Analyzed 73 dump

Top 1: total counts = 12

08dafd2c 64a3aeed rightsmanager!RM_AutorunScan+0x176
08dafe28 75e3347d ffi_bindings!ffi_call_win32+0x11
08dafe34 77199762 kernel32!BaseThreadInitThunk+0xe
08dafe74 77199735 ntdll!__RtlUserThreadStart+0x70
08dafe8c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 8

056ff7b4 7c01aeed rightsmanager!RM_AutorunScan+0x176
056ff8b0 765afcc9 ffi_bindings!ffi_call_win32+0x11
056ff8c0 779782ae kernel32!BaseThreadInitThunk+0x19
056ff91c 7797827e ntdll!__RtlUserThreadStart+0x2f
056ff92c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 7

ChildEBP RetAddr  
05ebeda0 7ae6e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05ebede0 7ae7738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05ebf030 7ae712a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ecf678 7ae6e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ecf6f0 7aea7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ecf8c4 76705d49 rightsmanager!RM_AutorunScan+0x176
05ecf8d4 77cfd09b kernel32!BaseThreadInitThunk+0x19
05ecf92c 77cfd021 ntdll!__RtlUserThreadStart+0x2b
05ecf93c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 6

ChildEBP RetAddr  
04a9ede8 5891e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04a9ee28 5892738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04a9f078 589212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04aaf6c0 5891e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04aaf738 58957f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04aaf90c 75bf343d rightsmanager!RM_AutorunScan+0x176
04aaf918 77829812 kernel32!BaseThreadInitThunk+0xe
04aaf958 778297e5 ntdll!__RtlUserThreadStart+0x70
04aaf970 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 6

ChildEBP RetAddr  
0536ee48 7c69e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0536ee88 7c6a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0536f0d8 7c6a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0537f720 7c69e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0537f798 7c6d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0537f96c 74d36359 rightsmanager!RM_AutorunScan+0x176
0537f97c 771f7b74 kernel32!BaseThreadInitThunk+0x19
0537f9d8 771f7b44 ntdll!__RtlUserThreadStart+0x2f
0537f9e8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 4

0508f9dc 671baeed rightsmanager!RM_AutorunScan+0x176
0508fad8 76117ba9 ffi_bindings!ffi_call_win32+0x11
0508fae8 774fc36b kernel32!BaseThreadInitThunk+0x19
0508fb40 774fc2ef ntdll!__RtlUserThreadStart+0x2b
0508fb50 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 3

ChildEBP RetAddr  
05dcf170 7b94e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05dcf1b0 7b95738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05dcf400 7b9512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ddfa48 7b94e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ddfac0 7b987f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ddfc94 762e6739 rightsmanager!RM_AutorunScan+0x176
05ddfca4 776d8aff kernel32!BaseThreadInitThunk+0x19
05ddfcfc 776d8acd ntdll!__RtlUserThreadStart+0x2b
05ddfd0c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 3

ChildEBP RetAddr  
00cff278 7c1ce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
00cff2b8 7c1d738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
00cff508 7c1d12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
00d0fb50 7c1ce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
00d0fbc8 7c207f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
00d0fd9c 7585fcc9 rightsmanager!RM_AutorunScan+0x176
00d0fdac 772482ae kernel32!BaseThreadInitThunk+0x19
00d0fe08 7724827e ntdll!__RtlUserThreadStart+0x2f
00d0fe18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 2

07bbf7b4 6dac6025 winhttp!WinHttpGetIEProxyConfigForCurrentUser+0xbd
WARNING: Stack unwind information not available. Following frames may be wrong.
07bbf974 6e01d787 node+0x2c16025
07bbfa74 6b237c11 node+0x316d787
07bbfae4 6c17c6d4 node+0x387c11
07bbfba4 6c17bfdb node+0x12cc6d4
07bbfce4 6c18056f node+0x12cbfdb
07bbfd30 6c1803cb node+0x12d056f
07bbfd58 76e2347d node+0x12d03cb
07bbfd64 778a9852 kernel32!BaseThreadInitThunk+0xe
07bbfda4 778a9825 ntdll!__RtlUserThreadStart+0x70
07bbfdbc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 2

ChildEBP RetAddr  
0687f2b0 0fdbe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0687f2f0 0fdc738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0687f540 0fdc12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0688fb88 0fdbe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0688fc00 0fdf7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0688fdd4 754e343d rightsmanager!RM_AutorunScan+0x176
0688fde0 77949812 kernel32!BaseThreadInitThunk+0xe
0688fe20 779497e5 ntdll!__RtlUserThreadStart+0x70
0688fe38 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ef874 12678d6c node+0x12ae60a
002ef8dc 10333961 node+0x2a18d6c
002ef950 10f289e6 node+0x6d3961
002efa1c 10f2875e node+0x12c89e6
002efa78 10f00ec3 node+0x12c875e
002efab4 10f00acb node+0x12a0ec3
002efaf4 10f123d2 node+0x12a0acb
002efb3c 10f122e2 node+0x12b23d2
002efb80 1032bd42 node+0x12b22e2
002efba8 1032d47d node+0x6cbd42
002efbe8 1026ed6c node+0x6cd47d
002efc44 1026f379 node+0x60ed6c
002efc68 1026ea8a node+0x60f379
002efc6c 10eea300 node+0x60ea8a
002efc70 002e0000 node+0x128a300
002efc74 00000000 0x2e0000

Top 12: total counts = 1

ChildEBP RetAddr  
1381e814 72da692c taskschd!ATL::ICollectionOnSTLImpl >,std::allocator > > >,IAction *,InterfaceCollection::CopyAdaptorToPointer,ATL::CComEnumOnSTL::CopyAdaptorToVariant,std::vector >,std::allocator > > >,ATL::CComMultiThreadModel> >::get_Item+0x31
1381e858 72da3bc1 taskschd!BuilderXmlHandler::[ITaskXmlHandler]::ProcessElement+0xbc
1381e884 72da39c7 taskschd!TaskXmlReader::ProcessElement+0x9c
1381e9f8 72da3bf0 taskschd!TaskXmlReader::ProcessComplexContent+0x2e7
1381ea2c 72da39c7 taskschd!TaskXmlReader::ProcessElement+0xcb
1381eba0 72da3bf0 taskschd!TaskXmlReader::ProcessComplexContent+0x2e7
1381ebd0 72da0c8b taskschd!TaskXmlReader::ProcessElement+0xcb
1381ec10 72da89a3 taskschd!TaskXmlReader::ProcessXml+0xf3
1381ee10 72dae162 taskschd!TaskDefinitionImpl::LoadFromXmlText+0x109
1381ee40 72dae0c7 taskschd!TaskDefinitionImpl::put_LocalizedXmlText+0x2a
1381ee80 50e6ea8b taskschd!RegisteredTaskImpl::[IRegisteredTask]::get_Definition+0xc7
1381f334 50e71426 rightsextension!AutorunMgr::EnumFolder+0x2ab
1381f538 50e71c71 rightsextension!AutorunMgr::EnumTaskScheduler+0x586
1381f5fc 50e39e54 rightsextension!AutorunMgr::GetSingleAutoruns+0x151
1381f7bc 50e3c5a6 rightsextension!Rights::CCloudPopWindow::HandlePopConditionSingle+0x8c4
1381f8c0 50e3da22 rightsextension!Rights::CCloudPopWindow::OnSingleAppEvent+0x356
1381f8dc 50e2d566 rightsextension!Rights::CCloudPopWindow::ProcessWindowMessage+0x82
1381f938 72e118d6 rightsextension!ATL::CWindowImplBaseT >::WindowProc+0x76
1381f958 76c8157b atlthunk!AtlThunk_0x02+0x36
1381f984 76c77c5a user32!_InternalCallWinProc+0x2b
1381fa6c 76c76500 user32!UserCallWinProcCheckWow+0x33a
1381fae8 76c76030 user32!DispatchMessageWorker+0x4c0
1381faf4 50e3ba24 user32!DispatchMessageW+0x10
1381fcec 50f2f16a rightsextension!Rights::MainEntry+0x2d4
1381fd24 768cfcc9 rightsextension!thread_start+0x58
1381fd34 776982ae kernel32!BaseThreadInitThunk+0x19
1381fd90 7769827e ntdll!__RtlUserThreadStart+0x2f
1381fda0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 1

ChildEBP RetAddr  
0ba0ef34 0e1591a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0ba0ef60 0e151b3e rightsmanager!AutorunItem::AutorunItem+0x34
0ba1f5a8 0e14e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0ba1f620 0e187f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0ba1f7f4 761b344d rightsmanager!RM_AutorunScan+0x176
0ba1f800 770a9802 kernel32!BaseThreadInitThunk+0xe
0ba1f840 770a97d5 ntdll!__RtlUserThreadStart+0x70
0ba1f858 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028c7c0 6679dc08 node+0x2a2f20b
0028cabf 70657473 node+0xb2dc08
0028cac3 69732073 0x70657473
0028cac7 2065636e node+0x3ac2073
0028cacb 72617473 0x2065636e
0028cacf 666f2074 0x72617473
0028cad3 72616d20 node+0xa82074
0028cad7 676e696b 0x72616d20
0028cadb 6962202c node+0x1a7696b
0028cadf 73656767 node+0x39b202c
0028cae3 74732074 0x73656767
0028cae7 30207065 winsta!`string'+0x20
0028caeb 6d20342e 0x30207065
0028caef 77202c73 0x6d20342e
0028cb3b 39392e30 ntdll!LdrpSearchPath+0x1bc
0028cb5b 38363231 0x39392e30
0028cb5f 4230303a 0x38363231
0028cb63 43453030 0x4230303a
0028cb67 20205d38 0x43453030
0028cb6b 31373920 0x20205d38
0028cb6f 20303035 0x31373920
0028cb73 203a736d 0x20303035
0028cb77 6b72614d 0x203a736d
0028cb7b 6577732d 0x6b72614d
0028cb7f 31207065 0x6577732d
0028cb83 20352e30 0x31207065
0028cb87 2e323128 0x20352e30
0028cb8b 2d202930 0x2e323128
0028cb8f 3031203e 0x2d202930
0028cb93 2820302e 0x3031203e
0028cb97 302e3231 0x2820302e
0028cb9b 424d2029 0x302e3231
0028cb9f 3532202c 0x424d2029
0028cba3 2f20322e 0x3532202c
0028cba7 302e3020 0x2f20322e
0028cbab 20736d20 0x302e3020
0028cbaf 76612820 0x20736d20
0028ce0b 00000000 kernel32!PEWriteResource<_IMAGE_NT_HEADERS>+0x1258

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff874 6b848cc5 node+0x12ae60a
00aff914 69503961 node+0x2a18cc5
00aff988 6a0f89e6 node+0x6d3961
00affa54 6a0f875e node+0x12c89e6
00affab0 6a0d0ec3 node+0x12c875e
00affaec 6a0d0acb node+0x12a0ec3
00affb2c 6a0e23d2 node+0x12a0acb
00affb74 6a0e22e2 node+0x12b23d2
00affbb8 694fbd42 node+0x12b22e2
00affbe0 694fd47d node+0x6cbd42
00affc20 6943ed6c node+0x6cd47d
00affc7c 6943f379 node+0x60ed6c
00affca0 6943ea8a node+0x60f379
00affd40 77d3c67e node+0x60ea8a
00affd4c 00affdbc ntdll!RtlAllocateHeap+0x3e
00000000 00000000 0xaffdbc

Top 16: total counts = 1

05b3f784 54c8aeed rightsmanager!RM_AutorunScan+0x176
05b3f880 749238f4 ffi_bindings!ffi_call_win32+0x11
05b3f894 77865e13 kernel32!BaseThreadInitThunk+0x24
05b3f8dc 77865dde ntdll!__RtlUserThreadStart+0x2f
05b3f8ec 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfc8e8 6a4cdc08 node+0x2a2f20b
00cfcbe7 614d203a node+0xb2dc08
00cfcbeb 732d6b72 0x614d203a
00cfcbef 70656577 0x732d6b72
00cfcbf3 2e303120 0x70656577
00cfcbf7 31282037 0x2e303120
00cfcbfb 29382e32 0x31282037
00cfcbff 203e2d20 0x29382e32
00cfcc03 372e3031 0x203e2d20
00cfcc07 32312820 0x372e3031
00cfcc0b 2029382e 0x32312820
00cfcc0f 202c424d 0x2029382e
00cfcc13 332e3031 0x202c424d
00cfcc17 30202f20 0x332e3031
00cfcc1b 6d20302e 0x30202f20
00cfcc1f 28202073 node+0x386302e
00cfcc23 72657661 0x28202073
00cfcc27 20656761 0x72657661
00cfcc2b 3d20756d 0x20656761
00cfcc2f 392e3020 0x3d20756d
00cfcc33 202c3939 0x392e3020
00cfcc37 72727563 0x202c3939
00cfcc3b 20746e65 0x72727563
00cfcc3f 3d20756d 0x20746e65
00cfcc43 302e3020 0x3d20756d
00cfcc47 20293230 0x302e3020
00cfcc4b 20776f6c 0x20293230
00cfcc4f 6f6d656d 0x20776f6c
00cfcc6b 70732064 directxdatabasehelper!SdbpCheckMatchingWildcardRegistryEntry+0x1c
00cfcc8f 34333538 0x70732064
00cfcc93 30343735 0x34333538
00cfcc97 3a736d20 0x30343735
00cfcc9b 72614d20 0x3a736d20
00cfcc9f 77732d6b 0x72614d20
00cfcca3 20706565 ucrtbase!_CT??_R0?AVbad_caststd+0x10f47
00cfcca7 322e3131 0x20706565
00cfccab 32312820 0x322e3131
00cfccaf 2029382e 0x32312820
00cfccb3 31203e2d 0x2029382e
00cfccb7 20372e30 0x31203e2d
00cfccbb 2e323128 0x20372e30
00cfccbf 4d202938 0x2e323128
00cfccc3 31202c42 0x4d202938
00cfccc7 20352e38 0x31202c42
00cfcccb 2e30202f 0x20352e38
00cfcccf 736d2030 0x2e30202f
00cfccd3 61282020 windows_storage!ExpandWordWheelLeafCondition+0x246df4
00cfccd7 61726576 0x61282020
00cfccdb 6d206567 0x61726576
00cfccdf 203d2075 node+0x3866567
00cfcce3 30302e31 0x203d2075
00cfcce7 63202c30 0x30302e31
00cfcceb 65727275 0x63202c30
00cfccef 6d20746e 0x65727275
00cfccf3 203d2075 node+0x386746e
00cfccf7 30302e31 0x203d2075
00cfccfb 6c202930 0x30302e31
00cfccff 6d20776f node+0x2862930
00cfcd03 726f6d65 node+0x386776f
00cfcd07 6f6e2079 0x726f6d65
00cfcd0b 69666974 directxdatabasehelper!memmove+0x800
6f6e2079 90cccccc UIAutomationCore!CTextRange::GetVisualRelativeBoundingRectangles+0x34
6f6e2085 33a44a8b 0x90cccccc
6f6e2089 e3cde8c8 0x33a44a8b
6f6e208d 4a8bffff 0xe3cde8c8
6f6e2091 e8c833fc 0x4a8bffff
6f6e2095 ffffe3c3 0xe8c833fc
6f6e2099 6e2a6cb8 0xffffe3c3
6f6e209d f230e96f 0x6e2a6cb8
6f6e20a1 ccccffff 0xf230e96f
6f6e20a5 cccccccc 0xccccffff
6f6e20a9 e9f04d8d 0xcccccccc
6f6e20ad fffcd23c 0xe9f04d8d
6f6e20b1 cccccccc 0xfffcd23c
6f6e20b5 8b9090cc 0xcccccccc
6f6e20b9 8d082454 0x8b9090cc
6f6e20bd 4a8b0c42 0x8d082454
6f6e20c1 e8c833e8 0x4a8b0c42
6f6e20c5 ffffe393 0xe8c833e8
6f6e20c9 6e2aa0b8 0xffffe393
6f6e20cd f200e96f 0x6e2aa0b8
6f6e20d1 ccccffff 0xf200e96f
6f6e20d5 cccccccc 0xccccffff
6f6e20d9 fd908d8d 0xcccccccc
6f6e20dd e4e9ffff 0xfd908d8d
6f6e20e1 ccfffe00 0xe4e9ffff
6f6e20e5 cccccccc 0xccfffe00
6f6e20e9 548b9090 0xcccccccc
6f6e20ed 428d0824 0x548b9090
6f6e20f1 748a8b0c 0x428d0824
6f6e20f5 33fffffd winsta!`string'+0x1768
6f6e20f9 e35de8c8 0x33fffffd
6f6e20fd 4a8bffff 0xe35de8c8
6f6e2101 e8c833fc 0x4a8bffff
6f6e2105 ffffe353 0xe8c833fc
6f6e2109 6e2accb8 0xffffe353
6f6e210d f1c0e96f 0x6e2accb8
6f6e2111 ccccffff 0xf1c0e96f
6f6e2115 cccccccc 0xccccffff
6f6e2119 83f0458b 0xcccccccc
6f6e211d 840f01e0 0x83f0458b
6f6e2121 00000000 0x840f01e0

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ef664 69778cc5 node+0x12ae60a
002ef704 67433961 node+0x2a18cc5
002ef778 680289e6 node+0x6d3961
002ef844 6802875e node+0x12c89e6
002ef8a0 68000ec3 node+0x12c875e
002ef8dc 68000acb node+0x12a0ec3
002ef91c 680123d2 node+0x12a0acb
002ef964 680122e2 node+0x12b23d2
002ef9a8 6742bd42 node+0x12b22e2
002ef9d0 6742d47d node+0x6cbd42
002efa10 6736ed6c node+0x6cd47d
002efa6c 6736f379 node+0x60ed6c
002efa90 6736ea8a node+0x60f379
002efa94 67fea300 node+0x60ea8a
002efa98 002e0000 node+0x128a300
002efa9c 00000000 0x2e0000

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001cf794 6c548cc5 node+0x12ae60a
001cf82c 6a203961 node+0x2a18cc5
001cf8a0 6adf89e6 node+0x6d3961
001cf96c 6adf875e node+0x12c89e6
001cf9c8 6add0ec3 node+0x12c875e
001cfa04 6add0acb node+0x12a0ec3
001cfa44 6ade23d2 node+0x12a0acb
001cfa8c 6ade22e2 node+0x12b23d2
001cfad0 6a1fbd42 node+0x12b22e2
001cfaf8 6a1fd47d node+0x6cbd42
001cfb38 6a13ed6c node+0x6cd47d
001cfb94 6a13f379 node+0x60ed6c
001cfbb8 6a13ea8a node+0x60f379
001cfbbc 6adba300 node+0x60ea8a
001cfbc0 001c0000 node+0x128a300
001cfbc4 00000000 0x1c0000

Top 20: total counts = 1

0019ccf7 732d6b72 node+0xb2dc08
0019ccfb 70656577 360Base+0xc6b72
0019ccff 2e303120 0x70656577
0019cd03 31282039 0x2e303120
0019cd07 29352e32 0x31282039
0019cd0b 203e2d20 0x29352e32
0019cd0f 342e3031 0x203e2d20
0019cd13 32312820 0x342e3031
0019cd17 2029352e 0x32312820
0019cd1b 202c424d 0x2029352e
0019cd1f 2e323532 0x202c424d
0019cd23 202f2033 0x2e323532
0019cd27 20302e30 0x202f2033
0019cd2b 2020736d 0x20302e30
0019cd2f 65766128 0x2020736d
0019cd33 65676172 0x65766128
0019cd37 20756d20 0x65676172
0019cd3b 2e30203d 0x20756d20
0019cd3f 2c373939 0x2e30203d
0019cd43 72756320 0x2c373939
0019cd47 746e6572 0x72756320
0019cd4b 20756d20 0x746e6572
0019cd4f 2e30203d 0x20756d20
0019cd53 29363939 0x2e30203d
0019cd57 776f6c20 0x29363939
0019cd5b 6d656d20 0x776f6c20
0019cd5f 2079726f 0x6d656d20
0019cd63 69746f6e 0x2079726f
0019cd67 61636966 0x69746f6e
0019cd6b 6e6f6974 0x61636966
0019cd6f 20434720 0x6e6f6974
0019cd73 6f206e69 0x20434720
0019cd77 7320646c 0x6f206e69
0019cd7b 65636170 0x7320646c
0019cd7f 71657220 0x65636170
0019cd83 74736575 0x71657220
0019cd87 5b0a6465 0x74736575
0019cd8b 32333834 node+0x2936465
0019cd8f 4430303a 0x32333834
0019cd93 34464641 0x4430303a
0019cd97 31205d30 0x34464641
0019cd9b 36343337 0x31205d30
0019cd9f 34363436 0x36343337
0019cda3 736d2037 0x34363436
0019cda7 614d203a 0x736d2037
0019cdab 732d6b72 0x614d203a
0019cdaf 70656577 360Base+0xc6b72
0019cdb3 2e303120 0x70656577
0019cdb7 31282034 0x2e303120
0019cdbb 29352e32 0x31282034
0019cdbf 203e2d20 0x29352e32
0019cdc3 342e3031 0x203e2d20
0019cdc7 32312820 0x342e3031
0019cdcb 2029352e 0x32312820
0019cdcf 202c424d 0x2029352e
0019cdd3 2e313231 0x202c424d
0019cdd7 202f2034 0x2e313231
0019cddb 20302e30 0x202f2034
0019cddf 2020736d 0x20302e30
0019cde3 65766128 0x2020736d
0019cde7 65676172 0x65766128
0019cdeb 20756d20 0x65676172
0019cdef 2e30203d 0x20756d20
0019cdf3 2c343939 0x2e30203d
0019cdf7 72756320 0x2c343939
0019cdfb 746e6572 0x72756320
0019cdff 20756d20 0x746e6572
0019ce03 2e30203d 0x20756d20
0019ce07 29303030 0x2e30203d
0019ce0b 776f6c20 0x29303030
0019ce0f 6d656d20 0x776f6c20
0019ce13 2079726f 0x6d656d20
0019ce17 69746f6e 0x2079726f
0019ce1b 61636966 0x69746f6e
0019ce1f 6e6f6974 0x61636966
0019ce23 20434720 0x6e6f6974
0019ce27 6f206e69 0x20434720
0019ce2b 7320646c 0x6f206e69
0019ce2f 65636170 0x7320646c
0019ce33 71657220 0x65636170
0019ce37 74736575 0x71657220
0019ce3b 5b0a6465 0x74736575
0019ce3f 32333834 node+0x2936465
0019ce43 4430303a 0x32333834
0019ce47 34464641 0x4430303a
0019ce4b 31205d30 0x34464641
0019ce4f 37343337 0x31205d30
0019ce53 36323632 0x37343337
0019ce57 736d2036 0x36323632
0019ce5b 614d203a 0x736d2036
0019ce5f 732d6b72 0x614d203a
0019ce63 70656577 360Base+0xc6b72
0019ce67 2e303120 0x70656577
0019ce6b 31282039 0x2e303120
0019ce6f 29352e32 0x31282039
0019ce73 203e2d20 0x29352e32
0019ce77 342e3031 0x203e2d20
0019ce7b 32312820 0x342e3031
0019ce7f 2029352e 0x32312820
0019ce83 202c424d 0x2029352e
0019ce87 31303431 0x202c424d
0019ce8b 2f20362e 0x31303431
0019ce8f 302e3020 0x2f20362e
0019ce93 20736d20 0x302e3020
0019ce97 76612820 0x20736d20
0019ce9b 67617265 0x76612820
0019ce9f 756d2064 0x67617265
0019cebb 3737392e shell32!IsStreamUTF8+0x72
0019cec3 656d2077 0x3737392e
0019cec7 79726f6d 0x656d2077
0019cecb 746f6e20 0x79726f6d
0019cecf 63696669 0x746f6e20
0019ced3 6f697461 0x63696669
0019ced7 4347206e 0x6f697461
0019cedb 206e6920 0x4347206e
0019cedf 20646c6f 0x206e6920
0019cee3 63617073 0x20646c6f
0019cee7 65722065 0x63617073
0019ceeb 73657571 0x65722065
0019ceef 0a646574 0x73657571
0019cef3 00000000 0xa646574

Top 21: total counts = 1

ChildEBP RetAddr  
0591f238 5430e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0591f278 5431738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0591f4c8 543112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0592fb10 5430e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0592fb88 54347f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0592fc64 0592fc74 rightsmanager!RM_AutorunScan+0x176
WARNING: Frame IP not in any known module. Following frames may be wrong.
0592fd68 77219882 0x592fc74
0592fda8 77219855 ntdll!__RtlUserThreadStart+0x70
0592fdc0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024e8a0 6ee255ea node+0x105ad20
0024e8bc 6edf8046 node+0x10a55ea
0024e8e4 6eddab9b node+0x1078046
0024e910 6e9c44bc node+0x105ab9b
0024e998 6e9c4913 node+0xc444bc
0024e9a4 00b61a30 node+0xc44913
0024e9a8 00000000 0xb61a30

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0093f124 5e468d6c node+0x12ae60a
0093f194 5c123961 node+0x2a18d6c
0093f208 5cd189e6 node+0x6d3961
0093f2d4 5cd1875e node+0x12c89e6
0093f330 5ccf0ec3 node+0x12c875e
0093f36c 5ccf0acb node+0x12a0ec3
0093f3ac 5cd023d2 node+0x12a0acb
0093f3f4 5cd022e2 node+0x12b23d2
0093f438 5c11bd42 node+0x12b22e2
0093f460 5c11d47d node+0x6cbd42
0093f4a0 5c05ed6c node+0x6cd47d
0093f4fc 5c05f379 node+0x60ed6c
0093f520 5c05ea8a node+0x60f379
0093f5b8 77acae8e node+0x60ea8a
0093f66c 77acdcb6 ntdll!RtlAllocateHeap+0x3e
0093f684 72662d00 ntdll!RtlFreeHeap+0x46
0093f694 00000000 0x72662d00

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0029ce70 5cf4dc08 node+0x2a2f20b
0029d16f 72614d20 node+0xb2dc08
0029d173 77732d6b 0x72614d20
0029d177 20706565 0x77732d6b
0029d17b 332e3031 0x20706565
0029d17f 32312820 0x332e3031
0029d183 2029302e 0x32312820
0029d187 31203e2d 0x2029302e
0029d18b 20332e30 0x31203e2d
0029d18f 2e323128 0x20332e30
0029d193 4d202930 0x2e323128
0029d197 31202c42 0x4d202930
0029d19b 20392e35 0x31202c42
0029d19f 2e30202f 0x20392e35
0029d1a3 736d2030 0x2e30202f
0029d1a7 61282020 0x736d2030
0029d1ab 61726576 0x61282020
0029d1af 6d206567 0x61726576
0029d1b3 203d2075 0x6d206567
0029d1b7 39392e30 0x203d2075
0029d1bb 63202c37 0x39392e30
0029d1bf 65727275 0x63202c37
0029d1c3 6d20746e 0x65727275
0029d1c7 203d2075 0x6d20746e
0029d1cb 30302e30 0x203d2075
0029d1cf 6c202933 0x30302e30
0029d1d3 6d20776f 0x6c202933
0029d1d7 726f6d65 0x6d20776f
0029d1db 6f6e2079 0x726f6d65
0029d1df 69666974 0x6f6e2079
0029d1e3 69746163 0x69666974
0029d1e7 47206e6f 0x69746163
0029d1eb 6e692043 0x47206e6f
0029d1ef 646c6f20 0x6e692043
0029d1f3 61707320 0x646c6f20
0029d1f7 72206563 0x61707320
0029d1fb 65757165 0x72206563
0029d1ff 64657473 0x65757165
0029d203 36325b0a 0x64657473
0029d207 303a3239 0x36325b0a
0029d20b 38393931 0x303a3239
0029d20f 5d383038 0x38393931
0029d213 35303220 node+0xf63038
0029d217 36313537 0x35303220
0029d21b 6d203637 0x36313537
0029d21f 4d203a73 0x6d203637
0029d223 2d6b7261 0x4d203a73
0029d227 65657773 0x2d6b7261
0029d22b 30312070 0x65657773
0029d22f 2820382e 0x30312070
0029d233 302e3231 0x2820382e
0029d237 3e2d2029 0x302e3231
0029d23b 2e303120 0x3e2d2029
0029d23f 31282034 0x2e303120
0029d243 29302e32 0x31282034
0029d247 2c424d20 0x29302e32
0029d24b 39373320 0x2c424d20
0029d24f 20362e37 0x39373320
0029d253 2e30202f 0x20362e37
0029d257 736d2030 0x2e30202f
0029d25b 61282020 0x736d2030
0029d25f 61726576 0x61282020
0029d263 6d206567 0x61726576
0029d267 203d2075 0x6d206567
0029d26b 35392e30 0x203d2075
0029d26f 63202c34 0x35392e30
0029d273 65727275 0x63202c34
0029d277 6d20746e 0x65727275
0029d27b 203d2075 0x6d20746e
0029d27f 34392e30 0x203d2075
0029d283 6c202930 0x34392e30
0029d287 6d20776f 0x6c202930
0029d28b 726f6d65 0x6d20776f
0029d28f 6f6e2079 0x726f6d65
0029d293 69666974 0x6f6e2079
0029d297 69746163 0x69666974
0029d29b 47206e6f 0x69746163
0029d29f 6e692043 0x47206e6f
0029d2a3 646c6f20 0x6e692043
0029d2a7 61707320 0x646c6f20
0029d2ab 72206563 0x61707320
0029d2af 65757165 0x72206563
0029d2b3 64657473 0x65757165
0029d2b7 36325b0a 0x64657473
0029d2bb 303a3239 0x36325b0a
0029d2bf 38393931 0x303a3239
0029d2c3 5d383038 0x38393931
0029d2c7 35303220 node+0xf63038
0029d2cb 33323537 0x35303220
0029d2cf 6d203132 0x33323537
0029d2d3 4d203a73 0x6d203132
0029d2d7 2d6b7261 0x4d203a73
0029d2db 65657773 0x2d6b7261
0029d2df 30312070 0x65657773
0029d2e3 2820342e 0x30312070
0029d2e7 302e3231 0x2820342e
0029d2eb 3e2d2029 0x302e3231
0029d2ef 2e303120 0x3e2d2029
0029d2f3 31282033 0x2e303120
0029d2f7 29302e32 0x31282033
0029d2fb 2c424d20 0x29302e32
0029d2ff 34343620 0x2c424d20
0029d303 2f20352e 0x34343620
0029d307 302e3020 0x2f20352e
0029d30b 20736d20 0x302e3020
0029d30f 76612820 0x20736d20
0029d443 00000000 clbcatq!CSLTComs::UpdateStore+0xdb5

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133f144 12258cc5 node+0x12ae60a
0133f1dc 0ff13961 node+0x2a18cc5
0133f250 10b089e6 node+0x6d3961
0133f31c 10b0875e node+0x12c89e6
0133f378 10ae0ec3 node+0x12c875e
0133f3b4 10ae0acb node+0x12a0ec3
0133f3f4 10af23d2 node+0x12a0acb
0133f43c 10af22e2 node+0x12b23d2
0133f480 0ff0bd42 node+0x12b22e2
0133f4a8 0ff0d47d node+0x6cbd42
0133f4e8 0fe4ed6c node+0x6cd47d
0133f544 0fe4f379 node+0x60ed6c
0133f568 0fe4ea8a node+0x60f379
0133f600 7790d6de node+0x60ea8a
0133f60c 00000000 ntdll!RtlAllocateHeap+0x3e

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04a2f358 60ac8e79 node+0x2bd11a
04a2f3b0 60b8a731 node+0xe78e79
04a2f41c 60b87df7 node+0xf3a731
04a2f420 1457ebf0 node+0xf37df7
04a2f424 04a2f490 0x1457ebf0
04a2f428 00000000 0x4a2f490

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
048bedbc 6c6de668 node+0xb8c650
00000000 00000000 node+0xcee668

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0016cc70 6a3fdc08 node+0x2a2f20b
0016cf6f 736d2035 node+0xb2dc08
0016cf73 614d203a 0x736d2035
0016cf77 732d6b72 0x614d203a
0016cf7b 70656577 dhcpcsvc6!___PchSym_+0x1ca
0016cf7f 2e303120 0x70656577
0016cf83 31282031 0x2e303120
0016cf87 29302e32 0x31282031
0016cf8b 203e2d20 0x29302e32
0016cf8f 312e3031 0x203e2d20
0016cf93 32312820 0x312e3031
0016cf97 2029302e 0x32312820
0016cf9b 202c424d 0x2029302e
0016cf9f 352e3832 0x202c424d
0016cfa3 30202f20 0x352e3832
0016cfa7 6d20302e 0x30202f20
0016cfab 28202073 node+0x393302e
0016cfaf 72657661 0x28202073
0016cfb3 20656761 0x72657661
0016cfb7 3d20756d 0x20656761
0016cfbb 392e3020 0x3d20756d
0016cfbf 202c3939 0x392e3020
0016cfc3 72727563 0x202c3939
0016cfc7 20746e65 0x72727563
0016cfcb 3d20756d 0x20746e65
0016cfcf 302e3020 0x3d20756d
0016cfd3 20293130 0x302e3020
0016cfd7 20776f6c 0x20293130
0016cfdb 6f6d656d 0x20776f6c
0016cfdf 6e207972 0x6f6d656d
0016cfe3 6669746f GdiPlus!uc2gi_ArabicBmp  (GdiPlus+0x187972)
0016cfe7 74616369 0x6669746f
0016cfeb 206e6f69 0x74616369
0016cfef 69204347 0x206e6f69
0016cff3 6c6f206e 0x69204347
0016cff7 70732064 node+0x2e2206e
0016cffb 20656361 0x70732064
0016cfff 75716572 0x20656361
0016d0df 31207065 shell32!SHCopyStreamWithProgressAndErrorCauseItem+0xadd
0016d103 2f20322e 0x31207065
0016d107 302e3020 0x2f20322e
0016d10b 20736d20 0x302e3020
0016d10f 76612820 0x20736d20
0016d12b 756d2074 wininet!LoadRegistrySettings+0xb0
0016d183 00000000 shell32!CDefView::_Exec+0x3c1

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0093f414 6c658cc5 node+0x12ae60a
0093f4ac 6a313961 node+0x2a18cc5
0093f520 6af089e6 node+0x6d3961
0093f5ec 6af0875e node+0x12c89e6
0093f648 6aee0ec3 node+0x12c875e
0093f684 6aee0acb node+0x12a0ec3
0093f6c4 6aef23d2 node+0x12a0acb
0093f70c 6aef22e2 node+0x12b23d2
0093f750 6a30bd42 node+0x12b22e2
0093f778 6a30d47d node+0x6cbd42
0093f7b8 6a24ed6c node+0x6cd47d
0093f814 6a24f379 node+0x60ed6c
0093f838 6a24ea8a node+0x60f379
0093f8d0 773a5dee node+0x60ea8a
0093f984 773a3c26 ntdll!RtlAllocateHeap+0x3e
0093f99c 72662d00 ntdll!RtlFreeHeap+0x46
0093f9ac 00000000 0x72662d00

Top 30: total counts = 1

003bcca7 7320646c 0x6f206e69
003bccab 65636170 360Util+0x5646c
003bccaf 71657220 0x65636170
003bcccb 33303234 NapiNSP!CNamingProviderProxy::WaitForRPCAsyncCall+0x1af
003bccd3 203a736d 0x33303234
003bccd7 6b72614d 0x203a736d
003bccdb 6577732d node+0xcd614d
003bccdf 31207065 0x6577732d
003bcce3 20322e30 0x31207065
003bcce7 2e323128 0x20322e30
003bcceb 2d202935 0x2e323128
003bccef 3031203e 0x2d202935
003bccf3 2820322e 0x3031203e
003bccf7 352e3231 0x2820322e
003bccfb 424d2029 0x352e3231
003bccff 3532202c 0x424d2029
003bcd03 2f20392e 0x3532202c
003bcd07 302e3020 0x2f20392e
003bcd0b 20736d20 0x302e3020
003bcd0f 76612820 0x20736d20
003bcd13 67617265 ole32!CRpcResolver::BindToSCMProxy+0x66
003bcd1b 30203d20 0x67617265
003bcd1f 3739392e 0x30203d20
003bcd23 7563202c 0x3739392e
003bcd27 6e657272 gdi32!$$VProc_ImageExportDirectory+0x1de4
003bcd2b 756d2074 node+0x3c07272
003bcd2f 30203d20 msctf!CInputContext::QueryInterface+0x1e2
003bcd3f 79726f6d 0x30203d20
003bcd43 746f6e20 0x79726f6d
003bcd47 63696669 0x746f6e20
003bcd4b 6f697461 0x63696669
003bcd4f 4347206e 0x6f697461
003bcd53 206e6920 0x4347206e
003bcd57 20646c6f 0x206e6920
003bcd5b 63617073 0x20646c6f
003bcd5f 65722065 0x63617073
003bcd63 73657571 0x65722065
003bcd67 0a646574 0x73657571
003bcd6b 00000000 0xa646574