Crash in cfgrelay, Analyzed 2 dumps, total processed 192, rate equals 1.04%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0800e7e0 76f1e0f3 ntdll!RtlpLowFragHeapFree+0x31
0800e7f8 75a014ad ntdll!RtlFreeHeap+0x105
0800e80c 76665ca1 kernel32!HeapFree+0x14
0800e820 765e52c1 wininet!WxHeapFree<unsigned __int64>+0x1e
0800e860 765e66c6 wininet!UrlCacheCommitFile+0x133
0800e8dc 765e6504 wininet!INTERNET_CONNECT_HANDLE_OBJECT::EndCacheWrite+0x164
0800e96c 765e6315 wininet!HTTP_REQUEST_HANDLE_OBJECT::LocalEndCacheWrite+0x1d6
0800e9a4 765e1632 wininet!HTTP_REQUEST_HANDLE_OBJECT::HttpReadData_Fsm+0x448
0800e9bc 765e15e7 wininet!CFsm_HttpReadData::RunSM+0x2a
0800ea10 765d94fb wininet!CFsm::Run+0x3b9
0800ea38 7666609f wininet!DoFsm+0x60
0800ea50 7664bb52 wininet!HttpReadData+0xc0
0800ea78 765e31a0 wininet!QueryAvailable_Fsm+0x80
0800ea8c 765d8fb1 wininet!CFsm_QueryAvailable::RunSM+0x28
0800eae0 765d94fb wininet!CFsm::Run+0x161
0800eb08 76644973 wininet!DoFsm+0x60
0800eb90 75ed8f9a wininet!InternetQueryDataAvailable+0x2d9
0800edc0 75ed727d urlmon!CINet::INetDataAvailable+0x87
0800edd8 75f11107 urlmon!CINet::INetRead+0x4c
0800edf0 75ed76c4 urlmon!CINet::INetQueryInfo+0x90
0800ee08 75ed7647 urlmon!CINet::OnINetInternal+0xd3
0800ee1c 75ed7937 urlmon!CINet::Continue+0x17
0800ee34 75ed78fb urlmon!COInetProt::Continue+0x27
0800ee6c 75ec3b09 urlmon!CTransaction::OnINetCallback+0x202
0800ee88 75d9630a urlmon!TransactionWndProc+0x29
0800eeb4 75d96d4a user32!InternalCallWinProc+0x23
0800ef2c 75d977d7 user32!UserCallWinProcCheckWow+0x109
0800ef8c 75d97bda user32!DispatchMessageWorker+0x3b5
0800ef9c 75ef04af user32!DispatchMessageA+0xf
0800efd8 75ef05b4 urlmon!CTransaction::CompleteOperation+0x9d
0800f490 75f10e4a urlmon!CTransaction::StartEx+0x16e3
0800f510 75ec49f7 urlmon!CBinding::StartBinding+0x921
0800f55c 75ec46d8 urlmon!CUrlMon::StartBinding+0x1a6
0800f58c 75ef0663 urlmon!CUrlMon::BindToStorage+0x8e
0800f5d4 75ef0d84 urlmon!CBaseBSCB::KickOffDownload+0x93
0800f804 0ffb0855 urlmon!URLDownloadToCacheFileW+0x84
0800fc60 0ffae5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
0800fcbc 0ffe8cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
0800fcf8 75a0343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0800fd04 76f29812 kernel32!BaseThreadInitThunk+0xe
0800fd44 76f297e5 ntdll!__RtlUserThreadStart+0x70
0800fd5c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

03b3fb84 74f96238 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
03b3fbb0 74f968ea user32+0x16238
03b3fc28 74f97d31 user32+0x168ea
03b3fc88 74f97dfa user32+0x17d31
03b3fc98 5c2a9881 user32+0x17dfa
03b3fcbc 5c2a964b CfgRelay!WTL::CMessageLoop::Run+0xc1
03b3fd18 5c2d2e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
03b3fd24 5c318cc3 CfgRelay!CThread::ThreadProc+0x1f
03b3fd60 7532343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03b3fd6c 778f9732 kernel32!BaseThreadInitThunk+0xe
03b3fdac 778f9705 ntdll!__RtlUserThreadStart+0x70
03b3fdc4 00000000 ntdll!_RtlUserThreadStart+0x1b