Crash in unknown_whaleclean, Analyzed 14 dumps, total processed 4684, rate equals 0.30%

Top 1: Version = 1.7525.1135.401, Total count = 12

dump count = 2

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0014ec74 00000000 0x0

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0b80f4fc 00000000 0xf7799d1

dump count = 1

003dcf83 756d2074 0x30203d20
003dcf87 30203d20 shell32!__dyn_tls_init_callback <PERF> (shell32+0x3e2074)
003dcf8b 3130302e 0x30203d20
003dcf8f 6f6c2029 0x3130302e
003dcf93 656d2077 0x6f6c2029
003dcf97 79726f6d 0x656d2077
003dcf9b 746f6e20 0x79726f6d
003dcf9f 63696669 0x746f6e20
003dcfa3 6f697461 0x63696669
003dcfa7 4347206e 0x6f697461
003dcfab 206e6920 0x4347206e
003dcfaf 20646c6f 0x206e6920
003dcfb3 63617073 0x20646c6f
003dcfb7 65722065 0x63617073
003dcfbb 73657571 0x65722065
003dd0ff 79726f6d bcryptprimitives!SHATransformP3+0x331
003dd10b 6f697461 0x79726f6d
003dd10f 4347206e 0x6f697461
003dd113 206e6920 0x4347206e
003dd117 20646c6f 0x206e6920
003dd11b 63617073 0x20646c6f
003dd11f 65722065 0x63617073
003dd123 73657571 0x65722065
003dd267 00000000 bcryptprimitives!SHATransformP3+0x331

dump count = 1

ChildEBP RetAddr  
040ff544 040ff628 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
040ff558 040ff568 0x40ff628
040ff55c 02b9b288 0x40ff568
040ff568 00000000 0x2b9b288

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
056ffcec 00000000 0x79ce99d1

dump count = 1

003ec80f 75716572 0x20656361
003ec87b 30203d20 urlmon!CreateUriPriv+0x18c
003ec89f 79726f6d 0x30203d20
003ec8a3 746f6e20 0x79726f6d
003ec8a7 63696669 0x746f6e20
003ec8ab 6f697461 0x63696669
003ec8af 4347206e 0x6f697461
003ec8b3 206e6920 0x4347206e
003ec8b7 20646c6f 0x206e6920
003ec8bb 63617073 0x20646c6f
003ec8bf 65722065 0x63617073
003ec8c3 73657571 0x65722065
003ec8c7 0a646574 0x73657571
003ec8cb 00000000 0xa646574

dump count = 1

ChildEBP RetAddr  
0765f9d8 76e2b7d0 rpcrt4!LRPC_BASE_CCALL::RemoveFromCausalFlowNotify+0x1d
0765f9e8 76e07571 rpcrt4!LRPC_CCALL::PrepareCallForCaching+0x72
0765f9f8 76e075eb rpcrt4!LRPC_BASE_CCALL::FreeObject+0xa0
0765fa08 76e12459 rpcrt4!LRPC_BASE_CCALL::FreeBuffer+0xd1
0765fa18 76e072ca rpcrt4!LRPC_CCALL::FreeBuffer+0x4e
0765fa24 76e07f7d rpcrt4!I_RpcFreeBuffer+0x10
0765fa34 76ea0f51 rpcrt4!NdrFreeBuffer+0x1f
0765fa74 76ea0eef rpcrt4!NdrpFreeAsyncMsg+0x4b
0765faf4 732a16de rpcrt4!NdrpCompleteAsyncClientCall+0x166
0765fb3c 732a2325 nlaapi!RefObjAddTag+0xe
0765fbd0 77b701a3 nlaapi!NLA_QUERY_HANDLE_completion_internal+0x13b
0765fc10 77b50d48 ntdll!RtlpTpWaitCallback+0x94
0765fc38 77b509b1 ntdll!TppWaitpExecuteCallback+0x11b
0765fd88 7564344d ntdll!TppWorkerThread+0x562
0765fd94 77b39802 kernel32!BaseThreadInitThunk+0xe
0765fdd4 77b397d5 ntdll!__RtlUserThreadStart+0x70
0765fdec 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
042cf174 042cf254 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
042cf188 042cf198 0x42cf254
042cf18c 0cbe7bd0 0x42cf198
042cf198 00000000 0xcbe7bd0

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
05d6f3a0 00000000 0xf2f9ab1

Top 2: Version = 1.7524.1055.929, Total count = 2

dump count = 1

ChildEBP RetAddr  
0382fad8 77d96472 ntdll!TppRaiseInvalidParameter+0x37
0382faf0 77dad3b3 ntdll!TppCancelWait+0xc4
0382fb14 772bad85 ntdll!TpWaitForWait+0x53
0382fb3c 772ba7e9 crypt32!RegStoreProvClose+0x35
0382fb84 772ba6a6 crypt32!CloseStore+0xb9
0382fba0 772bab6d crypt32!CertCloseStore+0x86
0382fbe8 772ba6a6 crypt32!CloseStore+0x43d
0382fc04 772bab6d crypt32!CertCloseStore+0x86
0382fc4c 772ba6a6 crypt32!CloseStore+0x43d
0382fc68 772bab6d crypt32!CertCloseStore+0x86
0382fcb0 772ba6a6 crypt32!CloseStore+0x43d
0382fccc 772bab6d crypt32!CertCloseStore+0x86
0382fd14 772ba6a6 crypt32!CloseStore+0x43d
0382fd30 77339880 crypt32!CertCloseStore+0x86
0382fd48 773382eb crypt32!CCertChainEngine::~CCertChainEngine+0x14f
0382fd5c 7733d7f0 crypt32!CertFreeCertificateChainEngine+0x2b
0382fd7c 772ee6cd crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
0382fd94 77d9507a crypt32!AutoFlushEngineTimerCallback+0x1ba8d
0382fdbc 77da633d ntdll!TppTimerpExecuteCallback+0x8a
0382ff74 76915d49 ntdll!TppWorkerThread+0x74d
0382ff84 77dbcf0b kernel32!BaseThreadInitThunk+0x19
0382ffdc 77dbce91 ntdll!__RtlUserThreadStart+0x2b
0382ffec 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0617f110 7308b6ba mswsock!SockpWaitForReaders+0x84
0617f120 7308374a mswsock!SockAcquireRwLockExclusive+0x62
0617f1a0 73082fec mswsock!SockGetTdiName+0x190
0617f2e0 73083885 mswsock!SockSocket+0xfa
0617f36c 76b29a73 mswsock!WSPSocket+0x12c
0617f3d8 76b2c1f2 ws2_32!WSASocketW+0x159
0617f4ac 76b2ad07 ws2_32!LookupAddressForName+0x10e
0617fd8c 7651919f ws2_32!GetAddrInfoW+0x2f7
0617fd98 776bad8f kernel32!BaseThreadInitThunk+0xe
0617fde0 776bad5a ntdll!__RtlUserThreadStart+0x2f
0617fdf0 00000000 ntdll!_RtlUserThreadStart+0x1b