Crash in cfgrelay, Analyzed 3 dumps, total processed 175, rate equals 1.71%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
08cdf128 7756e0c3 ntdll!RtlpLowFragHeapFree+0x31
08cdf140 756814ad ntdll!RtlFreeHeap+0x105
08cdf154 76de5465 kernel32!HeapFree+0x14
08cdf168 76db37f5 wininet!WxHeapFree<unsigned __int64>+0x1e
08cdf20c 76db44cc wininet!GetUrlCacheEntryInfoExW+0x414
08cdf4b4 751947e3 wininet!InternetUnlockRequestFile+0x12a
08cdf4c0 751cae2a urlmon!CINet::UnlockFile+0x23
08cdf4ec 7518623c urlmon!CTransaction::UnlockRequest+0x1b1
08cdf500 751862d3 urlmon!CTransData::~CTransData+0x51
08cdf51c 75182461 urlmon!CBinding::~CBinding+0x33b
08cdf550 751821d7 urlmon!CUrlMon::StartBinding+0x221
08cdf580 75198193 urlmon!CUrlMon::BindToStorage+0x8e
08cdf5c8 751988b4 urlmon!CBaseBSCB::KickOffDownload+0x93
08cdf7f8 6a5f0855 urlmon!URLDownloadToCacheFileW+0x84
08cdfc54 6a5ee5e9 CfgRelay!CStatisticImpl::InternalDownloadFile+0xa5
08cdfcb0 6a628cc3 CfgRelay!CStatisticImpl::DownloadThreadProc+0x139
08cdfcec 7568343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
08cdfcf8 77579802 kernel32!BaseThreadInitThunk+0xe
08cdfd38 775797d5 ntdll!__RtlUserThreadStart+0x70
08cdfd50 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

03b3fb84 74f96238 CfgRelay!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x67
03b3fbb0 74f968ea user32+0x16238
03b3fc28 74f97d31 user32+0x168ea
03b3fc88 74f97dfa user32+0x17d31
03b3fc98 5c2a9881 user32+0x17dfa
03b3fcbc 5c2a964b CfgRelay!WTL::CMessageLoop::Run+0xc1
03b3fd18 5c2d2e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
03b3fd24 5c318cc3 CfgRelay!CThread::ThreadProc+0x1f
03b3fd60 7532343d CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03b3fd6c 778f9732 kernel32!BaseThreadInitThunk+0xe
03b3fdac 778f9705 ntdll!__RtlUserThreadStart+0x70
03b3fdc4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0385f148 6fd91889 uxtheme!CInternalNonclientMetrics::Acquire+0x1b
0385f158 6fd91018 uxtheme!NcGetCaptionFont+0x2e
0385f244 6fd929fc uxtheme!CThemeWnd::GetNcWindowMetrics+0x2d8
0385f2f0 6fd92aaf uxtheme!_WindowPosChangedWorker+0x7c
0385f2fc 6fd8f615 uxtheme!OnOwpPostWindowPosChanged+0x1f
0385f34c 75e18193 uxtheme!ThemePostWndProc+0x355
0385f434 75e17d5a user32!UserCallWinProcCheckWow+0x363
0385f498 75e1f187 user32!DispatchClientMessage+0xea
0385f4d8 770c508d user32!__fnINLPWINDOWPOS+0x37
0385f528 7681124c ntdll!KiUserCallbackDispatcher+0x4d
0385f52c 6fdad7df win32u!NtUserSetWindowPos+0xc
0385f558 6fd901af uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0385f5b4 75e1813f uxtheme!ThemePreWndProc+0x43f
0385f69c 75e15eca user32!UserCallWinProcCheckWow+0x30f
0385f710 75e15c90 user32!DispatchMessageWorker+0x22a
0385f71c 7c139881 user32!DispatchMessageW+0x10
0385f740 7c13964b CfgRelay!WTL::CMessageLoop::Run+0xc1
0385f79c 7c162e5f CfgRelay!CConfigCenterTrayClient::Process+0x8b
0385f7a8 7c1a8cc3 CfgRelay!CThread::ThreadProc+0x1f
0385f7e4 769afcc9 CfgRelay!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0385f7f4 770b7c6e kernel32!BaseThreadInitThunk+0x19
0385f850 770b7c3e ntdll!__RtlUserThreadStart+0x2f
0385f860 00000000 ntdll!_RtlUserThreadStart+0x1b