Analyzed 53 dump

Top 1: total counts = 9

064ff94c 7b9daeed rightsmanager!RM_AutorunScan+0x176
064ffa48 77795d49 ffi_bindings!ffi_call_win32+0x11
064ffa58 77c1d09b kernel32!BaseThreadInitThunk+0x19
064ffab0 77c1d021 ntdll!__RtlUserThreadStart+0x2b
064ffac0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 6

0997fa94 0fe3aeed rightsmanager!RM_AutorunScan+0x176
0997fb90 7607344d ffi_bindings!ffi_call_win32+0x11
0997fb9c 77599802 kernel32!BaseThreadInitThunk+0xe
0997fbdc 775997d5 ntdll!__RtlUserThreadStart+0x70
0997fbf4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 6

ChildEBP RetAddr  
0a47ef10 0b8be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0a47ef50 0b8c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0a47f1a0 0b8c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0a48f7e8 0b8be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0a48f860 0b8f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0a48fa34 7563344d rightsmanager!RM_AutorunScan+0x176
0a48fa40 77049802 kernel32!BaseThreadInitThunk+0xe
0a48fa80 770497d5 ntdll!__RtlUserThreadStart+0x70
0a48fa98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 5

04cbfdd4 7c9eaeed rightsmanager!RM_AutorunScan+0x176
04cbfed0 766efcc9 ffi_bindings!ffi_call_win32+0x11
04cbfee0 77517c5e kernel32!BaseThreadInitThunk+0x19
04cbff3c 77517c2e ntdll!__RtlUserThreadStart+0x2f
04cbff4c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 3

ChildEBP RetAddr  
05a4ef18 669ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05a4ef58 669f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05a4f1a8 669f12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05a5f7f0 669ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05a5f868 66a27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05a5fa3c 7589343d rightsmanager!RM_AutorunScan+0x176
05a5fa48 775e9802 kernel32!BaseThreadInitThunk+0xe
05a5fa88 775e97d5 ntdll!__RtlUserThreadStart+0x70
05a5faa0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 3

ChildEBP RetAddr  
05bbf448 51fce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05bbf488 51fd738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05bbf6d8 51fd12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05bcfd20 51fce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05bcfd98 52007f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05bcff6c 75bffcc9 rightsmanager!RM_AutorunScan+0x176
05bcff7c 777982ae kernel32!BaseThreadInitThunk+0x19
05bcffd8 7779827e ntdll!__RtlUserThreadStart+0x2f
05bcffe8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 2

ChildEBP RetAddr  
067aef6c 790291a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
067aef98 79021b3e rightsmanager!AutorunItem::AutorunItem+0x34
067bf5e0 7901e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
067bf658 79057f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
067bf82c 765efcc9 rightsmanager!RM_AutorunScan+0x176
067bf83c 76ee82ae kernel32!BaseThreadInitThunk+0x19
067bf898 76ee827e ntdll!__RtlUserThreadStart+0x2f
067bf8a8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 2

ChildEBP RetAddr  
05eeef20 79dde731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05eeef60 79de738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05eef1b0 79de12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05eff7f8 79dde943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05eff870 79e17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05effa44 75e57ba9 rightsmanager!RM_AutorunScan+0x176
05effa54 773fc3ab kernel32!BaseThreadInitThunk+0x19
05effaac 773fc32f ntdll!__RtlUserThreadStart+0x2b
05effabc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b9f4c4 6fa78cc5 node+0x12ae60a
00b9f564 6d733961 node+0x2a18cc5
00b9f5d8 6e3289e6 node+0x6d3961
00b9f6a4 6e32875e node+0x12c89e6
00b9f700 6e300ec3 node+0x12c875e
00b9f73c 6e300acb node+0x12a0ec3
00b9f77c 6e3123d2 node+0x12a0acb
00b9f7c4 6e3122e2 node+0x12b23d2
00b9f808 6d72bd42 node+0x12b22e2
00b9f830 6d72d47d node+0x6cbd42
00b9f870 6d66ed6c node+0x6cd47d
00b9f8cc 6d66f379 node+0x60ed6c
00b9f8f0 6d66ea8a node+0x60f379
00b9f988 77ba5e6e node+0x60ea8a
00b9fa3c 77ba3ca6 ntdll!RtlAllocateHeap+0x3e
00b9fa54 72662d00 ntdll!RtlFreeHeap+0x46
00b9fa64 00000000 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x442d00)

Top 10: total counts = 1

010fd1f7 61636966 0x69746f6e
010fd1fb 6e6f6974 SogouTSF+0x86966
010fd1ff 20434720 node+0x1ae6974
010fd203 6f206e69 0x20434720
010fd207 7320646c node+0x25f6e69
010fd217 5b0a6465 propsys!DefaultNormalizer::CreateInstance+0x1d
010fd21b 38383635 0x5b0a6465
010fd21f 3333303a 0x38383635
010fd223 45354134 0x3333303a
010fd227 20205d38 0x45354134
010fd22b 39353620 0x20205d38
010fd22f 20363936 0x39353620
010fd233 203a736d 0x20363936
010fd237 6b72614d 0x203a736d
010fd23b 6577732d NetBase+0x12614d
010fd23f 31207065 0x6577732d
010fd243 20372e30 0x31207065
010fd247 2e323128 0x20372e30
010fd24b 2d202933 0x2e323128
010fd24f 3031203e 0x2d202933
010fd253 2820302e 0x3031203e
010fd257 302e3231 0x2820302e
010fd25b 424d2029 0x302e3231
010fd25f 2e38202c 0x424d2029
010fd263 202f2034 0x2e38202c
010fd267 20302e30 0x202f2034
010fd26b 2020736d 0x20302e30
010fd26f 65766128 0x2020736d
010fd273 65676172 0x65766128
010fd277 20756d20 0x65676172
010fd27b 2e31203d 0x20756d20
010fd27f 2c303030 0x2e31203d
010fd283 72756320 0x2c303030
010fd287 746e6572 iertutil!SettingStore::s_rgValueTree+0xc210
010fd28b 20756d20 winsta!QueryMaxSessions+0xfc52
010fd28f 2e31203d 0x20756d20
010fd293 29303030 0x2e31203d
010fd297 776f6c20 0x29303030
010fd29b 6d656d20 0x776f6c20
010fd29f 2079726f node+0xa46d20
010fd2a3 69746f6e 0x2079726f
010fd2a7 61636966 0x69746f6e
010fd2ab 6e6f6974 SogouTSF+0x86966
010fd2af 20434720 node+0x1ae6974
010fd2b3 6f206e69 0x20434720
010fd2b7 7320646c node+0x25f6e69
010fd2c7 5b0a6465 propsys!DefaultNormalizer::CreateInstance+0x1d
010fd2cb 38383635 0x5b0a6465
010fd2cf 3333303a 0x38383635
010fd2d3 45354134 0x3333303a
010fd2d7 20205d38 0x45354134
010fd2db 39353620 0x20205d38
010fd2df 20383037 0x39353620
010fd2e3 203a736d 0x20383037
010fd2e7 6b72614d 0x203a736d
010fd2eb 6577732d NetBase+0x12614d
010fd2ef 31207065 0x6577732d
010fd2f3 20302e30 0x31207065
010fd2f7 2e323128 0x20302e30
010fd2fb 2d202930 0x2e323128
010fd2ff 3031203e 0x2d202930
010fd303 2820302e 0x3031203e
010fd307 332e3231 0x2820302e
010fd30b 424d2029 0x332e3231
010fd30f 3131202c 0x424d2029
010fd313 2f20392e 0x3131202c
010fd317 302e3020 0x2f20392e
010fd31b 20736d20 0x302e3020
010fd31f 76612820 0x20736d20
010fd32b 30203d20 msctf!CInputProcessorProfiles::EnumInputProcessorInfo+0xb0
010fd337 6e657272 0x30203d20
010fd33b 756d2074 node+0x1a47272
010fd33f 30203d20 windows_storage!urlmon_NULL_THUNK_DATA_DLA  (windows_storage+0x5e2074)
010fd343 3330302e 0x30203d20
010fd347 6f6c2029 0x3330302e
010fd34b 656d2077 node+0x2ab2029
010fd34f 79726f6d 0x656d2077
010fd353 746f6e20 0x79726f6d
010fd357 63696669 winsta!IPHLPAPI_NULL_THUNK_DATA_DLB+0x158
010fd35b 6f697461 0x63696669
010fd35f 4347206e node+0x2a87461
010fd363 206e6920 0x4347206e
010fd367 20646c6f 0x206e6920
010fd36b 63617073 0x20646c6f
010fd36f 65722065 0x63617073
010fd373 73657571 0x65722065
010fd377 0a646574 comctl32!DPISCALEINFO::Initialize+0x39
010fd37f 00000000 0xa646574

Top 11: total counts = 1

1320fa28 74ff386d rightsextension!thread_start+0x58
1320fa34 775996f2 kernel32!BaseThreadInitThunk+0xe
1320fa74 775996c5 ntdll!__RtlUserThreadStart+0x70
1320fa8c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 12: total counts = 1

ChildEBP RetAddr  
0602f0e8 7b9ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0602f128 7b9b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0602f378 7b9b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0603f9c0 7b9ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0603fa38 7b9e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0603fc0c 75e45d49 rightsmanager!RM_AutorunScan+0x176
0603fc1c 77b0cebb kernel32!BaseThreadInitThunk+0x19
0603fc74 77b0ce41 ntdll!__RtlUserThreadStart+0x2b
0603fc84 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04b1f490 00000000 node+0xce6b94

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
1166f2f0 6d3d35c5 node+0x358b039
1166f564 6c4cd38c node+0x13a35c5
1166f588 0b1a7b40 node+0x49d38c
00000000 00000000 0xb1a7b40

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
10c2f9ec 6b1bedc6 node+0x12ae60a
10c2fa30 6a61ad43 node+0x12aedc6
10c2faa4 6b1dc728 node+0x70ad43
10c2fb64 6b1dbfdb node+0x12cc728
10c2fca4 6b1e056f node+0x12cbfdb
10c2fcf0 6b1e03ff node+0x12d056f
10c2fd18 774bfcc9 node+0x12d03ff
10c2fd28 77dc7c6e kernel32!BaseThreadInitThunk+0x19
10c2fd84 77dc7c3e ntdll!__RtlUserThreadStart+0x2f
10c2fd94 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cff4f4 70d58cc5 node+0x12ae60a
00cff594 6ea13961 node+0x2a18cc5
00cff608 6f6089e6 node+0x6d3961
00cff6d4 6f60875e node+0x12c89e6
00cff730 6f5e0ec3 node+0x12c875e
00cff76c 6f5e0acb node+0x12a0ec3
00cff7ac 6f5f23d2 node+0x12a0acb
00cff7f4 6f5f22e2 node+0x12b23d2
00cff838 6ea0bd42 node+0x12b22e2
00cff860 6ea0d47d node+0x6cbd42
00cff8a0 6e94ed6c node+0x6cd47d
00cff8fc 6e94f379 node+0x60ed6c
00cff920 6e94ea8a node+0x60f379
00cff9b8 77ceadce node+0x60ea8a
00cff9c4 00000000 ntdll!RtlAllocateHeap+0x3e

Top 17: total counts = 1

03f7f1cc 6a4e4815 KERNELBASE!UnregisterWaitEx+0x1b
WARNING: Stack unwind information not available. Following frames may be wrong.
03f7f250 6948b24d node+0x12f4815
03f7f254 00000000 node+0x29b24d

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04f2fdf8 6f02e8da node+0xc6bd50
04f2fe50 705093e5 node+0xcee8da
04f2fe9c 760cfcc9 node+0x21c93e5
04f2feac 77a8809e kernel32!BaseThreadInitThunk+0x19
04f2ff08 77a8806e ntdll!__RtlUserThreadStart+0x2f
04f2ff18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 19: total counts = 1

05f4fd08 768141a8 ffi_bindings!ffi_call_win32+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
05f4fd1c 779a28c1 kernel32!BaseThreadInitThunk+0x28
05f4fd64 779a288f ntdll!__RtlUserThreadStart+0x2b
05f4fd74 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

0017ef5c 6ca88c7a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0017efd4 6c3fb4e7 node+0x12f8c7a
0017f060 6c478bdf node+0xc6b4e7
0017f0b8 6c478de5 node+0xce8bdf
0017f144 6c4181be node+0xce8de5
0017f1b8 6c42859a node+0xc881be
0017f2b8 6c41a55d node+0xc9859a
0017f380 6c418f6c node+0xc8a55d
0017f384 0120c788 node+0xc88f6c
0017f388 6c2e9eac 0x120c788
0017f38c 04629ba0 node+0xb59eac
0017f390 0d8c0000 0x4629ba0
0017f394 0120c788 0xd8c0000
0017f398 0120c788 0x120c788
0017f39c 00aeb14c 0x120c788
0017f3a0 011f10f0 0xaeb14c
0017f3a4 0017f448 0x11f10f0
0017f3a8 6c2e893b 0x17f448
0017f448 6c2e7b35 node+0xb5893b
0017f4d4 6c2e7d4b node+0xb57b35
0017f564 6c2da4ca node+0xb57d4b
0017f5bc 6ca6e8b9 node+0xb4a4ca
0017f5f4 6ca4f812 node+0x12de8b9
0017f660 6ca589e6 node+0x12bf812
0017f72c 6ca5875e node+0x12c89e6
0017f788 6ca30ec3 node+0x12c875e
0017f7c4 6ca30acb node+0x12a0ec3
0017f804 6ca423d2 node+0x12a0acb
0017f84c 6ca422e2 node+0x12b23d2
0017f890 6be5bd42 node+0x12b22e2
0017f8b8 6be5d47d node+0x6cbd42
0017f8f8 6bd9ed6c node+0x6cd47d
0017f954 6bd9f379 node+0x60ed6c
0017f978 6bd9ea8a node+0x60f379
0017f97c 6ca1a300 node+0x60ea8a
0017f980 00170000 node+0x128a300
0017f984 00000000 0x170000

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003ef154 6de78d6c node+0x12ae60a
003ef1bc 6bb33961 node+0x2a18d6c
003ef230 6c7289e6 node+0x6d3961
003ef2fc 6c72875e node+0x12c89e6
003ef358 6c700ec3 node+0x12c875e
003ef394 6c700acb node+0x12a0ec3
003ef3d4 6c7123d2 node+0x12a0acb
003ef41c 6c7122e2 node+0x12b23d2
003ef460 6bb2bd42 node+0x12b22e2
003ef488 6bb2d47d node+0x6cbd42
003ef4c8 6ba6ed6c node+0x6cd47d
003ef524 6ba6f379 node+0x60ed6c
003ef548 6ba6ea8a node+0x60f379
003faa00 00000000 node+0x60ea8a

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032f8a4 6d788d6c node+0x12ae60a
0032f90c 6b443961 node+0x2a18d6c
0032f980 6c0389e6 node+0x6d3961
0032fa4c 6c03875e node+0x12c89e6
0032faa8 6c010ec3 node+0x12c875e
0032fae4 6c010acb node+0x12a0ec3
0032fb24 6c0223d2 node+0x12a0acb
0032fb6c 6c0222e2 node+0x12b23d2
0032fbb0 6b43bd42 node+0x12b22e2
0032fbd8 6b43d47d node+0x6cbd42
0032fc18 6b37ed6c node+0x6cd47d
0032fc74 6b37f379 node+0x60ed6c
0032fc98 6b37ea8a node+0x60f379
0032fc9c 6bffa300 node+0x60ea8a
0032fca0 00320000 node+0x128a300
0032fca4 00000000 0x320000

Top 23: total counts = 1

ChildEBP RetAddr  
04f2f264 7ae191a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
04f2f290 7ae11b3e rightsmanager!AutorunItem::AutorunItem+0x34
04f3f8d8 7ae0e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
04f3f950 7ae47f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04f3fb24 75da5d49 rightsmanager!RM_AutorunScan+0x176
04f3fb34 7715d09b kernel32!BaseThreadInitThunk+0x19
04f3fb8c 7715d021 ntdll!__RtlUserThreadStart+0x2b
04f3fb9c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0032ca70 6b1fdc08 node+0x2a2f20b
0032cd6f 736d2032 node+0xb2dc08
0032cd73 614d203a 0x736d2032
0032cd77 732d6b72 0x614d203a
0032cd7b 70656577 0x732d6b72
0032cd7f 2e303120 0x70656577
0032cd83 31282033 0x2e303120
0032cd87 29332e32 0x31282033
0032cd8b 203e2d20 0x29332e32
0032cd8f 332e3031 0x203e2d20
0032cd93 32312820 0x332e3031
0032cd97 2029332e 0x32312820
0032cd9b 202c424d 0x2029332e
0032cd9f 322e3431 0x202c424d
0032cda3 30202f20 0x322e3431
0032cda7 6d20302e 0x30202f20
0032cdab 28202073 node+0x2b3302e
0032cdaf 72657661 0x28202073
0032cdb3 20656761 0x72657661
0032cdb7 3d20756d 0x20656761
0032cdbb 302e3120 0x3d20756d
0032cdbf 202c3030 0x302e3120
0032cdc3 72727563 0x202c3030
0032cdc7 20746e65 0x72727563
0032cdcb 3d20756d 0x20746e65
0032cdcf 302e3020 0x3d20756d
0032cdd3 20293130 0x302e3020
0032cdd7 20776f6c 0x20293130
0032cddb 6f6d656d 0x20776f6c
0032cddf 6e207972 0x6f6d656d
0032cde3 6669746f node+0x3b37972
0032cde7 74616369 UIAutomationCore!__dyn_tls_init_callback  (UIAutomationCore+0x7746f)
0032cdeb 206e6f69 0x74616369
0032cdef 69204347 0x206e6f69
0032cdf3 6c6f206e 0x69204347
0032cdf7 70732064 node+0x202206e
0032cdfb 20656361 0x70732064
0032cdff 75716572 0x20656361
0032ce03 65747365 shell32!CShellTaskScheduler::_MT_QueueRunningTask+0xb
0032ce0b 3a383434 0x65747365
0032ce0f 32423030 0x3a383434
0032ce13 38424630 0x32423030
0032ce17 3135205d 0x38424630
0032ce1b 30313333 0x3135205d
0032ce1f 20383536 0x30313333
0032ce23 203a736d 0x20383536
0032ce27 6b72614d 0x203a736d
0032ce2b 6577732d node+0x105614d
0032ce2f 31207065 0x6577732d
0032ce33 20392e30 0x31207065
0032ce37 2e323128 0x20392e30
0032ce3b 2d202933 0x2e323128
0032ce3f 3031203e 0x2d202933
0032ce43 2820332e 0x3031203e
0032ce47 332e3231 0x2820332e
0032ce4b 424d2029 0x332e3231
0032ce4f 2e34202c 0x424d2029
0032ce53 202f2039 0x2e34202c
0032ce57 20302e30 0x202f2039
0032ce5b 2020736d 0x20302e30
0032ce5f 65766128 0x2020736d
0032ce63 65676172 0x65766128
0032ce67 20756d20 0x65676172
0032ce6b 2e31203d 0x20756d20
0032ce6f 2c303030 0x2e31203d
0032ce73 72756320 0x2c303030
0032ce77 746e6572 0x72756320
0032ce7b 20756d20 0x746e6572
0032ce7f 2e31203d 0x20756d20
0032ce83 29303030 0x2e31203d
0032ce87 776f6c20 0x29303030
0032ce8b 6d656d20 0x776f6c20
0032ce8f 2079726f node+0x2f86d20
0032ce93 69746f6e 0x2079726f
0032ce97 61636966 0x69746f6e
0032ce9b 6e6f6974 0x61636966
0032ce9f 20434720 node+0x4026974
0032cea3 6f206e69 0x20434720
0032cea7 7320646c 0x6f206e69
0032ceab 65636170 0x7320646c
0032ceaf 71657220 0x65636170
0032ceb3 74736575 0x71657220
0032ceb7 5b0a6465 0x74736575
0032cebb 38343432 0x5b0a6465
0032cebf 4230303a 0x38343432
0032cec3 42463032 0x4230303a
0032cec7 35205d38 0x42463032
0032cecb 31333331 0x35205d38
0032cecf 33363630 0x31333331
0032ced3 3a736d20 0x33363630
0032ced7 72614d20 0x3a736d20
0032cedb 77732d6b 0x72614d20
0032cedf 20706565 0x77732d6b
0032cee3 332e3031 0x20706565
0032cee7 32312820 0x332e3031
0032ceeb 2029332e 0x32312820
0032ceef 31203e2d 0x2029332e
0032cef3 20332e30 0x31203e2d
0032cef7 2e323128 0x20332e30
0032cefb 4d202933 0x2e323128
0032ceff 35202c42 0x4d202933
0032cf03 2f20322e 0x35202c42
0032cf07 302e3020 0x2f20322e
0032cf0b 20736d20 0x302e3020
0032cf0f 76612820 0x20736d20
0032cf43 746f6e20 KERNELBASE!GetFileMUIInfo+0x19b
0032cf57 20646c6f 0x746f6e20
0032cf5b 63617073 0x20646c6f
0032cf5f 65722065 0x63617073
0032cf63 73657571 0x65722065
0032cf67 0a646574 0x73657571
0032cf6b 00000000 0xa646574

Top 25: total counts = 1

ChildEBP RetAddr  
05e2ef18 7922e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05e2ef58 7923738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05e2f1a8 792312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05e3f7f0 7922e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05e3f868 79267f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05e3fa3c 7735fcc9 rightsmanager!RM_AutorunScan+0x176
05e3fa4c 77d47cbe kernel32!BaseThreadInitThunk+0x19
05e3faa8 77d47c8e ntdll!__RtlUserThreadStart+0x2f
05e3fab8 00000000 ntdll!_RtlUserThreadStart+0x1b