Analyzed 113 dump

Top 1: total counts = 11

ChildEBP RetAddr  
00bde9a4 00000000 KERNELBASE!RaiseException+0x62

Top 2: total counts = 9

064ff94c 7b9daeed rightsmanager!RM_AutorunScan+0x176
064ffa48 77795d49 ffi_bindings!ffi_call_win32+0x11
064ffa58 77c1d09b kernel32!BaseThreadInitThunk+0x19
064ffab0 77c1d021 ntdll!__RtlUserThreadStart+0x2b
064ffac0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 6

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

Top 4: total counts = 6

0997fa94 0fe3aeed rightsmanager!RM_AutorunScan+0x176
0997fb90 7607344d ffi_bindings!ffi_call_win32+0x11
0997fb9c 77599802 kernel32!BaseThreadInitThunk+0xe
0997fbdc 775997d5 ntdll!__RtlUserThreadStart+0x70
0997fbf4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 6

ChildEBP RetAddr  
0a47ef10 0b8be731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0a47ef50 0b8c738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0a47f1a0 0b8c12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0a48f7e8 0b8be943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0a48f860 0b8f7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0a48fa34 7563344d rightsmanager!RM_AutorunScan+0x176
0a48fa40 77049802 kernel32!BaseThreadInitThunk+0xe
0a48fa80 770497d5 ntdll!__RtlUserThreadStart+0x70
0a48fa98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 5

04cbfdd4 7c9eaeed rightsmanager!RM_AutorunScan+0x176
04cbfed0 766efcc9 ffi_bindings!ffi_call_win32+0x11
04cbfee0 77517c5e kernel32!BaseThreadInitThunk+0x19
04cbff3c 77517c2e ntdll!__RtlUserThreadStart+0x2f
04cbff4c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 5

ChildEBP RetAddr  
0023ebac 646de479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0023ebc0 005fcff2 node+0x12ae479
0023ebc4 00000000 0x5fcff2

Top 8: total counts = 3

ChildEBP RetAddr  
05a4ef18 669ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05a4ef58 669f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05a4f1a8 669f12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05a5f7f0 669ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05a5f868 66a27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05a5fa3c 7589343d rightsmanager!RM_AutorunScan+0x176
05a5fa48 775e9802 kernel32!BaseThreadInitThunk+0xe
05a5fa88 775e97d5 ntdll!__RtlUserThreadStart+0x70
05a5faa0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 3

ChildEBP RetAddr  
05bbf448 51fce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05bbf488 51fd738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05bbf6d8 51fd12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05bcfd20 51fce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05bcfd98 52007f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05bcff6c 75bffcc9 rightsmanager!RM_AutorunScan+0x176
05bcff7c 777982ae kernel32!BaseThreadInitThunk+0x19
05bcffd8 7779827e ntdll!__RtlUserThreadStart+0x2f
05bcffe8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 3

ChildEBP RetAddr  
002eeafc 56e7e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
002eeb10 00193201 node+0x12ae479
002eeb14 00000000 0x193201

Top 11: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

Top 12: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

Top 13: total counts = 2

ChildEBP RetAddr  
067aef6c 790291a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
067aef98 79021b3e rightsmanager!AutorunItem::AutorunItem+0x34
067bf5e0 7901e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
067bf658 79057f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
067bf82c 765efcc9 rightsmanager!RM_AutorunScan+0x176
067bf83c 76ee82ae kernel32!BaseThreadInitThunk+0x19
067bf898 76ee827e ntdll!__RtlUserThreadStart+0x2f
067bf8a8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 14: total counts = 2

ChildEBP RetAddr  
0028e93c 614de479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0028e950 005fcff0 node+0x12ae479
0028e954 00000000 0x5fcff0

Top 15: total counts = 2

ChildEBP RetAddr  
05eeef20 79dde731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
05eeef60 79de738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05eef1b0 79de12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05eff7f8 79dde943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05eff870 79e17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05effa44 75e57ba9 rightsmanager!RM_AutorunScan+0x176
05effa54 773fc3ab kernel32!BaseThreadInitThunk+0x19
05effaac 773fc32f ntdll!__RtlUserThreadStart+0x2b
05effabc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b9f4c4 6fa78cc5 node+0x12ae60a
00b9f564 6d733961 node+0x2a18cc5
00b9f5d8 6e3289e6 node+0x6d3961
00b9f6a4 6e32875e node+0x12c89e6
00b9f700 6e300ec3 node+0x12c875e
00b9f73c 6e300acb node+0x12a0ec3
00b9f77c 6e3123d2 node+0x12a0acb
00b9f7c4 6e3122e2 node+0x12b23d2
00b9f808 6d72bd42 node+0x12b22e2
00b9f830 6d72d47d node+0x6cbd42
00b9f870 6d66ed6c node+0x6cd47d
00b9f8cc 6d66f379 node+0x60ed6c
00b9f8f0 6d66ea8a node+0x60f379
00b9f988 77ba5e6e node+0x60ea8a
00b9fa3c 77ba3ca6 ntdll!RtlAllocateHeap+0x3e
00b9fa54 72662d00 ntdll!RtlFreeHeap+0x46
00b9fa64 00000000 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x442d00)

Top 17: total counts = 1

012fc307 72756320 0x2c303030
012fc30b 746e6572 context!std::pair > > >::~pair > > >+0xb020
012fc30f 20756d20 0x746e6572
012fc313 2e30203d 0x20756d20
012fc317 29373939 0x2e30203d
012fc31b 6e696620 0x29373939
012fc31f 7a696c61 0x6e696620
012fc323 6e692065 0x7a696c61
012fc327 6d657263 0x6e692065
012fc32b 61746e65 0x6d657263
012fc32f 616d206c 0x61746e65
012fc333 325b6b72 0x616d206c
012fc337 38383234 0x325b6b72
012fc33b 3833303a 0x38383234
012fc33f 31344238 0x3833303a
012fc343 32205d38 0x31344238
012fc347 38303334 0x32205d38
012fc34b 20373237 0x38303334
012fc34f 203a736d 0x20373237
012fc353 6b72614d 0x203a736d
012fc357 6577732d node+0x29f614d
012fc35b 37207065 0x6577732d
012fc35f 2820362e 0x37207065
012fc363 302e3031 0x2820362e
012fc367 3e2d2029 0x302e3031
012fc36b 362e3720 0x3e2d2029
012fc36f 30312820 0x362e3720
012fc373 2029302e 0x30312820
012fc377 202c424d 0x2029302e
012fc37b 20322e39 0x202c424d
012fc37f 2e30202f 0x20322e39
012fc383 736d2030 0x2e30202f
012fc3af 6c202938 windows_storage!HasProtectedUserChoice+0x17
012fc3b3 6d20776f node+0x34d2938
012fc3b7 726f6d65 node+0x44d776f
012fc3bb 6f6e2079 0x726f6d65
012fc3bf 69666974 0x6f6e2079
012fc3c3 69746163 node+0x936974
012fc3c7 47206e6f node+0xa16163
012fc3cb 6e692043 0x47206e6f
012fc3cf 646c6f20 0x6e692043
012fc3d3 61707320 0x646c6f20
012fc3d7 72206563 0x61707320
012fc42b 2f20392e dbghelp!Arm64UnwinderInternal::RtlpUnwindFunctionFull+0x262
012fc453 756d2074 0x2f20392e
012fc457 30203d20 ole32!`string'+0x4
012fc45b 3430302e 0x30203d20
012fc45f 6f6c2029 0x3430302e
012fc463 656d2077 0x6f6c2029
012fc467 79726f6d 0x656d2077
012fc46b 746f6e20 0x79726f6d
012fc46f 63696669 0x746f6e20
012fc473 6f697461 0x63696669
012fc477 4347206e 0x6f697461
012fc47b 206e6920 0x4347206e
012fc47f 20646c6f 0x206e6920
012fc483 63617073 0x20646c6f
012fc487 65722065 0x63617073
012fc48b 73657571 0x65722065
012fc48f 0a646574 windows_storage!Microsoft::WRL::Details::ImplementsHelper,1,IWeakReferenceSource,Windows::Foundation::Collections::IIterable *> >::CanCastTo+0x37
012fc49f 00000000 0xa646574

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0018f41c 6863533b node+0x12f5573
0018f4b0 686085e6 node+0x12f533b
0018f57c 6860835e node+0x12c85e6
0018f5d8 685e0b7b node+0x12c835e
0018f614 685e0783 node+0x12a0b7b
0018f654 685f1fd2 node+0x12a0783
0018f69c 685f1ee2 node+0x12b1fd2
0018f6e0 67a0bd42 node+0x12b1ee2
0018f708 67a0d47d node+0x6cbd42
0018f748 6794ed6c node+0x6cd47d
0018f7a4 6794f379 node+0x60ed6c
0018f7c8 6794ea8a node+0x60f379
0018f7cc 685ca300 node+0x60ea8a
0018f7d0 00180000 node+0x128a300
0018f7d4 00000000 0x180000

Top 19: total counts = 1

ChildEBP RetAddr  
10ecf224 64ab6066 rightsextension!ATL::CSimpleStringT::CloneData+0xc
10ecf25c 64ae2133 rightsextension!CSoftInfo::FindSoftNameByPath+0x1d6
10edf790 64ae09fd rightsextension!CAutorunsCtrl::EnumRegAutorun+0xa33
10edf7a0 64aeaf94 rightsextension!CAutorunsCtrl::EnumAutoruns+0x2d
10edf7dc 64aa3809 rightsextension!CRightsManager::ScanAll+0xb4
10edfcd0 64aa4624 rightsextension!CAppInstallMonitor::RegChange+0x5d9
10edfd04 64aa85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
10edfe30 64aa917a rightsextension!CRegData::MonitorFunction+0x4b3
10edfe50 64aa8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
10edfe58 64bb864a rightsextension!std::_Pad::_Call_func+0xa
10edfe90 7692343d rightsextension!thread_start+0x58
10edfe9c 77039812 kernel32!BaseThreadInitThunk+0xe
10edfedc 770397e5 ntdll!__RtlUserThreadStart+0x70
10edfef4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005dc2d8 5c77dc08 node+0x2a2f20b
005dc5d7 392e3020 node+0xb2dc08
005dc5db 202c3939 0x392e3020
005dc5df 72727563 0x202c3939
005dc5e3 20746e65 0x72727563
005dc5e7 3d20756d 0x20746e65
005dc5eb 392e3020 0x3d20756d
005dc5ef 20293939 0x392e3020
005dc5f3 20776f6c 0x20293939
005dc5f7 6f6d656d 0x20776f6c
005dc5fb 6e207972 0x6f6d656d
005dc5ff 6669746f 0x6e207972
005dc603 74616369 0x6669746f
005dc607 206e6f69 mfc42!CBlobProperty::`RTTI Class Hierarchy Descriptor'+0x5
005dc60b 69204347 0x206e6f69
005dc60f 6c6f206e 0x69204347
005dc613 70732064 0x6c6f206e
005dc617 20656361 0x70732064
005dc61b 75716572 0x20656361
005dc61f 65747365 0x75716572
005dc623 315b0a64 0x65747365
005dc627 3a383036 0x315b0a64
005dc62b 30433230 0x3a383036
005dc62f 30354245 0x30433230
005dc633 2020205d 0x30354245
005dc637 33333834 0x2020205d
005dc63b 6d203335 0x33333834
005dc63f 4d203a73 0x6d203335
005dc643 2d6b7261 0x4d203a73
005dc647 65657773 0x2d6b7261
005dc64b 2e372070 0x65657773
005dc64f 31282036 0x2e372070
005dc653 29302e30 0x31282036
005dc657 203e2d20 0x29302e30
005dc65b 20362e37 0x203e2d20
005dc65f 2e303128 0x20362e37
005dc663 4d202930 0x2e303128
005dc667 32202c42 0x4d202930
005dc66b 20362e32 0x32202c42
005dc66f 2e30202f 0x20362e32
005dc673 736d2030 0x2e30202f
005dc677 61282020 wininet!WPP_c141c742e6383dc9ed9a863473e7d567_Traceguids+0xc15bc
005dc67b 61726576 0x61282020
005dc67f 6d206567 0x61726576
005dc683 203d2075 0x6d206567
005dc687 39392e30 0x203d2075
005dc68b 63202c37 0x39392e30
005dc68f 65727275 0x63202c37
005dc693 6d20746e 0x65727275
005dc697 203d2075 0x6d20746e
005dc69b 30302e30 0x203d2075
005dc69f 6c202932 0x30302e30
005dc6a3 6d20776f 0x6c202932
005dc6a7 726f6d65 0x6d20776f
005dc6ab 6f6e2079 0x726f6d65
005dc6af 69666974 0x6f6e2079
005dc6b3 69746163 0x69666974
005dc6b7 47206e6f 0x69746163
005dc6bb 6e692043 0x47206e6f
005dc6bf 646c6f20 0x6e692043
005dc6c3 61707320 0x646c6f20
005dc6c7 72206563 0x61707320
005dc703 2029302e GdiPlus!GpGraphics::GetFromGdiPrinterDC+0x186
005dc707 37203e2d 0x2029302e
005dc70b 2820362e 0x37203e2d
005dc70f 302e3031 0x2820362e
005dc713 424d2029 0x302e3031
005dc717 2e36202c 0x424d2029
005dc71b 202f2036 0x2e36202c
005dc71f 20302e30 0x202f2036
005dc723 2020736d 0x20302e30
005dc727 30202b28 0x2020736d
005dc72b 6d20332e 0x30202b28
005dc72f 6e692073 0x6d20332e
005dc733 73203320 0x6e692073
005dc737 73706574 0x73203320
005dc73b 6e697320 wininet!WPP_c141c742e6383dc9ed9a863473e7d567_Traceguids+0xf5b00
005dc73f 73206563 0x6e697320
005dc743 74726174 0x73206563
005dc747 20666f20 mfc42!urlmon_NULL_THUNK_DATA_DLA  (mfc42+0x126174)
005dc74b 6b72616d 0x20666f20
005dc74f 2c676e69 0x6b72616d
005dc753 67696220 0x2c676e69
005dc757 74736567 0x67696220
005dc75b 65747320 mfc42!urlmon_NULL_THUNK_DATA_DLA  (mfc42+0x136567)
005dc75f 2e302070 0x65747320
005dc763 736d2033 0x2e302070
005dc767 6177202c wininet!WPP_c141c742e6383dc9ed9a863473e7d567_Traceguids+0xc15bf
005dc76b 69746c6c 0x6177202c
005dc76f 7320656d 0x69746c6c
005dc773 65636e69 0x7320656d
005dc777 61747320 0x65636e69
005dc77b 6f207472 0x61747320
005dc77f 616d2066 0x6f207472
005dc783 6e696b72 0x616d2066
005dc787 30342067 0x6e696b72
005dc78b 29736d20 0x30342067
005dc78f 76612820 0x29736d20
005dc7db 00000000 shell32!CLibrariesFolderBase::_OnBindToObject+0xef

Top 21: total counts = 1

010fd1f7 61636966 0x69746f6e
010fd1fb 6e6f6974 SogouTSF+0x86966
010fd1ff 20434720 node+0x1ae6974
010fd203 6f206e69 0x20434720
010fd207 7320646c node+0x25f6e69
010fd217 5b0a6465 propsys!DefaultNormalizer::CreateInstance+0x1d
010fd21b 38383635 0x5b0a6465
010fd21f 3333303a 0x38383635
010fd223 45354134 0x3333303a
010fd227 20205d38 0x45354134
010fd22b 39353620 0x20205d38
010fd22f 20363936 0x39353620
010fd233 203a736d 0x20363936
010fd237 6b72614d 0x203a736d
010fd23b 6577732d NetBase+0x12614d
010fd23f 31207065 0x6577732d
010fd243 20372e30 0x31207065
010fd247 2e323128 0x20372e30
010fd24b 2d202933 0x2e323128
010fd24f 3031203e 0x2d202933
010fd253 2820302e 0x3031203e
010fd257 302e3231 0x2820302e
010fd25b 424d2029 0x302e3231
010fd25f 2e38202c 0x424d2029
010fd263 202f2034 0x2e38202c
010fd267 20302e30 0x202f2034
010fd26b 2020736d 0x20302e30
010fd26f 65766128 0x2020736d
010fd273 65676172 0x65766128
010fd277 20756d20 0x65676172
010fd27b 2e31203d 0x20756d20
010fd27f 2c303030 0x2e31203d
010fd283 72756320 0x2c303030
010fd287 746e6572 iertutil!SettingStore::s_rgValueTree+0xc210
010fd28b 20756d20 winsta!QueryMaxSessions+0xfc52
010fd28f 2e31203d 0x20756d20
010fd293 29303030 0x2e31203d
010fd297 776f6c20 0x29303030
010fd29b 6d656d20 0x776f6c20
010fd29f 2079726f node+0xa46d20
010fd2a3 69746f6e 0x2079726f
010fd2a7 61636966 0x69746f6e
010fd2ab 6e6f6974 SogouTSF+0x86966
010fd2af 20434720 node+0x1ae6974
010fd2b3 6f206e69 0x20434720
010fd2b7 7320646c node+0x25f6e69
010fd2c7 5b0a6465 propsys!DefaultNormalizer::CreateInstance+0x1d
010fd2cb 38383635 0x5b0a6465
010fd2cf 3333303a 0x38383635
010fd2d3 45354134 0x3333303a
010fd2d7 20205d38 0x45354134
010fd2db 39353620 0x20205d38
010fd2df 20383037 0x39353620
010fd2e3 203a736d 0x20383037
010fd2e7 6b72614d 0x203a736d
010fd2eb 6577732d NetBase+0x12614d
010fd2ef 31207065 0x6577732d
010fd2f3 20302e30 0x31207065
010fd2f7 2e323128 0x20302e30
010fd2fb 2d202930 0x2e323128
010fd2ff 3031203e 0x2d202930
010fd303 2820302e 0x3031203e
010fd307 332e3231 0x2820302e
010fd30b 424d2029 0x332e3231
010fd30f 3131202c 0x424d2029
010fd313 2f20392e 0x3131202c
010fd317 302e3020 0x2f20392e
010fd31b 20736d20 0x302e3020
010fd31f 76612820 0x20736d20
010fd32b 30203d20 msctf!CInputProcessorProfiles::EnumInputProcessorInfo+0xb0
010fd337 6e657272 0x30203d20
010fd33b 756d2074 node+0x1a47272
010fd33f 30203d20 windows_storage!urlmon_NULL_THUNK_DATA_DLA  (windows_storage+0x5e2074)
010fd343 3330302e 0x30203d20
010fd347 6f6c2029 0x3330302e
010fd34b 656d2077 node+0x2ab2029
010fd34f 79726f6d 0x656d2077
010fd353 746f6e20 0x79726f6d
010fd357 63696669 winsta!IPHLPAPI_NULL_THUNK_DATA_DLB+0x158
010fd35b 6f697461 0x63696669
010fd35f 4347206e node+0x2a87461
010fd363 206e6920 0x4347206e
010fd367 20646c6f 0x206e6920
010fd36b 63617073 0x20646c6f
010fd36f 65722065 0x63617073
010fd373 73657571 0x65722065
010fd377 0a646574 comctl32!DPISCALEINFO::Initialize+0x39
010fd37f 00000000 0xa646574

Top 22: total counts = 1

1320fa28 74ff386d rightsextension!thread_start+0x58
1320fa34 775996f2 kernel32!BaseThreadInitThunk+0xe
1320fa74 775996c5 ntdll!__RtlUserThreadStart+0x70
1320fa8c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 23: total counts = 1

ChildEBP RetAddr  
1236ed90 529b2618 rightsextension!CSoftInfo::FindSoftNameByPath+0x1c0
1236eff0 529addc5 rightsextension!Utils::GetUninstAndAppName+0x98
1236f474 529ac09f rightsextension!RightMenuMgr::GetRightMenus+0x1be5
1236f4b8 529aafa0 rightsextension!RightMenuMgr::EnumMenus+0x6f
1236f4f8 52963809 rightsextension!CRightsManager::ScanAll+0xc0
1236f9ec 52964624 rightsextension!CAppInstallMonitor::RegChange+0x5d9
1236fa20 529685a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1236fb4c 5296917a rightsextension!CRegData::MonitorFunction+0x4b3
1236fb6c 52968a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1236fb74 52a7864a rightsextension!std::_Pad::_Call_func+0xa
1236fbac 7652343d rightsextension!thread_start+0x58
1236fbb8 76fb9802 kernel32!BaseThreadInitThunk+0xe
1236fbf8 76fb97d5 ntdll!__RtlUserThreadStart+0x70
1236fc10 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 24: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0038c1c8 6cd4dc08 node+0x2a2ee0b
0038c4c7 65747320 node+0xb2dc08
0038c4cb 73207370 0x65747320
0038c4cf 65636e69 0x73207370
0038c4d3 61747320 0x65636e69
0038c4d7 6f207472 0x61747320
0038c4db 616d2066 node+0x2fe7472
0038c4df 6e696b72 0x616d2066
0038c4e3 62202c67 node+0x2476b72
0038c4e7 65676769 0x62202c67
0038c4eb 73207473 0x65676769
0038c4ef 20706574 0x73207473
0038c4f3 20342e30 0x20706574
0038c4f7 202c736d 0x20342e30
0038c4fb 6c6c6177 0x202c736d
0038c4ff 656d6974 node+0x4a6177
0038c503 6e697320 0x656d6974
0038c507 73206563 node+0x2477320
0038c50b 74726174 0x73206563
0038c50f 20666f20 0x74726174
0038c513 6b72616d 0x20666f20
0038c517 20676e69 0x6b72616d
0038c51b 6d203835 0x20676e69
0038c51f 28202973 node+0xfe3835
0038c523 72657661 0x28202973
0038c527 20656761 0x72657661
0038c52b 3d20756d 0x20656761
0038c52f 392e3020 0x3d20756d
0038c533 202c3939 0x392e3020
0038c537 72727563 0x202c3939
0038c54f 657a696c ncrypt!_PkcsDecodeDsaPrivateKey+0xa2
0038c563 3532325b 0x657a696c
0038c567 30303a36 0x3532325b
0038c56b 31344542 0x30303a36
0038c56f 205d3038 0x31344542
0038c573 31383931 0x205d3038
0038c577 38363931 0x31383931
0038c57b 736d2036 0x38363931
0038c57f 614d203a 0x736d2036
0038c583 732d6b72 0x614d203a
0038c587 70656577 0x732d6b72
0038c58b 372e3720 node+0x4436577
0038c58f 30312820 0x372e3720
0038c593 2029302e 0x30312820
0038c597 37203e2d 0x2029302e
0038c59b 2820372e 0x37203e2d
0038c59f 302e3031 0x2820372e
0038c5a3 424d2029 0x302e3031
0038c5a7 3331202c 0x424d2029
0038c5ab 2f20372e 0x3331202c
0038c5af 302e3020 0x2f20372e
0038c5b3 20736d20 0x302e3020
0038c5b7 76612820 0x20736d20
0038c5bb 67617265 shell32!__dyn_tls_init_callback  (shell32+0x712820)
0038c5bf 756d2065 0x67617265
0038c5c3 30203d20 crypt32!winreg_bhandle  (crypt32+0xd2065)
0038c5c7 3939392e 0x30203d20
0038c5cb 7563202c 0x3939392e
0038c603 63617073 crypt32!AddContextToStore+0x71
0038c623 31383931 0x63617073
0038c627 30373931 0x31383931
0038c62b 736d2034 0x30373931
0038c62f 614d203a 0x736d2034
0038c633 732d6b72 0x614d203a
0038c637 70656577 0x732d6b72
0038c63b 372e3720 node+0x4436577
0038c63f 30312820 0x372e3720
0038c643 2029302e 0x30312820
0038c647 37203e2d 0x2029302e
0038c64b 2820372e 0x37203e2d
0038c64f 302e3031 0x2820372e
0038c653 424d2029 0x302e3031
0038c657 3831202c 0x424d2029
0038c65b 2f20302e 0x3831202c
0038c65f 302e3020 0x2f20302e
0038c663 20736d20 0x302e3020
0038c667 76612820 0x20736d20
0038c66b 67617265 shell32!__dyn_tls_init_callback  (shell32+0x712820)
0038c66f 756d2065 0x67617265
0038c673 30203d20 crypt32!winreg_bhandle  (crypt32+0xd2065)
0038c677 3739392e 0x30203d20
0038c67b 7563202c 0x3739392e
0038c6b3 63617073 crypt32!AddContextToStore+0x71
0038c6d3 00000000 0x63617073

Top 25: total counts = 1

ChildEBP RetAddr  
0602f0e8 7b9ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0602f128 7b9b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0602f378 7b9b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0603f9c0 7b9ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0603fa38 7b9e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0603fc0c 75e45d49 rightsmanager!RM_AutorunScan+0x176
0603fc1c 77b0cebb kernel32!BaseThreadInitThunk+0x19
0603fc74 77b0ce41 ntdll!__RtlUserThreadStart+0x2b
0603fc84 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 26: total counts = 1

111bfa30 105f442c ntdll!RtlLeaveCriticalSection+0x51
WARNING: Stack unwind information not available. Following frames may be wrong.
111bfa3c 105f1c5e SogouPY+0x5f442c
111bfa74 105f1e3f SogouPY+0x5f1c5e
111bfa98 105f1d66 SogouPY+0x5f1e3f
111bfaa4 77d993c5 SogouPY+0x5f1d66
111bfac0 77db216f ntdll!RtlProcessFlsData+0x57
111bfb58 77db2403 ntdll!LdrShutdownThread+0x35
111bfb68 77dbf5ca ntdll!RtlExitUserThread+0x2a
111bfcb4 76c4344d ntdll!TppWorkerThread+0x846
111bfcc0 77d99802 kernel32!BaseThreadInitThunk+0xe
111bfd00 77d997d5 ntdll!__RtlUserThreadStart+0x70
111bfd18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 27: total counts = 1

ChildEBP RetAddr  
0028e6e8 6cffe87c KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0028e7c0 6d048a79 node+0x12ae87c
0028e7c4 001964f9 node+0x12f8a79
0028e7c8 0254c008 0x1964f9
0028e7cc 00000000 0x254c008

Top 28: total counts = 1

ChildEBP RetAddr  
0135e684 0135e760 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0135e698 0135e6a8 0x135e760
0135e69c fffffffe 0x135e6a8
0135e6a8 00000000 0xfffffffe

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
006ec008 663bdc08 node+0x2a2ee0b
006ec307 65747320 node+0xb2dc08
006ec30b 73207370 0x65747320
006ec313 61747320 UIAutomationCore!std::vector >::_Tidy+0x1c
006ec317 6f207472 0x61747320
006ec31b 616d2066 Windows_System_Launcher!`string'+0x62
006ec31f 6e696b72 0x616d2066
006ec323 62202c67 0x6e696b72
006ec327 65676769 0x62202c67
006ec32b 73207473 0x65676769
006ec353 6b72616d UIAutomationCore!UiaNodeTraverser::CheckRuntimeId+0x13
006ec363 72657661 0x6b72616d
006ec367 20656761 d3d11!ext-ms-win-rtcore-ntuser-dc-access-l1-1-0_NULL_THUNK_DATA_DLA  (d3d11+0x1e7661)
006ec36b 3d20756d 0x20656761
006ec36f 302e3120 0x3d20756d
006ec373 202c3030 0x302e3120
006ec377 72727563 0x202c3030
006ec387 20293839 ncrypt!I_GetRecipientIdString+0x83
006ec38f 657a696c 0x20293839
006ec393 636e6920 0x657a696c
006ec397 656d6572 0x636e6920
006ec39b 6c61746e 0x656d6572
006ec39f 72616d20 0x6c61746e
006ec3db 20362e37 d3d11!CContext::TID3D11DeviceContext_SetConstantBuffers_<2,5>+0xd0
006ec3ef 302e3020 0x20362e37
006ec3f3 20736d20 0x302e3020
006ec3f7 76612820 0x20736d20
006ec3fb 67617265 shell32!`string'+0x10
006ec3ff 756d2065 node+0x1d87265
006ec403 30203d20 gdi32full!IsHdcUsingType1Font+0x2
006ec407 3939392e 0x30203d20
006ec40b 7563202c 0x3939392e
006edfcb 00000000 sechost!CreateSystemCapabilitySecurityDescriptor+0x11069

Top 30: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
040df2a4 0db6b25c node+0xce6c1f
00000000 00000000 0xdb6b25c

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04b1f490 00000000 node+0xce6b94

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
1166f2f0 6d3d35c5 node+0x358b039
1166f564 6c4cd38c node+0x13a35c5
1166f588 0b1a7b40 node+0x49d38c
00000000 00000000 0xb1a7b40

Top 33: total counts = 1

ChildEBP RetAddr  
00efe5ec 777bd6ae KERNELBASE!RaiseException+0x62
00efe5f8 00000000 ntdll!RtlpAllocateHeapInternal+0x105e

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
10c2f9ec 6b1bedc6 node+0x12ae60a
10c2fa30 6a61ad43 node+0x12aedc6
10c2faa4 6b1dc728 node+0x70ad43
10c2fb64 6b1dbfdb node+0x12cc728
10c2fca4 6b1e056f node+0x12cbfdb
10c2fcf0 6b1e03ff node+0x12d056f
10c2fd18 774bfcc9 node+0x12d03ff
10c2fd28 77dc7c6e kernel32!BaseThreadInitThunk+0x19
10c2fd84 77dc7c3e ntdll!__RtlUserThreadStart+0x2f
10c2fd94 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 35: total counts = 1

ChildEBP RetAddr  
009ae7d4 009ae8b0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
009ae7e8 009ae7f8 0x9ae8b0
009ae7ec bff00000 0x9ae7f8
009ae7f8 00000000 0xbff00000

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cff4f4 70d58cc5 node+0x12ae60a
00cff594 6ea13961 node+0x2a18cc5
00cff608 6f6089e6 node+0x6d3961
00cff6d4 6f60875e node+0x12c89e6
00cff730 6f5e0ec3 node+0x12c875e
00cff76c 6f5e0acb node+0x12a0ec3
00cff7ac 6f5f23d2 node+0x12a0acb
00cff7f4 6f5f22e2 node+0x12b23d2
00cff838 6ea0bd42 node+0x12b22e2
00cff860 6ea0d47d node+0x6cbd42
00cff8a0 6e94ed6c node+0x6cd47d
00cff8fc 6e94f379 node+0x60ed6c
00cff920 6e94ea8a node+0x60f379
00cff9b8 77ceadce node+0x60ea8a
00cff9c4 00000000 ntdll!RtlAllocateHeap+0x3e

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
05d4fbc0 59137452 QQWubi+0x1272a6
05d4fbc8 765ff989 QQWubi+0x127452
05d4fbd8 77b57084 kernel32!BaseThreadInitThunk+0x19
05d4fc34 77b57054 ntdll!__RtlUserThreadStart+0x2f
05d4fc44 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 38: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd

Top 39: total counts = 1

03f7f1cc 6a4e4815 KERNELBASE!UnregisterWaitEx+0x1b
WARNING: Stack unwind information not available. Following frames may be wrong.
03f7f250 6948b24d node+0x12f4815
03f7f254 00000000 node+0x29b24d

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00bfc580 6ec2dc08 node+0x2a2ee0b
00bfc93b 6d20746e node+0xb2dc08
00bfc943 30302e30 CoreUIComponents!System::DateTime$R::UninitializeType+0x36
00bfc947 6c202935 0x30302e30
00bfc94b 6d20776f 0x6c202935
00bfc96b 61707320 CoreUIComponents!Cn::Process::Initialize+0x25f
00bfc96f 72206563 0x61707320
00bfc973 65757165 node+0x4106563
00bfc977 64657473 0x65757165
00bfc97b 34375b0a 0x64657473
00bfc97f 3a323337 0x34375b0a
00bfc983 39303330 0x3a323337
00bfc987 38453142 0x39303330
00bfc98b 3233205d 0x38453142
00bfc98f 35363232 0x3233205d
00bfc993 6d203538 0x35363232
00bfc997 4d203a73 CoreUIComponents!Microsoft::CoreUI::Navigation::Server::ClientRemoteTask$R::Microsoft__CoreUI__Navigation__Server__IRemoteClientTask_Impl::ChangeTaskType+0x28
00bfc9a3 2e372070 0x4d203a73
00bfc9a7 31282037 0x2e372070
00bfc9ab 29302e30 0x31282037
00bfc9af 203e2d20 0x29302e30
00bfc9b3 20362e37 0x203e2d20
00bfc9b7 2e303128 0x20362e37
00bfc9bb 4d202930 0x2e303128
00bfc9bf 33202c42 0x4d202930
00bfc9c3 20382e35 0x33202c42
00bfc9c7 2e30202f 0x20382e35
00bfc9cb 736d2031 0x2e30202f
00bfc9cf 2b282020 powrprof!api-ms-win-service-private-l1-1-0_NULL_THUNK_DATA_DLA  (powrprof+0x42031)
00bfc9d3 38373120 0x2b282020
00bfc9d7 6d20352e 0x38373120
00bfc9db 6e692073 CoreUIComponents!Microsoft::CoreUI::Navigation::Server::ClientRemoteTask$R::Microsoft__CoreUI__Navigation__Server__IRemoteClientTask_Impl::ChangeTaskType+0x1e
00bfc9e7 69732073 node+0x592073
00bfc9eb 2065636e 0x69732073
00bfc9ef 72617473 0x2065636e
00bfc9f3 666f2074 node+0x4517473
00bfc9f7 72616d20 0x666f2074
00bfc9fb 676e696b node+0x4516d20
00bfca0f 20302e35 d2d1!FillRoundedRectangleTessellator::GetPixelsFilled+0x1b
00bfca13 202c736d 0x20302e35
00bfca17 6c6c6177 0x202c736d
00bfca1b 656d6974 0x6c6c6177
00bfca1f 6e697320 0x656d6974
00bfca23 73206563 node+0x597320
00bfca27 74726174 0x73206563
00bfcabb 00000000 windows_storage!TryGetRestrictionAccessHKEY+0x154

Top 41: total counts = 1

ChildEBP RetAddr  
005fe684 005fe768 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
005fe698 005fe6a8 0x5fe768
005fe69c 012b84c8 0x5fe6a8
005fe6a8 00000000 0x12b84c8

Top 42: total counts = 1

ChildEBP RetAddr  
00d3e964 00d3ea48 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00d3e978 00d3e988 0xd3ea48
00d3e97c fffffffe 0xd3e988
00d3e988 00000000 0xfffffffe

Top 43: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
04f2fdf8 6f02e8da node+0xc6bd50
04f2fe50 705093e5 node+0xcee8da
04f2fe9c 760cfcc9 node+0x21c93e5
04f2feac 77a8809e kernel32!BaseThreadInitThunk+0x19
04f2ff08 77a8806e ntdll!__RtlUserThreadStart+0x2f
04f2ff18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 44: total counts = 1

05f4fd08 768141a8 ffi_bindings!ffi_call_win32+0x11
WARNING: Stack unwind information not available. Following frames may be wrong.
05f4fd1c 779a28c1 kernel32!BaseThreadInitThunk+0x28
05f4fd64 779a288f ntdll!__RtlUserThreadStart+0x2b
05f4fd74 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0031f6b4 673af16c node+0x6aba8e
0031f6f4 673cf812 node+0x129f16c
0031f760 673d89e6 node+0x12bf812
0031f82c 673d875e node+0x12c89e6
0031f888 673b0ec3 node+0x12c875e
0031f8c4 673b0acb node+0x12a0ec3
0031f904 673c23d2 node+0x12a0acb
0031f94c 673c22e2 node+0x12b23d2
0031f990 667dbd42 node+0x12b22e2
0031f9b8 667dd47d node+0x6cbd42
0031f9f8 6671ed6c node+0x6cd47d
0031fa54 6671f379 node+0x60ed6c
0031fa78 6671ea8a node+0x60f379
00423700 00000000 node+0x60ea8a

Top 46: total counts = 1

0017ef5c 6ca88c7a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0017efd4 6c3fb4e7 node+0x12f8c7a
0017f060 6c478bdf node+0xc6b4e7
0017f0b8 6c478de5 node+0xce8bdf
0017f144 6c4181be node+0xce8de5
0017f1b8 6c42859a node+0xc881be
0017f2b8 6c41a55d node+0xc9859a
0017f380 6c418f6c node+0xc8a55d
0017f384 0120c788 node+0xc88f6c
0017f388 6c2e9eac 0x120c788
0017f38c 04629ba0 node+0xb59eac
0017f390 0d8c0000 0x4629ba0
0017f394 0120c788 0xd8c0000
0017f398 0120c788 0x120c788
0017f39c 00aeb14c 0x120c788
0017f3a0 011f10f0 0xaeb14c
0017f3a4 0017f448 0x11f10f0
0017f3a8 6c2e893b 0x17f448
0017f448 6c2e7b35 node+0xb5893b
0017f4d4 6c2e7d4b node+0xb57b35
0017f564 6c2da4ca node+0xb57d4b
0017f5bc 6ca6e8b9 node+0xb4a4ca
0017f5f4 6ca4f812 node+0x12de8b9
0017f660 6ca589e6 node+0x12bf812
0017f72c 6ca5875e node+0x12c89e6
0017f788 6ca30ec3 node+0x12c875e
0017f7c4 6ca30acb node+0x12a0ec3
0017f804 6ca423d2 node+0x12a0acb
0017f84c 6ca422e2 node+0x12b23d2
0017f890 6be5bd42 node+0x12b22e2
0017f8b8 6be5d47d node+0x6cbd42
0017f8f8 6bd9ed6c node+0x6cd47d
0017f954 6bd9f379 node+0x60ed6c
0017f978 6bd9ea8a node+0x60f379
0017f97c 6ca1a300 node+0x60ea8a
0017f980 00170000 node+0x128a300
0017f984 00000000 0x170000

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0077c9f0 6886dc08 node+0x2a2f20b
0077ccef 38383232 node+0xb2dc08
0077ccf3 4132303a 0x38383232
0077ccf7 30343634 0x4132303a
0077ccfb 31205d30 0x30343634
0077ccff 39373232 0x31205d30
0077cd03 20313933 0x39373232
0077cd07 203a736d 0x20313933
0077cd0b 6b72614d 0x203a736d
0077cd0f 6577732d node+0x39e614d
0077cd13 37207065 0x6577732d
0077cd17 2820372e 0x37207065
0077cd1b 29372e39 0x2820372e
0077cd1f 203e2d20 0x29372e39
0077cd23 20362e37 0x203e2d20
0077cd27 372e3928 0x20362e37
0077cd2b 424d2029 0x372e3928
0077cd2f 3136202c 0x424d2029
0077cd33 2f20382e 0x3136202c
0077cd37 2e383220 0x2f20382e
0077cd3b 736d2039 0x2e383220
0077cd3f 2b282020 0x736d2039
0077cd43 38333120 0x2b282020
0077cd47 6d20312e 0x38333120
0077cd4b 6e692073 0x6d20312e
0077cd4f 20323120 0x6e692073
0077cd53 70657473 0x20323120
0077cd57 69732073 0x70657473
0077cd5b 2065636e node+0x19f2073
0077cd5f 72617473 0x2065636e
0077cd63 666f2074 0x72617473
0077cd67 72616d20 0x666f2074
0077cd6b 676e696b 0x72616d20
0077cd6f 6962202c 0x676e696b
0077cd73 73656767 node+0x18e202c
0077cd77 74732074 0x73656767
0077cd7b 36207065 wininet!WPP_c141c742e6383dc9ed9a863473e7d567_Traceguids+0x91740
0077cd7f 20302e33 0x36207065
0077cd83 202c736d 0x20302e33
0077cd87 6c6c6177 0x202c736d
0077cdb3 65676172 comctl32!wil::details::FeatureImpl<__WilFeatureTraits_Feature_MTestUx14>::ReportUsage+0x44
0077cdc3 72756320 0x65676172
0077cdc7 746e6572 0x72756320
0077cdcb 20756d20 wininet!WPP_c141c742e6383dc9ed9a863473e7d567_Traceguids+0x45c3e
0077cdcf 2e30203d 0x20756d20
0077cdd3 29363939 0x2e30203d
0077cdd7 6e696620 0x29363939
0077cddb 7a696c61 0x6e696620
0077cddf 6e692065 0x7a696c61
0077cde3 6d657263 0x6e692065
0077cde7 61746e65 0x6d657263
0077cdeb 32325b6c 0x61746e65
0077cdef 3a383832 0x32325b6c
0077cdf3 34413230 0x3a383832
0077cdf7 30303436 0x34413230
0077cdfb 3231205d 0x30303436
0077cdff 31303832 0x3231205d
0077ce03 6d203436 0x31303832
0077ce07 4d203a73 0x6d203436
0077ce0b 2d6b7261 0x4d203a73
0077ce0f 65657773 0x2d6b7261
0077ce13 2e372070 0x65657773
0077ce17 39282036 0x2e372070
0077ce1b 2029372e 0x39282036
0077ce1f 37203e2d 0x2029372e
0077ce23 2820362e 0x37203e2d
0077ce27 29372e39 0x2820362e
0077ce2b 2c424d20 0x29372e39
0077ce2f 2e313620 0x2c424d20
0077ce33 202f2032 0x2e313620
0077ce37 20302e30 0x202f2032
0077ce3b 2020736d 0x20302e30
0077ce3f 30202b28 0x2020736d
0077ce43 6d20332e 0x30202b28
0077ce47 6e692073 0x6d20332e
0077ce4b 73203320 0x6e692073
0077ce67 2c676e69 FWPUCLNT!FwppCopyCriteriaToRootConfigArray+0x9b
0077ce6f 74736567 0x2c676e69
0077ce73 65747320 wininet!WPP_c141c742e6383dc9ed9a863473e7d567_Traceguids+0x95c33
0077ce77 2e302070 0x65747320
0077ce7b 736d2032 0x2e302070
0077ce7f 6177202c 0x736d2032
0077ce83 69746c6c 0x6177202c
0077ce87 7320656d node+0x1a06c6c
0077ce8f 61747320 FWPUCLNT!FwppDeepCopyFromVerIndependent_FWPM_NET_EVENT_IPSEC_KERNEL_DROP0+0xf4
0077ce93 6f207472 0x61747320
0077ce97 616d2066 0x6f207472
0077ce9b 6e696b72 0x616d2066
0077ce9f 37382067 0x6e696b72
0077cea3 29736d20 0x37382067
0077cea7 76612820 0x29736d20
0077d2e3 00000000 shell32!CPinnedList::v_IsAcceptableTarget+0x2d0

Top 48: total counts = 1

ChildEBP RetAddr  
0052e5fc 00000000 KERNELBASE!RaiseException+0x64

Top 49: total counts = 1

ChildEBP RetAddr  
1b00f3ac 0d280081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
1b00f3e8 0d28351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1b00f8e8 0d284624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1b00f91c 0d2885a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1b00fa48 0d28917a rightsextension!CRegData::MonitorFunction+0x4b3
1b00fa68 0d288a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1b00fa70 0d39864a rightsextension!std::_Pad::_Call_func+0xa
1b00faa8 768e344d rightsextension!thread_start+0x58
1b00fab4 76f79802 kernel32!BaseThreadInitThunk+0xe
1b00faf4 76f797d5 ntdll!__RtlUserThreadStart+0x70
1b00fb0c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 50: total counts = 1

0018cbc3 736d2030 0x2e30202f
0018cbc7 2b282020 360Conf+0x22030
0018cbcb 302e3020 0x2b282020
0018cbcf 20736d20 0x302e3020
0018cbd3 32206e69 0x20736d20
0018cbd7 65747320 0x32206e69
0018cbdb 73207370 0x65747320
0018cbdf 65636e69 0x73207370
0018cbe3 61747320 0x65636e69
0018cbe7 6f207472 0x61747320
0018cbeb 616d2066 0x6f207472
0018cbef 6e696b72 0x616d2066
0018cbf3 62202c67 mscms!_CRT_INIT+0xff
0018cc03 20302e30 0x62202c67
0018cc07 202c736d 0x20302e30
0018cc0b 6c6c6177 0x202c736d
0018cc0f 656d6974 0x6c6c6177
0018cc13 6e697320 0x656d6974
0018cc17 73206563 mscms!RangeLMNTag+0x4
0018cc1b 74726174 0x73206563
0018cc1f 20666f20 0x74726174
0018cc23 6b72616d 0x20666f20
0018cc27 20676e69 0x6b72616d
0018cc2b 6d203331 0x20676e69
0018cc2f 28202973 0x6d203331
0018cc33 72657661 0x28202973
0018cc37 20656761 GdiPlus!FullTextImager::GdipLscbkGetRunStrikethroughInfo+0x5d
0018cc4f 3d20756d 0x20656761
0018cc53 302e3120 0x3d20756d
0018cc57 20293030 0x302e3120
0018cc5b 616e6966 0x20293030
0018cc5f 657a696c 0x616e6966
0018cc63 636e6920 0x657a696c
0018cc67 656d6572 0x636e6920
0018cc6b 6c61746e 0x656d6572
0018cc6f 72616d20 0x6c61746e
0018cc7f 5d384133 GdiPlus!OutputNativePostscript::OutputAscii85+0x77
0018cc8b 6d203637 0x5d384133
0018cc8f 4d203a73 0x6d203637
0018cc93 2d6b7261 0x4d203a73
0018cc97 65657773 0x2d6b7261
0018cc9b 2e372070 0x65657773
0018cc9f 31282037 0x2e372070
0018cca3 29302e30 0x31282037
0018d177 00000000 wpdshext!_SwapListItems+0x1e2