Crash in srvhost, Analyzed 20 dumps, total processed 128, rate equals 15.63%



Top 1: Version = 1.8425.1015.415, Total count = 19


dump count = 3

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
006ff488 71821cef 0x0
006ff4a8 759116ab atlthunk!AtlThunk_0x0F+0x3f
006ff4d4 75907e1a user32!_InternalCallWinProc+0x2b
006ff5bc 75906751 user32!UserCallWinProcCheckWow+0x33a
006ff638 75906270 user32!DispatchMessageWorker+0x4d1
006ff644 00cc16cb user32!DispatchMessageW+0x10
006ffcac 00d11661 srvhost!main+0x7ab
006ffcf4 75c7fcc9 srvhost!__scrt_common_main_seh+0xfa
006ffd04 775e809e kernel32!BaseThreadInitThunk+0x19
006ffd60 775e806e ntdll!__RtlUserThreadStart+0x2f
006ffd70 00000000 ntdll!_RtlUserThreadStart+0x1b
7eab273e02855679a4fbd11552306b1d_000.dmp
84d1c472919edf4a72655247b86aa82d_000.dmp
dc753c81e9ee23178cc00f74ebd153a7_001.dmp

dump count = 2

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
010ff4d0 75801cef 0x0
010ff4f0 76d2d9db atlthunk!AtlThunk_0x0F+0x3f
010ff51c 76d246fa user32!_InternalCallWinProc+0x2b
010ff600 76d22a2a user32!UserCallWinProcCheckWow+0x33a
010ff674 76d227f0 user32!DispatchMessageWorker+0x22a
010ff680 009816cb user32!DispatchMessageW+0x10
010ffce8 009d1661 srvhost!main+0x7ab
010ffd30 7681f989 srvhost!__scrt_common_main_seh+0xfa
010ffd40 77cd7084 kernel32!BaseThreadInitThunk+0x19
010ffd9c 77cd7054 ntdll!__RtlUserThreadStart+0x2f
010ffdac 00000000 ntdll!_RtlUserThreadStart+0x1b
42628d4be4ce91e58a08e9e7ae6221fe_001.dmp
ecc4465b60fde09e9d1604883bd6e6a0_000.dmp

dump count = 2

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00cce24c 729f1cef 0x0
00cce26c 75f4157b atlthunk!AtlThunk_0x0F+0x3f
00cce298 75f37c5a user32!_InternalCallWinProc+0x2b
00cce380 75f37870 user32!UserCallWinProcCheckWow+0x33a
00cce3e4 75f3bd3f user32!DispatchClientMessage+0x190
00cce420 77a956cd user32!__fnDWORD+0x3f
00cce458 75f3c00a ntdll!KiUserCallbackDispatcher+0x4d
00cce4a8 75f3bebe user32!_PeekMessage+0x2a
00cce4e4 769e1236 user32!PeekMessageW+0xde
00cce544 7698a746 shell32!SHProcessMessagesUntilEventsEx+0xd2
00cce574 7698c2b5 shell32!CShellExecute::_RunThreadMaybeWait+0x7d
00cce67c 769da7c2 shell32!CShellExecute::ExecuteNormal+0x1d8
00cce6c0 769da287 shell32!ShellExecuteNormal+0xc1
00cce7a4 00dbf729 shell32!ShellExecuteExW+0x97
00ccea30 771211c2 srvhost!CDbgHelper::_MiniDumpHanlder+0x519
00cceacc 77ad0404 KERNELBASE!UnhandledExceptionFilter+0x192
00cceb78 77a95626 ntdll!LdrpLogFatalUserCallbackException+0x81
00cceb84 77aa91c2 ntdll!KiUserCallbackExceptionHandler+0x26
00cceba8 77aa9194 ntdll!ExecuteHandler2+0x26
00ccec70 77a95716 ntdll!ExecuteHandler+0x24
00ccec70 00000000 ntdll!KiUserExceptionDispatcher+0x26
33f24a60474b2ab5d77e097aafc5dd69_005.dmp
8e6d4a0f1914900c40b30ae77414b87f_002.dmp

dump count = 2

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00eff4c0 72351e43 0x0
00eff4e0 77322413 atlthunk!AtlThunk_0x0F+0x43
00eff50c 773131d6 user32!_InternalCallWinProc+0x2b
00eff604 77311a95 user32!UserCallWinProcCheckWow+0x4c6
00eff680 773115e0 user32!DispatchMessageWorker+0x4a5
00eff68c 007416cb user32!DispatchMessageW+0x10
00effcf4 00791661 srvhost!main+0x7ab
00effd3c 76387ba9 srvhost!__scrt_common_main_seh+0xfa
00effd4c 776fbb9b kernel32!BaseThreadInitThunk+0x19
00effda4 776fbb1f ntdll!__RtlUserThreadStart+0x2b
00effdb4 00000000 ntdll!_RtlUserThreadStart+0x1b
861281e04d660d514bf482497ffd712a_000.dmp
fea8b49ea647db5bdae322efcc6326c7_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
00a4f020 73451e93 0x0
00a4f040 76569a13 atlthunk!AtlThunk_0x0F+0x43
00a4f06c 76557b8d user32!_InternalCallWinProc+0x2b
00a4f170 76557630 user32!UserCallWinProcCheckWow+0x49d
00a4f1d4 76563ea9 user32!DispatchClientMessage+0x190
00a4f210 7799bcb6 user32!__fnDWORD+0x39
00a4f248 76566ad0 ntdll!KiUserCallbackDispatcher+0x36
00a4f284 00b2168f user32!GetMessageW+0x30
00a4f8f8 00b71661 srvhost!main+0x76f
00a4f940 759a5d49 srvhost!__scrt_common_main_seh+0xfa
00a4f950 7798d09b kernel32!BaseThreadInitThunk+0x19
00a4f9a8 7798d021 ntdll!__RtlUserThreadStart+0x2b
00a4f9b8 00000000 ntdll!_RtlUserThreadStart+0x1b
8f953e09b8b9d6f6c3c5326ee3887167_001.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
008eedd0 71fb1cef 0x0
008eedf0 76f2148b atlthunk!AtlThunk_0x0F+0x3f
008eee1c 76f1844a user32!_InternalCallWinProc+0x2b
008eef00 76f1804a user32!UserCallWinProcCheckWow+0x33a
008eef64 76f1bc0f user32!DispatchClientMessage+0xea
008eefa0 77d94fbd user32!__fnDWORD+0x3f
008eefd8 76f1beaa ntdll!KiUserCallbackDispatcher+0x4d
008ef028 76f1be1e user32!_PeekMessage+0x2a
008ef064 778ab616 user32!PeekMessageW+0x16e
008ef0c4 77855226 shell32!SHProcessMessagesUntilEventsEx+0xd2
008ef0f4 77856d95 shell32!CShellExecute::_RunThreadMaybeWait+0x7d
008ef1fc 778a4b12 shell32!CShellExecute::ExecuteNormal+0x1d8
008ef240 778a45d7 shell32!ShellExecuteNormal+0xc1
008ef324 00def729 shell32!ShellExecuteExW+0x97
008ef5b0 76355402 srvhost!CDbgHelper::_MiniDumpHanlder+0x519
008ef64c 77dd0836 KERNELBASE!UnhandledExceptionFilter+0x192
008ef6f8 77d94f16 ntdll!LdrpLogFatalUserCallbackException+0x81
008ef704 77da8bb2 ntdll!KiUserCallbackExceptionHandler+0x26
008ef728 77da8b84 ntdll!ExecuteHandler2+0x26
008ef7f4 77d95006 ntdll!ExecuteHandler+0x24
008ef7f4 00000000 ntdll!KiUserExceptionDispatcher+0x26
36ce98d4b84a372f00b73ec397f6f129_006.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
010ff390 724e1e43 0x0
010ff3b0 766b31d3 atlthunk!AtlThunk_0x0F+0x43
010ff3dc 766a3fa6 user32!_InternalCallWinProc+0x2b
010ff4d4 766a3a2a user32!UserCallWinProcCheckWow+0x4c6
010ff538 76711714 user32!DispatchClientMessage+0xea
010ff578 771b879d user32!__fnGETTEXTLENGTHS+0x34
010ff5a8 76b910dc ntdll!KiUserCallbackDispatcher+0x4d
010ff5ac 766b0390 win32u!NtUserGetMessage+0xc
010ff5e8 00c3168f user32!GetMessageW+0x30
010ffc5c 00c81661 srvhost!main+0x76f
010ffca4 75387ba9 srvhost!__scrt_common_main_seh+0xfa
010ffcb4 771ab7db kernel32!BaseThreadInitThunk+0x19
010ffd0c 771ab75f ntdll!__RtlUserThreadStart+0x2b
010ffd1c 00000000 ntdll!_RtlUserThreadStart+0x1b
8faeedeec42c8e44184de25071f7d323_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0024f2c8 765e630a 0x120ef3
0024f2f4 765e6d4a user32!InternalCallWinProc+0x23
0024f36c 765e77d7 user32!UserCallWinProcCheckWow+0x109
0024f3cc 765e789a user32!DispatchMessageWorker+0x3b5
0024f3dc 012616cb user32!DispatchMessageW+0xf
0024fa44 012b1661 srvhost!main+0x7ab
0024fa8c 762a343d srvhost!__scrt_common_main_seh+0xfa
0024fa98 77529812 kernel32!BaseThreadInitThunk+0xe
0024fad8 775297e5 ntdll!__RtlUserThreadStart+0x70
0024faf0 00000000 ntdll!_RtlUserThreadStart+0x1b
db8e85b878b6e6a3e621e2fd47ee67fe_000.dmp

dump count = 1

00efe454 77560fcb atlthunk!AtlThunk_0x0F+0x3f
00efe480 77557f9a user32!_InternalCallWinProc+0x2b
00efe564 77557b9a user32!UserCallWinProcCheckWow+0x33a
00efe5c8 7754b1c0 user32!DispatchClientMessage+0xea
00efe608 77744e7d user32!__fnINSTRINGNULL+0x40
00efe6e4 76dcb6f6 ntdll!KiUserCallbackDispatcher+0x4d
00efe744 76d752b6 shell32!SHProcessMessagesUntilEventsEx+0xd2
00efe774 76d76e25 shell32!CShellExecute::_RunThreadMaybeWait+0x7d
00efe87c 76dc4c12 shell32!CShellExecute::ExecuteNormal+0x1d8
00efe8c0 76dc46d7 shell32!ShellExecuteNormal+0xc1
00efe9a4 0054f729 shell32!ShellExecuteExW+0x97
00efec30 76bc2952 srvhost!CDbgHelper::_MiniDumpHanlder+0x519
00efeccc 77780484 KERNELBASE!UnhandledExceptionFilter+0x192
00efed74 00efeda8 ntdll!LdrpLogFatalUserCallbackException+0x81
00efed80 00efeed8 0xefeda8
00efee88 00000000 0xefeed8
87108a18ab8f59db1d1d4fa84feb0fd7_000.dmp

dump count = 1

ChildEBP RetAddr  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0032f644 767c630a 0x160f10
0032f670 767c6d4a user32!InternalCallWinProc+0x23
0032f6e8 767c77d7 user32!UserCallWinProcCheckWow+0x109
0032f748 767c789a user32!DispatchMessageWorker+0x3b5
0032f758 008916cb user32!DispatchMessageW+0xf
0032fdc0 008e1661 srvhost!main+0x7ab
0032fe08 766a343d srvhost!__scrt_common_main_seh+0xfa
0032fe14 77059802 kernel32!BaseThreadInitThunk+0xe
0032fe54 770597d5 ntdll!__RtlUserThreadStart+0x70
0032fe6c 00000000 ntdll!_RtlUserThreadStart+0x1b
21963a3b412d3a59d7b5eb9bbad2f847_003.dmp


Top 2: Version = 1.8425.1010.313, Total count = 1


dump count = 1

ChildEBP RetAddr  
00fae724 75cb034c KERNELBASE!RaiseException+0x62
00fae7c8 75cb003e KERNELBASE!CreateFileInternal+0x2fc
00fae7fc 75c9c116 KERNELBASE!CreateFileW+0x5e
00fae860 00faeb70 KERNELBASE!GetTempFileNameW+0x1a6
WARNING: Frame IP not in any known module. Following frames may be wrong.
00fae8e0 76f10c4f 0xfaeb70
00fae91c 03dd5518 ntdll!RtlpInsertFreeBlock+0x11f
00fae968 00650073 0x3dd5518
00fae96c 00730072 0x650073
00fae970 0077005c 0x730072
00fae974 00670078 0x77005c
00fae978 0041005c 0x670078
00fae97c 00700070 srvhost!obfuscated_FindNextFileW+0x5c
00fae980 00610044 0x700070
00fae984 00610074 0x610044
00fae988 004c005c 0x610074
00fae98c 0063006f 0x4c005c
00fae990 006c0061 0x63006f
00fae994 0054005c 0x6c0061
00fae998 006d0065 0x54005c
00fae99c 005c0070 0x6d0065
00fae9a0 00000000 0x5c0070
ad4d9f3a143a10f308c3135c19ef5ba2_000.dmp