Crash in arctrl, Analyzed 2 dumps, total processed 279, rate equals 0.72%

Top 1: Version = 1.5025.1270.226, Total count = 2

dump count = 1

ChildEBP RetAddr  
0405fd28 7795e0c3 ntdll!RtlpLowFragHeapFree+0xf0
0405fd40 770014bd ntdll!RtlFreeHeap+0x105
0405fd54 7423724a kernel32!HeapFree+0x14
0405fd68 74236f5c arctrl!_free_base+0x1c
0405fd78 779693c5 arctrl!destroy_fls+0x1b
0405fd94 7798216f ntdll!RtlProcessFlsData+0x57
0405fe2c 77982403 ntdll!LdrShutdownThread+0x35
0405fe3c 7798f5ca ntdll!RtlExitUserThread+0x2a
0405ff88 7700344d ntdll!TppWorkerThread+0x846
0405ff94 77969802 kernel32!BaseThreadInitThunk+0xe
0405ffd4 779697d5 ntdll!__RtlUserThreadStart+0x70
0405ffec 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
02fef5f0 752d585f wininet!HANDLE_OBJECT::~HANDLE_OBJECT+0x252
02fef620 752d5ed4 wininet!INTERNET_CONNECT_HANDLE_OBJECT::~INTERNET_CONNECT_HANDLE_OBJECT+0x35a
02fef644 752d587d wininet!HTTP_REQUEST_HANDLE_OBJECT::~HTTP_REQUEST_HANDLE_OBJECT+0x670
02fef650 752d0b47 wininet!HTTP_REQUEST_HANDLE_OBJECT::`scalar deleting destructor'+0xd
02fef66c 752d033d wininet!HANDLE_OBJECT::Dereference+0xfffc0bda
02fef678 752d0a5b wininet!DereferenceObject+0x2c
02fef6d0 752d0765 wininet!InternalInternetCloseHandle+0x2ee
02fef734 75c86e35 wininet!InternetCloseHandle+0x85
02fef750 75c86e6b urlmon!CINet::TerminateRequest+0xa4
02fef75c 75cbaeac urlmon!CINetHttp::TerminateRequest+0xb
02fef788 75c7714d urlmon!CTransaction::UnlockRequest+0x19a
02fef79c 75c771e4 urlmon!CTransData::~CTransData+0x51
02fef7b8 75c74a76 urlmon!CBinding::~CBinding+0x33b
02fef7ec 75c746d8 urlmon!CUrlMon::StartBinding+0x221
02fef81c 75ca0663 urlmon!CUrlMon::BindToStorage+0x8e
02fef864 75ca0d84 urlmon!CBaseBSCB::KickOffDownload+0x93
02fefa94 65f327e5 urlmon!URLDownloadToCacheFileW+0x84
02fefef0 65f30579 arctrl!CStatisticImpl::InternalDownloadFile+0xa5
02feff4c 65f80870 arctrl!CStatisticImpl::DownloadThreadProc+0x139
02feff88 7591343d arctrl!thread_start<unsigned int (__stdcall*)(void *)>+0x57
02feff94 77639812 kernel32!BaseThreadInitThunk+0xe
02feffd4 776397e5 ntdll!__RtlUserThreadStart+0x70
02feffec 00000000 ntdll!_RtlUserThreadStart+0x1b