Crash in unknown_syscleaner, Analyzed 17 dumps, total processed 181, rate equals 9.39%

Top 1: Version = 1.7325.1110.312, Total count = 9

dump count = 1

ChildEBP RetAddr  
0018f244 0018f320 KERNELBASE!RaiseException+0x48
WARNING: Frame IP not in any known module. Following frames may be wrong.
0018f258 0018f268 0x18f320
0018f25c 00000000 0x18f268

dump count = 1

ChildEBP RetAddr  
00f7f384 00f7f460 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00f7f398 00f7f3a8 0xf7f460
00f7f39c 02e60000 0xf7f3a8
00f7f3a8 00000000 0x2e60000

dump count = 1

ChildEBP RetAddr  
0440f374 0440f450 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0440f388 0440f398 0x440f450
0440f38c f28511bf 0x440f398
0440f398 00000000 0xf28511bf

dump count = 1

ChildEBP RetAddr  
0135f674 0135f750 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0135f688 0135f698 0x135f750
0135f68c 0135f718 0x135f698
0135f698 00000000 0x135f718

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
086cedb8 1423f3e8 0x86cf6f8
086cedbc 28b00249 0x1423f3e8
086cedc0 00000000 0x28b00249

dump count = 1

ChildEBP RetAddr  
00bcf064 00bcf140 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00bcf078 00bcf088 0xbcf140
00bcf07c 012c1ee0 0xbcf088
00bcf088 00000000 0x12c1ee0

dump count = 1

ChildEBP RetAddr  
002cf32c 7595d5ae ntdll!TpReleaseAlpcCompletion+0x156
002cf334 7595d588 rpcrt4!RPC_THREAD_POOL_ALPC::~RPC_THREAD_POOL_ALPC+0xd
002cf340 75940777 rpcrt4!RPC_THREAD_POOL_ALPC::`scalar deleting destructor'+0xd
002cf364 7594059d rpcrt4!LRPC_CASSOCIATION::~LRPC_CASSOCIATION+0xef
002cf370 759406da rpcrt4!LRPC_CASSOCIATION::`scalar deleting destructor'+0xd
002cf380 75945e8d rpcrt4!LRPC_CASSOCIATION::RemoveAssociationDictionaryReference+0x29
002cf3a8 7593dce8 rpcrt4!LRPC_CASSOCIATION::RemoveReference+0xc9
002cf3b8 7593dc44 rpcrt4!LRPC_FAST_BINDING_HANDLE::ResetBindState+0x99
002cf3cc 759466f0 rpcrt4!LRPC_FAST_BINDING_HANDLE::Unbind+0x32
002cf3dc 75ea78a7 rpcrt4!RpcBindingUnbind+0x3e
002cf410 75d7b87b wininet!CCacheServerConnection::Connect+0x125dc8
002cf44c 75d7c80c wininet!GetCacheServerConnection+0x59
002cf474 75d7c7b0 wininet!CCacheServerContainer::Connect+0x45
002cf4bc 75d7c67f wininet!CCacheClientContainer::CreateServerContainer+0x17c
002cf4e4 75ea756a wininet!CCacheClientContainer::GetServerContainer+0x11f
00000000 00000000 wininet!CCacheServerContainer::Release+0x1488e4

dump count = 1

ChildEBP RetAddr  
001ff6b4 001ff798 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
001ff6c8 001ff6d8 0x1ff798
001ff6cc 0883fcc0 0x1ff6d8
001ff6d8 00000000 0x883fcc0

Top 2: Version = 1.7325.1120.331, Total count = 4

dump count = 1

ChildEBP RetAddr  
0529d998 778ef53f ntdll!memset+0x45
0529d9c0 778c5f0e rpcrt4!LRPC_BASE_CCALL::GetBuffer+0x6f
0529de10 778c4a64 rpcrt4!NdrClientCall2+0x75e
0529de24 74f1953b rpcrt4!NdrClientCall4+0x14
0529ded4 74efd455 dnsapi!SyncResolverQueryRpc+0xb4
0529df2c 74efa864 dnsapi!Rpc_ResolverQuery+0x98
0529e10c 74ef9ecf dnsapi!Query_PrivateExW+0x8f4
0529e20c 74f93a26 dnsapi!DnsQueryEx+0x25f
0529e288 74f94037 mswsock!SaBlob_Query+0xb8
0529e2e8 74f91971 mswsock!Rnr_DoDnsLookup+0x2b6
0529e578 762588b2 mswsock!Dns_NSPLookupServiceNext+0x2f1
0529e5a4 7624c73a ws2_32!NSPROVIDER::NSPLookupServiceNext+0x35
0529e5e0 7624c66e ws2_32!NSQUERY::LookupServiceNext+0x7a
0529e628 7624bf67 ws2_32!WSALookupServiceNextW+0xbe
0529ef98 7624bd03 ws2_32!QueryDnsForFamily+0x1e7
0529efe0 76254109 ws2_32!QueryDns+0x113
0529f06c 76252974 ws2_32!LookupAddressForName+0x159
0529f84c 767efcc9 ws2_32!GetAddrInfoW+0x2c4
0529f85c 77df82ae kernel32!BaseThreadInitThunk+0x19
0529f8b8 77df827e ntdll!__RtlUserThreadStart+0x2f
0529f8c8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03c9f324 03c9f400 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03c9f338 03c9f348 0x3c9f400
03c9f33c 03c9f3c8 0x3c9f348
03c9f348 00000000 0x3c9f3c8

dump count = 1

ChildEBP RetAddr  
004ef5ec 7642d57c urlmon!CList<CCodeBaseHold *,CCodeBaseHold *>::RemoveAll
004ef600 763f57e2 urlmon!FreeTlsData+0x1a
004ef618 763f5a1a urlmon!CleanupAllThreadsOnProcessDetach+0x53
004ef630 763e1c36 urlmon!TlsDllMain+0x7d
004ef650 763e1acf urlmon!DllMain+0x2fe
004ef6b0 77819280 urlmon!_initterm_e+0x131
004ef6d0 77838f88 ntdll!LdrpCallInitRoutine+0x14
004ef774 77838e2a ntdll!LdrShutdownProcess+0x1aa
004ef788 767d7a3c ntdll!RtlExitUserProcess+0x74
004ef834 767d343d kernel32!ExitProcessStub+0x12
004ef840 77819812 kernel32!BaseThreadInitThunk+0xe
004ef880 778197e5 ntdll!__RtlUserThreadStart+0x70
004ef898 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
00eff1a4 00eff27c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00eff1b8 00eff1c8 0xeff27c
00eff1bc c0000017 0xeff1c8
00eff1c8 00000000 0xc0000017

Top 3: Version = 1.7325.1125.606, Total count = 4

dump count = 1

ChildEBP RetAddr  
04bef964 04befa40 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
04bef978 04bef988 0x4befa40
04bef97c 01bef9c8 0x4bef988
04bef988 00000000 0x1bef9c8

dump count = 1

ChildEBP RetAddr  
03c2f954 03c2fa30 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03c2f968 03c2f978 0x3c2fa30
03c2f96c 03c2f9f8 0x3c2f978
03c2f978 00000000 0x3c2f9f8

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
0466f684 0466f760 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0466f698 0466f6a8 0x466f760
0466f69c 0466f728 0x466f6a8
0466f6a8 00000000 0x466f728