Crash in unknown_aicleaner, Analyzed 46 dumps, total processed 348, rate equals 13.22%

Top 1: Version = 1.7225.1250.312, Total count = 36

dump count = 2

ChildEBP RetAddr  
0c4ff5f8 76fd02aa ntdll!RtlpWaitOnCriticalSection+0xd2
0c4ff630 76fd00f9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
0c4ff63c 76b4f36b ntdll!RtlEnterCriticalSection+0x49
0c4ff660 76c01c36 combase!OXIDEntry::PostCall+0xfb
0c4ff86c 76b69dbd combase!ThreadInvokeWorker+0x7b3
0c4ff874 75eef670 combase!ThreadInvoke+0xd
0c4ff8b4 75eef5b5 rpcrt4!DispatchToStubInCNoAvrf+0x20
0c4ff920 75eef378 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x175
0c4ff970 75ef4812 rpcrt4!RPC_INTERFACE::DispatchToStubWithObject+0x158
0c4ff9dc 75ef43b2 rpcrt4!LRPC_SCALL::DispatchRequest+0x2a2
0c4ffa64 75ef3ec1 rpcrt4!LRPC_SCALL::HandleRequest+0x382
0c4ffab8 75f09057 rpcrt4!LRPC_ADDRESS::HandleRequest+0x2c1
0c4ffb94 75f11800 rpcrt4!LRPC_ADDRESS::ProcessIO+0x227
0c4ffbd0 76fc6ff1 rpcrt4!LrpcIoComplete+0xa0
0c4ffbf8 76fc606a ntdll!TppAlpcpExecuteCallback+0xa1
0c4ffdb4 7615fcc9 ntdll!TppWorkerThread+0x63a
0c4ffdc4 76ff82ae kernel32!BaseThreadInitThunk+0x19
0c4ffe20 76ff827e ntdll!__RtlUserThreadStart+0x2f
0c4ffe30 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
00cfe874 00cfe958 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cfe888 00cfe898 0xcfe958
00cfe88c 00890000 0xcfe898
00cfe898 00000000 0x890000

dump count = 1

ChildEBP RetAddr  
00bde344 00bde420 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00bde358 00bde368 0xbde420
00bde35c 03140000 0xbde368
00bde368 00000000 0x3140000

dump count = 1

ChildEBP RetAddr  
00dde6d4 00dde7b8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00dde6e8 00dde6f8 0xdde7b8
00dde6ec c0000017 0xdde6f8
00dde6f8 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
006fe3c4 006fe4a8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe3d8 006fe3e8 0x6fe4a8
006fe3dc fffffffe 0x6fe3e8
006fe3e8 00000000 0xfffffffe

dump count = 1

ChildEBP RetAddr  
0135ea74 0135eb50 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0135ea88 0135ea98 0x135eb50
0135ea8c 018c0000 0x135ea98
0135ea98 00000000 0x18c0000

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0570f4cc 00000000 0x97694a

dump count = 1

ChildEBP RetAddr  
008fea44 008feb28 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
008fea58 008fea68 0x8feb28
008fea5c c0000017 0x8fea68
008fea68 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
006fe9d4 006feab8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe9e8 006fe9f8 0x6feab8
006fe9ec c0000017 0x6fe9f8
006fe9f8 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
00efe584 00efe668 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efe598 00efe5a8 0xefe668
00efe59c fffffffe 0xefe5a8
00efe5a8 00000000 0xfffffffe

Top 2: Version = 1.7224.1210.1206, Total count = 6

dump count = 1

ChildEBP RetAddr  
0117e834 0117e918 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0117e848 0117e858 0x117e918
0117e84c c0000017 0x117e858
0117e858 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
0362fae0 77b0ef30 ntdll!TppRaiseInvalidParameter+0x37
0362faf8 77aa3fc8 ntdll!TppCancelWait+0x6aec7
0362fb1c 77a960e0 ntdll!TpSetWaitEx+0x68
0362fb6c 7599be1b ntdll!RtlDeregisterWaitEx+0x70
0362fb7c 77828f9f KERNELBASE!UnregisterWaitEx+0x1b
0362fb94 7780b47e crypt32!I_UnregisterWaitEx+0x11
0362fba8 7780ae41 crypt32!RegStoreProvClose+0xde
0362fbf0 7780ad06 crypt32!CloseStore+0xb1
0362fc0c 7780b1c7 crypt32!CertCloseStore+0x86
0362fc54 7780ad06 crypt32!CloseStore+0x437
0362fc70 7780b1c7 crypt32!CertCloseStore+0x86
0362fcb8 7780ad06 crypt32!CloseStore+0x437
0362fcd4 7780b1c7 crypt32!CertCloseStore+0x86
0362fd1c 7780ad06 crypt32!CloseStore+0x437
0362fd38 77897914 crypt32!CertCloseStore+0x86
0362fd50 7789634b crypt32!CCertChainEngine::~CCertChainEngine+0x153
0362fd64 7789b86a crypt32!CertFreeCertificateChainEngine+0x2b
0362fd84 7784c1c9 crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
0362fd9c 77aa4278 crypt32!AutoFlushEngineTimerCallback+0x1e279
0362fdcc 77aa2134 ntdll!TppTimerpExecuteCallback+0x98
0362ff74 76936ba9 ntdll!TppWorkerThread+0x734
0362ff84 77ad8f9f kernel32!BaseThreadInitThunk+0x19
0362ffdc 77ad8f6d ntdll!__RtlUserThreadStart+0x2b
0362ffec 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
006fe8c4 006fe9a0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fe8d8 006fe8e8 0x6fe9a0
006fe8dc 00840000 0x6fe8e8
006fe8e8 00000000 0x840000

dump count = 1

ChildEBP RetAddr  
005bead4 005bebb8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
005beae8 005beaf8 0x5bebb8
005beaec c0000017 0x5beaf8
005beaf8 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
009ae374 009ae458 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
009ae388 009ae398 0x9ae458
009ae38c 02e80000 0x9ae398
009ae398 00000000 0x2e80000

dump count = 1

ChildEBP RetAddr  
012fe4a4 012fe588 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe4b8 012fe4c8 0x12fe588
012fe4bc c0000017 0x12fe4c8
012fe4c8 00000000 0xc0000017

Top 3: Version = 1.7224.1045.626, Total count = 1

dump count = 1

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62

Top 4: Version = 1.7224.1055.630, Total count = 1

dump count = 1

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62

Top 5: Version = 1.7224.1155.927, Total count = 1

dump count = 1

ChildEBP RetAddr  
010fde88 77d04448 ntdll!RtlpWaitOnCriticalSection+0x95
010fded0 77d04209 ntdll!RtlpEnterCriticalSectionContended+0x228
010fdf44 77d3673c ntdll!RtlEnterCriticalSection+0x49
010fdf54 77081985 ntdll!ZwWaitForSingleObject+0xc
77d099d0 c085c35b KERNELBASE!WaitForSingleObjectEx+0xa5
WARNING: Frame IP not in any known module. Following frames may be wrong.
77d099d4 ac95840f 0xc085c35b
77d099d8 89400005 0xac95840f
77d099dc e6eb0c41 0x89400005
77d099e0 cccccccc 0xe6eb0c41
77d099e4 cccccccc 0xcccccccc
77d099e8 cccccccc 0xcccccccc
77d099ec 8b55ff8b 0xcccccccc
77d099f0 40ec81ec 0x8b55ff8b
77d099f4 a1000002 0x40ec81ec
77d099f8 77df3370 0xa1000002
77d099fc 4589c533 ntdll!__security_cookie
77d09a00 575653f8 0x4589c533
77d09a04 8d087d8b 0x575653f8
77d09a08 fffddc85 0x8d087d8b
77d09a0c c4bd89ff 0xfffddc85
77d09a10 89fffffd 0xc4bd89ff
77d09a14 fffdd885 0x89fffffd
77d09a18 d485c7ff 0xfffdd885
77d09a1c 00fffffd 0xd485c7ff
77d09a20 e8021400 0xfffffd
77d09a24 00000000 0xe8021400

Top 6: Version = 1.7225.1265.409, Total count = 1

dump count = 1

0386ff88 76a8343d ntdll!TppWorkerThread+0x562
0386ff94 77849802 kernel32!BaseThreadInitThunk+0xe
0386ffd4 778497d5 ntdll!__RtlUserThreadStart+0x70
0386ffec 00000000 ntdll!_RtlUserThreadStart+0x1b