Analyzed 57 dump

Top 1: total counts = 9

0687f684 622caeed rightsmanager!RM_AutorunScan+0x176
0687f780 75676359 ffi_bindings!ffi_call_win32+0x11
0687f790 77737b74 kernel32!BaseThreadInitThunk+0x19
0687f7ec 77737b44 ntdll!__RtlUserThreadStart+0x2f
0687f7fc 00000000 ntdll!_RtlUserThreadStart+0x1b

6ae708f2dc006b1bd593c431eab18be0_000.dmp
0fdb85c37fa30e49956b679ad87f3a01_000.dmp
db427cb0638de94861df4ef336c767c3_000.dmp
2a6b69b8ebd481e77809b6527cbdbe11_000.dmp
305a2079257ca7f8ad4f69bf1fd7f792_000.dmp

Top 2: total counts = 7

0697f7c4 628daeed rightsmanager!RM_AutorunScan+0x176
0697f8c0 76087ba9 ffi_bindings!ffi_call_win32+0x11
0697f8d0 77b1c36b kernel32!BaseThreadInitThunk+0x19
0697f928 77b1c2ef ntdll!__RtlUserThreadStart+0x2b
0697f938 00000000 ntdll!_RtlUserThreadStart+0x1b

134838c64b90035ba0539b69fd183790_000.dmp
5d54f457b46398998e8db080a7f4ff65_000.dmp
d6a9526941defc675330fac2bd4a355e_000.dmp
5236bd1f081ae534448d03372afb4bd6_000.dmp
79e7305959a4df911918b0a2e46f8eef_000.dmp

Top 3: total counts = 5

ChildEBP RetAddr  
063aeec8 7b50e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
063aef08 7b51738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
063af158 7b5112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
063bf7a0 7b50e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
063bf818 7b547f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
063bf9ec 758cfcc9 rightsmanager!RM_AutorunScan+0x176
063bf9fc 774982ae kernel32!BaseThreadInitThunk+0x19
063bfa58 7749827e ntdll!__RtlUserThreadStart+0x2f
063bfa68 00000000 ntdll!_RtlUserThreadStart+0x1b

773a8d54a75f90ea8606ae6ab0b82e7b_000.dmp
f713f1d4f4948aeeb54672a05ca2c3f5_000.dmp
0afd912d13974e623950f150aca4184e_000.dmp
3121109aee7d3d2419688200810d3aaf_000.dmp
a365bd62cddb5ca3979b28ef18c64e05_000.dmp

Top 4: total counts = 5

0655fc7c 7423aeed rightsmanager!RM_AutorunScan+0x176
0655fd78 765f344d ffi_bindings!ffi_call_win32+0x11
0655fd84 778c9802 kernel32!BaseThreadInitThunk+0xe
0655fdc4 778c97d5 ntdll!__RtlUserThreadStart+0x70
0655fddc 00000000 ntdll!_RtlUserThreadStart+0x1b

d435488cc7b45681734fd53ec6f3ea00_000.dmp
1175170bd46606401bf44fe858e077ad_000.dmp
0d63d4b2d262b84c8342e3074ec4d97c_000.dmp
c79841eea304ed581f5148273260ae9c_000.dmp
03347d7ce3d9645803a4d1033415c3b8_000.dmp

Top 5: total counts = 5

ChildEBP RetAddr  
0642ee58 789de731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0642ee98 789e738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0642f0e8 789e12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0643f730 789de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0643f7a8 78a17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0643f97c 76687ba9 rightsmanager!RM_AutorunScan+0x176
0643f98c 7701c36b kernel32!BaseThreadInitThunk+0x19
0643f9e4 7701c2ef ntdll!__RtlUserThreadStart+0x2b
0643f9f4 00000000 ntdll!_RtlUserThreadStart+0x1b

fba5a205a9acaf747c25ed701e5775c9_000.dmp
374e7718bbcc21fb88ea5a271e77542f_000.dmp
02f687e620969f010b8cc6264710ea77_001.dmp
c8da13f08e28e3facd78ae3b130c831d_000.dmp
5f5772ff179ad22ea287f8fad501230a_000.dmp

Top 6: total counts = 3

ChildEBP RetAddr  
0695ee68 08d2e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0695eea8 08d3738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0695f0f8 08d312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0696f740 08d2e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0696f7b8 08d67f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0696f98c 7749336a rightsmanager!RM_AutorunScan+0x176
0696f998 77b19902 kernel32!BaseThreadInitThunk+0xe
0696f9d8 77b198d5 ntdll!__RtlUserThreadStart+0x70
0696f9f0 00000000 ntdll!_RtlUserThreadStart+0x1b

fd1de016ff32cad27b8c4f31b10b33de_000.dmp
771b93d6e01022982d42fa09cea6547e_000.dmp
e042b6ebc852e7721e4b52ff49af9694_000.dmp

Top 7: total counts = 2

ChildEBP RetAddr  
05cdef20 0f67e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05cdef60 0f68738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05cdf1b0 0f6812a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05cef7f8 0f67e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05cef870 0f6b7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05cefa44 7704347d rightsmanager!RM_AutorunScan+0x176
05cefa50 77799852 kernel32!BaseThreadInitThunk+0xe
05cefa90 77799825 ntdll!__RtlUserThreadStart+0x70
05cefaa8 00000000 ntdll!_RtlUserThreadStart+0x1b

ea512f2093ea27d630ea8164158ab91f_000.dmp
b97fdadf6f2b87354b64be95d8ead6cb_000.dmp

Top 8: total counts = 2

ChildEBP RetAddr  
0670f1a0 58dee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0670f1e0 58df738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0670f430 58df4ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0670fa48 58df3ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
0670fc58 58dee951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
0670fcd0 58e27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
0670fea4 76797ba9 rightsmanager!RM_AutorunScan+0x176
0670feb4 7789c0cb kernel32!BaseThreadInitThunk+0x19
0670ff0c 7789c04f ntdll!__RtlUserThreadStart+0x2b
0670ff1c 00000000 ntdll!_RtlUserThreadStart+0x1b

ce1407b71494f16a7658e4c8987da7c2_000.dmp
61444f90c0d8affb4c0be9a84b99abaf_000.dmp

Top 9: total counts = 2

ChildEBP RetAddr  
066af200 79c9e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
066af240 79ca738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
066af490 79ca12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
066bfad8 79c9e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
066bfb50 79cd7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
066bfd24 75b97ba9 rightsmanager!RM_AutorunScan+0x176
066bfd34 7770c36b kernel32!BaseThreadInitThunk+0x19
066bfd8c 7770c2ef ntdll!__RtlUserThreadStart+0x2b
066bfd9c 00000000 ntdll!_RtlUserThreadStart+0x1b

ab672669af58ff7ff29a54124fbdf506_000.dmp
22a2a01af5b02b6ef917703292e6ffc2_000.dmp

Top 10: total counts = 1

ChildEBP RetAddr  
05b8effc 045991a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05b8f028 04591b3e rightsmanager!AutorunItem::AutorunItem+0x34
05b9f670 0458e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05b9f6e8 045c7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05b9f8bc 756e343d rightsmanager!RM_AutorunScan+0x176
05b9f8c8 776c9812 kernel32!BaseThreadInitThunk+0xe
05b9f908 776c97e5 ntdll!__RtlUserThreadStart+0x70
05b9f920 00000000 ntdll!_RtlUserThreadStart+0x1b

9d3dd83436d844d94a24c3b7546cb79b_000.dmp

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024ea34 69e38046 node+0x10573fa
0024ea5c 69e1ab9b node+0x1078046
0024ea88 69a044bc node+0x105ab9b
0024eb10 69a04913 node+0xc444bc
0024eb1c 026d8f08 node+0xc44913
0024eb20 0024ecf0 0x26d8f08
0024eb24 16400305 0x24ecf0
0024ecf0 00000000 0x16400305

81ae917cce2de76b3e3b38f012233d24_000.dmp

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032c8a8 6e22dc08 node+0x2a2f20b
0032cba7 0a206572 node+0xb2dc08
0032cbab 3437345b 0xa206572
0032cbaf 32303a38 0x3437345b
0032cbb3 32363937 0x32303a38
0032cbb7 205d3035 0x32363937
0032cbbb 38363636 0x205d3035
0032cbbf 34323135 0x38363636
0032cbc3 6d203131 0x34323135
0032cbc7 53203a73 0x6d203131
0032cbcb 65766163 0x53203a73
0032cbcf 2065676e 0x65766163
0032cbd3 312e3131 0x2065676e
0032cbd7 32312820 0x312e3131
0032cbdb 2029302e 0x32312820
0032cbdf 31203e2d 0x2029302e
0032cbe3 20332e30 0x31203e2d
0032cbe7 2e323128 0x20332e30
0032cbeb 4d202933 0x2e323128
0032cbef 32202c42 0x4d202933
0032cbf3 2f20312e 0x32202c42
0032cbf7 322e3020 0x2f20312e
0032cbfb 20736d20 0x322e3020
0032cbff 76612820 0x20736d20
0032cc2b 61636f6c bcryptPrimitives!SymCryptParallelHashProcess+0x1d6
0032cc47 30353236 0x61636f6c
0032cc4b 3636205d 0x30353236
0032cc4f 35353836 0x3636205d
0032cc53 39383635 0x35353836
0032cc57 3a736d20 0x39383635
0032cc5b 72614d20 0x3a736d20
0032cc63 20706565 umpdc!SleepstudyHelperCreateLibrary+0x60
0032cc6f 2029332e 0x20706565
0032cc73 31203e2d 0x2029332e
0032cc77 20312e30 0x31203e2d
0032cc7b 2e323128 0x20312e30
0032cc7f 4d202933 0x2e323128
0032cc83 34202c42 0x4d202933
0032cc87 20322e39 0x34202c42
0032cc8b 2e35202f 0x20322e39
0032cc8f 736d2030 0x2e35202f
0032cc93 61282020 0x736d2030
0032cd93 63617073 0x61282020
0032cda7 00000000 twinapi_appcore!CWrlLightweightHandlerClient,Windows::ApplicationModel::DataTransfer::ShareTarget::IShareOperation,Windows::ApplicationModel::DataTransfer::ShareTarget::IShareOperation2,Windows::ApplicationModel::DataTransfer::ShareTarget::IShareOperation3,IBrokeredTaskNotify> >::GetIids+0x53

e2cf45a1be8721c69289067692bb51b5_000.dmp

Top 13: total counts = 1

ChildEBP RetAddr  
05e6f49c 51e291a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05e6f4c8 51e21b3e rightsmanager!AutorunItem::AutorunItem+0x34
05e7fb10 51e1e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05e7fb88 51e57f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05e7fd5c 75fcfcc9 rightsmanager!RM_AutorunScan+0x176
05e7fd6c 773d80ce kernel32!BaseThreadInitThunk+0x19
05e7fdc8 773d809e ntdll!__RtlUserThreadStart+0x2f
05e7fdd8 00000000 ntdll!_RtlUserThreadStart+0x1b

797d2a29cd31eb11637e36311865dc82_000.dmp

Top 14: total counts = 1

ChildEBP RetAddr  
00b8e064 00b8e144 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00b8e078 00b8e088 0xb8e144
00b8e07c 00b8e108 0xb8e088
00b8e088 00000000 0xb8e108

60404a1bac5f391105afea5043565dac_000.dmp

Top 15: total counts = 1

0545fe9c 6e59e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0545fea4 6e59e8c1 node+0x2f3e6e0
0545fea8 0052b884 node+0x2f3e8c1
0545feac 6e59e7dd 0x52b884
0545feb0 0038e8bc node+0x2f3e7dd
0545feb4 00000000 0x38e8bc

cf9a6900e347edefc9c215e2b0c85240_000.dmp

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00eff464 6fb58d6c node+0x12ae60a
00eff4cc 6d813961 node+0x2a18d6c
00eff540 6e4089e6 node+0x6d3961
00eff60c 6e40875e node+0x12c89e6
00eff668 6e3e0ec3 node+0x12c875e
00eff6a4 6e3e0acb node+0x12a0ec3
00eff6e4 6e3f23d2 node+0x12a0acb
00eff72c 6e3f22e2 node+0x12b23d2
00eff770 6d80bd42 node+0x12b22e2
00eff798 6d80d47d node+0x6cbd42
00eff7d8 6d74ed6c node+0x6cd47d
00eff834 6d74f379 node+0x60ed6c
00eff858 6d74ea8a node+0x60f379
00eff8f0 77c05eae node+0x60ea8a
00eff9a4 77c03ce6 ntdll!RtlAllocateHeap+0x3e
00eff9bc 72662d00 ntdll!RtlFreeHeap+0x46
00eff9cc 00000000 0x72662d00

1f74693ae00a98da1e9a8224b6c075c8_000.dmp

Top 17: total counts = 1

001dd143 73657571 node+0x9b2065
001dd147 0a646574 360Base+0xd7571
001dd14b 00000000 0xa646574

02cb7b1277803acacebd76970737fc16_000.dmp

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034c988 6d23dc08 node+0x2a2f20b
0034cc87 72614d20 node+0xb2dc08
0034cc8b 77732d6b 0x72614d20
0034cc8f 20706565 0x77732d6b
0034cc93 392e3031 0x20706565
0034cc97 32312820 0x392e3031
0034cc9b 2029332e 0x32312820
0034cc9f 31203e2d 0x2029332e
0034cca3 20342e30 0x31203e2d
0034cca7 2e323128 0x20342e30
0034ccab 4d202933 0x2e323128
0034ccaf 31202c42 0x4d202933
0034ccb3 20382e32 0x31202c42
0034ccb7 2e30202f 0x20382e32
0034ccbb 736d2030 0x2e30202f
0034ccbf 61282020 0x736d2030
0034ccc3 61726576 0x61282020
0034ccc7 6d206567 0x61726576
0034cccb 203d2075 node+0xaf6567
0034cccf 39392e30 0x203d2075
0034ccd3 63202c39 0x39392e30
0034ccd7 65727275 0x63202c39
0034ccdb 6d20746e 0x65727275
0034ccdf 203d2075 node+0xaf746e
0034cce3 30302e31 0x203d2075
0034cce7 6c202930 0x30302e31
0034cceb 6d20776f 0x6c202930
0034ccef 726f6d65 node+0xaf776f
0034ccf3 6f6e2079 0x726f6d65
0034ccf7 69666974 node+0x2fd2079
0034ccfb 69746163 0x69666974
0034ccff 47206e6f 0x69746163
0034cd03 6e692043 0x47206e6f
0034cd07 646c6f20 node+0x1f82043
0034cd0b 61707320 0x646c6f20
0034cd0f 72206563 0x61707320
0034cd13 65757165 0x72206563
0034cd17 64657473 0x65757165
0034cd1b 31325b0a 0x64657473
0034cd1f 303a3436 0x31325b0a
0034cd23 41434130 0x303a3436
0034cd27 5d383346 0x41434130
0034cd2b 39373220 0x5d383346
0034cd2f 35303333 0x39373220
0034cd33 20313430 0x35303333
0034cd37 203a736d 0x20313430
0034cd3b 6b72614d 0x203a736d
0034cd3f 6577732d 0x6b72614d
0034cd43 31207065 0x6577732d
0034cd47 20342e30 0x31207065
0034cd4b 2e323128 0x20342e30
0034cd4f 2d202933 0x2e323128
0034cd53 3031203e 0x2d202933
0034cd57 2820342e 0x3031203e
0034cd5b 352e3231 0x2820342e
0034cd5f 424d2029 0x352e3231
0034cd63 3733202c 0x424d2029
0034cd67 2f20382e 0x3733202c
0034cd6b 302e3020 0x2f20382e
0034cd6f 20736d20 0x302e3020
0034cd73 76612820 0x20736d20
0034cd77 67617265 0x76612820
0034cd7b 756d2065 0x67617265
0034d83b 00000000 setupapi!RequestClientSideUi+0x524

ba48f771e07c4ef457d910cfbf346b04_000.dmp

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008ff284 12508cc5 node+0x12ae60a
008ff324 101c3961 node+0x2a18cc5
008ff398 10db89e6 node+0x6d3961
008ff464 10db875e node+0x12c89e6
008ff4c0 10d90ec3 node+0x12c875e
008ff4fc 10d90acb node+0x12a0ec3
008ff53c 10da23d2 node+0x12a0acb
008ff584 10da22e2 node+0x12b23d2
008ff5c8 101bbd42 node+0x12b22e2
008ff5f0 101bd47d node+0x6cbd42
008ff630 100fed6c node+0x6cd47d
008ff68c 100ff379 node+0x60ed6c
008ff6b0 100fea8a node+0x60f379
008ff748 779e5efe node+0x60ea8a
008ff754 00000000 ntdll!RtlAllocateHeap+0x3e

0558ff6795cd8315c6f3eb620771d089_000.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ccd38 68aadc08 node+0x2a2f20b
002cd037 6b72614d node+0xb2dc08
002cd03b 6577732d node+0x37a614d
002cd03f 31207065 0x6577732d
002cd043 20322e30 0x31207065
002cd047 2e323128 0x20322e30
002cd04b 2d202930 0x2e323128
002cd04f 3031203e 0x2d202930
002cd053 2820322e 0x3031203e
002cd057 302e3231 0x2820322e
002cd05b 424d2029 0x302e3231
002cd05f 3131202c 0x424d2029
002cd063 372e3937 0x3131202c
002cd067 30202f20 0x372e3937
002cd06b 6d20302e 0x30202f20
002cd06f 28202073 0x6d20302e
002cd073 72657661 0x28202073
002cd077 20656761 0x72657661
002cd07b 3d20756d 0x20656761
002cd07f 362e3020 0x3d20756d
002cd083 202c3738 0x362e3020
002cd087 72727563 0x202c3738
002cd08b 20746e65 0x72727563
002cd08f 3d20756d 0x20746e65
002cd093 342e3020 0x3d20756d
002cd097 20293635 0x342e3020
002cd09b 20776f6c 0x20293635
002cd09f 6f6d656d 0x20776f6c
002cd0a3 6e207972 0x6f6d656d
002cd0a7 6669746f 0x6e207972
002cd0ab 74616369 0x6669746f
002cd1ef 6e657272 rsaenh!SHATransformP3+0x5c
002cd1fb 3234342e cryptnet!I_CryptFlushLruCache+0xa
002cd1ff 6f6c2029 0x3234342e
002cd203 656d2077 0x6f6c2029
002cd207 79726f6d 0x656d2077
002cd20b 746f6e20 0x79726f6d
002cd20f 63696669 0x746f6e20
002cd213 6f697461 0x63696669
002cd217 4347206e 0x6f697461
002cd21b 206e6920 0x4347206e
002cd21f 20646c6f 0x206e6920
002cd223 63617073 0x20646c6f
002cd227 65722065 0x63617073
002cd22b 73657571 0x65722065
002cd233 00000000 comctl32!TV_DrawPML+0x5b

9b267b6b2618986fab515b8598e6e40e_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dec7d0 66b3dc08 node+0x2a2f20b
00decacf 70656577 node+0xb2dc08
00decad3 2e303120 0x70656577
00decad7 31282034 0x2e303120
00decadb 29332e32 0x31282034
00decadf 203e2d20 0x29332e32
00decae3 342e3031 0x203e2d20
00decae7 32312820 0x342e3031
00decaeb 2029332e 0x32312820
00decaef 202c424d 0x2029332e
00decaf3 392e3336 0x202c424d
00decaf7 30202f20 0x392e3336
00decafb 6d20302e 0x30202f20
00decaff 28202073 0x6d20302e
00decb03 72657661 0x28202073
00decb2b 20776f6c urlmon!CUrlMon::ComposeWith+0x91
00decb3f 206e6f69 0x20776f6c
00decb43 69204347 0x206e6f69
00decb47 6c6f206e node+0x31f4347
00decb4b 70732064 0x6c6f206e
00decb4f 20656361 0x70732064
00decb53 75716572 0x20656361
00decb57 65747365 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc66572)
00decb5b 345b0a64 0x65747365
00decb5f 3a363533 0x345b0a64
00decb63 42343130 0x3a363533
00decb67 38343636 0x42343130
00decb6b 3335205d 0x38343636
00decb6f 34353535 0x3335205d
00decb73 20383639 0x34353535
00decb77 203a736d 0x20383639
00decb7b 6b72614d 0x203a736d
00decb7f 6577732d 0x6b72614d
00decb83 31207065 0x6577732d
00decb87 20372e30 0x31207065
00decb8b 2e323128 0x20372e30
00decb8f 2d202933 0x2e323128
00decb93 3031203e 0x2d202933
00decb97 2820342e 0x3031203e
00decb9b 332e3231 0x2820342e
00decb9f 424d2029 0x332e3231
00decba3 3937202c 0x424d2029
00decba7 2e333637 0x3937202c
00decbab 202f2034 0x2e333637
00decbaf 32353533 0x202f2034
00decbb3 6d20332e 0x32353533
00decbb7 28202073 0x6d20332e
00decbbb 72657661 0x28202073
00decbe3 20776f6c urlmon!CUrlMon::ComposeWith+0x91
00decbf7 206e6f69 0x20776f6c
00decbfb 69204347 0x206e6f69
00decbff 6c6f206e node+0x31f4347
00decc03 70732064 0x6c6f206e
00decc07 20656361 0x70732064
00decc0b 75716572 0x20656361
00decc0f 65747365 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc66572)
00decc13 345b0a64 0x65747365
00decc17 3a363533 0x345b0a64
00decc1b 42343130 0x3a363533
00decc1f 38343636 0x42343130
00decc23 3335205d 0x38343636
00decc27 38353535 0x3335205d
00decc2b 20373035 0x38353535
00decc2f 203a736d 0x20373035
00decc33 6b72614d 0x203a736d
00decc37 6577732d 0x6b72614d
00decc3b 31207065 0x6577732d
00decc3f 20342e30 0x31207065
00decc43 2e323128 0x20342e30
00decc47 2d202933 0x2e323128
00decc4b 3031203e 0x2d202933
00decc4f 2820342e 0x3031203e
00decc53 332e3231 0x2820342e
00decc57 424d2029 0x332e3231
00decc5b 3631202c 0x424d2029
00decc5f 352e3231 0x3631202c
00decc63 31202f20 0x352e3231
00decc67 302e3032 0x31202f20
00decc6b 20736d20 0x302e3032
00decc6f 76612820 0x20736d20
00decc73 67617265 0x76612820
00decc77 756d2065 node+0x1607265
00decc7b 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc22065)
00decc7f 3338352e 0x30203d20
00decc83 7563202c 0x3338352e
00decc87 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xb8202c)
00decc8b 756d2074 0x6e657272
00decc8f 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0xc22074)
00decc93 3036352e 0x30203d20
00decc97 6f6c2029 0x3036352e
00decc9b 656d2077 0x6f6c2029
00decc9f 79726f6d 0x656d2077
00decca3 746f6e20 0x79726f6d
00decca7 63696669 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x226e20)
00deccab 6f697461 0x63696669
00deccaf 4347206e 0x6f697461
00deccb3 206e6920 0x4347206e
00deccb7 20646c6f 0x206e6920
00deccbb 63617073 0x20646c6f
00deccbf 65722065 0x63617073
00deccc3 73657571 0x65722065
00deccc7 0a646574 0x73657571
00decccb 00000000 0xa646574

a7f933841155f088074ade3a452e841c_000.dmp

Top 22: total counts = 1

ChildEBP RetAddr  
05f3f2d4 50b891a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05f3f300 50b81b3e rightsmanager!AutorunItem::AutorunItem+0x34
05f4f948 50b7e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05f4f9c0 50bb7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05f4fb94 75c65d49 rightsmanager!RM_AutorunScan+0x176
05f4fba4 77dad03b kernel32!BaseThreadInitThunk+0x19
05f4fbfc 77dacfc1 ntdll!__RtlUserThreadStart+0x2b
05f4fc0c 00000000 ntdll!_RtlUserThreadStart+0x1b

f052ccf7281d61b195be8a9d1bef5d2c_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
053fecc0 7ae2e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
053fed00 7ae3738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
053fef50 7ae34ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
053ff568 7ae33ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
053ff778 7ae2e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
053ff7f0 7ae67f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
053ff9c4 76e4fcc9 rightsmanager!RM_AutorunScan+0x176
053ff9d4 76f982ae kernel32!BaseThreadInitThunk+0x19
053ffa30 76f9827e ntdll!__RtlUserThreadStart+0x2f
053ffa40 00000000 ntdll!_RtlUserThreadStart+0x1b

388f74521e6235a5bde2eabb76550063_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
04f2eed0 79e2e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x60
04f2ef10 79e3738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04f2f160 79e312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04f3f7a8 79e2e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04f3f820 79e67f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04f3f9f4 7663fa29 rightsmanager!RM_AutorunScan+0x176
04f3fa04 77b47a9e kernel32!BaseThreadInitThunk+0x19
04f3fa60 77b47a6e ntdll!__RtlUserThreadStart+0x2f
04f3fa70 00000000 ntdll!_RtlUserThreadStart+0x1b

7840b89f01f7cdab1d8fd626bd4310c4_000.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
0542f378 7974e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0542f3b8 7975738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0542f608 797512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0543fc50 7974e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0543fcc8 79787f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0543fe9c 7547fcc9 rightsmanager!RM_AutorunScan+0x176
0543feac 773782ae kernel32!BaseThreadInitThunk+0x19
0543ff08 7737827e ntdll!__RtlUserThreadStart+0x2f
0543ff18 00000000 ntdll!_RtlUserThreadStart+0x1b

6921823a43ddec2afda3ff4ecbb9d8d6_001.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0090cd10 6b63dc08 node+0x2a2f20b
0090d00f 4d203a73 node+0xb2dc08
0090d013 2d6b7261 0x4d203a73
0090d017 65657773 0x2d6b7261
0090d01b 30312070 0x65657773
0090d01f 2820392e 0x30312070
0090d023 332e3231 0x2820392e
0090d027 3e2d2029 0x332e3231
0090d02b 2e303120 0x3e2d2029
0090d02f 31282034 0x2e303120
0090d033 29332e32 0x31282034
0090d037 2c424d20 0x29332e32
0090d03b 2e323220 0x2c424d20
0090d03f 202f2034 0x2e323220
0090d043 20302e30 0x202f2034
0090d047 2020736d 0x20302e30
0090d04b 65766128 0x2020736d
0090d04f 65676172 0x65766128
0090d053 20756d20 0x65676172
0090d057 2e31203d 0x20756d20
0090d05b 2c303030 0x2e31203d
0090d05f 72756320 0x2c303030
0090d063 746e6572 0x72756320
0090d067 20756d20 0x746e6572
0090d06b 2e31203d 0x20756d20
0090d06f 29303030 0x2e31203d
0090d073 776f6c20 0x29303030
0090d077 6d656d20 0x776f6c20
0090d07b 2079726f node+0x2b46d20
0090d07f 69746f6e 0x2079726f
0090d083 61636966 0x69746f6e
0090d087 6e6f6974 0x61636966
0090d08b 20434720 node+0x3be6974
0090d08f 6f206e69 0x20434720
0090d093 7320646c node+0x46f6e69
0090d097 65636170 0x7320646c
0090d09b 71657220 0x65636170
0090d09f 74736575 0x71657220
0090d0a3 5b0a6465 0x74736575
0090d0a7 34343436 0x5b0a6465
0090d0ab 4432303a 0x34343436
0090d0af 41463535 0x4432303a
0090d0b3 37205d30 0x41463535
0090d0b7 33383732 0x37205d30
0090d1b7 756d2065 0x33383732
0090d1d7 6f6c2029 shell32!DirectUI::ClassInfo >::Register+0x48
0090d1e7 63696669 0x6f6c2029
0090d1eb 6f697461 0x63696669
0090d1ef 4347206e 0x6f697461
0090d1f3 206e6920 0x4347206e
0090d1f7 20646c6f 0x206e6920
0090d1fb 63617073 0x20646c6f
0090d1ff 65722065 0x63617073
0090d203 73657571 0x65722065
0090d207 0a646574 0x73657571
0090d20b 00000000 0xa646574

a95804d94dfc37d1ac210385c11a8294_000.dmp