Analyzed 31 dump

Top 1: total counts = 8

0680fb24 5df1aeed rightsmanager!RM_AutorunScan+0x176
0680fc20 763d5d49 ffi_bindings!ffi_call_win32+0x11
0680fc30 7758d1ab kernel32!BaseThreadInitThunk+0x19
0680fc88 7758d131 ntdll!__RtlUserThreadStart+0x2b
0680fc98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: total counts = 3

0561fcd4 0ff5aeed rightsmanager!RM_AutorunScan+0x176
0561fdd0 7736343d ffi_bindings!ffi_call_win32+0x11
0561fddc 77989802 kernel32!BaseThreadInitThunk+0xe
0561fe1c 779897d5 ntdll!__RtlUserThreadStart+0x70
0561fe34 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 3: total counts = 2

ChildEBP RetAddr  
04ebee38 5d4ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
04ebee78 5d4b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04ebf0c8 5d4b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04ecf710 5d4ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04ecf788 5d4e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04ecf95c 74f40419 rightsmanager!RM_AutorunScan+0x176
04ecf96c 772466dd kernel32!BaseThreadInitThunk+0x19
04ecf9c8 772466ad ntdll!__RtlUserThreadStart+0x2f
04ecf9d8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 2

ChildEBP RetAddr  
0546eea8 0724e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0546eee8 0725738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0546f138 072512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0547f780 0724e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0547f7f8 07287f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0547f9cc 76b8343d rightsmanager!RM_AutorunScan+0x176
0547f9d8 770e9732 kernel32!BaseThreadInitThunk+0xe
0547fa18 770e9705 ntdll!__RtlUserThreadStart+0x70
0547fa30 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 5: total counts = 2

06a2f69c 5e50aeed rightsmanager!RM_AutorunScan+0x176
06a2f798 76a7fcc9 ffi_bindings!ffi_call_win32+0x11
06a2f7a8 7770809e kernel32!BaseThreadInitThunk+0x19
06a2f804 7770806e ntdll!__RtlUserThreadStart+0x2f
06a2f814 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: total counts = 2

ChildEBP RetAddr  
063af1a8 7cb9e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
063af1e8 7cba738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
063af438 7cba12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
063bfa80 7cb9e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
063bfaf8 7cbd7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
063bfccc 76397ba9 rightsmanager!RM_AutorunScan+0x176
063bfcdc 7793c3ab kernel32!BaseThreadInitThunk+0x19
063bfd34 7793c32f ntdll!__RtlUserThreadStart+0x2b
063bfd44 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 2

ChildEBP RetAddr  
0651ed40 0516e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
0651ed80 0517738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0651efd0 051712a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0652f618 0516e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0652f690 051a7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0652f864 76ae05c9 rightsmanager!RM_AutorunScan+0x176
0652f874 77e57c5d kernel32!BaseThreadInitThunk+0x19
0652f8d0 77e57c2d ntdll!__RtlUserThreadStart+0x2f
0652f8e0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0045f424 70938cc5 node+0x12ae60a
0045f4bc 6e5f3961 node+0x2a18cc5
0045f530 6f1e89e6 node+0x6d3961
0045f5fc 6f1e875e node+0x12c89e6
0045f658 6f1c0ec3 node+0x12c875e
0045f694 6f1c0acb node+0x12a0ec3
0045f6d4 6f1d23d2 node+0x12a0acb
0045f71c 6f1d22e2 node+0x12b23d2
0045f760 6e5ebd42 node+0x12b22e2
0045f788 6e5ed47d node+0x6cbd42
0045f7c8 6e52ed6c node+0x6cd47d
0045f824 6e52f379 node+0x60ed6c
0045f848 6e52ea8a node+0x60f379
0045f84c 6f1aa300 node+0x60ea8a
0045f850 00450000 node+0x128a300
0045f854 00000000 0x450000

Top 9: total counts = 1

ChildEBP RetAddr  
05d6f2e0 7b6ae731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0xa2
05d6f320 7b6b738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05d6f570 7b6b12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05d7fbb8 7b6ae943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05d7fc30 7b6e7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05d7fe04 776400c9 rightsmanager!RM_AutorunScan+0x176
05d7fe14 77eb7b1e kernel32!BaseThreadInitThunk+0x19
05d7fe70 77eb7aee ntdll!__RtlUserThreadStart+0x2f
05d7fe80 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 10: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
003df624 128b8d6c node+0x12ae60a
003df694 10573961 node+0x2a18d6c
003df708 111689e6 node+0x6d3961
003df7d4 1116875e node+0x12c89e6
003df830 11140ec3 node+0x12c875e
003df86c 11140acb node+0x12a0ec3
003df8ac 111523d2 node+0x12a0acb
003df8f4 111522e2 node+0x12b23d2
003df938 1056bd42 node+0x12b22e2
003df960 1056d47d node+0x6cbd42
003df9a0 104aed6c node+0x6cd47d
003df9fc 104af379 node+0x60ed6c
003dfa20 104aea8a node+0x60f379
00460700 88000000 node+0x60ea8a
00460704 6e692d2d 0x88000000
00460708 63657073 0x6e692d2d
0046070c 6f702d74 0x63657073
00460710 00000000 0x6f702d74

Top 11: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cff3b4 6e3d8cc5 node+0x12ae60a
00cff454 6c093961 node+0x2a18cc5
00cff4c8 6cc889e6 node+0x6d3961
00cff594 6cc8875e node+0x12c89e6
00cff5f0 6cc60ec3 node+0x12c875e
00cff62c 6cc60acb node+0x12a0ec3
00cff66c 6cc723d2 node+0x12a0acb
00cff6b4 6cc722e2 node+0x12b23d2
00cff6f8 6c08bd42 node+0x12b22e2
00cff720 6c08d47d node+0x6cbd42
00cff760 6bfced6c node+0x6cd47d
00cff7bc 6bfcf379 node+0x60ed6c
00cff7e0 6bfcea8a node+0x60f379
00cff878 77cb60ae node+0x60ea8a
00cff884 00000000 ntdll!RtlAllocateHeap+0x3e

Top 12: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00aff644 71b18cc5 node+0x12ae60a
00aff6e4 6f7d3961 node+0x2a18cc5
00aff758 703c89e6 node+0x6d3961
00aff824 703c875e node+0x12c89e6
00aff880 703a0ec3 node+0x12c875e
00aff8bc 703a0acb node+0x12a0ec3
00aff8fc 703b23d2 node+0x12a0acb
00aff944 703b22e2 node+0x12b23d2
00aff988 6f7cbd42 node+0x12b22e2
00aff9b0 6f7cd47d node+0x6cbd42
00aff9f0 6f70ed6c node+0x6cd47d
00affa4c 6f70f379 node+0x60ed6c
00affa70 6f70ea8a node+0x60f379
00affb08 77365dde node+0x60ea8a
00affbbc 77363c16 ntdll!RtlAllocateHeap+0x3e
00affbd4 72662d00 ntdll!RtlFreeHeap+0x46
00affbe4 00000000 node+0x3562d00

Top 13: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
001cc930 646edc08 node+0x2a2f20b
001ccc2f 736d2036 node+0xb2dc08
001ccc33 614d203a 0x736d2036
001ccc37 732d6b72 0x614d203a
001ccc3b 70656577 0x732d6b72
001ccc3f 2e303120 0x70656577
001ccc43 31282032 0x2e303120
001ccc47 29332e32 0x31282032
001ccc4b 203e2d20 0x29332e32
001ccc4f 322e3031 0x203e2d20
001ccc53 32312820 0x322e3031
001ccc57 2029352e 0x32312820
001ccc5b 202c424d 0x2029352e
001ccc5f 372e3731 0x202c424d
001ccc63 30202f20 0x372e3731
001ccc67 6d20302e 0x30202f20
001ccc6b 28202073 0x6d20302e
001ccc6f 72657661 0x28202073
001ccc73 20656761 0x72657661
001ccc77 3d20756d 0x20656761
001ccc7b 392e3020 0x3d20756d
001ccc7f 202c3939 0x392e3020
001ccc83 72727563 0x202c3939
001ccc87 20746e65 0x72727563
001ccc8b 3d20756d 0x20746e65
001ccc8f 302e3020 0x3d20756d
001ccc93 20293230 0x302e3020
001ccc97 20776f6c 0x20293230
001ccc9b 6f6d656d 0x20776f6c
001ccc9f 6e207972 0x6f6d656d
001ccca3 6669746f 0x6e207972
001ccca7 74616369 node+0x2ad746f
001cccab 206e6f69 0x74616369
001cccaf 69204347 0x206e6f69
001cccb3 6c6f206e d3d11!ntdll_NULL_THUNK_DATA  (d3d11+0x124347)
001cccb7 70732064 0x6c6f206e
001cccbb 20656361 uxtheme!__dyn_tls_init_callback+0x124
001cccbf 75716572 0x20656361
001cccc3 65747365 wininet!`string'+0x1f9ac2
001cccc7 325b0a64 node+0x1b87365
001ccccb 3a323134 0x325b0a64
001ccccf 46463130 0x3a323134
001cccd3 30363342 0x46463130
001cccd7 3131205d 0x30363342
001cccdb 34373538 0x3131205d
001cccdf 6d203731 0x34373538
001ccce3 4d203a73 0x6d203731
001ccce7 2d6b7261 0x4d203a73
001ccceb 65657773 0x2d6b7261
001cccef 30312070 node+0x1a97773
001cccf3 2820382e 0x30312070
001cccf7 352e3231 0x2820382e
001cccfb 3e2d2029 0x352e3231
001cccff 2e303120 0x3e2d2029
001ccd03 31282032 0x2e303120
001ccd07 29332e32 0x31282032
001ccd0b 2c424d20 0x29332e32
001ccd0f 2e313320 0x2c424d20
001ccd13 202f2030 0x2e313320
001ccd17 20302e30 0x202f2030
001ccd1b 2020736d 0x20302e30
001ccd1f 65766128 0x2020736d
001ccd23 65676172 node+0x1ba6128
001ccd27 20756d20 node+0x1ab6172
001ccd2b 2e30203d 0x20756d20
001ccd2f 2c393939 0x2e30203d
001ccd33 72756320 0x2c393939
001ccd37 746e6572 0x72756320
001ccd3f 2e30203d ws2_32!GetProtoGetNextEnt+0x98
001ccd4b 6d656d20 0x2e30203d
001ccd4f 2079726f 0x6d656d20
001ccd53 69746f6e 0x2079726f
001ccd57 61636966 0x69746f6e
001ccd5b 6e6f6974 0x61636966
001ccd5f 20434720 0x6e6f6974
001ccd63 6f206e69 0x20434720
001ccd67 7320646c d3d9!CD3DBase::ValidateDraw+0xaf
001ccd8b 37353831 0x7320646c
001ccd8f 20363334 0x37353831
001ccd93 203a736d 0x20363334
001ccd97 6b72614d 0x203a736d
001ccd9b 6577732d 0x6b72614d
001ccd9f 31207065 node+0x1bb732d
001ccda3 20322e30 0x31207065
001ccda7 2e323128 0x20322e30
001ccdab 2d202933 0x2e323128
001ccdaf 3031203e 0x2d202933
001ccdb3 2820322e 0x3031203e
001ccdb7 352e3231 0x2820322e
001ccdbb 424d2029 0x352e3231
001ccdbf 3931202c 0x424d2029
001ccdc3 2f20352e 0x3931202c
001ccdc7 302e3020 0x2f20352e
001ccdcb 20736d20 0x302e3020
001ccdcf 76612820 0x20736d20
001ccdd3 67617265 shell32!__dyn_tls_init_callback  (shell32+0xb92820)
001ccdd7 756d2065 node+0x3a57265
001ccddb 30203d20 wininet!`string'+0x1b55b5
001ccddf 3939392e 0x30203d20
001ccde3 7563202c 0x3939392e
001ccde7 6e657272 wininet!`string'+0x11557c
001ccdeb 756d2074 0x6e657272
001ccdef 30203d20 wininet!`string'+0x1b55c4
001ccdf3 3330302e 0x30203d20
001ccdf7 6f6c2029 0x3330302e
001ccdfb 656d2077 0x6f6c2029
001ccdff 79726f6d node+0x1b12077
001cce03 746f6e20 0x79726f6d
001cce07 63696669 ws2_32!$$VProc_ImageExportDirectory+0xf0
001cce0b 6f697461 0x63696669
001cce0f 4347206e 0x6f697461
001cce13 206e6920 0x4347206e
001cce17 20646c6f 0x206e6920
001cce1b 63617073 0x20646c6f
001cce1f 65722065 0x63617073
001cce23 73657571 node+0x1b62065
001cce27 0a646574 0x73657571
001cce2b 00000000 0xa646574

Top 14: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002ff6a4 6f918d6c node+0x12ae60a
002ff70c 6d5d3961 node+0x2a18d6c
002ff780 6e1c89e6 node+0x6d3961
002ff84c 6e1c875e node+0x12c89e6
002ff8a8 6e1a0ec3 node+0x12c875e
002ff8e4 6e1a0acb node+0x12a0ec3
002ff924 6e1b23d2 node+0x12a0acb
002ff96c 6e1b22e2 node+0x12b23d2
002ff9b0 6d5cbd42 node+0x12b22e2
002ff9d8 6d5cd47d node+0x6cbd42
002ffa18 6d50ed6c node+0x6cd47d
002ffa74 6d50f379 node+0x60ed6c
002ffa98 6d50ea8a node+0x60f379
002ffa9c 6e18a300 node+0x60ea8a
002ffaa0 002f0000 node+0x128a300
002ffaa4 00000000 0x2f0000

Top 15: total counts = 1

00f7cc27 736d2030 0x2e30202f
00f7cc5f 6f6e2079 context!::operator()+0x60
00f7cc63 69666974 0x6f6e2079
00f7cc67 69746163 0x69666974
00f7cc6b 47206e6f 0x69746163
00f7cc6f 6e692043 0x47206e6f
00f7cc73 646c6f20 0x6e692043
00f7cc77 61707320 0x646c6f20
00f7cc7b 72206563 0x61707320
00f7cc7f 65757165 0x72206563
00f7cc83 64657473 0x65757165
00f7cc87 38365b0a 0x64657473
00f7cc8b 303a3438 0x38365b0a
00f7cc8f 36393433 0x303a3438
00f7cc93 5d304539 0x36393433
00f7cc97 35373420 0x5d304539
00f7cc9b 35303439 0x35373420
00f7cc9f 6d203439 0x35303439
00f7cca3 4d203a73 0x6d203439
00f7cca7 2d6b7261 0x4d203a73
00f7ccab 65657773 0x2d6b7261
00f7ccaf 30312070 0x65657773
00f7ccb3 2820342e 0x30312070
00f7ccb7 332e3231 0x2820342e
00f7ccbb 3e2d2029 0x332e3231
00f7ccbf 2e303120 0x3e2d2029
00f7ccc3 31282033 0x2e303120
00f7ccc7 29332e32 0x31282033
00f7cccb 2c424d20 0x29332e32
00f7cccf 2e333320 0x2c424d20
00f7ccd3 202f2034 0x2e333320
00f7ccd7 20302e30 0x202f2034
00f7ccdb 2020736d 0x20302e30
00f7ccdf 65766128 0x2020736d
00f7cce3 65676172 0x65766128
00f7cce7 20756d20 0x65676172
00f7cceb 2e30203d 0x20756d20
00f7ccef 2c333639 0x2e30203d
00f7ccf3 72756320 0x2c333639
00f7ccf7 746e6572 0x72756320
00f7ccfb 20756d20 0x746e6572
00f7ccff 2e30203d 0x20756d20
00f7cd03 29393939 0x2e30203d
00f7cd07 776f6c20 0x29393939
00f7cd0b 6d656d20 0x776f6c20
00f7cd0f 2079726f 0x6d656d20
00f7cd13 69746f6e 0x2079726f
00f7cd17 61636966 0x69746f6e
00f7cd1b 6e6f6974 0x61636966
00f7cd1f 20434720 0x6e6f6974
00f7cd23 6f206e69 0x20434720
00f7cd27 7320646c 0x6f206e69
00f7cd2b 65636170 windows_storage!RegDataDrivenCommand::GetFlags+0x18c9ac
00f7cd2f 71657220 0x65636170
00f7cd53 3a736d20 cfgmgr32!ResDesToIoResource+0x447
00f7cd6b 2029332e 0x3a736d20
00f7cd6f 31203e2d 0x2029332e
00f7cd73 20332e30 0x31203e2d
00f7cd77 2e323128 0x20332e30
00f7cd7b 4d202933 0x2e323128
00f7cd7f 36202c42 0x4d202933
00f7cd83 2f20322e 0x36202c42
00f7cd87 302e3020 0x2f20322e
00f7cd8b 20736d20 0x302e3020
00f7cd8f 76612820 0x20736d20
00f7cd97 756d2065 clbcatq!COpenTableHeap::~COpenTableHeap+0x15
00f7cd9b 30203d20 sechost!ext-ms-win-security-chambers-l1-1-0_NULL_THUNK_DATA_DLA  (sechost+0x82065)
00f7cd9f 3336392e 0x30203d20
00f7cda3 7563202c 0x3336392e
00f7cda7 6e657272 comdlg32!_tls_end+0x1a94
00f7cdab 756d2074 0x6e657272
00f7cdaf 30203d20 sechost!ext-ms-win-security-chambers-l1-1-0_NULL_THUNK_DATA_DLA  (sechost+0x82074)
00f7cdb3 3430302e 0x30203d20
00f7cdb7 6f6c2029 0x3430302e
00f7cdbb 656d2077 0x6f6c2029
00f7cdbf 79726f6d 0x656d2077
00f7cdc3 746f6e20 0x79726f6d
00f7cdc7 63696669 0x746f6e20
00f7cdcb 6f697461 0x63696669
00f7cdcf 4347206e 0x6f697461
00f7cdd3 206e6920 0x4347206e
00f7cdd7 20646c6f 0x206e6920
00f7cddb 63617073 0x20646c6f
00f7cddf 65722065 0x63617073
00f7cde3 73657571 0x65722065
00f7cde7 0a646574 0x73657571
00f7cdeb 00000000 0xa646574

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
005ace48 6bb8dc08 node+0x2a2f20b
005ad147 6d203538 node+0xb2dc08
005ad14b 4d203a73 node+0x21a3538
005ad14f 2d6b7261 0x4d203a73
005ad153 65657773 0x2d6b7261
005ad157 30312070 0x65657773
005ad15b 2820352e 0x30312070
005ad15f 332e3231 0x2820352e
005ad163 3e2d2029 0x332e3231
005ad167 2e303120 0x3e2d2029
005ad16b 31282035 0x2e303120
005ad16f 29332e32 0x31282035
005ad173 2c424d20 0x29332e32
005ad177 312e3720 0x2c424d20
005ad17b 30202f20 0x312e3720
005ad17f 6d20302e 0x30202f20
005ad183 28202073 node+0x21a302e
005ad187 72657661 0x28202073
005ad18b 20656761 0x72657661
005ad18f 3d20756d 0x20656761
005ad193 392e3020 0x3d20756d
005ad197 202c3939 0x392e3020
005ad19b 72727563 0x202c3939
005ad19f 20746e65 0x72727563
005ad1a3 3d20756d 0x20746e65
005ad1a7 302e3020 0x3d20756d
005ad1ab 20293330 0x302e3020
005ad1af 20776f6c 0x20293330
005ad1b3 6f6d656d 0x20776f6c
005ad1b7 6e207972 node+0x467656d
005ad1bb 6669746f node+0x31a7972
005ad1bf 74616369 0x6669746f
005ad1c3 206e6f69 0x74616369
005ad1c7 69204347 0x206e6f69
005ad1cb 6c6f206e 0x69204347
005ad1cf 70732064 node+0x169206e
005ad1d3 20656361 0x70732064
005ad1d7 75716572 0x20656361
005ad51f 00000000 advapi32!SaferpGuidIdentsLoadTable+0x470

Top 17: total counts = 1

ChildEBP RetAddr  
04b9eda8 0fcee731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
04b9ede8 0fcf738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04b9f038 0fcf12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04baf680 0fcee943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
04baf6f8 0fd27f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
04baf8cc 74028744 rightsmanager!RM_AutorunScan+0x176
04baf8e0 773a58ed kernel32!BaseThreadInitThunk+0x24
04baf928 773a58bd ntdll!__RtlUserThreadStart+0x2f
04baf938 00000000 ntdll!_RtlUserThreadStart+0x1b