Crash in unknown_whaleclean, Analyzed 20 dumps, total processed 292, rate equals 6.85%

Top 1: Version = 1.7525.1145.610, Total count = 12

dump count = 2

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0014ec74 00000000 0x0

dump count = 1

ChildEBP RetAddr  
0448f714 0448f7f8 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0448f728 0448f738 0x448f7f8
0448f72c 1e52714b 0x448f738
0448f738 00000000 0x1e52714b

dump count = 1

ChildEBP RetAddr  
02fff474 02fff54c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
02fff488 02fff498 0x2fff54c
02fff48c c0000017 0x2fff498
02fff498 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
00aff214 00aff2f0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
00aff228 00aff238 0xaff2f0
00aff22c 00aff290 0xaff238
00aff238 00000000 0xaff290

dump count = 1

ChildEBP RetAddr  
049af6f4 049af7d0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
049af708 049af718 0x49af7d0
049af70c 049af798 0x49af718
049af718 00000000 0x49af798

dump count = 1

ChildEBP RetAddr  
0cd4f648 777d6e22 ntdll!ExpInterlockedPopEntrySListFault
0cd4f6d4 777ce0d2 ntdll!RtlpLowFragHeapAllocFromContext+0x837
0cd4f748 74dc3d05 ntdll!RtlAllocateHeap+0x206
0cd4f760 74dc5924 IPHLPAPI!NetioAllocateMemory+0x1c
0cd4f77c 74dc76df IPHLPAPI!AddAddressToAdapter+0x43
0cd4f7a4 74dc77c7 IPHLPAPI!AddAddressesToAdapter+0x51
0cd4f7d8 74dc7749 IPHLPAPI!AddMulticastAddresses+0x4a
0cd4f868 74dc6a89 IPHLPAPI!AllocateAndGetAdaptersAddresses+0x563
0cd4f8a0 71e7309b IPHLPAPI!GetAdaptersAddresses+0x44
0cd4f8e0 71e715c4 winhttp!LoadAdapterTables+0x47
0cd4f9a0 71e72dce winhttp!LoadGatewayMacsByAdapter+0x75
0cd4f9d0 71e7140e winhttp!WinHttpReadGuidsForConnectedNetworks+0xe9
0cd4f9f4 71e721ee winhttp!NETWORK_MANAGER::Init+0x4a
0cd4fa2c 71e72f1e winhttp!NETWORK_MANAGER::GetWpadInformationForConnectedNetworks+0x60
0cd4fa54 71e6639b winhttp!SWpadAsyncCall::OnWorkItem+0x5b
0cd4fa94 71e66319 winhttp!HTTP_THREAD_POOL::_WorkItemCallback+0xc1
0cd4fa9c 77818449 winhttp!HTTP_THREAD_POOL::_StaticWorkItemCallback+0x16
0cd4fac0 777e54f4 ntdll!TppWorkpExecuteCallback+0x10f
0cd4fc20 76de33ca ntdll!TppWorkerThread+0x572
0cd4fc2c 777d9ed2 kernel32!BaseThreadInitThunk+0xe
0cd4fc6c 777d9ea5 ntdll!__RtlUserThreadStart+0x70
0cd4fc84 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03d9f594 03d9f670 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
03d9f5a8 03d9f5b8 0x3d9f670
03d9f5ac 01363000 0x3d9f5b8
03d9f5b8 00000000 0x1363000

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
0717f084 0717f164 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
0717f098 0717f0a8 0x717f164
0717f09c 0717f128 0x717f0a8
0717f0a8 00000000 0x717f128

dump count = 1

001ec0e3 72756320 0x2c343939
001ec0e7 746e6572 FWPUCLNT!FwpmFreeMemory0+0x11
001ec0eb 20756d20 0x746e6572
001ec0ef 2e30203d 0x20756d20
001ec0f3 29343939 0x2e30203d
001ec0f7 6c6c6120 0x29343939
001ec0fb 7461636f 0x6c6c6120
001ec0ff 206e6f69 0x7461636f
001ec103 6c696166 0x206e6f69
001ec107 20657275 0x6c696166
001ec10b 38325b0a 0x20657275
001ec10f 303a3830 0x38325b0a
001ec113 30344630 0x303a3830
001ec117 5d303145 0x30344630
001ec11b 20202020 0x5d303145
001ec11f 34313737 0x20202020
001ec123 736d2036 0x34313737
001ec127 614d203a 0x736d2036
001ec12b 732d6b72 0x614d203a
001ec22b 7563202c 0x732d6b72
001ec22f 6e657272 clbcatq!CLegacyCatalog::Release+0x4
001ec237 30203d20 0x6e657272
001ec23b 3839302e 0x30203d20
001ec23f 6f6c2029 0x3839302e
001ec243 656d2077 0x6f6c2029
001ec247 79726f6d 0x656d2077
001ec24b 746f6e20 0x79726f6d
001ec24f 63696669 0x746f6e20
001ec253 6f697461 0x63696669
001ec257 4347206e 0x6f697461
001ec25b 206e6920 0x4347206e
001ec25f 20646c6f 0x206e6920
001ec263 63617073 0x20646c6f
001ec267 65722065 0x63617073
001ec26b 73657571 0x65722065
001ec26f 0a646574 0x73657571
001ec273 00000000 0xa646574

Top 2: Version = 1.7525.1150.627, Total count = 4

dump count = 1

ChildEBP RetAddr  
03daf864 03daf948 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03daf878 03daf888 0x3daf948
03daf87c c61aab02 0x3daf888
03daf888 00000000 0xc61aab02

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51

dump count = 1

ChildEBP RetAddr  
03ecf474 03ecf558 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03ecf488 03ecf498 0x3ecf558
03ecf48c 9a4dc8df 0x3ecf498
03ecf498 00000000 0x9a4dc8df

dump count = 1

ChildEBP RetAddr  
004ff164 004ff240 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
004ff178 004ff188 0x4ff240
004ff17c 004ff208 0x4ff188
004ff188 00000000 0x4ff208

Top 3: Version = 1.7525.1160.801, Total count = 3

dump count = 1

ChildEBP RetAddr  
00afed94 00afee6c KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
00afeda8 00afedb8 0xafee6c
00afedac c0000017 0xafedb8
00afedb8 00000000 0xc0000017

dump count = 1

ChildEBP RetAddr  
0789f7f0 776a720d ntdll!RtlpSubSegmentInitialize+0xf7
0789f88c 7769e1c2 ntdll!RtlpLowFragHeapAllocFromContext+0x882
0789f900 75ec0636 ntdll!RtlAllocateHeap+0x206
0789f918 75ec0610 rpcrt4!AllocWrapper+0x23
0789f924 75ec867b rpcrt4!operator new+0xd
0789f940 75ec8d73 rpcrt4!BCACHE::AllocHelper+0xc2
0789f960 75ec63df rpcrt4!BCACHE::Allocate+0x84
0789f968 75ee4976 rpcrt4!RpcAllocateLrpcBuffer+0x10
0789f980 75ee4b3e rpcrt4!ReceiveMessage+0x2d
0789fa0c 75ee4ad6 rpcrt4!LRPC_ADDRESS::ProcessIO+0xf2
0789fa18 75ee4939 rpcrt4!LrpcServerIoHandler+0x16
0789fa28 776d408a rpcrt4!LrpcIoComplete+0x16
0789fa50 776bfb4b ntdll!TppAlpcpExecuteCallback+0x1c1
0789fba8 7682343d ntdll!TppWorkerThread+0x594
0789fbb4 776a9812 kernel32!BaseThreadInitThunk+0xe
0789fbf4 776a97e5 ntdll!__RtlUserThreadStart+0x70
0789fc0c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0d8ff934 0d8ffa0c KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0d8ff948 0d8ff958 0xd8ffa0c
0d8ff94c 0d4bbc00 0xd8ff958
0d8ff958 00000000 0xd4bbc00

Top 4: Version = 1.7524.1055.929, Total count = 1

dump count = 1

ChildEBP RetAddr  
02d2fa88 76f1650b ntdll!TppRaiseInvalidParameter+0x37
02d2faa0 76f13075 ntdll!TppCancelWait+0xc4
02d2fac4 76ef6a00 ntdll!TpSetWaitEx+0x55
02d2fb14 769a5017 ntdll!RtlDeregisterWaitEx+0x70
02d2fb24 763ab71b KERNELBASE!UnregisterWaitEx+0x17
02d2fb3c 763905fe crypt32!I_UnregisterWaitEx+0x11
02d2fb50 7638ffc8 crypt32!RegStoreProvClose+0xde
02d2fb94 7638fe86 crypt32!CloseStore+0xb8
02d2fbb0 76390347 crypt32!CertCloseStore+0x86
02d2fbf4 7638fe86 crypt32!CloseStore+0x437
02d2fc10 76390347 crypt32!CertCloseStore+0x86
02d2fc54 7638fe86 crypt32!CloseStore+0x437
02d2fc70 76390347 crypt32!CertCloseStore+0x86
02d2fcb4 7638fe86 crypt32!CloseStore+0x437
02d2fcd0 76390347 crypt32!CertCloseStore+0x86
02d2fd14 7638fe86 crypt32!CloseStore+0x437
02d2fd30 76417c10 crypt32!CertCloseStore+0x86
02d2fd48 7641664b crypt32!CCertChainEngine::~CCertChainEngine+0x14f
02d2fd5c 7641bb85 crypt32!CertFreeCertificateChainEngine+0x2b
02d2fd7c 763cc8c4 crypt32!CDefaultChainEngineMgr::AutoFlushEngineInfoCallback+0xcd
02d2fd94 76f0e81a crypt32!AutoFlushEngineTimerCallback+0x1b8c4
02d2fdb8 76f0f6b7 ntdll!TppTimerpExecuteCallback+0x8a
02d2ff74 76287ba9 ntdll!TppWorkerThread+0x727
02d2ff84 76f3c3ab kernel32!BaseThreadInitThunk+0x19
02d2ffdc 76f3c32f ntdll!__RtlUserThreadStart+0x2b
02d2ffec 00000000 ntdll!_RtlUserThreadStart+0x1b