Crash in cfgrelay, Analyzed 6 dumps, total processed 235, rate equals 2.55%

Top 1: Version = 2.7224.1000.620, Total count = 6

dump count = 2

ChildEBP RetAddr  
035ef870 743717e9 uxtheme!CInternalNonclientMetrics::Acquire+0x1b
035ef880 74370f78 uxtheme!NcGetCaptionFont+0x2e
035ef96c 7437295c uxtheme!CThemeWnd::GetNcWindowMetrics+0x2d8
035efa18 74372a0f uxtheme!_WindowPosChangedWorker+0x7c
035efa24 7436f565 uxtheme!OnOwpPostWindowPosChanged+0x1f
035efa74 75625ea3 uxtheme!ThemePostWndProc+0x355
035efb5c 75625a7a user32!UserCallWinProcCheckWow+0x363
035efbc0 7562ce97 user32!DispatchClientMessage+0xea
035efc00 76f54e9d user32!__fnINLPWINDOWPOS+0x37
035efc50 7438d4af ntdll!KiUserCallbackDispatcher+0x4d
035efc7c 7437010f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
035efcd8 75625e4f uxtheme!ThemePreWndProc+0x43f
035efdc0 75623bea user32!UserCallWinProcCheckWow+0x30f
035efe34 756239b0 user32!DispatchMessageWorker+0x22a
035efe40 7a8b9881 user32!DispatchMessageW+0x10
035efe64 7a8b964b CfgRelay!WTL::CMessageLoop::Run+0xc1
035efec0 7a8e2e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
035efecc 7a928cc3 CfgRelay!CThread::ThreadProc+0x1f
035eff08 75ebfa29 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
035eff18 76f47a9e kernel32!BaseThreadInitThunk+0x19
035eff74 76f47a6e ntdll!__RtlUserThreadStart+0x2f
035eff84 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
066ee1c4 76280f79 KERNELBASE!FindCodePageHashNode+0x27
066ee1f0 7628141e KERNELBASE!GetCPHashNode+0x97
066ee1fc 762817d8 KERNELBASE!NlsGetACPFromLocale+0x47
066ee430 754ce764 KERNELBASE!CompareStringA+0x45
066ee46c 754ce634 wininet!CompareStringNA+0x5b
066ee4dc 754ce029 wininet!HTTP_REQUEST_HANDLE_OBJECT::LocalEndCacheWrite+0x27a
066ee514 754c9562 wininet!HTTP_REQUEST_HANDLE_OBJECT::HttpReadData_Fsm+0x448
066ee52c 754c951f wininet!CFsm_HttpReadData::RunSM+0x2a
066ee580 754c2268 wininet!CFsm::Run+0x3b9
066ee5a8 7556352f wininet!DoFsm+0x60
066ee5c0 7554c698 wininet!HttpReadData+0xc0
066ee5e8 754cb370 wininet!QueryAvailable_Fsm+0x80
066ee5fc 754c1d01 wininet!CFsm_QueryAvailable::RunSM+0x28
066ee650 754c2268 wininet!CFsm::Run+0x161
066ee678 7554568b wininet!DoFsm+0x60
066ee700 75fb6fea wininet!InternetQueryDataAvailable+0x2d9
066ee930 75fb6343 urlmon!CINet::INetDataAvailable+0x87
066ee948 75ff2ba8 urlmon!CINet::INetRead+0x4c
066ee960 75fb5774 urlmon!CINet::INetQueryInfo+0x90
066ee978 75fb56f7 urlmon!CINet::OnINetInternal+0xd3
066ee98c 75fb59e7 urlmon!CINet::Continue+0x17
066ee9a4 75fb59ab urlmon!COInetProt::Continue+0x27
066ee9dc 75fa1589 urlmon!CTransaction::OnINetCallback+0x202
066ee9f8 770b62fa urlmon!TransactionWndProc+0x29
066eea24 770b6d3a user32!InternalCallWinProc+0x23
066eea9c 770b77c4 user32!UserCallWinProcCheckWow+0x109
066eeafc 770b7bca user32!DispatchMessageWorker+0x3b5
066eeb0c 75fcf13f user32!DispatchMessageA+0xf
066eeb48 75fcf244 urlmon!CTransaction::CompleteOperation+0x9d
066ef000 75ff28eb urlmon!CTransaction::StartEx+0x1c8a
066ef084 75fa2adc urlmon!CBinding::StartBinding+0x921
066ef0d0 75fa28e7 urlmon!CUrlMon::StartBinding+0x1a6
066ef100 75fcf2f3 urlmon!CUrlMon::BindToStorage+0x8e
066ef148 75fcfa14 urlmon!CBaseBSCB::KickOffDownload+0x93
066ef378 53f90855 urlmon!URLDownloadToCacheFileW+0x84
066ef7d4 53f8e5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
066ef830 53fc8cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
066ef86c 762c343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
066ef878 776d9802 kernel32!BaseThreadInitThunk+0xe
066ef8b8 776d97d5 ntdll!__RtlUserThreadStart+0x70
066ef8d0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
08cdf128 7756e0c3 ntdll!RtlpLowFragHeapFree+0x31
08cdf140 756814ad ntdll!RtlFreeHeap+0x105
08cdf154 76de5465 kernel32!HeapFree+0x14
08cdf168 76db37f5 wininet!WxHeapFree<unsigned __int64>+0x1e
08cdf20c 76db44cc wininet!GetUrlCacheEntryInfoExW+0x414
08cdf4b4 751947e3 wininet!InternetUnlockRequestFile+0x12a
08cdf4c0 751cae2a urlmon!CINet::UnlockFile+0x23
08cdf4ec 7518623c urlmon!CTransaction::UnlockRequest+0x1b1
08cdf500 751862d3 urlmon!CTransData::~CTransData+0x51
08cdf51c 75182461 urlmon!CBinding::~CBinding+0x33b
08cdf550 751821d7 urlmon!CUrlMon::StartBinding+0x221
08cdf580 75198193 urlmon!CUrlMon::BindToStorage+0x8e
08cdf5c8 751988b4 urlmon!CBaseBSCB::KickOffDownload+0x93
08cdf7f8 6a5f0855 urlmon!URLDownloadToCacheFileW+0x84
08cdfc54 6a5ee5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
08cdfcb0 6a628cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
08cdfcec 7568343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
08cdfcf8 77579802 kernel32!BaseThreadInitThunk+0xe
08cdfd38 775797d5 ntdll!__RtlUserThreadStart+0x70
08cdfd50 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
027cfbb0 509bcd02 CfgRelay!CMainWnd::SetMsgHandled
027cfbc8 509ba212 CfgRelay!CMainWnd::_ProcessWindowMessage+0xa2
027cfbf4 509bc327 CfgRelay!CMainWnd::ProcessWindowMessage+0x32
027cfc50 7603c267 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
027cfc7c 7603c367 user32!InternalCallWinProc+0x23
027cfcf4 7603c999 user32!UserCallWinProcCheckWow+0x14b
027cfd54 7603c9f0 user32!DispatchMessageWorker+0x357
027cfd64 50999881 user32!DispatchMessageW+0xf
027cfd88 5099964b CfgRelay!WTL::CMessageLoop::Run+0xc1
027cfde4 509c2e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
027cfdf0 50a08cc3 CfgRelay!CThread::ThreadProc+0x1f
027cfe2c 75f2ef3c CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
027cfe38 778f3618 kernel32!BaseThreadInitThunk+0xe
027cfe78 778f35eb ntdll!__RtlUserThreadStart+0x70
027cfe90 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
035df658 0f2738f2 CfgRelay!Get360NewMIDW_Lds
035df65c 0f2f7330 CfgRelay!Utils::GetM2+0x22
035dfb60 0f26bc6e CfgRelay!g_szMID2
035dfbdc 0f269b52 CfgRelay!CMainWnd::StartUpdateSlowCfg+0x8e
035dfbec 0f26cd0e CfgRelay!CMainWnd::OnTimer+0xb2
035dfc04 0f26a212 CfgRelay!CMainWnd::_ProcessWindowMessage+0xae
035dfc30 0f26c327 CfgRelay!CMainWnd::ProcessWindowMessage+0x32
035dfc8c 75e3630a CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
035dfcb8 75e36d4a user32!InternalCallWinProc+0x23
035dfd30 75e377d7 user32!UserCallWinProcCheckWow+0x109
035dfd90 75e3789a user32!DispatchMessageWorker+0x3b5
035dfda0 0f249881 user32!DispatchMessageW+0xf
035dfdc4 0f24964b CfgRelay!WTL::CMessageLoop::Run+0xc1
035dfe20 0f272e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
035dfe2c 0f2b8cc3 CfgRelay!CThread::ThreadProc+0x1f
035dfe68 7537347d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
035dfe74 77c49762 kernel32!BaseThreadInitThunk+0xe
035dfeb4 77c49735 ntdll!__RtlUserThreadStart+0x70
035dfecc 00000000 ntdll!_RtlUserThreadStart+0x1b