Crash in falconshelper, Analyzed 4 dumps, total processed 239, rate equals 1.67%



Top 1: Version = 2.7224.1000.625, Total count = 4


dump count = 1

ChildEBP RetAddr  
041bf01c 77b03fde ntdll!bsearch+0x57
041bf07c 77b03b9a ntdll!RtlpLocateActivationContextSection+0xee
041bf0dc 7767d090 ntdll!RtlFindActivationContextSectionString+0x13a
041bf158 7767cdf4 user32!ClassNameToVersion+0xd0
041bf404 7767c797 user32!VerNtUserCreateWindowEx+0x199
041bf4ec 7767c668 user32!CreateWindowInternal+0x12b
041bf52c 73fbf61f user32!CreateWindowExW+0x38
041bf57c 73fbe51f urlmon!CTransaction::GetNotificationWnd+0x11f
041bf694 73fba123 urlmon!CBinding::StartBinding+0x180f
041bf6f4 73fb9cd3 urlmon!CUrlMon::StartBinding+0x1c3
041bf720 73fb02cf urlmon!CUrlMon::BindToStorage+0x83
041bf76c 74052b2e urlmon!CBaseBSCB::KickOffDownload+0x8f
041bf9a4 04c2dcc5 urlmon!URLDownloadToCacheFileW+0x8e
041bfe00 04c2ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
041bfe5c 04c76f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
041bfe94 76c4f989 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
041bfea4 77b27084 kernel32!BaseThreadInitThunk+0x19
041bff00 77b27054 ntdll!__RtlUserThreadStart+0x2f
041bff10 00000000 ntdll!_RtlUserThreadStart+0x1b
f22e40a9d4ad8bdbf35ae401d0da879b_000.dmp

dump count = 1

ChildEBP RetAddr  
05cdf1f4 6643090f FalconsHelper!__crt_stdio_input::input_processor<char,__crt_stdio_input::string_input_adapter<char> >::process+0x2
05cdf29c 66434fe9 FalconsHelper!common_vsscanf<char>+0x90
05cdf2c0 663f91d4 FalconsHelper!__stdio_common_vsscanf+0x1f
05cdf2e4 663f87ad FalconsHelper!sscanf_s+0x24
05cdf668 663f8bb4 FalconsHelper!JsonCppObj::getLastJsonObj+0xbd
05cdf7b8 663c480b FalconsHelper!JsonCppObj::getStringWEx+0x44
05cdfa98 663c86c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x32b
05cdfab8 770515fb FalconsHelper!FalconsMain::WndPro+0xf7
05cdfae4 77047d6a user32!_InternalCallWinProc+0x2b
05cdfbcc 770466a1 user32!UserCallWinProcCheckWow+0x33a
05cdfc48 770461c0 user32!DispatchMessageWorker+0x4d1
05cdfc54 663c797c user32!DispatchMessageW+0x10
05cdfe60 663c85bf FalconsHelper!FalconsMain::Run+0x31c
05cdfe68 66426f97 FalconsHelper!FalconsMain::ThreadProc+0xf
05cdfea0 76a6fcc9 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
05cdfeb0 77cf809e kernel32!BaseThreadInitThunk+0x19
05cdff0c 77cf806e ntdll!__RtlUserThreadStart+0x2f
05cdff1c 00000000 ntdll!_RtlUserThreadStart+0x1b
577f5de759f9dc9cd4666d9b5d15f623_000.dmp

dump count = 1

0773fd24 7540343d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0773fd30 77859802 kernel32!BaseThreadInitThunk+0xe
0773fd70 778597d5 ntdll!__RtlUserThreadStart+0x70
0773fd88 00000000 ntdll!_RtlUserThreadStart+0x1b
8a78e60954aef719c0a937c08ceb917f_000.dmp

dump count = 1

ChildEBP RetAddr  
0500ed78 76fb320a ntdll!TppCleanupGroupMemberDestroy+0x98
0500ed8c 76fca876 ntdll!TppWorkDestroy+0x46
0500edc4 76fca7df ntdll!TppTimerpFree+0x57
0500ee2c 75b22bf4 ntdll!TpReleaseTimer+0x102
0500ee60 75b2b6ad wininet!WxCloseThreadpoolTimer+0x2a
0500ee84 75b2b27d wininet!HTTP_REQUEST_HANDLE_OBJECT::~HTTP_REQUEST_HANDLE_OBJECT+0x449
0500ee90 75b26540 wininet!HTTP_REQUEST_HANDLE_OBJECT::`scalar deleting destructor'+0xd
0500eeac 75b25d05 wininet!HANDLE_OBJECT::Dereference+0x393b
0500eeb8 75b26454 wininet!DereferenceObject+0x2c
0500ef10 75b26145 wininet!InternalInternetCloseHandle+0x2ee
0500ef70 764bc9d4 wininet!InternetCloseHandle+0x85
0500ef8c 764bc98b urlmon!CINet::TerminateRequest+0xa4
0500ef98 764bf8de urlmon!CINetHttp::TerminateRequest+0xb
0500efb4 764b5324 urlmon!CINet::UnlockRequest+0xe3
0500efc8 764b52a3 urlmon!COInetProt::UnlockRequest+0x20
0500efe8 764b80c9 urlmon!CTransaction::UnlockRequest+0x53
0500effc 764b814c urlmon!CTransData::~CTransData+0x51
0500f018 764b311b urlmon!CBinding::~CBinding+0x2f2
0500f04c 764b3944 urlmon!CUrlMon::StartBinding+0x204
0500f078 764de923 urlmon!CUrlMon::BindToStorage+0x7b
0500f0c0 764df094 urlmon!CBaseBSCB::KickOffDownload+0x93
0500f2f0 0fb9dcc5 urlmon!URLDownloadToCacheFileW+0x84
0500f74c 0fb9ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0500f7a8 0fbe6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0500f7e0 7474344d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0500f7ec 76f99802 kernel32!BaseThreadInitThunk+0xe
0500f82c 76f997d5 ntdll!__RtlUserThreadStart+0x70
0500f844 00000000 ntdll!_RtlUserThreadStart+0x1b
b40cffcc55f123ba3a6594f7d55fcdb4_000.dmp