Crash in unknown_aicleaner, Analyzed 41 dumps, total processed 348, rate equals 11.78%



Top 1: Version = 1.7225.1250.312, Total count = 29


dump count = 3

ChildEBP RetAddr  
00fae62c 7727d6ce KERNELBASE!RaiseException+0x62
00fae638 00000000 ntdll!RtlpAllocateHeapInternal+0x105e
2350901d6256e39033fa0e1521c5210c_000.dmp
5adb6246a951e9fbf556d9e23a95d201_000.dmp
a84c7e350af1bbdb692a4aefe7d23ef2_000.dmp

dump count = 1

ChildEBP RetAddr  
0058dd74 0058de4c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0058dd88 0058dd98 0x58de4c
0058dd8c c0000017 0x58dd98
0058dd98 00000000 0xc0000017
8b7f1a81b9614f3bda77ecc6a52d0f82_000.dmp

dump count = 1

ChildEBP RetAddr  
047cf288 765b54e4 urlmon!CUrlmonSharedMemoryUtil::GetHandleName+0x38
047cf4f0 765b53bb urlmon!CUrlZoneManager::Initialize+0x24
047cf50c 765b8651 urlmon!InternetCreateZoneManager+0x92
047cf8d0 765b6edd urlmon!CSecurityManager::ProcessUrlActionEx2Internal+0xf7a
047cf95c 75bb33d3 urlmon!CSecurityManager::ProcessUrlAction+0x15d
047cf9b4 75bb330c shlwapi!ZoneCheckUrlExCacheW+0xe6
047cf9e0 767766d7 shlwapi!ZoneCheckUrlExW+0x24
047cfa24 76776679 shell32!CExecuteApplication::_ZoneCheckFile+0x40
047cfa3c 76774863 shell32!CExecuteApplication::_VerifyZoneTrust+0x2d
047cfa58 767747c5 shell32!CExecuteApplication::_VerifyExecTrust+0x74
047cfa68 7678f6b1 shell32!CExecuteApplication::Execute+0x27
047cfa88 76774a1c shell32!CExecuteAssociation::_DoCommand+0x88
047cfaac 7678f733 shell32!CExecuteAssociation::_TryApplication+0x41
047cfacc 76774b63 shell32!CExecuteAssociation::Execute+0x5f
047cfaf8 76782260 shell32!CShellExecute::_ExecuteAssoc+0x8c
047cfb14 76782387 shell32!CShellExecute::_DoExecute+0x89
047cfb28 75bc43c0 shell32!CShellExecute::s_ExecuteThreadProc+0x30
047cfbb0 760b344d shlwapi!WrapperThreadProc+0x1b5
047cfbbc 77bd9802 kernel32!BaseThreadInitThunk+0xe
047cfbfc 77bd97d5 ntdll!__RtlUserThreadStart+0x70
047cfc14 00000000 ntdll!_RtlUserThreadStart+0x1b
13dda19f7b1f495fdae38e0d9d6bcd92_000.dmp

dump count = 1

ChildEBP RetAddr  
0095f104 0095f1e0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0095f118 0095f128 0x95f1e0
0095f11c 02c00458 0x95f128
0095f128 00000000 0x2c00458
bd636a63ba2201cff813f540e944cee3_002.dmp

dump count = 1

ChildEBP RetAddr  
00bce6e4 00bce7c8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00bce6f8 00bce708 0xbce7c8
00bce6fc fffffffe 0xbce708
00bce708 00000000 0xfffffffe
09f629708c67492cd0abd94f31ae3010_001.dmp

dump count = 1

ChildEBP RetAddr  
0135f164 0135f240 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0135f178 0135f188 0x135f240
0135f17c 7790f50f 0x135f188
0135f188 00000000 ntdll!wcstombs+0x6f
40a8454467fe8133438e8f444502740e_000.dmp

dump count = 1

ChildEBP RetAddr  
012fe864 012fe948 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe878 012fe888 0x12fe948
012fe87c fffffffe 0x12fe888
012fe888 00000000 0xfffffffe
fc0eaca161804ee62c154a6c25014e3d_002.dmp

dump count = 1

ChildEBP RetAddr  
0991fae8 7786650b ntdll!TppRaiseInvalidParameter+0x37
0991fb00 77863075 ntdll!TppCancelWait+0xc4
0991fb24 77846a10 ntdll!TpSetWaitEx+0x55
0991fb74 756c5307 ntdll!RtlDeregisterWaitEx+0x70
0991fb84 75afb59b KERNELBASE!UnregisterWaitEx+0x17
0991fb9c 75ae047e crypt32!I_UnregisterWaitEx+0x11
0991fbb0 75adfe48 crypt32!RegStoreProvClose+0xde
0991fbf4 75adfd06 crypt32!CloseStore+0xb8
0991fc10 75ae01c7 crypt32!CertCloseStore+0x86
0991fc54 75adfd06 crypt32!CloseStore+0x437
0991fc70 75ae01c7 crypt32!CertCloseStore+0x86
0991fcb4 75adfd06 crypt32!CloseStore+0x437
0991fcd0 75ae01c7 crypt32!CertCloseStore+0x86
0991fd14 75adfd06 crypt32!CloseStore+0x437
0991fd30 75b67530 crypt32!CertCloseStore+0x86
0991fd48 75b65f6b crypt32!CCertChainEngine::~CCertChainEngine+0x14f
0991fd5c 75b6b4a5 crypt32!CertFreeCertificateChainEngine+0x2b
0991fd7c 75b1c1e2 crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
0991fd94 7785e81a crypt32!AutoFlushEngineTimerCallback+0x1b362
0991fdb8 7785f6b7 ntdll!TppTimerpExecuteCallback+0x8a
0991ff74 75f27ba9 ntdll!TppWorkerThread+0x727
0991ff84 7788c2eb kernel32!BaseThreadInitThunk+0x19
0991ffdc 7788c26f ntdll!__RtlUserThreadStart+0x2b
0991ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
684c684dbcd035253fea26be5294ef7f_000.dmp

dump count = 1

ChildEBP RetAddr  
0113e3a4 0113e488 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0113e3b8 0113e3c8 0x113e488
0113e3bc c0000017 0x113e3c8
0113e3c8 00000000 0xc0000017
12bb1d135d26e38fb9a920f1e9181736_000.dmp

dump count = 1

ChildEBP RetAddr  
0880f608 77296472 ntdll!TppRaiseInvalidParameter+0x37
0880f620 77296315 ntdll!TppCancelWait+0xc4
0880f640 77279ce4 ntdll!TpSetWaitEx+0x55
0880f690 76188697 ntdll!RtlDeregisterWaitEx+0x74
0880f6a0 75e4d997 KERNELBASE!UnregisterWaitEx+0x17
0880f6b8 75ec9785 crypt32!I_UnregisterWaitEx+0x11
0880f6c8 75ec82eb crypt32!CCertChainEngine::~CCertChainEngine+0x54
0880f6dc 75ecd7f0 crypt32!CertFreeCertificateChainEngine+0x2b
0880f6fc 75e7e6cd crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
0880f714 7729507a crypt32!AutoFlushEngineTimerCallback+0x1ba8d
0880f738 772a633d ntdll!TppTimerpExecuteCallback+0x8a
0880f8f0 75c85d49 ntdll!TppWorkerThread+0x74d
0880f900 772bcf0b kernel32!BaseThreadInitThunk+0x19
0880f958 772bce91 ntdll!__RtlUserThreadStart+0x2b
0880f968 00000000 ntdll!_RtlUserThreadStart+0x1b
3d03c9670721d725b649688cb421e555_000.dmp


Top 2: Version = 1.7224.1210.1206, Total count = 6


dump count = 1

ChildEBP RetAddr  
00dae994 00daea70 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00dae9a8 00dae9b8 0xdaea70
00dae9ac bff00000 0xdae9b8
00dae9b8 00000000 0xbff00000
4087445a67bc085a6d7ab2cc7bf54ac0_000.dmp

dump count = 1

ChildEBP RetAddr  
00efea84 00efeb60 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efea98 00efeaa8 0xefeb60
00efea9c 031c0000 0xefeaa8
00efeaa8 00000000 0x31c0000
046323c68322ea32d24a251deba066a2_000.dmp

dump count = 1

ChildEBP RetAddr  
00efe464 00efe548 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efe478 00efe488 0xefe548
00efe47c c0000017 0xefe488
00efe488 00000000 0xc0000017
30efa9a4c5df768ab3ad57fdffacfbf0_000.dmp

dump count = 1

ChildEBP RetAddr  
00fae62c 7727d6ce KERNELBASE!RaiseException+0x62
00fae638 00000000 ntdll!RtlpAllocateHeapInternal+0x105e
2e3d8daadea585073544b3234faca9ef_000.dmp

dump count = 1

ChildEBP RetAddr  
00f6e914 00f6e9f0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f6e928 00f6e938 0xf6e9f0
00f6e92c 01000009 0xf6e938
00f6e938 00000000 0x1000009
26068db272d5aa36fe0194f0b9f4f794_000.dmp

dump count = 1

ChildEBP RetAddr  
003be644 003be728 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
003be658 003be668 0x3be728
003be65c 0c057ed0 0x3be668
003be668 00000000 0xc057ed0
c174453a182aca974c841489bf0365f0_000.dmp


Top 3: Version = 1.7224.1155.927, Total count = 3


dump count = 2

ChildEBP RetAddr  
00b6d888 774600ca ntdll!RtlpWaitOnCriticalSection+0x93
00b6d8c0 7745ff19 ntdll!RtlpEnterCriticalSectionContended+0x1aa
00b6d930 774929dc ntdll!RtlEnterCriticalSection+0x49
00b6d938 75c18d20 ntdll!ZwWaitForSingleObject+0xc
00000000 00000000 KERNELBASE!g_SbCachedModuleTable_KernelBase
451c697e5e021a379c90f3265ee66d48_000.dmp
e9ac816ee9623d002988e5a62d9d7152_000.dmp

dump count = 1

ChildEBP RetAddr  
001ddd68 77b43fd8 ntdll!RtlpWaitOnCriticalSection+0x95
001dddb0 77b43d99 ntdll!RtlpEnterCriticalSectionContended+0x228
001dde24 77b7619c ntdll!RtlEnterCriticalSection+0x49
001dde34 770f1295 ntdll!ZwWaitForSingleObject+0xc
77b49560 c085c35b KERNELBASE!WaitForSingleObjectEx+0xa5
WARNING: Frame IP not in any known module. Following frames may be wrong.
77b49564 a765840f 0xc085c35b
77b49568 89400005 0xa765840f
77b4956c e6eb0c41 0x89400005
77b49570 cccccccc 0xe6eb0c41
77b49574 cccccccc 0xcccccccc
77b49578 cccccccc 0xcccccccc
77b4957c 8b55ff8b 0xcccccccc
77b49580 40ec81ec 0x8b55ff8b
77b49584 a1000002 0x40ec81ec
77b49588 77c32370 0xa1000002
77b4958c 4589c533 ntdll!__security_cookie
77b49590 575653f8 0x4589c533
77b49594 8d087d8b 0x575653f8
77b49598 fffddc85 0x8d087d8b
77b4959c c4bd89ff 0xfffddc85
77b495a0 89fffffd 0xc4bd89ff
77b495a4 fffdd885 0x89fffffd
77b495a8 d485c7ff 0xfffdd885
77b495ac 00fffffd 0xd485c7ff
77b495b0 e8021400 0xfffffd
77b495b4 00000000 0xe8021400
cfcc88676881e2b61539ea1f6fa7914b_000.dmp


Top 4: Version = 1.7224.1040.624, Total count = 1


dump count = 1

ChildEBP RetAddr  
0073e5c4 00000000 KERNELBASE!RaiseException+0x64
ce6a303eb6e6028809a14d7de44822f9_000.dmp


Top 5: Version = 1.7224.1140.909, Total count = 1


dump count = 1

ChildEBP RetAddr  
012fdf24 012fdffc KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fdf38 012fdf48 0x12fdffc
012fdf3c 002e4010 0x12fdf48
012fdf48 00000000 0x2e4010
d22196d295fa3002eff54f77f0eb511f_000.dmp


Top 6: Version = 1.7224.1220.1217, Total count = 1


dump count = 1

ChildEBP RetAddr  
00efedb4 00efee90 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efedc8 00efedd8 0xefee90
00efedcc 00efee30 0xefedd8
00efedd8 00000000 0xefee30
337fa6232ce64f89878919750621a84b_000.dmp