Crash in unknown_whaleclean, Analyzed 15 dumps, total processed 190, rate equals 7.89%

Top 1: Version = 1.7525.1135.401, Total count = 14

dump count = 2

ChildEBP RetAddr  
0c4ff5f8 76fd02aa ntdll!RtlpWaitOnCriticalSection+0xd2
0c4ff630 76fd00f9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
0c4ff63c 76b4f36b ntdll!RtlEnterCriticalSection+0x49
0c4ff660 76c01c36 combase!OXIDEntry::PostCall+0xfb
0c4ff86c 76b69dbd combase!ThreadInvokeWorker+0x7b3
0c4ff874 75eef670 combase!ThreadInvoke+0xd
0c4ff8b4 75eef5b5 rpcrt4!DispatchToStubInCNoAvrf+0x20
0c4ff920 75eef378 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x175
0c4ff970 75ef4812 rpcrt4!RPC_INTERFACE::DispatchToStubWithObject+0x158
0c4ff9dc 75ef43b2 rpcrt4!LRPC_SCALL::DispatchRequest+0x2a2
0c4ffa64 75ef3ec1 rpcrt4!LRPC_SCALL::HandleRequest+0x382
0c4ffab8 75f09057 rpcrt4!LRPC_ADDRESS::HandleRequest+0x2c1
0c4ffb94 75f11800 rpcrt4!LRPC_ADDRESS::ProcessIO+0x227
0c4ffbd0 76fc6ff1 rpcrt4!LrpcIoComplete+0xa0
0c4ffbf8 76fc606a ntdll!TppAlpcpExecuteCallback+0xa1
0c4ffdb4 7615fcc9 ntdll!TppWorkerThread+0x63a
0c4ffdc4 76ff82ae kernel32!BaseThreadInitThunk+0x19
0c4ffe20 76ff827e ntdll!__RtlUserThreadStart+0x2f
0c4ffe30 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

003cca8f 71657220 0x65636170
003ccfcf 00000000 dxgi!CDXGIAdapter::OpenAdapter+0x241

dump count = 1

ChildEBP RetAddr  
04f4f7a4 04f4f888 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
04f4f7b8 04f4f7c8 0x4f4f888
04f4f7bc f5604cae 0x4f4f7c8
04f4f7c8 00000000 0xf5604cae

dump count = 1

0041c267 75716572 0x20656361
0041c2a7 3131203e wininet!s_DependencyStoreOpenContainer+0xe1
0041c2b7 3533202c 0x3131203e
0041c2bb 2f20322e 0x3533202c
0041c2bf 302e3020 0x2f20322e
0041c2c3 20736d20 0x302e3020
0041c2c7 76612820 0x20736d20
0041c2f3 656d2077 shell32!SHProcessMessagesUntilEventsEx+0xba
0041c30b 206e6920 0x656d2077
0041c30f 20646c6f 0x206e6920
0041c313 63617073 0x20646c6f
0041c317 65722065 0x63617073
0041c31b 73657571 0x65722065
0041c31f 0a646574 0x73657571
0041c323 00000000 0xa646574

dump count = 1

ChildEBP RetAddr  
00cff314 7730710c ntdll!RtlpAllocateHeap+0x1235
00cff3b0 773060ae ntdll!RtlpAllocateHeapInternal+0x104c
00cff3c8 77300419 ntdll!RtlAllocateHeap+0x3e
00cff3fc 77303955 ntdll!RtlpAllocateUserBlockFromHeap+0x48
00cff42c 77306c8f ntdll!RtlpAllocateUserBlock+0x125
00cff4c0 773060ae ntdll!RtlpAllocateHeapInternal+0xbcf
00cff4d4 11cf59e0 ntdll!RtlAllocateHeap+0x3e
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cff4e4 00000000 0x11cf59e0

dump count = 1

1171fb28 7535974f ntdll!RtlFreeHeap+0x105
WARNING: Stack unwind information not available. Following frames may be wrong.
1171fb44 753598d4 ole32!CoRevokeInitializeSpy+0x19b
1171fb78 77416af4 ole32!CoRevokeInitializeSpy+0x320
1171fc10 77416d88 ntdll!LdrShutdownThread+0x35
1171fc20 76a819e8 ntdll!RtlExitUserThread+0x2a
1171fc34 750ec158 KERNELBASE!FreeLibraryAndExitThread+0x5f
1171fc44 757f446e kernel32!FreeLibraryAndExitThreadStub+0x10
1171fcc4 750d3d12 shlwapi!WrapperThreadProc+0x278
1171fcd0 773f9732 kernel32!BaseThreadInitThunk+0xe
1171fd10 773f9705 ntdll!__RtlUserThreadStart+0x70
1171fd28 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0421f474 0421f54c KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0421f488 0421f498 0x421f54c
0421f48c 0421f508 0x421f498
0421f498 00000000 0x421f508

dump count = 1

ChildEBP RetAddr  
0481f5b4 0481f68c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0481f5c8 0481f5d8 0x481f68c
0481f5cc 99c16cce 0x481f5d8
0481f5d8 00000000 0x99c16cce

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
012fdea4 012fdf7c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
012fdeb8 012fdec8 0x12fdf7c
012fdebc 00824010 0x12fdec8
012fdec8 00000000 0x824010

Top 2: Version = 1.7525.1145.610, Total count = 1

dump count = 1

ChildEBP RetAddr  
03bbf544 03bbf620 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03bbf558 03bbf568 0x3bbf620
03bbf55c 739f0048 0x3bbf568
03bbf568 00000000 0x739f0048