Crash in falconshelper, Analyzed 3 dumps, total processed 129, rate equals 2.33%

Top 1: Version = 2.7224.1000.625, Total count = 3

dump count = 1

ChildEBP RetAddr  
06d6f63c 772dec13 ntdll!LdrpUpdateLoadCount2+0x4d
06d6f7b4 7731d3ff ntdll!LdrpLoadDll+0x544
06d6f7f0 754e2e6a ntdll!LdrLoadDll+0xc7
06d6f838 76c6483c KERNELBASE!LoadLibraryExW+0x233
06d6f84c 0f438dd1 kernel32!LoadLibraryW+0x11
06d6fa70 0f43a89d FalconsHelper!LuaScriptHelper::InitLua+0xc1
06d6faf8 0f43a7bb FalconsHelper!CWorkThread::_ThreadProc+0xcd
06d6fb00 76c6343d FalconsHelper!CWorkThread::_StaticThreadProc+0xb
06d6fb0c 772d9812 kernel32!BaseThreadInitThunk+0xe
06d6fb4c 772d97e5 ntdll!__RtlUserThreadStart+0x70
06d6fb64 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
09b8e028 7703c7f4 ntdll!RtlpLowFragHeapAllocFromContext+0x8
09b8e078 7703c2a6 ntdll!RtlpAllocateHeapInternal+0x534
09b8e088 745ab9f8 ntdll!RtlAllocateHeap+0x46
09b8e0d8 745a009b KERNELBASE!LocalAlloc+0x88
09b8e0f4 7459f0d2 KERNELBASE!URL_STRING::Accept+0xe5
09b8e114 7459ed0a KERNELBASE!URL::FeedQueryAndFragment+0x85
09b8e140 7459ef27 KERNELBASE!BlendUrls+0x265
09b8e484 7459ea9c KERNELBASE!FormUrlCombineResultW+0x9e
09b8e498 7459e9e8 KERNELBASE!UrlCombineW+0x2c
09b8e558 6ee31892 KERNELBASE!UrlCanonicalizeW+0xb8
09b8e5d4 6ee0e127 wininet!pHttpGetUrlString+0x182
09b8e61c 6ee2c17a wininet!INTERNET_CONNECT_HANDLE_OBJECT::SetObjectName+0xa7
09b8e6ec 6ee2c937 wininet!InternalHttpOpenRequestA+0xcca
09b8e7c0 67db7689 wininet!HttpOpenRequestW+0x3a7
09b8f030 67db27a7 urlmon!CINetHttp::INetAsyncOpenRequest+0x309
09b8f068 67db2aac urlmon!CINet::INetAsyncConnect+0x307
09b8f088 67db2c9c urlmon!CINet::INetAsyncOpen+0x2c
09b8f0a0 67db45f1 urlmon!CINet::INetAsyncStart+0x24
09b8f0c4 67db46aa urlmon!CINet::StartCommon+0x16f
09b8f0e0 67d9a701 urlmon!CINet::StartEx+0x1a
09b8f11c 67d959ee urlmon!COInetProt::StartEx+0x5a1
09b8f5d8 67d83b88 urlmon!CTransaction::StartEx+0xd4e
09b8f658 67d8580a urlmon!CBinding::StartBinding+0xe28
09b8f6a8 67d85a5b urlmon!CUrlMon::StartBinding+0x18a
09b8f6d4 67d86833 urlmon!CUrlMon::BindToStorage+0x7b
09b8f71c 67dc9f60 urlmon!CBaseBSCB::KickOffDownload+0x93
09b8f94c 0f73dcc5 urlmon!URLDownloadToCacheFileW+0x80
09b8fda8 0f73ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
09b8fe04 0f786f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
09b8fe3c 763295f4 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
09b8fe50 7702241a kernel32!BaseThreadInitThunk+0x24
09b8fe98 770223e9 ntdll!__RtlUserThreadStart+0x2b
09b8fea8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0659f068 77985efe ntdll!RtlpAllocateHeapInternal+0x1b
0659f084 75ad07f3 ntdll!RtlAllocateHeap+0x3e
0659f0f8 75ad05f4 user32!ClassNameToVersion+0x33
0659f3a4 75acff97 user32!VerNtUserCreateWindowEx+0x199
0659f48c 75acfe68 user32!CreateWindowInternal+0x12b
0659f4cc 7360789f user32!CreateWindowExW+0x38
0659f51c 7361396f urlmon!CTransaction::GetNotificationWnd+0x11f
0659f634 7360f573 urlmon!CBinding::StartBinding+0x180f
0659f694 7360f123 urlmon!CUrlMon::StartBinding+0x1c3
0659f6c0 73604def urlmon!CUrlMon::BindToStorage+0x83
0659f70c 736a7d4e urlmon!CBaseBSCB::KickOffDownload+0x8f
0659f944 785bdcc5 urlmon!URLDownloadToCacheFileW+0x8e
0659fda0 785bba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
0659fdfc 78606f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
0659fe34 75d1fcc9 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0659fe44 779a809e kernel32!BaseThreadInitThunk+0x19
0659fea0 779a806e ntdll!__RtlUserThreadStart+0x2f
0659feb0 00000000 ntdll!_RtlUserThreadStart+0x1b