Analyzed 77 dump

Top 1: total counts = 11

065bfaa4 0f6baeed rightsmanager!RM_AutorunScan+0x176
065bfba0 762c343d ffi_bindings!ffi_call_win32+0x11
065bfbac 77809802 kernel32!BaseThreadInitThunk+0xe
065bfbec 778097d5 ntdll!__RtlUserThreadStart+0x70
065bfc04 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 10

0683f874 6463aeed rightsmanager!RM_AutorunScan+0x176
0683f970 7672fcc9 ffi_bindings!ffi_call_win32+0x11
0683f980 77a982ae kernel32!BaseThreadInitThunk+0x19
0683f9dc 77a9827e ntdll!__RtlUserThreadStart+0x2f
0683f9ec 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 6

04d3fca4 65b2aeed rightsmanager!RM_AutorunScan+0x176
04d3fda0 76a15d49 ffi_bindings!ffi_call_win32+0x11
04d3fdb0 77e5d03b kernel32!BaseThreadInitThunk+0x19
04d3fe08 77e5cfc1 ntdll!__RtlUserThreadStart+0x2b
04d3fe18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 6

ChildEBP RetAddr  
09f8ed78 0ff0e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
09f8edb8 0ff1738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
09f8f008 0ff112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
09f9f650 0ff0e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
09f9f6c8 0ff47f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
09f9f89c 7643343d rightsmanager!RM_AutorunScan+0x176
09f9f8a8 77099802 kernel32!BaseThreadInitThunk+0xe
09f9f8e8 770997d5 ntdll!__RtlUserThreadStart+0x70
09f9f900 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 6

ChildEBP RetAddr  
04dbed98 7bc9e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04dbedd8 7bca738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04dbf028 7bca12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04dcf670 7bc9e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04dcf6e8 7bcd7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04dcf8bc 760bfcc9 rightsmanager!RM_AutorunScan+0x176
04dcf8cc 777f82ae kernel32!BaseThreadInitThunk+0x19
04dcf928 777f827e ntdll!__RtlUserThreadStart+0x2f
04dcf938 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 5

ChildEBP RetAddr  
0e99f428 136ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0e99f468 136f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0e99f6b8 136f12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0e9afd00 136ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0e9afd78 13727f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0e9aff4c 751b343d rightsmanager!RM_AutorunScan+0x176
0e9aff58 77639812 kernel32!BaseThreadInitThunk+0xe
0e9aff98 776397e5 ntdll!__RtlUserThreadStart+0x70
0e9affb0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 5

ChildEBP RetAddr  
05cbee70 7a69e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05cbeeb0 7a6a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05cbf100 7a6a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ccf748 7a69e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ccf7c0 7a6d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ccf994 756ffef9 rightsmanager!RM_AutorunScan+0x176
05ccf9a4 77447bbe kernel32!BaseThreadInitThunk+0x19
05ccfa00 77447b8e ntdll!__RtlUserThreadStart+0x2f
05ccfa10 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 3

ChildEBP RetAddr  
04e2f078 6841e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
04e2f0b8 6842738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04e2f308 684212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04e3f950 6841e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04e3f9c8 68457f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04e3fb9c 763a5d49 rightsmanager!RM_AutorunScan+0x176
04e3fbac 777ed09b kernel32!BaseThreadInitThunk+0x19
04e3fc04 777ed021 ntdll!__RtlUserThreadStart+0x2b
04e3fc14 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 3

ChildEBP RetAddr  
0635f2a8 7ba5e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0635f2e8 7ba6738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0635f538 7ba612a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0636fb80 7ba5e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0636fbf8 7ba97f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0636fdcc 759f7ba9 rightsmanager!RM_AutorunScan+0x176
0636fddc 7789c28b kernel32!BaseThreadInitThunk+0x19
0636fe34 7789c20f ntdll!__RtlUserThreadStart+0x2b
0636fe44 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003af794 6f988cc5 node+0x12ae60a
003af834 6d643961 node+0x2a18cc5
003af8a8 6e2389e6 node+0x6d3961
003af974 6e23875e node+0x12c89e6
003af9d0 6e210ec3 node+0x12c875e
003afa0c 6e210acb node+0x12a0ec3
003afa4c 6e2223d2 node+0x12a0acb
003afa94 6e2222e2 node+0x12b23d2
003afad8 6d63bd42 node+0x12b22e2
003afb00 6d63d47d node+0x6cbd42
003afb40 6d57ed6c node+0x6cd47d
003afb9c 6d57f379 node+0x60ed6c
003afbc0 6d57ea8a node+0x60f379
003afc58 76f95efe node+0x60ea8a
003afd0c 76f93d36 ntdll!RtlAllocateHeap+0x3e
003afd24 72662d00 ntdll!RtlFreeHeap+0x46
003afd34 00000000 0x72662d00

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0302fb08 6ae7e8da node+0xc6bd50
0302fb5c 6c3593e5 node+0xcee8da
0302fba8 761befac node+0x21c93e5
0302fbb4 771f3628 kernel32!BaseThreadInitThunk+0xe
0302fbf4 771f35fb ntdll!__RtlUserThreadStart+0x70
0302fc0c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001cf124 6ca88d6c node+0x12ae60a
001cf18c 6a743961 node+0x2a18d6c
001cf200 6b3389e6 node+0x6d3961
001cf2cc 6b33875e node+0x12c89e6
001cf328 6b310ec3 node+0x12c875e
001cf364 6b310acb node+0x12a0ec3
001cf3a4 6b3223d2 node+0x12a0acb
001cf3ec 6b3222e2 node+0x12b23d2
001cf430 6a73bd42 node+0x12b22e2
001cf458 6a73d47d node+0x6cbd42
001cf498 6a67ed6c node+0x6cd47d
001cf4f4 6a67f379 node+0x60ed6c
001cf518 6a67ea8a node+0x60f379
001cf51c 6b2fa300 node+0x60ea8a
001cf520 001c0000 node+0x128a300
001cf524 00000000 0x1c0000

Top 13: total counts = 1

ChildEBP RetAddr  
0ce5f424 64b75308 tiptsf!CCPenIMX::UpdateStateSink+0x360
0ce5f460 64b75787 tiptsf!CCPenIMX::ActivateUI+0x17f
0ce5f480 76e72b5b tiptsf!CPenIMX_WindowProc+0x377
0ce5f4ac 76e650f3 user32!_InternalCallWinProc+0x2b
0ce5f594 76e64a82 user32!UserCallWinProcCheckWow+0x2d3
0ce5f608 76e64850 user32!DispatchMessageWorker+0x222
0ce5f614 0c4cba24 user32!DispatchMessageW+0x10
0ce5f80c 0c5bf16a rightsextension!Rights::MainEntry+0x2d4
0ce5f844 76828744 rightsextension!thread_start+0x58
0ce5f858 771d587d kernel32!BaseThreadInitThunk+0x24
0ce5f8a0 771d584d ntdll!__RtlUserThreadStart+0x2f
0ce5f8b0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0017c318 0fbbdc08 node+0x2a2f20b
0017c617 756c6961 node+0xb2dc08
0017c61b 0a206572 comdlg32!_NULL_IMPORT_DESCRIPTOR+0x213f
0017c61f 3130315b 0xa206572
0017c623 303a3233 0x3130315b
0017c627 35393131 0x303a3233
0017c62b 5d303836 0x35393131
0017c62f 20202020 0x5d303836
0017c633 37373036 0x20202020
0017c637 736d2032 0x37373036
0017c63b 6353203a 0x736d2032
0017c63f 6e657661 0x6353203a
0017c643 31206567 0x6e657661
0017c647 20392e30 0x31206567
0017c64b 2e323128 0x20392e30
0017c64f 2d202930 0x2e323128
0017c653 3031203e 0x2d202930
0017c657 2820312e 0x3031203e
0017c65b 332e3231 0x2820312e
0017c65f 424d2029 0x332e3231
0017c663 2e31202c 0x424d2029
0017c667 202f2038 0x2e31202c
0017c66b 20302e30 0x202f2038
0017c66f 2020736d 0x20302e30
0017c673 65766128 0x2020736d
0017c677 65676172 0x65766128
0017c67b 20756d20 0x65676172
0017c67f 2e31203d 0x20756d20
0017c683 2c303030 0x2e31203d
0017c687 72756320 0x2c303030
0017c68b 746e6572 0x72756320
0017c68f 20756d20 0x746e6572
0017c693 2e31203d 0x20756d20
0017c697 29303030 0x2e31203d
0017c69b 6c6c6120 0x29303030
0017c69f 7461636f 0x6c6c6120
0017c6a3 206e6f69 0x7461636f
0017c6a7 6c696166 0x206e6f69
0017c6ab 20657275 0x6c696166
0017c6af 30315b0a 0x20657275
0017c6b3 3a323331 0x30315b0a
0017c6b7 39313130 0x3a323331
0017c6bb 30383635 0x39313130
0017c6bf 2020205d 0x30383635
0017c6c3 36363820 0x2020205d
0017c6c7 6d203331 0x36363820
0017c6cb 4d203a73 0x6d203331
0017c6cf 2d6b7261 0x4d203a73
0017c6d3 65657773 0x2d6b7261
0017c6d7 30312070 0x65657773
0017c6db 2820372e 0x30312070
0017c6df 332e3231 0x2820372e
0017c6e3 3e2d2029 0x332e3231
0017c6e7 2e303120 0x3e2d2029
0017c6eb 31282030 0x2e303120
0017c6ef 29302e32 0x31282030
0017c6f3 2c424d20 0x29302e32
0017c6f7 2e373120 0x2c424d20
0017c6fb 202f2038 0x2e373120
0017c6ff 20312e30 0x202f2038
0017c703 2020736d 0x20312e30
0017c707 65766128 0x2020736d
0017c70b 65676172 0x65766128
0017c70f 20756d20 0x65676172
0017c713 2e31203d 0x20756d20
0017c717 2c303030 0x2e31203d
0017c71b 72756320 0x2c303030
0017c71f 746e6572 0x72756320
0017c723 20756d20 0x746e6572
0017c727 2e31203d 0x20756d20
0017c72b 29303030 0x2e31203d
0017c72f 776f6c20 0x29303030
0017c733 6d656d20 0x776f6c20
0017c737 2079726f 0x6d656d20
0017c73b 69746f6e 0x2079726f
0017c73f 61636966 0x69746f6e
0017c743 6e6f6974 0x61636966
0017c747 20434720 0x6e6f6974
0017c74b 6f206e69 0x20434720
0017c74f 7320646c 0x6f206e69
0017c753 65636170 comctl32!__dyn_tls_init_callback  (comctl32+0x16646c)
0017c757 71657220 0x65636170
0017c75b 74736575 0x71657220
0017c75f 5b0a6465 0x74736575
0017c763 33313031 0x5b0a6465
0017c767 31303a32 0x33313031
0017c76b 36353931 0x31303a32
0017c76f 205d3038 0x36353931
0017c773 38202020 0x205d3038
0017c777 37323636 0x38202020
0017c77b 3a736d20 0x37323636
0017c77f 72614d20 0x3a736d20
0017c783 77732d6b 0x72614d20
0017c787 20706565 0x77732d6b
0017c78b 302e3031 0x20706565
0017c78f 32312820 0x302e3031
0017c793 2029302e 0x32312820
0017c797 39203e2d 0x2029302e
0017c79b 2820392e 0x39203e2d
0017c79f 302e3231 0x2820392e
0017c7a3 424d2029 0x302e3231
0017c7a7 3331202c 0x424d2029
0017c7ab 2f20372e 0x3331202c
0017c7af 302e3020 0x2f20372e
0017c7b3 20736d20 0x302e3020
0017c7b7 76612820 0x20736d20
0017c7bb 67617265 wininet!`string'+0x195e00
0017c7bf 756d2065 0x67617265
0017c7c3 30203d20 comdlg32!__dyn_tls_init_callback  (comdlg32+0x62065)
0017c7c7 3939392e 0x30203d20
0017c7cb 7563202c 0x3939392e
0017c863 00000000 cfgmgr32!CM_Delete_Driver_Package_ExW+0xcf

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0021ca30 69c5dc08 node+0x2a2f20b
0021cd2f 203a736d node+0xb2dc08
0021cd33 6b72614d 0x203a736d
0021cd37 6577732d node+0x25f614d
0021cd3b 31207065 0x6577732d
0021cd3f 20342e30 0x31207065
0021cd43 2e323128 0x20342e30
0021cd47 2d202933 0x2e323128
0021cd4b 3031203e 0x2d202933
0021cd4f 2820342e 0x3031203e
0021cd53 332e3231 0x2820342e
0021cd57 424d2029 0x332e3231
0021cd5b 3933202c 0x424d2029
0021cd5f 2f20312e 0x3933202c
0021cd63 302e3020 0x2f20312e
0021cd67 20736d20 0x302e3020
0021cd6b 76612820 0x20736d20
0021cd6f 67617265 shell32!__dyn_tls_init_callback  (shell32+0xb22820)
0021cd73 756d2065 0x67617265
0021cd77 30203d20 usp10!CUspShapingDrawingSurface::CUspShapingDrawingSurface+0x75
0021cd7b 3839392e 0x30203d20
0021cd7f 7563202c 0x3839392e
0021cd83 6e657272 ws2_32!__dyn_tls_init_callback  (ws2_32+0x3202c)
0021cd87 756d2074 0x6e657272
0021cd8b 30203d20 usp10!CUspShapingDrawingSurface::CUspShapingDrawingSurface+0x84
0021cd8f 3130302e 0x30203d20
0021cd93 6f6c2029 0x3130302e
0021cd97 656d2077 0x6f6c2029
0021cd9b 79726f6d 0x656d2077
0021cd9f 746f6e1f 0x79726f6d
0021cda3 63696669 WindowsCodecs!CPngDecoderFrame::QueryInterface+0xe
0021cda7 6f697461 0x63696669
0021cdab 4347206e 0x6f697461
0021cdaf 206e6920 0x4347206e
0021cdb3 20646c6f 0x206e6920
0021cdb7 63617073 0x20646c6f
0021cdbb 65722065 0x63617073
0021cdbf 73657571 0x65722065
0021cdc3 0a646574 0x73657571
0021cdc7 3530325b 0xa646574
0021cdcb 30303a32 0x3530325b
0021cdcf 33464242 0x30303a32
0021cdd3 205d3837 0x33464242
0021cdd7 36383831 0x205d3837
0021cddb 32353734 0x36383831
0021cddf 736d2036 0x32353734
0021cde3 614d203a 0x736d2036
0021cde7 732d6b72 0x614d203a
0021cdeb 70656577 0x732d6b72
0021cdef 2e303120 0x70656577
0021cdf3 31282039 0x2e303120
0021cdf7 29332e32 0x31282039
0021cdfb 203e2d20 0x29332e32
0021cdff 342e3031 0x203e2d20
0021ce03 32312820 0x342e3031
0021ce07 2029332e 0x32312820
0021ce0b 202c424d 0x2029332e
0021ce0f 352e3932 0x202c424d
0021ce13 30202f20 0x352e3932
0021ce17 6d20302e 0x30202f20
0021ce1b 28202073 node+0x40d302e
0021ce1f 72657661 0x28202073
0021ce23 20656761 0x72657661
0021ce27 3d20756d 0x20656761
0021ce2b 392e3020 0x3d20756d
0021ce2f 202c3939 0x392e3020
0021ce33 72727563 0x202c3939
0021ce37 20746e65 0x72727563
0021ce3b 3d20756d 0x20746e65
0021ce3f 302e3120 0x3d20756d
0021ce43 20293030 0x302e3120
0021ce47 20776f6c 0x20293030
0021ce4b 6f6d656d 0x20776f6c
0021ce4f 6e207972 0x6f6d656d
0021ce53 6669746f 0x6e207972
0021ce57 74616369 0x6669746f
0021ce5b 206e6f69 0x74616369
0021ce5f 69204347 0x206e6f69
0021ce63 6c6f206e node+0xd4347
0021ce67 70732064 node+0x35c206e
0021ce6b 20656361 0x70732064
0021ce6f 75716572 0x20656361
0021ce73 65747365 usp10!chAttr+0x7d1a
0021ce77 325b0a64 0x65747365
0021ce7b 3a323530 0x325b0a64
0021ce7f 42423030 0x3a323530
0021ce83 38373346 0x42423030
0021ce87 3831205d 0x38373346
0021ce8b 37343638 0x3831205d
0021ce8f 20323635 0x37343638
0021ce93 203a736d 0x20323635
0021ce97 6b72614d 0x203a736d
0021ce9b 6577732d node+0x25f614d
0021ce9f 31207065 0x6577732d
0021cea3 20342e30 0x31207065
0021cea7 2e323128 0x20342e30
0021ceab 2d202933 0x2e323128
0021ceaf 3031203e 0x2d202933
0021ceb3 2820342e 0x3031203e
0021ceb7 332e3231 0x2820342e
0021cebb 424d2029 0x332e3231
0021cebf 3633202c 0x424d2029
0021cec3 2f20332e 0x3633202c
0021cec7 302e3020 0x2f20332e
0021cecb 20736d20 0x302e3020
0021cecf 76612820 0x20736d20
0021ced3 67617265 shell32!__dyn_tls_init_callback  (shell32+0xb22820)
0021ced7 756d2065 0x67617265
0021cedb 30203d20 usp10!CUspShapingDrawingSurface::CUspShapingDrawingSurface+0x75
0021cedf 3839392e 0x30203d20
0021cee3 7563202c 0x3839392e
0021cee7 6e657272 ws2_32!__dyn_tls_init_callback  (ws2_32+0x3202c)
0021ceeb 756d2074 0x6e657272
0021ceef 30203d20 usp10!CUspShapingDrawingSurface::CUspShapingDrawingSurface+0x84
0021cef3 3130302e 0x30203d20
0021cef7 6f6c2029 0x3130302e
0021cefb 656d2077 0x6f6c2029
0021ceff 79726f6d 0x656d2077
0021cf03 746f6e1f 0x79726f6d
0021cf07 63696669 WindowsCodecs!CPngDecoderFrame::QueryInterface+0xe
0021cf0b 6f697461 0x63696669
0021cf0f 4347206e 0x6f697461
0021cf13 206e6920 0x4347206e
0021cf17 20646c6f 0x206e6920
0021cf1b 63617073 0x20646c6f
0021cf1f 65722065 0x63617073
0021cf23 73657571 0x65722065
0021cf27 0a646574 0x73657571
0021cf2b 00000000 0xa646574

Top 16: total counts = 1

ChildEBP RetAddr  
04d2f420 0641e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04d2f460 0642738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04d2f6b0 064212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04d3fcf8 0641e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04d3fd70 06457f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04d3fe4c 04d3fe5c rightsmanager!RM_AutorunScan+0x176
WARNING: Frame IP not in any known module. Following frames may be wrong.
04d3ff50 77e69802 0x4d3fe5c
04d3ff90 77e697d5 ntdll!__RtlUserThreadStart+0x70
04d3ffa8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00c8cba0 5b87dc08 node+0x2a2f20b
00c8ce9f 3a736d20 node+0xb2dc08
00c8cea3 72614d20 0x3a736d20
00c8cea7 77732d6b 0x72614d20
00c8ceab 20706565 0x77732d6b
00c8ceaf 322e3031 0x20706565
00c8ceb3 32312820 0x322e3031
00c8ceb7 2029332e 0x32312820
00c8cebb 31203e2d 0x2029332e
00c8cebf 20322e30 0x31203e2d
00c8cec3 2e323128 0x20322e30
00c8cec7 4d202933 0x2e323128
00c8cecb 38202c42 0x4d202933
00c8cecf 2f20372e 0x38202c42
00c8ced3 302e3020 0x2f20372e
00c8ced7 20736d20 0x302e3020
00c8cedb 76612820 0x20736d20
00c8cedf 67617265 KERNELBASE!c_PmapEntries_dmxmlhelputils+0xf50
00c8cee3 756d2065 0x67617265
00c8cf03 6f6c2029 shell32!CThumbnail::~CThumbnail+0x3d
00c8cf07 656d2077 0x6f6c2029
00c8cf0b 79726f6d 0x656d2077
00c8cf37 3539365b rightsextension!std::_Tree,std::allocator >,0> >::_Insert_hint &,std::_Tree_node,void *> *>+0xbd
00c8cf4b 34373033 0x3539365b
00c8cf4f 736d2030 0x34373033
00c8cfcf 69204347 windows_storage!CStorageItemProperties::_MakeAndRetrieveProperties >+0x168
00c8cfe3 65747365 0x69204347
00c8cfe7 365b0a64 0x65747365
00c8cfeb 3a363539 0x365b0a64
00c8cfef 36323330 0x3a363539
00c8cff3 38393436 0x36323330
00c8cff7 3031205d 0x38393436
00c8cffb 30333535 0x3031205d
00c8cfff 20303637 0x30333535
00c8d003 203a736d 0x20303637
00c8d007 6b72614d 0x203a736d
00c8d00b 6577732d 0x6b72614d
00c8d00f 31207065 0x6577732d
00c8d013 20322e30 0x31207065
00c8d017 2e323128 0x20322e30
00c8d01b 2d202933 0x2e323128
00c8d01f 3031203e 0x2d202933
00c8d023 2820322e 0x3031203e
00c8d027 332e3231 0x2820322e
00c8d02b 424d2029 0x332e3231
00c8d02f 3931202c 0x424d2029
00c8d033 2f20372e 0x3931202c
00c8d037 302e3020 0x2f20372e
00c8d03b 20736d20 0x302e3020
00c8d03f 76612820 0x20736d20
00c8d043 67617265 KERNELBASE!c_PmapEntries_dmxmlhelputils+0xf50
00c8d047 756d2065 0x67617265
00c8d067 6f6c2029 shell32!CThumbnail::~CThumbnail+0x3d
00c8d06b 656d2077 0x6f6c2029
00c8d06f 79726f6d 0x656d2077
00c8d09b 00000000 rightsextension!std::_Tree,std::allocator >,0> >::_Insert_hint &,std::_Tree_node,void *> *>+0xbd

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0054f624 6c708d6c node+0x12ae60a
0054f694 6a3c3961 node+0x2a18d6c
0054f708 6afb89e6 node+0x6d3961
0054f7d4 6afb875e node+0x12c89e6
0054f830 6af90ec3 node+0x12c875e
0054f86c 6af90acb node+0x12a0ec3
0054f8ac 6afa23d2 node+0x12a0acb
0054f8f4 6afa22e2 node+0x12b23d2
0054f938 6a3bbd42 node+0x12b22e2
0054f960 6a3bd47d node+0x6cbd42
0054f9a0 6a2fed6c node+0x6cd47d
0054f9fc 6a2ff379 node+0x60ed6c
0054fa20 6a2fea8a node+0x60f379
0054fa24 6af7a300 node+0x60ea8a
0054fa28 00540000 node+0x128a300
0054fa2c 00000000 0x540000

Top 19: total counts = 1

0693fb8c 6b38e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0693fc04 77539882 node+0x2f3e6e0
0693fc44 77539855 ntdll!__RtlUserThreadStart+0x70
0693fc5c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fce08 1061dc08 node+0x2a2f20b
010fd107 203a736d node+0xb2dc08
010fd10b 6b72614d 0x203a736d
010fd10f 6577732d 0x6b72614d
010fd113 31207065 0x6577732d
010fd117 20332e30 0x31207065
010fd11b 2e323128 0x20332e30
010fd11f 2d202930 0x2e323128
010fd123 3031203e 0x2d202930
010fd127 2820322e 0x3031203e
010fd12b 302e3231 0x2820322e
010fd12f 424d2029 0x302e3231
010fd133 2e37202c 0x424d2029
010fd137 202f2036 0x2e37202c
010fd13b 20302e30 0x202f2036
010fd13f 2020736d 0x20302e30
010fd143 65766128 0x2020736d
010fd147 65676172 0x65766128
010fd14b 20756d20 0x65676172
010fd14f 2e30203d 0x20756d20
010fd153 2c393939 0x2e30203d
010fd157 72756320 0x2c393939
010fd15b 746e6572 0x72756320
010fd15f 20756d20 wininet!WPP_da6caa0d439733861da0911a41cfb1c1_Traceguids+0x5e2e
010fd163 2e30203d 0x20756d20
010fd167 29373030 0x2e30203d
010fd16b 776f6c20 0x29373030
010fd16f 6d656d20 rpcrt4!ext-ms-win-rpc-ssl-l1-1-0_NULL_THUNK_DATA_DLA  (rpcrt4+0xb6c20)
010fd173 2079726f 0x6d656d20
010fd177 69746f6e 0x2079726f
010fd1c3 20706565 GdiPlus!GpMetafile::GetBitmap+0x126
010fd1d3 31203e2d 0x20706565
010fd1d7 20322e30 0x31203e2d
010fd1db 2e323128 0x20322e30
010fd1df 4d202930 0x2e323128
010fd1e3 32202c42 0x4d202930
010fd1e7 392e3831 0x32202c42
010fd1eb 38202f20 0x392e3831
010fd1ef 6d20332e 0x38202f20
010fd1f3 28202073 0x6d20332e
010fd1f7 72657661 0x28202073
010fd1fb 20656761 0x72657661
010fd1ff 3d20756d 0x20656761
010fd203 392e3020 0x3d20756d
010fd207 202c3739 0x392e3020
010fd20b 72727563 0x202c3739
010fd20f 20746e65 0x72727563
010fd213 3d20756d 0x20746e65
010fd217 392e3020 0x3d20756d
010fd21b 20293639 0x392e3020
010fd21f 20776f6c 0x20293639
010fd223 6f6d656d 0x20776f6c
010fd227 6e207972 0x6f6d656d
010fd22b 6669746f 0x6e207972
010fd22f 74616369 0x6669746f
010fd233 206e6f69 0x74616369
010fd237 69204347 0x206e6f69
010fd23b 6c6f206e 0x69204347
010fd23f 70732064 0x6c6f206e
010fd243 20656361 0x70732064
010fd247 75716572 0x20656361
010fd24b 65747365 ole32!ext-ms-win32-subsystem-query-l1-1-0_NULL_THUNK_DATA_DLA  (ole32+0xd6572)
010fd24f 315b0a64 0x65747365
010fd253 34383539 0x315b0a64
010fd257 3631303a 0x34383539
010fd25b 42463633 0x3631303a
010fd25f 31205d38 0x42463633
010fd263 36333134 0x31205d38
010fd267 20323537 0x36333134
010fd26b 203a736d 0x20323537
010fd26f 6b72614d 0x203a736d
010fd273 6577732d 0x6b72614d
010fd277 31207065 0x6577732d
010fd27b 20322e30 0x31207065
010fd27f 2e323128 0x20322e30
010fd283 2d202930 0x2e323128
010fd287 3031203e 0x2d202930
010fd28b 2820322e 0x3031203e
010fd28f 302e3231 0x2820322e
010fd293 424d2029 0x302e3231
010fd297 3232202c 0x424d2029
010fd29b 2f20312e 0x3232202c
010fd29f 302e3020 0x2f20312e
010fd2a3 20736d20 0x302e3020
010fd2a7 7661281f 0x20736d20
010fd2ab 67617265 KERNELBASE!NlsSetSingleOverride+0x196
010fd2af 756d2065 0x67617265
010fd2b7 3739392e ole32!CComCat::IsClassOfCategories+0xd5
010fd2d3 656d2077 0x3739392e
010fd2d7 79726f6d 0x656d2077
010fd31b 00000000 explorerframe!CShellBrowser::_EnsureAndNavigateBand+0xd6

Top 21: total counts = 1

ChildEBP RetAddr  
063bf624 50ac91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
063bf650 50ac1b3e rightsmanager!AutorunItem::AutorunItem+0x34
063cfc98 50abe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
063cfd10 50af7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
063cfee4 77106359 rightsmanager!RM_AutorunScan+0x176
063cfef4 77bf8944 kernel32!BaseThreadInitThunk+0x19
063cff50 77bf8914 ntdll!__RtlUserThreadStart+0x2f
063cff60 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ff204 12398cc5 node+0x12ae60a
004ff2a4 10053961 node+0x2a18cc5
004ff318 10c489e6 node+0x6d3961
004ff3e4 10c4875e node+0x12c89e6
004ff440 10c20ec3 node+0x12c875e
004ff47c 10c20acb node+0x12a0ec3
004ff4bc 10c323d2 node+0x12a0acb
004ff504 10c322e2 node+0x12b23d2
004ff548 1004bd42 node+0x12b22e2
004ff570 1004d47d node+0x6cbd42
004ff5b0 0ff8ed6c node+0x6cd47d
004ff60c 0ff8f379 node+0x60ed6c
004ff630 0ff8ea8a node+0x60f379
004ff6c8 778ad6de node+0x60ea8a
004ff6d4 00000000 ntdll!RtlAllocateHeap+0x3e

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00fdf2a4 6c048d6c node+0x12ae60a
00fdf30c 69d03961 node+0x2a18d6c
00fdf380 6a8f89e6 node+0x6d3961
00fdf44c 6a8f875e node+0x12c89e6
00fdf4a8 6a8d0ec3 node+0x12c875e
00fdf4e4 6a8d0acb node+0x12a0ec3
00fdf524 6a8e23d2 node+0x12a0acb
00fdf56c 6a8e22e2 node+0x12b23d2
00fdf5b0 69cfbd42 node+0x12b22e2
00fdf5d8 69cfd47d node+0x6cbd42
00fdf618 69c3ed6c node+0x6cd47d
00fdf674 69c3f379 node+0x60ed6c
00fdf698 69c3ea8a node+0x60f379
00fdf730 778060ae node+0x60ea8a
00fdf73c 00000000 ntdll!RtlAllocateHeap+0x3e

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ff344 6e188d6c node+0x12ae60a
002ff3ac 6be43961 node+0x2a18d6c
002ff420 6ca389e6 node+0x6d3961
002ff4ec 6ca3875e node+0x12c89e6
002ff548 6ca10ec3 node+0x12c875e
002ff584 6ca10acb node+0x12a0ec3
002ff5c4 6ca223d2 node+0x12a0acb
002ff60c 6ca222e2 node+0x12b23d2
002ff650 6be3bd42 node+0x12b22e2
002ff678 6be3d47d node+0x6cbd42
002ff6b8 6bd7ed6c node+0x6cd47d
002ff714 6bd7f379 node+0x60ed6c
002ff738 6bd7ea8a node+0x60f379
002ff73c 6c9fa300 node+0x60ea8a
002ff740 002f0000 node+0x128a300
002ff744 00000000 0x2f0000

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fcd58 105edc08 node+0x2a2f20b
006fd057 4d203a73 node+0xb2dc08
006fd05b 2d6b7261 0x4d203a73
006fd05f 65657773 0x2d6b7261
006fd063 30312070 0x65657773
006fd067 2820362e 0x30312070
006fd06b 382e3231 0x2820362e
006fd06f 3e2d2029 0x382e3231
006fd073 2e303120 0x3e2d2029
006fd077 31282036 0x2e303120
006fd07b 29382e32 0x31282036
006fd07f 2c424d20 0x29382e32
006fd083 382e3620 0x2c424d20
006fd087 30202f20 0x382e3620
006fd08b 6d20302e 0x30202f20
006fd08f 28202073 0x6d20302e
006fd093 72657661 0x28202073
006fd097 20656761 0x72657661
006fd09b 3d20756d 0x20656761
006fd09f 302e3120 0x3d20756d
006fd0a3 202c3030 0x302e3120
006fd0a7 72727563 0x202c3030
006fd0ab 20746e65 0x72727563
006fd0af 3d20756d 0x20746e65
006fd0b3 302e3020 0x3d20756d
006fd0b7 20293430 0x302e3020
006fd0bb 20776f6c 0x20293430
006fd0bf 6f6d656d 0x20776f6c
006fd0c3 6e207972 0x6f6d656d
006fd0c7 6669746f 0x6e207972
006fd0cb 74616369 0x6669746f
006fd0d7 6c6f206e iertutil!CUri::SetPropertyHostType+0x19
006fd0db 70732064 DWrite!ShapingLibraryInternal::charClassificationTable+0x341ae
006fd0df 20656361 0x70732064
006fd0e3 75716572 0x20656361
006fd0e7 65747365 rpcrt4!OSF_CCALL::SendReceive+0x12
006fd0ef 38303935 0x65747365
006fd0f3 3932303a 0x38303935
006fd0f7 34343541 0x3932303a
006fd0fb 31205d30 0x34343541
006fd0ff 35393535 0x31205d30
006fd103 36333135 0x35393535
006fd107 736d2037 0x36333135
006fd157 63202c30 wininet!CAppCacheServerContainer::GetGroupList+0x140
006fd15f 6d20746e 0x63202c30
006fd163 203d2075 0x6d20746e
006fd167 30302e31 0x203d2075
006fd16b 6c202930 0x30302e31
006fd16f 6d20776f 0x6c202930
006fd173 726f6d65 0x6d20776f
006fd177 6f6e2079 0x726f6d65
006fd17b 69666974 0x6f6e2079
006fd17f 69746163 0x69666974
006fd183 47206e6f 0x69746163
006fd187 6e692043 0x47206e6f
006fd18b 646c6f20 0x6e692043
006fd18f 61707320 0x646c6f20
006fd193 72206563 0x61707320
006fd197 65757165 0x72206563
006fd19b 64657473 0x65757165
006fd19f 35315b0a 0x64657473
006fd1a3 3a383039 0x35315b0a
006fd1a7 41393230 0x3a383039
006fd1ab 30343435 0x41393230
006fd1af 3531205d 0x30343435
006fd1b3 35353935 0x3531205d
006fd1b7 33373331 0x35353935
006fd1bb 3a736d20 0x33373331
006fd1bf 72614d20 0x3a736d20
006fd1c3 77732d6b 0x72614d20
006fd1c7 20706565 0x77732d6b
006fd1cb 362e3031 0x20706565
006fd1cf 32312820 0x362e3031
006fd1d3 2029382e 0x32312820
006fd1d7 31203e2d 0x2029382e
006fd1db 20362e30 0x31203e2d
006fd1df 2e323128 0x20362e30
006fd1e3 4d202938 0x2e323128
006fd1e7 36202c42 0x4d202938
006fd1eb 2f20352e 0x36202c42
006fd1ef 302e3020 0x2f20352e
006fd1f3 20736d20 0x302e3020
006fd1f7 76612820 0x20736d20
006fd1fb 67617265 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x1e2820)
006fd1ff 756d2065 0x67617265
006fd2ab 00000000 SHCore!CRasFilePlaceholderParams::ReadUsingRemoteStream+0x799

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0043cc08 69dadc08 node+0x2a2f20b
0043cf07 36333538 node+0xb2dc08
0043cf0b 3a736d20 0x36333538
0043cf0f 72614d20 0x3a736d20
0043cf13 77732d6b 0x72614d20
0043cf17 20706565 0x77732d6b
0043cf1b 302e3031 0x20706565
0043cf1f 32312820 0x302e3031
0043cf23 2029302e 0x32312820
0043cf27 31203e2d 0x2029302e
0043cf2b 20302e30 0x31203e2d
0043cf2f 2e323128 0x20302e30
0043cf33 4d202930 0x2e323128
0043cf37 36202c42 0x4d202930
0043cf3b 2f20342e 0x36202c42
0043cf3f 302e3020 0x2f20342e
0043cf43 20736d20 0x302e3020
0043cf47 76612820 0x20736d20
0043cf63 756d2073 advapi32!SaferpIsNetworkVolume+0x3d2
0043cf77 79726f6d kernel32!`string'+0x13
0043cf7b 746f6e20 0x79726f6d
0043cf87 4347206e shell32!CFileSysItemString::GetJunctionClsid+0x11c
0043cf93 63617073 0x4347206e
0043cf97 65722065 0x63617073
0043cf9b 73657571 0x65722065
0043cf9f 0a646574 0x73657571
0043cfa3 3932365b 0xa646574
0043cfa7 31303a32 0x3932365b
0043cfab 43303645 0x31303a32
0043cfaf 205d3033 0x43303645
0043cfb3 31303120 0x205d3033
0043cfb7 39323538 0x31303120
0043cfbb 3a736d20 0x39323538
0043cfbf 72614d20 0x3a736d20
0043cfc3 77732d6b 0x72614d20
0043cfc7 20706565 0x77732d6b
0043cfcb 372e3031 0x20706565
0043cfcf 32312820 0x372e3031
0043cfd3 2029302e 0x32312820
0043cfd7 31203e2d 0x2029302e
0043cfdb 20312e30 0x31203e2d
0043cfdf 2e323128 0x20312e30
0043cfe3 4d202930 0x2e323128
0043cfe7 35202c42 0x4d202930
0043cfeb 2f20312e 0x35202c42
0043cfef 302e3020 0x2f20312e
0043cff3 20736d20 0x302e3020
0043cff7 76612820 0x20736d20
0043d013 756d2073 advapi32!SaferpIsNetworkVolume+0x3d2
0043d027 79726f6d kernel32!`string'+0x13
0043d02b 746f6e20 0x79726f6d
0043d037 4347206e shell32!CFileSysItemString::GetJunctionClsid+0x11c
0043d043 63617073 0x4347206e
0043d047 65722065 0x63617073
0043d04b 73657571 0x65722065
0043d04f 0a646574 0x73657571
0043d053 3932365b 0xa646574
0043d057 31303a32 0x3932365b
0043d05b 43303645 0x31303a32
0043d05f 205d3033 0x43303645
0043d063 31303120 0x205d3033
0043d067 34333538 0x31303120
0043d06b 3a736d20 0x34333538
0043d06f 72614d20 0x3a736d20
0043d073 77732d6b 0x72614d20
0043d077 20706565 0x77732d6b
0043d07b 312e3031 0x20706565
0043d07f 32312820 0x312e3031
0043d083 2029302e 0x32312820
0043d087 31203e2d 0x2029302e
0043d08b 20312e30 0x31203e2d
0043d08f 2e323128 0x20312e30
0043d093 4d202930 0x2e323128
0043d097 35202c42 0x4d202930
0043d09b 2f20312e 0x35202c42
0043d09f 302e3020 0x2f20312e
0043d0a3 20736d20 0x302e3020
0043d0a7 76612820 0x20736d20
0043d0c3 756d2073 advapi32!SaferpIsNetworkVolume+0x3d2
0043d0d7 79726f6d kernel32!`string'+0x13
0043d0db 746f6e20 0x79726f6d
0043d0e7 4347206e shell32!CFileSysItemString::GetJunctionClsid+0x11c
0043d0f3 63617073 0x4347206e
0043d0f7 65722065 0x63617073
0043d0fb 73657571 0x65722065
0043d0ff 0a646574 0x73657571
0043d103 00000000 0xa646574

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032f4a4 12288d6c node+0x12ae60a
0032f514 0ff43961 node+0x2a18d6c
0032f588 10b389e6 node+0x6d3961
0032f654 10b3875e node+0x12c89e6
0032f6b0 10b10ec3 node+0x12c875e
0032f6ec 10b10acb node+0x12a0ec3
0032f72c 10b223d2 node+0x12a0acb
0032f774 10b222e2 node+0x12b23d2
0032f7b8 0ff3bd42 node+0x12b22e2
0032f7e0 0ff3d47d node+0x6cbd42
0032f820 0fe7ed6c node+0x6cd47d
0032f87c 0fe7f379 node+0x60ed6c
0032f8a0 0fe7ea8a node+0x60f379
0032f8a4 10afa300 node+0x60ea8a
0032f8a8 00320000 node+0x128a300
0032f8ac 00000000 0x320000

Top 28: total counts = 1

ChildEBP RetAddr  
071af464 7c6e91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
071af490 7c6e1b3e rightsmanager!AutorunItem::AutorunItem+0x34
071bfad8 7c6de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
071bfb50 7c717f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
071bfd24 76fa5d49 rightsmanager!RM_AutorunScan+0x176
071bfd34 7752d09b kernel32!BaseThreadInitThunk+0x19
071bfd8c 7752d021 ntdll!__RtlUserThreadStart+0x2b
071bfd9c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 29: total counts = 1

00face8f 72657661 0x28202073
00face93 20656761 context!obfuscated_RegCreateKeyA+0x1
00face97 3d20756d 0x20656761
00face9b 392e3020 0x3d20756d
00face9f 202c3939 0x392e3020
00facea3 72727563 0x202c3939
00facea7 20746e65 0x72727563
00faceab 3d20756d 0x20746e65
00faceaf 302e3020 0x3d20756d
00faceb3 20293230 0x302e3020
00faceb7 20776f6c 0x20293230
00facebb 6f6d656d 0x20776f6c
00facebf 6e207972 node+0x34b656d
00facec3 6669746f node+0x1fe7972
00facec7 74616369 0x6669746f
00facef3 30413436 oleaut32!VarImp+0x49
00facf03 4d203a73 0x30413436
00facf07 2d6b7261 0x4d203a73
00facf0b 65657773 0x2d6b7261
00facf0f 30312070 0x65657773
00facf13 2820372e 0x30312070
00facf17 302e3231 0x2820372e
00facf1b 3e2d2029 0x302e3231
00facf1f 2e303120 0x3e2d2029
00facf23 31282031 0x2e303120
00facf27 29302e32 0x31282031
00facf2b 2c424d20 0x29302e32
00facf2f 2e353120 0x2c424d20
00facf33 202f2036 0x2e353120
00facf37 20322e30 0x202f2036
00facf3b 2020736d 0x20322e30
00facf3f 65766128 0x2020736d
00facf43 65676172 0x65766128
00facf47 20756d20 0x65676172
00facf4b 2e31203d 0x20756d20
00facf4f 2c303030 0x2e31203d
00facf53 72756320 0x2c303030
00facf57 746e6572 0x72756320
00facf5b 20756d20 shlwapi!SETUPAPI_NULL_THUNK_DATA_DLB+0xb2a
00facf5f 2e31203d 0x20756d20
00facf63 29303030 0x2e31203d
00facf67 776f6c20 0x29303030
00facf83 6f206e69 ntdll!RtlExtractBitMap+0x40
00facf97 5b0a6465 node+0x2fe6e69
00facf9b 32373136 0x5b0a6465
00facf9f 3433303a 0x32373136
00facfa3 41343637 0x3433303a
00facfa7 20205d30 0x41343637
00facfab 38363133 0x20205d30
00facfaf 20303331 0x38363133
00facfb3 203a736d 0x20303331
00facfb7 6b72614d 0x203a736d
00facfbb 6577732d 0x6b72614d
00facfbf 31207065 0x6577732d
00facfc3 20312e30 0x31207065
00facfc7 2e323128 0x20312e30
00facfcb 2d202930 0x2e323128
00facfcf 3031203e 0x2d202930
00facfd3 2820312e 0x3031203e
00facfd7 332e3231 0x2820312e
00facfdb 424d2029 0x332e3231
00facfdf 3031202c 0x424d2029
00facfe3 2f20312e 0x3031202c
00facfe7 302e3020 0x2f20312e
00facfeb 20736d20 0x302e3020
00facfef 76612820 0x20736d20
00facff3 67617265 setupapi!`string'+0x18
00facff7 756d2065 0x67617265
00facffb 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x612065)
00facfff 3939392e 0x30203d20
00fad003 7563202c 0x3939392e
00fad007 6e657272 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x57202c)
00fad00b 756d2074 node+0x2437272
00fad00f 30203d20 shell32!wkscli_NULL_THUNK_DATA_DLA  (shell32+0x612074)
00fad013 3431302e 0x30203d20
00fad017 6f6c2029 0x3431302e
00fad01b 656d2077 node+0x34a2029
00fad01f 79726f6d 0x656d2077
00fad023 746f6e20 0x79726f6d
00fad027 63696669 0x746f6e20
00fad02b 6f697461 0x63696669
00fad02f 4347206e node+0x3477461
00fad033 206e6920 0x4347206e
00fad037 20646c6f 0x206e6920
00fad03b 63617073 0x20646c6f
00fad03f 65722065 0x63617073
00fad043 73657571 0x65722065
00fad047 0a646574 0x73657571
00fad04b 00000000 0xa646574

Top 30: total counts = 1

12acf66c 73a1f943 kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
12acf6ac 73a25c8c 360Conf+0x1f943
12acf6e0 77ad93c5 360Conf+0x25c8c
12acf6fc 77af216f ntdll!RtlProcessFlsData+0x57
12acf794 77af2403 ntdll!LdrShutdownThread+0x35
12acf7a4 76b519e8 ntdll!RtlExitUserThread+0x2a
12acf7b8 76fed5f2 KERNELBASE!FreeLibraryAndExitThread+0x5f
12acf7c8 77e4f214 kernel32!FreeLibraryAndExitThreadStub+0x10
12acf7dc 77e4f302 rightsextension!common_end_thread+0x4d
12acf7e8 77e4f16f rightsextension!_endthreadex+0xd
12acf820 76fd344d rightsextension!thread_start+0x5d
12acf82c 77ad9802 kernel32!BaseThreadInitThunk+0xe
12acf86c 77ad97d5 ntdll!__RtlUserThreadStart+0x70
12acf884 00000000 ntdll!_RtlUserThreadStart+0x1b