Crash in cfgrelay, Analyzed 3 dumps, total processed 110, rate equals 2.73%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
02b1d598 73e27854 winhttp!FindUrlComponents+0x18
02b1d610 73e33a93 winhttp!PROXY_RESOLVE_HANDLE_OBJECT::SetResolverSettings+0x234
02b1d678 73e337b9 winhttp!GetProxyForUrlInternalEx+0x233
02b1d6d0 6f8bfed3 winhttp!WinHttpGetProxyForUrlEx2+0x1d9
02b1d744 6f8bfc3f wininet!CallWinHttpGetProxyForUrlEx+0x20c
02b1d7a0 6f8bf8bc wininet!WinHttpClientCompletion::StateStart+0xe3
02b1d808 6f8bf7c3 wininet!WinHttpClientCompletion::StateMachine+0xd5
02b1d824 6f898c7e wininet!WinHttpClientCompletion::OnProxyResolved+0x33
02b1d890 6f89baad wininet!WinHttpClientResolver::GetProxyForUrlImpl+0x25c
02b1d8dc 6f89b7d1 wininet!WxProxyManager::OnProcessGetProxyForUrl+0x12d
02b1d924 6f89bd18 wininet!WxProxyManager::GetProxyForUrlImpl+0x291
02b1d980 6f89a372 wininet!WxGetProxyForUrl+0x198
02b1da54 6f88db39 wininet!InternalInternetSyncGetProxyForUrlW+0x322
02b1db34 6f474e42 wininet!IsHostInProxyBypassList+0x529
02b1dd9c 6f471fdd urlmon!CSecurityManager::_MapComponentsToZone+0x572
02b1e31c 6f4772da urlmon!CSecurityManager::MapUrlToZoneEx2Internal+0x8bd
02b1e364 6f476af4 urlmon!CSecurityManager::GetZoneFromUriInternal+0x16a
02b1e3d4 6f479580 urlmon!CSecurityManager::MapUrlToZoneEx2Private+0x214
02b1e3f8 6f4a120e urlmon!CSecurityManager::MapUrlToZoneEx2+0x20
02b1e42c 6f4a10a6 urlmon!GetIDNFlagsForUri+0x4e
02b1e458 6f49f525 urlmon!CINetHttp::SetOptionsForUnicodeUrl+0x26
02b1eca0 6f49f21e urlmon!CINetHttp::INetAsyncOpenRequest+0x2d5
02b1eccc 6f49df0c urlmon!CINet::INetAsyncConnect+0x2ee
02b1ecf0 6f496643 urlmon!CINet::INetAsyncOpen+0x2c
02b1edb4 6f4981a2 urlmon!CINet::StartCommon+0x3f3
02b1edd8 6f46d593 urlmon!CINet::AddRef+0x22
02b1ee18 6f49738c urlmon!COInetProt::StartEx+0x1a3
02b1f2d0 6f477ff7 urlmon!LegacyTransaction::StartEx+0xb0c
02b1f3b4 6f4792ad urlmon!CBinding::StartBinding+0xc57
02b1f40c 6f47a6d3 urlmon!CUrlMon::StartBinding+0x18d
02b1f438 6f490fc5 urlmon!CUrlMon::BindToStorage+0x83
02b1f484 6f5244be urlmon!CBaseBSCB::KickOffDownload+0x95
02b1f6bc 583e0855 urlmon!URLDownloadToCacheFileW+0x8e
02b1fb18 583de5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
02b1fb74 58418cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
02b1fbb0 75e36359 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
02b1fbc0 77767c24 kernel32!BaseThreadInitThunk+0x19
02b1fc1c 77767bf4 ntdll!__RtlUserThreadStart+0x2f
02b1fc2c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
050cef10 7781e0c3 ntdll!RtlpLowFragHeapFree+0x31
050cef28 750914ad ntdll!RtlFreeHeap+0x105
050cef3c 76972d69 kernel32!HeapFree+0x14
050cef78 769685d4 wininet!INTERNET_CONNECT_HANDLE_OBJECT::~INTERNET_CONNECT_HANDLE_OBJECT+0x370
050cef9c 76967f7d wininet!HTTP_REQUEST_HANDLE_OBJECT::~HTTP_REQUEST_HANDLE_OBJECT+0x670
050cefa8 769632a6 wininet!HTTP_REQUEST_HANDLE_OBJECT::`scalar deleting destructor'+0xd
050cefc4 76962a10 wininet!HANDLE_OBJECT::Dereference+0xfff7e651
050cefd0 769631ba wininet!DereferenceObject+0x2c
050cf028 76962ec5 wininet!InternalInternetCloseHandle+0x2ee
050cf088 766bb495 wininet!InternetCloseHandle+0x85
050cf0a4 766bb4cb urlmon!CINet::TerminateRequest+0xa4
050cf0b0 766fc91e urlmon!CINetHttp::TerminateRequest+0xb
050cf0dc 766b32dc urlmon!CTransaction::UnlockRequest+0x19a
050cf0f0 766b05ed urlmon!CTransData::~CTransData+0x51
050cf10c 766af98b urlmon!CBinding::~CBinding+0x375
050cf140 766af717 urlmon!CUrlMon::StartBinding+0x221
050cf170 766dbd43 urlmon!CUrlMon::BindToStorage+0x8e
050cf1b8 766dc484 urlmon!CBaseBSCB::KickOffDownload+0x93
050cf3e8 70360855 urlmon!URLDownloadToCacheFileW+0x84
050cf844 7035e5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
050cf8a0 70398cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
050cf8dc 7509343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
050cf8e8 77829802 kernel32!BaseThreadInitThunk+0xe
050cf928 778297d5 ntdll!__RtlUserThreadStart+0x70
050cf940 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0386f83c 77031775 ntdll!NtWaitForMultipleObjects+0x15
0386f8d8 768b1a08 KERNELBASE!WaitForMultipleObjectsEx+0x100
0386f920 768b269c kernel32!WaitForMultipleObjectsExImplementation+0xe0
0386f93c 514c5dfb kernel32!WaitForMultipleObjects+0x18
0386f9a4 514c5c0f CfgRelay!CChannelImpl::ReceiveThreadImp+0x1db
0386f9ac 51508cc3 CfgRelay!CChannelImpl::ReceiveThread+0xf
0386f9e8 768b344d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0386f9f4 776f9802 kernel32!BaseThreadInitThunk+0xe
0386fa34 776f97d5 ntdll!__RtlUserThreadStart+0x70
0386fa4c 00000000 ntdll!_RtlUserThreadStart+0x1b