Crash in falconshelper, Analyzed 5 dumps, total processed 220, rate equals 2.27%
Top 1: Version = 2.7224.1000.625, Total count = 5
dump count = 1
ChildEBP RetAddr
055ef684 7763e0f3 ntdll!RtlpLowFragHeapFree+0x31
055ef69c 7768103d ntdll!RtlFreeHeap+0x105
055ef6c4 77662229 ntdll!LdrpFreeTls+0x71
055ef758 776623e3 ntdll!LdrShutdownThread+0x168
055ef768 76a519e8 ntdll!RtlExitUserThread+0x2a
055ef77c 7666d5b2 KERNELBASE!FreeLibraryAndExitThread+0x5f
055ef78c 0f1c3b62 kernel32!FreeLibraryAndExitThreadStub+0x10
055ef7a0 0f1c3c50 FalconsHelper!common_end_thread+0x4d
055ef7ac 0f1c3abd FalconsHelper!_endthreadex+0xd
055ef7e4 7665343d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x5d
055ef7f0 77649812 kernel32!BaseThreadInitThunk+0xe
055ef830 776497e5 ntdll!__RtlUserThreadStart+0x70
055ef848 00000000 ntdll!_RtlUserThreadStart+0x1b
a051be4a8bb92674d3c7077f39beb1dc_000.dmp
dump count = 1
ChildEBP RetAddr
069cf00c 7778a6ae ntdll!bsearch+0xb
069cf06c 7778a26a ntdll!RtlpLocateActivationContextSection+0xee
069cf0cc 76aedf60 ntdll!RtlFindActivationContextSectionString+0x13a
069cf148 76aedcc4 user32!ClassNameToVersion+0xd0
069cf3f4 76aed667 user32!VerNtUserCreateWindowEx+0x199
069cf4dc 76aed538 user32!CreateWindowInternal+0x12b
069cf51c 716e364f user32!CreateWindowExW+0x38
069cf56c 716eefff urlmon!CTransaction::GetNotificationWnd+0x11f
069cf680 716eac03 urlmon!CBinding::StartBinding+0x180f
069cf6e0 716ea7b3 urlmon!CUrlMon::StartBinding+0x1c3
069cf70c 716e0b8f urlmon!CUrlMon::BindToStorage+0x83
069cf758 71783c8e urlmon!CBaseBSCB::KickOffDownload+0x8f
069cf990 5486dcc5 urlmon!URLDownloadToCacheFileW+0x8e
069cfdec 5486ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
069cfe48 548b6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
069cfe80 7571fa29 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
069cfe90 777a7a4e kernel32!BaseThreadInitThunk+0x19
069cfeec 777a7a1e ntdll!__RtlUserThreadStart+0x2f
069cfefc 00000000 ntdll!_RtlUserThreadStart+0x1b
1d09efb5d18ccb29806927744059f6c1_000.dmp
dump count = 1
ChildEBP RetAddr
011cee90 77da43e9 KERNELBASE!RaiseException+0x62
011ceee0 053a6c95 ntdll!RtlSetLastWin32Error+0x39
011ceef8 05344cf1 FalconsHelper!_malloc_base+0x38
011cef04 05327a04 FalconsHelper!operator new+0x1a
011cef3c 05327fdd FalconsHelper!std::shared_ptr<IHttpTask>::_Setpd<IHttpTask *,HttpTaskDeletor>+0x44
011cef60 053384cd FalconsHelper!std::shared_ptr<IHttpTask>::reset<IHttpTask,HttpTaskDeletor>+0x2d
011cefac 0532f931 FalconsHelper!SyncHttpPost2+0x16d
011cf1b0 05335926 FalconsHelper!FalconsMain::GetAddLinkUrl+0x1281
011cf4a0 053386c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1446
011cf4c0 7719d2d3 FalconsHelper!FalconsMain::WndPro+0xf7
011cf4ec 7717d30a user32!_InternalCallWinProc+0x2b
011cf5d4 7717cc54 user32!UserCallWinProcCheckWow+0x30a
011cf648 7717ca10 user32!DispatchMessageWorker+0x234
011cf654 0533797c user32!DispatchMessageW+0x10
011cf860 053385bf FalconsHelper!FalconsMain::Run+0x31c
011cf868 05396f97 FalconsHelper!FalconsMain::ThreadProc+0xf
011cf8a0 755062c4 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
011cf8b4 77db1b69 kernel32!BaseThreadInitThunk+0x24
011cf8fc 77db1b34 ntdll!__RtlUserThreadStart+0x2f
011cf90c 00000000 ntdll!_RtlUserThreadStart+0x1b
1fb4f7ee10b8b6aeb8734117d8a95c5d_000.dmp
dump count = 1
ChildEBP RetAddr
0515e8d4 7151819d wininet!InternetQueryOptionA+0x22
0515e910 71518ced urlmon!CINetHttp::GetAdditionalHeader+0x5d
0515e958 71519e35 urlmon!CINetHttp::INetAsyncSendRequest+0x8d
0515f1a4 714d5a2f urlmon!CINetHttp::INetAsyncOpenRequest+0x4a5
0515f1d8 714d5cbc urlmon!CINet::INetAsyncConnect+0x2df
0515f1f8 714d5e9f urlmon!CINet::INetAsyncOpen+0x2c
0515f210 714d775d urlmon!CINet::INetAsyncStart+0x24
0515f2d0 714d781a urlmon!CINet::StartCommon+0x190
0515f2ec 714fffc6 urlmon!CINet::StartEx+0x1a
0515f328 714f573b urlmon!COInetProt::StartEx+0x2a6
0515f398 71504ae8 urlmon!LegacyTransaction::StartEx+0x38b
0515f420 715076e8 urlmon!CBinding::StartBinding+0x4ac
0515f46c 715078cb urlmon!CUrlMon::StartBinding+0xf6
0515f498 7150800b urlmon!CUrlMon::BindToStorage+0x7b
0515f4e4 7152792e urlmon!CBaseBSCB::KickOffDownload+0x9b
0515f71c 05fadcc5 urlmon!URLDownloadToCacheFileW+0x9e
0515fb78 05faba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0515fbd4 05ff6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0515fc0c 76528744 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0515fc20 776058ed kernel32!BaseThreadInitThunk+0x24
0515fc68 776058bd ntdll!__RtlUserThreadStart+0x2f
0515fc78 00000000 ntdll!_RtlUserThreadStart+0x1b
19502a545bc94513576f422f06086d78_001.dmp
dump count = 1
ChildEBP RetAddr
072aea24 73ccf72d urlmon!_chkstk+0x27
072aea3c 73ccfaff urlmon!CINetHttp::ReleaseRefWinInet+0x3d
072aea84 73ac85bf urlmon!CINet::CINetCallback+0x3af
072aebe4 73ac783d wininet!InternetIndicateStatus+0x24f
072aec10 73ac80c9 wininet!HANDLE_OBJECT::~HANDLE_OBJECT+0x13d
072aec38 73ac651d wininet!INTERNET_CONNECT_HANDLE_OBJECT::~INTERNET_CONNECT_HANDLE_OBJECT+0x369
072aec44 73abb4c5 wininet!INTERNET_CONNECT_HANDLE_OBJECT::`scalar deleting destructor'+0xd
072aec80 73b0195c wininet!_InternetCloseHandle+0x295
072aecc8 73b01739 wininet!InternalInternetCloseHandle+0x20c
072aed10 73cb83f5 wininet!InternetCloseHandle+0x29
072aed2c 73cd30db urlmon!CINet::TerminateRequest+0xa5
072aed38 73cb8265 urlmon!CINetHttp::TerminateRequest+0xb
072aed54 73ccf6da urlmon!CINet::Terminate+0x175
072aed74 73ca686f urlmon!CINetHttp::Terminate+0x4a
072aed98 73cb90b1 urlmon!COInetProt::Terminate+0x3f
072aedc4 73cba050 urlmon!LegacyTransaction::Terminate+0x241
072aedf0 73ca1f89 urlmon!CBinding::ReportResult+0xd0
072aee18 73ca0f6b urlmon!COInetProt::ReportResult+0xf9
072aeec8 73cb6703 urlmon!CTransaction::DispatchReport+0x58b
072aef04 73cb4ec2 urlmon!LegacyTransaction::OnINetCallback+0x193
072aef28 73cb4cb0 urlmon!LegacyTransaction::ReportResult+0x202
072aef5c 73cd2ba0 urlmon!CINet::ReportResultHelper+0x90
072aef7c 73cb4b9b urlmon!CINetHttp::ReportResultHelper+0x30
072aefc0 73ccb32c urlmon!CINet::ReportResultAndStop+0x1db
072aeff0 73ce8169 urlmon!CINetHttp::ReportResultAndStop+0x4c
072af048 73cbcc9a urlmon!CINet::StartCommon+0x2b4c9
072af064 73ca872d urlmon!CINet::StartEx+0x1a
072af0a0 73cbe416 urlmon!COInetProt::StartEx+0x56d
072af560 73cc033d urlmon!LegacyTransaction::StartEx+0x1026
072af688 73cbbf63 urlmon!CBinding::StartBinding+0x17ed
072af6e8 73cbbb13 urlmon!CUrlMon::StartBinding+0x1c3
072af714 73cb17df urlmon!CUrlMon::BindToStorage+0x83
072af760 73d5325e urlmon!CBaseBSCB::KickOffDownload+0x8f
072af998 5856dcc5 urlmon!URLDownloadToCacheFileW+0x8e
072afdf4 5856ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
072afe50 585b6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
072afe88 76a3fcc9 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
072afe98 772b809e kernel32!BaseThreadInitThunk+0x19
072afef4 772b806e ntdll!__RtlUserThreadStart+0x2f
072aff04 00000000 ntdll!_RtlUserThreadStart+0x1b
5aa03aa658b6e1944db38432301639b4_000.dmp