Analyzed 90 dump

Top 1: total counts = 14

0a12fc7c 502eaeed rightsmanager!RM_AutorunScan+0x176
0a12fd78 7754ef1c ffi_bindings!ffi_call_win32+0x11
0a12fd84 77643648 kernel32!BaseThreadInitThunk+0xe
0a12fdc4 7764361b ntdll!__RtlUserThreadStart+0x70
0a12fddc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 10

05effbe4 673eaeed rightsmanager!RM_AutorunScan+0x176
05effce0 75c3fa29 ffi_bindings!ffi_call_win32+0x11
05effcf0 77da7bbe kernel32!BaseThreadInitThunk+0x19
05effd4c 77da7b8e ntdll!__RtlUserThreadStart+0x2f
05effd5c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 7

ChildEBP RetAddr  
059ef220 0b3be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
059ef260 0b3c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
059ef4b0 0b3c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
059ffaf8 0b3be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
059ffb70 0b3f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
059ffd44 7791fcc9 rightsmanager!RM_AutorunScan+0x176
059ffd54 77dd82ae kernel32!BaseThreadInitThunk+0x19
059ffdb0 77dd827e ntdll!__RtlUserThreadStart+0x2f
059ffdc0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 6

0584fc5c 7984aeed rightsmanager!RM_AutorunScan+0x176
0584fd58 76175d49 ffi_bindings!ffi_call_win32+0x11
0584fd68 76eed03b kernel32!BaseThreadInitThunk+0x19
0584fdc0 76eecfc1 ntdll!__RtlUserThreadStart+0x2b
0584fdd0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 6

ChildEBP RetAddr  
051fef58 79c5e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
051fef98 79c6738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
051ff1e8 79c612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0520f830 79c5e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0520f8a8 79c97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0520fa7c 75f75d49 rightsmanager!RM_AutorunScan+0x176
0520fa8c 7754d03b kernel32!BaseThreadInitThunk+0x19
0520fae4 7754cfc1 ntdll!__RtlUserThreadStart+0x2b
0520faf4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 4

ChildEBP RetAddr  
05aeec70 0f15e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05aeecb0 0f16738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05aeef00 0f1612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05aff548 0f15e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05aff5c0 0f197f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05aff794 774d343d rightsmanager!RM_AutorunScan+0x176
05aff7a0 779e9802 kernel32!BaseThreadInitThunk+0xe
05aff7e0 779e97d5 ntdll!__RtlUserThreadStart+0x70
05aff7f8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0093f584 70a88cc5 node+0x12ae60a
0093f624 6e743961 node+0x2a18cc5
0093f698 6f3389e6 node+0x6d3961
0093f764 6f33875e node+0x12c89e6
0093f7c0 6f310ec3 node+0x12c875e
0093f7fc 6f310acb node+0x12a0ec3
0093f83c 6f3223d2 node+0x12a0acb
0093f884 6f3222e2 node+0x12b23d2
0093f8c8 6e73bd42 node+0x12b22e2
0093f8f0 6e73d47d node+0x6cbd42
0093f930 6e67ed6c node+0x6cd47d
0093f98c 6e67f379 node+0x60ed6c
0093f9b0 6e67ea8a node+0x60f379
0093fa48 77bdd6de node+0x60ea8a
0093fa54 00000000 ntdll!RtlAllocateHeap+0x3e

Top 8: total counts = 2

ChildEBP RetAddr  
05caf2a0 7c0de731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05caf2e0 7c0e738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05caf530 7c0e12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05cbfb78 7c0de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05cbfbf0 7c117f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05cbfdc4 7747fcc9 rightsmanager!RM_AutorunScan+0x176
05cbfdd4 779e82ae kernel32!BaseThreadInitThunk+0x19
05cbfe30 779e827e ntdll!__RtlUserThreadStart+0x2f
05cbfe40 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 2

ChildEBP RetAddr  
00d1f3cc 7b5e91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
00d1f3f8 7b5e1b3e rightsmanager!AutorunItem::AutorunItem+0x34
00d2fa40 7b5de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
00d2fab8 7b617f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
00d2fc8c 7782fcc9 rightsmanager!RM_AutorunScan+0x176
00d2fc9c 77ac82ae kernel32!BaseThreadInitThunk+0x19
00d2fcf8 77ac827e ntdll!__RtlUserThreadStart+0x2f
00d2fd08 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 2

ChildEBP RetAddr  
077aed78 7c4ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
077aedb8 7c4b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
077af008 7c4b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
077bf650 7c4ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
077bf6c8 7c4e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
077bf89c 76335d49 rightsmanager!RM_AutorunScan+0x176
077bf8ac 7773d03b kernel32!BaseThreadInitThunk+0x19
077bf904 7773cfc1 ntdll!__RtlUserThreadStart+0x2b
077bf914 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
081ffe38 6966e8da node+0xc6bd50
081ffe90 6ab493e5 node+0xcee8da
081ffedc 7736343d node+0x21c93e5
081ffee8 77c29802 kernel32!BaseThreadInitThunk+0xe
081fff28 77c297d5 ntdll!__RtlUserThreadStart+0x70
081fff40 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001af170 77b5299d node+0xc8fac5
001af17c 00ed1000 ntdll!RtlQueryPerformanceCounter+0x45
001af184 6f0e95e5 0xed1000
001af1b4 6f0e95ae node+0x2a095e5
001af1d0 41643863 node+0x2a095ae
001af1d4 00000000 0x41643863

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003af2d4 12748d6c node+0x12ae60a
003af33c 10403961 node+0x2a18d6c
003af3b0 10ff89e6 node+0x6d3961
003af47c 10ff875e node+0x12c89e6
003af4d8 10fd0ec3 node+0x12c875e
003af514 10fd0acb node+0x12a0ec3
003af554 10fe23d2 node+0x12a0acb
003af59c 10fe22e2 node+0x12b23d2
003af5e0 103fbd42 node+0x12b22e2
003af608 103fd47d node+0x6cbd42
003af648 1033ed6c node+0x6cd47d
003af6a4 1033f379 node+0x60ed6c
003af6c8 1033ea8a node+0x60f379
003af6cc 10fba300 node+0x60ea8a
003af6d0 003a0000 node+0x128a300
003af6d4 00000000 0x3a0000

Top 14: total counts = 1

ChildEBP RetAddr  
0025f390 77b46396 ntdll!RtlpFreeHeap+0x49e
0025f3b0 76b7c5d4 ntdll!RtlFreeHeap+0x142
0025f3c4 737b721d kernel32!HeapFree+0x14
0025f3d8 737b88fa GdiPlus!GpFree+0x1c
0025f3ec 737e9379 GdiPlus!GpFontFamilyList::DeleteList+0x23
0025f3f8 737e974b GdiPlus!GpFontFamilyList::`scalar deleting destructor'+0xd
0025f404 737e9d0a GdiPlus!GpFontTable::~GpFontTable+0x13
0025f410 737e9d3b GdiPlus!GpFontTable::`scalar deleting destructor'+0xd
0025f41c 737e9e86 GdiPlus!GpInstalledFontCollection::~GpInstalledFontCollection+0x19
0025f428 737c9e4d GdiPlus!GpInstalledFontCollection::`scalar deleting destructor'+0xd
0025f43c 7379570f GdiPlus!InternalGdiplusShutdown+0x1d4
0025f448 0c5648be GdiPlus!GdiplusShutdown+0x2c
0025f468 0c578ac3 rightsmanager!Assoc::~Assoc+0x2e
0025f480 0c5dd53f rightsmanager!std::default_delete::operator()+0x83
0025f488 0c5c2eda rightsmanager!`dynamic atexit destructor for 'RightsManager_''+0xf
0025f4b0 0c5c2c9e rightsmanager!::operator()+0x77
0025f4e4 0c5c2f80 rightsmanager!__crt_seh_guarded_call::operator()<, &, >+0x27
0025f508 0c5c24d8 rightsmanager!_execute_onexit_table+0x2b
0025f53c 0c5c244b rightsmanager!::operator()+0x6d
0025f56c 0c5c25a1 rightsmanager!__crt_seh_guarded_call::operator()<, &, >+0x23
0025f598 0c5c26a8 rightsmanager!common_exit+0x53
0025f5a8 0c596e10 rightsmanager!_cexit+0xb
0025f5dc 0c596cc8 rightsmanager!dllmain_crt_process_detach+0x39
0025f5e8 0c596f18 rightsmanager!dllmain_crt_dispatch+0x4e
0025f628 0c596fb6 rightsmanager!dllmain_dispatch+0xaf
0025f63c 77b487cc rightsmanager!_DllMainCRTStartup+0x1c
0025f65c 77b4df0a ntdll!LdrpCallInitRoutine+0x14
0025f700 77b4dfa5 ntdll!LdrShutdownProcess+0x1aa
0025f714 76b8be9e ntdll!RtlExitUserProcess+0x74
0025f7c0 76b7ef6c kernel32!ExitProcessStub+0x12
0025f7cc 77b53618 kernel32!BaseThreadInitThunk+0xe
0025f80c 77b535eb ntdll!__RtlUserThreadStart+0x70
0025f824 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 15: total counts = 1

ChildEBP RetAddr  
0a2af030 51a7e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0a2af070 51a8738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0a2af2c0 51a84ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0a2af8d8 51a83ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
0a2afae8 51a7e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
0a2afb60 51ab7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
0a2afd34 75ae343d rightsmanager!RM_AutorunScan+0x176
0a2afd40 779b9812 kernel32!BaseThreadInitThunk+0xe
0a2afd80 779b97e5 ntdll!__RtlUserThreadStart+0x70
0a2afd98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0037f5b4 706a8d6c node+0x12ae60a
0037f624 6e363961 node+0x2a18d6c
0037f698 6ef589e6 node+0x6d3961
0037f764 6ef5875e node+0x12c89e6
0037f7c0 6ef30ec3 node+0x12c875e
0037f7fc 6ef30acb node+0x12a0ec3
0037f83c 6ef423d2 node+0x12a0acb
0037f884 6ef422e2 node+0x12b23d2
0037f8c8 6e35bd42 node+0x12b22e2
0037f8f0 6e35d47d node+0x6cbd42
0037f930 6e29ed6c node+0x6cd47d
0037f98c 6e29f379 node+0x60ed6c
0037f9b0 6e29ea8a node+0x60f379
0037f9b4 6ef1a300 node+0x60ea8a
0037f9b8 00370000 node+0x128a300
0037f9bc 00000000 0x370000

Top 17: total counts = 1

ChildEBP RetAddr  
1b66f970 79d753e7 rightsextension!DuiLib::CPaintManagerUI::MessageHandler+0x89d
1b66f998 79d723dd rightsextension!DuiLib::WindowImplBase::HandleMessage+0x265
1b66f9b8 76a60deb rightsextension!DuiLib::CWindowWnd::__WndProc+0x38
1b66f9e4 76a57daa user32!_InternalCallWinProc+0x2b
1b66fac8 76a579aa user32!UserCallWinProcCheckWow+0x33a
1b66fb2c 76a5b56f user32!DispatchClientMessage+0xea
1b66fb68 772e4e7d user32!__fnDWORD+0x3f
1b66fba0 76a55ab1 ntdll!KiUserCallbackDispatcher+0x4d
1b66fbfc 76a558e0 user32!DispatchMessageWorker+0x1c1
1b66fc08 79d6e862 user32!DispatchMessageW+0x10
1b66fc34 79cfd321 rightsextension!DuiLib::CPaintManagerUI::MessageLoop+0x37
1b66fd3c 79cff054 rightsextension!Rights::CCloudPopWindow::PopSingleWindow+0x431
1b66fd74 79cda3ca rightsextension!std::_LaunchPad >,std::default_delete > > > >::_Go+0xc4
1b66fd7c 79def16a rightsextension!std::_Pad::_Call_func+0xa
1b66fdb4 75dbfa29 rightsextension!thread_start+0x58
1b66fdc4 772d7a7e kernel32!BaseThreadInitThunk+0x19
1b66fe20 772d7a4e ntdll!__RtlUserThreadStart+0x2f
1b66fe30 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0020cd20 0fc3dc08 node+0x2a2f20b
0020d0af 75716572 node+0xb2dc08
0020d11b 2e31203d shell32!CFolderMenu::_InsertCommandToMenu+0x2f1
0020d14f 20434720 0x2e31203d
0020d153 6f206e69 0x20434720
0020d157 7320646c 0x6f206e69
0020d15b 65636170 0x7320646c
0020d15f 7165721f 0x65636170
0020d163 74736575 comctl32!DirectUI::DUIXmlParser::ParseLiteralColorInt+0x21
0020d16f 30303a30 0x74736575
0020d173 32434442 0x30303a30
0020d177 205d3046 0x32434442
0020d17b 30373134 0x205d3046
0020d17f 35303731 0x30373134
0020d183 3a736d20 0x35303731
0020d187 72614d20 0x3a736d20
0020d18b 77732d6b 0x72614d20
0020d19f 31203e2d crypt32!Asn1RC2CBCParametersEncodeEx+0x2f
0020d1bf 76612820 0x31203e2d
0020d41b 00000000 kernel32!PEWriteResource<_IMAGE_NT_HEADERS>+0x11f9

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ae668 6e445035 node+0xc247b0
003ae6dc 6e448d4b node+0xff5035
003ae8a8 18683e01 node+0xff8d4b
003ae8ac 2f2dbaa1 0x18683e01
003ae8b0 00000000 0x2f2dbaa1

Top 20: total counts = 1

0656f854 68b5e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0656f85c 68b5e8c1 node+0x2f3e6e0
0656f860 0bfe598c node+0x2f3e8c1
0656f864 68b5e7dd 0xbfe598c
0656f868 0041e83c node+0x2f3e7dd
0656f86c 00000000 0x41e83c

Top 21: total counts = 1

00dff8a0 00c2266c node+0x111f
00dff8ec 76825d49 PCManage+0x266c
00dff8fc 771cd03b kernel32!BaseThreadInitThunk+0x19
00dff954 771ccfc1 ntdll!__RtlUserThreadStart+0x2b
00dff964 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 22: total counts = 1

008fcb7f 75716572 0x20656361
008fcb83 65747365 360Base+0xa6572
008fcb87 355b0a64 0x65747365
008fcb8b 3a343630 0x355b0a64
008fcb8f 41443030 0x3a343630
008fcb93 30343242 0x41443030
008fcb97 3031205d 0x30343242
008fcb9b 33313231 0x3031205d
008fcb9f 20373139 0x33313231
008fcba3 203a736d 0x20373139
008fcba7 6b72614d 0x203a736d
008fcbab 6577732d node+0x3f5614d
008fcbaf 31207065 0x6577732d
008fcbb3 20392e30 0x31207065
008fcbb7 2e323128 0x20392e30
008fcbbb 2d202933 0x2e323128
008fcbbf 3031203e 0x2d202933
008fcbc3 2820342e 0x3031203e
008fcbc7 332e3231 0x2820342e
008fcbcb 424d2029 0x332e3231
008fcbcf 2e38202c 0x424d2029
008fcbd3 202f2030 0x2e38202c
008fcbd7 20302e30 0x202f2030
008fcbdb 2020736d 0x20302e30
008fcbdf 65766128 0x2020736d
008fcbe3 65676172 0x65766128
008fcbe7 20756d20 0x65676172
008fcbeb 2e31203d 0x20756d20
008fcbef 2c303030 0x2e31203d
008fcbf3 72756320 0x2c303030
008fcbf7 746e6572 0x72756320
008fcc1f 20434720 windows_storage!CBaseOperation::_ChangeNotify+0x38
008fcc2f 71657220 0x20434720
008fcc33 74736575 0x71657220
008fce77 00000000 windows_storage!CFSFolder::_DiscoverLocalizedName+0xf5

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ff194 70798d6c node+0x12ae60a
004ff204 6e453961 node+0x2a18d6c
004ff278 6f0489e6 node+0x6d3961
004ff344 6f04875e node+0x12c89e6
004ff3a0 6f020ec3 node+0x12c875e
004ff3dc 6f020acb node+0x12a0ec3
004ff41c 6f0323d2 node+0x12a0acb
004ff464 6f0322e2 node+0x12b23d2
004ff4a8 6e44bd42 node+0x12b22e2
004ff4d0 6e44d47d node+0x6cbd42
004ff510 6e38ed6c node+0x6cd47d
004ff56c 6e38f379 node+0x60ed6c
004ff590 6e38ea8a node+0x60f379
004ff594 6f00a300 node+0x60ea8a
004ff598 004f0000 node+0x128a300
004ff59c 00000000 0x4f0000

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030c968 6f7ddc08 node+0x2a2f20b
0030cc67 736d2037 node+0xb2dc08
0030cc6b 614d203a tiptsf!__dyn_tls_init_callback  (tiptsf+0x42037)
0030cc6f 732d6b72 0x614d203a
0030cc73 70656577 node+0x4626b72
0030cc77 2e303120 node+0x19a6577
0030cc7b 31282033 0x2e303120
0030cc7f 29332e32 0x31282033
0030cc83 203e2d20 0x29332e32
0030cc87 332e3031 0x203e2d20
0030cc8b 32312820 0x332e3031
0030cc8f 2029332e 0x32312820
0030cc93 202c424d 0x2029332e
0030cc97 392e3631 0x202c424d
0030cc9b 30202f20 0x392e3631
0030cc9f 6d20302e 0x30202f20
0030cca3 28202073 0x6d20302e
0030cca7 72657661 0x28202073
0030ccab 20656761 node+0x39a7661
0030ccaf 3d20756d 0x20656761
0030ccb3 392e3020 0x3d20756d
0030ccb7 202c3939 0x392e3020
0030ccbb 72727563 0x202c3939
0030ccbf 20746e65 node+0x3a77563
0030ccc3 3d20756d 0x20746e65
0030ccc7 302e3020 0x3d20756d
0030cccb 20293330 0x302e3020
0030cccf 20776f6c 0x20293330
0030ccd3 6f6d656d 0x20776f6c
0030ccd7 6e207972 node+0xa2656d
0030ccdb 6669746f 0x6e207972
0030ccdf 74616369 0x6669746f
0030cdcb 203a736d WindowsCodecs!CMetadataIPTCReaderWriter::CalculateIPTCHash+0x134
0030cdd3 6577732d 0x203a736d
0030cdd7 31207065 0x6577732d
0030cddb 20332e30 0x31207065
0030cddf 2e323128 0x20332e30
0030cde3 2d202933 0x2e323128
0030cde7 3031203e 0x2d202933
0030cdeb 2820332e 0x3031203e
0030cdef 332e3231 0x2820332e
0030cdf3 424d2029 0x332e3231
0030cdf7 3631202c 0x424d2029
0030cdfb 2f20382e 0x3631202c
0030cdff 302e3020 0x2f20382e
0030ce03 20736d20 0x302e3020
0030ce07 76612820 0x20736d20
0030ce0b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x4f2820)
0030ce0f 756d2065 0x67617265
0030ce13 30203d20 oleaut32!$$VProc_ImageExportDirectory+0xa3d
0030ce17 3939392e 0x30203d20
0030ce1b 7563202c 0x3939392e
0030ce1f 6e657272 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xd202c)
0030cf63 00000000 rsaenh!SHATransformP3+0xf65

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
11c7f554 77574971 0x11f7e2c
11c7f584 7758f965 ntdll!RtlpFlsDataCleanup+0xa8
11c7f628 775abd0c ntdll!LdrShutdownThread+0x35
11c7f704 773db4c4 ntdll!RtlExitUserThread+0x4c
11c7f718 76858ad1 KERNELBASE!FreeLibraryAndExitThread+0x34
11c7f728 5c7af214 kernel32!FreeLibraryAndExitThreadStub+0x11
11c7f73c 5c7af302 rightsextension!common_end_thread+0x4d
11c7f748 5c7af16f rightsextension!_endthreadex+0xd
11c7f780 7685fcc9 rightsextension!thread_start+0x5d
11c7f790 775a82ae kernel32!BaseThreadInitThunk+0x19
11c7f7ec 775a827e ntdll!__RtlUserThreadStart+0x2f
11c7f7fc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 26: total counts = 1

ChildEBP RetAddr  
001aecec 6fd52d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00baee50 6718a345 node+0x250da39
00baeea0 66a36ff4 node+0x2c5a345
00baef28 67a72d21 node+0x2506ff4
00baf050 67a72821 node+0x3542d21
00000000 00000000 node+0x3542821

Top 28: total counts = 1

0020d3f7 76612820 0x20736d20
0020d3fb 67617265 iertutil!IsStringProperty+0x23090
0020d3ff 756d2065 0x67617265
0020d403 30203d20 gdi32!MRSETPALETTEENTRIES::bCheckRecord+0x41
0020d40b 7563202c 0x30203d20
0020d40f 6e657272 urlmon!bcrypt_NULL_THUNK_DATA_DLA  (urlmon+0x10202c)
0020d413 756d2073 node+0x1f67272
0020d417 30203d20 gdi32!MRSETPALETTEENTRIES::bCheckRecord+0x4f
0020d41b 3230302e 0x30203d20
0020d41f 6f6c2029 0x3230302e
0020d423 656d2077 node+0x2fd2029
0020d427 79726f6d 0x656d2077
0020d42b 746f6e20 0x79726f6d
0020d42f 63696669 shell32!CStartMenuCacheAndAppResolver::GetBestShortcutAndAppIDForAppPath+0xe
0020d443 63617073 0x63696669
0020d447 65722065 0x63617073
0020d44b 73657571 0x65722065
0020d44f 0a646574 0x73657571
0020d453 00000000 0xa646574

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002cce00 6a07dc08 node+0x2a2f20b
002cd0ff 30333638 node+0xb2dc08
002cd103 3a736d20 0x30333638
002cd107 72614d20 0x3a736d20
002cd10b 77732d6b 0x72614d20
002cd10f 20706565 0x77732d6b
002cd113 342e3031 0x20706565
002cd117 32312820 0x342e3031
002cd11b 2029302e 0x32312820
002cd11f 31203e2d 0x2029302e
002cd123 20332e30 0x31203e2d
002cd127 2e323128 0x20332e30
002cd12b 4d202930 0x2e323128
002cd12f 36202c42 0x4d202930
002cd133 2f20322e 0x36202c42
002cd137 302e3020 0x2f20322e
002cd13b 20736d20 0x302e3020
002cd13f 76612820 0x20736d20
002cd14f 3030302e urlmon!TFlatIsoMessage::Post+0x28
002cd15f 30203d20 0x3030302e
002cd163 3530302e 0x30203d20
002cd167 6f6c2029 0x3530302e
002cd16b 656d2077 jscript!`string'+0x5
002cd16f 79726f6d 0x656d2077
002cd173 746f6e20 0x79726f6d
002cd177 63696669 0x746f6e20
002cd17b 6f697461 0x63696669
002cd197 0a646574 jscript!COleScript::RegisterNamedItem+0x80
002cd19f 32303a32 0xa646574
002cd1a3 44444339 0x32303a32
002cd1a7 205d3837 0x44444339
002cd1ab 39363039 0x205d3837
002cd1af 35323638 0x39363039
002cd1b3 3a736d20 0x35323638
002cd1b7 72614d20 0x3a736d20
002cd1bb 77732d6b 0x72614d20
002cd1bf 20706565 0x77732d6b
002cd1c3 392e3031 0x20706565
002cd1c7 32312820 0x392e3031
002cd1cb 2029302e 0x32312820
002cd1cf 31203e2d 0x2029302e
002cd1d3 20342e30 0x31203e2d
002cd1d7 2e323128 0x20342e30
002cd1db 4d202930 0x2e323128
002cd1df 36202c42 0x4d202930
002cd1e3 2f20372e 0x36202c42
002cd1e7 302e3020 0x2f20372e
002cd1eb 20736d20 0x302e3020
002cd1ef 76612820 0x20736d20
002cd1ff 3030302e urlmon!TFlatIsoMessage::Post+0x28
002cd20f 31203d20 0x3030302e
002cd213 3030302e 0x31203d20
002cd217 6f6c2029 0x3030302e
002cd21b 656d2077 jscript!`string'+0x5
002cd21f 79726f6d 0x656d2077
002cd223 746f6e20 0x79726f6d
002cd227 63696669 0x746f6e20
002cd22b 6f697461 0x63696669
002cd247 0a646574 jscript!COleScript::RegisterNamedItem+0x80
002cd24f 32303a32 0xa646574
002cd253 44444339 0x32303a32
002cd257 205d3837 0x44444339
002cd25b 39363039 0x205d3837
002cd25f 33333638 0x39363039
002cd263 3a736d20 0x33333638
002cd267 72614d20 0x3a736d20
002cd26b 77732d6b 0x72614d20
002cd26f 20706565 0x77732d6b
002cd273 342e3031 0x20706565
002cd277 32312820 0x342e3031
002cd27b 2029302e 0x32312820
002cd27f 31203e2d 0x2029302e
002cd283 20332e30 0x31203e2d
002cd287 2e323128 0x20332e30
002cd28b 4d202930 0x2e323128
002cd28f 37202c42 0x4d202930
002cd293 2f20342e 0x37202c42
002cd297 302e3020 0x2f20342e
002cd29b 20736d20 0x302e3020
002cd29f 76612820 0x20736d20
002cd2af 3030302e urlmon!TFlatIsoMessage::Post+0x28
002cd2bf 30203d20 0x3030302e
002cd2c3 3430302e 0x30203d20
002cd2c7 6f6c2029 0x3430302e
002cd2cb 656d2077 jscript!`string'+0x5
002cd2cf 79726f6d 0x656d2077
002cd2d3 746f6e20 0x79726f6d
002cd2d7 63696669 0x746f6e20
002cd2db 6f697461 0x63696669
002cd2f7 0a646574 jscript!COleScript::RegisterNamedItem+0x80
002cd2ff 00000000 0xa646574

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fcf50 6c21dc08 node+0x2a2f20b
006fd24f 614d203a node+0xb2dc08
006fd253 732d6b72 0x614d203a
006fd257 70656577 0x732d6b72
006fd25b 2e303120 0x70656577
006fd25f 31282037 0x2e303120
006fd263 29302e32 0x31282037
006fd267 203e2d20 0x29302e32
006fd26b 332e3031 0x203e2d20
006fd26f 32312820 0x332e3031
006fd273 2029302e 0x32312820
006fd373 69666974 0x2029302e
006fd377 69746163 oleacc!CPropMgr::DecomposeHmenuIdentityString+0x4
006fd38f 65757165 msvcp110_win!`string'+0x7
006fd393 64657473 0x65757165
006fd397 31345b0a 0x64657473
006fd39b 303a3239 0x31345b0a
006fd39f 37443932 0x303a3239
006fd3a3 5d384539 0x37443932
006fd3a7 30363120 0x5d384539
006fd3ab 37333631 0x30363120
006fd3af 736d2033 0x37333631
006fd3b3 614d203a urlmon!CBaseBSCB::Neutralize+0x2f0a3
006fd3b7 732d6b72 0x614d203a
006fd3bb 70656577 0x732d6b72
006fd3bf 2e303120 0x70656577
006fd3c3 31282037 0x2e303120
006fd3c7 29302e32 0x31282037
006fd3cb 203e2d20 0x29302e32
006fd3cf 322e3031 0x203e2d20
006fd3d3 32312820 0x322e3031
006fd3d7 2029302e 0x32312820
006fd3db 202c424d 0x2029302e
006fd3df 33333033 0x202c424d
006fd3e3 2f20362e 0x33333033
006fd3e7 382e3320 0x2f20362e
006fd3eb 20736d20 0x382e3320
006fd3ef 76612820 0x20736d20
006fe40b 00000000 ucrtbase!common_ftell_translated_utf8_nolock+0x117

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b3f854 71f28d6c node+0x12ae60a
00b3f8bc 6fbe3961 node+0x2a18d6c
00b3f930 707d89e6 node+0x6d3961
00b3f9fc 707d875e node+0x12c89e6
00b3fa58 707b0ec3 node+0x12c875e
00b3fa94 707b0acb node+0x12a0ec3
00b3fad4 707c23d2 node+0x12a0acb
00b3fb1c 707c22e2 node+0x12b23d2
00b3fb60 6fbdbd42 node+0x12b22e2
00b3fb88 6fbdd47d node+0x6cbd42
00b3fbc8 6fb1ed6c node+0x6cd47d
00b3fc24 6fb1f379 node+0x60ed6c
00b3fc48 6fb1ea8a node+0x60f379
00b3fce0 77495d7e node+0x60ea8a
00b3fcec 00000000 ntdll!RtlAllocateHeap+0x3e

Top 32: total counts = 1

ChildEBP RetAddr  
0af8a2dc 003567a0 msvcrt!wcsstr+0x4d
WARNING: Frame IP not in any known module. Following frames may be wrong.
0af8a310 74bca49e 0x3567a0
0af8a380 09911879 KERNELBASE!FindNextFileW+0xc9
0af8aa40 0991166d rightsextension!Utils::GetAllFileSize+0x549
0af8b104 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8b7c8 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8be8c 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8c550 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8cc14 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8d2d8 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8d99c 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8e060 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8e724 0991166d rightsextension!Utils::GetAllFileSize+0x33d
0af8ede8 09921a70 rightsextension!Utils::GetAllFileSize+0x33d
0af8f108 0991f0e2 rightsextension!AutorunMgr::GetMemory+0x490
0af8f5b8 09921426 rightsextension!AutorunMgr::EnumFolder+0x902
0af8f7bc 09921c71 rightsextension!AutorunMgr::EnumTaskScheduler+0x586
0af8f880 098e9e54 rightsextension!AutorunMgr::GetSingleAutoruns+0x151
0af8fa40 098ec5a6 rightsextension!Rights::CCloudPopWindow::HandlePopConditionSingle+0x8c4
0af8fb44 098eda22 rightsextension!Rights::CCloudPopWindow::OnSingleAppEvent+0x356
0af8fb60 098dd566 rightsextension!Rights::CCloudPopWindow::ProcessWindowMessage+0x82
0af8fbbc 7539630a rightsextension!ATL::CWindowImplBaseT >::WindowProc+0x76
0af8fbe8 75396d4a user32!InternalCallWinProc+0x23
0af8fc60 753977d7 user32!UserCallWinProcCheckWow+0x109
0af8fcc0 7539789a user32!DispatchMessageWorker+0x3b5
0af8fcd0 098eba24 user32!DispatchMessageW+0xf
0af8fec8 099df16a rightsextension!Rights::MainEntry+0x2d4
0af8ff00 75ce343d rightsextension!thread_start+0x58
0af8ff0c 77279812 kernel32!BaseThreadInitThunk+0xe
0af8ff4c 772797e5 ntdll!__RtlUserThreadStart+0x70
0af8ff64 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
061bfafc 5bae9faf 0xd346873
061bfb0c 5bb0ced5 rightsmanager!ATL::CSimpleStringT::CloneData+0xf
061bfcf0 5bb089ec rightsmanager!RightMenuMgr::EnableMenu+0x3e5
061bfed0 76a4343d rightsmanager!RM_MenuEnable+0x18c
061bfedc 77bd98b2 kernel32!BaseThreadInitThunk+0xe
061bff1c 77bd9885 ntdll!__RtlUserThreadStart+0x70
061bff34 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030c9f0 6a97dc08 node+0x2a2f20b
0030ccef 736d2039 node+0xb2dc08
0030ccf3 614d203a oleacc!g_OutstandingObjectTable+0x251
0030ccf7 732d6b72 0x614d203a
0030cd07 29302e32 comctl32!DirectUI::ShellBorderLayout::GetAdjacent+0x2f
0030cd1f 392e3631 0x29302e32
0030cd23 30202f20 0x392e3631
0030cd27 6d20302e 0x30202f20
0030cd2b 28202073 node+0x33b302e
0030cd2f 72657661 0x28202073
0030cd33 20656761 0x72657661
0030cd37 3d20756d 0x20656761
0030cd3b 392e3020 0x3d20756d
0030cd3f 202c3839 0x392e3020
0030cd43 72727563 0x202c3839
0030cd47 20746e65 0x72727563
0030cd4b 3d20756d 0x20746e65
0030cd4f 302e3020 0x3d20756d
0030cd53 20293230 0x302e3020
0030cd57 20776f6c 0x20293230
0030cd5b 6f6d656d 0x20776f6c
0030cd5f 6e207972 0x6f6d656d
0030cd63 6669746f node+0x43b7972
0030cd67 74616369 0x6669746f
0030cd6b 206e6f69 0x74616369
0030cd6f 69204347 0x206e6f69
0030cd73 6c6f206e 0x69204347
0030cd77 70732064 node+0x28a206e
0030cd7b 20656361 0x70732064
0030cd7f 75716572 0x20656361
0030cd83 65747365 setupapi!$$VProc_ImageExportDirectory+0x4bc2
0030cd87 315b0a64 0x65747365
0030cd8b 3a303239 0x315b0a64
0030cd8f 33333330 0x3a303239
0030cd93 38324141 0x33333330
0030cd97 3520205d 0x38324141
0030cd9b 30383432 0x3520205d
0030cd9f 6d203734 0x30383432
0030cda3 4d203a73 node+0x33b3734
0030cda7 2d6b7261 0x4d203a73
0030cdab 65657773 0x2d6b7261
0030cdaf 30312070 0x65657773
0030cdb3 2820372e 0x30312070
0030cdb7 332e3231 0x2820372e
0030cdbb 3e2d2029 0x332e3231
0030cdbf 2e303120 0x3e2d2029
0030cdc3 31282031 0x2e303120
0030cdc7 29302e32 0x31282031
0030cdcb 2c424d20 0x29302e32
0030cdcf 2e333320 0x2c424d20
0030cdd3 202f2033 0x2e333320
0030cdd7 20302e30 0x202f2033
0030cddb 2020736d 0x20302e30
0030cddf 65766128 0x2020736d
0030cde3 65676172 0x65766128
0030cde7 20756d20 0x65676172
0030cdeb 2e30203d 0x20756d20
0030cdef 2c393939 0x2e30203d
0030cdf3 72756320 0x2c393939
0030cdf7 746e6572 0x72756320
0030cdfb 20756d20 0x746e6572
0030cdff 2e30203d 0x20756d20
0030ce03 29393939 0x2e30203d
0030ce07 776f6c20 0x29393939
0030ce0b 6d656d20 0x776f6c20
0030ce0f 2079726f node+0x3806d20
0030ce13 69746f6e 0x2079726f
0030ce3b 30323931 d3d9!AMD_ASM::operand::set+0x1ce
0030ce47 20205d38 0x30323931
0030ce4b 38343235 0x20205d38
0030ce4f 20303630 0x38343235
0030ce53 203a736d 0x20303630
0030ce57 6b72614d 0x203a736d
0030ce5b 6577732d node+0x18d614d
0030ce5f 31207065 0x6577732d
0030ce63 20312e30 0x31207065
0030ce67 2e323128 0x20312e30
0030ce6b 2d202930 0x2e323128
0030ce6f 3031203e 0x2d202930
0030ce73 2820312e 0x3031203e
0030ce77 332e3231 0x2820312e
0030ce7b 424d2029 0x332e3231
0030ce7f 3331202c 0x424d2029
0030ce83 2f20302e 0x3331202c
0030ce87 302e3020 0x2f20302e
0030ce8b 20736d20 0x302e3020
0030ce8f 76612820 0x20736d20
0030ce9b 30203d20 shell32!CListViewHost::_SetFocus+0x53
0030cea3 7563202c 0x30203d20
0030cea7 6e657272 urlmon!bcrypt_NULL_THUNK_DATA_DLA  (urlmon+0x11202c)
0030ceab 756d2074 0x6e657272
0030cfdf 00000000 clbcatq!CSLTComs::UpdateStore+0x609

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002cf324 62158d6c node+0x12ae60a
002cf38c 5fe13961 node+0x2a18d6c
002cf400 60a089e6 node+0x6d3961
002cf4cc 60a0875e node+0x12c89e6
002cf528 609e0ec3 node+0x12c875e
002cf564 609e0acb node+0x12a0ec3
002cf5a4 609f23d2 node+0x12a0acb
002cf5ec 609f22e2 node+0x12b23d2
002cf630 5fe0bd42 node+0x12b22e2
002cf658 5fe0d47d node+0x6cbd42
002cf698 5fd4ed6c node+0x6cd47d
002cf6f4 5fd4f379 node+0x60ed6c
002cf718 5fd4ea8a node+0x60f379
002cf71c 609ca300 node+0x60ea8a
002cf720 002c0000 node+0x128a300
002cf724 00000000 0x2c0000

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032f634 700b8d6c node+0x12ae60a
0032f69c 6dd73961 node+0x2a18d6c
0032f710 6e9689e6 node+0x6d3961
0032f7dc 6e96875e node+0x12c89e6
0032f838 6e940ec3 node+0x12c875e
0032f874 6e940acb node+0x12a0ec3
0032f8b4 6e9523d2 node+0x12a0acb
0032f8fc 6e9522e2 node+0x12b23d2
0032f940 6dd6bd42 node+0x12b22e2
0032f968 6dd6d47d node+0x6cbd42
0032f9a8 6dcaed6c node+0x6cd47d
0032fa04 6dcaf379 node+0x60ed6c
0032fa28 6dcaea8a node+0x60f379
0032fa2c 6e92a300 node+0x60ea8a
0032fa30 00320000 node+0x128a300
0032fa34 00000000 0x320000

Top 37: total counts = 1

ChildEBP RetAddr  
05e6f31c 7b6491a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05e6f348 7b641b3e rightsmanager!AutorunItem::AutorunItem+0x34
05e7f990 7b63e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05e7fa08 7b677f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05e7fbdc 75605d49 rightsmanager!RM_AutorunScan+0x176
05e7fbec 7713d03b kernel32!BaseThreadInitThunk+0x19
05e7fc44 7713cfc1 ntdll!__RtlUserThreadStart+0x2b
05e7fc54 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 38: total counts = 1

ChildEBP RetAddr  
051feba8 7b5ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
051febe8 7b5f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
051fee38 7b5f4ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
051ff450 7b5f3ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
051ff660 7b5ee951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
051ff6d8 7b627f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
051ff8ac 7571fcc9 rightsmanager!RM_AutorunScan+0x176
051ff8bc 770682ae kernel32!BaseThreadInitThunk+0x19
051ff918 7706827e ntdll!__RtlUserThreadStart+0x2f
051ff928 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0xb8c650

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
007cf384 6fd88cc5 node+0x12ae60a
007cf424 6da43961 node+0x2a18cc5
007cf498 6e6389e6 node+0x6d3961
007cf564 6e63875e node+0x12c89e6
007cf5c0 6e610ec3 node+0x12c875e
007cf5fc 6e610acb node+0x12a0ec3
007cf63c 6e6223d2 node+0x12a0acb
007cf684 6e6222e2 node+0x12b23d2
007cf6c8 6da3bd42 node+0x12b22e2
007cf6f0 6da3d47d node+0x6cbd42
007cf730 6d97ed6c node+0x6cd47d
007cf78c 6d97f379 node+0x60ed6c
007cf7b0 6d97ea8a node+0x60f379
007cf848 76f75e4e node+0x60ea8a
007cf8fc 76f73c86 ntdll!RtlAllocateHeap+0x3e
007cf914 72662d00 ntdll!RtlFreeHeap+0x46
007cf924 00000000 0x72662d00

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00f7f804 6c678cc5 node+0x12ae60a
00f7f89c 6a333961 node+0x2a18cc5
00f7f910 6af289e6 node+0x6d3961
00f7f9dc 6af2875e node+0x12c89e6
00f7fa38 6af00ec3 node+0x12c875e
00f7fa74 6af00acb node+0x12a0ec3
00f7fab4 6af123d2 node+0x12a0acb
00f7fafc 6af122e2 node+0x12b23d2
00f7fb40 6a32bd42 node+0x12b22e2
00f7fb68 6a32d47d node+0x6cbd42
00f7fba8 6a26ed6c node+0x6cd47d
00f7fc04 6a26f379 node+0x60ed6c
00f7fc28 6a26ea8a node+0x60f379
00f7fcc8 7757c67e node+0x60ea8a
00f7fcd4 00f7fd44 ntdll!RtlAllocateHeap+0x3e
00000000 00000000 0xf7fd44

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040cf30 651bdc08 node+0x2a2f20b
0040d22f 203a736d node+0xb2dc08
0040d233 6b72614d 0x203a736d
0040d237 6577732d 0x6b72614d
0040d23b 31207065 node+0x10e732d
0040d23f 20352e30 0x31207065
0040d243 2e323128 0x20352e30
0040d247 2d202933 0x2e323128
0040d24b 3031203e 0x2d202933
0040d24f 2820342e 0x3031203e
0040d253 332e3231 0x2820342e
0040d257 424d2029 0x332e3231
0040d25b 3435202c 0x424d2029
0040d25f 2f20382e 0x3435202c
0040d263 302e3020 0x2f20382e
0040d267 20736d20 0x302e3020
0040d26b 76612820 0x20736d20
0040d26f 67617265 shell32!__dyn_tls_init_callback  (shell32+0xa82820)
0040d273 756d2064 node+0x2f87265
0040d27f 7563202c crypt32!FindElementInCollectionStore+0x14d
0040d297 656d2077 iertutil!c_PmapEntries_sqmapi+0x2c
0040d29b 79726f6d node+0x1042077
0040d29f 746f6e20 0x79726f6d
0040d2a3 63696669 0x746f6e20
0040d2a7 6f697461 0x63696669
0040d2ab 4347206e 0x6f697461
0040d2af 206e6920 0x4347206e
0040d2b3 20646c6f 0x206e6920
0040d2b7 63617073 0x20646c6f
0040d2bb 65722065 0x63617073
0040d2bf 73657571 node+0x1092065
0040d2c3 0a646574 WindowsCodecs!CMetadata8BIMIPTCReaderWriter::`vftable'+0x19
0040d2c7 3539335b 0xa646574
0040d2cb 30303a32 0x3539335b
0040d2cf 46393843 0x30303a32
0040d2d3 205d3035 0x46393843
0040d2d7 39333236 0x205d3035
0040d2db 32343332 0x39333236
0040d2df 736d2038 0x32343332
0040d32f 202c3939 WindowsCodecs!HrCreateLibTiffImgFromBitmap+0x32
0040d343 20293030 0x202c3939
0040d347 20776f6c 0x20293030
0040d34b 6f6d656d 0x20776f6c
0040d34f 6e207972 0x6f6d656d
0040d353 6669746f 0x6e207972
0040d357 74616369 node+0x200746f
0040d35b 206e6f69 0x74616369
0040d35f 69204347 0x206e6f69
0040d363 6c6f206e 0x69204347
0040d367 70732064 0x6c6f206e
0040d36b 20656361 0x70732064
0040d36f 75716572 0x20656361
0040d577 00000000 crypt32!VerifySubjectCertRevocation+0x37

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0037c910 67aedc08 node+0x2a2f20b
0037cc0f 3a736d20 node+0xb2dc08
0037cc13 72614d20 0x3a736d20
0037cc17 77732d6b 0x72614d20
0037cc1b 20706565 0x77732d6b
0037cc1f 322e3031 0x20706565
0037cc23 32312820 0x322e3031
0037cc27 2029302e 0x32312820
0037cc2b 31203e2d 0x2029302e
0037cc2f 20322e30 0x31203e2d
0037cc33 2e323128 0x20322e30
0037cc37 4d202930 0x2e323128
0037cc3b 32202c42 0x4d202930
0037cc3f 20362e34 0x32202c42
0037cc43 2e30202f 0x20362e34
0037cc47 736d2030 0x2e30202f
0037cc4b 61282020 0x736d2030
0037cc4f 61726576 0x61282020
0037cc53 6d206567 0x61726576
0037cc57 203d2075 0x6d206567
0037cc5b 39392e30 0x203d2075
0037cc5f 63202c38 0x39392e30
0037cc63 65727275 0x63202c38
0037cc67 6d20746e 0x65727275
0037cc6b 203d2075 0x6d20746e
0037cc6f 30302e30 0x203d2075
0037cc73 6c202931 0x30302e30
0037d2b7 00000000 rasapi32!OnRasDialEvent+0x37d