Crash in falconshelper, Analyzed 3 dumps, total processed 49, rate equals 6.12%



Top 1: Version = 2.7224.1000.625, Total count = 3


dump count = 1

ChildEBP RetAddr  
04b8f124 77151605 user32!ClientThreadSetup+0xe
04b8f128 77c54e9d user32!__ClientThreadSetup+0x5
04b8f140 7760174c ntdll!KiUserCallbackDispatcher+0x4d
04b8f144 77142214 win32u!NtUserCreateWindowEx+0xc
04b8f424 77141b27 user32!VerNtUserCreateWindowEx+0x229
04b8f50c 771419f8 user32!CreateWindowInternal+0x12b
04b8f54c 73953a8f user32!CreateWindowExW+0x38
04b8f59c 73965dff urlmon!CTransaction::GetNotificationWnd+0x11f
04b8f6b4 73961a03 urlmon!CBinding::StartBinding+0x180f
04b8f714 739615b3 urlmon!CUrlMon::StartBinding+0x1c3
04b8f740 73950fdf urlmon!CUrlMon::BindToStorage+0x83
04b8f78c 739f1dae urlmon!CBaseBSCB::KickOffDownload+0x8f
04b8f9c4 5b1ddcc5 urlmon!URLDownloadToCacheFileW+0x8e
04b8fe20 5b1dba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
04b8fe7c 5b226f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
04b8feb4 762cfa29 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
04b8fec4 77c47a9e kernel32!BaseThreadInitThunk+0x19
04b8ff20 77c47a6e ntdll!__RtlUserThreadStart+0x2f
04b8ff30 00000000 ntdll!_RtlUserThreadStart+0x1b
bb1312f0c4f15223f6ce1b1581505bb6_000.dmp

dump count = 1

ChildEBP RetAddr  
05f6f4b8 76ec5e2a KERNELBASE!RaiseException+0x62
05f6f510 76ec5d3e ntdll!RtlpAllocateHeapInternal+0xda
05f6f534 0f9c6c95 ntdll!RtlAllocateHeap+0x3e
05f6f54c 0f964cf1 FalconsHelper!_malloc_base+0x38
05f6f558 0f947a04 FalconsHelper!operator new+0x1a
05f6f590 0f947fdd FalconsHelper!std::shared_ptr<IHttpTask>::_Setpd<IHttpTask *,HttpTaskDeletor>+0x44
05f6f5b4 0f9584cd FalconsHelper!std::shared_ptr<IHttpTask>::reset<IHttpTask,HttpTaskDeletor>+0x2d
05f6f600 0f94f931 FalconsHelper!SyncHttpPost2+0x16d
05f6f804 0f955926 FalconsHelper!FalconsMain::GetAddLinkUrl+0x1281
05f6faf4 0f9586c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1446
05f6fb14 759bbafb FalconsHelper!FalconsMain::WndPro+0xf7
05f6fb40 759b7e7a user32!_InternalCallWinProc+0x2b
05f6fc28 759b772e user32!UserCallWinProcCheckWow+0x3aa
05f6fca4 759b7510 user32!DispatchMessageWorker+0x20e
05f6fcb0 0f95797c user32!DispatchMessageW+0x10
05f6febc 0f9585bf FalconsHelper!FalconsMain::Run+0x31c
05f6fec4 0f9b6f97 FalconsHelper!FalconsMain::ThreadProc+0xf
05f6fefc 761a8494 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
05f6ff10 76ee41c8 kernel32!BaseThreadInitThunk+0x24
05f6ff58 76ee4198 ntdll!__RtlUserThreadStart+0x2f
05f6ff68 00000000 ntdll!_RtlUserThreadStart+0x1b
b35a31e408d50d7cb36fb3aac8863d57_000.dmp

dump count = 1

ChildEBP RetAddr  
052df498 7bf98474 KERNELBASE!RaiseException+0x62
052df51c 763a0396 FalconsHelper!SyncHttpPost2+0x114
052df640 7bf71556 KERNELBASE!CloseHandle+0x26
052df654 03935218 FalconsHelper!ATL::CWin32Heap::Free+0x16
WARNING: Frame IP not in any known module. Following frames may be wrong.
052df6a4 77d43c06 0x3935218
052df6d4 7bff5084 ntdll!RtlFreeHeap+0x46
052df748 7bf957e1 FalconsHelper!free+0x18
052dfa30 7bf986c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1301
052dfa50 75beeebb FalconsHelper!FalconsMain::WndPro+0xf7
052dfa7c 75be5e7a user32!_InternalCallWinProc+0x2b
052dfb60 75be3bea user32!UserCallWinProcCheckWow+0x33a
052dfbd4 75be39b0 user32!DispatchMessageWorker+0x22a
052dfbe0 7bf9797c user32!DispatchMessageW+0x10
052dfdec 7bf985bf FalconsHelper!FalconsMain::Run+0x31c
052dfdf4 7bff6f97 FalconsHelper!FalconsMain::ThreadProc+0xf
052dfe2c 75e4fa29 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
052dfe3c 77d67a7e kernel32!BaseThreadInitThunk+0x19
052dfe98 77d67a4e ntdll!__RtlUserThreadStart+0x2f
052dfea8 00000000 ntdll!_RtlUserThreadStart+0x1b
f8c20c459caa6b4eda21ee30243ca758_000.dmp