Analyzed 76 dump

Top 1: total counts = 9

049cf6cc 0f88aeed rightsmanager!RM_AutorunScan+0x176
049cf7c8 7593344d ffi_bindings!ffi_call_win32+0x11
049cf7d4 77e79802 kernel32!BaseThreadInitThunk+0xe
049cf814 77e797d5 ntdll!__RtlUserThreadStart+0x70
049cf82c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 6

ChildEBP RetAddr  
0506f060 7b13e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0506f0a0 7b14738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0506f2f0 7b1412a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0507f938 7b13e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0507f9b0 7b177f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0507fb84 755d7ba9 rightsmanager!RM_AutorunScan+0x176
0507fb94 7705c36b kernel32!BaseThreadInitThunk+0x19
0507fbec 7705c2ef ntdll!__RtlUserThreadStart+0x2b
0507fbfc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 5

0683f67c 644caeed rightsmanager!RM_AutorunScan+0x176
0683f778 779c7ba9 ffi_bindings!ffi_call_win32+0x11
0683f788 77b1c36b kernel32!BaseThreadInitThunk+0x19
0683f7e0 77b1c2ef ntdll!__RtlUserThreadStart+0x2b
0683f7f0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 5

ChildEBP RetAddr  
0accf3d8 0a74e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0accf418 0a75738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0accf668 0a7512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0acdfcb0 0a74e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0acdfd28 0a787f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0acdfefc 754e343d rightsmanager!RM_AutorunScan+0x176
0acdff08 77629802 kernel32!BaseThreadInitThunk+0xe
0acdff48 776297d5 ntdll!__RtlUserThreadStart+0x70
0acdff60 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 5

0647f8cc 7b14aeed rightsmanager!RM_AutorunScan+0x176
0647f9c8 7719fcc9 ffi_bindings!ffi_call_win32+0x11
0647f9d8 779e82ae kernel32!BaseThreadInitThunk+0x19
0647fa34 779e827e ntdll!__RtlUserThreadStart+0x2f
0647fa44 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 5

ChildEBP RetAddr  
05eaf0e8 7b82e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05eaf128 7b83738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05eaf378 7b8312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ebf9c0 7b82e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ebfa38 7b867f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ebfc0c 75e1fcc9 rightsmanager!RM_AutorunScan+0x176
05ebfc1c 76f482ae kernel32!BaseThreadInitThunk+0x19
05ebfc78 76f4827e ntdll!__RtlUserThreadStart+0x2f
05ebfc88 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 3

ChildEBP RetAddr  
05baf2c8 7a1be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05baf308 7a1c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05baf558 7a1c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05bbfba0 7a1be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05bbfc18 7a1f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05bbfdec 75f4fcc9 rightsmanager!RM_AutorunScan+0x176
05bbfdfc 77d182ae kernel32!BaseThreadInitThunk+0x19
05bbfe58 77d1827e ntdll!__RtlUserThreadStart+0x2f
05bbfe68 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 2

ChildEBP RetAddr  
0494ed98 0434e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0494edd8 0435738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0494f028 043512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0495f670 0434e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0495f6e8 04387f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0495f8bc 75d2346d rightsmanager!RM_AutorunScan+0x176
0495f8c8 77bf9722 kernel32!BaseThreadInitThunk+0xe
0495f908 77bf96f5 ntdll!__RtlUserThreadStart+0x70
0495f920 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 2

ChildEBP RetAddr  
062aefb0 55dae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
062aeff0 55db738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
062af240 55db12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
062bf888 55dae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
062bf900 55de7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
062bfad4 75d55d49 rightsmanager!RM_AutorunScan+0x176
062bfae4 7729d03b kernel32!BaseThreadInitThunk+0x19
062bfb3c 7729cfc1 ntdll!__RtlUserThreadStart+0x2b
062bfb4c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 2

ChildEBP RetAddr  
0557f104 79b791a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0557f130 79b71b3e rightsmanager!AutorunItem::AutorunItem+0x34
0558f778 79b6e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0558f7f0 79ba7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0558f9c4 765b5d49 rightsmanager!RM_AutorunScan+0x176
0558f9d4 777fd03b kernel32!BaseThreadInitThunk+0x19
0558fa2c 777fcfc1 ntdll!__RtlUserThreadStart+0x2b
0558fa3c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 1

ChildEBP RetAddr  
05d4f614 6a5391a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
05d4f640 6a531b3e rightsmanager!AutorunItem::AutorunItem+0x34
05d5fc88 6a52e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
05d5fd00 6a567f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05d5fed4 765c344d rightsmanager!RM_AutorunScan+0x176
05d5fee0 77129802 kernel32!BaseThreadInitThunk+0xe
05d5ff20 771297d5 ntdll!__RtlUserThreadStart+0x70
05d5ff38 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 1

ChildEBP RetAddr  
11dbeebc 73b6d6fd msvcr100!abort+0x28
11dbef24 767e85ff msvcr100!abort+0x28
11dbef7c 76800c79 ole32!ActivationPropertiesOut::OutSerializer::GetSize+0x31d
11dbefb4 76800bbb ole32!ActivationProperties::GetSize+0x9a
11dbf030 7680062b ole32!ActivationProperties::GetMarshalSizeMax+0x78
11dbf060 767ff242 ole32!CDestObjectWrapper::GetMarshalSizeMax+0x6e
11dbf09c 767ff572 ole32!CoGetMarshalSizeMax+0x9e
11dbf0dc 769a47ac ole32!NdrExtInterfacePointerBufferSize+0x74
11dbf0f4 769bdea1 rpcrt4!NdrpPointerBufferSize+0x46
11dbf108 769bde6b rpcrt4!NdrPointerBufferSize+0x29
11dbf120 769bdea1 rpcrt4!NdrpPointerBufferSize+0xa9
11dbf134 769b288e rpcrt4!NdrPointerBufferSize+0x29
11dbf160 76a1638c rpcrt4!NdrpSizing+0x8c
11dbf55c 7690d7e6 rpcrt4!NdrStubCall2+0x373
11dbf5a4 7690d876 ole32!CStdStubBuffer_Invoke+0xb6
11dbf5ec 7690ddd0 ole32!SyncStubInvoke+0x3c
11dbf638 768289f3 ole32!StubInvoke+0xb9
11dbf714 768288e8 ole32!CCtxComChnl::ContextInvoke+0xfa
11dbf730 768294ba ole32!MTAInvoke+0x1a
11dbf75c 7690dccd ole32!STAInvoke+0x46
11dbf790 7690db41 ole32!AppInvoke+0xab
11dbf870 7690e1fd ole32!ComInvokeWithLockAndIPID+0x372
11dbf898 76829317 ole32!ComInvoke+0xc5
11dbf8ac 768292d6 ole32!ThreadDispatch+0x23
11dbf8f0 7567c4f7 ole32!ThreadWndProc+0x161
11dbf91c 7567c5f7 user32!InternalCallWinProc+0x23
11dbf994 7567cc30 user32!UserCallWinProcCheckWow+0x14b
11dbf9f8 7567cc88 user32!DispatchMessageWorker+0x36d
11dbfa08 767ea48b user32!DispatchMessageW+0xf
11dbfa3c 767e853b ole32!CDllHost::STAWorkerLoop+0x6b
11dbfa58 767ea4ac ole32!CDllHost::WorkerThread+0xd0
11dbfa60 767fcd28 ole32!DLLHostThreadEntry+0xd
11dbfa7c 767fd85a ole32!CRpcThread::WorkerLoop+0x26
11dbfa8c 76d0ef1c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x16
11dbfa98 77223648 kernel32!BaseThreadInitThunk+0xe
11dbfad8 7722361b ntdll!__RtlUserThreadStart+0x70
11dbfaf0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003af4e4 771a7b06 node+0xc8f054
7713fd75 b8900008 ntdll!RtlQueryPerformanceCounter+0x61
7713fd7d 548dc933 0xb8900008
7713fd81 ff640424 0x548dc933
7713fd85 00000000 0xff640424

Top 14: total counts = 1

068cf9bc 0f24aeed rightsmanager!RM_AutorunScan+0x176
068cfab8 764a8744 ffi_bindings!ffi_call_win32+0x11
068cfacc 773a587d kernel32!BaseThreadInitThunk+0x24
068cfb14 773a584d ntdll!__RtlUserThreadStart+0x2f
068cfb24 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0037f6a4 123e8d6c node+0x12ae60a
0037f70c 100a3961 node+0x2a18d6c
0037f780 10c989e6 node+0x6d3961
0037f84c 10c9875e node+0x12c89e6
0037f8a8 10c70ec3 node+0x12c875e
0037f8e4 10c70acb node+0x12a0ec3
0037f924 10c823d2 node+0x12a0acb
0037f96c 10c822e2 node+0x12b23d2
0037f9b0 1009bd42 node+0x12b22e2
0037f9d8 1009d47d node+0x6cbd42
0037fa18 0ffded6c node+0x6cd47d
0037fa74 0ffdf379 node+0x60ed6c
0037fa98 0ffdea8a node+0x60f379
0037fa9c 10c5a300 node+0x60ea8a
0037faa0 00370000 node+0x128a300
0037faa4 00000000 0x370000

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005aecb8 6e88efb7 node+0xc7ec2d
005aecbc 029db838 node+0xc7efb7
005aecc0 00000000 0x29db838

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0026c848 61fadc08 node+0x2a2f20b
0026cb47 736d2036 node+0xb2dc08
0026cb4b 614d203a 0x736d2036
0026cb4f 732d6b72 node+0x5203a
0026cb53 70656577 0x732d6b72
0026cb57 2e303120 0x70656577
0026cb5b 31282032 0x2e303120
0026cb5f 29302e32 0x31282032
0026cb63 203e2d20 0x29302e32
0026cb67 322e3031 0x203e2d20
0026cb6b 32312820 0x322e3031
0026cb6f 2029302e 0x32312820
0026cb73 202c424d 0x2029302e
0026cb77 372e3331 0x202c424d
0026cb7b 30202f20 0x372e3331
0026cb7f 6d20302e 0x30202f20
0026cb83 28202073 cryptnet!PkiFree+0x3e
0026cb87 72657661 0x28202073
0026cb8b 20656761 0x72657661
0026cb8f 3d20756d 0x20656761
0026cb93 392e3020 0x3d20756d
0026cb97 202c3939 0x392e3020
0026cb9b 72727563 0x202c3939
0026cb9f 20746e65 propsys!`string'+0xb
0026cba3 3d20756d 0x20746e65
0026cba7 302e3020 0x3d20756d
0026cbab 20293230 0x302e3020
0026cbaf 20776f6c 0x20293230
0026cbb3 6f6d656d 0x20776f6c
0026cbb7 6e207972 0x6f6d656d
0026cbbb 6669746f 0x6e207972
0026cbbf 74616369 0x6669746f
0026cbc3 206e6f69 0x74616369
0026cbc7 69204347 0x206e6f69
0026cbcb 6c6f206e 0x69204347
0026cbcf 70732064 0x6c6f206e
0026cbd3 20656361 0x70732064
0026cbd7 75716572 0x20656361
0026cbdb 65747365 wininet!`string'+0x9ac2
0026cbdf 325b0a64 node+0x42c7365
0026cbe3 3a383636 0x325b0a64
0026cbe7 34393030 0x3a383636
0026cbeb 38413130 0x34393030
0026cbef 3231205d 0x38413130
0026cbf3 36313634 0x3231205d
0026cbf7 6d203139 0x36313634
0026cbfb 4d203a73 cryptnet!StringCchCatW+0x3a
0026cc0b 2820372e 0x4d203a73
0026cc0f 302e3231 0x2820372e
0026cc13 3e2d2029 0x302e3231
0026cc17 2e303120 0x3e2d2029
0026cc1b 31282032 0x2e303120
0026cc1f 29302e32 0x31282032
0026cc23 2c424d20 0x29302e32
0026cc27 2e383220 0x2c424d20
0026cc2b 202f2030 0x2e383220
0026cc2f 20302e30 0x202f2030
0026cc33 2020736d 0x20302e30
0026cc37 65766128 0x2020736d
0026cc3b 65676172 node+0x42e6128
0026cc3f 20756d20 node+0x41f6172
0026cc43 2e30203d 0x20756d20
0026cc47 2c393939 0x2e30203d
0026cc4b 72756320 0x2c393939
0026cc4f 746e6572 propsys!`string'+0x43c
0026cc53 20756d20 0x746e6572
0026cc57 2e31203d 0x20756d20
0026cc5b 29303030 0x2e31203d
0026cc5f 776f6c20 0x29303030
0026cc63 6d656d20 0x776f6c20
0026cc67 2079726f 0x6d656d20
0026cc6b 69746f6e 0x2079726f
0026cc6f 61636966 0x69746f6e
0026cc73 6e6f6974 node+0x1b6966
0026cc77 20434720 0x6e6f6974
0026cc7b 6f206e69 0x20434720
0026cc7f 7320646c 0x6f206e69
0026cc83 65636170 0x7320646c
0026cc87 71657220 node+0x41b6170
0026cc8b 74736575 0x71657220
0026cc8f 5b0a6465 0x74736575
0026cc93 38363632 0x5b0a6465
0026cc97 3930303a 0x38363632
0026cc9b 41313034 0x3930303a
0026cc9f 31205d38 0x41313034
0026cca3 31363432 0x31205d38
0026cca7 20393037 0x31363432
0026ccab 203a736d 0x20393037
0026ccaf 6b72614d 0x203a736d
0026ccb3 6577732d 0x6b72614d
0026ccb7 31207065 node+0x42f732d
0026ccbb 20322e30 0x31207065
0026ccbf 2e323128 0x20322e30
0026ccc3 2d202930 0x2e323128
0026ccc7 3031203e 0x2d202930
0026cccb 2820322e 0x3031203e
0026cccf 302e3231 0x2820322e
0026ccd3 424d2029 0x302e3231
0026ccd7 3831202c 0x424d2029
0026ccdb 2f20322e 0x3831202c
0026ccdf 302e3020 0x2f20322e
0026cce3 20736d20 0x302e3020
0026cce7 76612820 0x20736d20
0026cceb 67617265 shell32!wkscli_NULL_THUNK_DATA_DLN+0x2f92
0026ccef 756d2065 0x67617265
0026cd1f 63696669 wininet!RedoNTLMAuth4User+0xba
0026cd4b 00000000 node+0x2216669

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
042af368 6220edc6 node+0x12ae60a
042af3b8 61627cc2 node+0x12aedc6
042af470 6234629c node+0x6c7cc2
042af4b0 6321f0b4 node+0x13e629c
042af540 6321e9f1 node+0x22bf0b4
042af544 00000000 node+0x22be9f1

Top 19: total counts = 1

ChildEBP RetAddr  
050cf524 0f727f09 rightsmanager!AutorunItem::~AutorunItem+0x3
050cf534 0f728f18 rightsmanager!std::vector >::_Tidy+0x19
050cf544 0f71e96c rightsmanager!std::_Destroy_range,std::allocator >,std::vector > > > >+0x18
050cf5c0 0f757f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x7c
050cf794 75a8343d rightsmanager!RM_AutorunScan+0x176
050cf7a0 77629812 kernel32!BaseThreadInitThunk+0xe
050cf7e0 776297e5 ntdll!__RtlUserThreadStart+0x70
050cf7f8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

002fd0cf 76612820 0x20736d20
002fd103 746f6e20 shell32!COpenSearchLocationCreator::_FinalizeLocation+0xe0
002fd107 63696669 0x746f6e20
002fd10b 6f697461 0x63696669
002fd10f 4347206e 0x6f697461
002fd113 206e6920 0x4347206e
002fd117 20646c6f 0x206e6920
002fd11b 63617073 0x20646c6f
002fd11f 65722065 0x63617073
002fd123 73657571 0x65722065
002fd127 0a646574 0x73657571
002fd12b 3930325b 0xa646574
002fd12f 30303a32 0x3930325b
002fd133 31353342 0x30303a32
002fd137 205d3835 0x31353342
002fd13b 34313133 0x205d3835
002fd13f 35383834 0x34313133
002fd143 3a736d20 0x35383834
002fd147 72614d20 0x3a736d20
002fd14b 77732d6b 0x72614d20
002fd14f 20706565 ntdll!___PchSym_  (ntdll+0x112d6b)
002fd153 332e3031 0x20706565
002fd157 32312820 0x332e3031
002fd15b 2029302e 0x32312820
002fd15f 31203e2d 0x2029302e
002fd163 20332e30 0x31203e2d
002fd167 2e323128 0x20332e30
002fd16b 4d202933 0x2e323128
002fd16f 36202c42 0x4d202933
002fd173 2f20352e 0x36202c42
002fd177 302e3020 0x2f20352e
002fd17b 20736d20 0x302e3020
002fd17f 76612820 0x20736d20
002fd1b3 746f6e20 shell32!COpenSearchLocationCreator::_FinalizeLocation+0xe0
002fd1b7 63696669 0x746f6e20
002fd1bb 6f697461 0x63696669
002fd1bf 4347206e 0x6f697461
002fd1c3 206e6920 0x4347206e
002fd1c7 20646c6f 0x206e6920
002fd1cb 63617073 0x20646c6f
002fd1cf 65722065 0x63617073
002fd1d3 73657571 0x65722065
002fd1d7 0a646574 0x73657571
002fd1db 00000000 0xa646574

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006fc228 62efdc08 node+0x2a2f20b
006fc527 63202c38 node+0xb2dc08
006fc52b 65727275 node+0xe32c38
006fc52f 6d20746e node+0x3357275
006fc533 203d2075 0x6d20746e
006fc537 30302e30 0x203d2075
006fc53b 6c202933 0x30302e30
006fc53f 6d20776f 0x6c202933
006fc543 726f6d65 0x6d20776f
006fc547 6f6e2079 0x726f6d65
006fc54b 69666974 0x6f6e2079
006fc54f 69746163 0x69666974
006fc553 47206e6f 0x69746163
006fc557 6e692043 0x47206e6f
006fc55b 646c6f20 0x6e692043
006fc55f 61707320 node+0x22f6f20
006fc563 72206563 0x61707320
006fc57f 37313420 mswsock!CheckForHungLargeSends+0x191
006fc583 35303938 0x37313420
006fc587 6d203533 0x35303938
006fc58b 53203a73 0x6d203533
006fc58f 65766163 0x53203a73
006fc593 2065676e node+0x3396163
006fc597 342e3131 0x2065676e
006fc59b 32312820 0x342e3131
006fc59f 2029332e 0x32312820
006fc5a3 31203e2d 0x2029332e
006fc5a7 20342e30 0x31203e2d
006fc5ab 2e323128 0x20342e30
006fc5af 4d202933 0x2e323128
006fc5b3 30202c42 0x4d202933
006fc5b7 2f20352e 0x30202c42
006fc5bb 302e3020 0x2f20352e
006fc5bf 20736d20 0x302e3020
006fc5c3 76612820 0x20736d20
006fc5c7 67617265 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x3e2820)
006fc5cb 756d2065 0x67617265
006fc5cf 30203d20 shell32!Windows::Shell::SyncStatus::CCacheEntry::GetAt+0x35
006fc5df 756d2074 0x30203d20
006fc5e3 30203d20 shell32!Windows::Shell::SyncStatus::CCacheEntry::GetAt+0x44
006fc5e7 3330302e 0x30203d20
006fc5eb 6c612029 0x3330302e
006fc5ef 61636f6c 0x6c612029
006fc5f3 6e6f6974 0x61636f6c
006fc5f7 69616620 0x6e6f6974
006fc5fb 6572756c 0x69616620
006fc5ff 375b0a20 node+0x335756c
006fc603 3a363133 0x375b0a20
006fc607 42393230 0x3a363133
006fc60b 38423136 0x42393230
006fc60f 3134205d 0x38423136
006fc613 31303937 0x3134205d
006fc617 20383732 0x31303937
006fc61b 203a736d 0x20383732
006fc61f 76616353 0x203a736d
006fc623 65676e65 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x3e6353)
006fc627 2e313120 node+0x32a6e65
006fc62b 31282034 0x2e313120
006fc62f 29332e32 0x31282034
006fc633 203e2d20 0x29332e32
006fc637 342e3031 0x203e2d20
006fc63b 32312820 0x342e3031
006fc63f 2029332e 0x32312820
006fc643 202c424d 0x2029332e
006fc647 20372e30 0x202c424d
006fc64b 2e30202f 0x20372e30
006fc64f 736d2030 0x2e30202f
006fc653 61282020 0x736d2030
006fc657 61726576 0x61282020
006fc65b 6d206567 0x61726576
006fc65f 203d2075 0x6d206567
006fc663 39392e30 0x203d2075
006fc667 63202c38 0x39392e30
006fc66b 65727275 node+0xe32c38
006fc66f 6d20746e node+0x3357275
006fc673 203d2075 0x6d20746e
006fc677 30302e30 0x203d2075
006fc67b 61202933 0x30302e30
006fc67f 636f6c6c 0x61202933
006fc683 6f697461 node+0x1326c6c
006fc687 6166206e 0x6f697461
006fc68b 72756c69 0x6166206e
006fc68f 5b0a2065 0x72756c69
006fc693 36313337 0x5b0a2065
006fc697 3932303a 0x36313337
006fc69b 42313642 0x3932303a
006fc69f 34205d38 0x42313642
006fc6a3 31393731 0x34205d38
006fc6a7 31333132 0x31393731
006fc6ab 3a736d20 0x31333132
006fc6af 61635320 0x3a736d20
006fc6b3 676e6576 0x61635320
006fc6b7 31312065 0x676e6576
006fc6bb 2820342e 0x31312065
006fc6bf 332e3231 0x2820342e
006fc6c3 3e2d2029 0x332e3231
006fc6c7 2e303120 0x3e2d2029
006fc6cb 31282034 0x2e303120
006fc6cf 29332e32 0x31282034
006fc6d3 2c424d20 0x29332e32
006fc6d7 362e3020 0x2c424d20
006fc6db 30202f20 0x362e3020
006fc6df 6d20302e 0x30202f20
006fc6e3 28202073 0x6d20302e
006fc6e7 72657661 0x28202073
006fc6eb 20656761 0x72657661
006fc6ef 3d20756d 0x20656761
006fc6f3 392e3020 0x3d20756d
006fc6f7 202c3839 0x392e3020
006fc6fb 72727563 0x202c3839
006fc6ff 20746e65 0x72727563
006fc703 3d20756d 0x20746e65
006fc707 302e3020 0x3d20756d
006fc70b 20293330 0x302e3020
006fc70f 6f6c6c61 0x20293330
006fc713 69746163 0x6f6c6c61
006fc717 66206e6f 0x69746163
006fc71b 756c6961 node+0x3e36e6f
006fc83f 00000000 shell32!CActivatedEventArgsBase::MarshalObjectToPropertySet+0x441

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001ef264 6de58d6c node+0x12ae60a
001ef2d4 6bb13961 node+0x2a18d6c
001ef348 6c7089e6 node+0x6d3961
001ef414 6c70875e node+0x12c89e6
001ef470 6c6e0ec3 node+0x12c875e
001ef4ac 6c6e0acb node+0x12a0ec3
001ef4ec 6c6f23d2 node+0x12a0acb
001ef534 6c6f22e2 node+0x12b23d2
001ef578 6bb0bd42 node+0x12b22e2
001ef5a0 6bb0d47d node+0x6cbd42
001ef5e0 6ba4ed6c node+0x6cd47d
001ef63c 6ba4f379 node+0x60ed6c
001ef660 6ba4ea8a node+0x60f379
001ef664 6c6ca300 node+0x60ea8a
001ef668 001e0000 node+0x128a300
001ef66c 00000000 0x1e0000

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0018ca60 60b3dc08 node+0x2a2f20b
0018cd5f 614d203a node+0xb2dc08
0018cd63 732d6b72 node+0x14c203a
0018cd67 70656577 0x732d6b72
0018cd6b 2e303120 0x70656577
0018cd6f 31282034 0x2e303120
0018cd73 29302e32 0x31282034
0018cd77 203e2d20 0x29302e32
0018cd7b 342e3031 0x203e2d20
0018cd7f 32312820 0x342e3031
0018cd83 2029302e 0x32312820
0018cd87 202c424d 0x2029302e
0018cd8b 2e313431 0x202c424d
0018cd8f 202f2035 0x2e313431
0018cd93 20302e30 0x202f2035
0018cd97 2020736d 0x20302e30
0018cd9b 65766128 0x2020736d
0018cd9f 65676172 0x65766128
0018cda3 20756d20 0x65676172
0018cda7 2e30203d 0x20756d20
0018cdab 2c323939 0x2e30203d
0018cdaf 72756320 0x2c323939
0018cdb3 746e6572 0x72756320
0018cdb7 20756d20 0x746e6572
0018cdbb 2e30203d 0x20756d20
0018cdbf 29303030 0x2e30203d
0018cdc3 776f6c20 0x29303030
0018cdd7 6e6f6974 Wldap32!ldap_search_ext_sA+0x153
0018ce07 39323439 0x6e6f6974
0018ce0b 34353733 0x39323439
0018ce0f 3a736d20 0x34353733
0018ce13 72614d20 0x3a736d20
0018ce17 77732d6b 0x72614d20
0018ce3b 31202c42 comdlg32!PrintSetupDlgProc+0x774
0018ce4f 72657661 0x31202c42
0018ce53 20656761 0x72657661
0018ce57 3d20756d 0x20656761
0018ce5b 392e3020 0x3d20756d
0018ce5f 202c3639 0x392e3020
0018ce63 72727563 0x202c3639
0018ce67 20746e65 0x72727563
0018ce6b 3d20756d 0x20746e65
0018ce6f 392e3020 0x3d20756d
0018ce73 20293839 0x392e3020
0018ce77 20776f6c 0x20293839
0018ce7b 6f6d656d 0x20776f6c
0018ce7f 6e207972 0x6f6d656d
0018ce83 6669746f 0x6e207972
0018ce87 74616369 0x6669746f
0018ce8b 206e6f69 0x74616369
0018ce8f 69204347 0x206e6f69
0018ce93 6c6f206e 0x69204347
0018ce97 70732064 0x6c6f206e
0018ce9b 20656361 0x70732064
0018ce9f 75716572 0x20656361
0018cea3 65747365 shell32!std::_Destroy >,kfapi::CComparator<_GUID>,kfapi::throwing_allocator > > >,0> >::_Node>+0xc
0018ceab 3a363730 0x65747365
0018ceaf 42313230 0x3a363730
0018ceb3 30323245 0x42313230
0018ceb7 3935205d 0x30323245
0018cebb 33393234 0x3935205d
0018cebf 20383637 0x33393234
0018cec3 203a736d 0x20383637
0018cec7 6b72614d 0x203a736d
0018cecb 6577732d 0x6b72614d
0018cecf 31207065 0x6577732d
0018ced3 20342e30 0x31207065
0018ced7 2e323128 0x20342e30
0018cedb 2d202930 0x2e323128
0018cedf 3031203e 0x2d202930
0018cee3 2820342e 0x3031203e
0018cee7 302e3231 0x2820342e
0018ceeb 424d2029 0x302e3231
0018ceef 3331202c 0x424d2029
0018cef3 2f20362e 0x3331202c
0018cef7 302e3020 0x2f20362e
0018cefb 20736d20 0x302e3020
0018ceff 76612820 0x20736d20
0018cf03 67617265 iertutil!__pobjectentrylast  (iertutil+0x202820)
0018cf07 756d2065 0x67617265
0018cf0b 30203d20 shell32!COverlayQueueItem::SetOverlayIndex+0x5
0018cf13 7563202c 0x30203d20
0018cf17 6e657272 advapi32!_NULL_IMPORT_DESCRIPTOR+0x11b2
0018cf1b 756d2074 0x6e657272
0018cf1f 30203d20 shell32!COverlayQueueItem::SetOverlayIndex+0x14
0018cf27 6f6c2029 0x30203d20
0018cf2b 656d2077 0x6f6c2029
0018cf2f 79726f6d 0x656d2077
0018cf33 746f6e20 0x79726f6d
0018cf37 63696669 0x746f6e20
0018cf3b 6f697461 node+0x3686669
0018cf3f 4347206e 0x6f697461
0018cf43 206e6920 0x4347206e
0018cf47 20646c6f 0x206e6920
0018cf4b 63617073 0x20646c6f
0018cf4f 65722065 node+0x3607073
0018cf53 73657571 0x65722065
0018cf57 0a646574 0x73657571
0018cf5b 00000000 0xa646574

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0041f8d4 6a1c8cc5 node+0x12ae60a
0041f96c 67e83961 node+0x2a18cc5
0041f9e0 68a789e6 node+0x6d3961
0041faac 68a7875e node+0x12c89e6
0041fb08 68a50ec3 node+0x12c875e
0041fb44 68a50acb node+0x12a0ec3
0041fb84 68a623d2 node+0x12a0acb
0041fbcc 68a622e2 node+0x12b23d2
0041fc10 67e7bd42 node+0x12b22e2
0041fc38 67e7d47d node+0x6cbd42
0041fc78 67dbed6c node+0x6cd47d
0041fcd4 67dbf379 node+0x60ed6c
0041fcf8 67dbea8a node+0x60f379
0041fcfc 68a3a300 node+0x60ea8a
0041fd00 00410000 node+0x128a300
0041fd04 00000000 0x410000

Top 25: total counts = 1

05f4fc34 6f5fe6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
05f4fc3c 6f5fe8c1 node+0x2f3e6e0
05f4fc40 0b51630c node+0x2f3e8c1
05f4fc44 6f5fe7dd 0xb51630c
05f4fc48 0044e17c node+0x2f3e7dd
05f4fc4c 00000000 0x44e17c

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
063bed84 04b69690 node+0xce6c1f
00000000 00000000 0x4b69690

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
06f7f670 6e2c4968 node+0x1289cc2
06f7f6ac 7708025d node+0x12f4968
06f7f6ec 770694d0 ntdll!RtlpTpWaitCallback+0x94
06f7f714 77069139 ntdll!TppWaitpExecuteCallback+0x11b
06f7f864 7672347d ntdll!TppWorkerThread+0x562
06f7f870 77049732 kernel32!BaseThreadInitThunk+0xe
06f7f8b0 77049705 ntdll!__RtlUserThreadStart+0x70
06f7f8c8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0044ca88 693ddc08 node+0x2a2f20b
0044cd87 203a736d node+0xb2dc08
0044cd8b 6b72614d 0x203a736d
0044cd8f 6577732d node+0x2e7614d
0044cd93 31207065 0x6577732d
0044cd97 20342e30 0x31207065
0044cd9b 2e323128 0x20342e30
0044cd9f 2d202933 0x2e323128
0044cda3 3031203e 0x2d202933
0044cda7 2820342e 0x3031203e
0044cdab 332e3231 0x2820342e
0044cdaf 424d2029 0x332e3231
0044cdb3 3531202c 0x424d2029
0044cdb7 2f20312e 0x3531202c
0044cdbb 302e3020 0x2f20312e
0044cdbf 20736d20 0x302e3020
0044cdc3 76612820 0x20736d20
0044cdfb 63696669 usp10!GetSubtableCoverage+0x60
0044ce13 65722065 0x63696669
0044ce17 73657571 0x65722065
0044ce1b 0a646574 0x73657571
0044ce1f 3639325b 0xa646574
0044ce23 31303a34 0x3639325b
0044ce27 39333545 0x31303a34
0044ce2b 205d3039 0x39333545
0044ce2f 33363934 0x205d3039
0044ce33 39333133 0x33363934
0044ce37 736d2035 0x39333133
0044ce3b 614d203a 0x736d2035
0044ce3f 732d6b72 0x614d203a
0044ce43 70656577 0x732d6b72
0044ce47 2e303120 0x70656577
0044ce4b 31282039 0x2e303120
0044ce4f 29332e32 0x31282039
0044ce53 203e2d20 0x29332e32
0044ce57 342e3031 0x203e2d20
0044ce5b 32312820 0x342e3031
0044ce5f 2029332e 0x32312820
0044ce63 202c424d 0x2029332e
0044ce67 322e3231 0x202c424d
0044ce6b 30202f20 0x322e3231
0044ce6f 6d20302e 0x30202f20
0044ce73 28202073 0x6d20302e
0044ce77 72657661 0x28202073
0044ce7b 20656761 0x72657661
0044ce7f 3d20756d 0x20656761
0044ce83 302e3120 0x3d20756d
0044ce87 202c3030 0x302e3120
0044ce8b 72727563 0x202c3030
0044ce8f 20746e65 0x72727563
0044ce93 3d20756d 0x20746e65
0044ce97 302e3120 0x3d20756d
0044ce9b 20293030 0x302e3120
0044ce9f 20776f6c 0x20293030
0044cea3 6f6d656d 0x20776f6c
0044cea7 6e207972 0x6f6d656d
0044ceab 6669746f 0x6e207972
0044ceaf 74616369 0x6669746f
0044ceb3 206e6f69 bcryptprimitives!g_fLoadCNGDone+0x1d5
0044ceb7 69204347 0x206e6f69
0044cebb 6c6f206e node+0x954347
0044cebf 70732064 node+0x3e4206e
0044cec3 20656361 0x70732064
0044cec7 75716572 0x20656361
0044cecb 65747365 0x75716572
0044cecf 325b0a64 0x65747365
0044ced3 3a343639 0x325b0a64
0044ced7 35453130 0x3a343639
0044cedb 30393933 0x35453130
0044cedf 3934205d 0x30393933
0044cee3 31333336 0x3934205d
0044cee7 20313134 0x31333336
0044ceeb 203a736d 0x20313134
0044ceef 6b72614d 0x203a736d
0044cef3 6577732d node+0x2e7614d
0044cef7 31207065 0x6577732d
0044cefb 20342e30 0x31207065
0044ceff 2e323128 0x20342e30
0044cf03 2d202933 0x2e323128
0044cf07 3031203e 0x2d202933
0044cf0b 2820342e 0x3031203e
0044cf0f 332e3231 0x2820342e
0044cf13 424d2029 0x332e3231
0044cf17 3631202c 0x424d2029
0044cf1b 2f20302e 0x3631202c
0044cf1f 302e3020 0x2f20302e
0044cf23 20736d20 0x302e3020
0044cf27 76612820 0x20736d20
0044cf5f 63696669 usp10!GetSubtableCoverage+0x60
0044cf77 65722065 0x63696669
0044cf7b 73657571 0x65722065
0044cf7f 0a646574 0x73657571
0044cf83 00000000 0xa646574

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0016cde8 67fddc08 node+0x2a2f20b
0016d0e7 2d6b7261 node+0xb2dc08
0016d0eb 65657773 0x2d6b7261
0016d0ef 30312070 0x65657773
0016d0f3 2820332e 0x30312070
0016d0f7 302e3231 0x2820332e
0016d0fb 3e2d2029 0x302e3231
0016d0ff 2e303120 0x3e2d2029
0016d103 31282033 0x2e303120
0016d107 29302e32 0x31282033
0016d10b 2c424d20 0x29302e32
0016d10f 2e333220 0x2c424d20
0016d113 202f2032 0x2e333220
0016d117 20302e30 0x202f2032
0016d11b 2020736d 0x20302e30
0016d11f 65766128 0x2020736d
0016d123 65676172 0x65766128
0016d127 20756d20 0x65676172
0016d12b 2e30203d 0x20756d20
0016d12f 2c393939 0x2e30203d
0016d133 72756320 0x2c393939
0016d137 746e6572 0x72756320
0016d13b 20756d20 0x746e6572
0016d13f 2e30203d 0x20756d20
0016d143 29353130 0x2e30203d
0016d147 776f6c20 0x29353130
0016d14b 6d656d20 wininet!`string'+0x7a780
0016d14f 2079726f 0x6d656d20
0016d153 69746f6e 0x2079726f
0016d157 61636966 node+0x2296f6e
0016d1ab 2029302e WindowsCodecs!CMetadataPngIccpReaderWriter::HrLoadProfileData+0x209
0016d1bf 36202c42 0x2029302e
0016d1c3 2e353234 0x36202c42
0016d1c7 202f2038 0x2e353234
0016d1cb 382e3238 0x202f2038
0016d1cf 20736d20 0x382e3238
0016d1d3 76612820 0x20736d20
0016d1e7 7563202c ole32!CWrappedDocFile::CreateDocFile+0x136
0016d217 206e6920 msvcrt!_mbscat_s_l+0x50
0016d22b 0a646574 0x206e6920
0016d22f 3838315b 0xa646574
0016d233 30303a38 0x3838315b
0016d237 34383643 0x30303a38
0016d23b 205d3038 0x34383643
0016d23f 33313433 0x205d3038
0016d243 38333237 0x33313433
0016d247 736d2038 0x38333237
0016d24b 614d203a 0x736d2038
0016d24f 732d6b72 0x614d203a
0016d253 70656577 0x732d6b72
0016d257 2e303120 0x70656577
0016d25b 31282033 0x2e303120
0016d25f 29302e32 0x31282033
0016d263 203e2d20 0x29302e32
0016d267 332e3031 0x203e2d20
0016d26b 32312820 0x332e3031
0016d26f 2029302e 0x32312820
0016d273 202c424d 0x2029302e
0016d277 32363031 0x202c424d
0016d27b 2f20342e 0x32363031
0016d27f 372e3520 0x2f20342e
0016d283 20736d20 0x372e3520
0016d287 76612820 0x20736d20
0016d29b 7563202c ole32!CWrappedDocFile::CreateDocFile+0x136
0016d2cb 206e6920 msvcrt!_mbscat_s_l+0x50
0016d2df 0a646574 0x206e6920
0016d2e3 00000000 0xa646574

Top 30: total counts = 1

ChildEBP RetAddr  
0023ea3c 6ddb2d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff294 63ee8cc5 node+0x12ae60a
012ff32c 61ba3961 node+0x2a18cc5
012ff3a0 627989e6 node+0x6d3961
012ff46c 6279875e node+0x12c89e6
012ff4c8 62770ec3 node+0x12c875e
012ff504 62770acb node+0x12a0ec3
012ff544 627823d2 node+0x12a0acb
012ff58c 627822e2 node+0x12b23d2
012ff5d0 61b9bd42 node+0x12b22e2
012ff5f8 61b9d47d node+0x6cbd42
012ff638 61aded6c node+0x6cd47d
012ff694 61adf379 node+0x60ed6c
012ff6b8 61adea8a node+0x60f379
012ff750 76fe5eae node+0x60ea8a
Map C:\Windows\System32\wininet.dll:
  Image region 408400:e400 does not fit in mapping
012ff75c 00000000 ntdll!RtlAllocateHeap+0x3e

Top 32: total counts = 1

ChildEBP RetAddr  
059fee4c 7a4d91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
059fee78 7a4d51c9 rightsmanager!AutorunItem::AutorunItem+0x34
059ff490 7a4d3ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0x1269
059ff6a0 7a4ce951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
059ff718 7a507f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
059ff8ec 75be7ba9 rightsmanager!RM_AutorunScan+0x176
059ff8fc 772ec36b kernel32!BaseThreadInitThunk+0x19
059ff954 772ec2ef ntdll!__RtlUserThreadStart+0x2b
059ff964 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0073f414 6c548cc5 node+0x12ae60a
0073f4ac 6a203961 node+0x2a18cc5
0073f520 6adf89e6 node+0x6d3961
0073f5ec 6adf875e node+0x12c89e6
0073f648 6add0ec3 node+0x12c875e
0073f684 6add0acb node+0x12a0ec3
0073f6c4 6ade23d2 node+0x12a0acb
0073f70c 6ade22e2 node+0x12b23d2
0073f750 6a1fbd42 node+0x12b22e2
0073f778 6a1fd47d node+0x6cbd42
0073f7b8 6a13ed6c node+0x6cd47d
0073f814 6a13f379 node+0x60ed6c
0073f838 6a13ea8a node+0x60f379
0073f8d0 76fb5eae node+0x60ea8a
0073f8dc 00000000 ntdll!RtlAllocateHeap+0x3e

Top 34: total counts = 1

06d6f7a8 6f0be6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
06d6f7b0 6f0be8c1 node+0x2f3e6e0
06d6f7b4 006810d4 node+0x2f3e8c1
06d6f7b8 6f0be7dd 0x6810d4
06d6f7bc 005ae4e4 node+0x2f3e7dd
06d6f7c0 00000000 0x5ae4e4

Top 35: total counts = 1

04b0fe44 6b04e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
04b0fe4c 6b04e8c1 node+0x2f3e6e0
04b0fe50 09ae888c node+0x2f3e8c1
04b0fe54 6b04e7dd 0x9ae888c
04b0fe58 003ce78c node+0x2f3e7dd
04b0fe5c 00000000 0x3ce78c

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfc810 6681dc08 node+0x2a2f20b
00cfcb0f 6d203133 node+0xb2dc08
00cfcb13 4d203a73 0x6d203133
00cfcb17 2d6b7261 0x4d203a73
00cfcb1b 65657773 0x2d6b7261
00cfcb1f 30312070 0x65657773
00cfcb23 2820322e 0x30312070
00cfcb27 302e3231 0x2820322e
00cfcb2b 3e2d2029 0x302e3231
00cfcb2f 2e303120 0x3e2d2029
00cfcb33 31282032 0x2e303120
00cfcb37 29302e32 0x31282032
00cfcb3b 2c424d20 0x29302e32
00cfcb3f 342e3520 0x2c424d20
00cfcb43 30202f20 0x342e3520
00cfcb47 6d20302e 0x30202f20
00cfcb4b 28202073 0x6d20302e
00cfcb4f 72657661 0x28202073
00cfcb53 20656761 OneCoreCommonProxyStub!`string'+0x19
00cfcb57 3d20756d 0x20656761
00cfcb5b 302e3120 0x3d20756d
00cfcb5f 202c3030 0x302e3120
00cfcb63 72727563 0x202c3030
00cfcb67 20746e65 0x72727563
00cfcb6b 3d20756d 0x20746e65
00cfcb6f 302e3020 0x3d20756d
00cfcb73 20293530 0x302e3020
00cfcb77 20776f6c 0x20293530
00cfcb7b 6f6d656d 0x20776f6c
00cfcb7f 6e207972 0x6f6d656d
00cfcb83 6669746f 0x6e207972
00cfcb87 74616369 node+0x9a746f
00cfcbdf 3031203e winhttp!WriteWinInetProxySettingsHelper+0x346
00cfcbf3 202f2030 0x3031203e
00cfcbf7 20302e30 0x202f2030
00cfcbfb 2020736d 0x20302e30
00cfcbff 65766128 0x2020736d
00cfcc03 65676172 0x65766128
00cfcc07 20756d20 0x65676172
00cfcc0b 2e31203d 0x20756d20
00cfcc0f 2c303030 0x2e31203d
00cfcc13 72756320 0x2c303030
00cfcc17 746e6572 0x72756320
00cfcc1b 20756d20 0x746e6572
00cfcc1f 2e31203d 0x20756d20
00cfcc23 29303030 0x2e31203d
00cfcc27 776f6c20 0x29303030
00cfcc2b 6d656d20 msvcrt!`string'+0x4
00cfcc2f 2079726f 0x6d656d20
00cfcc33 69746f6e 0x2079726f
00cfcc37 61636966 node+0x3a56f6e
00cfcc3b 6e6f6974 0x61636966
00cfcc3f 20434720 0x6e6f6974
00cfcc43 6f206e69 0x20434720
00cfcc47 7320646c 0x6f206e69
00cfcc4b 65636170 Windows_StateRepositoryPS!_NULL_IMPORT_DESCRIPTOR  (Windows_StateRepositoryPS+0x8646c)
00cfcc4f 71657220 0x65636170
00cfcc53 74736575 0x71657220
00cfcc57 5b0a6465 0x74736575
00cfcc5b 35363339 0x5b0a6465
00cfcc5f 32303a32 0x35363339
00cfcc63 39364645 0x32303a32
00cfcc67 205d3030 0x39364645
00cfcc6b 37383632 0x205d3030
00cfcc6f 39333532 0x37383632
00cfcc73 3a736d20 0x39333532
00cfcc77 72614d20 0x3a736d20
00cfcc7b 77732d6b 0x72614d20
00cfcc8f 31203e2d msvcrt!_spawnvpe+0x27b
00cfcca3 2f20302e 0x31203e2d
00cfcca7 302e3020 0x2f20302e
00cfccab 20736d20 0x302e3020
00cfccaf 76612820 0x20736d20
00cfccb3 67617265 shell32!CApplyDateChange::Release+0x20
00cfccbb 31203d20 node+0x1927265
00cfccbf 3030302e 0x31203d20
00cfccc3 7563202c 0x3030302e
00cfccc7 6e657272 0x7563202c
00cfcccb 756d2074 0x6e657272
00cfcccf 30203d20 IPHLPAPI!`string'+0x418
00cfccd3 3430302e 0x30203d20
00cfccd7 6f6c2029 0x3430302e
00cfccdb 656d2077 0x6f6c2029
00cfccdf 79726f6d 0x656d2077
00cfcce3 746f6e20 0x79726f6d
00cfcce7 63696669 0x746f6e20
00cfcceb 6f697461 0x63696669
00cfccef 4347206e 0x6f697461
00cfccf3 206e6920 0x4347206e
00cfccf7 20646c6f 0x206e6920
00cfccfb 63617073 0x20646c6f
00cfccff 65722065 0x63617073
00cfcd03 73657571 0x65722065
00cfcd07 0a646574 0x73657571
00cfcd0b 00000000 0xa646574

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b5f144 12528d6c node+0x12ae60a
00b5f1b4 101e3961 node+0x2a18d6c
00b5f228 10dd89e6 node+0x6d3961
00b5f2f4 10dd875e node+0x12c89e6
00b5f350 10db0ec3 node+0x12c875e
00b5f38c 10db0acb node+0x12a0ec3
00b5f3cc 10dc23d2 node+0x12a0acb
00b5f414 10dc22e2 node+0x12b23d2
00b5f458 101dbd42 node+0x12b22e2
00b5f480 101dd47d node+0x6cbd42
00b5f4c0 1011ed6c node+0x6cd47d
00b5f51c 1011f379 node+0x60ed6c
00b5f540 1011ea8a node+0x60f379
00b5f5d8 77d1adee node+0x60ea8a
00b5f68c 77d1dc16 ntdll!RtlAllocateHeap+0x3e
00b5f6a4 6e652d00 ntdll!RtlFreeHeap+0x46
00b5f6b4 00000000 0x6e652d00

Top 38: total counts = 1

ChildEBP RetAddr  
0553eaa0 7a36e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0553eae0 7a37738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0553ed30 7a374ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0553f348 7a373ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
0553f558 7a36e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
0553f5d0 7a3a7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
0553f7a4 7524fcc9 rightsmanager!RM_AutorunScan+0x176
0553f7b4 773c82ae kernel32!BaseThreadInitThunk+0x19
0553f810 773c827e ntdll!__RtlUserThreadStart+0x2f
0553f820 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012ff454 63848cc5 node+0x12ae60a
012ff4ec 61503961 node+0x2a18cc5
012ff560 620f89e6 node+0x6d3961
012ff62c 620f875e node+0x12c89e6
012ff688 620d0ec3 node+0x12c875e
012ff6c4 620d0acb node+0x12a0ec3
012ff704 620e23d2 node+0x12a0acb
012ff74c 620e22e2 node+0x12b23d2
012ff790 614fbd42 node+0x12b22e2
012ff7b8 614fd47d node+0x6cbd42
012ff7f8 6143ed6c node+0x6cd47d
012ff854 6143f379 node+0x60ed6c
012ff878 6143ea8a node+0x60f379
012ff918 7742c6fe node+0x60ea8a
012ff9c4 7742f7a6 ntdll!RtlAllocateHeap+0x3e
012ff9dc 72662d00 ntdll!RtlFreeHeap+0x46
012ffbe4 00000000 GdiPlus!DriverPrint::FillPath+0xb0

Top 40: total counts = 1

ChildEBP RetAddr  
154de2d0 7c83545a KERNELBASE!RaiseException+0x62
154de314 7c820002 ModeIdentify!_CxxThrowException+0x66
154de330 154de340 ModeIdentify!std::_Xbad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
154de334 7c7db34c 0x154de340
154de340 7c7d2d17 ModeIdentify!std::_Default_allocate_traits::_Allocate+0xc
154de358 7c7d2cc5 ModeIdentify!std::_Allocate_manually_vector_aligned+0x27
154de364 7c8042a9 ModeIdentify!std::_Allocate<8,std::_Default_allocate_traits,0>+0x15
154de374 7c7fcbb5 ModeIdentify!std::allocator::allocate+0x19
154de3c8 7c7ff23f ModeIdentify!std::vector >::_Emplace_reallocate+0x95
154de3e0 7c80475c ModeIdentify!std::vector >::emplace_back+0x4f
154de3f0 7c800e93 ModeIdentify!std::vector >::push_back+0x1c
154de44c 7c7fc375 ModeIdentify!::operator()+0xc3
154de458 7c7ff5c2 ModeIdentify!std::_Invoker_functor::_Call< &,TiXmlElement *>+0x25
154de468 7c7fc342 ModeIdentify!std::invoke< &,TiXmlElement *>+0x22
154de478 7c803620 ModeIdentify!std::_Invoker_ret::_Call< &,TiXmlElement *>+0x22
154de48c 7c7d7392 ModeIdentify!std::_Func_impl_no_alloc<,void,TiXmlElement *>::_Do_call+0x20
154de4a0 7c7db0cd ModeIdentify!std::_Func_class::operator()+0x42
154de4c0 7c8024b4 ModeIdentify!TinyXmlForEach+0x6d
154de5b0 7c7ebfca ModeIdentify!LocalDataDaoXMLImpl::ReadLocalAppData+0x234
154de5f8 7c7fa0c6 ModeIdentify!GameModeIdentify::Init+0x5a
154deb68 78f5a2c6 ModeIdentify!GameModeAndWebStateIdentifyImp::Init+0x156
154ded84 78f5a201 rightsextension!CGameIdentify::Init+0xa6
154ded8c 78f5add0 rightsextension!CGameIdentify::GetWebState+0x11
154def0c 78f67e0f rightsextension!CPopupChecker::IsPopupEnabled+0x3c0
154df0e8 78f6a772 rightsextension!Rights::CCloudPopWindow::HandlePopConditionCommon+0x2df
154df2c8 78f6dd7c rightsextension!Rights::CCloudPopWindow::HandlePopConditionStartup+0x172
154df3c0 78f6da5e rightsextension!Rights::CCloudPopWindow::RequestHandlePopCondition+0x2dc
154df3cc 78f5d566 rightsextension!Rights::CCloudPopWindow::ProcessWindowMessage+0xbe
154df428 708e195a rightsextension!ATL::CWindowImplBaseT >::WindowProc+0x76
154df448 7519398f atlthunk!AtlThunk_0x02+0x3a
154df474 75184376 user32!_InternalCallWinProc+0x2b
154df56c 75182b88 user32!UserCallWinProcCheckWow+0x4c6
154df5e8 751826f0 user32!DispatchMessageWorker+0x488
154df5f4 78f6ba24 user32!DispatchMessageW+0x10
154df7ec 7905f16a rightsextension!Rights::MainEntry+0x2d4
154df824 76727ba9 rightsextension!thread_start+0x58
154df834 76eec2eb kernel32!BaseThreadInitThunk+0x19
154df88c 76eec26f ntdll!__RtlUserThreadStart+0x2b
154df89c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ee86c 60b7386a node+0x10a30c6
003ee884 60b2733c node+0x10a386a
003ee908 77b9dea3 node+0x105733c
003ee9c8 757514d1 ntdll!RtlFreeHeap+0x105
003eea8c 77bf7bdc kernel32!HeapFree+0x14
77b8fce5 b8900008 ntdll!RtlQueryPerformanceCounter+0x61
77b8fced 548dc933 0xb8900008
77b8fcf1 ff640424 0x548dc933
77b8fcf5 00000000 0xff640424

Top 42: total counts = 1

ChildEBP RetAddr  
04e5f130 08f4e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04e5f170 08f5738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04e5f3c0 08f512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04e6fa08 08f4e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04e6fa80 08f87f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04e6fc54 75bb62c4 rightsmanager!RM_AutorunScan+0x176
04e6fc68 77441b69 kernel32!BaseThreadInitThunk+0x24
04e6fcb0 77441b34 ntdll!__RtlUserThreadStart+0x2f
04e6fcc0 00000000 ntdll!_RtlUserThreadStart+0x1b