Crash in falconshelper, Analyzed 6 dumps, total processed 265, rate equals 2.26%



Top 1: Version = 2.7224.1000.625, Total count = 6


dump count = 1

ChildEBP RetAddr  
0649e244 774bc37c KERNELBASE!FormUrlCombineResultW+0x1f
0649e258 774bd168 KERNELBASE!UrlCombineW+0x2c
0649e318 743cf0f4 KERNELBASE!UrlCanonicalizeW+0xb8
0649e398 743caa84 wininet!pHttpGetUrlString+0x191
0649e46c 74404c87 wininet!InternalHttpOpenRequestA+0x6f4
0649e568 7272db2f wininet!HttpOpenRequestW+0x237
0649edd0 7272d8be urlmon!CINetHttp::INetAsyncOpenRequest+0x23f
0649edfc 7272c5bc urlmon!CINet::INetAsyncConnect+0x2ee
0649ee20 7271d04c urlmon!CINet::INetAsyncOpen+0x2c
0649ee60 7271cc9a urlmon!CINet::StartCommon+0x3ac
0649ee7c 7270872d urlmon!CINet::StartEx+0x1a
0649eeb8 7271e416 urlmon!COInetProt::StartEx+0x56d
0649f378 7272033d urlmon!LegacyTransaction::StartEx+0x1026
0649f4a0 7271bf63 urlmon!CBinding::StartBinding+0x17ed
0649f500 7271bb13 urlmon!CUrlMon::StartBinding+0x1c3
0649f52c 727117df urlmon!CUrlMon::BindToStorage+0x83
0649f578 727b325e urlmon!CBaseBSCB::KickOffDownload+0x8f
0649f7b0 5054dcc5 urlmon!URLDownloadToCacheFileW+0x8e
0649fc0c 5054ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0649fc68 50596f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0649fca0 7649fcc9 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0649fcb0 77eb809e kernel32!BaseThreadInitThunk+0x19
0649fd0c 77eb806e ntdll!__RtlUserThreadStart+0x2f
0649fd1c 00000000 ntdll!_RtlUserThreadStart+0x1b
7f59862cdb33e90d0cec292fdb6425e9_000.dmp

dump count = 1

ChildEBP RetAddr  
0931ea68 75b05774 urlmon!CINet::INetQueryInfo+0xed
0931ea80 75b056f7 urlmon!CINet::OnINetInternal+0xd3
0931ea94 75b059e7 urlmon!CINet::Continue+0x17
0931eaac 75b059ab urlmon!COInetProt::Continue+0x27
0931eae4 75af1589 urlmon!CTransaction::OnINetCallback+0x202
0931eb00 7521630a urlmon!TransactionWndProc+0x29
0931eb2c 75216d4a user32!InternalCallWinProc+0x23
0931eba4 752177d7 user32!UserCallWinProcCheckWow+0x109
0931ec04 75217bda user32!DispatchMessageWorker+0x3b5
0931ec14 75b1f13f user32!DispatchMessageA+0xf
0931ec50 75b1f244 urlmon!CTransaction::CompleteOperation+0x9d
0931f108 75b428eb urlmon!CTransaction::StartEx+0x1c8a
0931f18c 75af2adc urlmon!CBinding::StartBinding+0x921
0931f1d8 75af28e7 urlmon!CUrlMon::StartBinding+0x1a6
0931f208 75b1f2f3 urlmon!CUrlMon::BindToStorage+0x8e
0931f250 75b1fa14 urlmon!CBaseBSCB::KickOffDownload+0x93
0931f480 6351dcc5 urlmon!URLDownloadToCacheFileW+0x84
0931f8dc 6351ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0931f938 63566f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0931f970 7601343d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0931f97c 778c9802 kernel32!BaseThreadInitThunk+0xe
0931f9bc 778c97d5 ntdll!__RtlUserThreadStart+0x70
0931f9d4 00000000 ntdll!_RtlUserThreadStart+0x1b
77764ff1d6a66ead662cfbc128a73d5e_001.dmp

dump count = 1

0c36f338 74912ff3 rasapi32!RasGetEntryPropertiesW+0x5b
0c36f360 748ec25e wininet!RasEntryPropHelp::GetW+0x24
0c36f598 748d9eaf wininet!IsAutodialEnabled+0x12b
0c36f818 748b5f95 wininet!InternetGetConnectedStateExW+0x162
0c36f838 774bb96a wininet!InternetGetConnectedState+0x48
0c36f86c 77506f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x5a
0c36f8a4 74ff336a FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0c36f8b0 76fa98f2 kernel32!BaseThreadInitThunk+0xe
0c36f8f0 76fa98c5 ntdll!__RtlUserThreadStart+0x70
0c36f908 00000000 ntdll!_RtlUserThreadStart+0x1b
66f33f6968e203c6eed071881205cbf1_000.dmp

dump count = 1

ChildEBP RetAddr  
05a3f0b8 67f18474 KERNELBASE!RaiseException+0x62
05a3f13c 7540f536 FalconsHelper!SyncHttpPost2+0x114
05a3f260 67ef1556 KERNELBASE!CloseHandle+0x26
05a3f274 06036010 FalconsHelper!ATL::CWin32Heap::Free+0x16
WARNING: Frame IP not in any known module. Following frames may be wrong.
05a3f2c4 772c8746 0x6036010
05a3f2f4 67f75084 ntdll!RtlFreeHeap+0x46
05a3f368 67f157e1 FalconsHelper!free+0x18
05a3f650 67f186c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1301
05a3f670 76f1dfdb FalconsHelper!FalconsMain::WndPro+0xf7
05a3f69c 76f1502a user32!_InternalCallWinProc+0x2b
05a3f780 76f12d8a user32!UserCallWinProcCheckWow+0x33a
05a3f7f4 76f12b50 user32!DispatchMessageWorker+0x22a
05a3f800 67f1797c user32!DispatchMessageW+0x10
05a3fa0c 67f185bf FalconsHelper!FalconsMain::Run+0x31c
05a3fa14 67f76f97 FalconsHelper!FalconsMain::ThreadProc+0xf
05a3fa4c 7709f989 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
05a3fa5c 772e74b4 kernel32!BaseThreadInitThunk+0x19
05a3fab8 772e7484 ntdll!__RtlUserThreadStart+0x2f
05a3fac8 00000000 ntdll!_RtlUserThreadStart+0x1b
b0eb837282bc412aab4ddfe76f67fe75_000.dmp

dump count = 1

ChildEBP RetAddr  
0554e05c 72c6006e KERNELBASE!MultiByteToWideChar+0x1d
0554e08c 72c7fd0f urlmon!WzA2WDynamic+0x1d
0554e2a8 72c7fb62 urlmon!CTransData::GetAcceptStr+0x8d
0554e2c0 72c8d2b6 urlmon!CBinding::GetBindString+0x82
0554e2f4 72c8bc46 urlmon!CTransaction::GetBindString+0x76
0554eb50 72c8bb8e urlmon!CINetHttp::INetAsyncOpenRequest+0x86
0554eb7c 72c8a97c urlmon!CINet::INetAsyncConnect+0x2ee
0554eba0 72c7b20c urlmon!CINet::INetAsyncOpen+0x2c
0554ebe0 72c7ae5a urlmon!CINet::StartCommon+0x3ac
0554ebfc 72c477fd urlmon!CINet::StartEx+0x1a
0554ec38 72c7c5d6 urlmon!COInetProt::StartEx+0x56d
0554f0f8 72c7e4fd urlmon!LegacyTransaction::StartEx+0x1026
0554f224 72c7a123 urlmon!CBinding::StartBinding+0x17ed
0554f284 72c79cd3 urlmon!CUrlMon::StartBinding+0x1c3
0554f2b0 72c702cf urlmon!CUrlMon::BindToStorage+0x83
0554f2fc 72d12b2e urlmon!CBaseBSCB::KickOffDownload+0x8f
0554f534 79e3dcc5 urlmon!URLDownloadToCacheFileW+0x8e
0554f990 79e3ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0554f9ec 79e86f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0554fa24 76e5f989 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0554fa34 776d7084 kernel32!BaseThreadInitThunk+0x19
0554fa90 776d7054 ntdll!__RtlUserThreadStart+0x2f
0554faa0 00000000 ntdll!_RtlUserThreadStart+0x1b
a55ad4af092c2e71ff19ee8e2ee8ebf3_000.dmp

dump count = 1

ChildEBP RetAddr  
0520e010 731dc282 urlmon!CTransData::GetAcceptStr+0x18
0520e028 731efef6 urlmon!CBinding::GetBindString+0x82
0520e05c 731ed766 urlmon!CTransaction::GetBindString+0x76
0520e8b8 731ed6ae urlmon!CINetHttp::INetAsyncOpenRequest+0x86
0520e8e4 731ec3ac urlmon!CINet::INetAsyncConnect+0x2ee
0520e908 731e2aac urlmon!CINet::INetAsyncOpen+0x2c
0520e948 731e26fa urlmon!CINet::StartCommon+0x3ac
0520e964 731b652d urlmon!CINet::StartEx+0x1a
0520e9a0 731e3e76 urlmon!COInetProt::StartEx+0x56d
0520ee60 731e5d9d urlmon!LegacyTransaction::StartEx+0x1026
0520ef8c 731e19c3 urlmon!CBinding::StartBinding+0x17ed
0520efec 731e1573 urlmon!CUrlMon::StartBinding+0x1c3
0520f018 731d0faf urlmon!CUrlMon::BindToStorage+0x83
0520f064 73271d8e urlmon!CBaseBSCB::KickOffDownload+0x8f
0520f29c 674cd605 urlmon!URLDownloadToCacheFileW+0x8e
0520f6f8 674cb359 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0520f754 67515ab7 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0520f78c 7608fa29 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0520f79c 77ce7a9e kernel32!BaseThreadInitThunk+0x19
0520f7f8 77ce7a6e ntdll!__RtlUserThreadStart+0x2f
0520f808 00000000 ntdll!_RtlUserThreadStart+0x1b
9e32a5c1100e56ec09f028d33113c475_000.dmp