Is it happening an all client machines?
What's the operation system?
What if you temporarily disable Data Execution Prevention?
By the way, why your client is called Ax5.exe instead of normal Ax32.exe? Have you made any other changes to AX program files?
You can also generate a memory dump and analyze it's content - you should be able to extract the call stack and therefore you would know where it trashed.