Analyzed 99 dump

Top 1: total counts = 9

ChildEBP RetAddr  
0019e45c 00000000 KERNELBASE!RaiseException+0x62

3122cbc874386ef9a7601dd3e4f6671c_000.dmp
51a15460e5868e5002759d8dba768046_000.dmp
c907ba7d99b107a06a137a8624777e3d_003.dmp
23dfa0efe774b269891e4f5ed0d93c0b_000.dmp
e924f1b812ebe6713cd108633e8e9bd7_001.dmp

Top 2: total counts = 9

ChildEBP RetAddr  
0020ea54 676be479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0020ea68 005fcff2 node+0x12ae479
0020ea6c 00000000 0x5fcff2

8bd0a098e224aa07e8a380d2e4c542e6_000.dmp
dee907527b41424b9f2f5c67faa76a06_000.dmp
7e44b6f276966385d3eb49cd0ad2aa0b_000.dmp
8bb8ffbd5e510ad83c22274ec9914b09_000.dmp
a755b9385a163ac7faca67b0e2c2f2cd_000.dmp

Top 3: total counts = 7

0a7afd5c 0f5caeed rightsmanager!RM_AutorunScan+0x176
0a7afe58 76bb343d ffi_bindings!ffi_call_win32+0x11
0a7afe64 772d9802 kernel32!BaseThreadInitThunk+0xe
0a7afea4 772d97d5 ntdll!__RtlUserThreadStart+0x70
0a7afebc 00000000 ntdll!_RtlUserThreadStart+0x1b

14639066484ed417d59de0c556973ef9_001.dmp
239d2c61712d2e7dd0e434e1f19b59d0_000.dmp
56728a4980ec3856360e41724674d8c2_000.dmp
7c4eb13032f5af7a0497408ff6267100_000.dmp
b5f3ff245f5c3a0412bf95cbc0e3d3df_000.dmp

Top 4: total counts = 6

05a3f8e4 53c2aeed rightsmanager!RM_AutorunScan+0x176
05a3f9e0 764efcc9 ffi_bindings!ffi_call_win32+0x11
05a3f9f0 76f182ae kernel32!BaseThreadInitThunk+0x19
05a3fa4c 76f1827e ntdll!__RtlUserThreadStart+0x2f
05a3fa5c 00000000 ntdll!_RtlUserThreadStart+0x1b

fbca75abc4180603d4587098de5a74fa_001.dmp
8cd4bc29a1bf881de063872c67430173_001.dmp
d4d7910bdcf2dfec647bf06343b2d797_000.dmp
6dfb822363bed094b9f43c0940229999_000.dmp
465d89a9e7422ac5cc5cf709fcc48286_000.dmp

Top 5: total counts = 4

0588fb2c 7b3daeed rightsmanager!RM_AutorunScan+0x176
0588fc28 76225d49 ffi_bindings!ffi_call_win32+0x11
0588fc38 77d4d1ab kernel32!BaseThreadInitThunk+0x19
0588fc90 77d4d131 ntdll!__RtlUserThreadStart+0x2b
0588fca0 00000000 ntdll!_RtlUserThreadStart+0x1b

d56691bd1444758aeecdc12f658639f0_000.dmp
d5359ebeab1641868a3fd69acbdf2790_000.dmp
a341fb97b29363eda9e42ab4b150b903_000.dmp
ac5697e7467a1ea95707003cf9096388_000.dmp

Top 6: total counts = 4

ChildEBP RetAddr  
003de88c 5604e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003de8a0 00193201 node+0x12ae479
003de8a4 00000000 0x193201

4c88167b3c6a4bea607a2de558467c7d_000.dmp
799711b788010574f06c0559b4a2c5be_000.dmp
7f44d4b4ca470a9b63bb3d16df466d7a_001.dmp
170571fc039c2bfc011c0576ec199073_000.dmp

Top 7: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

7c9253e3ff0144090f70a8fbb7f61b2c_000.dmp
fdc1a48aa6df9b44c6acce108d1f597b_000.dmp
50ce2d9414bc61fac5fe916e4edbf6f5_000.dmp
c94353f028f8e4c60e8da55db60c86c7_001.dmp

Top 8: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd

8a4bb7702b3fb84ac11c9e771e65870b_000.dmp
d2d4a446f82d36cfe113659dcb5f2e81_000.dmp
eec85b5344304c00b439bc21e434ee52_000.dmp
8280413dbc2be761fed52e1b0235816a_000.dmp

Top 9: total counts = 3

ChildEBP RetAddr  
04eeed78 7c22e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
04eeedb8 7c23738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04eef008 7c2312a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04eff650 7c22e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04eff6c8 7c267f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04eff89c 75ca5d49 rightsmanager!RM_AutorunScan+0x176
04eff8ac 773fd2fb kernel32!BaseThreadInitThunk+0x19
04eff904 773fd281 ntdll!__RtlUserThreadStart+0x2b
04eff914 00000000 ntdll!_RtlUserThreadStart+0x1b

0a9aae4bc8f2e3b5edf527daa25a28f9_000.dmp
8d82acd00ef6527160c6386482b78971_000.dmp
3cf6259315ddd45dc42577e4ac3ec9f8_000.dmp

Top 10: total counts = 3

ChildEBP RetAddr  
003ce99c 6e8de479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003ce9b0 005fcff0 node+0x12ae479
003ce9b4 00000000 0x5fcff0

9f07ad099befdeb98ca0059f92452090_000.dmp
d4228ed85d11a75ea4e72f3c9e555563_000.dmp
8583126fa57d5ae27568b97a3c2f4cce_000.dmp

Top 11: total counts = 3

ChildEBP RetAddr  
10a2f414 56110081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
10a2f450 5611351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
10a2f950 56114624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
10a2f984 561185a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
10a2fab0 5611917a rightsextension!CRegData::MonitorFunction+0x4b3
10a2fad0 56118a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
10a2fad8 5622864a rightsextension!std::_Pad::_Call_func+0xa
10a2fb10 74ed344d rightsextension!thread_start+0x58
10a2fb1c 77189802 kernel32!BaseThreadInitThunk+0xe
10a2fb5c 771897d5 ntdll!__RtlUserThreadStart+0x70
10a2fb74 00000000 ntdll!_RtlUserThreadStart+0x1b

8bb49ec3cb0191125dcb7672c94f69b5_000.dmp
1bdde33f32ea45bc094944a2853e10a1_000.dmp
808935d094e4631e8dd9fafa54d4957f_000.dmp

Top 12: total counts = 3

ChildEBP RetAddr  
1135f350 57310081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
1135f38c 5731351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1135f88c 57314624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1135f8c0 573185a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1135f9ec 5731917a rightsextension!CRegData::MonitorFunction+0x4b3
1135fa0c 57318a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1135fa14 5742864a rightsextension!std::_Pad::_Call_func+0xa
1135fa4c 766a338a rightsextension!thread_start+0x58
1135fa58 77129a02 kernel32!BaseThreadInitThunk+0xe
1135fa98 771299d5 ntdll!__RtlUserThreadStart+0x70
1135fab0 00000000 ntdll!_RtlUserThreadStart+0x1b

9dcf96d7e6f0b346b77a7295c9274772_000.dmp
d46440309dd7d58d790c39c6e8e4cb32_000.dmp
7ce38dc6bcea986ca3f706199ed29ae4_000.dmp

Top 13: total counts = 2

05dffccc 0f26aeed rightsmanager!RM_AutorunScan+0x176
05dffdc8 762f38f4 ffi_bindings!ffi_call_win32+0x11
05dffddc 77dd5de3 kernel32!BaseThreadInitThunk+0x24
05dffe24 77dd5dae ntdll!__RtlUserThreadStart+0x2f
05dffe34 00000000 ntdll!_RtlUserThreadStart+0x1b

bdfd515982fd54e643c252ccd880786f_000.dmp
e85aa436a6e080cd7b0baba1d6f15bb3_000.dmp

Top 14: total counts = 2

ChildEBP RetAddr  
056aee68 7966e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
056aeea8 7967738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
056af0f8 796712a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
056bf740 7966e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
056bf7b8 796a7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
056bf98c 7738fcc9 rightsmanager!RM_AutorunScan+0x176
056bf99c 774d82ae kernel32!BaseThreadInitThunk+0x19
056bf9f8 774d827e ntdll!__RtlUserThreadStart+0x2f
056bfa08 00000000 ntdll!_RtlUserThreadStart+0x1b

70b394b7866f9e47fa1f7268d7dbd632_000.dmp
34f9f1d8d91db29905647e5c6beabf60_000.dmp

Top 15: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010ff8b4 6a0e8cc5 node+0x12ae60a
010ff94c 67da3961 node+0x2a18cc5
010ff9c0 689989e6 node+0x6d3961
010ffa8c 6899875e node+0x12c89e6
010ffae8 68970ec3 node+0x12c875e
010ffb24 68970acb node+0x12a0ec3
010ffb64 689823d2 node+0x12a0acb
010ffbac 689822e2 node+0x12b23d2
010ffbf0 67d9bd42 node+0x12b22e2
010ffc18 67d9d47d node+0x6cbd42
010ffc58 67cded6c node+0x6cd47d
010ffcb4 67cdf379 node+0x60ed6c
010ffcd8 67cdea8a node+0x60f379
010ffd70 76f65dce node+0x60ea8a
010ffd7c 00000000 ntdll!RtlAllocateHeap+0x3e

3ec49f92828e58f47aaa13a87f58e4be_000.dmp
af1e929393add30dc03204da938d5d11_000.dmp

Top 16: total counts = 2

ChildEBP RetAddr  
053dee90 7a07e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
053deed0 7a08738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
053df120 7a0812a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
053ef768 7a07e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
053ef7e0 7a0b7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
053ef9b4 76cafa29 rightsmanager!RM_AutorunScan+0x176
053ef9c4 775d7a9e kernel32!BaseThreadInitThunk+0x19
053efa20 775d7a6e ntdll!__RtlUserThreadStart+0x2f
053efa30 00000000 ntdll!_RtlUserThreadStart+0x1b

8bee179d20e359cd1311b4a1bb118af6_000.dmp
b59c1e83c0016e5ae28c0663354dc816_000.dmp

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003cefcc 7755e0f3 node+0xb8c650
289bd791 051a3001 ntdll!RtlFreeHeap+0x105
289bd849 75000000 0x51a3001
289bd84d 050dd563 crypt32!ASN1Dec_Extensions+0x4
289bd85d 12000400 0x50dd563
289bd861 59000000 0x12000400
289bd865 591a3012 0x59000000
289bd869 801a3017 0x591a3012
289bd86d 02000009 0x801a3017
289bd871 d9000000 0x2000009
289bd875 8815c899 0xd9000000
289bd879 02001005 0x8815c899
289bd87d f5000000 0x2001005
289bd881 880588ad 0xf5000000
289bd885 0200200d 0x880588ad
289bd889 55000000 0x200200d
289bd88d 80058ac8 0x55000000
289bd891 02003001 0x80058ac8
289bd895 41000000 0x2003001
289bd899 031a3001 0x41000000
289bd89d 0e000300 0x31a3001
289bd8a1 59000000 0xe000300
289bd8a5 e11a3012 0x59000000
289bd8a9 f8180217 0xe11a3012
289bd8ad 02000009 0xf8180217
289bd8b1 c5000000 0x2000009
289bd8b5 800588b8 0xc5000000
289bd8b9 02001005 0x800588b8
289bd8bd a9000000 0x2001005
289bd8c1 800588b8 0xa9000000
289bd8c5 02002001 0x800588b8
289bd8c9 ad000000 0x2002001
289bd8cd e50dd567 0xad000000
289bd8d1 6d289bf2 0xe50dd567
289bd8d5 411a3006 0x6d289bf2
289bd8d9 031a3001 0x411a3006
289bd8dd 0e000300 0x31a3001
289bd8e1 59000000 0xe000300
289bd8e5 591a3012 0x59000000
289bd8e9 801a3017 0x591a3012
289bd8ed 02000009 0x801a3017
289bd8f1 d9000000 0x2000009
289bd8f5 8815c899 0xd9000000
289bd8f9 02001005 0x8815c899
289bd8fd f5000000 0x2001005
289bd901 880588ad 0xf5000000
289bd905 02002001 0x880588ad
289bd909 41000000 0x2002001
289bd90d 021a3001 0x41000000
289bd911 0a000200 0x21a3001
289bd915 59000000 0xa000200
289bd919 e11a3012 0x59000000
289bd91d f8180217 0xe11a3012
289bd921 02000005 0xf8180217
289bd925 95000000 0x2000005
289bd929 800588b8 0x95000000
289bd92d 02001001 0x800588b8
289bd931 41000000 0x2001001
289bd935 011a3001 0x41000000
289bd939 06000100 0x11a3001
289bd93d b5000000 0x6000100
289bd941 f912a21e 0xb5000000
289bd945 88058ac5 0xf912a21e
289bd949 02000001 0x88058ac5
289bd94d 05000000 0x2000001
289bd951 6d0dd402 0x5000000
289bd955 6d1a3006 0x6d0dd402
289bd959 211a3006 0x6d1a3006
289bd95d ed058b8b 0x211a3006
289bd961 25289bb8 0xed058b8b
289bd965 0112a1a0 0x25289bb8
289bd969 05153c3e 0x112a1a0
289bd96d 6d0dd402 0x5153c3e
289bd971 6d1a3006 0x6d0dd402
289bd975 211a3006 0x6d1a3006
289bd979 ed058b8f 0x211a3006
289bd97d 49289bb8 0xed058b8f
289bd981 c112a1a0 0x49289bb8
289bd985 d5153c41 0xc112a1a0
289bd989 6d0dd427 0xd5153c41
289bd98d 6d1a3006 0x6d0dd427
289bd991 4d1a3006 0x6d1a3006
289bd995 cd058ad0 0x4d1a3006
289bd999 ad289bb8 0xcd058ad0
289bd99d c112a194 0xad289bb8
289bd9a1 05153c41 0xc112a194
289bd9a5 6d0dd402 0x5153c41
289bd9a9 6d1a3006 0x6d0dd402
289bd9ad d51a3006 0x6d1a3006
289bd9b1 ad058bbf 0xd51a3006
289bd9b5 05289bb8 0xad058bbf
289bd9b9 0112a197 0x5289bb8
289bd9bd 9d153c3e 0x112a197
289bd9c1 201a3000 0x9d153c3e
289bd9c5 7d000000 0x201a3000
289bd9c9 02289bd7 0x7d000000
289bd9cd 41000000 0x2289bd7
289bd9d1 051a3001 0x41000000
289bd9d5 16000500 0x51a3001
289bd9d9 59000000 0x16000500
289bd9dd 511a3012 0x59000000
289bd9e1 3e1a3025 0x511a3012
289bd9e5 5d00000a 0x3e1a3025
289bd9e9 9d281002 0x5d00000a
289bd9ed 7e1a3028 0x9d281002
289bd9f1 95000002 0x7e1a3028
289bd9f5 2d281002 0x95000002
289bd9f9 a81a302e 0x2d281002
289bd9fd 0200000d 0xa81a302e
289bda01 51000000 0x200000d
289bda05 3e1a3026 0x51000000
289bda09 25000006 0x3e1a3026
289bda0d 1d281002 0x25000006
289bda11 a81a302e 0x1d281002
289bda15 02001011 0xa81a302e
289bda19 05000000 0x2001011
289bda1d c50dd583 0x5000000
289bda21 6d289bf2 0xc50dd583
289bda25 411a3006 0x6d289bf2
289bda29 061a3001 0x411a3006
289bda2d 1a000600 0x61a3001
289bda31 59000000 0x1a000600
289bda35 591a3012 0x59000000
289bda39 801a3017 0x591a3012
289bda3d 02000009 0x801a3017
289bda41 d9000000 0x2000009
289bda45 8815c899 0xd9000000
289bda49 02001015 0x8815c899
289bda4d f5000000 0x2001015
289bda51 880588ad 0xf5000000
289bda55 02002011 0x880588ad
289bda59 71000000 0x2002011
289bda5d 80074501 0x71000000
289bda61 02003005 0x80074501
289bda65 bd000000 0x2003005
289bda69 8805895a 0xbd000000
289bda6d 02004001 0x8805895a
289bda71 d9000000 0x2004001
289bda75 8805895a 0xd9000000
289bda79 0200500d 0x8805895a
289bda7d 41000000 0x200500d
289bda81 021a3001 0x41000000
289bda85 0a000200 0x21a3001
289bda89 59000000 0xa000200
0a000200 00000000 0x59000000

119ec4838a63e903799dc73246251718_001.dmp

Top 18: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
08c7f8a0 75dcfcc9 0x305d3
08c7f8b0 76fc7c5e kernel32!BaseThreadInitThunk+0x19
08c7f90c 76fc7c2e ntdll!__RtlUserThreadStart+0x2f
08c7f91c 00000000 ntdll!_RtlUserThreadStart+0x1b

b31454e96635edc9c4e6089214891c01_000.dmp

Top 19: total counts = 1

ChildEBP RetAddr  
0917ee28 0c33e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0917ee68 0c34738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0917f0b8 0c3412a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0918f700 0c33e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0918f778 0c377f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0918f94c 7676343d rightsmanager!RM_AutorunScan+0x176
0918f958 77209812 kernel32!BaseThreadInitThunk+0xe
0918f998 772097e5 ntdll!__RtlUserThreadStart+0x70
0918f9b0 00000000 ntdll!_RtlUserThreadStart+0x1b

6bae5edb75b4dca8f1662482db905cad_000.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
054bef54 7bb58686 rightsmanager!AutorunItem::AutorunItem+0x16
054befa4 7bb51b4f rightsmanager!std::vector >::_Emplace_reallocate+0x176
054cf5f0 7bb4e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11ef
054cf668 7bb87f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
054cf83c 77055d49 rightsmanager!RM_AutorunScan+0x176
054cf84c 7759d1ab kernel32!BaseThreadInitThunk+0x19
054cf8a4 7759d131 ntdll!__RtlUserThreadStart+0x2b
054cf8b4 00000000 ntdll!_RtlUserThreadStart+0x1b

1a2672588f70e64c2ee2a079ed09a182_000.dmp

Top 21: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
03a8f728 109c533b node+0x12f5573
03a8f754 1098f412 node+0x12f533b
03a8f7c0 109985e6 node+0x12bf412
03a8f88c 1099835e node+0x12c85e6
03a8f8e4 1097127a node+0x12c835e
03a8f91c 10970783 node+0x12a127a
03a8f960 10981fd2 node+0x12a0783
03a8f9a8 10981ee2 node+0x12b1fd2
03a8fa18 7683347d node+0x12b1ee2
03a8fa24 77759852 kernel32!BaseThreadInitThunk+0xe
03a8fa64 77759825 ntdll!__RtlUserThreadStart+0x70
03a8fa7c 00000000 ntdll!_RtlUserThreadStart+0x1b

480ce15e653a3372064e66c739aeb2fc_000.dmp

Top 22: total counts = 1

001fcdcf 73657571 0x65722065
001fcdd3 0a646574 GdiPlus!GdipCreateSolidFill+0x1042e
001fcdd7 3435325b 0xa646574
001fcddb 31303a30 0x3435325b
001fcddf 43383034 0x31303a30
001fcde3 205d3837 0x43383034
001fcde7 36343931 0x205d3837
001fcdeb 36353639 0x36343931
001fcdef 736d2037 0x36353639
001fcdf3 614d203a GdiPlus!GdipCreateSolidFill+0x8aef4
001fcdf7 732d6b72 0x614d203a
001fcdfb 70656577 0x732d6b72
001fcefb 756d2074 0x70656577
001fceff 30203d20 shell32!StgMakeUniqueName+0x2b1c
001fcf03 3131362e 0x30203d20
001fcf07 6f6c2029 0x3131362e
001fcf0b 656d2077 0x6f6c2029
001fcf0f 79726f6d 0x656d2077
001fcf13 746f6e20 0x79726f6d
001fcf17 63696669 0x746f6e20
001fcf1b 6f697461 0x63696669
001fcf1f 4347206e netprofm!_CTA2?AVlogic_errorstd+0x4e1
001fcf23 206e6920 0x4347206e
001fcf27 20646c6f 0x206e6920
001fcf2b 63617073 0x20646c6f
001fcf2f 65722065 0x63617073
001fcf33 73657571 0x65722065
001fcf37 0a646574 GdiPlus!GdipCreateSolidFill+0x1042e
001fcf3b 00000000 0xa646574

8b8489412a23876672704dcd783f98f8_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

7a04859a9f367f88eb7481f0f8a2701f_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
008fea64 008feb40 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
008fea78 008fea88 0x8feb40
008fea7c 029e0000 0x8fea88
008fea88 00000000 0x29e0000

7aafb74937833c30117e4fa083d74147_000.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
18f3f834 5a140081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
18f3f870 5a14351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
18f3fd70 5a144624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
18f3fda4 5a1485a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
18f3fed0 5a14917a rightsextension!CRegData::MonitorFunction+0x4b3
18f3fef0 5a148a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
18f3fef8 5a25864a rightsextension!std::_Pad::_Call_func+0xa
18f3ff30 774a7ba9 rightsextension!thread_start+0x58
18f3ff40 77afc3ab kernel32!BaseThreadInitThunk+0x19
18f3ff98 77afc32f ntdll!__RtlUserThreadStart+0x2b
18f3ffa8 00000000 ntdll!_RtlUserThreadStart+0x1b

bf5b197bbecf0a44df26e5015af2145d_000.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002af684 6bff8d6c node+0x12ae60a
002af6ec 69cb3961 node+0x2a18d6c
002af760 6a8a89e6 node+0x6d3961
002af82c 6a8a875e node+0x12c89e6
002af888 6a880ec3 node+0x12c875e
002af8c4 6a880acb node+0x12a0ec3
002af904 6a8923d2 node+0x12a0acb
002af94c 6a8922e2 node+0x12b23d2
002af990 69cabd42 node+0x12b22e2
002af9b8 69cad47d node+0x6cbd42
002af9f8 69beed6c node+0x6cd47d
002afa54 69bef379 node+0x60ed6c
002afa78 69beea8a node+0x60f379
002afa7c 6a86a300 node+0x60ea8a
002afa80 002a0000 node+0x128a300
002afa84 00000000 0x2a0000

adaecf898ed9c962cfa325d82c01cbb9_000.dmp

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff644 6f268d6c node+0x12ae60a
00aff6b4 6cf23961 node+0x2a18d6c
00aff728 6db189e6 node+0x6d3961
00aff7f4 6db1875e node+0x12c89e6
00aff850 6daf0ec3 node+0x12c875e
00aff88c 6daf0acb node+0x12a0ec3
00aff8cc 6db023d2 node+0x12a0acb
00aff914 6db022e2 node+0x12b23d2
00aff958 6cf1bd42 node+0x12b22e2
00aff980 6cf1d47d node+0x6cbd42
00aff9c0 6ce5ed6c node+0x6cd47d
00affa1c 6ce5f379 node+0x60ed6c
00affa40 6ce5ea8a node+0x60f379
00affae0 773ec73e node+0x60ea8a
00affaec 00affb5c ntdll!RtlAllocateHeap+0x3e
00000000 00000000 0xaffb5c

8b3507279d70c1c861bb7071631365a7_000.dmp

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003bf434 6ef78d6c node+0x12ae60a
003bf4a4 6cc33961 node+0x2a18d6c
003bf518 6d8289e6 node+0x6d3961
003bf5e4 6d82875e node+0x12c89e6
003bf640 6d800ec3 node+0x12c875e
003bf67c 6d800acb node+0x12a0ec3
003bf6bc 6d8123d2 node+0x12a0acb
003bf704 6d8122e2 node+0x12b23d2
003bf748 6cc2bd42 node+0x12b22e2
003bf770 6cc2d47d node+0x6cbd42
003bf7b0 6cb6ed6c node+0x6cd47d
003bf80c 6cb6f379 node+0x60ed6c
003bf830 6cb6ea8a node+0x60f379
003bf834 6d7ea300 node+0x60ea8a
003bf838 003b0000 node+0x128a300
003bf83c 00000000 0x3b0000

19ec1744a9cfc5678bf8374c82abc982_000.dmp

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
008fe7c8 1030e87c KERNELBASE+0x13d6e2
008fe8a0 10358a79 node+0x12ae87c
008fe8a4 005fcff0 node+0x12f8a79
008fe8a8 02c161d8 0x5fcff0
008fe8ac 00000000 0x2c161d8

755cd524cd8b8855a5410f8c24ae54fe_000.dmp

Top 30: total counts = 1

ChildEBP RetAddr  
085aed40 0f34e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
085aed80 0f35738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
085aefd0 0f3512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
085bf618 0f34e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
085bf690 0f387f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
085bf864 76f6343d rightsmanager!RM_AutorunScan+0x176
085bf870 776e9812 kernel32!BaseThreadInitThunk+0xe
085bf8b0 776e97e5 ntdll!__RtlUserThreadStart+0x70
085bf8c8 00000000 ntdll!_RtlUserThreadStart+0x1b

2871cab5341cceeb511ec2b286e5d486_000.dmp

Top 31: total counts = 1

ChildEBP RetAddr  
059eef58 0f5ee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
059eef98 0f5f738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
059ef1e8 0f5f12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
059ff830 0f5ee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
059ff8a8 0f627f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
059ff984 059ff994 rightsmanager!RM_AutorunScan+0x176
WARNING: Frame IP not in any known module. Following frames may be wrong.
059ffa88 77359802 0x59ff994
059ffac8 773597d5 ntdll!__RtlUserThreadStart+0x70
059ffae0 00000000 ntdll!_RtlUserThreadStart+0x1b

7c1c09de84c10b8dda7582372a98caeb_000.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
004ff2c4 6abb8d6c node+0x12ae60a
004ff32c 68873961 node+0x2a18d6c
004ff3a0 694689e6 node+0x6d3961
004ff46c 6946875e node+0x12c89e6
004ff4c8 69440ec3 node+0x12c875e
004ff504 69440acb node+0x12a0ec3
004ff544 694523d2 node+0x12a0acb
004ff58c 694522e2 node+0x12b23d2
004ff5d0 6886bd42 node+0x12b22e2
004ff5f8 6886d47d node+0x6cbd42
004ff638 687aed6c node+0x6cd47d
004ff694 687af379 node+0x60ed6c
004ff6b8 687aea8a node+0x60f379
004ff6bc 6942a300 node+0x60ea8a
004ff6c0 004f0000 node+0x128a300
004ff6c4 00000000 0x4f0000

25c4518c363645e50a35390d2b383cf3_000.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
00f5e3f4 00f5e4d8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f5e408 00f5e418 0xf5e4d8
00f5e40c 00ba0000 0xf5e418
00f5e418 00000000 0xba0000

b22fb93ef590949d923ebf2bffa336b0_000.dmp

Top 34: total counts = 1

ChildEBP RetAddr  
008fe284 008fe360 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
008fe298 008fe2a8 0x8fe360
008fe29c 00000000 0x8fe2a8

0b4d44d5ed6792859681eeedd87ef285_000.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
087eec68 7baee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
087eeca8 7baf738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
087eeef8 7baf12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
087ff540 7baee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
087ff5b8 7bb27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
087ff78c 75e26b89 rightsmanager!RM_AutorunScan+0x176
087ff79c 77d28f9f kernel32!BaseThreadInitThunk+0x19
087ff7f4 77d28f6d ntdll!__RtlUserThreadStart+0x2b
087ff804 00000000 ntdll!_RtlUserThreadStart+0x1b

91ccb5188be26b7ba45feec97e4e5aa9_000.dmp

Top 36: total counts = 1

07caf8a4 621244cc kernel32!RegisterWaitForSingleObject+0x3d
WARNING: Stack unwind information not available. Following frames may be wrong.
07caf8c0 6212459c node+0x12f44cc
07caf8c4 00000000 node+0x12f459c

ba9351b9c4db3db58740f274e775ebff_000.dmp

Top 37: total counts = 1

ChildEBP RetAddr  
0113ea14 0113eaf0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0113ea28 0113ea38 0x113eaf0
0113ea2c 03590000 0x113ea38
0113ea38 00000000 0x3590000

df753133864cc9ec530e0c7c0fa61430_000.dmp

Top 38: total counts = 1

0093e0e8 5d31e6d1 ffi_bindings!FFI::FFI::FinishAsyncFFICall+0x18c
0093e16c 75ed8173 node+0x2f3e6d1
0093e1cc 75ed8106 gdi32full!wil::details::ReportUsageToServiceDirect+0x3d
0093e1f8 75ed8b03 gdi32full!wil::details::ReportUsageToService+0x2d
0093e234 75ed8e30 gdi32full!wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_gdi_leak_tracking>::ReportUsage+0x6a
0093e264 75af5955 gdi32full!wil::details::FeatureImpl<__WilFeatureTraits_Feature_Servicing_gdi_leak_tracking>::__private_IsEnabled+0x33
0093e274 71bbc167 gdi32!DeleteObject+0x45
0093e2b0 71bbdaa4 comctl32!DirectUI::HWNDHost::ApplySinkRegion+0xe9
0093e304 71bbca48 comctl32!DirectUI::HWNDHost::SyncRect+0x194
0093e314 71b9c5d0 comctl32!DirectUI::HWNDHost::MessageCallback+0x48
0093e644 77ba4d04 comctl32!DirectUI::Element::_DisplayNodeCallback+0x40
00ab4f08 00a71b9c ntdll!RtlpFreeActivationContextStackFrame+0xbb
00000000 00000000 0xa71b9c

fd1c96d0a1601056e103083751d41d0d_000.dmp

Top 39: total counts = 1

161fe754 50ef8d97 kernel32!GetProcAddressStub+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
161fe760 13892b5c 360WebIdentify+0x8d97
161fe764 13892a60 0x13892b5c
161fe768 00000000 0x13892a60

f06d7c4baf0d779ad48232a6594517e6_000.dmp

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0096f17c 5c10202a 0x80006a80
00000000 00000000 node+0x252202a

4dd5a6b3fe6970e7dd26ed2c791e4245_000.dmp

Top 41: total counts = 1

0038f300 69508bf3 ntdll!RtlAllocateHeap+0x206
WARNING: Stack unwind information not available. Following frames may be wrong.
0038f338 6867b95f node+0x12f8bf3
0038f39c 77d3e434 node+0x46b95f
0038f440 77d3e434 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
0038f57c 75c614bd ntdll!RtlpLowFragHeapAllocFromContext+0xaec
0038f590 021e9d48 kernel32!HeapFree+0x14
0038f5bc 00000000 0x21e9d48

fc0d813a3f7943ad093e18dd208f0802_000.dmp

Top 42: total counts = 1

00d7d11b 63202c30 0x30302e31
00d7d11f 65727275 SogouTSF+0x142c30
00d7d123 6d20746e 0x65727275
00d7d1f3 6f697461 UIAutomationCore!CWindowPattern::get_CurrentIsTopmost+0x5e
00d7d1ff 20646c6f node+0x2367461
00d7d203 63617073 0x20646c6f
00d7d207 65722065 0x63617073
00d7d20b 73657571 0x65722065
00d7d227 00000000 windows_storage!CShellItemEnum::Skip+0x31

481b53645334ba2dc16b7396dc98caf0_000.dmp

Top 43: total counts = 1

ChildEBP RetAddr  
00efe4b4 00efe598 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efe4c8 00efe4d8 0xefe598
00efe4cc c0000017 0xefe4d8
00efe4d8 00000000 0xc0000017

6b380ed9c0f9214001016cc1acce4740_000.dmp

Top 44: total counts = 1

ChildEBP RetAddr  
010fe944 010fea28 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
010fe958 010fe968 0x10fea28
010fe95c c0000017 0x10fe968
010fe968 00000000 0xc0000017

faf31239b5f2b630ad782c2f2876a490_000.dmp

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0025cda8 638adc08 node+0x2a2f20b
0025d0a7 614d203a node+0xb2dc08
0025d0ab 732d6b72 0x614d203a
0025d0af 70656577 0x732d6b72
0025d0b3 2e303120 0x70656577
0025d0b7 31282034 0x2e303120
0025d0bb 29302e32 0x31282034
0025d0bf 203e2d20 0x29302e32
0025d0c3 332e3031 0x203e2d20
0025d0c7 32312820 0x332e3031
0025d0cb 2029302e 0x32312820
0025d0cf 202c424d 0x2029302e
0025d0d3 20392e36 0x202c424d
0025d0d7 2e30202f 0x20392e36
0025d0db 736d2030 0x2e30202f
0025d0df 61282020 0x736d2030
0025d0e3 61726576 0x61282020
0025d0e7 6d206567 0x61726576
0025d0eb 203d2075 0x6d206567
0025d0ef 39392e30 0x203d2075
0025d0f3 63202c39 0x39392e30
0025d0f7 65727275 node+0x482c39
0025d0fb 6d20746e node+0x29a7275
0025d0ff 203d2075 0x6d20746e
0025d103 30302e30 0x203d2075
0025d107 6c202934 0x30302e30
0025d10b 6d20776f 0x6c202934
0025d10f 726f6d65 0x6d20776f
0025d113 6f6e2079 0x726f6d65
0025d117 69666974 0x6f6e2079
0025d11b 69746163 0x69666974
0025d11f 47206e6f 0x69746163
0025d123 6e692043 0x47206e6f
0025d127 646c6f20 0x6e692043
0025d12b 61707320 node+0x1946f20
0025d12f 72206563 0x61707320
0025d133 65757165 0x72206563
0025d137 64657473 node+0x29d7165
0025d13b 30325b0a node+0x18d7473
0025d13f 3a303432 0x30325b0a
0025d143 38433030 0x3a303432
0025d147 30424638 0x38433030
0025d14b 3431205d 0x30424638
0025d14f 30373432 0x3431205d
0025d153 20303634 0x30373432
0025d157 203a736d 0x20303634
0025d15b 6b72614d 0x203a736d
0025d15f 6577732d 0x6b72614d
0025d163 31207065 node+0x29f732d
0025d167 20382e30 0x31207065
0025d16b 2e323128 0x20382e30
0025d16f 2d202930 0x2e323128
0025d173 3031203e 0x2d202930
0025d177 2820342e 0x3031203e
0025d17b 302e3231 0x2820342e
0025d17f 424d2029 0x302e3231
0025d183 3838202c 0x424d2029
0025d187 20322e30 0x3838202c
0025d18b 2e30202f 0x20322e30
0025d18f 736d2030 0x2e30202f
0025d193 61282020 0x736d2030
0025d197 61726576 0x61282020
0025d19b 6d206567 0x61726576
0025d19f 203d2075 0x6d206567
0025d1a3 38392e30 0x203d2075
0025d1a7 63202c39 0x38392e30
0025d1ab 65727275 node+0x482c39
0025d1af 6d20746e node+0x29a7275
0025d1b3 203d2075 0x6d20746e
0025d1b7 38392e30 0x203d2075
0025d1bb 6c202936 0x38392e30
0025d1bf 6d20776f 0x6c202936
0025d1c3 726f6d65 0x6d20776f
0025d1c7 6f6e2079 0x726f6d65
0025d1cb 69666974 0x6f6e2079
0025d1cf 69746163 0x69666974
0025d1d3 47206e6f 0x69746163
0025d1d7 6e692043 0x47206e6f
0025d1db 646c6f20 0x6e692043
0025d1df 61707320 node+0x1946f20
0025d1e3 72206563 0x61707320
0025d1e7 65757165 0x72206563
0025d1eb 64657473 node+0x29d7165
0025d1ef 30325b0a node+0x18d7473
0025d1f3 3a303432 0x30325b0a
0025d1f7 38433030 0x3a303432
0025d1fb 30424638 0x38433030
0025d1ff 3431205d 0x30424638
0025d203 30373432 0x3431205d
0025d207 20343834 0x30373432
0025d20b 203a736d 0x20343834
0025d20f 6b72614d 0x203a736d
0025d213 6577732d 0x6b72614d
0025d217 31207065 node+0x29f732d
0025d21b 20342e30 0x31207065
0025d21f 2e323128 0x20342e30
0025d223 2d202930 0x2e323128
0025d227 3031203e 0x2d202930
0025d22b 2820332e 0x3031203e
0025d22f 302e3231 0x2820332e
0025d233 424d2029 0x302e3231
0025d237 3332202c 0x424d2029
0025d23b 2f20382e 0x3332202c
0025d23f 302e3020 0x2f20382e
0025d243 20736d20 0x302e3020
0025d247 76612820 0x20736d20
0025d38b 00000000 comdlg32!GetFontStylesAndSizes+0x284

6380a2f6f4ee8b87ef280e7c0f397932_000.dmp

Top 46: total counts = 1

ChildEBP RetAddr  
0614f22c 041b91a4 rightsmanager!std::basic_string,std::allocator >::basic_string,std::allocator >+0xc
0614f258 041b1b3e rightsmanager!AutorunItem::AutorunItem+0x34
0615f8a0 041ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x11de
0615f918 041e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0615faec 75595d49 rightsmanager!RM_AutorunScan+0x176
0615fafc 7719d1ab kernel32!BaseThreadInitThunk+0x19
0615fb54 7719d131 ntdll!__RtlUserThreadStart+0x2b
0615fb64 00000000 ntdll!_RtlUserThreadStart+0x1b

f41139e9fd40a5595932801e8549ff3f_000.dmp

Top 47: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0034cca0 669ddc08 node+0x2a2f20b
0034cf9f 2d6b7261 node+0xb2dc08
0034cfa3 65657773 0x2d6b7261
0034cfa7 30312070 propsys!`string'+0x551f
0034cfab 2820322e 0x30312070
0034cfaf 302e3231 0x2820322e
0034cfb3 3e2d2029 0x302e3231
0034cfb7 2e303120 0x3e2d2029
0034cfbb 31282032 0x2e303120
0034cfbf 29332e32 0x31282032
0034cfc3 2c424d20 0x29332e32
0034cfc7 2e333420 0x2c424d20
0034cfcb 202f2037 0x2e333420
0034cfcf 20302e30 0x202f2037
0034cfd3 2020736d 0x20302e30
0034cfd7 65766128 0x2020736d
0034eed3 00000000 dbghelp!FindDbg+0x39

74065a9cecf679196875aca43caedb44_000.dmp

Top 48: total counts = 1

ChildEBP RetAddr  
006fe8e4 006fe9c8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe8f8 006fe908 0x6fe9c8
006fe8fc c0000017 0x6fe908
006fe908 00000000 0xc0000017

d79338c36996bb9586a996fa11ada8c4_000.dmp