 202f2038 0x2e30202c
0030d3b7 20302e30 0x202f2038
0030d3bb 2020736d 0x20302e30
0030d3bf 30202b28 0x2020736d
0030d3c3 6d20332e 0x30202b28
0030d3c7 6e692073 node+0x424332e
0030d3cb 73203320 0x6e692073
0030d3cf 73706574 0x73203320
0030d3d3 6e697320 0x73706574
0030d3d7 73206563 0x6e697320
0030d3db 74726174 0x73206563
0030d3df 20666f20 PicFace+0x216174
0030d3e3 6b72616d 0x20666f20
0030d3e7 2c676e69 node+0x276616d
0030d3eb 67696220 0x2c676e69
0030d3ef 74736567 0x67696220
0030d3f3 65747320 PicFace+0x226567
0030d3f7 2e302070 0x65747320
0030d3fb 736d2033 0x2e302070
0030d3ff 6177202c secur32!$$VProc_ImageExportDirectory+0xe9f
0030d403 69746c6c 0x6177202c
0030d407 7320656d node+0x786c6c
0030d40b 65636e69 0x7320656d
0030d40f 61747320 0x65636e69
0030d413 6f207472 rightsextension!_pmatherr  (rightsextension+0x207320)
0030d417 616d2066 0x6f207472
0030d41b 6e696b72 rightsextension!strrchr+0x17066
0030d41f 38312067 0x6e696b72
0030d423 29736d20 0x38312067
0030d427 76612820 0x29736d20
0030d42b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x592820)
0030d42f 756d2065 0x67617265
0030d433 30203d20 imm32!_imp__RegSetValueExW  (imm32+0x2065)
0030d437 3838392e 0x30203d20
0030d43b 7563202c 0x3838392e
0030d43f 6e657272 0x7563202c
0030d443 756d2074 0x6e657272
0030d447 30203d20 imm32!_imp__RegSetValueExW  (imm32+0x2074)
0030d44b 3839392e 0x30203d20
0030d44f 69662029 0x3839392e
0030d453 696c616e node+0x6a2029
0030d457 6920657a node+0x70616e
0030d45b 6572636e node+0x24657a
0030d45f 746e656d 0x6572636e
0030d463 6d206c61 PicFace+0x1d656d
0030d467 696b7261 node+0x4246c61
0030d46b 00000000 node+0x6f7261

07f2b16b6e8673035fef2846cab48fdb_002.dmp

Top 28: total counts = 1

ChildEBP RetAddr  
04c3f43c 77086d46 ntdll!RtlpSubSegmentInitialize+0xea
04c3f4d8 770860ae ntdll!RtlpAllocateHeapInternal+0xc86
04c3f4ec 04c3f500 ntdll!RtlAllocateHeap+0x3e
WARNING: Frame IP not in any known module. Following frames may be wrong.
04c3f4fc 00000000 0x4c3f500

6cc94d63729ad98de3899c5f7fc25539_000.dmp

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030f274 6b2f8cc5 node+0x12ae60a
0030f314 68fb3961 node+0x2a18cc5
0030f388 69ba89e6 node+0x6d3961
0030f454 69ba875e node+0x12c89e6
0030f4b0 69b80ec3 node+0x12c875e
0030f4ec 69b80acb node+0x12a0ec3
0030f52c 69b923d2 node+0x12a0acb
0030f574 69b922e2 node+0x12b23d2
0030f5b8 68fabd42 node+0x12b22e2
0030f5e0 68fad47d node+0x6cbd42
0030f620 68eeed6c node+0x6cd47d
0030f67c 68eef379 node+0x60ed6c
0030f6a0 68eeea8a node+0x60f379
0030f6a4 69b6a300 node+0x60ea8a
0030f6a8 00300000 node+0x128a300
0030f6ac 00000000 0x300000

57ac92d0c4693d146299eafe5a607c75_000.dmp

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fc9a8 667fdc08 node+0x2a2ee0b
010fcca7 3a383833 node+0xb2dc08
010fccab 45333330 0x3a383833
010fccaf 38333236 0x45333330
010fccb3 3835205d 0x38333236
010fccb7 34343538 0x3835205d
010fccbb 6d203736 0x34343538
010fccbf 4d203a73 0x6d203736
010fccc3 2d6b7261 0x4d203a73
010fccc7 65657773 0x2d6b7261
010fcccb 2e372070 0x65657773
010fcccf 39282037 0x2e372070
010fccd3 2029372e 0x39282037
010fccd7 37203e2d 0x2029372e
010fccdb 2820362e 0x37203e2d
010fccdf 29372e39 0x2820362e
010fcce3 2c424d20 0x29372e39
010fcce7 2e303120 0x2c424d20
010fcceb 202f2032 0x2e303120
010fccef 20302e30 0x202f2032
010fccf3 2020736d 0x20302e30
010fccf7 30202b28 0x2020736d
010fccfb 6d20322e 0x30202b28
010fccff 6e692073 0x6d20322e
010fcd03 73203320 0x6e692073
010fcd07 73706574 0x73203320
010fcd0b 6e697320 0x73706574
010fcd0f 73206563 0x6e697320
010fcd13 74726174 0x73206563
010fcd17 20666f20 windows_storage!CFileInformationFactory::SThumbnailRequest::SThumbnailRequest+0x24
010fcd1f 2c676e69 0x20666f20
010fcd23 67696220 0x2c676e69
010fcd27 74736567 node+0x19c6220
010fce03 65747320 windows_storage!CStorageFolderBase::Create+0x257
010fce27 73207473 0x65747320
010fce2b 20706574 0x73207473
010fce2f 20332e30 0x20706574
010fce33 202c736d 0x20332e30
010fce37 6c6c6177 0x202c736d
010fce3b 656d6974 0x6c6c6177
010fce3f 6e697320 0x656d6974
010fce43 73206563 0x6e697320
010fce47 74726174 0x73206563
010fce4b 20666f20 windows_storage!CFileInformationFactory::SThumbnailRequest::SThumbnailRequest+0x24
010fce53 20676e69 0x20666f20
010fce57 6d203133 0x20676e69
010fce5b 28202973 0x6d203133
010fce5f 72657661 0x28202973
010fce63 20656761 0x72657661
010fce67 3d20756d 0x20656761
010fce6b 302e3120 0x3d20756d
010fce6f 202c3030 0x302e3120
010fce73 72727563 0x202c3030
010fce77 20746e65 0x72727563
010fce7b 3d20756d 0x20746e65
010fce7f 392e3020 0x3d20756d
010fce83 20293839 0x392e3020
010fce87 616e6966 0x20293839
010fce8b 657a696c 0x616e6966
010fce8f 636e6920 0x657a696c
010fce93 656d6572 0x636e6920
010fce97 6c61746e 0x656d6572
010fce9b 72616d20 0x6c61746e
010fce9f 676e696b 0x72616d20
010fcea3 00000000 node+0x1a1696b

c260aa66a18d6b8f29be0d4bf49b7ae8_000.dmp

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002dc8c8 5fbadc08 node+0x2a2f20b
002dcbc7 203a736d node+0xb2dc08
002dcbcb 6b72614d 0x203a736d
002dcbcf 6577732d 0x6b72614d
002dcbd3 31207065 0x6577732d
002dcbd7 20342e30 0x31207065
002dcbdb 2e323128 0x20342e30
002dcbdf 2d202933 0x2e323128
002dcbe3 3031203e 0x2d202933
002dcbe7 2820332e 0x3031203e
002dcbeb 332e3231 0x2820332e
002dcbef 424d2029 0x332e3231
002dcbf3 3432202c 0x424d2029
002dcbf7 2f20332e 0x3432202c
002dcbfb 302e3020 0x2f20332e
002dcbff 20736d20 0x302e3020
002dcc03 76612820 0x20736d20
002dcc07 67617265 0x76612820
002dcc0b 756d2065 0x67617265
002dcc0f 30203d20 0x756d2065
002dcc13 3939392e 0x30203d20
002dcc17 7563202c 0x3939392e
002dcc33 79726f6d dnsapi!Dns_PrioritizeSingleRecordSet+0x107
002dcc3f 6f697461 0x79726f6d
002dcc43 4347206e cscui!__dyn_tls_init_callback  (cscui+0x57461)
002dcc47 206e6920 0x4347206e
002dcc4b 20646c6f 0x206e6920
002dcc4f 63617073 0x20646c6f
002dcc53 65722065 node+0x4597073
002dcc57 73657571 0x65722065
002dcc5b 0a646574 0x73657571
002dcc5f 3132325b 0xa646574
002dcc63 30303a36 0x3132325b
002dcc67 42433239 0x30303a36
002dcc6b 205d3839 0x42433239
002dcc6f 30373432 0x205d3839
002dcc73 38353530 0x30373432
002dcc77 736d2032 0x38353530
002dcc7b 614d203a 0x736d2032
002dcc7f 732d6b72 node+0x245203a
002dcc83 70656577 0x732d6b72
002dcc87 2e303120 0x70656577
002dcc8b 31282039 0x2e303120
002dcc8f 29332e32 0x31282039
002dcc93 203e2d20 0x29332e32
002dcc97 332e3031 0x203e2d20
002dcc9b 32312820 0x332e3031
002dcc9f 2029332e 0x32312820
002dcca3 202c424d 0x2029332e
002dcca7 302e3331 0x202c424d
002dccab 30202f20 0x302e3331
002dccaf 6d20302e 0x30202f20
002dccb3 28202073 0x6d20302e
002dccb7 72657661 0x28202073
002dccbb 20656761 0x72657661
002dccbf 3d20756d 0x20656761
002dccc3 302e3120 0x3d20756d
002dccc7 202c3030 0x302e3120
002dcccb 72727563 0x202c3030
002dcccf 20746e65 0x72727563
002dccd3 3d20756d 0x20746e65
002dccd7 302e3120 0x3d20756d
002dccdb 20293030 0x302e3120
002dccdf 20776f6c 0x20293030
002dcce3 6f6d656d 0x20776f6c
002dcce7 6e207972 EhStorShell!__dyn_tls_init_callback  (EhStorShell+0x2656d)
6f6d656d 00000000 mscms!CReverseInterpolater::BasicNewtonSolve+0x24d

6a2b4f396f89d98418fff4b870828e47_000.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003bf6a4 69ad8d6c node+0x12ae60a
003bf714 67793961 node+0x2a18d6c
003bf788 683889e6 node+0x6d3961
003bf854 6838875e node+0x12c89e6
003bf8b0 68360ec3 node+0x12c875e
003bf8ec 68360acb node+0x12a0ec3
003bf92c 683723d2 node+0x12a0acb
003bf974 683722e2 node+0x12b23d2
003bf9b8 6778bd42 node+0x12b22e2
003bf9e0 6778d47d node+0x6cbd42
003bfa20 676ced6c node+0x6cd47d
003bfa7c 676cf379 node+0x60ed6c
003bfaa0 676cea8a node+0x60f379
003bfaa4 6834a300 node+0x60ea8a
003bfaa8 003b0000 node+0x128a300
003bfaac 00000000 0x3b0000

5161fb891df4e738170661c5919b5be6_000.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004cf6e4 57278d6c node+0x12ae60a
004cf74c 54f33961 node+0x2a18d6c
004cf7c0 55b289e6 node+0x6d3961
004cf88c 55b2875e node+0x12c89e6
004cf8e8 55b00ec3 node+0x12c875e
004cf924 55b00acb node+0x12a0ec3
004cf964 55b123d2 node+0x12a0acb
004cf9ac 55b122e2 node+0x12b23d2
004cf9f0 54f2bd42 node+0x12b22e2
004cfa18 54f2d47d node+0x6cbd42
004cfa58 54e6ed6c node+0x6cd47d
004cfab4 54e6f379 node+0x60ed6c
004cfad8 54e6ea8a node+0x60f379
004cfadc 55aea300 node+0x60ea8a
004cfae0 004c0000 node+0x128a300
004cfae4 00000000 0x4c0000

14341b7b0b2f916cf9169f2b9ae52954_000.dmp

Top 34: total counts = 1

ChildEBP RetAddr  
0429f608 6b33e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0429f6e4 6b3889d7 node+0x12ae87c
0429f6e8 000208dc node+0x12f89d7
0429f6ec 00b6ab08 0x208dc
0429f6f0 00000000 0xb6ab08

151f70829642609b5377baf820d05a94_000.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
052af108 7a8ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
052af148 7a8f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
052af398 7a8f12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
052bf9e0 7a8ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
052bfa58 7a927f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
052bfc2c 75fe5d49 rightsmanager!RM_AutorunScan+0x176
052bfc3c 7716cf0b kernel32!BaseThreadInitThunk+0x19
052bfc94 7716ce91 ntdll!__RtlUserThreadStart+0x2b
052bfca4 00000000 ntdll!_RtlUserThreadStart+0x1b

0b05127568c8eecf1208df3262076dd5_000.dmp

Top 36: total counts = 1

055cfea4 6e56e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
055cfeac 6e56e8c1 node+0x2f3e6e0
055cfeb0 0825c25c node+0x2f3e8c1
055cfeb4 6e56e7dd 0x825c25c
055cfeb8 0038e6a4 node+0x2f3e7dd
055cfebc 00000000 0x38e6a4

45338c87565dafb485f0b8437ede1a3c_000.dmp

Top 37: total counts = 1

ChildEBP RetAddr  
0106f1f8 0889e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0106f238 088a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0106f488 088a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0107fad0 0889e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0107fb48 088d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0107fd1c 759e8744 rightsmanager!RM_AutorunScan+0x176
0107fd30 77b558ed kernel32!BaseThreadInitThunk+0x24
0107fd78 77b558bd ntdll!__RtlUserThreadStart+0x2f
0107fd88 00000000 ntdll!_RtlUserThreadStart+0x1b

3f0883e0c2d7037ecfc78d25bc1a52c1_000.dmp

Top 38: total counts = 1

ChildEBP RetAddr  
1702fbdc 7779ec8c ntdll!RtlpUnWaitCriticalSection+0x41
1702fbf4 0b946e46 ntdll!RtlLeaveCriticalSection+0x51
1702fc00 0b943576 rightsextension!_Mtxunlock+0xc
1702fc08 0b944dcb rightsextension!_Unlock_at_thread_exit_mutex+0xa
1702fc24 0b8e917f rightsextension!_Cnd_do_broadcast_at_thread_exit+0xa5
1702fc44 0b8e8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8f
1702fc4c 0b9f864a rightsextension!std::_Pad::_Call_func+0xa
1702fc84 74ee343d rightsextension!thread_start+0x58
1702fc90 77789812 kernel32!BaseThreadInitThunk+0xe
1702fcd0 777897e5 ntdll!__RtlUserThreadStart+0x70
1702fce8 00000000 ntdll!_RtlUserThreadStart+0x1b

f3659f5098c502655b3f1a7a5553fd5b_000.dmp

Top 39: total counts = 1

ChildEBP RetAddr  
09fdef48 0dcee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
09fdef88 0dcf738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
09fdf1d8 0dcf12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
09fef820 0dcee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
09fef898 0dd27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
09fefa6c 762e344d rightsmanager!RM_AutorunScan+0x176
09fefa78 773b9802 kernel32!BaseThreadInitThunk+0xe
09fefab8 773b97d5 ntdll!__RtlUserThreadStart+0x70
09fefad0 00000000 ntdll!_RtlUserThreadStart+0x1b

2147072a12aba90ad30a33ff53a7fd2d_000.dmp

Top 40: total counts = 1

ChildEBP RetAddr  
00efe624 00efe700 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efe638 00efe648 0xefe700
00efe63c 00000000 0xefe648

5dbacab7936d55f62dfaa2120abf10f5_000.dmp

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0020c3d8 62c0dc08 node+0x2a2ee0b
0020c6d7 74732033 node+0xb2dc08
0020c6db 20737065 0x74732033
0020c6df 636e6973 0x20737065
0020c6e3 74732065 node+0x1606973
0020c6e7 20747261 0x74732065
0020c6eb 6d20666f 0x20747261
0020c6ef 696b7261 0x6d20666f
0020c6f3 202c676e 0x696b7261
0020c6f7 67676962 0x202c676e
0020c6fb 20747365 0x67676962
0020c6ff 70657473 0x20747365
0020c703 342e3020 0x70657473
0020c707 2c736d20 0x342e3020
0020c70b 6c617720 0x2c736d20
0020c70f 6d69746c 0x6c617720
0020c713 69732065 0x6d69746c
0020c717 2065636e 0x69732065
0020c71b 72617473 0x2065636e
0020c71f 666f2074 0x72617473
0020c723 72616d20 node+0x4612074
0020c727 676e696b 0x72616d20
0020c72b 20323120 0x676e696b
0020c72f 2029736d 0x20323120
0020c733 65766128 0x2029736d
0020c737 65676172 node+0x3686128
0020c73b 20756d20 node+0x3596172
0020c73f 2e31203d 0x20756d20
0020c743 2c303030 0x2e31203d
0020c747 72756320 0x2c303030
0020c74b 746e6572 0x72756320
0020c74f 20756d20 0x746e6572
0020c753 2e30203d 0x20756d20
0020c757 29383939 0x2e30203d
0020c75b 6e696620 0x29383939
0020c75f 7a696c61 0x6e696620
0020c763 6e692065 0x7a696c61
0020c767 6d657263 0x6e692065
0020c76b 61746e65 0x6d657263
0020c76f 616d206c 0x61746e65
0020c773 335b6b72 0x616d206c
0020c777 3a303438 0x335b6b72
0020c77b 44433030 0x3a303438
0020c77f 38303644 0x44433030
0020c783 3831205d 0x38303644
0020c787 36333637 0x3831205d
0020c78b 20333939 0x36333637
0020c78f 203a736d 0x20333939
0020c793 6b72614d 0x203a736d
0020c797 6577732d 0x6b72614d
0020c79b 37207065 node+0x369732d
0020c79f 2820372e 0x37207065
0020c7a3 302e3031 0x2820372e
0020c7a7 3e2d2029 0x302e3031
0020c7ab 372e3720 0x3e2d2029
0020c7af 30312820 0x372e3720
0020c7b3 2029302e 0x30312820
0020c7b7 202c424d 0x2029302e
0020c7bb 20392e36 0x202c424d
0020c7bf 2e30202f 0x20392e36
0020c7c3 736d2030 0x2e30202f
0020c7c7 61282020 0x736d2030
0020c7cb 61726576 0x61282020
0020c7cf 6d206567 0x61726576
0020c7d3 203d2075 0x6d206567
0020c7d7 30302e31 0x203d2075
0020c7db 63202c30 0x30302e31
0020c7df 65727275 node+0x1122c30
0020c7e3 6d20746e node+0x3647275
0020c7e7 203d2075 0x6d20746e
0020c7eb 39392e30 0x203d2075
0020c7ef 6c202939 0x39392e30
0020c7f3 6d20776f 0x6c202939
0020c7f7 726f6d65 0x6d20776f
0020c7fb 6f6e2079 0x726f6d65
0020c7ff 69666974 0x6f6e2079
0020c803 69746163 0x69666974
0020c807 47206e6f 0x69746163
0020c80b 6e692043 0x47206e6f
0020c80f 646c6f20 0x6e692043
0020c813 61707320 node+0x25e6f20
0020c817 72206563 0x61707320
0020c81b 65757165 0x72206563
0020c81f 64657473 node+0x3677165
0020c823 38335b0a node+0x2577473
0020c827 303a3034 0x38335b0a
0020c82b 44444330 0x303a3034
0020c82f 5d383036 0x44444330
0020c833 37383120 0x5d383036
0020c837 30373336 0x37383120
0020c83b 6d203130 0x30373336
0020c83f 4d203a73 0x6d203130
0020c843 2d6b7261 0x4d203a73
0020c847 65657773 0x2d6b7261
0020c84b 2e372070 node+0x3577773
0020c84f 31282037 0x2e372070
0020c853 29302e30 0x31282037
0020c857 203e2d20 0x29302e30
0020c85b 20372e37 0x203e2d20
0020c85f 2e303128 0x20372e37
0020c863 4d202930 0x2e303128
0020c867 37202c42 0x4d202930
0020c86b 2f20382e 0x37202c42
0020c86f 302e3020 0x2f20382e
0020c873 20736d20 0x302e3020
0020c877 76612820 0x20736d20
0020c87b 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa12820)
0020c87f 756d2065 0x67617265
0020c9f3 00000000 wininet!HTTP_REQUEST_HANDLE_OBJECT::OpenConnection_Fsm+0x9d9

28cb6a4dcd6c6cc429c585439a301191_002.dmp

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f8e3d0 050ad928 node+0xfa8397
00f8e3d4 00f8e44c 0x50ad928
00f8e3d8 050ad928 0xf8e44c
00f8e4d8 77aa5e0e 0x50ad928
00f8e4e4 00000000 ntdll!RtlAllocateHeap+0x3e

a92868f9e9a7b9283c911df7eb5cc415_000.dmp

Top 43: total counts = 1

ChildEBP RetAddr  
05fbf27c 79f791a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05fbf2a8 79f751c9 rightsmanager!AutorunItem::AutorunItem+0x34
05fbf8c0 79f73ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0x1269
05fbfad0 79f6e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
05fbfb48 79fa7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
05fbfd1c 762a7ba9 rightsmanager!RM_AutorunScan+0x176
05fbfd2c 778bc36b kernel32!BaseThreadInitThunk+0x19
05fbfd84 778bc2ef ntdll!__RtlUserThreadStart+0x2b
05fbfd94 00000000 ntdll!_RtlUserThreadStart+0x1b

c5946f71176edea7a349ff779b8a846e_000.dmp

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfcd08 6890dc08 node+0x2a2ee0b
00cfd007 3a323131 node+0xb2dc08
00cfd00b 32453230 0x3a323131
00cfd00f 38323736 0x32453230
00cfd013 3520205d 0x38323736
00cfd017 34373537 0x3520205d
00cfd01b 6d203337 0x34373537
00cfd01f 4d203a73 0x6d203337
00cfd023 2d6b7261 0x4d203a73
00cfd027 65657773 0x2d6b7261
00cfd02b 2e372070 0x65657773
00cfd02f 31282037 0x2e372070
00cfd033 29302e30 0x31282037
00cfd037 203e2d20 0x29302e30
00cfd03b 20362e37 0x203e2d20
00cfd03f 2e303128 0x20362e37
00cfd043 4d202930 0x2e303128
00cfd047 33202c42 0x4d202930
00cfd04b 2f20342e 0x33202c42
00cfd04f 302e3020 0x2f20342e
00cfd053 20736d20 0x302e3020
00cfd057 202b2820 0x20736d20
00cfd05b 20332e30 0x202b2820
00cfd05f 6920736d 0x20332e30
00cfd063 2034206e node+0x142736d
00cfd067 70657473 0x2034206e
00cfd06b 69732073 0x70657473
00cfd06f 2065636e node+0x1952073
00cfd073 72617473 0x2065636e
00cfd173 74726174 winhttp!ReadProxySettingsInternal+0x2b3
00cfd177 20666f20 windows_storage!GetSelectionStateFromItemArray+0x4
00cfd17f 2c676e69 0x20666f20
00cfd183 67696220 0x2c676e69
00cfd187 74736567 0x67696220
00cfd1cb 30203d20 windows_storage!Windows::Foundation::Collections::Internal::Vector,Windows::Foundation::Collections::Internal::DefaultLifetimeTraits,Windows::Foundation::Collections::Internal::VectorOptions >::GetMany+0x1e7
00cfd1e3 3839392e 0x30203d20
00cfd1e7 69662029 0x3839392e
00cfd1eb 696c616e node+0x1882029
00cfd1ef 6920657a node+0x18e616e
00cfd1f3 6572636e node+0x142657a
00cfd1f7 746e656d 0x6572636e
00cfd21f 00000000 windows_storage!CFSFolder::_GetSMBSharePermissions+0xa1

112a94af2c5daaa23936168937767bb9_000.dmp

Top 45: total counts = 1

ChildEBP RetAddr  
00afe9bc 7750d6ee KERNELBASE!RaiseException+0x62
00afe9c8 00000000 ntdll!RtlpAllocateHeapInternal+0x105e

9dcd0a8539ea4e7f9b3a24d6c7708b61_000.dmp

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd

7b507dbfff24f31ae62c61817778074f_000.dmp

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001bc970 6acddc08 node+0x2a2f20b
001bcc6f 203a736d node+0xb2dc08
001bcc73 6b72614d 0x203a736d
001bcc77 6577732d node+0x157614d
001bcc7b 31207065 0x6577732d
001bcc7f 20342e30 0x31207065
001bcc83 2e323128 0x20342e30
001bcc87 2d202933 0x2e323128
001bcc8b 3031203e 0x2d202933
001bcc8f 2820342e 0x3031203e
001bcc93 332e3231 0x2820342e
001bcc97 424d2029 0x332e3231
001bcc9b 3531202c 0x424d2029
001bcc9f 2f20312e 0x3531202c
001bcca3 302e3020 0x2f20312e
001bcca7 20736d20 0x302e3020
001bccab 76612820 0x20736d20
001bccbb 3939392e shell32!GenRandomFileName+0x39
001bccc7 756d2074 0x3939392e
001bcf23 00000000 msvcrt!_wfindfirst64+0x7f

aff05fd5f6522b7dae71c352cb6404b0_000.dmp

Top 48: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff0f4 696a8cc5 node+0x12ae60a
012ff194 67363961 node+0x2a18cc5
012ff208 67f589e6 node+0x6d3961
012ff2d4 67f5875e node+0x12c89e6
012ff330 67f30ec3 node+0x12c875e
012ff36c 67f30acb node+0x12a0ec3
012ff3ac 67f423d2 node+0x12a0acb
012ff3f4 67f422e2 node+0x12b23d2
012ff438 6735bd42 node+0x12b22e2
012ff460 6735d47d node+0x6cbd42
012ff4a0 6729ed6c node+0x6cd47d
012ff4fc 6729f379 node+0x60ed6c
012ff520 6729ea8a node+0x60f379
012ff5b8 770f60ae node+0x60ea8a
012ff66c 770f3ee6 ntdll!RtlAllocateHeap+0x3e
012ff684 72662d00 ntdll!RtlFreeHeap+0x46
012ff694 00000000 d3d11!ext-ms-win-rtcore-ntuser-dc-access-l1-1-0_NULL_THUNK_DATA_DLA  (d3d11+0x1c2d00)

0bbfc68fdc4df440bf14a0a0181aeb34_000.dmp

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
03c7f700 604a573b node+0x12f5973
03c7f704 00000000 node+0x12f573b

6a3d2dcf2e58045188064b6c49b1deb4_000.dmp

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522427

4f4f5422d5707e9c6128dd4195a68152_000.dmp