Analyzed 64 dump

Top 1: total counts = 11

0567f82c 615faeed rightsmanager!RM_AutorunScan+0x176
0567f928 76e1fcc9 ffi_bindings!ffi_call_win32+0x11
0567f938 77d382ae kernel32!BaseThreadInitThunk+0x19
0567f994 77d3827e ntdll!__RtlUserThreadStart+0x2f
0567f9a4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 10

0557f6e4 653aaeed rightsmanager!RM_AutorunScan+0x176
0557f7e0 7622343d ffi_bindings!ffi_call_win32+0x11
0557f7ec 77e89812 kernel32!BaseThreadInitThunk+0xe
0557f82c 77e897e5 ntdll!__RtlUserThreadStart+0x70
0557f844 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 7

05b7f784 55a0aeed rightsmanager!RM_AutorunScan+0x176
05b7f880 76757ba9 ffi_bindings!ffi_call_win32+0x11
05b7f890 7766c2eb kernel32!BaseThreadInitThunk+0x19
05b7f8e8 7766c26f ntdll!__RtlUserThreadStart+0x2b
05b7f8f8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 5

ChildEBP RetAddr  
08a5f3e0 0880e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
08a5f420 0881738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
08a5f670 088112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
08a6fcb8 0880e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
08a6fd30 08847f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
08a6ff04 74e6344d rightsmanager!RM_AutorunScan+0x176
08a6ff10 77319802 kernel32!BaseThreadInitThunk+0xe
08a6ff50 773197d5 ntdll!__RtlUserThreadStart+0x70
08a6ff68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 4

ChildEBP RetAddr  
061ff448 7a93e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
061ff488 7a94738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
061ff6d8 7a9412a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0620fd20 7a93e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0620fd98 7a977f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0620ff6c 75695d49 rightsmanager!RM_AutorunScan+0x176
0620ff7c 76f7d03b kernel32!BaseThreadInitThunk+0x19
0620ffd4 76f7cfc1 ntdll!__RtlUserThreadStart+0x2b
0620ffe4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 2

ChildEBP RetAddr  
003ceebc 70022d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 7: total counts = 2

ChildEBP RetAddr  
0545f080 0951e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0545f0c0 0952738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0545f310 095212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0546f958 0951e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0546f9d0 09557f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0546fba4 757f00c9 rightsmanager!RM_AutorunScan+0x176
0546fbb4 777f7b1e kernel32!BaseThreadInitThunk+0x19
0546fc10 777f7aee ntdll!__RtlUserThreadStart+0x2f
0546fc20 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 1

ChildEBP RetAddr  
0501f320 0f6fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0501f360 0f70738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0501f5b0 0f7012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0502fbf8 0f6fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0502fc70 0f737f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0502fe44 7730343d rightsmanager!RM_AutorunScan+0x176
0502fe50 77b49802 kernel32!BaseThreadInitThunk+0xe
0502fe90 77b497d5 ntdll!__RtlUserThreadStart+0x70
0502fea8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 1

0470fa0c 0f78aeed rightsmanager!RM_AutorunScan+0x176
0470fb08 757c8494 ffi_bindings!ffi_call_win32+0x11
0470fb1c 77bb41c8 kernel32!BaseThreadInitThunk+0x24
0470fb64 77bb4198 ntdll!__RtlUserThreadStart+0x2f
0470fb74 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 1

ChildEBP RetAddr  
059ef2c4 7b058686 rightsmanager!AutorunItem::AutorunItem+0x26
059ef314 7b051b4f rightsmanager!std::vector >::_Emplace_reallocate+0x176
059ff960 7b04e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11ef
059ff9d8 7b087f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
059ffbac 75eafa29 rightsmanager!RM_AutorunScan+0x176
059ffbbc 773c7a7e kernel32!BaseThreadInitThunk+0x19
059ffc18 773c7a4e ntdll!__RtlUserThreadStart+0x2f
059ffc28 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 1

ChildEBP RetAddr  
0504f328 12abe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0504f368 12ac738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0504f5b8 12ac12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0505fc00 12abe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0505fc78 12af7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0505fe4c 75d3fcc9 rightsmanager!RM_AutorunScan+0x176
0505fe5c 776f82ae kernel32!BaseThreadInitThunk+0x19
0505feb8 776f827e ntdll!__RtlUserThreadStart+0x2f
0505fec8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afb9d0 1036dc08 node+0x2a2f20b
00afbccf 20372e32 node+0xb2dc08
00afbcd3 2e30202f 0x20372e32
00afbcd7 736d2030 0x2e30202f
00afbcdb 61282020 0x736d2030
00afbcdf 61726576 0x61282020
00afbce3 6d206567 0x61726576
00afbce7 203d2075 0x6d206567
00afbceb 30302e31 0x203d2075
00afbcef 63202c30 0x30302e31
00afbcf3 65727275 0x63202c30
00afbcf7 6d20746e 0x65727275
00afbcfb 203d2075 0x6d20746e
00afbcff 30302e31 0x203d2075
00afbd03 61202930 0x30302e31
00afbd07 636f6c6c 0x61202930
00afbd0b 6f697461 0x636f6c6c
00afbd0f 6166206e 0x6f697461
00afbd13 72756c69 0x6166206e
00afbd37 61635320 dbghelp!SymGetModuleInfoW64+0x139
00afbd4b 203e2d20 0x61635320
00afbd4f 20322e38 0x203e2d20
00afbd53 2e333128 0x20322e38
00afbd57 4d202934 0x2e333128
00afbd5b 31202c42 0x4d202934
00afbd5f 2f20322e 0x31202c42
00afbd63 302e3020 0x2f20322e
00afbd67 20736d20 0x302e3020
00afbd6b 76612820 0x20736d20
00afbfab 00000000 cfgmgr32!SpInfDirectoryIdToPath+0x1c9

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040f114 58d38d6c node+0x12ae60a
0040f184 569f3961 node+0x2a18d6c
0040f1f8 575e89e6 node+0x6d3961
0040f2c4 575e875e node+0x12c89e6
0040f320 575c0ec3 node+0x12c875e
0040f35c 575c0acb node+0x12a0ec3
0040f39c 575d23d2 node+0x12a0acb
0040f3e4 575d22e2 node+0x12b23d2
0040f428 569ebd42 node+0x12b22e2
0040f450 569ed47d node+0x6cbd42
0040f490 5692ed6c node+0x6cd47d
0040f4ec 5692f379 node+0x60ed6c
0040f510 5692ea8a node+0x60f379
0040f514 575aa300 node+0x60ea8a
0040f518 00400000 node+0x128a300
0040f51c 00000000 0x400000

Top 14: total counts = 1

00dbd10b 656d2077 GdiPlus!QuickFormatting+0x14e
00dbd123 206e6920 PicFace+0x1f2077
00dbd127 20646c6f 0x206e6920
00dbd12b 63617073 0x20646c6f
00dbd12f 65722065 0x63617073
00dbd133 73657571 PicFace+0x242065
00dbd137 0a646574 wininet!`string'+0x68c9d
00dbd13b 00000000 0xa646574

Top 15: total counts = 1

0554fa0c 6b38e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0554fa14 6b38e8c1 node+0x2f3e6e0
0554fa18 08c68ecc node+0x2f3e8c1
0554fa1c 6b38e7dd 0x8c68ecc
0554fa20 003de50c node+0x2f3e7dd
0554fa24 00000000 0x3de50c

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dfc890 529fdc08 node+0x2a2f20b
00dfcb8f 6d203833 node+0xb2dc08
00dfcb93 4d203a73 0x6d203833
00dfcb97 2d6b7261 0x4d203a73
00dfcb9b 65657773 0x2d6b7261
00dfcb9f 30312070 0x65657773
00dfcba3 2820332e 0x30312070
00dfcba7 302e3231 0x2820332e
00dfcbab 3e2d2029 0x302e3231
00dfcbaf 2e303120 0x3e2d2029
00dfcbb3 31282033 0x2e303120
00dfcbb7 29302e32 0x31282033
00dfcbbb 2c424d20 0x29302e32
00dfcbbf 372e3620 0x2c424d20
00dfcbc3 30202f20 0x372e3620
00dfcbc7 6d20302e 0x30202f20
00dfcbcb 28202073 0x6d20302e
00dfcbcf 72657661 0x28202073
00dfcbd3 20656761 0x72657661
00dfcbd7 3d20756d 0x20656761
00dfcbdb 302e3120 0x3d20756d
00dfcbdf 202c3030 0x302e3120
00dfcbe3 72727563 0x202c3030
00dfcbe7 20746e65 0x72727563
00dfcbeb 3d20756d 0x20746e65
00dfcbef 302e3020 0x3d20756d
00dfcbf3 20293530 0x302e3020
00dfcbf7 20776f6c 0x20293530
00dfcbfb 6f6d656d 0x20776f6c
00dfcbff 6e207972 taskschd!`string'+0x15
00dfcc03 6669746f 0x6e207972
00dfcc07 74616369 0x6669746f
00dfcc0b 206e6f69 0x74616369
00dfcc0f 69204347 0x206e6f69
00dfcc13 6c6f206e 0x69204347
00dfcc17 70732063 0x6c6f206e
00dfcc1f 75716572 windows_storage!BindCtx_RegisterFileOperation+0x31
00dfcc27 315b0a64 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x2d6572)
00dfcc2b 38343735 0x315b0a64
00dfcc2f 3233303a 0x38343735
00dfcc33 35333138 0x3233303a
00dfcc37 33205d38 0x35333138
00dfcc3b 37373331 0x33205d38
00dfcc3f 20323435 0x37373331
00dfcc43 203a736d 0x20323435
00dfcc47 6b72614d 0x203a736d
00dfcc4b 6577732d 0x6b72614d
00dfcc4f 31207065 0x6577732d
00dfcc53 20382e30 0x31207065
00dfcc57 2e323128 0x20382e30
00dfcc5b 2d202930 0x2e323128
00dfcc5f 3031203e 0x2d202930
00dfcc63 2820332e 0x3031203e
00dfcc67 302e3231 0x2820332e
00dfcc6b 424d2029 0x302e3231
00dfcc6f 2e36202c 0x424d2029
00dfcc73 202f2034 0x2e36202c
00dfcc77 20302e30 0x202f2034
00dfcc7b 2020736d 0x20302e30
00dfcc7f 65766128 0x2020736d
00dfcc83 65676172 0x65766128
00dfcc87 20756d20 0x65676172
00dfcc8b 2e31203d 0x20756d20
00dfcc8f 2c303030 0x2e31203d
00dfcc93 72756320 0x2c303030
00dfcc97 746e6572 0x72756320
00dfcc9b 20756d20 0x746e6572
00dfcc9f 2e31203d 0x20756d20
00dfcca3 29303030 0x2e31203d
00dfcca7 776f6c20 0x29303030
00dfccab 6d656d20 0x776f6c20
00dfccaf 2079726f 0x6d656d20
00dfccb3 69746f6e 0x2079726f
00dfccb7 61636966 0x69746f6e
00dfccbb 6e6f6974 0x61636966
00dfccbf 20434720 0x6e6f6974
00dfccc3 6f206e69 0x20434720
00dfccc7 7320646c 0x6f206e69
00dfcccb 65636170 0x7320646c
00dfcccf 71657220 0x65636170
00dfccd3 74736575 0x71657220
00dfccd7 5b0a6465 0x74736575
00dfccdb 34373531 0x5b0a6465
00dfccdf 33303a38 0x34373531
00dfcce3 33313832 0x33303a38
00dfcce7 205d3835 0x33313832
00dfcceb 37333133 0x205d3835
00dfccef 30353537 0x37333133
00dfccf3 3a736d20 0x30353537
00dfccf7 72614d20 0x3a736d20
00dfccfb 77732d6b 0x72614d20
00dfccff 20706565 0x77732d6b
00dfcd03 332e3031 0x20706565
00dfcd07 32312820 0x332e3031
00dfcd0b 2029302e 0x32312820
00dfcd0f 31203e2d 0x2029302e
00dfcd13 20332e30 0x31203e2d
00dfcd17 2e323128 0x20332e30
00dfcd1b 4d202930 0x2e323128
00dfcd1f 37202c42 0x4d202930
00dfcd23 2f20322e 0x37202c42
00dfcd27 302e3020 0x2f20322e
00dfcd2b 20736d20 0x302e3020
00dfcd2f 76612820 0x20736d20
00dfcd33 67617265 shell32!`OpenWithTelemetry::OpenWithMenuInvokeCommand::StopActivity'::`12'::_tlgEvent+0x8a
00dfcd37 756d2065 0x67617265
00dfcd3b 31203d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x292065)
00dfcd3f 3030302e 0x31203d20
00dfcd43 7563202c 0x3030302e
00dfcd47 6e657272 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x1f202c)
00dfcd4b 756d2074 0x6e657272
00dfcd4f 30203d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x292074)
00dfcd53 3430302e 0x30203d20
00dfcd57 6f6c2029 0x3430302e
00dfcd5b 656d2077 0x6f6c2029
00dfcd5f 79726f6d 0x656d2077
00dfcd63 746f6e20 0x79726f6d
00dfcd67 63696669 0x746f6e20
00dfcd6b 6f697461 0x63696669
00dfcd6f 4347206e hid!_NULL_IMPORT_DESCRIPTOR+0x2c5
00dfcd73 206e6920 0x4347206e
00dfcd77 20646c6f 0x206e6920
00dfcd7b 63617073 0x20646c6f
00dfcd7f 65722065 0x63617073
00dfcd83 73657571 0x65722065
00dfcd87 0a646574 0x73657571
00dfcd8b 00000000 0xa646574

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff774 70a38cc5 node+0x12ae60a
012ff80c 6e6f3961 node+0x2a18cc5
012ff880 6f2e89e6 node+0x6d3961
012ff94c 6f2e875e node+0x12c89e6
012ff9a8 6f2c0ec3 node+0x12c875e
012ff9e4 6f2c0acb node+0x12a0ec3
012ffa24 6f2d23d2 node+0x12a0acb
012ffa6c 6f2d22e2 node+0x12b23d2
012ffab0 6e6ebd42 node+0x12b22e2
012ffad8 6e6ed47d node+0x6cbd42
012ffb18 6e62ed6c node+0x6cd47d
012ffb74 6e62f379 node+0x60ed6c
012ffb98 6e62ea8a node+0x60f379
012ffc30 77b05dde node+0x60ea8a
012ffce4 77b03c16 ntdll!RtlAllocateHeap+0x3e
012ffcfc 72662d00 ntdll!RtlFreeHeap+0x46
012ffd0c 00000000 node+0x4642d00

Top 18: total counts = 1

ChildEBP RetAddr  
0520f214 798591a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0520f240 79851b3e rightsmanager!AutorunItem::AutorunItem+0x34
0521f888 7984e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0521f900 79887f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0521fad4 7501fcc9 rightsmanager!RM_AutorunScan+0x176
0521fae4 76fe7cbe kernel32!BaseThreadInitThunk+0x19
0521fb40 76fe7c8e ntdll!__RtlUserThreadStart+0x2f
0521fb50 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0044f614 6b1d8d6c node+0x12ae60a
0044f684 68e93961 node+0x2a18d6c
0044f6f8 69a889e6 node+0x6d3961
0044f7c4 69a8875e node+0x12c89e6
0044f820 69a60ec3 node+0x12c875e
0044f85c 69a60acb node+0x12a0ec3
0044f89c 69a723d2 node+0x12a0acb
0044f8e4 69a722e2 node+0x12b23d2
0044f928 68e8bd42 node+0x12b22e2
0044f950 68e8d47d node+0x6cbd42
0044f990 68dced6c node+0x6cd47d
0044f9ec 68dcf379 node+0x60ed6c
0044fa10 68dcea8a node+0x60f379
0044fa14 69a4a300 node+0x60ea8a
0044fa18 00440000 node+0x128a300
0044fa1c 00000000 0x440000

Top 20: total counts = 1

ChildEBP RetAddr  
0590f1d0 7bcde731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0590f210 7bce738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0590f460 7bce12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0591faa8 7bcde943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0591fb20 7bd17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0591fcf4 76d95d49 rightsmanager!RM_AutorunScan+0x176
0591fd04 775ece3b kernel32!BaseThreadInitThunk+0x19
0591fd5c 775ecdc1 ntdll!__RtlUserThreadStart+0x2b
0591fd6c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008ff424 6d748cc5 node+0x12ae60a
008ff4bc 6b403961 node+0x2a18cc5
008ff530 6bff89e6 node+0x6d3961
008ff5fc 6bff875e node+0x12c89e6
008ff658 6bfd0ec3 node+0x12c875e
008ff694 6bfd0acb node+0x12a0ec3
008ff6d4 6bfe23d2 node+0x12a0acb
008ff71c 6bfe22e2 node+0x12b23d2
008ff760 6b3fbd42 node+0x12b22e2
008ff788 6b3fd47d node+0x6cbd42
008ff7c8 6b33ed6c node+0x6cd47d
008ff824 6b33f379 node+0x60ed6c
008ff848 6b33ea8a node+0x60f379
008ff8e0 777cadee node+0x60ea8a
008ff8ec 00000000 ntdll!RtlAllocateHeap+0x3e

Top 22: total counts = 1

056af780 6fc5e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
056af7ec 750e347d node+0x2f3e6e0
056af7f8 77999852 kernel32!BaseThreadInitThunk+0xe
056af838 77999825 ntdll!__RtlUserThreadStart+0x70
056af850 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0033cd28 61b6dc08 node+0x2a2f20b
0033d027 72614d20 node+0xb2dc08
0033d02b 77732d6b 0x72614d20
0033d02f 20706565 0x77732d6b
0033d033 312e3031 0x20706565
0033d037 32312820 0x312e3031
0033d03b 2029302e 0x32312820
0033d03f 31203e2d 0x2029302e
0033d043 20312e30 0x31203e2d
0033d047 2e323128 0x20312e30
0033d04b 4d202930 0x2e323128
0033d04f 33202c42 0x4d202930
0033d053 312e3230 0x33202c42
0033d057 30202f20 0x312e3230
0033d05b 6d20302e 0x30202f20
0033d05f 28202073 0x6d20302e
0033d063 72657661 0x28202073
0033d067 20656761 0x72657661
0033d06b 3d20756d 0x20656761
0033d06f 392e3020 0x3d20756d
0033d073 202c3437 0x392e3020
0033d077 72727563 0x202c3437
0033d07b 20746e65 0x72727563
0033d07f 3d20756d 0x20746e65
0033d083 302e3020 0x3d20756d
0033d087 20293030 0x302e3020
0033d08b 20776f6c 0x20293030
0033d08f 6f6d656d 0x20776f6c
0033d093 6e207972 0x6f6d656d
0033d097 6669746f 0x6e207972
0033d09b 74616369 0x6669746f
0033d09f 206e6f69 rsaenh!rijndaelKeyEncToDec+0x49
0033d0ab 70732064 0x206e6f69
0033d0af 20656361 0x70732064
0033d0b3 75716572 0x20656361
0033d0b7 65747365 iertutil!IEVALUE_GUID_Ried_InternetSettings_TemplatePolicies_Low2102+0x2
0033d0bb 325b0a64 node+0x4707365
0033d0bf 3a343434 0x325b0a64
0033d0c3 44413030 0x3a343434
0033d0c7 38314246 0x44413030
0033d0cb 3832205d 0x38314246
0033d0cf 38343839 0x3832205d
0033d0d3 20393431 0x38343839
0033d0d7 203a736d 0x20393431
0033d0db 6b72614d 0x203a736d
0033d0df 6577732d 0x6b72614d
0033d0e3 31207065 node+0x473732d
0033d0e7 20342e30 0x31207065
0033d0eb 2e323128 0x20342e30
0033d0ef 2d202930 0x2e323128
0033d0f3 3031203e 0x2d202930
0033d0f7 2820312e 0x3031203e
0033d0fb 302e3231 0x2820312e
0033d0ff 424d2029 0x302e3231
0033d103 3532202c 0x424d2029
0033d107 20382e32 0x3532202c
0033d10b 2e30202f 0x20382e32
0033d10f 736d2030 0x2e30202f
0033d113 61282020 0x736d2030
0033d117 61726576 node+0x242020
0033d11b 6d206567 node+0x6e6576
0033d11f 203d2075 0x6d206567
0033d123 39392e30 0x203d2075
0033d127 63202c30 0x39392e30
0033d12b 65727275 node+0x21c2c30
0033d12f 6d20746e node+0x46e7275
0033d133 203d2075 0x6d20746e
0033d137 39392e30 0x203d2075
0033d13b 6c202936 0x39392e30
0033d13f 6d20776f 0x6c202936
0033d143 726f6d65 0x6d20776f
0033d147 6f6e2079 0x726f6d65
0033d14b 69666974 0x6f6e2079
0033d14f 69746163 0x69666974
0033d153 47206e6f 0x69746163
0033d157 6e692043 0x47206e6f
0033d15b 646c6f20 0x6e692043
0033d15f 61707320 node+0x3686f20
0033d163 72206563 node+0x6c7320
0033d167 65757165 0x72206563
0033d16b 64657473 node+0x4717165
0033d16f 34325b0a node+0x3617473
0033d173 303a3434 0x34325b0a
0033d177 46444130 0x303a3434
0033d17b 5d383142 0x46444130
0033d17f 39383220 0x5d383142
0033d183 32383438 0x39383220
0033d187 6d203638 0x32383438
0033d18b 4d203a73 0x6d203638
0033d18f 2d6b7261 0x4d203a73
0033d193 65657773 0x2d6b7261
0033d197 30312070 node+0x4617773
0033d19b 2820312e 0x30312070
0033d19f 302e3231 0x2820312e
0033d1a3 3e2d2029 0x302e3231
0033d1a7 2e303120 0x3e2d2029
0033d1ab 31282031 0x2e303120
0033d1af 29302e32 0x31282031
0033d1b3 2c424d20 0x29302e32
0033d1b7 36333120 0x2c424d20
0033d1bb 2f20392e 0x36333120
0033d1bf 302e3020 0x2f20392e
0033d1c3 20736d20 0x302e3020
0033d1c7 76612820 0x20736d20
0033d30b 00000000 comdlg32!GetFontStylesAndSizes+0x284

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010ff3f4 71db8d6c node+0x12ae60a
010ff464 6fa73961 node+0x2a18d6c
010ff4d8 706689e6 node+0x6d3961
010ff5a4 7066875e node+0x12c89e6
010ff600 70640ec3 node+0x12c875e
010ff63c 70640acb node+0x12a0ec3
010ff67c 706523d2 node+0x12a0acb
010ff6c4 706522e2 node+0x12b23d2
010ff708 6fa6bd42 node+0x12b22e2
010ff730 6fa6d47d node+0x6cbd42
010ff770 6f9aed6c node+0x6cd47d
010ff7cc 6f9af379 node+0x60ed6c
010ff7f0 6f9aea8a node+0x60f379
010ff888 77a15dde node+0x60ea8a
010ff93c 77a13c16 ntdll!RtlAllocateHeap+0x3e
010ff954 72662d00 ntdll!RtlFreeHeap+0x46
010ff964 00000000 node+0x32c2d00

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fec38 7044f7d7 node+0xdf4ea2
010fec58 704a2060 node+0x10cf7d7
010fec6c 703dcd50 node+0x1122060
010fecb4 703dcd50 node+0x105cd50
010fece0 703dcd50 node+0x105cd50
010fed6c 703d733c node+0x105cd50
010fed8c 703dac3f node+0x105733c
010fedac 703daa5b node+0x105ac3f
010fedd8 6ffc4534 node+0x105aa5b
010fee6c 6ffaad6d node+0xc44534
010fee7c 04e51b00 node+0xc2ad6d
010fee80 00000000 0x4e51b00

Top 26: total counts = 1

ChildEBP RetAddr  
05dcecc8 7c19e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
05dced08 7c1a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05dcef58 7c1a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ddf5a0 7c19e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ddf618 7c1d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ddf7ec 756d7ba9 rightsmanager!RM_AutorunScan+0x176
05ddf7fc 7753c3ab kernel32!BaseThreadInitThunk+0x19
05ddf854 7753c32f ntdll!__RtlUserThreadStart+0x2b
05ddf864 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 27: total counts = 1

050bf9a8 6901e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
050bf9b0 6901e8c1 node+0x2f3e6e0
050bf9b4 0c10715c node+0x2f3e8c1
050bf9b8 6901e7dd 0xc10715c
050bf9bc 001ce3fc node+0x2f3e7dd
050bf9c0 00000000 0x1ce3fc

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0d5ff990 77a6398f SogouPY+0x1288d6
0d5ff9bc 77a54376 user32!_InternalCallWinProc+0x2b
0d5ffab4 77a53df0 user32!UserCallWinProcCheckWow+0x4c6
0d5ffb18 77a61407 user32!DispatchClientMessage+0x190
0d5ffb58 77c6937d user32!__fnINLPWINDOWPOS+0x37
0d5ffba8 77a609b0 ntdll!KiUserCallbackDispatcher+0x4d
0d5ffbe4 79a3b9f7 user32!GetMessageW+0x30
0d5ffde8 79b2f16a rightsextension!Rights::MainEntry+0x2a7
0d5ffe20 762e7ba9 rightsextension!thread_start+0x58
0d5ffe30 77c5c2eb kernel32!BaseThreadInitThunk+0x19
0d5ffe88 77c5c26f ntdll!__RtlUserThreadStart+0x2b
0d5ffe98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005acdc8 5c8bdc08 node+0x2a2f20b
005ad0c7 736d2037 node+0xb2dc08
005ad0cb 614d203a CRYPTBASE!Spbox+0x51f
005ad0cf 732d6b72 0x614d203a
005ad0d3 70656577 0x732d6b72
005ad0d7 2e303120 0x70656577
005ad0db 31282032 0x2e303120
005ad0df 29332e32 0x31282032
005ad0e3 203e2d20 0x29332e32
005ad0e7 322e3031 0x203e2d20
005ad0eb 32312820 0x322e3031
005ad0ef 2029332e 0x32312820
005ad0f3 202c424d 0x2029332e
005ad0f7 20372e36 0x202c424d
005ad0fb 2e30202f 0x20372e36
005ad0ff 736d2030 0x2e30202f
005ad103 61282020 CRYPTBASE!Spbox+0x518
005ad107 61726576 0x61282020
005ad10b 6d206567 0x61726576
005ad10f 203d2075 0x6d206567
005ad113 30302e31 0x203d2075
005ad117 63202c30 0x30302e31
005ad11b 65727275 0x63202c30
005ad11f 6d20746e 0x65727275
005ad123 203d2075 0x6d20746e
005ad127 30302e30 0x203d2075
005ad12b 6c202939 0x30302e30
005ad12f 6d20776f 0x6c202939
005ad22f 72614d20 0x6d20776f
005ae2cb 00000000 urlmon!CINetHttp::HttpSecurityProblem+0x2c9

Top 30: total counts = 1

0908f788 64e1e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
0908f790 64e1e8c1 node+0x2f3e6e0
0908f794 063e6d6c node+0x2f3e8c1
0908f798 64e1e7dd 0x63e6d6c
0908f79c 0019e24c node+0x2f3e7dd
0908f7a0 00000000 0x19e24c