Analyzed 88 dump

Top 1: total counts = 12

ChildEBP RetAddr  
00b8e314 00000000 KERNELBASE!RaiseException+0x62

Top 2: total counts = 7

ChildEBP RetAddr  
0035e904 6633e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0035e918 005fcff2 node+0x12ae479
0035e91c 00000000 0x5fcff2

Top 3: total counts = 6

0753f924 6ab5aeed rightsmanager!RM_AutorunScan+0x176
0753fa20 76185d49 ffi_bindings!ffi_call_win32+0x11
0753fa30 7727d1ab kernel32!BaseThreadInitThunk+0x19
0753fa88 7727d131 ntdll!__RtlUserThreadStart+0x2b
0753fa98 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 4: total counts = 5

ChildEBP RetAddr  
010fe4cc 00000000 KERNELBASE!RaiseException+0x64

Top 5: total counts = 4

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x183791d

Top 6: total counts = 4

0620fcc4 78d6aeed rightsmanager!RM_AutorunScan+0x176
0620fdc0 771bfcc9 ffi_bindings!ffi_call_win32+0x11
0620fdd0 77597c5e kernel32!BaseThreadInitThunk+0x19
0620fe2c 77597c2e ntdll!__RtlUserThreadStart+0x2f
0620fe3c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 7: total counts = 4

ChildEBP RetAddr  
052cef78 7b80e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
052cefb8 7b81738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
052cf208 7b8112a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
052df850 7b80e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
052df8c8 7b847f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
052dfa9c 76056359 rightsmanager!RM_AutorunScan+0x176
052dfaac 77537b74 kernel32!BaseThreadInitThunk+0x19
052dfb08 77537b44 ntdll!__RtlUserThreadStart+0x2f
052dfb18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 8: total counts = 3

05e3fc9c 50c2aeed rightsmanager!RM_AutorunScan+0x176
05e3fd98 76a4343d ffi_bindings!ffi_call_win32+0x11
05e3fda4 77dd9812 kernel32!BaseThreadInitThunk+0xe
05e3fde4 77dd97e5 ntdll!__RtlUserThreadStart+0x70
05e3fdfc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 9: total counts = 2

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x1837d1d

Top 10: total counts = 2

ChildEBP RetAddr  
066ff010 79f7e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
066ff050 79f8738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
066ff2a0 79f812a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0670f8e8 79f7e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0670f960 79fb7f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0670fb34 768cfcc9 rightsmanager!RM_AutorunScan+0x176
0670fb44 771b80ce kernel32!BaseThreadInitThunk+0x19
0670fba0 771b809e ntdll!__RtlUserThreadStart+0x2f
0670fbb0 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 11: total counts = 2

ChildEBP RetAddr  
0042e84c 6d68e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0042e860 00193201 node+0x12ae479
0042e864 00000000 0x193201

Top 12: total counts = 2

ChildEBP RetAddr  
05e9f0a0 7b11e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
05e9f0e0 7b12738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
05e9f330 7b1212a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
05eaf978 7b11e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
05eaf9f0 7b157f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
05eafbc4 760a5d49 rightsmanager!RM_AutorunScan+0x176
05eafbd4 77b2d2fb kernel32!BaseThreadInitThunk+0x19
05eafc2c 77b2d281 ntdll!__RtlUserThreadStart+0x2b
05eafc3c 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 13: total counts = 2

ChildEBP RetAddr  
0037ead4 64f7e479 KERNELBASE!RaiseException+0x58
WARNING: Stack unwind information not available. Following frames may be wrong.
0037eae8 005fcff0 node+0x12ae479
0037eaec 00000000 0x5fcff0

Top 14: total counts = 2

ChildEBP RetAddr  
107ff474 7a7d0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x10
107ff4b0 7a7d351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
107ff9b0 7a7d4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
107ff9e4 7a7d85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
107ffb10 7a7d917a rightsextension!CRegData::MonitorFunction+0x4b3
107ffb30 7a7d8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
107ffb38 7a8e864a rightsextension!std::_Pad::_Call_func+0xa
107ffb70 7733fa29 rightsextension!thread_start+0x58
107ffb80 77b47bbe kernel32!BaseThreadInitThunk+0x19
107ffbdc 77b47b8e ntdll!__RtlUserThreadStart+0x2f
107ffbec 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 15: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0024c100 6885dc08 node+0x2a2ee0b
0024c3ff 2033206e node+0xb2dc08
0024c403 70657473 0x2033206e
0024c407 69732073 0x70657473
0024c40b 2065636e node+0x1a02073
0024c40f 72617473 0x2065636e
0024c413 666f2074 0x72617473
0024c417 72616d20 0x666f2074
0024c41b 676e696b 0x72616d20
0024c41f 6962202c 0x676e696b
0024c423 73656767 node+0x18f202c
0024c427 74732074 0x73656767
0024c42b 30207065 0x74732074
0024c42f 6d20332e 0x30207065
0024c433 77202c73 0x6d20332e
0024c43b 20656d69 wininet!CIETldListManager::~CIETldListManager+0x23
0024c43f 636e6973 0x20656d69
0024c443 74732065 0x636e6973
0024c447 20747261 0x74732065
0024c44b 6d20666f 0x20747261
0024c44f 696b7261 0x6d20666f
0024c453 3720676e node+0x1987261
0024c457 736d2030 0x3720676e
0024c45b 61282029 0x736d2030
0024c45f 61726576 0x61282029
0024c463 6d206567 0x61726576
0024c467 203d2075 0x6d206567
0024c46b 39392e30 0x203d2075
0024c46f 63202c38 0x39392e30
0024c473 65727275 0x63202c38
0024c477 6d20746e 0x65727275
0024c47b 203d2075 0x6d20746e
0024c47f 32392e30 0x203d2075
0024c483 66202932 0x32392e30
0024c487 6c616e69 0x66202932
0024c48b 20657a69 mg_filter!_360Safe_MID::ReadFirstPhysicalDriveInNTWithScsiBackDoor+0x1f9
0024c48f 72636e69 0x20657a69
0024c493 6e656d65 0x72636e69
0024c497 206c6174 0x6e656d65
0024c49b 6b72616d 0x206c6174
0024c49f 345b6e69 node+0x39f616d
0024c4a3 3a343036 0x345b6e69
0024c4a7 43383230 0x3a343036
0024c4ab 38303331 0x43383230
0024c4af 3520205d 0x38303331
0024c4b3 36323430 0x3520205d
0024c4b7 6d203735 0x36323430
0024c4bb 4d203a73 0x6d203735
0024c5bb 756d2074 0x4d203a73
0024c5f3 73657571 user32!ReaderWndProc+0x1d8
0024c607 00000000 0x73657571

Top 16: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0ecff8c0 75ec343d 0x72c04930
0ecff8cc 775b9812 kernel32!BaseThreadInitThunk+0xe
0ecff90c 775b97e5 ntdll!__RtlUserThreadStart+0x70
0ecff924 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 17: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0059c618 5a82dc08 node+0x2a2ee0b
0059c917 2033206e node+0xb2dc08
0059c91b 70657473 0x2033206e
0059c91f 69732073 0x70657473
0059c923 2065636e 0x69732073
0059c927 72617473 0x2065636e
0059c92b 666f2074 0x72617473
0059c92f 72616d20 0x666f2074
0059c933 676e696b 0x72616d20
0059c937 6962202c 0x676e696b
0059c93b 73656767 0x6962202c
0059c93f 74732074 0x73656767
0059c943 30207065 0x74732074
0059c947 6d20362e 0x30207065
0059c94b 77202c73 0x6d20362e
0059cb57 00000000 combase!RoFailFastWithErrorContextInternal2+0x213

Top 18: total counts = 1

0032cc7f 75716572 ntdll!RtlpFreeHeap+0x145
0032ccdf 76612820 shell32!StrStrW+0x603bf3
0032cce3 67617265 urlmon!CCustomerFeedbackCollector::AddExtensionClsidInfo+0x4
0032ccf3 7563202c node+0x4227265
0032ccf7 6e657272 shell32!StrStrW+0x51f6ad
0032ccfb 756d2074 0x6e657272
0032ccff 30203d20 shell32!StrStrW+0x5bf6f5
0032cd03 3130302e 0x30203d20
0032cd07 6f6c2029 0x3130302e
0032cd0b 656d2077 0x6f6c2029
0032cd0f 79726f6d node+0x22e2077
0032cd13 746f6e20 0x79726f6d
0032cd17 63696669 0x746f6e20
0032cd1b 6f697461 node+0x2a6669
0032cd1f 4347206e 0x6f697461
0032cd23 206e6920 0x4347206e
0032cd27 20646c6f 0x206e6920
0032cd2b 63617073 0x20646c6f
0032cd2f 65722065 node+0x227073
0032cd33 73657571 node+0x2332065
0032cd37 0a646574 0x73657571
0032cd3b 00000000 0xa646574

Top 19: total counts = 1

00dcbe8f 65757165 node+0xb2dc08
00dcbe93 64657473 PicFace+0x237165
00dcbe97 32395b0a 0x64657473
00dcbe9b 303a3233 0x32395b0a
00dcbe9f 36323433 0x303a3233
00dcbea3 5d384634 0x36323433
00dcbea7 32373120 0x5d384634
00dcbeab 30313937 0x32373120
00dcbeaf 6d203032 0x30313937
00dcbeb3 4d203a73 node+0x1ae3032
00dcbeb7 2d6b7261 0x4d203a73
00dcbebb 65657773 0x2d6b7261
00dcbebf 2e382070 PicFace+0x137773
00dcbec3 31282032 0x2e382070
00dcbec7 29312e30 0x31282032
00dcbecb 203e2d20 0x29312e30
00dcbecf 20362e37 0x203e2d20
00dcbed3 372e3928 0x20362e37
00dcbed7 424d2029 0x372e3928
00dcbedb 3135202c 0x424d2029
00dcbedf 392e3531 0x3135202c
00dcbee3 33202f20 0x392e3531
00dcbee7 362e3931 0x33202f20
00dcbeeb 20736d20 0x362e3931
00dcbeef 76612820 0x20736d20
00dcbf0f 31203d20 ucrtbase!__crt_stdio_output::output_processor,__crt_stdio_output::positional_parameter_base > >::type_case_integer<16>+0x20
00dcbf17 6f6c2029 0x31203d20
00dcbf1b 656d2077 node+0x3fa2029
00dcbf1f 79726f6d PicFace+0x1b2077
00dcbf23 746f6e20 0x79726f6d
00dcbf27 63696669 windows_storage!Microsoft::WRL::RuntimeClass,IInitializeCommand,CWRLExecuteCommandBase,IExplorerCommandState>::RuntimeClass,IInitializeCommand,CWRLExecuteCommandBase,IExplorerCommandState>+0x19
00dcbf2b 6f697461 0x63696669
00dcbf2f 4347206e node+0x3f77461
00dcbf33 206e6920 0x4347206e
00dcbf37 20646c6f 0x206e6920
00dcbf3b 63617073 0x20646c6f
00dcbf3f 65722065 0x63617073
00dcbf43 73657571 PicFace+0x202065
00dcbf47 0a646574 0x73657571
00dcbf4b 3332395b 0xa646574
00dcbf4f 33303a32 0x3332395b
00dcbf53 34363234 0x33303a32
00dcbf57 205d3846 0x34363234
00dcbf5b 37323731 0x205d3846
00dcbf5f 35363139 0x37323731
00dcbf63 736d2030 0x35363139
00dcbf67 614d203a 0x736d2030
00dcbf6b 732d6b72 0x614d203a
00dcbf6f 70656577 0x732d6b72
00dcbfa7 20756d20 devobj!_DevObjGetClassPropertyKeys+0x4f
00dcbfbf 2e30203d 0x20756d20
00dcbfc3 29363431 0x2e30203d
00dcbfc7 776f6c20 0x29363431
00dcbfcb 6d656d20 msctf!CMsgUnregisterHotkey::Write+0x10
00dcbfd3 69746f6e node+0x1f36d20
00dcbfd7 61636966 0x69746f6e
00dcbfdb 6e6f6974 0x61636966
00dcbfdf 20434720 node+0x2fd6974
00dcbfe3 6f206e69 0x20434720
00dcbfe7 7320646c node+0x3ae6e69
00dcbfeb 65636170 0x7320646c
00dcbfef 71657220 PicFace+0x116170
00dcbff3 74736575 propsys!_TI1?AVCAtlExceptionATL+0xae4
71657220 71657240 windows_storage!_GetNewLinkInfo+0x296
71657238 00000000 propsys!_TI1?AVCAtlExceptionATL+0xb04

Top 20: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00fec910 6611dc08 node+0x2a2ee0b
00fecc0f 3a363532 node+0xb2dc08
00fecc13 41353330 0x3a363532
00fecc17 38314241 0x41353330
00fecc1b 3436205d 0x38314241
00fecc1f 37353930 0x3436205d
00fecc23 6d203433 0x37353930
00fecc27 4d203a73 0x6d203433
00fecc2b 2d6b7261 0x4d203a73
00fecc2f 65657773 0x2d6b7261
00fecc33 2e372070 node+0x67773
00fecc37 39282038 0x2e372070
00fecc3b 2029372e 0x39282038
00fecc3f 37203e2d 0x2029372e
00fecc43 2820362e 0x37203e2d
00fecc47 29372e39 0x2820362e
00fecc4b 2c424d20 0x29372e39
00fecc4f 352e3320 0x2c424d20
00fecc53 30202f20 0x352e3320
00fecc57 6d20302e 0x30202f20
00fecc5b 28202073 0x6d20302e
00fecc5f 2e30202b 0x28202073
00fecc63 736d2030 0x2e30202b
00fecc67 206e6920 iertutil!`string'+0xc
00fecc6b 74732032 0x206e6920
00fecc6f 20737065 wininet!CCacheClientStoreItem::Release+0x47
00fecc73 636e6973 0x20737065
00fecc77 74732065 0x636e6973
00fecccb 65676172 wininet!CHstsHost::SaveEntryToStore+0x30
00feccd3 2e31203d node+0x86172
00feccd7 2c303030 0x2e31203d
00feccdb 72756320 0x2c303030
00feccdf 746e6572 0x72756320
00fece23 00000000 wininet!InternetSetOptionA+0xa2

Top 21: total counts = 1

ChildEBP RetAddr  
04a7f118 7a43e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
04a7f158 7a44738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
04a7f3a8 7a444ad0 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
04a7f9c0 7a443ea8 rightsmanager!CAutorunsCtrl::EnumFolder+0xb70
04a7fbd0 7a43e951 rightsmanager!CAutorunsCtrl::EnumTaskScheduler+0x738
04a7fc48 7a477f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x61
04a7fe1c 76945d49 rightsmanager!RM_AutorunScan+0x176
04a7fe2c 774bd09b kernel32!BaseThreadInitThunk+0x19
04a7fe84 774bd021 ntdll!__RtlUserThreadStart+0x2b
04a7fe94 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 22: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0038f384 6cd7896c node+0x12ae2c2
0038f3f4 6aa33961 node+0x2a1896c
0038f468 6b6285e6 node+0x6d3961
0038f534 6b62835e node+0x12c85e6
0038f590 6b600b7b node+0x12c835e
0038f5cc 6b600783 node+0x12a0b7b
0038f60c 6b611fd2 node+0x12a0783
0038f654 6b611ee2 node+0x12b1fd2
0038f698 6aa2bd42 node+0x12b1ee2
0038f6c0 6aa2d47d node+0x6cbd42
0038f700 6a96ed6c node+0x6cd47d
0038f75c 6a96f379 node+0x60ed6c
0038f780 6a96ea8a node+0x60f379
0038f784 6b5ea300 node+0x60ea8a
0038f788 00380000 node+0x128a300
0038f78c 00000000 0x380000

Top 23: total counts = 1

05c7f9e4 1296e6e0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
05c7f9ec 1296e8c1 node+0x2f3e6e0
05c7f9f0 090cca44 node+0x2f3e8c1
05c7f9f4 1296e7dd 0x90cca44
05c7f9f8 0022e47c node+0x2f3e7dd
05c7f9fc 00000000 0x22e47c

Top 24: total counts = 1

ChildEBP RetAddr  
1477f254 7a9c0081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
1477f290 7a9c351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1477f790 7a9c4624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1477f7c4 7a9c85a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1477f8f0 7a9c917a rightsextension!CRegData::MonitorFunction+0x4b3
1477f910 7a9c8a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1477f918 7aad864a rightsextension!std::_Pad::_Call_func+0xa
1477f950 766f7ba9 rightsextension!thread_start+0x58
1477f960 77dec0cb kernel32!BaseThreadInitThunk+0x19
1477f9b8 77dec04f ntdll!__RtlUserThreadStart+0x2b
1477f9c8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 25: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2522027

Top 26: total counts = 1

ChildEBP RetAddr  
0960f390 779ce731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x16
0960f3d0 779d738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
0960f620 779d12a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
0961fc68 779ce943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
0961fce0 77a07f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
0961feb4 76d0343d rightsmanager!RM_AutorunScan+0x176
0961fec0 77859812 kernel32!BaseThreadInitThunk+0xe
0961ff00 778597e5 ntdll!__RtlUserThreadStart+0x70
0961ff18 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 27: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
00cfc238 6dfadc08 node+0x2a2ee0b
00cfc537 70657473 node+0xb2dc08
00cfc53b 69732073 node+0x31d7473
00cfc54b 72616d20 twinapi_appcore!Microsoft::WRL::AsyncBase >::FireCompletion+0xb3
00cfc54f 676e696b 0x72616d20
00cfc553 6962202c 0x676e696b
00cfc613 424d2029 twinapi_appcore!Windows::UI::StartScreen::JumpList::Deserialize+0x354
00cfc61b 2f20302e 0x424d2029
00cfc61f 302e3020 0x2f20302e
00cfc623 20736d20 0x302e3020
00cfc627 76612820 0x20736d20
00cfc64f 6f6c2029 crypt32!_CreatePinRulesContext+0x96
00cfc653 656d2077 node+0x2242029
00cfc657 79726f6d 0x656d2077
00cfc65b 746f6e20 0x79726f6d
00cfc677 65722065 wininet!CleanupCookieHandle+0x18
00cfc67b 73657571 0x65722065
00cfc67f 0a646574 0x73657571
00cfc683 3931315b 0xa646574
00cfc687 303a3834 0x3931315b
00cfc68b 36324632 0x303a3834
00cfc68f 5d303733 0x36324632
00cfc693 36323220 0x5d303733
00cfc697 35303332 0x36323220
00cfc69b 736d2038 0x35303332
00cfc69f 614d203a iertutil!SettingStore::s_rgValues+0x1e9f0
00cfc6a3 732d6b72 0x614d203a
00cfc6a7 70656577 0x732d6b72
00cfc6ab 362e3720 node+0x31d6577
00cfc6af 30312820 0x362e3720
00cfc6b3 2029302e 0x30312820
00cfc6b7 37203e2d 0x2029302e
00cfc6bb 2820362e 0x37203e2d
00cfc6bf 302e3031 0x2820362e
00cfc6c3 424d2029 0x302e3031
00cfc6c7 3531202c 0x424d2029
00cfc6cb 2f20362e 0x3531202c
00cfc6cf 302e3020 0x2f20362e
00cfc6d3 20736d20 0x302e3020
00cfc6d7 76612820 0x20736d20
00cfc6ff 6f6c2029 crypt32!_CreatePinRulesContext+0x96
00cfc703 656d2077 node+0x2242029
00cfc707 79726f6d 0x656d2077
00cfc70b 746f6e20 0x79726f6d
00cfc727 65722065 wininet!CleanupCookieHandle+0x18
00cfc72b 73657571 0x65722065
00cfc72f 0a646574 0x73657571
00cfc733 00000000 0xa646574

Top 28: total counts = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
004fee4c 6a9c202a 0xe2e6cc8
00000000 00000000 node+0x252202a

Top 29: total counts = 1

002ed1af 72657661 0x28202073
002ed1b3 20656761 context!_strdup+0xa83d
002ed1b7 3d20756d 0x20656761
002ed1bb 302e3120 0x3d20756d
002ed1bf 202c3030 0x302e3120
002ed1c3 72727563 0x202c3030
002ed1c7 20746e65 0x72727563
002ed1cb 3d20756d 0x20746e65
002ed1cf 302e3120 0x3d20756d
002ed1d3 20293030 0x302e3120
002ed1d7 20776f6c 0x20293030
002ed1db 6f6d656d 0x20776f6c
002ed1df 6e207972 0x6f6d656d
002ed1e3 6669746f 0x6e207972
002ed1e7 74616369 0x6669746f
002ed1fb 20656361 MMDevAPI!CPnpInterfaceCollection::AddOrRefresh+0x7e
002ed213 38363942 0x20656361
002ed217 3534205d 0x38363942
002ed21b 37323038 0x3534205d
002ed21f 20313530 0x37323038
002ed223 203a736d 0x20313530
002ed227 6b72614d 0x203a736d
002ed22b 6577732d 0x6b72614d
002ed22f 31207065 0x6577732d
002ed233 20322e30 0x31207065
002ed237 2e323128 0x20322e30
002ed23b 2d202930 0x2e323128
002ed23f 3031203e 0x2d202930
002ed243 2820322e 0x3031203e
002ed247 302e3231 0x2820322e
002ed24b 424d2029 0x302e3231
002ed24f 3131202c 0x424d2029
002ed253 2f20342e 0x3131202c
002ed257 302e3020 0x2f20342e
002ed25b 20736d20 0x302e3020
002ed25f 76612820 0x20736d20
002ed263 67617265 profapi!_SetMachineEnvironment+0xd
002ed26b 30203d20 0x67617265
002ed26f 3939392e 0x30203d20
002ed273 7563202c 0x3939392e
002ed277 6e657272 kernel32!ExeNameInitialized+0xba8
002ed27b 756d2074 0x6e657272
002ed27f 30203d20 advapi32!_NULL_IMPORT_DESCRIPTOR+0x11fa
002ed283 3330302e 0x30203d20
002ed287 6f6c2029 0x3330302e
002ed28b 656d2077 0x6f6c2029
002ed28f 79726f6d 0x656d2077
002ed293 746f6e20 0x79726f6d
002ed297 63696669 0x746f6e20
002ed29b 6f697461 node+0x2a76669
002ed29f 4347206e 0x6f697461
002ed2a3 206e6920 0x4347206e
002ed2a7 20646c6f 0x206e6920
002ed2ab 63617073 0x20646c6f
002ed2af 65722065 node+0x29f7073
002ed2b3 73657571 0x65722065
002ed2b7 0a646574 0x73657571
002ed2bb 00000000 0xa646574

Top 30: total counts = 1

ChildEBP RetAddr  
06f2f3e8 5254e731 rightsmanager!std::_Tree,std::allocator >,long,std::less,std::allocator > >,std::allocator,std::allocator > const ,long> >,0> >::lower_bound+0x13
06f2f428 5255738a rightsmanager!CProcessInfo::GetUsageMemory+0x31
06f2f678 525512a2 rightsmanager!CAutorunsCtrl::GetMemory+0x3a
06f3fcc0 5254e943 rightsmanager!CAutorunsCtrl::EnumRegAutorun+0x942
06f3fd38 52587f86 rightsmanager!CAutorunsCtrl::EnumAutoruns+0x53
06f3ff0c 76bb5d49 rightsmanager!RM_AutorunScan+0x176
06f3ff1c 77acd1ab kernel32!BaseThreadInitThunk+0x19
06f3ff74 77acd131 ntdll!__RtlUserThreadStart+0x2b
06f3ff84 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 31: total counts = 1

ChildEBP RetAddr  
003be98c 6a992d3c KERNELBASE!DebugBreak+0x2
WARNING: Stack unwind information not available. Following frames may be wrong.
00000000 00000000 node+0x2a12d3c

Top 32: total counts = 1

00efcccb 7a696c61 0x6e696620
00efcccf 6e692065 ichat_bundle+0x136c61
00efccd3 6d657263 0x6e692065
00efccd7 61746e65 0x6d657263
00efccdb 616d206c 0x61746e65
00efccdf 6e696b72 0x616d206c
00efcce3 00000000 0x6e696b72

Top 33: total counts = 1

ChildEBP RetAddr  
1225f128 52980081 rightsextension!std::_Destroy_range,std::allocator > > >+0x29
1225f164 5298351f rightsextension!std::vector,std::allocator >,std::allocator,std::allocator > > >::_Assign_range,std::allocator > *>+0x151
1225f664 52984624 rightsextension!CAppInstallMonitor::RegChange+0x2ef
1225f698 529885a3 rightsextension!std::_Func_impl_no_alloc const &>,void,RegInfo>::_Do_call+0x54
1225f7c4 5298917a rightsextension!CRegData::MonitorFunction+0x4b3
1225f7e4 52988a1a rightsextension!std::_LaunchPad,std::default_delete > > >::_Go+0x8a
1225f7ec 52a9864a rightsextension!std::_Pad::_Call_func+0xa
1225f824 7734343d rightsextension!thread_start+0x58
1225f830 77b09802 kernel32!BaseThreadInitThunk+0xe
1225f870 77b097d5 ntdll!__RtlUserThreadStart+0x70
1225f888 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 34: total counts = 1

0478fa14 6adf8c7a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0478fafc 6a66453c node+0x12f8c7a
0478fb44 6bcc93e5 node+0xb6453c
0478fb90 76c9344d node+0x21c93e5
0478fb9c 77b29802 kernel32!BaseThreadInitThunk+0xe
0478fbdc 77b297d5 ntdll!__RtlUserThreadStart+0x70
0478fbf4 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 35: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0030c350 6a74dc08 node+0x2a2ee0b
0030c64f 65747320 node+0xb2dc08
0030c653 73207370 0x65747320
0030c657 65636e69 0x73207370
0030c65b 61747320 0x65636e69
0030c65f 6f207472 0x61747320
0030c663 616d2066 0x6f207472
0030c667 6e696b72 0x616d2066
0030c66b 62202c67 0x6e696b72
0030c66f 65676769 0x62202c67
0030c673 73207473 0x65676769
0030c677 20706574 0x73207473
0030c67b 20342e30 0x20706574
0030c67f 202c736d 0x20342e30
0030c683 6c6c6177 0x202c736d
0030c687 656d6974 node+0x2aa6177
0030c68b 6e697320 0x656d6974
0030c68f 73206563 0x6e697320
0030c693 74726174 0x73206563
0030c697 20666f20 FWPUCLNT!Microsoft_Windows_Networking_ProviderId  (FWPUCLNT+0x36174)
0030c69b 6b72616d 0x20666f20
0030c69f 20676e69 node+0x1b0616d
0030c6a3 20323631 0x20676e69
0030c6a7 2029736d 0x20323631
0030c6ab 65766128 0x2029736d
0030c6af 65676172 0x65766128
0030c6b3 20756d20 0x65676172
0030c6b7 2e30203d 0x20756d20
0030c6bb 2c363939 0x2e30203d
0030c6bf 72756320 0x2c363939
0030c6c3 746e6572 0x72756320
0030c6c7 20756d20 apphelp!___PchSym_  (apphelp+0x46572)
0030c6cb 2e30203d 0x20756d20
0030c6cf 29373939 0x2e30203d
0030c6d3 6e696620 0x29373939
0030c6d7 7a696c61 0x6e696620
0030c6db 6e692065 0x7a696c61
0030c6df 6d657263 0x6e692065
0030c6e3 61746e65 node+0x3a37263
0030c6e7 616d206c 0x61746e65
0030c6eb 6e696b72 0x616d206c
0030c6ef 3331315b 0x6e696b72
0030c6f3 33303a32 0x3331315b
0030c6f7 31454434 0x33303a32
0030c6fb 205d3042 0x31454434
0030c6ff 33353931 0x205d3042
0030c703 32353138 0x33353931
0030c707 3a736d20 0x32353138
0030c70b 72614d20 0x3a736d20
0030c70f 77732d6b 0x72614d20
0030c713 20706565 rpcrt4!Microsoft_Windows_Networking_ProviderId  (rpcrt4+0xd2d6b)
0030c717 20362e37 0x20706565
0030c71b 352e3928 0x20362e37
0030c71f 3e2d2029 0x352e3928
0030c723 362e3720 0x3e2d2029
0030c727 2e392820 0x362e3720
0030c72b 4d202935 0x2e392820
0030c72f 31202c42 0x4d202935
0030c733 322e3038 0x31202c42
0030c737 30202f20 0x322e3038
0030c73b 6d20302e 0x30202f20
0030c73f 28202073 node+0x35e302e
0030c743 72657661 0x28202073
0030c747 20656761 0x72657661
0030c74b 3d20756d 0x20656761
0030c74f 392e3020 0x3d20756d
0030c753 202c3039 0x392e3020
0030c757 72727563 0x202c3039
0030c75b 20746e65 0x72727563
0030c75f 3d20756d 0x20746e65
0030c763 392e3020 0x3d20756d
0030c767 20293937 0x392e3020
0030c76b 20776f6c 0x20293937
0030c76f 6f6d656d 0x20776f6c
0030c773 6e207972 0x6f6d656d
0030c777 6669746f node+0x45e7972
0030c77b 74616369 0x6669746f
0030c77f 206e6f69 0x74616369
0030c783 69204347 0x206e6f69
0030c787 6c6f206e webio!WaCreateProxyResolver+0x97
0030c78b 70732064 node+0x2ad206e
0030c78f 20656361 0x70732064
0030c793 75716572 0x20656361
0030c797 65747365 user32!___PchSym_+0x555a
0030c79b 315b0a64 0x65747365
0030c79f 3a323331 0x315b0a64
0030c7a3 44343330 0x3a323331
0030c7a7 30423145 0x44343330
0030c7ab 3931205d 0x30423145
0030c7af 34383335 0x3931205d
0030c7b3 6d203434 0x34383335
0030c7b7 4d203a73 node+0x35e3434
0030c7bb 2d6b7261 0x4d203a73
0030c7bf 65657773 0x2d6b7261
0030c7c3 2e372070 0x65657773
0030c7c7 39282036 0x2e372070
0030c7cb 2029352e 0x39282036
0030c7cf 37203e2d 0x2029352e
0030c7d3 2820362e 0x37203e2d
0030c7d7 29352e39 0x2820362e
0030c7db 2c424d20 0x29352e39
0030c7df 32393220 0x2c424d20
0030c7e3 2f20322e 0x32393220
0030c7e7 302e3020 0x2f20322e
0030c7eb 20736d20 0x302e3020
0030c7ef 76612820 0x20736d20
0030c7f3 67617265 shell32!__dyn_tls_init_callback  (shell32+0x822820)
0030c7f7 756d2065 0x67617265
0030c823 746f6e20 user32!DialogBox2+0x66
0030c837 20646c6f FWPUCLNT!`string'+0xc14
0030c83b 63617073 0x20646c6f
0030c83f 65722065 0x63617073
0030c843 73657571 0x65722065
0030c847 0a646574 0x73657571
0030c84b 00000000 0xa646574

Top 36: total counts = 1

ChildEBP RetAddr  
006fe5e4 006fe6c0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe5f8 006fe608 0x6fe6c0
006fe5fc 02bd0000 0x6fe608
006fe608 00000000 0x2bd0000

Top 37: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
002fcf40 698cdc08 node+0x2a2ee0b
002fd30b 7563202c node+0xb2dc08
002fd337 696b7261 shell32!CIconOverlayTask::InternalResumeRT+0x111
002fd33f 303a3235 node+0x917261
002fd343 38383830 0x303a3235
002fd347 5d383246 0x38383830
002fd34b 34353320 0x5d383246
002fd34f 32323738 0x34353320
002fd353 6d203339 0x32323738
002fd357 4d203a73 node+0x4463339
002fd35b 2d6b7261 0x4d203a73
002fd35f 65657773 0x2d6b7261
002fd363 2e372070 0x65657773
002fd367 39282037 0x2e372070
002fd36b 2029372e 0x39282037
002fd36f 37203e2d 0x2029372e
002fd373 2820372e 0x37203e2d
002fd377 29372e39 0x2820372e
002fd37b 2c424d20 0x29372e39
002fd37f 322e3220 0x2c424d20
002fd383 30202f20 0x322e3220
002fd387 6d20302e 0x30202f20
002fd38b 28202073 node+0x446302e
002fd38f 2e30202b 0x28202073
002fd393 736d2037 0x2e30202b
002fd397 206e6920 0x736d2037
002fd39b 74732033 0x206e6920
002fd3d7 69732065 rsaenh!CreateSystemDirectory+0x75
002fd3e3 666f2074 node+0x992065
002fd3e7 72616d20 0x666f2074
002fd3eb 676e696b 0x72616d20
002fd3ef 20333320 0x676e696b
002fd3f3 2029736d 0x20333320
002fd3f7 65766128 0x2029736d
002fd3fb 65676172 0x65766128
002fd3ff 20756d20 0x65676172
002fd403 2e30203d 0x20756d20
002fd407 2c373839 0x2e30203d
002fd40b 72756320 0x2c373839
002fd40f 746e6572 0x72756320
002fd413 20756d20 0x746e6572
002fd417 2e30203d 0x20756d20
002fd41b 29353939 0x2e30203d
002fd41f 6e696620 0x29353939
002fd423 7a696c61 0x6e696620
002fd427 6e692065 0x7a696c61
002fd42b 6d657263 0x6e692065
002fd42f 61746e65 0x6d657263
002fd433 616d206c 0x61746e65
002fd437 6e696b72 0x616d206c
002fd43b 00000000 0x6e696b72

Top 38: total counts = 1

0637fae8 6e05e2f0 ffi_bindings!FFI::FFI::AsyncFFICall+0x4b
WARNING: Stack unwind information not available. Following frames may be wrong.
0637fb54 761f6839 node+0x2f3e2f0
0637fb64 7744906f kernel32!BaseThreadInitThunk+0x19
0637fbbc 7744903d ntdll!__RtlUserThreadStart+0x2b
0637fbcc 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 39: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
0046f404 70a08d6c node+0x12ae60a
0046f46c 6e6c3961 node+0x2a18d6c
0046f4e0 6f2b89e6 node+0x6d3961
0046f5ac 6f2b875e node+0x12c89e6
0046f608 6f290ec3 node+0x12c875e
0046f644 6f290acb node+0x12a0ec3
0046f684 6f2a23d2 node+0x12a0acb
0046f6cc 6f2a22e2 node+0x12b23d2
0046f710 6e6bbd42 node+0x12b22e2
0046f738 6e6bd47d node+0x6cbd42
0046f778 6e5fed6c node+0x6cd47d
0046f7d4 6e5ff379 node+0x60ed6c
0046f7f8 6e5fea8a node+0x60f379
0046f7fc 6f27a300 node+0x60ea8a
0046f800 00460000 node+0x128a300
0046f804 00000000 0x460000

Top 40: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
09e4f4c4 0fcfb259 node+0x5b2ab
09e4f4c8 045e0bd8 node+0x5b259
09e4f4cc 00000000 0x45e0bd8

Top 41: total counts = 1

00dff7fc 6ee40783 0xdff79c
00dff83c 6ee51fd2 node+0x12a0783
00dff884 6ee51ee2 node+0x12b1fd2
00dff8c8 6e26bd42 node+0x12b1ee2
00dff8f0 6e26d47d node+0x6cbd42
00dff930 6e1aed6c node+0x6cd47d
00dff98c 6e1af379 node+0x60ed6c
00dff9b0 6e1aea8a node+0x60f379
00dffa48 773e60ae node+0x60ea8a
00dffafc 77400259 ntdll!RtlAllocateHeap+0x3e
00dffbd8 768ffcc9 ntdll!RtlInitializeCriticalSectionEx+0xf9
00dffbe8 774082ae kernel32!BaseThreadInitThunk+0x19
00dffc44 7740827e ntdll!__RtlUserThreadStart+0x2f
00dffc54 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 42: total counts = 1

ChildEBP RetAddr  
010fe914 010fe9f8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
010fe928 010fe938 0x10fe9f8
010fe92c fffffffe 0x10fe938
010fe938 00000000 0xfffffffe

Top 43: total counts = 1

121afbe0 72ebf943 kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
121afc20 72ec5c8c 360Conf+0x1f943
121afc54 7706d567 360Conf+0x25c8c
121afc70 7703f52d ntdll!RtlProcessFlsData+0x57
121afd08 7703f4db ntdll!LdrShutdownThread+0x35
121afd18 74f6850c ntdll!RtlExitUserThread+0x2a
121afd2c 75a505c8 KERNELBASE!FreeLibraryAndExitThread+0x5f
121afd3c 0b4db1c4 kernel32!FreeLibraryAndExitThreadStub+0x10
121afd50 0b4db2b2 rightsextension!common_end_thread+0x4d
121afd5c 0b4db11f rightsextension!_endthreadex+0xd
121afd94 75a5ef3c rightsextension!thread_start+0x5d
121afda0 77073688 kernel32!BaseThreadInitThunk+0xe
121afde0 7707365b ntdll!__RtlUserThreadStart+0x70
121afdf8 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 44: total counts = 1

ChildEBP RetAddr  
00cfe534 00cfe618 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cfe548 00cfe558 0xcfe618
00cfe54c c0000017 0xcfe558
00cfe558 00000000 0xc0000017

Top 45: total counts = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
012fce18 5ecadc08 node+0x2a2f20b
012fd117 2d6b7261 node+0xb2dc08
012fd11b 65657773 0x2d6b7261
012fd11f 30312070 0x65657773
012fd123 2820382e 0x30312070
012fd127 332e3231 0x2820382e
012fd12b 3e2d2029 0x332e3231
012fd12f 2e303120 0x3e2d2029
012fd133 31282034 0x2e303120
012fd137 29332e32 0x31282034
012fd13b 2c424d20 0x29332e32
012fd13f 31393320 0x2c424d20
012fd143 2f20352e 0x31393320
012fd147 302e3020 0x2f20352e
012fd14b 20736d20 0x302e3020
012fd14f 76612820 0x20736d20
012fd153 67617265 combase!RegistrationStoreData::PackageData::`scalar deleting destructor'+0x10
012fd15b 30203d20 0x67617265
012fd15f 3339392e 0x30203d20
012fd163 7563202c 0x3339392e
012fd1d7 2820342e windows_storage!CXMLPropStoreSaxParser::endElement+0x40c
012fd1f7 202f2034 0x2820342e
012fd1fb 20302e30 0x202f2034
012fd1ff 2020736d 0x20302e30
012fd203 65766128 0x2020736d
012fd207 65676172 0x65766128
012fd20b 20756d20 0x65676172
012fd20f 2e30203d 0x20756d20
012fd213 2c313939 0x2e30203d
012fd217 72756320 0x2c313939
012fd21b 746e6572 0x72756320
012fd21f 20756d20 wininet!WPP_da6caa0d439733861da0911a41cfb1c1_Traceguids+0x36062
012fd223 2e30203d 0x20756d20
012fd227 29313030 0x2e30203d
012fd22b 776f6c20 0x29313030
012fd22f 6d656d20 0x776f6c20
012fd233 2079726f 0x6d656d20
012fd237 69746f6e 0x2079726f
012fd23b 61636966 0x69746f6e
012fd23f 6e6f6974 node+0x34b6966
012fd243 20434720 0x6e6f6974
012fd247 6f206e69 0x20434720
012fd24b 7320646c 0x6f206e69
012fd24f 65636170 winsta!`string'+0x10
012fd253 71657220 0x65636170
012fd257 74736575 0x71657220
012fd25b 5b0a6465 wininet!WPP_da6caa0d439733861da0911a41cfb1c1_Traceguids+0x86065
012fd25f 34303631 0x5b0a6465
012fd263 3731303a 0x34303631
012fd267 46333644 0x3731303a
012fd26b 31205d30 0x46333644
012fd26f 35313432 0x31205d30
012fd273 36333739 0x35313432
012fd277 736d2033 0x36333739
012fd27b 614d203a 0x736d2033
012fd27f 732d6b72 node+0x335203a
012fd283 70656577 GdiPlus!__volatile_metadata+0x256e
012fd287 2e303120 0x70656577
012fd28b 31282038 0x2e303120
012fd28f 29332e32 0x31282038
012fd293 203e2d20 0x29332e32
012fd297 342e3031 0x203e2d20
012fd29b 32312820 0x342e3031
012fd29f 2029332e 0x32312820
012fd2a3 202c424d 0x2029332e
012fd2a7 2e343334 0x202c424d
012fd2ab 202f2039 0x2e343334
012fd2af 352e3832 0x202f2039
012fd2b3 20736d20 0x352e3832
012fd2b7 76612820 0x20736d20
012fd2bb 67617265 combase!RegistrationStoreData::PackageData::`scalar deleting destructor'+0x10
012fd2c3 30203d20 0x67617265
012fd2c7 3239392e 0x30203d20
012fd2cb 7563202c 0x3239392e
012fd33f 00000000 windows_storage!CXMLPropStoreSaxParser::endElement+0x40c