Crash in unknown_whaleclean, Analyzed 12 dumps, total processed 322, rate equals 3.73%



Top 1: Version = 1.7525.1145.610, Total count = 7


dump count = 1

ChildEBP RetAddr  
03f4f8d4 03f4f9b0 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03f4f8e8 03f4f8f8 0x3f4f9b0
03f4f8ec 03f4f978 0x3f4f8f8
03f4f8f8 00000000 0x3f4f978
26ac899ee0ae1023e5ed9e5d96a89067_000.dmp

dump count = 1

ChildEBP RetAddr  
03b3f4b4 03b3f598 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
03b3f4c8 03b3f4d8 0x3b3f598
03b3f4cc daed77a2 0x3b3f4d8
03b3f4d8 00000000 0xdaed77a2
10b7427705f7b61b192023f16304203e_000.dmp

dump count = 1

ChildEBP RetAddr  
048cf374 048cf454 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
048cf388 048cf398 0x48cf454
048cf38c 048cf418 0x48cf398
048cf398 00000000 0x48cf418
b78f7a07d32614e1f7c745317faf1082_000.dmp

dump count = 1

ChildEBP RetAddr  
0497f8e4 0497f9c0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0497f8f8 0497f908 0x497f9c0
0497f8fc 01ed3000 0x497f908
0497f908 00000000 0x1ed3000
3aa5f7f6867407157c066cfe024efc49_000.dmp

dump count = 1

ChildEBP RetAddr  
0497f844 0497f928 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0497f858 0497f868 0x497f928
0497f85c 00000000 0x497f868
d7420aa747bae14c002cf33ae7122b72_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 0x4a46f58
bc5656190ec97129c70585246030fbb7_000.dmp

dump count = 1

ChildEBP RetAddr  
05d5f530 77a4012a ntdll!RtlpWaitOnCriticalSection+0xd2
05d5f568 77a3ff79 ntdll!RtlpEnterCriticalSectionContended+0x1aa
05d5f574 75b4177b ntdll!RtlEnterCriticalSection+0x49
05d5f598 75b805ca combase!OXIDEntry::PostCall+0xfb
05d5f7a4 75b3c26d combase!ThreadInvokeWorker+0x7b3
05d5f7ac 7598f8d0 combase!ThreadInvoke+0xd
05d5f7ec 7598f815 rpcrt4!DispatchToStubInCNoAvrf+0x20
05d5f858 7598f5d8 rpcrt4!RPC_INTERFACE::DispatchToStubWorker+0x175
05d5f8a8 75994313 rpcrt4!RPC_INTERFACE::DispatchToStubWithObject+0x158
05d5f914 75994032 rpcrt4!LRPC_SCALL::DispatchRequest+0x123
05d5f99c 759946f1 rpcrt4!LRPC_SCALL::HandleRequest+0x382
05d5f9f0 7599cbe7 rpcrt4!LRPC_ADDRESS::HandleRequest+0x2c1
05d5facc 759a51b0 rpcrt4!LRPC_ADDRESS::ProcessIO+0x227
05d5fb08 77a36f01 rpcrt4!LrpcIoComplete+0xa0
05d5fb30 77a35f7a ntdll!TppAlpcpExecuteCallback+0xa1
05d5fcec 76e2fcc9 ntdll!TppWorkerThread+0x63a
05d5fcfc 77a67c6e kernel32!BaseThreadInitThunk+0x19
05d5fd58 77a67c3e ntdll!__RtlUserThreadStart+0x2f
05d5fd68 00000000 ntdll!_RtlUserThreadStart+0x1b
cabc283ff6cfe8836f96ea4be2cb4384_000.dmp


Top 2: Version = 1.7525.1165.806, Total count = 3


dump count = 1

ChildEBP RetAddr  
008fe1ac 77da3d66 KERNELBASE!RaiseException+0x62
008fe1c8 7ffeffff ntdll!RtlFreeHeap+0x46
WARNING: Frame IP not in any known module. Following frames may be wrong.
008fe1d8 00010000 0x7ffeffff
008fe1dc a7010006 0x10000
008fe1e0 00000000 0xa7010006
9918db71fd96f5b2424177e4eae09126_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0455ff70 771e6359 0xe10833
0455ff80 77327b74 kernel32!BaseThreadInitThunk+0x19
0455ffdc 77327b44 ntdll!__RtlUserThreadStart+0x2f
0455ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
033b7f145b6b4e9871337c828ae67ce6_000.dmp

dump count = 1

ChildEBP RetAddr  
044df8c4 044df9a0 KERNELBASE!RaiseException+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
044df8d8 044df8e8 0x44df9a0
044df8dc 01b72000 0x44df8e8
044df8e8 00000000 0x1b72000
76951c28c57689a6484d3c836d9a9cd9_000.dmp


Top 3: Version = 1.7525.1150.627, Total count = 2


dump count = 1

ChildEBP RetAddr  
010fe234 010fe314 KERNELBASE!RaiseException+0x62
WARNING: Frame IP not in any known module. Following frames may be wrong.
010fe248 010fe258 0x10fe314
010fe24c 00000000 0x10fe258
ed0810f37be1092d0d1f412e2b242a96_000.dmp

dump count = 1

ChildEBP RetAddr  
00deef54 75d643d1 KERNELBASE!RaiseException+0x62
00deef84 00000000 bcryptPrimitives!ProcessPrng+0x51
d962caa5c1d1596f5350b42304c3f03d_000.dmp