Crash in falconshelper, Analyzed 3 dumps, total processed 235, rate equals 1.28%
Top 1: Version = 2.7224.1000.625, Total count = 3
dump count = 1
ChildEBP RetAddr
0649e244 774bc37c KERNELBASE!FormUrlCombineResultW+0x1f
0649e258 774bd168 KERNELBASE!UrlCombineW+0x2c
0649e318 743cf0f4 KERNELBASE!UrlCanonicalizeW+0xb8
0649e398 743caa84 wininet!pHttpGetUrlString+0x191
0649e46c 74404c87 wininet!InternalHttpOpenRequestA+0x6f4
0649e568 7272db2f wininet!HttpOpenRequestW+0x237
0649edd0 7272d8be urlmon!CINetHttp::INetAsyncOpenRequest+0x23f
0649edfc 7272c5bc urlmon!CINet::INetAsyncConnect+0x2ee
0649ee20 7271d04c urlmon!CINet::INetAsyncOpen+0x2c
0649ee60 7271cc9a urlmon!CINet::StartCommon+0x3ac
0649ee7c 7270872d urlmon!CINet::StartEx+0x1a
0649eeb8 7271e416 urlmon!COInetProt::StartEx+0x56d
0649f378 7272033d urlmon!LegacyTransaction::StartEx+0x1026
0649f4a0 7271bf63 urlmon!CBinding::StartBinding+0x17ed
0649f500 7271bb13 urlmon!CUrlMon::StartBinding+0x1c3
0649f52c 727117df urlmon!CUrlMon::BindToStorage+0x83
0649f578 727b325e urlmon!CBaseBSCB::KickOffDownload+0x8f
0649f7b0 5054dcc5 urlmon!URLDownloadToCacheFileW+0x8e
0649fc0c 5054ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0649fc68 50596f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0649fca0 7649fcc9 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0649fcb0 77eb809e kernel32!BaseThreadInitThunk+0x19
0649fd0c 77eb806e ntdll!__RtlUserThreadStart+0x2f
0649fd1c 00000000 ntdll!_RtlUserThreadStart+0x1b
5cc78e96f6787502302961e5bc626719_000.dmp
dump count = 1
ChildEBP RetAddr
09d3efd4 7739e163 ntdll!RtlpLowFragHeapFree+0x31
09d3efec 75776f0a ntdll!RtlFreeHeap+0x105
09d3f000 75776ff4 ole32!CRetailMalloc_Free+0x1c
09d3f010 767ce186 ole32!CoTaskMemFree+0x13
09d3f044 767ce2a9 urlmon!CTransaction::OnINetCallback+0x17c
09d3f060 76ac630a urlmon!TransactionWndProc+0x29
09d3f08c 76ac6d4a user32!InternalCallWinProc+0x23
09d3f104 76ac77d7 user32!UserCallWinProcCheckWow+0x109
09d3f164 76ac7bda user32!DispatchMessageWorker+0x3b5
09d3f174 767e27b1 user32!DispatchMessageA+0xf
09d3f1b0 767e28b4 urlmon!CTransaction::CompleteOperation+0x9d
09d3f668 76810eef urlmon!CTransaction::StartEx+0x1c8a
09d3f6e8 767cf26c urlmon!CBinding::StartBinding+0x921
09d3f734 767cf0c7 urlmon!CUrlMon::StartBinding+0x1a6
09d3f764 767e2963 urlmon!CUrlMon::BindToStorage+0x8e
09d3f7ac 767e3084 urlmon!CBaseBSCB::KickOffDownload+0x93
09d3f9dc 0f1adcc5 urlmon!URLDownloadToCacheFileW+0x84
09d3fe38 0f1aba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
09d3fe94 0f1f6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
09d3fecc 74d4347d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
09d3fed8 773a9762 kernel32!BaseThreadInitThunk+0xe
09d3ff18 773a9735 ntdll!__RtlUserThreadStart+0x70
09d3ff30 00000000 ntdll!_RtlUserThreadStart+0x1b
53eff2d9822a87554c0e2979d10466da_000.dmp
dump count = 1
ChildEBP RetAddr
088be000 7767c624 KERNELBASE!URL::DetectAndFeedScheme+0xa
088be030 7767c424 KERNELBASE!BlendUrls+0x23
088be374 7767c37c KERNELBASE!FormUrlCombineResultW+0xa4
088be388 7767d168 KERNELBASE!UrlCombineW+0x2c
088be448 7495f0f4 KERNELBASE!UrlCanonicalizeW+0xb8
088be4c8 7495aa84 wininet!pHttpGetUrlString+0x191
088be59c 74994c87 wininet!InternalHttpOpenRequestA+0x6f4
088be698 734fdbef wininet!HttpOpenRequestW+0x237
088bef00 734fd97e urlmon!CINetHttp::INetAsyncOpenRequest+0x23f
088bef2c 734fc66c urlmon!CINet::INetAsyncConnect+0x2ee
088bef50 734ed0fc urlmon!CINet::INetAsyncOpen+0x2c
088bef90 734ecd4a urlmon!CINet::StartCommon+0x3ac
088befac 734d87ed urlmon!CINet::StartEx+0x1a
088befe8 734ee4c6 urlmon!COInetProt::StartEx+0x56d
088bf4a8 734f03ed urlmon!LegacyTransaction::StartEx+0x1026
088bf5d4 734ec013 urlmon!CBinding::StartBinding+0x17ed
088bf634 734ebbc3 urlmon!CUrlMon::StartBinding+0x1c3
088bf660 734e18af urlmon!CUrlMon::BindToStorage+0x83
088bf6ac 735832fe urlmon!CBaseBSCB::KickOffDownload+0x8f
088bf8e4 79f4dcc5 urlmon!URLDownloadToCacheFileW+0x8e
088bfd40 79f4ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
088bfd9c 79f96f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
088bfdd4 7626fcc9 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
088bfde4 7786809e kernel32!BaseThreadInitThunk+0x19
088bfe40 7786806e ntdll!__RtlUserThreadStart+0x2f
088bfe50 00000000 ntdll!_RtlUserThreadStart+0x1b
562d6d80257f6136ccf03b2a5cf43d6d_000.dmp