Crash in falconshelper, Analyzed 3 dumps, total processed 48, rate equals 6.25%



Top 1: Version = 2.7224.1000.625, Total count = 3


dump count = 1

ChildEBP RetAddr  
0a8bee88 7780e0c3 ntdll!RtlpLowFragHeapFree+0x31
0a8beea0 74fe14ad ntdll!RtlFreeHeap+0x105
0a8beeb4 09c66c3f kernel32!HeapFree+0x14
0a8beec8 09c55084 FalconsHelper!_free_base+0x1c
0a8beed8 09c04d12 FalconsHelper!free+0x18
0a8beee4 09c06eb2 FalconsHelper!operator delete+0xb
0a8bf0ec 09bef8b4 FalconsHelper!EncryptHelper::EncryptStr+0x1f2
0a8bf2e4 09bf5926 FalconsHelper!FalconsMain::GetAddLinkUrl+0x1204
0a8bf5d4 09bf86c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1446
0a8bf5f4 766862fa FalconsHelper!FalconsMain::WndPro+0xf7
0a8bf620 76686d3a user32!InternalCallWinProc+0x23
0a8bf698 766877c4 user32!UserCallWinProcCheckWow+0x109
0a8bf6f8 7668788a user32!DispatchMessageWorker+0x3b5
0a8bf708 09bf797c user32!DispatchMessageW+0xf
0a8bf914 09bf85bf FalconsHelper!FalconsMain::Run+0x31c
0a8bf91c 09c56f97 FalconsHelper!FalconsMain::ThreadProc+0xf
0a8bf954 74fe343d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0a8bf960 77819802 kernel32!BaseThreadInitThunk+0xe
0a8bf9a0 778197d5 ntdll!__RtlUserThreadStart+0x70
0a8bf9b8 00000000 ntdll!_RtlUserThreadStart+0x1b
a79b602e4ee274ab4ea123d191f6d9a5_000.dmp

dump count = 1

ChildEBP RetAddr  
05f2f1b4 04eed96f KERNELBASE!RaiseException+0x58
05f2f1f8 04e9e433 FalconsHelper!_CxxThrowException+0x66
05f2f214 05f2f284 FalconsHelper!std::_Xbad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
05f2f218 04ea70a6 0x5f2f284
05f2f284 04ea6959 FalconsHelper!CBlowFish::CBlowFish+0x16
05f2f490 04e84658 FalconsHelper!EncryptHelper::DecryptStr+0x159
05f2f638 04e96465 FalconsHelper!ConfigMgr::ParseCfgCenterData+0x1e8
05f2f7ec 04e986da FalconsHelper!FalconsMain::OnRecvCfgCenterData+0x305
05f2f80c 75a7630a FalconsHelper!FalconsMain::WndPro+0x10a
05f2f838 75a76d4a user32!InternalCallWinProc+0x23
05f2f8b0 75a777d7 user32!UserCallWinProcCheckWow+0x109
05f2f910 75a7789a user32!DispatchMessageWorker+0x3b5
05f2f920 04e9797c user32!DispatchMessageW+0xf
05f2fb2c 04e985bf FalconsHelper!FalconsMain::Run+0x31c
05f2fb34 04ef6f97 FalconsHelper!FalconsMain::ThreadProc+0xf
05f2fb6c 76fd347d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
05f2fb78 77729852 kernel32!BaseThreadInitThunk+0xe
05f2fbb8 77729825 ntdll!__RtlUserThreadStart+0x70
05f2fbd0 00000000 ntdll!_RtlUserThreadStart+0x1b
15d4f2c601496455f49098022aef15c9_000.dmp

dump count = 1

ChildEBP RetAddr  
0562f088 7686dbe9 kernel32!SortCompareString+0x22
0562f1a4 7688a250 KERNELBASE!CompareStringW+0x239
0562f1c4 71acbcad KERNELBASE!StrCmpNW+0x20
0562f2a0 71acc542 iertutil!GetUriInfo+0x36d
0562f3ac 71acd6d9 iertutil!CUri::Init+0x432
0562f490 71acca7e iertutil!CreateUriPriv+0xc39
0562f4b8 71f71f6b iertutil!CreateUri+0x1e
0562f52c 71f60865 urlmon!CreateURLMonikerExInternal+0x9b
0562f570 7200225e urlmon!CBaseBSCB::KickOffDownload+0x45
0562f7a8 6ea6dcc5 urlmon!URLDownloadToCacheFileW+0x8e
0562fc04 6ea6ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0562fc60 6eab6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0562fc98 7535fa29 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0562fca8 76f27b5e kernel32!BaseThreadInitThunk+0x19
0562fd04 76f27b2e ntdll!__RtlUserThreadStart+0x2f
0562fd14 00000000 ntdll!_RtlUserThreadStart+0x1b
02201eabb574af07615ad22612b67b1e_001.dmp