Crash in unknown_srvhost, Analyzed 8 dumps, total processed 37, rate equals 21.62%

Top 1: Version = 1.7224.1005.626, Total count = 8

dump count = 2

ChildEBP RetAddr  
069af2c8 77bf023a ntdll!RtlpWaitOnCriticalSection+0x93
069af300 77bf0089 ntdll!RtlpEnterCriticalSectionContended+0x1aa
069af374 75c411d7 ntdll!RtlEnterCriticalSection+0x49
069af39c 00000000 kernel32!CreateThreadStub+0x27

dump count = 1

ChildEBP RetAddr  
0293e830 770ce0c3 ntdll!RtlpLowFragHeapFree+0x31
0293e848 76b214bd ntdll!RtlFreeHeap+0x105
0293e85c 750be72e kernel32!HeapFree+0x14
0293e8c8 75100192 wininet!HostWCharToChar+0x31c
0293e8f4 750ffdbe wininet!HostCharToAce+0x5c
0293e934 75526b92 wininet!IsHostInProxyBypassList+0x9e
0293ea70 754ecd33 urlmon!CSecurityManager::CheckProxyBypassRule+0x56243
0293ecdc 754ed4bc urlmon!CSecurityManager::_MapComponentsToZone+0x1c1
0293f1f4 754ed3a9 urlmon!CSecurityManager::_MapUrlToZoneDirect+0xcb
0293f28c 754c1028 urlmon!CSecurityManager::MapUrlToZoneEx2Internal+0x530
0293f2d4 754ecb9b urlmon!CSecurityManager::GetZoneFromUriInternal+0x127
0293f370 754b53ba urlmon!CSecurityManager::MapUrlToZonePrivate+0x1c2
0293f38c 750beb43 urlmon!CSecurityManager::MapUrlToZone+0x1a
0293f5c0 750cac61 wininet!GetZoneFromUrl+0xdd
0293f634 750cac00 wininet!HTTP_REQUEST_HANDLE_OBJECT::CreateCookieHeaderIfNeeded+0x57
0293f67c 750c93ec wininet!HTTP_REQUEST_HANDLE_OBJECT::HttpSendRequest_Start+0x41c
0293f694 750c9181 wininet!CFsm_HttpSendRequest::RunSM+0x77
0293f6e8 75116bf6 wininet!CFsm::Run+0x161
0293f7c4 750cfb01 wininet!CFsm::RunWorkItem+0x234
0293f7f8 77107cfa wininet!FailFastThreadPoolCallback<&CFsm::RunWorkItemWrapper>+0x21
0293f818 770f09b1 ntdll!TppSimplepExecuteCallback+0x102
0293f968 76b2344d ntdll!TppWorkerThread+0x562
0293f974 770d9802 kernel32!BaseThreadInitThunk+0xe
0293f9b4 770d97d5 ntdll!__RtlUserThreadStart+0x70
0293f9cc 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
063af1c8 77c011d7 KERNELBASE!RaiseException+0x62
063af1f0 00000000 kernel32!CreateThreadStub+0x27

dump count = 1

ChildEBP RetAddr  
0787ef38 7623c837 KERNELBASE!RaiseException+0x64
0787ef60 00000000 kernel32!CreateThreadStub+0x27

dump count = 1

ChildEBP RetAddr  
069df5e8 770a020a ntdll!RtlpWaitOnCriticalSection+0x93
069df620 770a0059 ntdll!RtlpEnterCriticalSectionContended+0x1aa
069df6d4 770a639f ntdll!RtlEnterCriticalSection+0x49
00839c08 49304b30 ntdll!RtlpAllocateHeapInternal+0x48f
WARNING: Frame IP not in any known module. Following frames may be wrong.
00839c14 0400051a 0x49304b30
00839c18 ea5d9114 0x400051a
00839c1c 5ee1d1c5 0xea5d9114
00839c20 8a6b6449 0x5ee1d1c5
00839c24 474ee094 0x8a6b6449
00839c28 bbc95809 0x474ee094
00839c2c 68140489 0xbbc95809
00839c30 b6ebe037 0x68140489
00839c34 115ff83b 0xb6ebe037
00839c38 61fefb86 0x115ff83b
00839c3c 6588087b 0x61fefb86
00839c40 02424ef4 0x6588087b
00839c44 a3ae0d10 0x2424ef4
00839c48 5e58988e 0xa3ae0d10
00839c4c 44e4ee99 0x5e58988e
00839c50 89147965 0x44e4ee99
00839c54 00000000 0x89147965

dump count = 1

ChildEBP RetAddr  
003be618 77c202aa ntdll!RtlpWaitOnCriticalSection+0x93
003be650 77c200f9 ntdll!RtlpEnterCriticalSectionContended+0x1aa
003be6f4 76c90a7e ntdll!RtlEnterCriticalSection+0x49
003be798 76c904ee KERNELBASE!CreateFileInternal+0x57e
003be7cc 76c891a9 KERNELBASE!CreateFileW+0x5e
003be830 003beb40 KERNELBASE!GetTempFileNameW+0x209
WARNING: Frame IP not in any known module. Following frames may be wrong.
003be8b0 77c20e0f 0x3beb40
003be8ec 06daab80 ntdll!RtlpInsertFreeBlock+0x11f
003be938 00650073 0x6daab80
003be93c 00730072 0x650073
00650073 001fd400 0x730072
00650077 001fd900 0x1fd400
0065007b 001fde00 0x1fd900
0065007f 001fe300 0x1fde00
00650083 00000000 0x1fe300

dump count = 1

ChildEBP RetAddr  
033cf784 7733e0f3 ntdll!RtlpLowFragHeapFree+0x31
033cf79c 76ab05fa ntdll!RtlFreeHeap+0x105
033cf7b0 76ab05b9 rpcrt4!FreeWrapper+0x36
033cf7bc 76ac2f0e rpcrt4!operator delete+0xd
033cf7cc 76ababd3 rpcrt4!LRPC_CCALL_AVRF::`scalar deleting destructor'+0x19
033cf7e0 76abaad7 rpcrt4!LRPC_BASE_BINDING_HANDLE::FreeCachedCalls+0x42
033cf7e8 76aba9ef rpcrt4!LRPC_BASE_BINDING_HANDLE::BindingFree+0x14
033cf7f8 73fc2759 rpcrt4!RpcBindingFree+0x55
033cf804 76abaf38 dhcpcsvc!STRING_HANDLE_unbind+0xf
033cf82c 76abaf6b rpcrt4!GenericHandleMgr+0xe2
033cf844 76ab804f rpcrt4!GenericHandleUnbind+0x28
033cf85c 76b5018c rpcrt4!NdrpClientFinally+0x5e
033cf864 76b5016a rpcrt4!NdrClientCall2+0x29c
033cfc78 73fc3c82 rpcrt4!NdrClientCall2+0x27f
033cfc90 73fc3be9 dhcpcsvc!RpcCliRequestParams+0x19
033cfd00 76783573 dhcpcsvc!DhcpRequestParams+0x238
033cfd68 767834ab wininet!CAdapterInterface::Dhcpv4Inform+0x6e
033cfd8c 76783392 wininet!CAdapterInterface::DhcpDoInform+0x3e
033cfdac 76723917 wininet!DhcpAsyncThreadStart+0x62
033cfdc4 77378ddf wininet!RefCountWorkItemThread+0x41887
033cfe38 77360991 ntdll!RtlpTpWorkCallback+0x11d
033cff88 75f1343d ntdll!TppWorkerThread+0x562
033cff94 77349812 kernel32!BaseThreadInitThunk+0xe
033cffd4 773497e5 ntdll!__RtlUserThreadStart+0x70
033cffec 00000000 ntdll!_RtlUserThreadStart+0x1b