Crash in unknown_srvhost, Analyzed 43 dumps, total processed 159, rate equals 27.04%



Top 1: Version = 1.7224.1005.626, Total count = 43


dump count = 4

ChildEBP RetAddr  
069af2c8 77bf023a ntdll!RtlpWaitOnCriticalSection+0x93
069af300 77bf0089 ntdll!RtlpEnterCriticalSectionContended+0x1aa
069af374 75c411d7 ntdll!RtlEnterCriticalSection+0x49
069af39c 00000000 kernel32!CreateThreadStub+0x27
190d9946a2beb7e47aa27cdb72da2942_000.dmp
433201d58361fd6f2c244ff272240ecb_000.dmp
aae880f4935ae1c7fe4d7f3cde9205da_000.dmp

dump count = 2

ChildEBP RetAddr  
05e3f048 779c008a ntdll!RtlpWaitOnCriticalSection+0x93
05e3f080 779bfed9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
05e3f0f4 76df0f37 ntdll!RtlEnterCriticalSection+0x49
05e3f11c ffffffff kernel32!CreateThreadStub+0x27
WARNING: Frame IP not in any known module. Following frames may be wrong.
05e3f164 779dbd4b 0xffffffff
05e3f1c4 00000000 ntdll!RtlQueryPerformanceCounter+0x12b
3702c5172817eee08c10409cfd6fb922_002.dmp
eadcdf3bf67bf38e2bc7266de2cf1682_001.dmp

dump count = 2

ChildEBP RetAddr  
00efe558 7786c3e3 KERNELBASE!RaiseException+0x62
032c68d0 00000000 ntdll!RtlpAllocateHeapInternal+0x443
06f0b5fab04e0655b10863f66a431e75_000.dmp
846a90cb1016a8075736522bc44b6f88_000.dmp

dump count = 2

ChildEBP RetAddr  
0ad0f5d0 77aee0a3 ntdll!RtlpLowFragHeapFree+0x31
0ad0f5e8 76fe316c ntdll!RtlFreeHeap+0x105
0ad0f600 76fe4f40 kernel32!BasepFreeAppCompatData+0x6c
0ad0f610 76fe4959 kernel32!CreateProcessInternalW+0x20f7
0ad0fc8c 76fd1069 kernel32!CreateProcessInternalW+0x1f14
0ad0fcc4 758c5589 kernel32!CreateProcessW+0x2c
0ad0fdbc 758d2b76 shell32!_SHCreateProcess+0x251
0ad0fe10 758c538d shell32!CExecuteApplication::_CreateProcess+0xfc
0ad0fe20 758c5341 shell32!CExecuteApplication::_TryCreateProcess+0x2e
0ad0fe30 758c4789 shell32!CExecuteApplication::_DoApplication+0x48
0ad0fe40 758df5f1 shell32!CExecuteApplication::Execute+0x33
0ad0fe60 758c49d4 shell32!CExecuteAssociation::_DoCommand+0x88
0ad0fe84 758df673 shell32!CExecuteAssociation::_TryApplication+0x41
0ad0fea4 758c4b1b shell32!CExecuteAssociation::Execute+0x5f
0ad0fed0 758d2220 shell32!CShellExecute::_ExecuteAssoc+0x8c
0ad0feec 758d2347 shell32!CShellExecute::_DoExecute+0x89
0ad0ff00 76bc43c0 shell32!CShellExecute::s_ExecuteThreadProc+0x30
0ad0ff88 76fd336a shlwapi!WrapperThreadProc+0x1b5
0ad0ff94 77af9902 kernel32!BaseThreadInitThunk+0xe
0ad0ffd4 77af98d5 ntdll!__RtlUserThreadStart+0x70
0ad0ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
3976b4c43535f46a92a2d302e46e62c9_001.dmp
f3d9b3e39e384f5db6800ace31b6decb_002.dmp

dump count = 1

ChildEBP RetAddr  
003fe858 773d02aa ntdll!RtlpWaitOnCriticalSection+0x93
003fe890 773d00f9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
003fe934 76b60a6e ntdll!RtlEnterCriticalSection+0x49
003fe9d8 76b604de KERNELBASE!CreateFileInternal+0x57e
003fea0c 76b59199 KERNELBASE!CreateFileW+0x5e
003fea70 003fed80 KERNELBASE!GetTempFileNameW+0x209
WARNING: Frame IP not in any known module. Following frames may be wrong.
003feac8 773bfb74 0x3fed80
006d0000 0100aaa9 ntdll!RtlpSecMemFreeVirtualMemory+0x1a
006d000c 03550010 0x100aaa9
006d0010 006d00a4 0x3550010
006d0014 006d0000 0x6d00a4
006d00a4 05d60010 0x6d0000
006d00a8 00000000 0x5d60010
99d18271d771f8d451033b0fe89f9ce7_000.dmp

dump count = 1

ChildEBP RetAddr  
09a6fe90 7728d1c9 ntdll!LdrpUpdateLoadCount2+0x40
09a6ff10 7728d324 ntdll!LdrpUnloadDll+0x9c
09a6ff54 75a319b1 ntdll!LdrUnloadDll+0x4a
09a6ff68 724f63a3 KERNELBASE!FreeLibraryAndExitThread+0x28
09a6ff88 74b2343d mswsock!SockAsyncThread+0xf5
09a6ff94 77289802 kernel32!BaseThreadInitThunk+0xe
09a6ffd4 772897d5 ntdll!__RtlUserThreadStart+0x70
09a6ffec 00000000 ntdll!_RtlUserThreadStart+0x1b
998be5d0e2d2c6fa9a63896ab8639c91_000.dmp

dump count = 1

ChildEBP RetAddr  
0611f3f8 7791caa3 KERNELBASE!RaiseException+0x62
0611f480 0611f028 ntdll!RtlpAllocateHeapInternal+0x443
WARNING: Frame IP not in any known module. Following frames may be wrong.
00000000 00000000 0x611f028
0b8f71b0e1c396f81c135ecd405bff76_000.dmp

dump count = 1

071be818 724742ee rpcrt4!NdrClientCall2+0x17a
WARNING: Stack unwind information not available. Following frames may be wrong.
071be830 7247421c dnsapi!DnsValidateName_W+0xcde
071be8a8 72474528 dnsapi!DnsValidateName_W+0xc0c
071be900 724744d1 dnsapi!DnsQueryExW+0xed
071be920 72474474 dnsapi!DnsQueryExW+0x96
071be934 6fd94e0b dnsapi!DnsQueryExW+0x39
071be994 6fd948e5 mswsock!SaBlob_Query+0x6d
071be9e0 6fd94b82 mswsock!Rnr_DoDnsLookup+0x13f
071bec7c 75134ed7 mswsock!Dns_NSPLookupServiceNext+0x265
071bec94 75134eb7 ws2_32!NSPROVIDER::NSPLookupServiceNext+0x17
071becb0 75134fe3 ws2_32!NSPROVIDERSTATE::LookupServiceNext+0x1c
071bece0 75134f4a ws2_32!NSQUERY::LookupServiceNext+0xb3
071bed24 751352ab ws2_32!WSALookupServiceNextW+0x74
071bf5e0 7513532a ws2_32!QueryDnsForFamily+0x215
071bf620 75136485 ws2_32!QueryDns+0xa3
071bf6a0 75134a99 ws2_32!LookupAddressForName+0x151
071bf7a8 74e23d3f ws2_32!GetAddrInfoW+0x4ab
071bfa80 74e24914 wininet!QueryWellKnownDnsName+0x149
071bfabc 74dc3f8f wininet!RunDnsWpad+0x84
071bfad4 77918b5b wininet!RefCountWorkItemThread+0xb958f
071bfb48 77909121 ntdll!RtlpTpWorkCallback+0x11d
071bfc98 74bd343d ntdll!TppWorkerThread+0x562
071bfca4 778e9732 kernel32!BaseThreadInitThunk+0xe
071bfce4 778e9705 ntdll!__RtlUserThreadStart+0x70
071bfcfc 00000000 ntdll!_RtlUserThreadStart+0x1b
28406930e00b1a18053c663d1234daea_000.dmp

dump count = 1

ChildEBP RetAddr  
052cedcc 776b3d66 ntdll!RtlpFreeHeapInternal+0xd7
052cee34 776e302c ntdll!RtlFreeHeap+0x46
052cee44 75a524d6 ntdll!ZwWaitForSingleObject+0xc
052cef30 75e411d7 KERNELBASE!WaitForSingleObjectEx+0xb6
052cef58 00000000 kernel32!CreateThreadStub+0x27
8b4e9c5b466c9db4edffec4fd22c9f03_000.dmp

dump count = 1

ChildEBP RetAddr  
07bcf1d4 768957e3 KERNELBASE!RaiseException+0x62
07bcf204 00000000 ws2_32!connect+0xd3
881e9ad9a99a15ba271c9667807e15ea_000.dmp