Crash in unknown_syscleaner, Analyzed 13 dumps, total processed 5210, rate equals 0.25%



Top 1: Version = 1.7325.1110.312, Total count = 7


dump count = 1

ChildEBP RetAddr  
0b35f228 77443473 MMDevAPI!WinStationGetConnectionProperty+0x728
0b35f24c 77443414 ntdll!ExecuteHandler+0x24
0b35f2d8 773f0133 ntdll!RtlDispatchException+0x127
0b35f2d8 00000000 ntdll!KiUserExceptionDispatcher+0xf
syscleaner/2025-06-07_04-16-20/dump/f68e8fb2fb922020c74c0902ac1c8a10_000.dmp

dump count = 1

ChildEBP RetAddr  
024ff674 77a0ba50 ntdll!LdrpUpdateLoadCount2+0x40
024ff690 77a0d1c9 ntdll!LdrpUpdateLoadCount2+0xff
024ff710 77a0d324 ntdll!LdrpUnloadDll+0x9c
024ff754 75372eee ntdll!LdrUnloadDll+0x4a
024ff764 760688da KERNELBASE!FreeLibrary+0x15
024ff79c 76068115 crypt32!FreeDllWaitForCallback+0x161
024ff7b8 7652343d crypt32!ILS_WaitForThreadProc+0x44
024ff7c4 77a09802 kernel32!BaseThreadInitThunk+0xe
024ff804 77a097d5 ntdll!__RtlUserThreadStart+0x70
024ff81c 00000000 ntdll!_RtlUserThreadStart+0x1b
syscleaner/2025-06-07_04-16-20/dump/c6341a3a9e085becf0c89f9fc6109d15_000.dmp

dump count = 1

ChildEBP RetAddr  
004ff244 004ff328 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
004ff258 004ff268 0x4ff328
004ff25c 004ff2f0 0x4ff268
004ff268 00000000 0x4ff2f0
syscleaner/2025-06-07_04-16-20/dump/cdd046adf464437a6ceeb9663f76f74c_000.dmp

dump count = 1

ChildEBP RetAddr  
008ff214 008ff2f8 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
008ff228 008ff238 0x8ff2f8
008ff22c 008ff298 0x8ff238
008ff238 00000000 0x8ff298
syscleaner/2025-06-07_04-16-20/dump/70a044e821ea75469c89f0aca36c27b3_000.dmp

dump count = 1

ChildEBP RetAddr  
044df4a4 044df588 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
044df4b8 044df4c8 0x44df588
044df4bc 02ed0000 0x44df4c8
044df4c8 00000000 0x2ed0000
syscleaner/2025-06-07_04-16-20/dump/bd636a63ba2201cff813f540e944cee3_001.dmp

dump count = 1

ChildEBP RetAddr  
04edf314 04edf3f4 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
04edf328 04edf338 0x4edf3f4
04edf32c 04edf3b8 0x4edf338
04edf338 00000000 0x4edf3b8
syscleaner/2025-06-07_04-16-20/dump/3188b966254da99261a784a960df5792_000.dmp

dump count = 1

ChildEBP RetAddr  
10dbfb08 6df564c6 ntdll!RtlEnterCriticalSection+0x12
10dbfb28 6df5648a mswsock!SockAsyncConnectCompletion+0x41
10dbfb38 6df5635f mswsock!SockHandleAsyncIndication+0x73
10dbfb5c 7709346d mswsock!SockAsyncThread+0xcd
10dbfb68 77db9722 kernel32!BaseThreadInitThunk+0xe
10dbfba8 77db96f5 ntdll!__RtlUserThreadStart+0x70
10dbfbc0 00000000 ntdll!_RtlUserThreadStart+0x1b
syscleaner/2025-06-07_04-16-20/dump/250061bb5b4815580282b3a577d1fc7e_000.dmp


Top 2: Version = 1.7325.1120.331, Total count = 4


dump count = 1

ChildEBP RetAddr  
00daef74 00daf050 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00daef88 00daef98 0xdaf050
00daef8c 00daeff0 0xdaef98
00daef98 00000000 0xdaeff0
syscleaner/2025-06-07_04-16-20/dump/73e1fd34a1a17e45ee7e46cba102778b_000.dmp

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51
syscleaner/2025-06-07_04-16-20/dump/efe25eb8330cf0a4d6b71b0cf8c90eeb_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 0x7000007
syscleaner/2025-06-07_04-16-20/dump/8769f51a06f329038a609fdcff77c791_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
06adf1e4 00000000 0x7a2094d1
syscleaner/2025-06-07_04-16-20/dump/300c8023f4f25f044a10c03172a258a6_000.dmp


Top 3: Version = 1.7324.1055.929, Total count = 1


dump count = 1

ChildEBP RetAddr  
03d3f444 03d3f528 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03d3f458 03d3f468 0x3d3f528
03d3f45c 03d3f4f0 0x3d3f468
03d3f468 00000000 0x3d3f4f0
syscleaner/2025-06-07_04-16-20/dump/e524512437f52ec29ed5982228d14352_000.dmp


Top 4: Version = 1.7324.1095.1224, Total count = 1


dump count = 1

ChildEBP RetAddr  
004ef5ec 7642d57c urlmon!CList<CCodeBaseHold *,CCodeBaseHold *>::RemoveAll
004ef600 763f57e2 urlmon!FreeTlsData+0x1a
004ef618 763f5a1a urlmon!CleanupAllThreadsOnProcessDetach+0x53
004ef630 763e1c36 urlmon!TlsDllMain+0x7d
004ef650 763e1acf urlmon!DllMain+0x2fe
004ef6b0 77819280 urlmon!_initterm_e+0x131
004ef6d0 77838f88 ntdll!LdrpCallInitRoutine+0x14
004ef774 77838e2a ntdll!LdrShutdownProcess+0x1aa
004ef788 767d7a3c ntdll!RtlExitUserProcess+0x74
004ef834 767d343d kernel32!ExitProcessStub+0x12
004ef840 77819812 kernel32!BaseThreadInitThunk+0xe
004ef880 778197e5 ntdll!__RtlUserThreadStart+0x70
004ef898 00000000 ntdll!_RtlUserThreadStart+0x1b
syscleaner/2025-06-07_04-16-20/dump/26029a93f7ef3c87c8908031f7d3ab01_000.dmp