Crash in unknown_bluewhale, Analyzed 10 dumps, total processed 47, rate equals 21.28%



Top 1: Version = 1.6624.1180.1121, Total count = 5


dump count = 1

697461e3 74d9a8a1 0xffffc773
697461e7 ac0d8b69 iertutil!IsStringProperty+0x2b111
697461eb 836974d9 0xac0d8b69
697461ef cb2301e0 0x836974d9
697461f3 840fc10b 0xcb2301e0
697461f7 ffffc75b 0x840fc10b
697461fb 74d9b0a1 0xffffc75b
697461ff b4358b69 iertutil!IsStringProperty+0x2b911
69746203 8b6974d9 0xb4358b69
69746207 83d68bc8 0x8b6974d9
6974620b d32301e1 0x83d68bc8
6974620f 850fc83b 0xd32301e1
69746213 ffffc73f 0x850fc83b
69746217 850fd63b 0xffffc73f
6974621b ffffc737 0x850fd63b
6974621f 62506857 0xffffc737
69746223 35ff6974 0x62506857
69746227 6974c064 0x35ff6974
6974622b c06035ff dwmapi!Microsoft_Windows_Dwm_ApiHandle+0x4
6974622f c7e86974 0xc06035ff
69746233 e9ffffe3 0xc7e86974
69746237 ffffc71b 0xe9ffffe3
6974623b 00000000 0xffffc71b
782323e5542351bcda4cfd5922b91b98_000.dmp

dump count = 1

ChildEBP RetAddr  
012fe194 012fe1f0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fe1a8 012fe1e0 0x12fe1f0
012fe1ac 012fe284 0x12fe1e0
012fe1e0 00000000 0x12fe284
7935d50e067e29df8e49d24612274d0e_000.dmp

dump count = 1

ChildEBP RetAddr  
0434f834 0434f918 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0434f848 0434f858 0x434f918
0434f84c 2fbf94bd 0x434f858
0434f858 00000000 0x2fbf94bd
519c17624b9f6e4d6dccdb90c4dfbde7_000.dmp

dump count = 1

ChildEBP RetAddr  
042af844 042af920 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
042af858 042af868 0x42af920
042af85c 7720d2af 0x42af868
042af868 00000000 ntdll!wcstombs+0x6f
60555619833f0b37cbad84686d27c937_000.dmp

dump count = 1

ChildEBP RetAddr  
006fdd84 006fde5c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
006fdd98 006fdda8 0x6fde5c
006fdd9c c0000017 0x6fdda8
006fdda8 00000000 0xc0000017
58ca6ecf66c1a7022a419c7a1295e301_000.dmp


Top 2: Version = 1.6624.1155.527, Total count = 2


dump count = 2

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62
1e3daba42c3e42c14779480a034280d9_000.dmp
68dbc53050f74cb3ac19945c7e768cac_000.dmp


Top 3: Version = 1.6623.1055.406, Total count = 1


dump count = 1

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62
cea91f3e9f0e1571a96273d8a6ae4a25_000.dmp


Top 4: Version = 1.6624.1135.321, Total count = 1


dump count = 1

ChildEBP RetAddr  
001992f8 00000000 KERNELBASE!RaiseException+0x62
6a428fa7598cfbaa176f681a94a0535d_000.dmp


Top 5: Version = 1.6624.1190.218, Total count = 1


dump count = 1

ChildEBP RetAddr  
0ddbfc80 7786f7c3 ntdll!LdrpCleanupThreadTlsData+0x49
0ddbfc9c 7786f6fe ntdll!LdrpFreeTls+0x87
0ddbfd30 7786f4fb ntdll!LdrShutdownThread+0x168
0ddbfd40 75f3ef73 ntdll!RtlExitUserThread+0x2a
0ddbfd4c 778a3618 kernel32!BaseThreadInitThunk+0x15
0ddbfd8c 778a35eb ntdll!__RtlUserThreadStart+0x70
0ddbfda4 00000000 ntdll!_RtlUserThreadStart+0x1b
3516973dc0473ba0bccb59232c68674a_000.dmp