Crash in falconshelper, Analyzed 4 dumps, total processed 153, rate equals 2.61%
Top 1: Version = 2.7224.1000.625, Total count = 4
dump count = 1
ChildEBP RetAddr
06a5e8cc 76a80fcb KERNELBASE!FindCodePageHashNode+0x27
06a5e8f8 76a81470 KERNELBASE!GetCPHashNode+0x97
06a5e904 76a8182a KERNELBASE!NlsGetACPFromLocale+0x47
06a5eb38 762f6a50 KERNELBASE!CompareStringA+0x45
06a5eb74 762f6920 wininet!CompareStringNA+0x5b
06a5ebe4 762f6315 wininet!HTTP_REQUEST_HANDLE_OBJECT::LocalEndCacheWrite+0x27a
06a5ec1c 762f1632 wininet!HTTP_REQUEST_HANDLE_OBJECT::HttpReadData_Fsm+0x448
06a5ec34 762f15e7 wininet!CFsm_HttpReadData::RunSM+0x2a
06a5ec88 762e94fb wininet!CFsm::Run+0x3b9
06a5ecb0 7637609f wininet!DoFsm+0x60
06a5ecc8 7635bb52 wininet!HttpReadData+0xc0
06a5ecf0 762f31a0 wininet!QueryAvailable_Fsm+0x80
06a5ed04 762e8fb1 wininet!CFsm_QueryAvailable::RunSM+0x28
06a5ed58 762e94fb wininet!CFsm::Run+0x161
06a5ed80 76354973 wininet!DoFsm+0x60
06a5ee08 76128f9a wininet!InternetQueryDataAvailable+0x2d9
06a5f038 7612727d urlmon!CINet::INetDataAvailable+0x87
06a5f050 76161107 urlmon!CINet::INetRead+0x4c
06a5f068 761276c4 urlmon!CINet::INetQueryInfo+0x90
06a5f080 76127647 urlmon!CINet::OnINetInternal+0xd3
06a5f094 76127937 urlmon!CINet::Continue+0x17
06a5f0ac 761278fb urlmon!COInetProt::Continue+0x27
06a5f0e4 76113b09 urlmon!CTransaction::OnINetCallback+0x202
06a5f100 76c2630a urlmon!TransactionWndProc+0x29
06a5f12c 76c26d4a user32!InternalCallWinProc+0x23
06a5f1a4 76c277d7 user32!UserCallWinProcCheckWow+0x109
06a5f204 76c27bda user32!DispatchMessageWorker+0x3b5
06a5f214 761404af user32!DispatchMessageA+0xf
06a5f250 761405b4 urlmon!CTransaction::CompleteOperation+0x9d
06a5f708 76160e4a urlmon!CTransaction::StartEx+0x16e3
06a5f78c 761149f7 urlmon!CBinding::StartBinding+0x921
06a5f7d8 761146d8 urlmon!CUrlMon::StartBinding+0x1a6
06a5f808 76140663 urlmon!CUrlMon::BindToStorage+0x8e
06a5f850 76140d84 urlmon!CBaseBSCB::KickOffDownload+0x93
06a5fa80 5714d605 urlmon!URLDownloadToCacheFileW+0x84
06a5fedc 5714b359 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
06a5ff38 57195ab7 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
06a5ff70 74cf343d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
06a5ff7c 77129812 kernel32!BaseThreadInitThunk+0xe
06a5ffbc 771297e5 ntdll!__RtlUserThreadStart+0x70
06a5ffd4 00000000 ntdll!_RtlUserThreadStart+0x1b
0ae65b1886149c6e60facbbac4826818_000.dmp
dump count = 1
ChildEBP RetAddr
0509e194 768768ba msvcrt!_output_l+0x1e
0509e1d4 76876818 msvcrt!_vsnprintf_l+0x8a
0509e1f0 74990b18 msvcrt!_vsnprintf+0x18
0509e214 74979c0c wininet!StringCchPrintfA+0x37
0509e2dc 749c4327 wininet!InternalHttpOpenRequestA+0x32c
0509e3d8 7346d91f wininet!HttpOpenRequestW+0x237
0509ec40 7346d6ae urlmon!CINetHttp::INetAsyncOpenRequest+0x23f
0509ec6c 7346c3ac urlmon!CINet::INetAsyncConnect+0x2ee
0509ec90 73462aac urlmon!CINet::INetAsyncOpen+0x2c
0509ecd0 734626fa urlmon!CINet::StartCommon+0x3ac
0509ecec 7343652d urlmon!CINet::StartEx+0x1a
0509ed28 73463e76 urlmon!COInetProt::StartEx+0x56d
0509f1e8 73465d9d urlmon!LegacyTransaction::StartEx+0x1026
0509f314 734619c3 urlmon!CBinding::StartBinding+0x17ed
0509f374 73461573 urlmon!CUrlMon::StartBinding+0x1c3
0509f3a0 73450faf urlmon!CUrlMon::BindToStorage+0x83
0509f3ec 734f1d8e urlmon!CBaseBSCB::KickOffDownload+0x8f
0509f624 574adcc5 urlmon!URLDownloadToCacheFileW+0x8e
0509fa80 574aba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0509fadc 574f6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0509fb14 768dfa29 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0509fb24 77917a9e kernel32!BaseThreadInitThunk+0x19
0509fb80 77917a6e ntdll!__RtlUserThreadStart+0x2f
0509fb90 00000000 ntdll!_RtlUserThreadStart+0x1b
977bfa3b54daa4aaba37253092c7bcff_000.dmp
dump count = 1
ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
0b07f3dc 75798277 0xb7004c08
0b07f3fc 757ad390 ole32!MarshalInternalObjRef+0xa3
0b07f480 757ad1ff ole32!CRemoteUnknown::CRemoteUnknown+0x3b
0b07f4c0 757ad299 ole32!CComApartment::InitRemoting+0x19c
0b07f4cc 758be6ee ole32!CComApartment::StartServer+0x13
0b07f4dc 757af0b8 ole32!InitChannelIfNecessary+0x1e
0b07f554 77044504 ole32!CoUnmarshalInterface+0x38
0b07f5ac 77044402 wininet!CCacheServerConnection::ConnectViaCOMHelper+0xf9
0b07f5b4 76fb9a82 wininet!CCacheServerConnection::ConnectViaCOMCallback+0x12
0b07f5dc 770443d0 wininet! ?? ::FNODOBFM::`string'+0x4679
0b07f5f8 76fd4fee wininet!CCacheServerConnection::ConnectViaCOM+0x27
0b07f610 76f5d825 wininet! ?? ::FNODOBFM::`string'+0x23415
0b07f64c 76ef9f25 wininet!GetCacheServerConnectionInternal+0xcb
0b07f684 76f6db01 wininet!GetCacheServerConnection+0x25
0b07f6bc 76f6da89 wininet!CCacheServerContainer::Connect+0x53
0b07f6f4 76fdba58 wininet!CCacheClientContainer::CreateServerContainer+0x95
0b07f788 5a7aed81 wininet! ?? ::FNODOBFM::`string'+0x2a10d
0b07f7ac 5a7aec7c FalconsHelper!CStatisticImpl::SendStatUrl+0x91
0b07f820 5a7a869d FalconsHelper!CStatisticImpl::SendStat+0x78c
0b07f86c 5a771cea FalconsHelper!CDataStatistic::SendStat+0x2d
0b07f8dc 5a7957c0 FalconsHelper!SendStatHelper::SendStat+0x1aa
0b07fbb8 5a7986c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x12e0
0b07fbd8 776462fa FalconsHelper!FalconsMain::WndPro+0xf7
0b07fc04 77646d3a user32!InternalCallWinProc+0x23
0b07fc7c 776477c4 user32!UserCallWinProcCheckWow+0x109
0b07fcdc 7764788a user32!DispatchMessageWorker+0x3b5
0b07fcec 5a79797c user32!DispatchMessageW+0xf
0b07fef8 5a7985bf FalconsHelper!FalconsMain::Run+0x31c
0b07ff00 5a7f6f97 FalconsHelper!FalconsMain::ThreadProc+0xf
0b07ff38 76b2344d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0b07ff44 77c49802 kernel32!BaseThreadInitThunk+0xe
0b07ff84 77c497d5 ntdll!__RtlUserThreadStart+0x70
0b07ff9c 00000000 ntdll!_RtlUserThreadStart+0x1b
11da8fc1b621c7c8e041bb0d1b474790_000.dmp
dump count = 1
ChildEBP RetAddr
0677ef40 5352d96f KERNELBASE!RaiseException+0x58
0677ef84 534de433 FalconsHelper!_CxxThrowException+0x66
0677efa0 0677efb0 FalconsHelper!std::_Xbad_alloc+0x1c
WARNING: Frame IP not in any known module. Following frames may be wrong.
0677efa4 534aedcf 0x677efb0
0677efb0 534aef21 FalconsHelper!std::allocator<char>::allocate+0x3f
0677efe4 534e7f0d FalconsHelper!std::basic_string<char,std::char_traits<char>,std::allocator<char> >::append+0xc1
0677f030 534e704e FalconsHelper!XTL::CXtlBase64::encode+0x6d
0677f078 534e6e19 FalconsHelper!EncryptHelper::Encrypt_Blowfish_Base64+0xce
0677f284 534cf8b4 FalconsHelper!EncryptHelper::EncryptStr+0x159
0677f47c 534d5926 FalconsHelper!FalconsMain::GetAddLinkUrl+0x1204
0677f76c 534d86c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1446
0677f78c 755ec2d7 FalconsHelper!FalconsMain::WndPro+0xf7
0677f7b8 755ec3d7 user32!InternalCallWinProc+0x23
0677f830 755eca09 user32!UserCallWinProcCheckWow+0x14b
0677f890 755eca60 user32!DispatchMessageWorker+0x357
0677f8a0 534d797c user32!DispatchMessageW+0xf
0677faac 534d85bf FalconsHelper!FalconsMain::Run+0x31c
0677fab4 53536f97 FalconsHelper!FalconsMain::ThreadProc+0xf
0677faec 76dcef3c FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0677faf8 7700360c kernel32!BaseThreadInitThunk+0xe
0677fb38 770035df ntdll!__RtlUserThreadStart+0x70
0677fb50 00000000 ntdll!_RtlUserThreadStart+0x1b
dd7bbcad62689bd5608b9679b0e413ee_000.dmp