Analyzed 69 dump

Top 1: total counts = 7

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

14bbd2166bb13861c7cfa46530f46b2a_000.dmp
2554f8c71ebb522d5c06de1089620cc7_000.dmp
81f6ef77a73688d9f8e3a2c5b0ef9abd_000.dmp
3422fd1df3ce390466a314c4473877d8_000.dmp
d641826690aba45ca65f48a34f5673e5_000.dmp

Top 2: total counts = 7

ChildEBP RetAddr  
00cfeacc 00000000 KERNELBASE!RaiseException+0x62

8e712583562e27315f0ac6ecad17c857_000.dmp
14277f130274ab108fb9ecc25473f573_000.dmp
5eb3cb9b6d62653a429913600a51a6aa_000.dmp
83c18bce353aea9112a04a4c3561f891_001.dmp
a0bd91af610129aacbb99a790c77f01d_000.dmp

Top 3: total counts = 5

06cdf974 56f0aeed rightsmanager!RM_AutorunScan+0x176
06cdfa70 773e336a ffi_bindings!ffi_call_win32+0x11
06cdfa7c 77ab9902 kernel32!BaseThreadInitThunk+0xe
06cdfabc 77ab98d5 ntdll!__RtlUserThreadStart+0x70
06cdfad4 00000000 ntdll!_RtlUserThreadStart+0x1b

1fa09d6c908b50c8fc5551edb3800411_000.dmp
4a28fc7730198609995cebf0d2d73b06_000.dmp
a30baced14e715faab76a74fefce216d_000.dmp
7a243ac0c80a7aff95346fd7e7ac79ae_000.dmp
702a77d6ac7b867f883a7721bb9824ff_000.dmp

Top 4: total counts = 4

ChildEBP RetAddr  
0822eed8 0fcce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0822ef18 0fcd738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0822f168 0fcd12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0823f7b0 0fcce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0823f828 0fd07f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0823f9fc 765f343d rightsmanager!RM_AutorunScan+0x176
0823fa08 76f59812 kernel32!BaseThreadInitThunk+0xe
0823fa48 76f597e5 ntdll!__RtlUserThreadStart+0x70
0823fa60 00000000 ntdll!_RtlUserThreadStart+0x1b

6f7314f4c4c3a065312679e44e111c9a_000.dmp
e473361333e7a36dcbaae56b85cb9de0_000.dmp
2d5035190f4d0db445555d2080aad831_000.dmp
4bbe02704d153d362ee089138ff7069b_000.dmp

Top 5: total counts = 4

0628f994 728caeed rightsmanager!RM_AutorunScan+0x176
0628fa90 766afcc9 ffi_bindings!ffi_call_win32+0x11
0628faa0 77cb7c6e kernel32!BaseThreadInitThunk+0x19
0628fafc 77cb7c3e ntdll!__RtlUserThreadStart+0x2f
0628fb0c 00000000 ntdll!_RtlUserThreadStart+0x1b

695ff46e7a98a1fe92d444add046b2d2_000.dmp
108a81924eb2de473b22715897964b49_000.dmp
e8490b75b4de4c6b508e7d4200bc7d5c_000.dmp
4e9d34d1fcd25ed6277c574aeeec0c9c_000.dmp

Top 6: total counts = 4

ChildEBP RetAddr  
003ae494 5d49e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
003ae4a8 005fcff2 node+0x12ae479
003ae4ac 00000000 0x5fcff2

56d4f3dbb84e7753173b3185383869e5_000.dmp
2889d2387131b109a8e8dba9b3d4654a_000.dmp
74cf95ea1a680df149467887ef79b0cf_000.dmp
0a2d10bc3a2ae4606d0a895924cca2d4_000.dmp

Top 7: total counts = 3

05cdf85c 054faeed rightsmanager!RM_AutorunScan+0x176
05cdf958 762e5d49 ffi_bindings!ffi_call_win32+0x11
05cdf968 77ddd09b kernel32!BaseThreadInitThunk+0x19
05cdf9c0 77ddd021 ntdll!__RtlUserThreadStart+0x2b
05cdf9d0 00000000 ntdll!_RtlUserThreadStart+0x1b

361c73d0b732d36e60b361f2b3ef3314_000.dmp
af438cda0fdf4f90c9f91fef74fed21c_000.dmp
fc6dd29d7a7046ece0c48e58802450b9_000.dmp

Top 8: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

22bd9b7633b110c085dbf30fd37cf626_000.dmp
309e3099ff7fd6b5eddee8147092106b_000.dmp

Top 9: total counts = 2

ChildEBP RetAddr  
05d0f258 7c08e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05d0f298 7c09738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05d0f4e8 7c0912a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05d1fb30 7c08e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05d1fba8 7c0c7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05d1fd7c 7543fcc9 rightsmanager!RM_AutorunScan+0x176
05d1fd8c 779082ae kernel32!BaseThreadInitThunk+0x19
05d1fde8 7790827e ntdll!__RtlUserThreadStart+0x2f
05d1fdf8 00000000 ntdll!_RtlUserThreadStart+0x1b

d4c4f9774c4f9e8e92b5c00fb53537e1_000.dmp
ef5f621533695c5c3930a60678dd76c4_000.dmp

Top 10: total counts = 2

ChildEBP RetAddr  
0022ea24 6e5ae479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0022ea38 00193201 node+0x12ae479
0022ea3c 00000000 0x193201

e2ca15fcbbade533185031c8fdec755e_000.dmp
5855a8d681107138e8581331d97b627c_000.dmp

Top 11: total counts = 2

ChildEBP RetAddr  
0697ecf0 5a99e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0697ed30 5a9a738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0697ef80 5a9a12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0698f5c8 5a99e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0698f640 5a9d7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0698f814 75365d49 rightsmanager!RM_AutorunScan+0x176
0698f824 778ed1ab kernel32!BaseThreadInitThunk+0x19
0698f87c 778ed131 ntdll!__RtlUserThreadStart+0x2b
0698f88c 00000000 ntdll!_RtlUserThreadStart+0x1b

2b3d41cdad0743ec92a3fa3ac6211e1c_000.dmp
07c015ee42e1d73b87d3e1875e736d89_000.dmp

Top 12: total counts = 2

ChildEBP RetAddr  
066ef130 6790e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
066ef170 6791738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
066ef3c0 679112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
066ffa08 6790e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
066ffa80 67947f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
066ffc54 755d5d49 rightsmanager!RM_AutorunScan+0x176
066ffc64 76fbd2fb kernel32!BaseThreadInitThunk+0x19
066ffcbc 76fbd281 ntdll!__RtlUserThreadStart+0x2b
066ffccc 00000000 ntdll!_RtlUserThreadStart+0x1b

cddeb83c656754b19a939f556698ae1e_000.dmp
82e353a837d46895f9f04e0bd6c0173e_000.dmp

Top 13: total counts = 2

ChildEBP RetAddr  
00efe454 00000000 KERNELBASE!RaiseException+0x64

0f872fd943cb80d6a062a1687a03ce81_000.dmp
87b7c850f0465735b7685948fe5b537e_000.dmp

Top 14: total counts = 1

070cdad0 79ddcab0 rightsextension!CHttpTaskAdapterGet::OnHttpStatus+0x13c
WARNING: Stack unwind information not available. Following frames may be wrong.
070cdb28 00000000 NetBridge+0xcab0

626a659e90d0dd38a55438949d522824_000.dmp

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ec948 6d86dc08 node+0x2a2f20b
002ecc47 6d203034 node+0xb2dc08
002ecc4b 4d203a73 node+0x4c3034
002ecc4f 2d6b7261 0x4d203a73
002ecc53 65657773 0x2d6b7261
002ecc57 30312070 0x65657773
002ecc5b 2820342e 0x30312070
002ecc5f 332e3231 0x2820342e
002ecc63 3e2d2029 0x332e3231
002ecc67 2e303120 0x3e2d2029
002ecc6b 31282034 0x2e303120
002ecc6f 29332e32 0x31282034
002ecc73 2c424d20 0x29332e32
002ecc77 342e3820 0x2c424d20
002ecc7b 30202f20 0x342e3820
002ecc7f 6d20302e 0x30202f20
002ecc83 28202073 node+0x4c302e
002ecc87 72657661 0x28202073
002ecc8b 20656761 0x72657661
002ecc8f 3d20756d 0x20656761
002ecc93 392e3020 0x3d20756d
002ecc97 202c3939 0x392e3020
002ecc9b 72727563 0x202c3939
002eccb3 6f6d656d ncrypt!SPPkcs8IsKeyExportable+0x6cf
002eccc7 69204347 node+0x299656d
002ecccb 6c6f206e 0x69204347
002ecccf 70732064 0x6c6f206e
002eccd3 20656361 node+0x39f2064
002eccd7 75716572 0x20656361
002ecd33 2020736d wininet!InternalFtpFindFirstFileA+0x205
002ecd53 20756d20 0x2020736d
002ecd57 2e30203d 0x20756d20
002ecd5b 29393939 0x2e30203d
002ecd5f 776f6c20 0x29393939
002ecd63 6d656d20 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xe6c20)
002ecd67 2079726f node+0x916d20
002ecd6b 69746f6e 0x2079726f
002ecd6f 61636966 0x69746f6e
002ecd73 6e6f6974 0x61636966
002ecd77 20434720 node+0x19b6974
002ecd7b 6f206e69 0x20434720
002ecd7f 7320646c node+0x24c6e69
002ecd83 65636170 0x7320646c
002ecd87 71657220 0x65636170
002ecd8b 74736575 0x71657220
002ecd8f 5b0a6465 0x74736575
002ecd93 34323732 0x5b0a6465
002ecd97 3032303a 0x34323732
002ecd9b 44324233 0x3032303a
002ecd9f 37205d38 0x44324233
002ecda3 33373030 0x37205d38
002ecda7 20343936 0x33373030
002ecdab 203a736d 0x20343936
002ecdaf 6b72614d 0x203a736d
002ecdb3 6577732d 0x6b72614d
002ecdb7 31207065 0x6577732d
002ecdbb 20342e30 0x31207065
002ecdbf 2e323128 0x20342e30
002ecdc3 2d202933 0x2e323128
002ecdc7 3031203e 0x2d202933
002ecdcb 2820342e 0x3031203e
002ecdcf 332e3231 0x2820342e
002ecdd3 424d2029 0x332e3231
002ecdd7 3131202c 0x424d2029
002ecddb 2f20342e 0x3131202c
002ecddf 302e3020 0x2f20342e
002ecde3 20736d20 0x302e3020
002ecde7 76612820 0x20736d20
002ecdeb 67617265 shell32!wkscli_NULL_THUNK_DATA_DLN+0x2f92
002ecdef 756d2065 0x67617265
002ece33 63617073 wininet!CAppCacheManifest::InternalParseManifest+0x85
002ece3f 0a646574 0x63617073
002ece43 00000000 0xa646574

a1bc8715cf5fc0c681d8e984c7f83dd2_000.dmp

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
010fcb48 60eadc08 node+0x2a2f20b
010fce47 4d203a73 node+0xb2dc08
010fce4b 2d6b7261 0x4d203a73
010fce4f 65657773 0x2d6b7261
010fce53 30312070 0x65657773
010fce57 2820332e 0x30312070
010fce5b 302e3231 0x2820332e
010fce5f 3e2d2029 0x302e3231
010fce63 2e303120 0x3e2d2029
010fce67 31282033 0x2e303120
010fce6b 29302e32 0x31282033
010fce6f 2c424d20 0x29302e32
010fce73 32303120 0x2c424d20
010fce77 20362e30 0x32303120
010fce7b 2e30202f 0x20362e30
010fce7f 736d2030 0x2e30202f
010fce83 61282020 0x736d2030
010fce87 61726576 node+0xf02020
010fce8b 6d206567 node+0x13a6576
010fce8f 203d2075 iertutil!`string'+0x57
010fce93 37392e30 0x203d2075
010fce97 63202c35 0x37392e30
010fce9b 65727275 node+0x2e82c35
010fce9f 6d20746e 0x65727275
010fcea3 203d2075 iertutil!`string'+0x26
010fcea7 30302e30 0x203d2075
010fceab 6c202931 0x30302e30
010fceaf 6d20776f 0x6c202931
010fceb3 726f6d65 iertutil!`string'+0x4f
6d20776f 7461706d d3d11!_tlgWriteTemplate::Write<_tlgWrapperByVal<4>,_tlgWrapperByVal<1>,_tlgWrapperByVal<4>,_tlgWrapperByVal<4>,_tlgWrapperByRef<8>,_tlgWrapperByVal<4> >+0x68
6d207793 25656c69 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x21706d)
6d207797 7463415c 0x25656c69
6d20779b 58657669 0x7463415c
6d20779f 6d6f4320 0x58657669
6d2077a3 69746170 0x6d6f4320
6d2077a7 696c6962 0x69746170
6d2077ab 7b5c7974 0x696c6962
6d2077af 37313146 0x7b5c7974
6d2077b3 42313338 0x37313146
6d2077b7 3530432d 0x42313338
6d2077bb 31312d32 0x3530432d
6d2077bf 422d3164 0x31312d32
6d2077c3 2d304331 0x422d3164
6d2077c7 30433030 0x2d304331
6d2077cb 32434634 0x30433030
6d2077cf 46453346 0x32434634
6d2077d3 6f43217d 0x46453346
6d2077d7 7461706d 0x6f43217d
6d2077db 6c696269 wininet!urlmon_NULL_THUNK_DATA_DLA  (wininet+0x21706d)
6d2077df 20797469 0x6c696269
6d2077e3 67616c46 0x20797469
6d2077e7 00000000 0x67616c46

3936511327f4a41fe7101a89ee6aaadf_000.dmp

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00b5c228 52c5dc08 node+0x2a2ee0b
00b5c527 73706574 node+0xb2dc08
00b5c52b 6e697320 0x73706574
00b5c52f 73206563 0x6e697320
00b5c533 74726174 FWPUCLNT!ktmw32_NULL_THUNK_DATA_DLA  (FWPUCLNT+0x56563)
00b5c537 20666f20 windows_storage!wkscli_NULL_THUNK_DATA_DLA  (windows_storage+0x5c6174)
00b5c53b 6b72616d 0x20666f20
00b5c53f 2c676e69 0x6b72616d
00b5c543 67696220 0x2c676e69
00b5c547 74736567 0x67696220
00b5c54b 65747320 windows_storage!wkscli_NULL_THUNK_DATA_DLA  (windows_storage+0x5d6567)
00b5c54f 2e302070 0x65747320
00b5c553 736d2035 0x2e302070
00b5c557 6177202c 0x736d2035
00b5c55b 69746c6c 0x6177202c
00b5c55f 7320656d 0x69746c6c
00b5c563 65636e69 FWPUCLNT!ktmw32_NULL_THUNK_DATA_DLA  (FWPUCLNT+0x5656d)
00b5c567 61747320 xmllite!XmlReader::ParseTextOrWhitespaceValue+0x8c39
00b5c56b 6f207472 0x61747320
00b5c56f 616d2066 0x6f207472
00b5c573 6e696b72 0x616d2066
00b5c577 35322067 0x6e696b72
00b5c57b 29736d20 0x35322067
00b5c57f 7661281f 0x29736d20
00b5c583 67617265 oleaut32!CStreamOnBuffer::ResetBuffer+0x3f
00b5c58b 31203d20 0x67617265
00b5c58f 3030302e 0x31203d20
00b5c593 7563202c 0x3030302e
00b5c597 6e657272 combase!`string'+0xec
00b5c59b 756d2074 0x6e657272
00b5c5a3 3239392e combase!NdrpCreateProxy+0x64
00b5c5b7 746e656d 0x3239392e
00b5c5bb 6d206c61 windows_storage!_CTA2?AVbad_optional_accessstd+0xfa41
00b5c5bf 395b7261 0x6d206c61
00b5c5c3 30323231 0x395b7261
00b5c5c7 3133303a 0x30323231
00b5c5cb 45363634 0x3133303a
00b5c5cf 36205d30 0x45363634
00b5c5d3 38363732 0x36205d30
00b5c5d7 37353537 0x38363732
00b5c5db 3a736d20 0x37353537
00b5c5df 72614d20 0x3a736d20
00b5c5e3 77732d6b 0x72614d20
00b5c5e7 20706565 0x77732d6b
00b5c5eb 20372e37 0x20706565
00b5c5ef 2e303128 0x20372e37
00b5c5f3 2d202930 0x2e303128
00b5c5f7 2e37203e 0x2d202930
00b5c5fb 31282037 0x2e37203e
00b5c5ff 29302e30 0x31282037
00b5c603 2c424d20 0x29302e30
00b5c607 2e363120 0x2c424d20
00b5c60b 202f2036 0x2e363120
00b5c60f 20312e30 0x202f2036
00b5c613 2020736d 0x20312e30
00b5c617 65766128 0x2020736d
00b5c61b 65676172 0x65766128
00b5c61f 20756d20 0x65676172
00b5c623 2e30203d 0x20756d20
00b5c627 2c393939 0x2e30203d
00b5c62b 72756320 0x2c393939
00b5c62f 746e6572 0x72756320
00b5c633 20756d20 windows_storage!_CTA2?AVbad_optional_accessstd+0xfa46
00b5c637 2e30203d 0x20756d20
00b5c63b 29383939 0x2e30203d
00b5c63f 776f6c20 0x29383939
00b5c643 6d656d20 0x776f6c20
00b5c647 2079726f 0x6d656d20
00b5c64b 69746f6e 0x2079726f
00b5c64f 61636966 0x69746f6e
00b5c653 6e6f6974 0x61636966
00b5c657 20434720 0x6e6f6974
00b5c65b 6f206e69 0x20434720
00b5c65f 7320646c 0x6f206e69
00b5c663 65636170 FWPUCLNT!ktmw32_NULL_THUNK_DATA_DLA  (FWPUCLNT+0x5646c)
00b5c667 71657220 xmllite!XmlReader::ParseAttributeValueSlow+0x9450
00b5c66b 74736575 0x71657220
00b5c66f 5b0a6465 windows_storage!wkscli_NULL_THUNK_DATA_DLA  (windows_storage+0x5d6575)
00b5c673 32323139 0x5b0a6465
00b5c677 33303a30 0x32323139
00b5c67b 36363431 0x33303a30
00b5c67f 205d3045 0x36363431
00b5c683 36373236 0x205d3045
00b5c687 36353738 0x36373236
00b5c68b 736d2039 0x36353738
00b5c68f 614d203a 0x736d2039
00b5c693 732d6b72 0x614d203a
00b5c697 70656577 0x732d6b72
00b5c69b 372e3720 0x70656577
00b5c69f 30312820 0x372e3720
00b5c6a3 2029302e 0x30312820
00b5c6a7 37203e2d 0x2029302e
00b5c6ab 2820372e 0x37203e2d
00b5c6af 302e3031 0x2820372e
00b5c6b3 424d2029 0x302e3031
00b5c6b7 3131202c 0x424d2029
00b5c6bb 2f20372e 0x3131202c
00b5c6bf 302e3020 0x2f20372e
00b5c6c3 20736d20 0x302e3020
00b5c6c7 7661281f 0x20736d20
00b5c6cb 67617265 oleaut32!CStreamOnBuffer::ResetBuffer+0x3f
00b5c6d3 30203d20 0x67617265
00b5c6d7 3839392e 0x30203d20
00b5c6db 7563202c 0x3839392e
00b5c6df 6e657272 combase!`string'+0xec
00b5c6e3 756d2074 0x6e657272
00b5c6eb 3530302e combase!NdrpCreateProxy+0x64
00b5c6ff 63696669 0x3530302e
00b5c703 6f697461 0x63696669
00b5c707 4347206e 0x6f697461
00b5c70b 206e6920 0x4347206e
00b5c70f 20646c6f 0x206e6920
00b5c713 63617073 0x20646c6f
00b5c717 65722065 0x63617073
00b5c71b 73657571 0x65722065
00b5c71f 0a646574 0x73657571
00b5c723 00000000 0xa646574

e1784650b0d039fe5808c45f68748b3b_000.dmp

Top 18: total counts = 1

ChildEBP RetAddr  
00efe5c4 00efe6a0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efe5d8 00efe5e8 0xefe6a0
00efe5dc 033b0000 0xefe5e8
00efe5e8 00000000 0x33b0000

c2ae27abdd9f5441d1408a7ac4fa877f_000.dmp

Top 19: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
001bed6c 6595242a 0x2e2e5c73
00000000 00000000 node+0x252242a

dfc096a1bb31e9756122946a229d1a0d_000.dmp

Top 20: total counts = 1

ChildEBP RetAddr  
0013ea4c 12702d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

fa9bf2d8460a4fcf4557a70b769d2faa_000.dmp

Top 21: total counts = 1

002fcec3 72727563 0x202c3639
002fcec7 20746e65 rsaenh!CPGetProvParam+0x5c6
002fcecb 3d20756d 0x20746e65
002fcecf 302e3020 0x3d20756d
002fced3 20293230 0x302e3020
002fced7 20776f6c 0x20293230
002fcedb 6f6d656d 0x20776f6c
002fcedf 6e207972 node+0x445656d
002fcee3 6669746f node+0x2f87972
002fcee7 74616369 0x6669746f
002fceeb 206e6f69 0x74616369
002fceef 69204347 0x206e6f69
002fcef3 6c6f206e 0x69204347
002fcef7 70732064 node+0x147206e
002fcefb 20656361 0x70732064
002fceff 75716572 0x20656361
002fcf03 65747365 shell32!__dyn_tls_init_callback  (shell32+0x736572)
002fcf07 325b0a64 0x65747365
002fcf0b 3a303035 0x325b0a64
002fcf0f 43303230 0x3a303035
002fd00f 76612820 0x43303230
002fd013 67617265 wininet!InternetReadFileExA+0xb38e0
002fd017 756d2065 0x67617265
002fd01b 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x6f2065)
002fd01f 3439392e 0x30203d20
002fd023 7563202c 0x3439392e
002fd027 6e657272 shell32!__dyn_tls_init_callback  (shell32+0x65202c)
002fd02b 756d2074 node+0x33d7272
002fd02f 30203d20 shell32!__dyn_tls_init_callback  (shell32+0x6f2074)
002fd033 3030302e 0x30203d20
002fd037 6f6c2029 0x3030302e
002fd03b 656d2077 node+0x4442029
002fd03f 79726f6d 0x656d2077
002fd043 746f6e20 0x79726f6d
002fd047 63696669 0x746f6e20
002fd04b 6f697461 0x63696669
002fd04f 4347206e node+0x4417461
002fd053 206e6920 0x4347206e
002fd057 20646c6f 0x206e6920
002fd05b 63617073 0x20646c6f
002fd05f 65722065 0x63617073
002fd063 73657571 0x65722065
002fd067 0a646574 mscms!__dyn_tls_init_callback  (mscms+0x77571)
002fd06b 00000000 0xa646574

92250126821804dc44f3ae24314d53b0_000.dmp

Top 22: total counts = 1

ChildEBP RetAddr  
05b5eeb8 591fe731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
05b5eef8 5920738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05b5f148 592012a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05b6f790 591fe943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05b6f808 59237f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05b6f9dc 75e3343d rightsmanager!RM_AutorunScan+0x176
05b6f9e8 77929812 kernel32!BaseThreadInitThunk+0xe
05b6fa28 779297e5 ntdll!__RtlUserThreadStart+0x70
05b6fa40 00000000 ntdll!_RtlUserThreadStart+0x1b

3170bfa35f5255622d75ee19979ea0ac_000.dmp

Top 23: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
03def2bc 25ef3ff4 node+0xce6c1f
00000000 00000000 0x25ef3ff4

dfb9a697513f190c6661cd1e421abb4e_000.dmp

Top 24: total counts = 1

ChildEBP RetAddr  
0fbfeb28 0f6e6066 rightsextension!ATL::CSimpleStringT::CloneData+0xa
0fbfeb60 0f722618 rightsextension!CSoftInfo::FindSoftNameByPath+0x1d6
0fbfedc0 0f71ddc5 rightsextension!Utils::GetUninstAndAppName+0x98
0fbff244 0f71c09f rightsextension!RightMenuMgr::GetRightMenus+0x1be5
0fbff288 0f71afa0 rightsextension!RightMenuMgr::EnumMenus+0x6f
0fbff2c8 0f6d3809 rightsextension!CRightsManager::ScanAll+0xc0
0fbff7bc 0f6d4624 rightsextension!CAppInstallMonitor::RegChange+0x5d9
0fbff7f0 0f6d85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0fbff91c 0f6d917a rightsextension!CRegData::MonitorFunction+0x4b3
0fbff93c 0f6d8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0fbff944 0f7e864a rightsextension!std::_Pad::_Call_func+0xa
0fbff97c 76d7343d rightsextension!thread_start+0x58
0fbff988 77369832 kernel32!BaseThreadInitThunk+0xe
0fbff9c8 77369805 ntdll!__RtlUserThreadStart+0x70
0fbff9e0 00000000 ntdll!_RtlUserThreadStart+0x1b

a2bd452c263814d88fb9d0c22760bea8_000.dmp

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001cc2e8 698fdc08 node+0x2a2ee0b
001cc6d7 76612820 node+0xb2dc08
001cc787 76612820 shell32!GetMatchedFilterFromIDList+0x3b
001cc7a7 30203d20 shell32!GetMatchedFilterFromIDList+0x3b
001cc7b3 656d2077 0x30203d20
001cc7b7 79726f6d 0x656d2077
001cc7bb 746f6e20 0x79726f6d
001cc7bf 63696669 oleacc!IID_IAccPropServices+0x540
001cc7c3 6f697461 0x63696669
001cc7c7 4347206e 0x6f697461
001cc7cb 206e6920 0x4347206e
001cc7cf 20646c6f 0x206e6920
001cc7d3 63617073 0x20646c6f
001cc7d7 65722065 0x63617073
001cc7db 73657571 0x65722065
001cc7df 0a646574 0x73657571
001cc7e3 00000000 0xa646574

df12847c05e5ec8efc9acedd225cba50_002.dmp

Top 26: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x18378fd

460449056588c8cd6b54833c98c286fa_000.dmp

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
17f6f948 6e5d531f node+0x12f5557
17f6f9b4 6e59f3f6 node+0x12f531f
17f6fa1c 6e5ac2e2 node+0x12bf3f6
17f6fadc 6e5abbbf node+0x12cc2e2
17f6fc1c 6e5b0153 node+0x12cbbbf
17f6fc64 6e5affaf node+0x12d0153
17f6fc8c 7505347d node+0x12cffaf
17f6fc98 77159852 kernel32!BaseThreadInitThunk+0xe
17f6fcd8 77159825 ntdll!__RtlUserThreadStart+0x70
17f6fcf0 00000000 ntdll!_RtlUserThreadStart+0x1b

c682ed04a5f387e506271a1f976d4338_000.dmp

Top 28: total counts = 1

003bf634 5daa4415 KERNELBASE!UnregisterWaitEx+0x1b
WARNING: Stack unwind information not available. Following frames may be wrong.
003bf640 027af9c8 node+0x12f4415
003bf644 5daa43d6 0x27af9c8
003bf648 027af9c0 node+0x12f43d6
003bf64c 5daad6ff 0x27af9c0
003bf650 027af9c0 node+0x12fd6ff
003bf654 5daad6aa 0x27af9c0
003bf658 041d5460 node+0x12fd6aa
003bf65c 5daa481a 0x41d5460
003bf660 00000000 node+0x12f481a

618a63fdc3e62466e83013fc79a4bb62_000.dmp

Top 29: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522427

5b0d0f75385055e479c2534031a45eec_000.dmp

Top 30: total counts = 1

ChildEBP RetAddr  
0d4ef0ec 0f810081 rightsextension!std::_Destroy_range,std::allocator > > >+0x47
0d4ef128 0f81351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
0d4ef628 0f814624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
0d4ef65c 0f8185a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
0d4ef788 0f81917a rightsextension!CRegData::MonitorFunction+0x4b3
0d4ef7a8 0f818a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
0d4ef7b0 0f92864a rightsextension!std::_Pad::_Call_func+0xa
0d4ef7e8 75d2343d rightsextension!thread_start+0x58
0d4ef7f4 770b9812 kernel32!BaseThreadInitThunk+0xe
0d4ef834 770b97e5 ntdll!__RtlUserThreadStart+0x70
0d4ef84c 00000000 ntdll!_RtlUserThreadStart+0x1b

8bc091e404854d40f50f9d3b0af26186_001.dmp

Top 31: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0022f464 6edd8d6c node+0x12ae60a
0022f4d4 6ca93961 node+0x2a18d6c
0022f548 6d6889e6 node+0x6d3961
0022f614 6d68875e node+0x12c89e6
0022f670 6d660ec3 node+0x12c875e
0022f6ac 6d660acb node+0x12a0ec3
0022f6ec 6d6723d2 node+0x12a0acb
0022f734 6d6722e2 node+0x12b23d2
0022f778 6ca8bd42 node+0x12b22e2
0022f7a0 6ca8d47d node+0x6cbd42
0022f7e0 6c9ced6c node+0x6cd47d
0022f83c 6c9cf379 node+0x60ed6c
0022f860 6c9cea8a node+0x60f379
0022f864 6d64a300 node+0x60ea8a
0022f868 00220000 node+0x128a300
0022f86c 00000000 0x220000

9f659233600bfc65657c85fa1fd1d950_000.dmp

Top 32: total counts = 1

ChildEBP RetAddr  
00ffe4c4 75e59249 ntdll!RtlEnterCriticalSection+0x15
00ffe538 76e5278e KERNELBASE!GetProcessMitigationPolicy+0xc9
00ffe584 76e534a8 user32!DispatchHookA+0x12e
00ffe5b8 76e0b366 user32!fnHkINLPCWPSTRUCTA+0x68
00ffe600 77530bad user32!__fnINOUTNCCALCSIZE+0x56
00ffe684 76e4dc34 ntdll!KiUserCallbackDispatcher+0x4d
00ffe964 76e0ad6a user32!VerNtUserCreateWindowEx+0x244
00ffea48 76e0aa98 user32!CreateWindowInternal+0x2ce
00ffea88 762e0747 user32!CreateWindowExW+0x38
00ffeac8 76276cb5 combase!InitMainThreadWnd+0x42
00ffeaf0 762785be combase!ThreadFirstInitialize+0x11b
00ffeb60 76276e45 combase!_CoInitializeEx+0x13d
00ffeb74 7455c670 combase!CoInitializeEx+0x35
00ffeb80 7452f18c shell32!SHCoInitialize+0xa
00ffeb9c 7451ee30 shell32!CShellExecute::ExecuteNormal+0x97
00ffebb0 7451edb6 shell32!ShellExecuteNormal+0x44
00ffebc4 6633dd69 shell32!ShellExecuteExW+0x26
00ffece8 00000000 nativeutils!CDbgHelper::_MiniDumpHanlder+0x3e9

ab7fff7f7b9bff381c20f1c694fee2a3_000.dmp

Top 33: total counts = 1

ChildEBP RetAddr  
1651f104 0afe0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
1651f140 0afe351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1651f640 0afe4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1651f674 0afe85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1651f7a0 0afe917a rightsextension!CRegData::MonitorFunction+0x4b3
1651f7c0 0afe8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1651f7c8 0b0f864a rightsextension!std::_Pad::_Call_func+0xa
1651f800 76a9344d rightsextension!thread_start+0x58
1651f80c 77269802 kernel32!BaseThreadInitThunk+0xe
1651f84c 772697d5 ntdll!__RtlUserThreadStart+0x70
1651f864 00000000 ntdll!_RtlUserThreadStart+0x1b

bd3494294daf94f3b0f50ab8ff02e793_000.dmp

Top 34: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
1184fcf8 6af9531f node+0x12f5557
1184fd64 6af6ffaf node+0x12f531f
1184fd8c 76c9344d node+0x12cffaf
1184fd98 77499802 kernel32!BaseThreadInitThunk+0xe
1184fdd8 774997d5 ntdll!__RtlUserThreadStart+0x70
1184fdf0 00000000 ntdll!_RtlUserThreadStart+0x1b

8c088b10e718fd1820e6a7424995eb11_000.dmp

Top 35: total counts = 1

ChildEBP RetAddr  
055af3c8 7b9de731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
055af408 7b9e738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
055af658 7b9e12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
055bfca0 7b9de943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
055bfd18 7ba17f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
055bfeec 7697fcc9 rightsmanager!RM_AutorunScan+0x176
055bfefc 77e182ae kernel32!BaseThreadInitThunk+0x19
055bff58 77e1827e ntdll!__RtlUserThreadStart+0x2f
055bff68 00000000 ntdll!_RtlUserThreadStart+0x1b

fc4b275e82b1996b6992ad9a53a77d2d_000.dmp

Top 36: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001af568 0ff199e0 YunShellExtV1+0xe998f
001af5a0 76f534c1 YunShellExtV1+0xe99e0
001af5c4 76f53493 ntdll!ExecuteHandler2+0x26
001af5e8 76f53434 ntdll!ExecuteHandler+0x24
001af674 76f00163 ntdll!RtlDispatchException+0x127
001af674 00000000 ntdll!KiUserExceptionDispatcher+0xf

be73d19ed6d6815229c1ac456fd8d473_000.dmp