Crash in unknown_whaleclean, Analyzed 12 dumps, total processed 287, rate equals 4.18%

Top 1: Version = 1.7525.1135.401, Total count = 12

dump count = 2

ChildEBP RetAddr  
05d5f530 77a4012a ntdll!RtlpWaitOnCriticalSection+0xd2
05d5f568 77a3ff79 ntdll!RtlpEnterCriticalSectionContended+0x1aa
05d5f574 75b4177b ntdll!RtlEnterCriticalSection+0x49
05d5f598 75b805ca combase!OXIDEntry::PostCall+0xfb
05d5f7a4 75b3c26d combase!ThreadInvokeWorker+0x7b3
05d5f7ac 7598f8d0 combase!ThreadInvoke+0xd
05d5f7ec 7598f815 rpcrt4!DispatchToStubInCNoAvrf+0x20
05d5f858 7598f5d8 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x175
05d5f8a8 75994313 rpcrt4!RPC_INTERFACE::DispatchToStubWithObject+0x158
05d5f914 75994032 rpcrt4!LRPC_SCALL::DispatchRequest+0x123
05d5f99c 759946f1 rpcrt4!LRPC_SCALL::HandleRequest+0x382
05d5f9f0 7599cbe7 rpcrt4!LRPC_ADDRESS::HandleRequest+0x2c1
05d5facc 759a51b0 rpcrt4!LRPC_ADDRESS::ProcessIO+0x227
05d5fb08 77a36f01 rpcrt4!LrpcIoComplete+0xa0
05d5fb30 77a35f7a ntdll!TppAlpcpExecuteCallback+0xa1
05d5fcec 76e2fcc9 ntdll!TppWorkerThread+0x63a
05d5fcfc 77a67c6e kernel32!BaseThreadInitThunk+0x19
05d5fd58 77a67c3e ntdll!__RtlUserThreadStart+0x2f
05d5fd68 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0436f5b4 0436f68c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0436f5c8 0436f5d8 0x436f68c
0436f5cc c0000017 0x436f5d8
0436f5d8 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
041cf6f4 041cf7d0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
041cf708 041cf718 0x41cf7d0
041cf70c 041cf750 0x41cf718
041cf718 00000000 0x41cf750

dump count = 1

ChildEBP RetAddr  
0164e780 00000000 ntdll!RtlpAllocateHeapInternal+0x4c2

dump count = 1

ChildEBP RetAddr  
04f7f824 77bcfbae ntdll!RtlIsValidHandler+0x54
04f7f8a4 77bf6b67 ntdll!RtlDispatchException+0x10e
04f7f8a4 00000000 ntdll!KiUserExceptionDispatcher+0xf

dump count = 1

ChildEBP RetAddr  
0c27e04c 7340a48e dnsapi!Dns_CreateRecordForIpString_W+0x8
0c27e204 73409fef dnsapi!Query_PrivateExW+0x3fe
0c27e304 743a3a46 dnsapi!DnsQueryEx+0x25f
0c27e380 743a4057 mswsock!SaBlob_Query+0xb8
0c27e3e0 743a1991 mswsock!Rnr_DoDnsLookup+0x2b6
0c27e670 760a88b2 mswsock!Dns_NSPLookupServiceNext+0x2f1
0c27e69c 7609c73a ws2_32!NSPROVIDER::NSPLookupServiceNext+0x35
0c27e6d8 7609c66e ws2_32!NSQUERY::LookupServiceNext+0x7a
0c27e720 7609bf67 ws2_32!WSALookupServiceNextW+0xbe
0c27f090 7609bcd6 ws2_32!QueryDnsForFamily+0x1e7
0c27f0d8 760a4109 ws2_32!QueryDns+0xe6
0c27f164 760a2974 ws2_32!LookupAddressForName+0x159
0c27f8c8 7609a8bc ws2_32!GetAddrInfoW+0x2c4
0c27f988 77aa5dde ws2_32!getaddrinfo+0xac
0c27f9a4 0c27fa18 ntdll!RtlAllocateHeap+0x3e
WARNING: Frame IP not in any known module. Following frames may be wrong.
0c27fb50 77ae7944 0xc27fa18
0c27fba0 0c27fb00 ntdll!RtlpFreeHeapInternal+0x7aa
0c27fbb0 00000000 0xc27fb00

dump count = 1

ChildEBP RetAddr  
00afd654 00afd72c KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00afd668 00afd678 0xafd72c
00afd66c 00000000 0xafd678

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0689f874 00000000 0x50a91b11

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
05f2fb28 00000000 0x7a799d1