Crash in unknown_syscleaner, Analyzed 13 dumps, total processed 178, rate equals 7.30%



Top 1: Version = 1.7325.1110.312, Total count = 10


dump count = 1

0034cd37 756d2065 0x67617265
0034d15f 00000000 urlmon!CCodeDownload::SetupInf+0x1f2
2c1768d879890786451c1dd7a9e1475b_001.dmp

dump count = 1

ChildEBP RetAddr  
0701f374 0701f454 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0701f388 0701f398 0x701f454
0701f38c dd0000dd 0x701f398
0701f398 00000000 0xdd0000dd
07f1f8b0ffe6f9e1912750ae1d4c7af5_000.dmp

dump count = 1

ChildEBP RetAddr  
041ff364 041ff444 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
041ff378 041ff388 0x41ff444
041ff37c 041ff408 0x41ff388
041ff388 00000000 0x41ff408
f961b7865231211550f878ae649e064d_000.dmp

dump count = 1

ChildEBP RetAddr  
0456f364 0456f43c KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0456f378 0456f388 0x456f43c
0456f37c 00000000 0x456f388
d19a95e762489698e8ef9ebdc3231370_000.dmp

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51
74febca2bc2ef33f3a7909885b003faf_001.dmp

dump count = 1

ChildEBP RetAddr  
0053f704 0053f7e8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0053f718 0053f728 0x53f7e8
0053f71c 8bf02a17 0x53f728
0053f728 00000000 0x8bf02a17
929b7e6126e42e9a8f675f348687704c_000.dmp

dump count = 1

ChildEBP RetAddr  
03d5f534 03d5f610 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
03d5f548 03d5f558 0x3d5f610
03d5f54c 0133c000 0x3d5f558
03d5f558 00000000 0x133c000
8b2959f2639b8cf175febe9d468a3b4f_000.dmp

dump count = 1

ChildEBP RetAddr  
0e7bf1fc 7737e0c3 ntdll!RtlpLowFragHeapFree+0x31
0e7bf214 76a81918 ntdll!RtlFreeHeap+0x105
0e7bf234 72523ff3 nsi!NsiFreeTable+0x24
0e7bf264 7285315a IPHLPAPI!ConvertInterfaceGuidToLuid+0x56
0e7bf848 72852f85 winhttp!GetDefaultGatewayMacAddressList+0xce
0e7bf880 72852eb9 winhttp!GatewayMacList::AddGatewayMacFromAdapter+0xa1
0e7bf93c 7285452e winhttp!LoadGatewayMacsByAdapter+0x1d7
0e7bf96c 72852b6e winhttp!WinHttpReadGuidsForConnectedNetworks+0xe9
0e7bf990 7285394e winhttp!NETWORK_MANAGER::Init+0x4a
0e7bf9c8 7285467e winhttp!NETWORK_MANAGER::GetWpadInformationForConnectedNetworks+0x60
0e7bf9f0 7284620f winhttp!SWpadAsyncCall::OnWorkItem+0x5b
0e7bfa30 7284618d winhttp!HTTP_THREAD_POOL::_WorkItemCallback+0xc1
0e7bfa38 773bfa5f winhttp!HTTP_THREAD_POOL::_StaticWorkItemCallback+0x16
0e7bfa5c 773a09b1 ntdll!TppWorkpExecuteCallback+0x10f
0e7bfbac 74bc343d ntdll!TppWorkerThread+0x562
0e7bfbb8 77389802 kernel32!BaseThreadInitThunk+0xe
0e7bfbf8 773897d5 ntdll!__RtlUserThreadStart+0x70
0e7bfc10 00000000 ntdll!_RtlUserThreadStart+0x1b
423cf79bad780c67ceefd1cdc2cacf97_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
06a7f484 00000000 0x798a99d1
f25572f36d08465dc0453aec88198cdb_000.dmp

dump count = 1

ChildEBP RetAddr  
003ade94 003adf74 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
003adea8 003adeb8 0x3adf74
003adeac 003adf38 0x3adeb8
003adeb8 00000000 0x3adf38
963c894a1f7319b13976bf96878d0f74_000.dmp


Top 2: Version = 1.7325.1120.331, Total count = 3


dump count = 1

ChildEBP RetAddr  
0133f4c4 0133f5a0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0133f4d8 0133f4e8 0x133f5a0
0133f4dc 0133f568 0x133f4e8
0133f4e8 00000000 0x133f568
9d639699fafbf699092047469cf719c5_000.dmp

dump count = 1

ChildEBP RetAddr  
002cf32c 7595d5ae ntdll!TpReleaseAlpcCompletion+0x156
002cf334 7595d588 rpcrt4!RPC_THREAD_POOL_ALPC::~RPC_THREAD_POOL_ALPC+0xd
002cf340 75940777 rpcrt4!RPC_THREAD_POOL_ALPC::`scalar deleting destructor'+0xd
002cf364 7594059d rpcrt4!LRPC_CASSOCIATION::~LRPC_CASSOCIATION+0xef
002cf370 759406da rpcrt4!LRPC_CASSOCIATION::`scalar deleting destructor'+0xd
002cf380 75945e8d rpcrt4!LRPC_CASSOCIATION::RemoveAssociationDictionaryReference+0x29
002cf3a8 7593dce8 rpcrt4!LRPC_CASSOCIATION::RemoveReference+0xc9
002cf3b8 7593dc44 rpcrt4!LRPC_FAST_BINDING_HANDLE::ResetBindState+0x99
002cf3cc 759466f0 rpcrt4!LRPC_FAST_BINDING_HANDLE::Unbind+0x32
002cf3dc 75ea78a7 rpcrt4!RpcBindingUnbind+0x3e
002cf410 75d7b87b wininet!CCacheServerConnection::Connect+0x125dc8
002cf44c 75d7c80c wininet!GetCacheServerConnection+0x59
002cf474 75d7c7b0 wininet!CCacheServerContainer::Connect+0x45
002cf4bc 75d7c67f wininet!CCacheClientContainer::CreateServerContainer+0x17c
002cf4e4 75ea756a wininet!CCacheClientContainer::GetServerContainer+0x11f
00000000 00000000 wininet!CCacheServerContainer::Release+0x1488e4
de44b8c2f26da8dd3e700a4b7c10c6db_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
001ee000 099e2008 0x80000430
001ee004 099e2010 0x99e2008
001ee008 001ee024 0x99e2010
001ee00c 001ee030 0x1ee024
001ee024 16ef2fdc 0x1ee030
001ee084 001ee090 0x16ef2fdc
001ee088 00000000 0x1ee090
312b3be0539c46643a065b899cbac706_000.dmp