Crash in unknown_aicleaner, Analyzed 45 dumps, total processed 327, rate equals 13.76%

Top 1: Version = 1.7225.1280.625, Total count = 27

dump count = 2

ChildEBP RetAddr  
00b5e65c 77125d3b KERNELBASE!RaiseException+0x62
00b5e668 00000000 ntdll!RtlpAllocateHeapInternal+0x103b

dump count = 1

ChildEBP RetAddr  
00f3e684 68f0c000 KERNELBASE!RaiseException+0x62
00f3e738 00f3e7bc WindowsCodecs!CMetadataIFDReaderWriter::InternalSetValue+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f3e748 00f3e7b8 0xf3e7bc
00f3e7bc 00000000 0xf3e7b8

dump count = 1

ChildEBP RetAddr  
0052e6e4 0052e7c0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0052e6f8 0052e708 0x52e7c0
0052e6fc 0052e8fc 0x52e708
0052e708 00000000 0x52e8fc

dump count = 1

ChildEBP RetAddr  
00c8e9c4 00c8eaa8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00c8e9d8 00c8e9e8 0xc8eaa8
00c8e9dc fffffffe 0xc8e9e8
00c8e9e8 00000000 0xfffffffe

dump count = 1

ChildEBP RetAddr  
008ff064 008ff140 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
008ff078 008ff088 0x8ff140
008ff07c c0000017 0x8ff088
008ff088 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
0463f784 0463f860 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0463f798 0463f7a8 0x463f860
0463f79c 77c4f5df 0x463f7a8
0463f7a8 00000000 ntdll!wcstombs+0x6f

dump count = 1

ChildEBP RetAddr  
00afe934 00afea18 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00afe948 00afe958 0xafea18
00afe94c bff00000 0xafe958
00afe958 00000000 0xbff00000

dump count = 1

ChildEBP RetAddr  
008fea14 008feaf0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
008fea28 008fea38 0x8feaf0
008fea2c 02c10000 0x8fea38
008fea38 00000000 0x2c10000

dump count = 1

ChildEBP RetAddr  
012fe924 012fea08 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe938 012fe948 0x12fea08
012fe93c c0000017 0x12fe948
012fe948 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
07d9fad8 7790650b ntdll!TppRaiseInvalidParameter+0x37
07d9faf0 77903075 ntdll!TppCancelWait+0xc4
07d9fb14 778e6a00 ntdll!TpSetWaitEx+0x55
07d9fb64 76335017 ntdll!RtlDeregisterWaitEx+0x70
07d9fb74 7685b71b KERNELBASE!UnregisterWaitEx+0x17
07d9fb8c 768405fe crypt32!I_UnregisterWaitEx+0x11
07d9fba0 7683ffc8 crypt32!RegStoreProvClose+0xde
07d9fbe4 7683fe86 crypt32!CloseStore+0xb8
07d9fc00 76840347 crypt32!CertCloseStore+0x86
07d9fc44 7683fe86 crypt32!CloseStore+0x437
07d9fc60 76840347 crypt32!CertCloseStore+0x86
07d9fca4 7683fe86 crypt32!CloseStore+0x437
07d9fcc0 768c7c10 crypt32!CertCloseStore+0x86
07d9fcd8 768c664b crypt32!CCertChainEngine::~CCertChainEngine+0x14f
07d9fcec 768cbb85 crypt32!CertFreeCertificateChainEngine+0x2b
07d9fd0c 7687c8c4 crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
07d9fd24 778fe81a crypt32!AutoFlushEngineTimerCallback+0x1b8c4
07d9fd4c 778ff6b7 ntdll!TppTimerpExecuteCallback+0x8a
07d9ff08 77517ba9 ntdll!TppWorkerThread+0x727
07d9ff18 7792c3ab kernel32!BaseThreadInitThunk+0x19
07d9ff70 7792c32f ntdll!__RtlUserThreadStart+0x2b
07d9ff80 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 2: Version = 1.7225.1250.312, Total count = 6

dump count = 1

ChildEBP RetAddr  
00fbe3e4 00fbe4c8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00fbe3f8 00fbe408 0xfbe4c8
00fbe3fc 02ba0000 0xfbe408
00fbe408 00000000 0x2ba0000

dump count = 1

ChildEBP RetAddr  
00b3f104 00b3f1e0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00b3f118 00b3f128 0xb3f1e0
00b3f11c 00b3f1a8 0xb3f128
00b3f128 00000000 0xb3f1a8

dump count = 1

ChildEBP RetAddr  
00c5fa88 77e7650b ntdll!TppRaiseInvalidParameter+0x37
00c5faa0 77e73075 ntdll!TppCancelWait+0xc4
00c5fac4 77e56a10 ntdll!TpSetWaitEx+0x55
00c5fb14 75b35307 ntdll!RtlDeregisterWaitEx+0x70
00c5fb24 77bcb71b KERNELBASE!UnregisterWaitEx+0x17
00c5fb3c 77bb05fe crypt32!I_UnregisterWaitEx+0x11
00c5fb50 77baffc8 crypt32!RegStoreProvClose+0xde
00c5fb94 77bafe86 crypt32!CloseStore+0xb8
00c5fbb0 77bb0347 crypt32!CertCloseStore+0x86
00c5fbf4 77bafe86 crypt32!CloseStore+0x437
00c5fc10 77bb0347 crypt32!CertCloseStore+0x86
00c5fc54 77bafe86 crypt32!CloseStore+0x437
00c5fc70 77bb0347 crypt32!CertCloseStore+0x86
00c5fcb4 77bafe86 crypt32!CloseStore+0x437
00c5fcd0 77bb0347 crypt32!CertCloseStore+0x86
00c5fd14 77bafe86 crypt32!CloseStore+0x437
00c5fd30 77c37c50 crypt32!CertCloseStore+0x86
00c5fd48 77c3668b crypt32!CCertChainEngine::~CCertChainEngine+0x14f
00c5fd5c 77c3bbc5 crypt32!CertFreeCertificateChainEngine+0x2b
00c5fd7c 77bec8ee crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
00c5fd94 77e6e81a crypt32!AutoFlushEngineTimerCallback+0x1b8ee
00c5fdb8 77e6f6b7 ntdll!TppTimerpExecuteCallback+0x8a
00c5ff74 76197ba9 ntdll!TppWorkerThread+0x727
00c5ff84 77e9c36b kernel32!BaseThreadInitThunk+0x19
00c5ffdc 77e9c2ef ntdll!__RtlUserThreadStart+0x2b
00c5ffec 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
00dbe464 00dbe540 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00dbe478 00dbe488 0xdbe540
00dbe47c 03160000 0xdbe488
00dbe488 00000000 0x3160000

dump count = 1

ChildEBP RetAddr  
00fee334 00fee410 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00fee348 00fee358 0xfee410
00fee34c 03470000 0xfee358
00fee358 00000000 0x3470000

dump count = 1

ChildEBP RetAddr  
004fdba4 004fdc84 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
004fdbb8 004fdbc8 0x4fdc84
004fdbbc 004fdc44 0x4fdbc8
004fdbc8 00000000 0x4fdc44

Top 3: Version = 1.7225.1275.611, Total count = 4

dump count = 1

ChildEBP RetAddr  
0057e934 0057ea10 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0057e948 0057e958 0x57ea10
0057e94c 02950000 0x57e958
0057e958 00000000 0x2950000

dump count = 1

ChildEBP RetAddr  
00cfe574 00cfe658 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cfe588 00cfe598 0xcfe658
00cfe58c 00000000 0xcfe598

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00efe7b8 00000000 0xe4186e0

dump count = 1

ChildEBP RetAddr  
012fe404 012fe4e8 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe418 012fe428 0x12fe4e8
012fe41c bff00000 0x12fe428
012fe428 00000000 0xbff00000

Top 4: Version = 1.7224.1155.927, Total count = 2

dump count = 1

ChildEBP RetAddr  
00b6d888 774600ca ntdll!RtlpWaitOnCriticalSection+0x93
00b6d8c0 7745ff19 ntdll!RtlpEnterCriticalSectionContended+0x1aa
00b6d930 774929dc ntdll!RtlEnterCriticalSection+0x49
00b6d938 75c18d20 ntdll!ZwWaitForSingleObject+0xc
00000000 00000000 KERNELBASE!g_SbCachedModuleTable_KernelBase

dump count = 1

ChildEBP RetAddr  
WARNING: Stack unwind information not available. Following frames may be wrong.
027cd7b0 76d2de94 ntdll!wcstoul+0x73150
027cd800 76d2dae8 ntdll!wcstoul+0x57804
027cd924 76e4e0ec ntdll!wcstoul+0x57458
027cd9d4 76e4e0fc ntdll!ZwSetEvent+0xc
00000000 00000000 ntdll!NtClose+0xc

Top 5: Version = 1.7224.1210.1206, Total count = 2

dump count = 1

ChildEBP RetAddr  
00fae62c 7727d6ce KERNELBASE!RaiseException+0x62
00fae638 00000000 ntdll!RtlpAllocateHeapInternal+0x105e

dump count = 1

ChildEBP RetAddr  
004ef5ec 7642d57c urlmon!CList<CCodeBaseHold *,CCodeBaseHold *>::RemoveAll
004ef600 763f57e2 urlmon!FreeTlsData+0x1a
004ef618 763f5a1a urlmon!CleanupAllThreadsOnProcessDetach+0x53
004ef630 763e1c36 urlmon!TlsDllMain+0x7d
004ef650 763e1acf urlmon!DllMain+0x2fe
004ef6b0 77819280 urlmon!_initterm_e+0x131
004ef6d0 77838f88 ntdll!LdrpCallInitRoutine+0x14
004ef774 77838e2a ntdll!LdrShutdownProcess+0x1aa
004ef788 767d7a3c ntdll!RtlExitUserProcess+0x74
004ef834 767d343d kernel32!ExitProcessStub+0x12
004ef840 77819812 kernel32!BaseThreadInitThunk+0xe
004ef880 778197e5 ntdll!__RtlUserThreadStart+0x70
004ef898 00000000 ntdll!_RtlUserThreadStart+0x1b

Top 6: Version = 1.7225.1285.627, Total count = 2

dump count = 1

ChildEBP RetAddr  
0432f994 0432fa78 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0432f9a8 0432f9b8 0x432fa78
0432f9ac 2bf28f7e 0x432f9b8
0432f9b8 00000000 0x2bf28f7e

dump count = 1

ChildEBP RetAddr  
001cefd4 001cf0b8 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
001cefe8 001ceff8 0x1cf0b8
001cefec 001cf058 0x1ceff8
001ceff8 00000000 0x1cf058

Top 7: Version = 1.7224.1010.417, Total count = 1

dump count = 1

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62

Top 8: Version = 1.7224.1030.531, Total count = 1

dump count = 1

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62