Analyzed 171 dump

Top 1: total counts = 23

ChildEBP RetAddr  
003be6e4 00000000 KERNELBASE!RaiseException+0x62

f269d6ad21009b892c1735ea20a4ac60_000.dmp
f0a13ed82f8de12e705e10f7ad3abffc_002.dmp
6a1fa5916a3a533cfa83182fcb9f89be_000.dmp
a66ac604528474d6d399ddd46c292686_000.dmp
1bdcbe65e8ba99530da5ee88cf9a5f01_000.dmp

Top 2: total counts = 19

ChildEBP RetAddr  
0036ea4c 5a47e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0036ea60 005fcff2 node+0x12ae479
0036ea64 00000000 0x5fcff2

e4cbb0b7d7075de3be872d1f747941e6_000.dmp
4c121764519bad55a0cad386249180cb_000.dmp
fbbadd802aea6f977582c36f24092cd5_000.dmp
121318809454c222100cd956e191e883_000.dmp
6fe05d18755bac35aa426d3b34a514cf_000.dmp

Top 3: total counts = 12

08dafd2c 64a3aeed rightsmanager!RM_AutorunScan+0x176
08dafe28 75e3347d ffi_bindings!ffi_call_win32+0x11
08dafe34 77199762 kernel32!BaseThreadInitThunk+0xe
08dafe74 77199735 ntdll!__RtlUserThreadStart+0x70
08dafe8c 00000000 ntdll!_RtlUserThreadStart+0x1b

1beb3c75b7615234bad2953bf8cfd1e7_000.dmp
e8fe8370049120cf0c7805ce94c204e3_000.dmp
7986b242dd42d74ba4f85571d0f6c76c_002.dmp
6745980b4b341965de1d19fb26d133d1_000.dmp
e1918c8546e1e140b92bb726fc93878d_000.dmp

Top 4: total counts = 8

056ff7b4 7c01aeed rightsmanager!RM_AutorunScan+0x176
056ff8b0 765afcc9 ffi_bindings!ffi_call_win32+0x11
056ff8c0 779782ae kernel32!BaseThreadInitThunk+0x19
056ff91c 7797827e ntdll!__RtlUserThreadStart+0x2f
056ff92c 00000000 ntdll!_RtlUserThreadStart+0x1b

49de47be5c002e0d24d4fb81741b5b60_000.dmp
46b5dd10771e67f7b4bf08994ad9d663_000.dmp
4726bc3dc1036d4c1f03457610b1c556_000.dmp
9990b160c5c5765d1a9b6bdc706c6d2e_000.dmp
9f4d8d072aeac732b38420e38ae7de00_000.dmp

Top 5: total counts = 7

ChildEBP RetAddr  
05ebeda0 7ae6e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05ebede0 7ae7738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05ebf030 7ae712a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ecf678 7ae6e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ecf6f0 7aea7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ecf8c4 76705d49 rightsmanager!RM_AutorunScan+0x176
05ecf8d4 77cfd09b kernel32!BaseThreadInitThunk+0x19
05ecf92c 77cfd021 ntdll!__RtlUserThreadStart+0x2b
05ecf93c 00000000 ntdll!_RtlUserThreadStart+0x1b

f212ef6224991fed80cfebfb192520ba_000.dmp
d9b1c559b07f3d60c91eb5c396a85b13_000.dmp
25c4ef94d915d22a09e2969bb2381e8f_000.dmp
3d79f3069e9bb4fb5beb245bcb244bc8_000.dmp
f791bcac9a975300d8972f4ef920fe78_000.dmp

Top 6: total counts = 6

ChildEBP RetAddr  
04a9ede8 5891e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04a9ee28 5892738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04a9f078 589212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04aaf6c0 5891e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04aaf738 58957f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04aaf90c 75bf343d rightsmanager!RM_AutorunScan+0x176
04aaf918 77829812 kernel32!BaseThreadInitThunk+0xe
04aaf958 778297e5 ntdll!__RtlUserThreadStart+0x70
04aaf970 00000000 ntdll!_RtlUserThreadStart+0x1b

03c3f2430736b6dc877e59f3671aaafd_000.dmp
eb5c12e6f0cf16d2176234d46177bb2a_000.dmp
e7093acbbe18528cedbf10d4f7a78873_000.dmp
94e639a31055a4691fc35f7b5a12e29f_000.dmp
bb7dc4b05c4a0fac06c928b04544970f_000.dmp

Top 7: total counts = 6

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

65dbfc2182b9520e07921b7a1767f485_000.dmp
96177759e74d64cb8c1ce59c80fef2e2_000.dmp
16d091da2e8dda59b75f1a7fcc9f99c2_000.dmp
4033a268d57b29e9672d2e77e222e74b_000.dmp
bc664674e3bcaacbb7efcb116ce06c1c_000.dmp

Top 8: total counts = 6

ChildEBP RetAddr  
0536ee48 7c69e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0536ee88 7c6a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0536f0d8 7c6a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0537f720 7c69e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0537f798 7c6d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0537f96c 74d36359 rightsmanager!RM_AutorunScan+0x176
0537f97c 771f7b74 kernel32!BaseThreadInitThunk+0x19
0537f9d8 771f7b44 ntdll!__RtlUserThreadStart+0x2f
0537f9e8 00000000 ntdll!_RtlUserThreadStart+0x1b

28b7e8987c9b4c6cadab2cf8a3a0820a_000.dmp
d68e4ab6e73fdb1812bd266737f258f7_000.dmp
cde26c4e52559af7f2dd095d554918f7_000.dmp
dd39481580341535d6712baf89d6cb2f_000.dmp
38a0bd764f17273807b2d9966b89a513_000.dmp

Top 9: total counts = 5

ChildEBP RetAddr  
0030e804 6dd6e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0030e818 005fcff0 node+0x12ae479
0030e81c 00000000 0x5fcff0

5932d839199006fff96b2eb374f8ac3e_000.dmp
9e7ab81473a058ea18011079c6971fcc_000.dmp
76dd60ed6223f04e4c4e4e2c012a2483_001.dmp
07ad943ad947b500c5c99fa94e21751f_000.dmp
f39bfc14dff6d5c57df5b70ea8e95b61_000.dmp

Top 10: total counts = 5

ChildEBP RetAddr  
16bff738 7af30081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
16bff774 7af3351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
16bffc74 7af34624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
16bffca8 7af385a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
16bffdd4 7af3917a rightsextension!CRegData::MonitorFunction+0x4b3
16bffdf4 7af38a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
16bffdfc 7b04864a rightsextension!std::_Pad::_Call_func+0xa
16bffe34 7587fcc9 rightsextension!thread_start+0x58
16bffe44 775082ae kernel32!BaseThreadInitThunk+0x19
16bffea0 7750827e ntdll!__RtlUserThreadStart+0x2f
16bffeb0 00000000 ntdll!_RtlUserThreadStart+0x1b

7eb86dd56d0b818fd96fcdd52c1f7636_000.dmp
1fe48558403fe407ae4f82cec6b7037b_000.dmp
96937704c68d27492cecfdc29b55500b_000.dmp
a9a34268b00aedd0b775332f02e3b4d9_001.dmp
78c4d9dd91588d30e87db18967e83fd1_000.dmp

Top 11: total counts = 4

0508f9dc 671baeed rightsmanager!RM_AutorunScan+0x176
0508fad8 76117ba9 ffi_bindings!ffi_call_win32+0x11
0508fae8 774fc36b kernel32!BaseThreadInitThunk+0x19
0508fb40 774fc2ef ntdll!__RtlUserThreadStart+0x2b
0508fb50 00000000 ntdll!_RtlUserThreadStart+0x1b

3367d01289985a5505108e705879ebfe_000.dmp
a9c9538d0b29e03e911aa6832fd80b66_000.dmp
d5105a2fcef0e37bb49f36b963e81122_000.dmp
68a902321371b109dc02b72dc311b8a9_000.dmp

Top 12: total counts = 4

ChildEBP RetAddr  
002de6d4 662ae479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
002de6e8 00193201 node+0x12ae479
002de6ec 00000000 0x193201

1cc6d7083c223e81dc50efe6abcf7beb_000.dmp
656d65d06b1beea8e61cbde68c92d521_000.dmp
f51f3ad5b23ac48edc34b1bfd7657434_000.dmp
d8b16bc27b1980d35afaafb553d258b6_000.dmp

Top 13: total counts = 4

ChildEBP RetAddr  
0090e564 00000000 KERNELBASE!RaiseException+0x64

57ab8eb2db2b951ce9e92444b0d46ef8_000.dmp
2e7805f26d34d06b31bc797370c30faf_000.dmp
fdba1eebb88bae59730b64738ca77f50_000.dmp
4809193b0b2ed33e9be8d2c2a3eaeb44_000.dmp

Top 14: total counts = 3

ChildEBP RetAddr  
05dcf170 7b94e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05dcf1b0 7b95738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05dcf400 7b9512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05ddfa48 7b94e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05ddfac0 7b987f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05ddfc94 762e6739 rightsmanager!RM_AutorunScan+0x176
05ddfca4 776d8aff kernel32!BaseThreadInitThunk+0x19
05ddfcfc 776d8acd ntdll!__RtlUserThreadStart+0x2b
05ddfd0c 00000000 ntdll!_RtlUserThreadStart+0x1b

271002c513340ad9d2054095e7f20a5c_000.dmp
713301cd4b1cdc9316d2053285ad0213_000.dmp
b1040a4bcf38bea4b8167b18b71198cb_010.dmp

Top 15: total counts = 3

ChildEBP RetAddr  
00cff278 7c1ce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
00cff2b8 7c1d738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
00cff508 7c1d12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
00d0fb50 7c1ce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
00d0fbc8 7c207f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
00d0fd9c 7585fcc9 rightsmanager!RM_AutorunScan+0x176
00d0fdac 772482ae kernel32!BaseThreadInitThunk+0x19
00d0fe08 7724827e ntdll!__RtlUserThreadStart+0x2f
00d0fe18 00000000 ntdll!_RtlUserThreadStart+0x1b

264cdceb5a9a8f984993b4c8716283fd_000.dmp
d71e4f69f6e1893d6217d28789788378_000.dmp
6b4711c3777a6de14844d96e58c04153_000.dmp

Top 16: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

897689857e91557306b01db66d2fe456_000.dmp
ce8a2c72c25e266139c7b30cc469df50_000.dmp

Top 17: total counts = 2

07bbf7b4 6dac6025 winhttp!WinHttpGetIEProxyConfigForCurrentUser+0xbd
WARNING: Stack unwind information not available. Following frames may be wrong.
07bbf974 6e01d787 node+0x2c16025
07bbfa74 6b237c11 node+0x316d787
07bbfae4 6c17c6d4 node+0x387c11
07bbfba4 6c17bfdb node+0x12cc6d4
07bbfce4 6c18056f node+0x12cbfdb
07bbfd30 6c1803cb node+0x12d056f
07bbfd58 76e2347d node+0x12d03cb
07bbfd64 778a9852 kernel32!BaseThreadInitThunk+0xe
07bbfda4 778a9825 ntdll!__RtlUserThreadStart+0x70
07bbfdbc 00000000 ntdll!_RtlUserThreadStart+0x1b

74a9c4e86bb629c0934c77b59a122633_000.dmp
451bad30ae3b979e7a51656c77ac0cee_000.dmp

Top 18: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

1fdf635f183398531f69e3f68c6428cd_000.dmp
0335c7d519198018e1f8e2e56b8b5290_000.dmp

Top 19: total counts = 2

ChildEBP RetAddr  
0687f2b0 0fdbe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0687f2f0 0fdc738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0687f540 0fdc12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0688fb88 0fdbe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0688fc00 0fdf7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0688fdd4 754e343d rightsmanager!RM_AutorunScan+0x176
0688fde0 77949812 kernel32!BaseThreadInitThunk+0xe
0688fe20 779497e5 ntdll!__RtlUserThreadStart+0x70
0688fe38 00000000 ntdll!_RtlUserThreadStart+0x1b

041c73f05308009cbb631f030485368f_000.dmp
11711bdef53c9bc72ba697644eea8c5b_000.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ef874 12678d6c node+0x12ae60a
002ef8dc 10333961 node+0x2a18d6c
002ef950 10f289e6 node+0x6d3961
002efa1c 10f2875e node+0x12c89e6
002efa78 10f00ec3 node+0x12c875e
002efab4 10f00acb node+0x12a0ec3
002efaf4 10f123d2 node+0x12a0acb
002efb3c 10f122e2 node+0x12b23d2
002efb80 1032bd42 node+0x12b22e2
002efba8 1032d47d node+0x6cbd42
002efbe8 1026ed6c node+0x6cd47d
002efc44 1026f379 node+0x60ed6c
002efc68 1026ea8a node+0x60f379
002efc6c 10eea300 node+0x60ea8a
002efc70 002e0000 node+0x128a300
002efc74 00000000 0x2e0000

02b3467ba12fe4500bd9cc9fd0c2f62d_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
1381e814 72da692c taskschd!ATL::ICollectionOnSTLImpl >,std::allocator > > >,IAction *,InterfaceCollection::CopyAdaptorToPointer,ATL::CComEnumOnSTL::CopyAdaptorToVariant,std::vector >,std::allocator > > >,ATL::CComMultiThreadModel> >::get_Item+0x31
1381e858 72da3bc1 taskschd!BuilderXmlHandler::[ITaskXmlHandler]::ProcessElement+0xbc
1381e884 72da39c7 taskschd!TaskXmlReader::ProcessElement+0x9c
1381e9f8 72da3bf0 taskschd!TaskXmlReader::ProcessComplexContent+0x2e7
1381ea2c 72da39c7 taskschd!TaskXmlReader::ProcessElement+0xcb
1381eba0 72da3bf0 taskschd!TaskXmlReader::ProcessComplexContent+0x2e7
1381ebd0 72da0c8b taskschd!TaskXmlReader::ProcessElement+0xcb
1381ec10 72da89a3 taskschd!TaskXmlReader::ProcessXml+0xf3
1381ee10 72dae162 taskschd!TaskDefinitionImpl::LoadFromXmlText+0x109
1381ee40 72dae0c7 taskschd!TaskDefinitionImpl::put_LocalizedXmlText+0x2a
1381ee80 50e6ea8b taskschd!RegisteredTaskImpl::[IRegisteredTask]::get_Definition+0xc7
1381f334 50e71426 rightsextension!AutorunMgr::EnumFolder+0x2ab
1381f538 50e71c71 rightsextension!AutorunMgr::EnumTaskScheduler+0x586
1381f5fc 50e39e54 rightsextension!AutorunMgr::GetSingleAutoruns+0x151
1381f7bc 50e3c5a6 rightsextension!Rights::CCloudPopWindow::HandlePopConditionSingle+0x8c4
1381f8c0 50e3da22 rightsextension!Rights::CCloudPopWindow::OnSingleAppEvent+0x356
1381f8dc 50e2d566 rightsextension!Rights::CCloudPopWindow::ProcessWindowMessage+0x82
1381f938 72e118d6 rightsextension!ATL::CWindowImplBaseT >::WindowProc+0x76
1381f958 76c8157b atlthunk!AtlThunk_0x02+0x36
1381f984 76c77c5a user32!_InternalCallWinProc+0x2b
1381fa6c 76c76500 user32!UserCallWinProcCheckWow+0x33a
1381fae8 76c76030 user32!DispatchMessageWorker+0x4c0
1381faf4 50e3ba24 user32!DispatchMessageW+0x10
1381fcec 50f2f16a rightsextension!Rights::MainEntry+0x2d4
1381fd24 768cfcc9 rightsextension!thread_start+0x58
1381fd34 776982ae kernel32!BaseThreadInitThunk+0x19
1381fd90 7769827e ntdll!__RtlUserThreadStart+0x2f
1381fda0 00000000 ntdll!_RtlUserThreadStart+0x1b

fabf3806d436586a13beb85a3d175a5a_000.dmp

Top 22: total counts = 1

0056c81f 726f6d65 0x6d20776f
0056c823 6f6e2079 slc+0x6d65
0056c827 69666974 0x6f6e2079
0056c82b 69746163 0x69666974
0056c82f 47206e6f 0x69746163
0056c833 6e692043 0x47206e6f
0056c837 646c6f20 0x6e692043
0056c83b 61707320 node+0x2246f20
0056c83f 72206563 0x61707320
0056c843 65757165 0x72206563
0056c847 64657473 node+0x32d7165
0056c84b 37325b0a node+0x21d7473
0056c84f 303a3434 0x37325b0a
0056c853 37433032 0x303a3434
0056c857 5d303142 0x37433032
0056c85b 38393620 0x5d303142
0056c85f 38333638 0x38393620
0056c863 6d203630 0x38333638
0056c867 4d203a73 0x6d203630
0056c86b 2d6b7261 0x4d203a73
0056c86f 65657773 0x2d6b7261
0056c873 2e372070 node+0x31d7773
0056c877 39282037 0x2e372070
0056c87b 2029372e 0x39282037
0056c87f 37203e2d 0x2029372e
0056c883 2820372e 0x37203e2d
0056c887 302e3031 0x2820372e
0056c88b 424d2029 0x302e3031
0056c88f 3131202c 0x424d2029
0056c893 2f20352e 0x3131202c
0056c897 302e3020 0x2f20352e
0056c89b 20736d20 0x302e3020
0056c89f 76612820 0x20736d20
0056c8a3 67617265 shell32!__dyn_tls_init_callback  (shell32+0x4e2820)
0056c8a7 756d2065 0x67617265
0056c8ab 30203d20 wininet!`string'+0x1c5645
0056c8af 3737392e 0x30203d20
0056c8b3 7563202c 0x3737392e
0056c8b7 6e657272 wininet!`string'+0x12560c
0056c8bb 756d2074 0x6e657272
0056c8bf 30203d20 wininet!`string'+0x1c5654
0056c8c3 3333332e 0x30203d20
0056c8c7 6f6c2029 0x3333332e
0056c8cb 656d2077 0x6f6c2029
0056c8cf 79726f6d node+0x3252077
0056c8d3 746f6e20 0x79726f6d
0056c8d7 63696669 0x746f6e20
0056c8db 6f697461 node+0x1216669
0056c8df 4347206e 0x6f697461
0056c8e3 206e6920 0x4347206e
0056c8e7 20646c6f 0x206e6920
0056c8eb 63617073 0x20646c6f
0056c8ef 65722065 node+0x1197073
0056c8f3 73657571 node+0x32a2065
0056c8f7 0a646574 0x73657571
0056c8fb 00000000 0xa646574

0611e9210327a476bde8e54c85730374_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
0ba0ef34 0e1591a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0ba0ef60 0e151b3e rightsmanager!AutorunItem::AutorunItem+0x34
0ba1f5a8 0e14e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0ba1f620 0e187f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0ba1f7f4 761b344d rightsmanager!RM_AutorunScan+0x176
0ba1f800 770a9802 kernel32!BaseThreadInitThunk+0xe
0ba1f840 770a97d5 ntdll!__RtlUserThreadStart+0x70
0ba1f858 00000000 ntdll!_RtlUserThreadStart+0x1b

5be54db0b6b0bb83e98b4e4d5d0125ee_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
00cfe364 00cfe448 KERNELBASE!RaiseException+0x48
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cfe378 00cfe388 0xcfe448
00cfe37c 04ffbdf8 0xcfe388
00cfe388 00000000 0x4ffbdf8

c2147d51083cdfa251d135755f1468ec_002.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0028c7c0 6679dc08 node+0x2a2f20b
0028cabf 70657473 node+0xb2dc08
0028cac3 69732073 0x70657473
0028cac7 2065636e node+0x3ac2073
0028cacb 72617473 0x2065636e
0028cacf 666f2074 0x72617473
0028cad3 72616d20 node+0xa82074
0028cad7 676e696b 0x72616d20
0028cadb 6962202c node+0x1a7696b
0028cadf 73656767 node+0x39b202c
0028cae3 74732074 0x73656767
0028cae7 30207065 winsta!`string'+0x20
0028caeb 6d20342e 0x30207065
0028caef 77202c73 0x6d20342e
0028cb3b 39392e30 ntdll!LdrpSearchPath+0x1bc
0028cb5b 38363231 0x39392e30
0028cb5f 4230303a 0x38363231
0028cb63 43453030 0x4230303a
0028cb67 20205d38 0x43453030
0028cb6b 31373920 0x20205d38
0028cb6f 20303035 0x31373920
0028cb73 203a736d 0x20303035
0028cb77 6b72614d 0x203a736d
0028cb7b 6577732d 0x6b72614d
0028cb7f 31207065 0x6577732d
0028cb83 20352e30 0x31207065
0028cb87 2e323128 0x20352e30
0028cb8b 2d202930 0x2e323128
0028cb8f 3031203e 0x2d202930
0028cb93 2820302e 0x3031203e
0028cb97 302e3231 0x2820302e
0028cb9b 424d2029 0x302e3231
0028cb9f 3532202c 0x424d2029
0028cba3 2f20322e 0x3532202c
0028cba7 302e3020 0x2f20322e
0028cbab 20736d20 0x302e3020
0028cbaf 76612820 0x20736d20
0028ce0b 00000000 kernel32!PEWriteResource<_IMAGE_NT_HEADERS>+0x1258

ded9b5ac62814a1dc351bf0d40271066_000.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff874 6b848cc5 node+0x12ae60a
00aff914 69503961 node+0x2a18cc5
00aff988 6a0f89e6 node+0x6d3961
00affa54 6a0f875e node+0x12c89e6
00affab0 6a0d0ec3 node+0x12c875e
00affaec 6a0d0acb node+0x12a0ec3
00affb2c 6a0e23d2 node+0x12a0acb
00affb74 6a0e22e2 node+0x12b23d2
00affbb8 694fbd42 node+0x12b22e2
00affbe0 694fd47d node+0x6cbd42
00affc20 6943ed6c node+0x6cd47d
00affc7c 6943f379 node+0x60ed6c
00affca0 6943ea8a node+0x60f379
00affd40 77d3c67e node+0x60ea8a
00affd4c 00affdbc ntdll!RtlAllocateHeap+0x3e
00000000 00000000 0xaffdbc

795b916fe0de7a0305955db26108c63a_000.dmp

Top 27: total counts = 1

05b3f784 54c8aeed rightsmanager!RM_AutorunScan+0x176
05b3f880 749238f4 ffi_bindings!ffi_call_win32+0x11
05b3f894 77865e13 kernel32!BaseThreadInitThunk+0x24
05b3f8dc 77865dde ntdll!__RtlUserThreadStart+0x2f
05b3f8ec 00000000 ntdll!_RtlUserThreadStart+0x1b

794bfe972137d33840fbff5e2bfef022_000.dmp

Top 28: total counts = 1

ChildEBP RetAddr  
0016e5d8 5b38e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0016e6b8 5b3d8a79 node+0x12ae87c
0016e6bc 005fcff0 node+0x12f8a79
0016e6c0 009427c0 0x5fcff0
0016e6c4 00000000 0x9427c0

744a2141bff6c759e87c050ddd7c6485_001.dmp

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfc8e8 6a4cdc08 node+0x2a2f20b
00cfcbe7 614d203a node+0xb2dc08
00cfcbeb 732d6b72 0x614d203a
00cfcbef 70656577 0x732d6b72
00cfcbf3 2e303120 0x70656577
00cfcbf7 31282037 0x2e303120
00cfcbfb 29382e32 0x31282037
00cfcbff 203e2d20 0x29382e32
00cfcc03 372e3031 0x203e2d20
00cfcc07 32312820 0x372e3031
00cfcc0b 2029382e 0x32312820
00cfcc0f 202c424d 0x2029382e
00cfcc13 332e3031 0x202c424d
00cfcc17 30202f20 0x332e3031
00cfcc1b 6d20302e 0x30202f20
00cfcc1f 28202073 node+0x386302e
00cfcc23 72657661 0x28202073
00cfcc27 20656761 0x72657661
00cfcc2b 3d20756d 0x20656761
00cfcc2f 392e3020 0x3d20756d
00cfcc33 202c3939 0x392e3020
00cfcc37 72727563 0x202c3939
00cfcc3b 20746e65 0x72727563
00cfcc3f 3d20756d 0x20746e65
00cfcc43 302e3020 0x3d20756d
00cfcc47 20293230 0x302e3020
00cfcc4b 20776f6c 0x20293230
00cfcc4f 6f6d656d 0x20776f6c
00cfcc6b 70732064 directxdatabasehelper!SdbpCheckMatchingWildcardRegistryEntry+0x1c
00cfcc8f 34333538 0x70732064
00cfcc93 30343735 0x34333538
00cfcc97 3a736d20 0x30343735
00cfcc9b 72614d20 0x3a736d20
00cfcc9f 77732d6b 0x72614d20
00cfcca3 20706565 ucrtbase!_CT??_R0?AVbad_caststd+0x10f47
00cfcca7 322e3131 0x20706565
00cfccab 32312820 0x322e3131
00cfccaf 2029382e 0x32312820
00cfccb3 31203e2d 0x2029382e
00cfccb7 20372e30 0x31203e2d
00cfccbb 2e323128 0x20372e30
00cfccbf 4d202938 0x2e323128
00cfccc3 31202c42 0x4d202938
00cfccc7 20352e38 0x31202c42
00cfcccb 2e30202f 0x20352e38
00cfcccf 736d2030 0x2e30202f
00cfccd3 61282020 windows_storage!ExpandWordWheelLeafCondition+0x246df4
00cfccd7 61726576 0x61282020
00cfccdb 6d206567 0x61726576
00cfccdf 203d2075 node+0x3866567
00cfcce3 30302e31 0x203d2075
00cfcce7 63202c30 0x30302e31
00cfcceb 65727275 0x63202c30
00cfccef 6d20746e 0x65727275
00cfccf3 203d2075 node+0x386746e
00cfccf7 30302e31 0x203d2075
00cfccfb 6c202930 0x30302e31
00cfccff 6d20776f node+0x2862930
00cfcd03 726f6d65 node+0x386776f
00cfcd07 6f6e2079 0x726f6d65
00cfcd0b 69666974 directxdatabasehelper!memmove+0x800
6f6e2079 90cccccc UIAutomationCore!CTextRange::GetVisualRelativeBoundingRectangles+0x34
6f6e2085 33a44a8b 0x90cccccc
6f6e2089 e3cde8c8 0x33a44a8b
6f6e208d 4a8bffff 0xe3cde8c8
6f6e2091 e8c833fc 0x4a8bffff
6f6e2095 ffffe3c3 0xe8c833fc
6f6e2099 6e2a6cb8 0xffffe3c3
6f6e209d f230e96f 0x6e2a6cb8
6f6e20a1 ccccffff 0xf230e96f
6f6e20a5 cccccccc 0xccccffff
6f6e20a9 e9f04d8d 0xcccccccc
6f6e20ad fffcd23c 0xe9f04d8d
6f6e20b1 cccccccc 0xfffcd23c
6f6e20b5 8b9090cc 0xcccccccc
6f6e20b9 8d082454 0x8b9090cc
6f6e20bd 4a8b0c42 0x8d082454
6f6e20c1 e8c833e8 0x4a8b0c42
6f6e20c5 ffffe393 0xe8c833e8
6f6e20c9 6e2aa0b8 0xffffe393
6f6e20cd f200e96f 0x6e2aa0b8
6f6e20d1 ccccffff 0xf200e96f
6f6e20d5 cccccccc 0xccccffff
6f6e20d9 fd908d8d 0xcccccccc
6f6e20dd e4e9ffff 0xfd908d8d
6f6e20e1 ccfffe00 0xe4e9ffff
6f6e20e5 cccccccc 0xccfffe00
6f6e20e9 548b9090 0xcccccccc
6f6e20ed 428d0824 0x548b9090
6f6e20f1 748a8b0c 0x428d0824
6f6e20f5 33fffffd winsta!`string'+0x1768
6f6e20f9 e35de8c8 0x33fffffd
6f6e20fd 4a8bffff 0xe35de8c8
6f6e2101 e8c833fc 0x4a8bffff
6f6e2105 ffffe353 0xe8c833fc
6f6e2109 6e2accb8 0xffffe353
6f6e210d f1c0e96f 0x6e2accb8
6f6e2111 ccccffff 0xf1c0e96f
6f6e2115 cccccccc 0xccccffff
6f6e2119 83f0458b 0xcccccccc
6f6e211d 840f01e0 0x83f0458b
6f6e2121 00000000 0x840f01e0

ac1a90c91178d93e5fb509b0d0d3347c_000.dmp

Top 30: total counts = 1

0bb2f854 74b143fc ntdll!RtlLeaveCriticalSection+0x51
WARNING: Stack unwind information not available. Following frames may be wrong.
0bb2f860 74b15cab 360Conf+0x243fc
0bb2f898 77d192e5 360Conf+0x25cab
0bb2f8b4 77d36b04 ntdll!RtlProcessFlsData+0x57
0bb2f94c 77d36d98 ntdll!LdrShutdownThread+0x35
0bb2f95c 77d3fd62 ntdll!RtlExitUserThread+0x2a
0bb2faa8 774c343d ntdll!TppWorkerThread+0x846
0bb2fab4 77d19722 kernel32!BaseThreadInitThunk+0xe
0bb2faf4 77d196f5 ntdll!__RtlUserThreadStart+0x70
0bb2fb0c 00000000 ntdll!_RtlUserThreadStart+0x1b

8b4ca0c9035c5a58006d396c67fdc730_001.dmp

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00efc470 1016dc08 node+0x2a2ee0b
00efc7c3 736d2037 node+0xb2dc08
00efc7ef 66202938 wldp!wil::details::ResultFromCaughtExceptionInternal+0x107
00efc7ff 6e656d65 0x66202938
00efc803 206c6174 0x6e656d65
00efc807 395b616d 0x206c6174
00efc80b 30383038 0x395b616d
00efc80f 3133303a 0x30383038
00efc813 37413543 0x3133303a
00efc817 31205d38 0x37413543
00efc917 756d2065 0x31205d38
00efc91b 30203d20 setupapi!ole32_NULL_THUNK_DATA_DLA  (setupapi+0x142065)
00efc91f 3939392e 0x30203d20
00efc923 7563202c 0x3939392e
00efcda7 00000000 setupapi!DoPresenceCheck+0x225

c37dad4033a1920767b289f18775b579_001.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
1a11f68c 68140081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
1a11f6c8 6814351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1a11fbc8 68144624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1a11fbfc 681485a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1a11fd28 6814917a rightsextension!CRegData::MonitorFunction+0x4b3
1a11fd48 68148a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1a11fd50 6825864a rightsextension!std::_Pad::_Call_func+0xa
1a11fd88 75ce5d49 rightsextension!thread_start+0x58
1a11fd98 7790d03b kernel32!BaseThreadInitThunk+0x19
1a11fdf0 7790cfc1 ntdll!__RtlUserThreadStart+0x2b
1a11fe00 00000000 ntdll!_RtlUserThreadStart+0x1b

489a8beaa2a0f89fad34e53cbb5e0c7d_001.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ef664 69778cc5 node+0x12ae60a
002ef704 67433961 node+0x2a18cc5
002ef778 680289e6 node+0x6d3961
002ef844 6802875e node+0x12c89e6
002ef8a0 68000ec3 node+0x12c875e
002ef8dc 68000acb node+0x12a0ec3
002ef91c 680123d2 node+0x12a0acb
002ef964 680122e2 node+0x12b23d2
002ef9a8 6742bd42 node+0x12b22e2
002ef9d0 6742d47d node+0x6cbd42
002efa10 6736ed6c node+0x6cd47d
002efa6c 6736f379 node+0x60ed6c
002efa90 6736ea8a node+0x60f379
002efa94 67fea300 node+0x60ea8a
002efa98 002e0000 node+0x128a300
002efa9c 00000000 0x2e0000

e446851a1cf6e222d0ccd666aacdcb75_000.dmp

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001cf794 6c548cc5 node+0x12ae60a
001cf82c 6a203961 node+0x2a18cc5
001cf8a0 6adf89e6 node+0x6d3961
001cf96c 6adf875e node+0x12c89e6
001cf9c8 6add0ec3 node+0x12c875e
001cfa04 6add0acb node+0x12a0ec3
001cfa44 6ade23d2 node+0x12a0acb
001cfa8c 6ade22e2 node+0x12b23d2
001cfad0 6a1fbd42 node+0x12b22e2
001cfaf8 6a1fd47d node+0x6cbd42
001cfb38 6a13ed6c node+0x6cd47d
001cfb94 6a13f379 node+0x60ed6c
001cfbb8 6a13ea8a node+0x60f379
001cfbbc 6adba300 node+0x60ea8a
001cfbc0 001c0000 node+0x128a300
001cfbc4 00000000 0x1c0000

118cab92008675b7f55f36561e109a34_000.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
0fd7ef3c 0a7c6066 rightsextension!ATL::CSimpleStringT::CloneData+0xc
0fd7ef74 0a7f2133 rightsextension!CSoftInfo::FindSoftNameByPath+0x1d6
0fd8f4a8 0a7f09fd rightsextension!CAutorunsCtrl::EnumRegAutorun+0xa33
0fd8f4b8 0a7faf94 rightsextension!CAutorunsCtrl::EnumAutoruns+0x2d
0fd8f4f4 0a7b3809 rightsextension!CRightsManager::ScanAll+0xb4
0fd8f9e8 0a7b4624 rightsextension!CAppInstallMonitor::RegChange+0x5d9
0fd8fa1c 0a7b85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0fd8fb48 0a7b917a rightsextension!CRegData::MonitorFunction+0x4b3
0fd8fb68 0a7b8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0fd8fb70 0a8c864a rightsextension!std::_Pad::_Call_func+0xa
0fd8fba8 76adef6c rightsextension!thread_start+0x58
0fd8fbb4 77a13618 kernel32!BaseThreadInitThunk+0xe
0fd8fbf4 77a135eb ntdll!__RtlUserThreadStart+0x70
0fd8fc0c 00000000 ntdll!_RtlUserThreadStart+0x1b

acbda703cdb9a6a742c80011162cbef6_000.dmp

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0042c6e0 5331dc08 node+0x2a2ee0b
0042c9df 74732032 node+0xb2dc08
0042c9e3 20737065 0x74732032
0042c9e7 636e6973 0x20737065
0042c9eb 74732065 0x636e6973
0042c9ef 20747261 0x74732065
0042c9f3 6d20666f 0x20747261
0042c9f7 696b7261 0x6d20666f
0042c9fb 202c676e 0x696b7261
0042c9ff 67676962 0x202c676e
0042ca03 20747365 0x67676962
0042ca07 70657473 0x20747365
0042ca0b 362e3520 0x70657473
0042ca0f 2c736d20 0x362e3520
0042ca13 6c617720 0x2c736d20
0042ca17 6d69746c 0x6c617720
0042ca1b 69732065 0x6d69746c
0042ca1f 2065636e 0x69732065
0042ca23 72617473 0x2065636e
0042ca27 666f2074 0x72617473
0042ca2b 72616d20 0x666f2074
0042ca2f 676e696b 0x72616d20
0042ca33 6d203820 0x676e696b
0042ca37 28202973 0x6d203820
0042ca3b 72657661 0x28202973
0042ca3f 20656761 0x72657661
0042ca43 3d20756d 0x20656761
0042ca47 392e3020 0x3d20756d
0042ca4b 202c3939 0x392e3020
0042ca4f 72727563 0x202c3939
0042ca53 20746e65 0x72727563
0042ca57 3d20756d 0x20746e65
0042ca5b 392e3020 0x3d20756d
0042ca5f 20293738 0x392e3020
0042ca63 616e6966 0x20293738
0042ca67 657a696c 0x616e6966
0042ca6b 636e6920 0x657a696c
0042ca6f 656d6572 0x636e6920
0042ca73 6c61746e 0x656d6572
0042ca77 72616d20 0x6c61746e
0042ca7b 5b6e696b 0x72616d20
0042ca7f 3a323936 0x5b6e696b
0042cb7f 76612820 0x3a323936
0042d64b 00000000 msvcrt!_vcwprintf_p_l+0x1242

969388a0631b650adae7a7880668a023_001.dmp

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00bac1d0 6b24dc08 node+0x2a2ee0b
00bac4cf 73203420 node+0xb2dc08
00bac4d3 73706574 0x73203420
00bac4d7 6e697320 0x73706574
00bac4db 73206563 node+0x3f77320
00bac4df 74726174 0x73206563
00bac4e3 20666f20 0x74726174
00bac4e7 6b72616d 0x20666f20
00bac4eb 2c676e69 node+0x100616d
00bac4ef 67696220 0x2c676e69
00bac4f3 74736567 0x67696220
00bac4f7 65747320 0x74736567
00bac4fb 2e312070 0x65747320
00bac4ff 736d2035 0x2e312070
00bac503 6177202c 0x736d2035
00bac507 69746c6c 0x6177202c
00bac50b 7320656d 0x69746c6c
00bac50f 65636e69 0x7320656d
00bac513 61747320 0x65636e69
00bac517 6f207472 0x61747320
00bac51b 616d2066 0x6f207472
00bac51f 6e696b72 0x616d2066
00bac523 34332067 node+0x3f76b72
00bac527 29736d20 0x34332067
00bac52b 76612820 0x29736d20
00bac52f 67617265 0x76612820
00bac533 756d2065 0x67617265
00bac537 30203d20 msctf!CThreadInputMgr::`vftable'+0x4d
00bac53b 3939392e 0x30203d20
00bac53f 7563202b 0x3939392e
00bac55b 6920657a ole32!TypeLibRegistrationEnumerator::RuntimeClassInitialize+0x108
00bac577 36323330 TextShaping!IndicEngineGsubFontFeatures::StoreDefaultFontFeatures+0x98
00bac58b 4d203a73 0x36323330
00bac58f 2d6b7261 0x4d203a73
00bac593 65657773 0x2d6b7261
00bac597 2e372070 0x65657773
00bac59b 39282036 0x2e372070
00bac59f 2029372e 0x39282036
00bac5a3 37203e2d 0x2029372e
00bac5a7 2820362e 0x37203e2d
00bac5ab 29372e39 0x2820362e
00bac5af 2c424d20 0x29372e39
00bac5b3 2e313120 0x2c424d20
00bac5b7 202f2039 0x2e313120
00bac5bb 20302e30 0x202f2039
00bac5bf 2020736d 0x20302e30
00bac5c3 65766128 0x2020736d
00bac5c7 65676172 0x65766128
00bac5cb 20756d20 0x65676172
00bac5cf 2e30203d 0x20756d20
00bac5d3 2c393939 0x2e30203d
00bac5d7 72756320 0x2c393939
00bac6cb 00000000 wininet!CCacheStore::DeleteBelowCutoff+0x278

46b1915a8af6993e8ca2b71bfd4bdc0f_000.dmp

Top 38: total counts = 1

0019ccf7 732d6b72 node+0xb2dc08
0019ccfb 70656577 360Base+0xc6b72
0019ccff 2e303120 0x70656577
0019cd03 31282039 0x2e303120
0019cd07 29352e32 0x31282039
0019cd0b 203e2d20 0x29352e32
0019cd0f 342e3031 0x203e2d20
0019cd13 32312820 0x342e3031
0019cd17 2029352e 0x32312820
0019cd1b 202c424d 0x2029352e
0019cd1f 2e323532 0x202c424d
0019cd23 202f2033 0x2e323532
0019cd27 20302e30 0x202f2033
0019cd2b 2020736d 0x20302e30
0019cd2f 65766128 0x2020736d
0019cd33 65676172 0x65766128
0019cd37 20756d20 0x65676172
0019cd3b 2e30203d 0x20756d20
0019cd3f 2c373939 0x2e30203d
0019cd43 72756320 0x2c373939
0019cd47 746e6572 0x72756320
0019cd4b 20756d20 0x746e6572
0019cd4f 2e30203d 0x20756d20
0019cd53 29363939 0x2e30203d
0019cd57 776f6c20 0x29363939
0019cd5b 6d656d20 0x776f6c20
0019cd5f 2079726f 0x6d656d20
0019cd63 69746f6e 0x2079726f
0019cd67 61636966 0x69746f6e
0019cd6b 6e6f6974 0x61636966
0019cd6f 20434720 0x6e6f6974
0019cd73 6f206e69 0x20434720
0019cd77 7320646c 0x6f206e69
0019cd7b 65636170 0x7320646c
0019cd7f 71657220 0x65636170
0019cd83 74736575 0x71657220
0019cd87 5b0a6465 0x74736575
0019cd8b 32333834 node+0x2936465
0019cd8f 4430303a 0x32333834
0019cd93 34464641 0x4430303a
0019cd97 31205d30 0x34464641
0019cd9b 36343337 0x31205d30
0019cd9f 34363436 0x36343337
0019cda3 736d2037 0x34363436
0019cda7 614d203a 0x736d2037
0019cdab 732d6b72 0x614d203a
0019cdaf 70656577 360Base+0xc6b72
0019cdb3 2e303120 0x70656577
0019cdb7 31282034 0x2e303120
0019cdbb 29352e32 0x31282034
0019cdbf 203e2d20 0x29352e32
0019cdc3 342e3031 0x203e2d20
0019cdc7 32312820 0x342e3031
0019cdcb 2029352e 0x32312820
0019cdcf 202c424d 0x2029352e
0019cdd3 2e313231 0x202c424d
0019cdd7 202f2034 0x2e313231
0019cddb 20302e30 0x202f2034
0019cddf 2020736d 0x20302e30
0019cde3 65766128 0x2020736d
0019cde7 65676172 0x65766128
0019cdeb 20756d20 0x65676172
0019cdef 2e30203d 0x20756d20
0019cdf3 2c343939 0x2e30203d
0019cdf7 72756320 0x2c343939
0019cdfb 746e6572 0x72756320
0019cdff 20756d20 0x746e6572
0019ce03 2e30203d 0x20756d20
0019ce07 29303030 0x2e30203d
0019ce0b 776f6c20 0x29303030
0019ce0f 6d656d20 0x776f6c20
0019ce13 2079726f 0x6d656d20
0019ce17 69746f6e 0x2079726f
0019ce1b 61636966 0x69746f6e
0019ce1f 6e6f6974 0x61636966
0019ce23 20434720 0x6e6f6974
0019ce27 6f206e69 0x20434720
0019ce2b 7320646c 0x6f206e69
0019ce2f 65636170 0x7320646c
0019ce33 71657220 0x65636170
0019ce37 74736575 0x71657220
0019ce3b 5b0a6465 0x74736575
0019ce3f 32333834 node+0x2936465
0019ce43 4430303a 0x32333834
0019ce47 34464641 0x4430303a
0019ce4b 31205d30 0x34464641
0019ce4f 37343337 0x31205d30
0019ce53 36323632 0x37343337
0019ce57 736d2036 0x36323632
0019ce5b 614d203a 0x736d2036
0019ce5f 732d6b72 0x614d203a
0019ce63 70656577 360Base+0xc6b72
0019ce67 2e303120 0x70656577
0019ce6b 31282039 0x2e303120
0019ce6f 29352e32 0x31282039
0019ce73 203e2d20 0x29352e32
0019ce77 342e3031 0x203e2d20
0019ce7b 32312820 0x342e3031
0019ce7f 2029352e 0x32312820
0019ce83 202c424d 0x2029352e
0019ce87 31303431 0x202c424d
0019ce8b 2f20362e 0x31303431
0019ce8f 302e3020 0x2f20362e
0019ce93 20736d20 0x302e3020
0019ce97 76612820 0x20736d20
0019ce9b 67617265 0x76612820
0019ce9f 756d2064 0x67617265
0019cebb 3737392e shell32!IsStreamUTF8+0x72
0019cec3 656d2077 0x3737392e
0019cec7 79726f6d 0x656d2077
0019cecb 746f6e20 0x79726f6d
0019cecf 63696669 0x746f6e20
0019ced3 6f697461 0x63696669
0019ced7 4347206e 0x6f697461
0019cedb 206e6920 0x4347206e
0019cedf 20646c6f 0x206e6920
0019cee3 63617073 0x20646c6f
0019cee7 65722065 0x63617073
0019ceeb 73657571 0x65722065
0019ceef 0a646574 0x73657571
0019cef3 00000000 0xa646574

7eefcab04f8bffb42ce6eff7716e1120_000.dmp

Top 39: total counts = 1

ChildEBP RetAddr  
001ae6e8 5e82e87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
001ae7c8 5e878a79 node+0x12ae87c
001ae7cc 005fcff0 node+0x12f8a79
001ae7d0 020ec958 0x5fcff0
001ae7d4 00000000 0x20ec958

6c107033654aeb99bb74d88f1d89d187_000.dmp

Top 40: total counts = 1

ChildEBP RetAddr  
0591f238 5430e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0591f278 5431738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0591f4c8 543112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0592fb10 5430e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0592fb88 54347f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0592fc64 0592fc74 rightsmanager!RM_AutorunScan+0x176
WARNING: Frame IP not in any known module. Following frames may be wrong.
0592fd68 77219882 0x592fc74
0592fda8 77219855 ntdll!__RtlUserThreadStart+0x70
0592fdc0 00000000 ntdll!_RtlUserThreadStart+0x1b

6874b0451692aa28e8a2dc5dc73c278b_000.dmp

Top 41: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024e8a0 6ee255ea node+0x105ad20
0024e8bc 6edf8046 node+0x10a55ea
0024e8e4 6eddab9b node+0x1078046
0024e910 6e9c44bc node+0x105ab9b
0024e998 6e9c4913 node+0xc444bc
0024e9a4 00b61a30 node+0xc44913
0024e9a8 00000000 0xb61a30

230bfa0a5ccbb2a4ed856646fa5ff3b5_000.dmp

Top 42: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0093f124 5e468d6c node+0x12ae60a
0093f194 5c123961 node+0x2a18d6c
0093f208 5cd189e6 node+0x6d3961
0093f2d4 5cd1875e node+0x12c89e6
0093f330 5ccf0ec3 node+0x12c875e
0093f36c 5ccf0acb node+0x12a0ec3
0093f3ac 5cd023d2 node+0x12a0acb
0093f3f4 5cd022e2 node+0x12b23d2
0093f438 5c11bd42 node+0x12b22e2
0093f460 5c11d47d node+0x6cbd42
0093f4a0 5c05ed6c node+0x6cd47d
0093f4fc 5c05f379 node+0x60ed6c
0093f520 5c05ea8a node+0x60f379
0093f5b8 77acae8e node+0x60ea8a
0093f66c 77acdcb6 ntdll!RtlAllocateHeap+0x3e
0093f684 72662d00 ntdll!RtlFreeHeap+0x46
0093f694 00000000 0x72662d00

b4a8454a7929c998a79596f6d128fc7e_000.dmp

Top 43: total counts = 1

ChildEBP RetAddr  
134df224 0ffe0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
134df260 0ffe351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
134df760 0ffe4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
134df794 0ffe85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
134df8c0 0ffe917a rightsextension!CRegData::MonitorFunction+0x4b3
134df8e0 0ffe8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
134df8e8 100f864a rightsextension!std::_Pad::_Call_func+0xa
134df920 75e2343d rightsextension!thread_start+0x58
134df92c 77389802 kernel32!BaseThreadInitThunk+0xe
134df96c 773897d5 ntdll!__RtlUserThreadStart+0x70
134df984 00000000 ntdll!_RtlUserThreadStart+0x1b

aaa27c8cca1da96839d8920c7d492881_000.dmp

Top 44: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0029ce70 5cf4dc08 node+0x2a2f20b
0029d16f 72614d20 node+0xb2dc08
0029d173 77732d6b 0x72614d20
0029d177 20706565 0x77732d6b
0029d17b 332e3031 0x20706565
0029d17f 32312820 0x332e3031
0029d183 2029302e 0x32312820
0029d187 31203e2d 0x2029302e
0029d18b 20332e30 0x31203e2d
0029d18f 2e323128 0x20332e30
0029d193 4d202930 0x2e323128
0029d197 31202c42 0x4d202930
0029d19b 20392e35 0x31202c42
0029d19f 2e30202f 0x20392e35
0029d1a3 736d2030 0x2e30202f
0029d1a7 61282020 0x736d2030
0029d1ab 61726576 0x61282020
0029d1af 6d206567 0x61726576
0029d1b3 203d2075 0x6d206567
0029d1b7 39392e30 0x203d2075
0029d1bb 63202c37 0x39392e30
0029d1bf 65727275 0x63202c37
0029d1c3 6d20746e 0x65727275
0029d1c7 203d2075 0x6d20746e
0029d1cb 30302e30 0x203d2075
0029d1cf 6c202933 0x30302e30
0029d1d3 6d20776f 0x6c202933
0029d1d7 726f6d65 0x6d20776f
0029d1db 6f6e2079 0x726f6d65
0029d1df 69666974 0x6f6e2079
0029d1e3 69746163 0x69666974
0029d1e7 47206e6f 0x69746163
0029d1eb 6e692043 0x47206e6f
0029d1ef 646c6f20 0x6e692043
0029d1f3 61707320 0x646c6f20
0029d1f7 72206563 0x61707320
0029d1fb 65757165 0x72206563
0029d1ff 64657473 0x65757165
0029d203 36325b0a 0x64657473
0029d207 303a3239 0x36325b0a
0029d20b 38393931 0x303a3239
0029d20f 5d383038 0x38393931
0029d213 35303220 node+0xf63038
0029d217 36313537 0x35303220
0029d21b 6d203637 0x36313537
0029d21f 4d203a73 0x6d203637
0029d223 2d6b7261 0x4d203a73
0029d227 65657773 0x2d6b7261
0029d22b 30312070 0x65657773
0029d22f 2820382e 0x30312070
0029d233 302e3231 0x2820382e
0029d237 3e2d2029 0x302e3231
0029d23b 2e303120 0x3e2d2029
0029d23f 31282034 0x2e303120
0029d243 29302e32 0x31282034
0029d247 2c424d20 0x29302e32
0029d24b 39373320 0x2c424d20
0029d24f 20362e37 0x39373320
0029d253 2e30202f 0x20362e37
0029d257 736d2030 0x2e30202f
0029d25b 61282020 0x736d2030
0029d25f 61726576 0x61282020
0029d263 6d206567 0x61726576
0029d267 203d2075 0x6d206567
0029d26b 35392e30 0x203d2075
0029d26f 63202c34 0x35392e30
0029d273 65727275 0x63202c34
0029d277 6d20746e 0x65727275
0029d27b 203d2075 0x6d20746e
0029d27f 34392e30 0x203d2075
0029d283 6c202930 0x34392e30
0029d287 6d20776f 0x6c202930
0029d28b 726f6d65 0x6d20776f
0029d28f 6f6e2079 0x726f6d65
0029d293 69666974 0x6f6e2079
0029d297 69746163 0x69666974
0029d29b 47206e6f 0x69746163
0029d29f 6e692043 0x47206e6f
0029d2a3 646c6f20 0x6e692043
0029d2a7 61707320 0x646c6f20
0029d2ab 72206563 0x61707320
0029d2af 65757165 0x72206563
0029d2b3 64657473 0x65757165
0029d2b7 36325b0a 0x64657473
0029d2bb 303a3239 0x36325b0a
0029d2bf 38393931 0x303a3239
0029d2c3 5d383038 0x38393931
0029d2c7 35303220 node+0xf63038
0029d2cb 33323537 0x35303220
0029d2cf 6d203132 0x33323537
0029d2d3 4d203a73 0x6d203132
0029d2d7 2d6b7261 0x4d203a73
0029d2db 65657773 0x2d6b7261
0029d2df 30312070 0x65657773
0029d2e3 2820342e 0x30312070
0029d2e7 302e3231 0x2820342e
0029d2eb 3e2d2029 0x302e3231
0029d2ef 2e303120 0x3e2d2029
0029d2f3 31282033 0x2e303120
0029d2f7 29302e32 0x31282033
0029d2fb 2c424d20 0x29302e32
0029d2ff 34343620 0x2c424d20
0029d303 2f20352e 0x34343620
0029d307 302e3020 0x2f20352e
0029d30b 20736d20 0x302e3020
0029d30f 76612820 0x20736d20
0029d443 00000000 clbcatq!CSLTComs::UpdateStore+0xdb5

e98e04f350d3f69aa2c3863778a15906_000.dmp

Top 45: total counts = 1

ChildEBP RetAddr  
00cfe7dc 77acd76e KERNELBASE!RaiseException+0x62
00cfe7e8 00000000 ntdll!RtlpAllocateHeapInternal+0x105e

d171510e6f208802b98c2cbfc2af81dc_000.dmp

Top 46: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0133f144 12258cc5 node+0x12ae60a
0133f1dc 0ff13961 node+0x2a18cc5
0133f250 10b089e6 node+0x6d3961
0133f31c 10b0875e node+0x12c89e6
0133f378 10ae0ec3 node+0x12c875e
0133f3b4 10ae0acb node+0x12a0ec3
0133f3f4 10af23d2 node+0x12a0acb
0133f43c 10af22e2 node+0x12b23d2
0133f480 0ff0bd42 node+0x12b22e2
0133f4a8 0ff0d47d node+0x6cbd42
0133f4e8 0fe4ed6c node+0x6cd47d
0133f544 0fe4f379 node+0x60ed6c
0133f568 0fe4ea8a node+0x60f379
0133f600 7790d6de node+0x60ea8a
0133f60c 00000000 ntdll!RtlAllocateHeap+0x3e

f802b36b61b2b9e10b0bc71d7c27570b_000.dmp

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04a2f358 60ac8e79 node+0x2bd11a
04a2f3b0 60b8a731 node+0xe78e79
04a2f41c 60b87df7 node+0xf3a731
04a2f420 1457ebf0 node+0xf37df7
04a2f424 04a2f490 0x1457ebf0
04a2f428 00000000 0x4a2f490

0583e55832127a627e8b76d9b2e414fa_000.dmp

Top 48: total counts = 1

0047d327 62202c67 0x6e696b72
0047d45b 00000000 ffi_bindings!FFI::FFI::InitializeBindings+0x1f7

1b0420cd9aeb2cd08099e58d163cf244_000.dmp

Top 49: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
048bedbc 6c6de668 node+0xb8c650
00000000 00000000 node+0xcee668

4aac39e56797958336dbcad13b6df821_000.dmp

Top 50: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0016cc70 6a3fdc08 node+0x2a2f20b
0016cf6f 736d2035 node+0xb2dc08
0016cf73 614d203a 0x736d2035
0016cf77 732d6b72 0x614d203a
0016cf7b 70656577 dhcpcsvc6!___PchSym_+0x1ca
0016cf7f 2e303120 0x70656577
0016cf83 31282031 0x2e303120
0016cf87 29302e32 0x31282031
0016cf8b 203e2d20 0x29302e32
0016cf8f 312e3031 0x203e2d20
0016cf93 32312820 0x312e3031
0016cf97 2029302e 0x32312820
0016cf9b 202c424d 0x2029302e
0016cf9f 352e3832 0x202c424d
0016cfa3 30202f20 0x352e3832
0016cfa7 6d20302e 0x30202f20
0016cfab 28202073 node+0x393302e
0016cfaf 72657661 0x28202073
0016cfb3 20656761 0x72657661
0016cfb7 3d20756d 0x20656761
0016cfbb 392e3020 0x3d20756d
0016cfbf 202c3939 0x392e3020
0016cfc3 72727563 0x202c3939
0016cfc7 20746e65 0x72727563
0016cfcb 3d20756d 0x20746e65
0016cfcf 302e3020 0x3d20756d
0016cfd3 20293130 0x302e3020
0016cfd7 20776f6c 0x20293130
0016cfdb 6f6d656d 0x20776f6c
0016cfdf 6e207972 0x6f6d656d
0016cfe3 6669746f GdiPlus!uc2gi_ArabicBmp  (GdiPlus+0x187972)
0016cfe7 74616369 0x6669746f
0016cfeb 206e6f69 0x74616369
0016cfef 69204347 0x206e6f69
0016cff3 6c6f206e 0x69204347
0016cff7 70732064 node+0x2e2206e
0016cffb 20656361 0x70732064
0016cfff 75716572 0x20656361
0016d0df 31207065 shell32!SHCopyStreamWithProgressAndErrorCauseItem+0xadd
0016d103 2f20322e 0x31207065
0016d107 302e3020 0x2f20322e
0016d10b 20736d20 0x302e3020
0016d10f 76612820 0x20736d20
0016d12b 756d2074 wininet!LoadRegistrySettings+0xb0
0016d183 00000000 shell32!CDefView::_Exec+0x3c1

2cd542176382c83fcc93d572a4d8d1fa_000.dmp