IIS application pool stopped automatically after OS update. Following are the the logs and dmp info. Can anyone help me? I dont know how to upload the .dmp file captured by debug tool.
A process serving application pool 'X' suffered a fatal communication error with the Windows Process Activation Service. The process id was '6032'. The data field contains the error number.
Application pool 'X' is being automatically disabled due to a series of failures in the process(es) serving that application pool.
Faulting application name: w3wp.exe, version: 8.5.9600.16384, time stamp: 0x5215df96 Faulting module name: ntdll.dll, version: 6.3.9600.18969, time stamp: 0x5aa29ff0 Exception code: 0xc0000374 Fault offset: 0x00000000000f1cd0 Faulting process id: 0x1790 Faulting application start time: 0x01d5582ce8c71158 Faulting application path: c:\windows\system32\inetsrv\w3wp.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 37cba79f-c420-11e9-80c0-005056a20c4a Faulting package full name: Faulting package-relative application ID:
Fault bucket , type 0 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: w3wp.exe P2: 8.5.9600.16384 P3: 5215df96 P4: StackHash_5652 P5: 6.3.9600.18969 P6: 5aa29ff0 P7: c0000374 P8: PCH_DF_FROM_ntdll+0x0000000000090D0A P9: P10: Attached files: C:\Users\X\AppData\Local\Temp\WER19A0.tmp.appcompat.txt C:\Users\X\AppData\Local\Temp\WER1A8B.tmp.WERInternalMetadata.xml C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_fea05b168f317bf2214b71da70d1eba7330a09_9e3fd63b_cab_1a2c1a99\memory.hdmp C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_fea05b168f317bf2214b71da70d1eba7330a09_9e3fd63b_cab_1a2c1a99\minidump.mdmp These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_fea05b168f317bf2214b71da70d1eba7330a09_9e3fd63b_cab_1a2c1a99 Analysis symbol: Rechecking for solution: 0 Report Id: 37cba79f-c420-11e9-80c0-005056a20c4a Report Status: 4 Hashed bucket:
In w3wp__LAWAdmin__PID__12492__Date__08_21_2019__Time_09_13_09PM__683__Second_Chance_Exception_C0000374.dmp the assembly instruction at ntdll!RtlReportCriticalFailure+8c in C:\Windows\System32\ntdll.dll from Microsoft Corporation has caused a corrupted heap exception (0xC0000374) when trying to perform an unknown operation on memory location 0x00000000 on thread 29 Heap corruption was detected in w3wp__LAWAdmin__PID__12492__Date__08_21_2019__Time_09_13_09PM__683__Second_Chance_Exception_C0000374.dmp However pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues. Current NTGlobalFlags value: 0x0 An exception thrown by a heap memory manager function indicates heap corruption. Please click the 'PageHeap Flags...' button in the DebugDiag crash rule configuration dialog to enable PageHeap for the target process and collect another dump. For more information, review the following documents: How to Use the Debug Diagnostic Tool v1.1 (DebugDiag) to Debug User Mode Processes Debugging Heap corruption with Application Verifier and Debugdiag
Report for w3wp__LAWAdmin__PID__12492__Date__08_21_2019__Time_09_13_09PM__683__Second_Chance_Exception_C0000374.dmp
Type of Analysis Performed Crash Analysis
Machine Name SVWCNSHPDAPWS01
Operating System Windows Server 2012
Number Of Processors 4
Process ID 12492
Process Image c:\Windows\System32\inetsrv\w3wp.exe
Command Line c:\windows\system32\inetsrv\w3wp.exe -ap "LAWAdmin" -v "v2.0" -l "webengine4.dll" -a \\.\pipe\iisipm7346f5b6-bf47-4ff6-afd7-74e3c8f73aed -h "C:\inetpub\temp\apppools\LAWAdmin\LAWAdmin.config" -w "" -m 0 -t 20 -ta 0
System Up-Time 02:13:59
Process Up-Time 00:00:34
Processor Type X64
Process Bitness 64-Bit
Faulting Thread
Entry point mscorwks!Thread::intermediateThreadProc
Create time 8/21/2019 9:12:58 PM
Time spent in user mode 0 Days 0:0:4.125
Time spent in kernel mode 0 Days 0:0:0.109
.NET Call Stack
[[PrestubMethodFrame] (System.Linq.Enumerable.Int32, mscorlib]])] System.Linq.Enumerable.Single[[System.Int32, mscorlib]](System.Collections.Generic.IEnumerable`1)
[[CustomGCFrame]]
[[GCFrame]]
[[GCFrame]]
[[HelperMethodFrame_1OBJ] (System.RuntimeMethodHandle._InvokeMethodFast)] System.RuntimeMethodHandle._InvokeMethodFast(System.Object, System.Object[], System.SignatureStructByRef, System.Reflection.MethodAttributes, System.RuntimeTypeHandle)
System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo, Boolean)
System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)
System.Reflection.MethodBase.Invoke(System.Object, System.Object[])
System.Data.Linq.SqlClient.SqlProvider.Execute(System.Linq.Expressions.Expression, QueryInfo, System.Data.Linq.SqlClient.IObjectReaderFactory, System.Object[], System.Object[], System.Data.Linq.SqlClient.ICompiledSubQuery[], System.Object)
System.Data.Linq.SqlClient.SqlProvider.ExecuteAll(System.Linq.Expressions.Expression, QueryInfo[], System.Data.Linq.SqlClient.IObjectReaderFactory, System.Object[], System.Data.Linq.SqlClient.ICompiledSubQuery[])
System.Data.Linq.SqlClient.SqlProvider.System.Data.Linq.Provider.IProvider.Execute(System.Linq.Expressions.Expression)
System.Data.Linq.DataQuery`1[[System.__Canon, mscorlib]].System.Linq.IQueryProvider.Execute[[System.Int32, mscorlib]](System.Linq.Expressions.Expression)
System.Linq.Queryable.Count[[System.__Canon, mscorlib]](System.Linq.IQueryable`1)
LAWAdminSite.Operation.Points.ddlStudent_SelectedIndexChanged(System.Object, System.EventArgs)
LAWAdminSite.Operation.Points.btnSearch_Click(System.Object, System.EventArgs)
System.Web.UI.WebControls.Button.OnClick(System.EventArgs)
System.Web.UI.WebControls.Button.RaisePostBackEvent(System.String)
System.Web.UI.Page.RaisePostBackEvent(System.Web.UI.IPostBackEventHandler, System.String)
System.Web.UI.Page.ProcessRequestMain(Boolean, Boolean)
System.Web.UI.Page.ProcessRequest(Boolean, Boolean)
System.Web.UI.Page.ProcessRequest()
System.Web.UI.Page.ProcessRequest(System.Web.HttpContext)
ASP.operation_points_aspx.ProcessRequest(System.Web.HttpContext)
System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
System.Web.HttpApplication.ExecuteStep(IExecutionStep, Boolean ByRef)
System.Web.HttpApplication+PipelineStepManager.ResumeSteps(System.Exception)
System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, System.AsyncCallback)
System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
DomainNeutralILStubClass.IL_STUB(Int64, Int64, Int64, Int32)
DomainNeutralILStubClass.IL_STUB(IntPtr, System.Web.RequestNotificationStatus ByRef)
[[NDirectMethodFrameStandalone] (System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion)] System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatusByRef)
System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
DomainNeutralILStubClass.IL_STUB(Int64, Int64, Int64, Int32)
[[ContextTransitionFrame]]
Full Call Stack
Arg 1
Arg 2
Arg 3
Arg 4
Source
ntdll!RtlReportCriticalFailure+8c 00000e5`e2e70790 0007ffb`df1ced40 00000e5`e1510000 0007ffb`9ff73c1b
ntdll!RtlpHeapHandleError+12 00000e5`e1510000 0000000`00000000 0000000`00000000 0000000`00000000
ntdll!RtlpLogHeapFailure+a4 00000e5`e1e35c50 0000000`00000000 00000e5`e1e35c40 00000e5`e1fd4ed8
ntdll!RtlFreeHeap+74f2f 0000000`00000000 00000e5`e2e70790 fffffff`00000000 0007ffb`40f30020
combase!CoTaskMemFree+3f [d:\blue\com\combase\class\memapi.cxx @ 475] 00000e5`e1fda6c0 00000e7`28254ea0 0000000`00000000 00000e5`e2e70790 d:\blue\com\combase\class\memapi.cxx @ 475
mscorwks!DebuggerMethodInfo::SetInstrumentedILMap+20 0000000`00000000 00000e7`28fdbd40 0007ffb`40f30020 0007ffb`a0015c2d
mscorwks!Debugger::SetILInstrumentedCodeMap+a1 0000000`00000000 0000000`0600058d 0007ffb`40f30020 0007ffb`a0548e09
mscorwks!ProfToEEInterfaceImpl::SetILInstrumentedCodeMap+5d 00000e5`e1e0b320 0007ffb`a0bab820 000cdd8`7bc7ca64 00000e7`28fdbd28
mscordbc!CorProfInfo::SetILInstrumentedCodeMap+2b 00000e5`e1e0b320 00000e5`e1e0b320 00000e7`282592b0 00000e5`e1e14560
MicrosoftInstrumentationEngine_x64!DllRegisterServer+1dec0 00000e5`00000188 00000e7`28254ea0 0007ffb`a06b7ba0 00000e5`e1e0b320
MicrosoftInstrumentationEngine_x64!DllRegisterServer+842d 00000e7`28fdbe40 0000000`00000001 0000000`00000000 00000e7`28254ea0
mscordbc!EEToProfInterfaceImpl::JITCompilationStarted+d3 00000e7`2b4da360 0000000`00000000 0000000`00000000 0000000`00000000
mscorwks!MethodDesc::MakeJitWorker+2e8171 0007ffb`4153a410 0000002`00000000 00000e7`00000000 0000000`00000000
mscorwks!MethodDesc::DoPrestub+57c 0000000`00000000 00000e5`e1e87040 00000e7`00000000 0007ffb`4153a410
mscorwks!PreStubWorker+1fa 0000000`00000000 00000e7`28fdc3d0 00000e7`28fdc248 00000e7`2661d460
mscorwks!ThePreStubAMD64+87 00000e6`24774d58 0000000`00000001 0000000`00000000 0007ffb`00000000
mscorwks!CallDescrWorker+82 00000e7`28fdc340 0000000`00000006 00000e7`28fdc538 0000000`00000000
mscorwks!CallDescrWorkerWithHandler+d3 00000e7`28fdc3c8 0000000`00000000 00000e7`28fdc5c8 0000000`00000008
mscorwks!MethodDesc::CallDescr+2b1 0007ffb`40c39698 00000e6`24774d58 0007ffb`40c39698 0007ffb`40c39698
mscorwks!InvokeImpl+40a 0005826`34366b74 0007ffb`9fe02390 00000e6`24775090 00000e7`2661d460
mscorwks!RuntimeMethodHandle::InvokeMethodFast+131 0000000`00000096 0000000`00000000 00000e6`24775460 00000e7`28fdcb88
System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo, Boolean) 00000e6`24774f08 0007ffb`41497f60 00000e6`24774f28 0007ffb`414dcef8
System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo) 00000e6`24774d58 00000e6`24773b40 00000e6`24774680 00000e6`24774798
System.Reflection.MethodBase.Invoke(System.Object, System.Object[]) 00000e6`6443b980 00000e6`24774d70 00000e6`24774d98 0007ffb`40747080
System.Data.Linq.SqlClient.SqlProvider.Execute(System.Linq.Expressions.Expression, QueryInfo, System.Data.Linq.SqlClient.IObjectReaderFactory, System.Object[], System.Object[], System.Data.Linq.SqlClient.ICompiledSubQuery[], System.Object) 00000e6`63d8dab8 0007ffb`409b702a 00000e6`24770fa0 00000e6`23cfa180
System.Data.Linq.SqlClient.SqlProvider.ExecuteAll(System.Linq.Expressions.Expression, QueryInfo[], System.Data.Linq.SqlClient.IObjectReaderFactory, System.Object[], System.Data.Linq.SqlClient.ICompiledSubQuery[]) 00000e6`63d8dab8 00000e6`24760f78 00000e6`2475cdf0 00000e6`2474b6c8
System.Data.Linq.SqlClient.SqlProvider.System.Data.Linq.Provider.IProvider.Execute(System.Linq.Expressions.Expression) 00000e6`63d8dab8 00000e6`2475cdb8 0007ffb`407546d8 00000e7`28fdccb0
System.Data.Linq.DataQuery`1[[System.__Canon, mscorlib]].System.Linq.IQueryProvider.Execute[[System.Int32, mscorlib]](System.Linq.Expressions.Expression) 00000e6`2474ae38 0007ffb`413b8fc8 00000e6`2474b6c8 00000e7`28fdccb0
System.Linq.Queryable.Count[[System.__Canon, mscorlib]](System.Linq.IQueryable`1<System.__Canon>) 0007ffb`413b3b18 00000e6`2474ae38 00000e6`2474ae00 0007ffb`413b6f38
LAWAdminSite.Operation.Points.ddlStudent_SelectedIndexChanged(System.Object, System.EventArgs) 00000e6`23d66560 00000e6`642f6fa0 00000e5`e3d4fb18 0000000`00000000
LAWAdminSite.Operation.Points.btnSearch_Click(System.Object, System.EventArgs) 00000e6`23d66560 00000e6`642f77e0 00000e5`e3d4fb18 0000000`0000000c
System.Web.UI.WebControls.Button.OnClick(System.EventArgs) 00000e6`642f77e0 00000e5`e3d4fb18 00000e6`63c90628 0000000`0000000c
System.Web.UI.WebControls.Button.RaisePostBackEvent(System.String) 00000e6`642f77e0 0000000`00000000 0007ffb`4114fc18 0007ffb`40753c88
System.Web.UI.Page.RaisePostBackEvent(System.Web.UI.IPostBackEventHandler, System.String) 00000e6`23d66560 00000e6`642f77e0 0000000`00000000 0007ffb`40e41dd8
System.Web.UI.Page.ProcessRequestMain(Boolean, Boolean) 00000e6`23d66560 0000000`00000001 0000000`00000001 0007ffb`40747080
System.Web.UI.Page.ProcessRequest(Boolean, Boolean) 00000e6`23d66560 00000e5`e3c93301 00000e7`28fdde01 00000e7`28fddfb0
System.Web.UI.Page.ProcessRequest() 00000e6`23d66560 00000e6`642b88a8 00000e6`642b8a00 00000e6`642b89b0
System.Web.UI.Page.ProcessRequest(System.Web.HttpContext) 00000e6`23d66560 00000e6`23cf13a8 0007ffb`40a2bc70 0005826`34366b74
ASP.operation_points_aspx.ProcessRequest(System.Web.HttpContext) 00000e6`23d66560 00000e6`23cf13a8 0007ffb`40a2bc70 0005826`34366b74
System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() 00000e6`23cfa348 8d72639`4a3e6680 00000e7`28fde339 0000000`00000000
System.Web.HttpApplication.ExecuteStep(IExecutionStep, Boolean ByRef) 00000e6`23cf4680 00000e6`23cfa348 00000e7`28fde339 00000e6`23cf4680
System.Web.HttpApplication+PipelineStepManager.ResumeSteps(System.Exception) 00000e6`23cfa180 0007ffb`40d940d9 00000e6`a3c95618 0007ffb`40d93f0b
System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, System.AsyncCallback) 0000000`00000000 00000e6`23cf1108 00000e7`28fde4b0 00000e6`23cf13a8
System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext) 00000e6`a3c95618 00000e6`23cf1108 00000e6`23cf13a8 00000e7`28fde5c0
System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32) 00000e5`e1e90ac4 00000e5`e1e90638 00000e7`28fde720 0000100`00000040
System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32) 0006cc8`8ba7e7b7 0000000`00000000 0000000`00000000 0007ffb`a08b4d3b
DomainNeutralILStubClass.IL_STUB(Int64, Int64, Int64, Int32) 0000000`00000003 0007ffb`a08b525c 0000000`00000000 0007ffb`c34c36b8
mscorwks!UMThunkStubAMD64+7a 00000e5`e1e90638 0000000`00000080 00000e5`e1fd80fc 0007ffb`c34c37d8
webengine!W3_MGD_HANDLER::ProcessNotification+107 00000e5`00000000 00000e5`e1e90638 00000e5`e2d3bcb8 0007ffb`c34c37d8
webengine!W3_MGD_HANDLER::DoWork+312 00000e5`e1e8ef70 00000e5`e2010ab8 0000000`00000000 0007ffb`a0fa9980
webengine!RequestDoWork+44e 0000000`00000000 00000e5`e1e8ef70 0007fc9`c20acbc5 0000000`00000000
webengine!CMgdEngHttpModule::OnExecuteRequestHandler+24 0007ffb`a0fac854 00000e5`e1bccc90 0000000`00000000 0000000`00000000
iiscore!NOTIFICATION_CONTEXT::RequestDoWork+b8 00000e5`e1bccc90 00000e7`28fdeae1 00000e5`e1e8ef80 00000e5`e1e91308
iiscore!NOTIFICATION_CONTEXT::CallModulesInternal+1aa 00000e5`e1e8ef70 0000000`00000000 00000e5`e1bccc90 00000e5`e2027ae0
iiscore!NOTIFICATION_CONTEXT::CallModules+36 0000000`00000000 00000e5`e1bccc90 0000000`00000000 0000000`00000000
iiscore!NOTIFICATION_MAIN::DoWork+541 00000e5`e1e8ef70 0000000`00000000 0000000`00000000 00000e5`e1bccc90
iiscore!W3_CONTEXT_BASE::IndicateCompletion+d4 00000e7`2661d460 00000e5`e1e90638 00000e7`28fdef90 00000e7`28fdf010
webengine!MgdIndicateCompletion+61 0000000`00000000 00000e7`2661d460 00000e7`28fdf1e8 00000e7`28fdf030
mscorwks!DoNDirectCall__PatchGetThreadCall+7b 00000e7`28fdf110 0007ffb`40a2ba78 00000e6`23cf13a8 0000000`00000000
DomainNeutralILStubClass.IL_STUB(IntPtr, System.Web.RequestNotificationStatus ByRef) 00000e5`e1e90638 00000e7`28fdf1e8 0007ffb`40a2c9c0 0005826`34366b74
System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32) 0000000`00000000 00000e5`e1e90638 0000000`0000000b 0000000`00000004
System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32) 0000000`00000000 00000e5`e1e90638 0000000`0000000b 0000000`00000004
DomainNeutralILStubClass.IL_STUB(Int64, Int64, Int64, Int32) 00000e7`26391800 0000000`00000000 00000e7`2661d460 0007ffb`9ff7550e
mscorwks!UM2MThunk_WrapperHelper+4b 0000000`00000000 0007ffb`9ff73c9e 0000000`00000000 0000000`00000001
mscorwks!UM2MThunk_WrapperWorker+99 00000e7`2661d460 00000e7`2661d460 00000e7`00000000 00000e7`00000000
mscorwks!UM2MThunk_Wrapper+19 00000e7`26391820 00000e7`28fdf610 00000e5`e1fd8000 00000e5`e1fd80d0
mscorwks!Thread::DoADCallBack+145 0000100`00000040 0000100`00000000 0000001`00000000 00000e5`e1fd80d0
mscorwks!UM2MDoADCallBack+90 0000000`00000000 00000e7`2661d460 fffffff`00000000 0007ffb`a08b1200
mscorwks!UMThunkStubAMD64+276 0000000`00000000 00000e5`e1e90638 0000000`0000000b 0000000`00000004
webengine!W3_MGD_HANDLER::ProcessNotification+107 00000e5`00000004 00000e5`e1e90638 0000000`00000001 0007ffb`a08b1200
webengine!ProcessNotificationCallback+46 00000e5`e1e90638 0007ffb`9ff4e316 00000e5`e1e90638 0007ffb`a08b1200
mscorwks!UnManagedPerAppDomainTPCount::DispatchWorkItem+157 0000000`00000002 00000e7`2661d460 0000000`00000002 00000e7`2661d460
mscorwks!ThreadpoolMgr::WorkerThreadStart+1ba 0000000`00000000 0000000`00000000 00000e7`28fdfa60 00000e5`e2e8d110
mscorwks!Thread::intermediateThreadProc+78 0000000`00000000 0000000`00000000 0000000`00000000 0000000`00000000
kernel32!BaseThreadInitThunk+22 0007ffb`dca813d0 0000000`00000000 0000000`00000000 0000000`00000000
ntdll!RtlUserThreadStart+34 0000000`00000000 0000000`00000000 0000000`00000000 0000000`00000000
CLR Information
CLR version = 2.0.50727.8806
Microsoft.Diagnostics.Runtime version = 0.9.2.0
Exception Information
NTDLL!RTLREPORTCRITICALFAILURE+8CIn w3wp__LAWAdmin__PID__12492__Date__08_21_2019__Time_09_13_09PM__683__Second_Chance_Exception_C0000374.dmp the assembly instruction at ntdll!RtlReportCriticalFailure+8c in C:\Windows\System32\ntdll.dll from Microsoft Corporation has caused a corrupted heap exception (0xC0000374) when trying to perform an unknown operation on memory location 0x00000000 on thread 29
Heap corruption was detected in w3wp__LAWAdmin__PID__12492__Date__08_21_2019__Time_09_13_09PM__683__Second_Chance_Exception_C0000374.dmp
However pageheap was not enabled in this dump. Please follow the instructions in the recommendation section for troubleshooting heap corruption issues.
Current NTGlobalFlags value: 0x0
Module Information
Image Name: C:\Windows\System32\ntdll.dll Symbol Type: PDB
Base address: 0x00000003`00905a4d Time Stamp: Wed Mar 6 14:27:27 2019
Checksum: 0x00000000`00000000 Comments:
COM DLL: False Company Name: Microsoft Corporation
ISAPIExtension: False File Description: NT Layer DLL
ISAPIFilter: False File Version: 6.3.9600.19304 (winblue_ltsb_escrow.190305-1818)
Managed DLL: False Internal Name: ntdll.dll
VB DLL: False Legal Copyright: ? Microsoft Corporation. All rights reserved.
Loaded Image Name: ntdll.dll Legal Trademarks:
Mapped Image Name: Original filename: ntdll.dll
Module name: ntdll Private Build:
Single Threaded: False Product Name: Microsoft? Windows? Operating System
Module Size: 1.68 MBytes Product Version: 6.3.9600.19304
Symbol File Name: c:\symbols\ntdll.pdb\0A8BEB549D6C40CA8AB4B49C3195BDA01\ntdll.pdb Special Build: &