Analyzed 164 dump

Top 1: total counts = 32

ChildEBP RetAddr  
0117e524 00000000 KERNELBASE!RaiseException+0x62

Top 2: total counts = 11

0567f82c 615faeed rightsmanager!RM_AutorunScan+0x176
0567f928 76e1fcc9 ffi_bindings!ffi_call_win32+0x11
0567f938 77d382ae kernel32!BaseThreadInitThunk+0x19
0567f994 77d3827e ntdll!__RtlUserThreadStart+0x2f
0567f9a4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 10

0557f6e4 653aaeed rightsmanager!RM_AutorunScan+0x176
0557f7e0 7622343d ffi_bindings!ffi_call_win32+0x11
0557f7ec 77e89812 kernel32!BaseThreadInitThunk+0xe
0557f82c 77e897e5 ntdll!__RtlUserThreadStart+0x70
0557f844 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 9

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

Top 5: total counts = 8

ChildEBP RetAddr  
001be4c4 10bce479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
001be4d8 005fcff2 node+0x12ae479
001be4dc 00000000 0x5fcff2

Top 6: total counts = 7

05b7f784 55a0aeed rightsmanager!RM_AutorunScan+0x176
05b7f880 76757ba9 ffi_bindings!ffi_call_win32+0x11
05b7f890 7766c2eb kernel32!BaseThreadInitThunk+0x19
05b7f8e8 7766c26f ntdll!__RtlUserThreadStart+0x2b
05b7f8f8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 5

ChildEBP RetAddr  
08a5f3e0 0880e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
08a5f420 0881738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
08a5f670 088112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
08a6fcb8 0880e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
08a6fd30 08847f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
08a6ff04 74e6344d rightsmanager!RM_AutorunScan+0x176
08a6ff10 77319802 kernel32!BaseThreadInitThunk+0xe
08a6ff50 773197d5 ntdll!__RtlUserThreadStart+0x70
08a6ff68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 5

ChildEBP RetAddr  
0034e624 63a7e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0034e638 005fcff0 node+0x12ae479
0034e63c 00000000 0x5fcff0

Top 9: total counts = 4

ChildEBP RetAddr  
0028e53c 5d0be479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0028e550 00193201 node+0x12ae479
0028e554 00000000 0x193201

Top 10: total counts = 4

ChildEBP RetAddr  
061ff448 7a93e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
061ff488 7a94738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
061ff6d8 7a9412a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0620fd20 7a93e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0620fd98 7a977f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0620ff6c 75695d49 rightsmanager!RM_AutorunScan+0x176
0620ff7c 76f7d03b kernel32!BaseThreadInitThunk+0x19
0620ffd4 76f7cfc1 ntdll!__RtlUserThreadStart+0x2b
0620ffe4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 3

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

Top 12: total counts = 3

ChildEBP RetAddr  
112ff3a0 78e70081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
112ff3dc 78e7351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
112ff8dc 78e74624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
112ff910 78e785a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
112ffa3c 78e7917a rightsextension!CRegData::MonitorFunction+0x4b3
112ffa5c 78e78a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
112ffa64 78f8864a rightsextension!std::_Pad::_Call_func+0xa
112ffa9c 77bafcc9 rightsextension!thread_start+0x58
112ffaac 77de82ae kernel32!BaseThreadInitThunk+0x19
112ffb08 77de827e ntdll!__RtlUserThreadStart+0x2f
112ffb18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 2

ChildEBP RetAddr  
003ceebc 70022d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 14: total counts = 2

ChildEBP RetAddr  
00b0e944 00000000 KERNELBASE!RaiseException+0x64

Top 15: total counts = 2

ChildEBP RetAddr  
0545f080 0951e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0545f0c0 0952738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0545f310 095212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0546f958 0951e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0546f9d0 09557f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0546fba4 757f00c9 rightsmanager!RM_AutorunScan+0x176
0546fbb4 777f7b1e kernel32!BaseThreadInitThunk+0x19
0546fc10 777f7aee ntdll!__RtlUserThreadStart+0x2f
0546fc20 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 1

ChildEBP RetAddr  
006feaa4 006feb80 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006feab8 006feac8 0x6feb80
006feabc 029e0000 0x6feac8
006feac8 00000000 0x29e0000

Top 17: total counts = 1

ChildEBP RetAddr  
0037ea38 661ee87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0037eb10 66238a79 node+0x12ae87c
0037eb14 005fcff0 node+0x12f8a79
0037eb18 00b58d28 0x5fcff0
0037eb1c 00000000 0xb58d28

Top 18: total counts = 1

ChildEBP RetAddr  
0501f320 0f6fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0501f360 0f70738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0501f5b0 0f7012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0502fbf8 0f6fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0502fc70 0f737f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0502fe44 7730343d rightsmanager!RM_AutorunScan+0x176
0502fe50 77b49802 kernel32!BaseThreadInitThunk+0xe
0502fe90 77b497d5 ntdll!__RtlUserThreadStart+0x70
0502fea8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 19: total counts = 1

0470fa0c 0f78aeed rightsmanager!RM_AutorunScan+0x176
0470fb08 757c8494 ffi_bindings!ffi_call_win32+0x11
0470fb1c 77bb41c8 kernel32!BaseThreadInitThunk+0x24
0470fb64 77bb4198 ntdll!__RtlUserThreadStart+0x2f
0470fb74 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

ChildEBP RetAddr  
059ef2c4 7b058686 rightsmanager!AutorunItem::AutorunItem+0x26
059ef314 7b051b4f rightsmanager!std::vector >::_Emplace_reallocate+0x176
059ff960 7b04e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11ef
059ff9d8 7b087f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
059ffbac 75eafa29 rightsmanager!RM_AutorunScan+0x176
059ffbbc 773c7a7e kernel32!BaseThreadInitThunk+0x19
059ffc18 773c7a4e ntdll!__RtlUserThreadStart+0x2f
059ffc28 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfbfc8 54afdc08 node+0x2a2ee0b
00cfc2c7 2033206e node+0xb2dc08
00cfc2cb 70657473 0x2033206e
00cfc2cf 69732073 0x70657473
00cfc2d3 2065636e 0x69732073
00cfc2d7 72617473 0x2065636e
00cfc2db 666f2074 0x72617473
00cfc2df 72616d20 0x666f2074
00cfc2e3 676e696b 0x72616d20
00cfc2e7 6962202c 0x676e696b
00cfc2eb 73656767 0x6962202c
00cfc2ef 74732074 0x73656767
00cfc2f3 30207065 0x74732074
00cfc2f7 6d20342e 0x30207065
00cfc2fb 77202c73 0x6d20342e
00cfc2ff 746c6c61 user32!wtdccm_NULL_THUNK_DATA_DLA  (user32+0x1a2c73)
00cfc303 20656d69 0x746c6c61
00cfc307 636e6973 0x20656d69
00cfc30b 74732065 0x636e6973
00cfc30f 20747261 0x74732065
00cfc313 6d20666f 0x20747261
00cfc317 696b7261 0x6d20666f
00cfc31b 3120676e 0x696b7261
00cfc31f 736d2039 0x3120676e
00cfc323 61282029 0x736d2039
00cfc327 61726576 0x61282029
00cfc32b 6d206567 0x61726576
00cfc32f 203d2075 0x6d206567
00cfc333 30302e31 0x203d2075
00cfc337 63202c30 0x30302e31
00cfc33b 65727275 0x63202c30
00cfc33f 6d20746e 0x65727275
00cfc343 203d2075 0x6d20746e
00cfc347 39392e30 0x203d2075
00cfc34b 66202934 0x39392e30
00cfc34f 6c616e69 0x66202934
00cfc353 20657a69 0x6c616e69
00cfc357 72636e69 0x20657a69
00cfc35b 6e656d65 0x72636e69
00cfc35f 206c6174 0x6e656d65
00cfc363 6b72616d 0x206c6174
00cfc367 30315b69 0x6b72616d
00cfc36b 3a303032 0x30315b69
00cfc36f 38303330 0x3a303032
00cfc373 38393936 0x38303330
00cfc377 3520205d 0x38393936
00cfc37b 37323034 0x3520205d
00cfc37f 6d203331 0x37323034
00cfc383 4d203a73 0x6d203331
00cfc387 2d6b7261 0x4d203a73
00cfc38b 65657773 0x2d6b7261
00cfc38f 2e372070 0x65657773
00cfc393 39282036 0x2e372070
00cfc397 2029372e 0x39282036
00cfc39b 37203e2d 0x2029372e
00cfc39f 2820362e 0x37203e2d
00cfc3a3 29372e39 0x2820362e
00cfc3a7 2c424d20 0x29372e39
00cfc3ab 322e3620 0x2c424d20
00cfc3af 30202f20 0x322e3620
00cfc3b3 6d20302e 0x30202f20
00cfc3b7 28202073 0x6d20302e
00cfc3bb 72657661 0x28202073
00cfc3bf 20656761 0x72657661
00cfc3c3 3d20756d 0x20656761
00cfc3c7 302e3120 0x3d20756d
00cfc3cb 202c3030 0x302e3120
00cfc3cf 72727563 0x202c3030
00cfc3d3 20746e65 0x72727563
00cfc3d7 3d20756d 0x20746e65
00cfc3db 392e3020 0x3d20756d
00cfc3df 20293939 0x392e3020
00cfc3e3 20776f6c 0x20293939
00cfc3e7 6f6d656d 0x20776f6c
00cfc3eb 6e207972 0x6f6d656d
00cfc3ef 6669746f 0x6e207972
00cfc3f3 74616369 0x6669746f
00cfc3f7 206e6f69 0x74616369
00cfc3fb 69204347 0x206e6f69
00cfc3ff 6c6f206e 0x69204347
00cfc403 70732064 0x6c6f206e
00cfc407 20656361 0x70732064
00cfc40b 75716572 0x20656361
00cfc40f 65747365 0x75716572
00cfc413 315b0a64 0x65747365
00cfc417 30303230 0x315b0a64
00cfc41b 3033303a 0x30303230
00cfc41f 39393638 0x3033303a
00cfc423 20205d38 0x39393638
00cfc427 32303435 0x20205d38
00cfc42b 20303237 0x32303435
00cfc42f 203a736d 0x20303237
00cfc433 6b72614d 0x203a736d
00cfc437 6577732d 0x6b72614d
00cfc43b 37207065 0x6577732d
00cfc43f 2820362e 0x37207065
00cfc443 29372e39 0x2820362e
00cfc447 203e2d20 0x29372e39
00cfc44b 20362e37 0x203e2d20
00cfc44f 2e303128 0x20362e37
00cfc453 4d202930 0x2e303128
00cfc457 36202c42 0x4d202930
00cfc45b 2f20312e 0x36202c42
00cfc45f 302e3020 0x2f20312e
00cfc463 20736d20 0x302e3020
00cfc467 76612820 0x20736d20
00cfc46b 67617265 setupapi!ext-ms-win-uxtheme-themes-l1-1-0_NULL_THUNK_DATA_DLA  (setupapi+0x1f2820)
00cfc46f 756d2065 0x67617265
00cfc473 30203d20 0x756d2065
00cfc477 3939392e 0x30203d20
00cfc47b 7563202c 0x3939392e
00cfc47f 6e657272 0x7563202c
00cfc483 756d2074 0x6e657272
00cfc487 30203d20 0x756d2074
00cfc48b 3530302e 0x30203d20
00cfc48f 6f6c2029 0x3530302e
00cfc493 656d2077 0x6f6c2029
00cfc497 79726f6d 0x656d2077
00cfc49b 746f6e20 0x79726f6d
00cfc49f 63696669 0x746f6e20
00cfc4a3 6f697461 0x63696669
00cfc4a7 4347206e 0x6f697461
00cfc4ab 206e6920 0x4347206e
00cfc4af 20646c6f 0x206e6920
00cfc4b3 63617073 0x20646c6f
00cfc4b7 65722065 0x63617073
00cfc4bb 73657571 0x65722065
00cfc4bf 0a646574 0x73657571
00cfc4c3 00000000 0xa646574

Top 22: total counts = 1

ChildEBP RetAddr  
0028e3c8 6b21e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0028e4a8 6b268a79 node+0x12ae87c
0028e4ac 001964f9 node+0x12f8a79
0028e4b0 00fff328 0x1964f9
0028e4b4 00000000 0xfff328

Top 23: total counts = 1

ChildEBP RetAddr  
0504f328 12abe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0504f368 12ac738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0504f5b8 12ac12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0505fc00 12abe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0505fc78 12af7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0505fe4c 75d3fcc9 rightsmanager!RM_AutorunScan+0x176
0505fe5c 776f82ae kernel32!BaseThreadInitThunk+0x19
0505feb8 776f827e ntdll!__RtlUserThreadStart+0x2f
0505fec8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00afb9d0 1036dc08 node+0x2a2f20b
00afbccf 20372e32 node+0xb2dc08
00afbcd3 2e30202f 0x20372e32
00afbcd7 736d2030 0x2e30202f
00afbcdb 61282020 0x736d2030
00afbcdf 61726576 0x61282020
00afbce3 6d206567 0x61726576
00afbce7 203d2075 0x6d206567
00afbceb 30302e31 0x203d2075
00afbcef 63202c30 0x30302e31
00afbcf3 65727275 0x63202c30
00afbcf7 6d20746e 0x65727275
00afbcfb 203d2075 0x6d20746e
00afbcff 30302e31 0x203d2075
00afbd03 61202930 0x30302e31
00afbd07 636f6c6c 0x61202930
00afbd0b 6f697461 0x636f6c6c
00afbd0f 6166206e 0x6f697461
00afbd13 72756c69 0x6166206e
00afbd37 61635320 dbghelp!SymGetModuleInfoW64+0x139
00afbd4b 203e2d20 0x61635320
00afbd4f 20322e38 0x203e2d20
00afbd53 2e333128 0x20322e38
00afbd57 4d202934 0x2e333128
00afbd5b 31202c42 0x4d202934
00afbd5f 2f20322e 0x31202c42
00afbd63 302e3020 0x2f20322e
00afbd67 20736d20 0x302e3020
00afbd6b 76612820 0x20736d20
00afbfab 00000000 cfgmgr32!SpInfDirectoryIdToPath+0x1c9

Top 25: total counts = 1

ChildEBP RetAddr  
0a8ff80c 7b960081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
0a8ff848 7b96351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0a8ffd48 7b964624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0a8ffd7c 7b9685a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0a8ffea8 7b96917a rightsextension!CRegData::MonitorFunction+0x4b3
0a8ffec8 7b968a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0a8ffed0 7ba7864a rightsextension!std::_Pad::_Call_func+0xa
0a8fff08 75097ba9 rightsextension!thread_start+0x58
0a8fff18 7722c36b kernel32!BaseThreadInitThunk+0x19
0a8fff70 7722c2ef ntdll!__RtlUserThreadStart+0x2b
0a8fff80 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 26: total counts = 1

0b46f708 629fdae9 kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may be wrong.
0b46f744 629fda44 node+0x12bdae9
0b46f794 62a0fc79 node+0x12bda44
0b46f7b4 62a1008c node+0x12cfc79
0b46f7f4 62a0ffcb node+0x12d008c
0b46f81c 7673343d node+0x12cffcb
0b46f828 77399802 kernel32!BaseThreadInitThunk+0xe
0b46f868 773997d5 ntdll!__RtlUserThreadStart+0x70
0b46f880 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 27: total counts = 1

ChildEBP RetAddr  
008fe634 008fe718 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
008fe648 008fe658 0x8fe718
008fe64c c0000017 0x8fe658
008fe658 00000000 0xc0000017

Top 28: total counts = 1

ChildEBP RetAddr  
0915fb34 77dbec8c ntdll!RtlpUnWaitCriticalSection+0x41
0915fb4c 0f263f4c ntdll!RtlLeaveCriticalSection+0x51
0915fb58 0f26cd56 rightsextension!__acrt_unlock+0x15
0915fb60 0f26cd44 rightsextension!__crt_seh_guarded_call::operator()<, &, >+0x49
0915fb90 0f26cf2f rightsextension!__crt_seh_guarded_call::operator()<, &, >+0x37
0915fbb4 0f26ce56 rightsextension!destroy_ptd+0xcb
0915fbc0 77da93e1 rightsextension!destroy_fls+0x13
0915fbdc 77dc214f ntdll!RtlProcessFlsData+0x57
0915fc74 77dc23e3 ntdll!LdrShutdownThread+0x35
0915fc84 77dcf5aa ntdll!RtlExitUserThread+0x2a
0915fdd0 776f343d ntdll!TppWorkerThread+0x846
0915fddc 77da9812 kernel32!BaseThreadInitThunk+0xe
0915fe1c 77da97e5 ntdll!__RtlUserThreadStart+0x70
0915fe34 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 29: total counts = 1

ChildEBP RetAddr  
159ff178 09dd6066 rightsextension!ATL::CSimpleStringT::CloneData+0xc
159ff1b0 09e02133 rightsextension!CSoftInfo::FindSoftNameByPath+0x1d6
15a0f6e4 09e009fd rightsextension!CAutorunsCtrl::EnumRegAutorun+0xa33
15a0f6f4 09e0af94 rightsextension!CAutorunsCtrl::EnumAutoruns+0x2d
15a0f730 09dc3809 rightsextension!CRightsManager::ScanAll+0xb4
15a0fc24 09dc4624 rightsextension!CAppInstallMonitor::RegChange+0x5d9
15a0fc58 09dc85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
15a0fd84 09dc917a rightsextension!CRegData::MonitorFunction+0x4b3
15a0fda4 09dc8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
15a0fdac 09ed864a rightsextension!std::_Pad::_Call_func+0xa
15a0fde4 7622efac rightsextension!thread_start+0x58
15a0fdf0 770a3628 kernel32!BaseThreadInitThunk+0xe
15a0fe30 770a35fb ntdll!__RtlUserThreadStart+0x70
15a0fe48 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 30: total counts = 1

ChildEBP RetAddr  
002ee874 00000000 KERNELBASE!RaiseException+0x48

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0040f114 58d38d6c node+0x12ae60a
0040f184 569f3961 node+0x2a18d6c
0040f1f8 575e89e6 node+0x6d3961
0040f2c4 575e875e node+0x12c89e6
0040f320 575c0ec3 node+0x12c875e
0040f35c 575c0acb node+0x12a0ec3
0040f39c 575d23d2 node+0x12a0acb
0040f3e4 575d22e2 node+0x12b23d2
0040f428 569ebd42 node+0x12b22e2
0040f450 569ed47d node+0x6cbd42
0040f490 5692ed6c node+0x6cd47d
0040f4ec 5692f379 node+0x60ed6c
0040f510 5692ea8a node+0x60f379
0040f514 575aa300 node+0x60ea8a
0040f518 00400000 node+0x128a300
0040f51c 00000000 0x400000

Top 32: total counts = 1

003ac8c3 72636e69 0x20657a69
003ac8c7 6e656d65 FWPUCLNT+0x6e69
003ac8cb 206c6174 0x6e656d65
003ac8cf 6b72616d 0x206c6174
003ac8d3 00000000 0x6b72616d

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x5cb8e

Top 34: total counts = 1

00dbd10b 656d2077 GdiPlus!QuickFormatting+0x14e
00dbd123 206e6920 PicFace+0x1f2077
00dbd127 20646c6f 0x206e6920
00dbd12b 63617073 0x20646c6f
00dbd12f 65722065 0x63617073
00dbd133 73657571 PicFace+0x242065
00dbd137 0a646574 wininet!`string'+0x68c9d
00dbd13b 00000000 0xa646574

Top 35: total counts = 1

0554fa0c 6b38e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0554fa14 6b38e8c1 node+0x2f3e6e0
0554fa18 08c68ecc node+0x2f3e8c1
0554fa1c 6b38e7dd 0x8c68ecc
0554fa20 003de50c node+0x2f3e7dd
0554fa24 00000000 0x3de50c

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00dfc890 529fdc08 node+0x2a2f20b
00dfcb8f 6d203833 node+0xb2dc08
00dfcb93 4d203a73 0x6d203833
00dfcb97 2d6b7261 0x4d203a73
00dfcb9b 65657773 0x2d6b7261
00dfcb9f 30312070 0x65657773
00dfcba3 2820332e 0x30312070
00dfcba7 302e3231 0x2820332e
00dfcbab 3e2d2029 0x302e3231
00dfcbaf 2e303120 0x3e2d2029
00dfcbb3 31282033 0x2e303120
00dfcbb7 29302e32 0x31282033
00dfcbbb 2c424d20 0x29302e32
00dfcbbf 372e3620 0x2c424d20
00dfcbc3 30202f20 0x372e3620
00dfcbc7 6d20302e 0x30202f20
00dfcbcb 28202073 0x6d20302e
00dfcbcf 72657661 0x28202073
00dfcbd3 20656761 0x72657661
00dfcbd7 3d20756d 0x20656761
00dfcbdb 302e3120 0x3d20756d
00dfcbdf 202c3030 0x302e3120
00dfcbe3 72727563 0x202c3030
00dfcbe7 20746e65 0x72727563
00dfcbeb 3d20756d 0x20746e65
00dfcbef 302e3020 0x3d20756d
00dfcbf3 20293530 0x302e3020
00dfcbf7 20776f6c 0x20293530
00dfcbfb 6f6d656d 0x20776f6c
00dfcbff 6e207972 taskschd!`string'+0x15
00dfcc03 6669746f 0x6e207972
00dfcc07 74616369 0x6669746f
00dfcc0b 206e6f69 0x74616369
00dfcc0f 69204347 0x206e6f69
00dfcc13 6c6f206e 0x69204347
00dfcc17 70732063 0x6c6f206e
00dfcc1f 75716572 windows_storage!BindCtx_RegisterFileOperation+0x31
00dfcc27 315b0a64 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x2d6572)
00dfcc2b 38343735 0x315b0a64
00dfcc2f 3233303a 0x38343735
00dfcc33 35333138 0x3233303a
00dfcc37 33205d38 0x35333138
00dfcc3b 37373331 0x33205d38
00dfcc3f 20323435 0x37373331
00dfcc43 203a736d 0x20323435
00dfcc47 6b72614d 0x203a736d
00dfcc4b 6577732d 0x6b72614d
00dfcc4f 31207065 0x6577732d
00dfcc53 20382e30 0x31207065
00dfcc57 2e323128 0x20382e30
00dfcc5b 2d202930 0x2e323128
00dfcc5f 3031203e 0x2d202930
00dfcc63 2820332e 0x3031203e
00dfcc67 302e3231 0x2820332e
00dfcc6b 424d2029 0x302e3231
00dfcc6f 2e36202c 0x424d2029
00dfcc73 202f2034 0x2e36202c
00dfcc77 20302e30 0x202f2034
00dfcc7b 2020736d 0x20302e30
00dfcc7f 65766128 0x2020736d
00dfcc83 65676172 0x65766128
00dfcc87 20756d20 0x65676172
00dfcc8b 2e31203d 0x20756d20
00dfcc8f 2c303030 0x2e31203d
00dfcc93 72756320 0x2c303030
00dfcc97 746e6572 0x72756320
00dfcc9b 20756d20 0x746e6572
00dfcc9f 2e31203d 0x20756d20
00dfcca3 29303030 0x2e31203d
00dfcca7 776f6c20 0x29303030
00dfccab 6d656d20 0x776f6c20
00dfccaf 2079726f 0x6d656d20
00dfccb3 69746f6e 0x2079726f
00dfccb7 61636966 0x69746f6e
00dfccbb 6e6f6974 0x61636966
00dfccbf 20434720 0x6e6f6974
00dfccc3 6f206e69 0x20434720
00dfccc7 7320646c 0x6f206e69
00dfcccb 65636170 0x7320646c
00dfcccf 71657220 0x65636170
00dfccd3 74736575 0x71657220
00dfccd7 5b0a6465 0x74736575
00dfccdb 34373531 0x5b0a6465
00dfccdf 33303a38 0x34373531
00dfcce3 33313832 0x33303a38
00dfcce7 205d3835 0x33313832
00dfcceb 37333133 0x205d3835
00dfccef 30353537 0x37333133
00dfccf3 3a736d20 0x30353537
00dfccf7 72614d20 0x3a736d20
00dfccfb 77732d6b 0x72614d20
00dfccff 20706565 0x77732d6b
00dfcd03 332e3031 0x20706565
00dfcd07 32312820 0x332e3031
00dfcd0b 2029302e 0x32312820
00dfcd0f 31203e2d 0x2029302e
00dfcd13 20332e30 0x31203e2d
00dfcd17 2e323128 0x20332e30
00dfcd1b 4d202930 0x2e323128
00dfcd1f 37202c42 0x4d202930
00dfcd23 2f20322e 0x37202c42
00dfcd27 302e3020 0x2f20322e
00dfcd2b 20736d20 0x302e3020
00dfcd2f 76612820 0x20736d20
00dfcd33 67617265 shell32!`OpenWithTelemetry::OpenWithMenuInvokeCommand::StopActivity'::`12'::_tlgEvent+0x8a
00dfcd37 756d2065 0x67617265
00dfcd3b 31203d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x292065)
00dfcd3f 3030302e 0x31203d20
00dfcd43 7563202c 0x3030302e
00dfcd47 6e657272 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x1f202c)
00dfcd4b 756d2074 0x6e657272
00dfcd4f 30203d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x292074)
00dfcd53 3430302e 0x30203d20
00dfcd57 6f6c2029 0x3430302e
00dfcd5b 656d2077 0x6f6c2029
00dfcd5f 79726f6d 0x656d2077
00dfcd63 746f6e20 0x79726f6d
00dfcd67 63696669 0x746f6e20
00dfcd6b 6f697461 0x63696669
00dfcd6f 4347206e hid!_NULL_IMPORT_DESCRIPTOR+0x2c5
00dfcd73 206e6920 0x4347206e
00dfcd77 20646c6f 0x206e6920
00dfcd7b 63617073 0x20646c6f
00dfcd7f 65722065 0x63617073
00dfcd83 73657571 0x65722065
00dfcd87 0a646574 0x73657571
00dfcd8b 00000000 0xa646574

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff774 70a38cc5 node+0x12ae60a
012ff80c 6e6f3961 node+0x2a18cc5
012ff880 6f2e89e6 node+0x6d3961
012ff94c 6f2e875e node+0x12c89e6
012ff9a8 6f2c0ec3 node+0x12c875e
012ff9e4 6f2c0acb node+0x12a0ec3
012ffa24 6f2d23d2 node+0x12a0acb
012ffa6c 6f2d22e2 node+0x12b23d2
012ffab0 6e6ebd42 node+0x12b22e2
012ffad8 6e6ed47d node+0x6cbd42
012ffb18 6e62ed6c node+0x6cd47d
012ffb74 6e62f379 node+0x60ed6c
012ffb98 6e62ea8a node+0x60f379
012ffc30 77b05dde node+0x60ea8a
012ffce4 77b03c16 ntdll!RtlAllocateHeap+0x3e
012ffcfc 72662d00 ntdll!RtlFreeHeap+0x46
012ffd0c 00000000 node+0x4642d00

Top 38: total counts = 1

ChildEBP RetAddr  
0520f214 798591a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0520f240 79851b3e rightsmanager!AutorunItem::AutorunItem+0x34
0521f888 7984e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0521f900 79887f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0521fad4 7501fcc9 rightsmanager!RM_AutorunScan+0x176
0521fae4 76fe7cbe kernel32!BaseThreadInitThunk+0x19
0521fb40 76fe7c8e ntdll!__RtlUserThreadStart+0x2f
0521fb50 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 39: total counts = 1

ChildEBP RetAddr  
006fea44 006feb28 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fea58 006fea68 0x6feb28
006fea5c fffffffe 0x6fea68
006fea68 00000000 0xfffffffe

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0044f614 6b1d8d6c node+0x12ae60a
0044f684 68e93961 node+0x2a18d6c
0044f6f8 69a889e6 node+0x6d3961
0044f7c4 69a8875e node+0x12c89e6
0044f820 69a60ec3 node+0x12c875e
0044f85c 69a60acb node+0x12a0ec3
0044f89c 69a723d2 node+0x12a0acb
0044f8e4 69a722e2 node+0x12b23d2
0044f928 68e8bd42 node+0x12b22e2
0044f950 68e8d47d node+0x6cbd42
0044f990 68dced6c node+0x6cd47d
0044f9ec 68dcf379 node+0x60ed6c
0044fa10 68dcea8a node+0x60f379
0044fa14 69a4a300 node+0x60ea8a
0044fa18 00440000 node+0x128a300
0044fa1c 00000000 0x440000

Top 41: total counts = 1

ChildEBP RetAddr  
0590f1d0 7bcde731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0590f210 7bce738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0590f460 7bce12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0591faa8 7bcde943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0591fb20 7bd17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0591fcf4 76d95d49 rightsmanager!RM_AutorunScan+0x176
0591fd04 775ece3b kernel32!BaseThreadInitThunk+0x19
0591fd5c 775ecdc1 ntdll!__RtlUserThreadStart+0x2b
0591fd6c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 42: total counts = 1

ChildEBP RetAddr  
0052e9a8 60f1e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0052ea80 60f68a79 node+0x12ae87c
0052ea84 005fcff0 node+0x12f8a79
0052ea88 01fb9a00 0x5fcff0
005fcff0 00000000 0x1fb9a00

Top 43: total counts = 1

00afd013 74726174 iertutil!IEVALUE_GUID_Ried_International_Scripts_22IEUIFontName+0xf
00afd017 20666f20 sangforvpnlibcrypto_1_1+0x36174
00afd01b 6b72616d 0x20666f20
00afd01f 2c676e69 UIAutomationCore!`string'+0x45
00afd023 67696220 0x2c676e69
00afd027 74736567 0x67696220
00afd02b 65747320 sangforvpnlibcrypto_1_1+0x46567
00afd02f 2e302070 0x65747320
00afd033 736d2034 0x2e302070
00afd037 6177202c 0x736d2034
00afd03b 69746c6c 0x6177202c
00afd03f 7320656d 0x69746c6c
00afd043 65636e69 iertutil!IEVALUE_GUID_Ried_InternetSettings_TemplatePolicies_High1407+0x9
00afd047 61747320 0x65636e69
00afd04b 6f207472 0x61747320
00afd04f 616d2066 node+0x33f7472
00afd053 6e696b72 0x616d2066
00afd057 36312067 node+0x2886b72
00afd05b 736d2038 0x36312067
00afd05f 61282029 0x736d2038
00afd063 61726576 0x61282029
00afd067 6d206567 0x61726576
00afd06b 203d2075 node+0x13f6567
00afd06f 37392e30 0x203d2075
00afd073 63202c39 0x37392e30
00afd077 65727275 0x63202c39
00afd07b 6d20746e 0x65727275
00afd07f 203d2075 node+0x13f746e
00afd083 39392e30 0x203d2075
00afd087 66202933 0x39392e30
00afd08b 6c616e69 0x66202933
00afd08f 20657a69 node+0x806e69
00afd093 72636e69 0x20657a69
00afd097 6e656d65 windows_storage!SHGetKnownFolderIDList_Internal+0x769
00afd09b 206c6174 node+0x2846d65
00afd09f 6b72616d 0x206c6174
00afd0a3 00000000 UIAutomationCore!`string'+0x45

Top 44: total counts = 1

ChildEBP RetAddr  
0553e9dc 773cd877 ntdll!RtlpWaitOnCriticalSection+0xbd
0553ea04 761d675c ntdll!RtlEnterCriticalSection+0x150
0553ea30 761d66f9 rpcrt4!SID_CACHE::Query+0x38
0553ea48 761d66be rpcrt4!RpcpLookupAccountName+0x1b
0553eacc 761ce4e0 rpcrt4!LRPC_BASE_BINDING_HANDLE::SetAuthInformation+0x106
0553eb18 761ce461 rpcrt4!LRPC_FAST_BINDING_HANDLE::SetAuthInformation+0x50
0553eb84 761ce2a1 rpcrt4!LRPC_FAST_BINDING_HANDLE::LRPC_FAST_BINDING_HANDLE+0x22c
0553eba0 761ce25c rpcrt4!LrpcCreateFastBindingHandle+0x31
0553ebc8 75a57775 rpcrt4!RpcBindingCreateW+0xd2
0553ec40 75a576b7 ole32!CFastBH::CreateFromBindingString+0xeb
0553ec5c 75a57ada ole32!CFastBH::GetOrCreate+0x39
0553f154 75a572ab ole32!CRpcResolver::GetConnection+0x22f
0553f3a8 66782fe6 ole32!CoInitializeSecurity+0x78
0553f5d8 6677e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x1d6
0553f650 667b68a6 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
0553f824 75ef338a rightsmanager!RM_AutorunScan+0x176
0553f830 773c9882 kernel32!BaseThreadInitThunk+0xe
0553f870 773c9855 ntdll!__RtlUserThreadStart+0x70
0553f888 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
001deccc 66cc242a 0xce755665
00000000 00000000 node+0x252242a

Top 46: total counts = 1

ChildEBP RetAddr  
10c3f4fc 64400081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
10c3f538 6440351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
10c3fa38 64404624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
10c3fa6c 644085a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
10c3fb98 6440917a rightsextension!CRegData::MonitorFunction+0x4b3
10c3fbb8 64408a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
10c3fbc0 6451864a rightsextension!std::_Pad::_Call_func+0xa
10c3fbf8 757f343d rightsextension!thread_start+0x58
10c3fc04 77069802 kernel32!BaseThreadInitThunk+0xe
10c3fc44 770697d5 ntdll!__RtlUserThreadStart+0x70
10c3fc5c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0051f2ac 6ab8533b node+0x12f5573
0051f340 6ab585e6 node+0x12f533b
0051f40c 6ab5835e node+0x12c85e6
0051f468 6ab30b7b node+0x12c835e
0051f4a4 6ab30783 node+0x12a0b7b
0051f4e4 6ab41fd2 node+0x12a0783
0051f52c 6ab41ee2 node+0x12b1fd2
0051f570 69f5bd42 node+0x12b1ee2
0051f598 69f5d47d node+0x6cbd42
0051f5d8 69e9ed6c node+0x6cd47d
0051f634 69e9f379 node+0x60ed6c
0051f658 69e9ea8a node+0x60f379
0051f65c 6ab1a300 node+0x60ea8a
0051f660 00510000 node+0x128a300
0051f664 00000000 0x510000

Top 48: total counts = 1

ChildEBP RetAddr  
00efe72c 779dd6ee KERNELBASE!RaiseException+0x62
00efe738 00000000 ntdll!RtlpAllocateHeapInternal+0x105e

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008ff424 6d748cc5 node+0x12ae60a
008ff4bc 6b403961 node+0x2a18cc5
008ff530 6bff89e6 node+0x6d3961
008ff5fc 6bff875e node+0x12c89e6
008ff658 6bfd0ec3 node+0x12c875e
008ff694 6bfd0acb node+0x12a0ec3
008ff6d4 6bfe23d2 node+0x12a0acb
008ff71c 6bfe22e2 node+0x12b23d2
008ff760 6b3fbd42 node+0x12b22e2
008ff788 6b3fd47d node+0x6cbd42
008ff7c8 6b33ed6c node+0x6cd47d
008ff824 6b33f379 node+0x60ed6c
008ff848 6b33ea8a node+0x60f379
008ff8e0 777cadee node+0x60ea8a
008ff8ec 00000000 ntdll!RtlAllocateHeap+0x3e

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd