Crash in falconshelper, Analyzed 2 dumps, total processed 125, rate equals 1.60%



Top 1: Version = 2.7224.1000.625, Total count = 2


dump count = 1

ChildEBP RetAddr  
0634f5e4 77bee0c3 ntdll!RtlpLowFragHeapFree+0x31
0634f5fc 75e314ad ntdll!RtlFreeHeap+0x105
0634f610 516c6c3f kernel32!HeapFree+0x14
0634f624 516b5084 FalconsHelper!_free_base+0x1c
0634f634 51664d12 FalconsHelper!free+0x18
0634f640 51666153 FalconsHelper!operator delete+0xb
0634f69c 516662cc FalconsHelper!EncodeHelper::Base64EncodeW+0x1d3
0634f724 51655777 FalconsHelper!EncodeHelper::Base64EncodeWString+0x14c
0634f9fc 516586c7 FalconsHelper!FalconsMain::OnRecvBrowserEvent+0x1297
0634fa1c 76e962fa FalconsHelper!FalconsMain::WndPro+0xf7
0634fa48 76e96d3a user32!InternalCallWinProc+0x23
0634fac0 76e977c4 user32!UserCallWinProcCheckWow+0x109
0634fb20 76e9788a user32!DispatchMessageWorker+0x3b5
0634fb30 5165797c user32!DispatchMessageW+0xf
0634fd3c 516585bf FalconsHelper!FalconsMain::Run+0x31c
0634fd44 516b6f97 FalconsHelper!FalconsMain::ThreadProc+0xf
0634fd7c 75e3343d FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
0634fd88 77bf9802 kernel32!BaseThreadInitThunk+0xe
0634fdc8 77bf97d5 ntdll!__RtlUserThreadStart+0x70
0634fde0 00000000 ntdll!_RtlUserThreadStart+0x1b
9f74c56fe4eb1270e80e87adae1a0f3c_000.dmp

dump count = 1

ChildEBP RetAddr  
03bced00 73525ce5 urlmon!OLESTRDuplicate+0x14
03bced1c 734f167a urlmon!CReadOnlyStreamFile::Create+0x5a
03bced50 734f0c8d urlmon!CTransData::GetData+0x1bb
03bced7c 734f02d2 urlmon!CBinding::OnTransNotification+0x62d
03bcedb4 734edd36 urlmon!CBinding::ReportData+0x112
03bcedd8 734dc82b urlmon!COInetProt::SafeReportDataToProtocolSink+0x4a
03bcee08 734db835 urlmon!COInetProt::ReportData+0x21b
03bceeb8 73515044 urlmon!CTransaction::DispatchReport+0x1b5
03bceef4 73508936 urlmon!LegacyTransaction::OnINetCallback+0x174
03bcef10 777c7733 urlmon!TransactionWndProc+0x86
03bcef3c 777b5d7d user32!_InternalCallWinProc+0x2b
03bcf044 777b520a user32!UserCallWinProcCheckWow+0x49d
03bcf0b8 777b4d70 user32!DispatchMessageWorker+0x48a
03bcf0c4 735516d4 user32!DispatchMessageW+0x10
03bcf104 7351165f urlmon!LegacyTransaction::CompleteOperation+0x29e94
03bcf150 734e7d2f urlmon!LegacyTransaction::StartEx+0x8cf
03bcf204 734e84d4 urlmon!CBinding::StartBinding+0xeef
03bcf264 734e9ce1 urlmon!CUrlMon::StartBinding+0x174
03bcf28c 734c8ba6 urlmon!CUrlMon::BindToStorage+0x71
03bcf2d0 735a0181 urlmon!CBaseBSCB::KickOffDownload+0x86
03bcf508 7a99dcc5 urlmon!URLDownloadToCacheFileW+0x91
03bcf964 7a99ba49 FalconsHelper!CStatisticImpl::InternalDownloadFile+0xa5
03bcf9c0 7a9e6f97 FalconsHelper!CStatisticImpl::DownloadThreadProc+0x139
03bcf9f8 76335d49 FalconsHelper!thread_start<unsigned int (__stdcall*)(void *)>+0x58
03bcfa08 77afce3b kernel32!BaseThreadInitThunk+0x19
03bcfa60 77afcdc1 ntdll!__RtlUserThreadStart+0x2b
03bcfa70 00000000 ntdll!_RtlUserThreadStart+0x1b
ca13b7fad472458d0c32ed5301fee4be_000.dmp