none
KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdbdf Exception code: 0xe0434f4d Fault offset: 0x0000b727

    Question

  • Hi all just am getting this error with KernelBase.dll, what's happening at my application end is that I am using .NET Framework to determine if network connectivity is available, raise an event from underlying dll to inform application when network connectivity is established, or network connectivity is unavailable. Nothing really special here just using standard stuff out of .Net framework here.  Have seen similar incidents with KERNELBASE.dll reported, but no one is really giving out any info on what exception 0xe0434f4d is a code for.  Knowing what the execption would be, would allow me to find a quick workaround to the problem. BizTalk seems to have similar issue with KERNELBASE.dll. 

    http://social.msdn.microsoft.com/Forums/en-US/biztalkgeneral/thread/4ff5bcdb-c9a0-43a1-971a-3360cdee0a62

    Additional info that may help is that I am running the .NET application on a Windows 7 machine with less than 100MB of storage space, well below the recommended minimum of 300mb, but am testing the .NET application through it's paces now. It should work if Windows 7 is working.

    Below is the extract taken from the Windows application log:-

    Faulting application name: INNOBATE Antivirus.exe, version: 1.0.0.11, time stamp: 0x4c9b2d79

    Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdbdf

    Exception code: 0xe0434f4d

    Fault offset: 0x0000b727

    Faulting process id: 0x27d4

    Faulting application start time: 0x01cb5b0ba112d3af

    Faulting application path: C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\INNOBATE Antivirus.exe

    Faulting module path: C:\Windows\syswow64\KERNELBASE.dll

    Report Id: 44a2d8f1-c6ff-11df-88ee-001d7d99d5fa

     

    Fault bucket 2039362628, type 1

    Event Name: APPCRASH

    Response: Not available

    Cab Id: 0

    Problem signature:

    P1: INNOBATE Antivirus.exe

    P2: 1.0.0.11

    P3: 4c9b2d79

    P4: KERNELBASE.dll

    P5: 6.1.7600.16385

    P6: 4a5bdbdf

    P7: e0434f4d

    P8: 0000b727

    P9:

    P10:

    Attached files:

    C:\Users\PCX\AppData\Local\Temp\WER564D.tmp.WERInternalMetadata.xml

    These files may be available here:

    C:\Users\PCX\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_INNOBATE Antivir_64c1975bd6fee9fd4d6050ca3ff88ae0134d5bfd_2ff3e37e

    Analysis symbol:

    Rechecking for solution: 0

    Report Id: 44a2d8f1-c6ff-11df-88ee-001d7d99d5fa

    Report Status: 1

    WER Report file Contents as found in C:\Users\PCX\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_INNOBATE Antivir_64c1975bd6fee9fd4d6050ca3ff88ae0134d5bfd_2ff3e37e given below:-

    Version=1
    EventType=APPCRASH
    EventTime=129297121686901563
    ReportType=2
    Consent=1
    UploadTime=129297121851256962
    ReportIdentifier=44a2d8f2-c6ff-11df-88ee-001d7d99d5fa
    IntegratorReportIdentifier=44a2d8f1-c6ff-11df-88ee-001d7d99d5fa
    WOW64=1
    Response.BucketId=2039362628
    Response.BucketTable=1
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=INNOBATE Antivirus.exe
    Sig[1].Name=Application Version
    Sig[1].Value=1.0.0.11
    Sig[2].Name=Application Timestamp
    Sig[2].Value=4c9b2d79
    Sig[3].Name=Fault Module Name
    Sig[3].Value=KERNELBASE.dll
    Sig[4].Name=Fault Module Version
    Sig[4].Value=6.1.7600.16385
    Sig[5].Name=Fault Module Timestamp
    Sig[5].Value=4a5bdbdf
    Sig[6].Name=Exception Code
    Sig[6].Value=e0434f4d
    Sig[7].Name=Exception Offset
    Sig[7].Value=0000b727
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7600.2.0.0.256.48
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=5129
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=0a9e
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=0a9e372d3b4ad19135b953a78882e789
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=0a9e
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=0a9e372d3b4ad19135b953a78882e789
    UI[2]=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\INNOBATE Antivirus.exe
    UI[3]=INNOBATE® AntiVirus has stopped working
    UI[4]=Windows can check online for a solution to the problem.
    UI[5]=Check online for a solution and close the program
    UI[6]=Check online for a solution later and close the program
    UI[7]=Close the program
    LoadedModule[0]=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\INNOBATE Antivirus.exe
    LoadedModule[1]=C:\Windows\SysWOW64\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\syswow64\KERNEL32.dll
    LoadedModule[4]=C:\Windows\syswow64\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\syswow64\ADVAPI32.dll
    LoadedModule[6]=C:\Windows\syswow64\msvcrt.dll
    LoadedModule[7]=C:\Windows\SysWOW64\sechost.dll
    LoadedModule[8]=C:\Windows\syswow64\RPCRT4.dll
    LoadedModule[9]=C:\Windows\syswow64\SspiCli.dll
    LoadedModule[10]=C:\Windows\syswow64\CRYPTBASE.dll
    LoadedModule[11]=C:\Windows\syswow64\SHLWAPI.dll
    LoadedModule[12]=C:\Windows\syswow64\GDI32.dll
    LoadedModule[13]=C:\Windows\syswow64\USER32.dll
    LoadedModule[14]=C:\Windows\syswow64\LPK.dll
    LoadedModule[15]=C:\Windows\syswow64\USP10.dll
    LoadedModule[16]=C:\Windows\system32\IMM32.DLL
    LoadedModule[17]=C:\Windows\syswow64\MSCTF.dll
    LoadedModule[18]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    LoadedModule[19]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll
    LoadedModule[20]=C:\Windows\syswow64\shell32.dll
    LoadedModule[21]=C:\Windows\syswow64\ole32.dll
    LoadedModule[22]=C:\Windows\system32\profapi.dll
    LoadedModule[23]=C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f58ab951b57c8526430486dcf7ee38fd\mscorlib.ni.dll
    LoadedModule[24]=C:\Windows\system32\uxtheme.dll
    LoadedModule[25]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[26]=C:\Windows\system32\rsaenh.dll
    LoadedModule[27]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System\500ddd904b1099f95552a81b54223b7f\System.ni.dll
    LoadedModule[28]=C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\72d87531f055ba39b1fc43d6efbd2a0e\Microsoft.VisualBasic.ni.dll
    LoadedModule[29]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    LoadedModule[30]=C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    LoadedModule[31]=C:\Windows\system32\VERSION.dll
    LoadedModule[32]=C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    LoadedModule[33]=C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
    LoadedModule[34]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3060dfcdecbeb8ee65077fb29b217c3d\System.Xml.ni.dll
    LoadedModule[35]=C:\Windows\system32\dwmapi.dll
    LoadedModule[36]=C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\b2e6d33df15f6ca262db09558982e0f2\Accessibility.ni.dll
    LoadedModule[37]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6728ef6a4c4b41eec6af6f48a7109457\System.Runtime.Remoting.ni.dll
    LoadedModule[38]=C:\Windows\syswow64\ws2_32.dll
    LoadedModule[39]=C:\Windows\syswow64\NSI.dll
    LoadedModule[40]=C:\Windows\system32\mswsock.dll
    LoadedModule[41]=C:\Windows\System32\wshtcpip.dll
    LoadedModule[42]=C:\Windows\System32\wship6.dll
    LoadedModule[43]=C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll
    LoadedModule[44]=C:\Windows\system32\WindowsCodecs.dll
    LoadedModule[45]=C:\Windows\system32\iphlpapi.dll
    LoadedModule[46]=C:\Windows\system32\WINNSI.DLL
    LoadedModule[47]=C:\Windows\system32\DNSAPI.dll
    LoadedModule[48]=C:\Windows\system32\dhcpcsvc6.DLL
    LoadedModule[49]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
    LoadedModule[50]=C:\Windows\system32\dhcpcsvc.DLL
    LoadedModule[51]=C:\Windows\syswow64\OLEAUT32.DLL
    LoadedModule[52]=C:\Windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    LoadedModule[53]=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\INNOBATEPCMed.dll
    LoadedModule[54]=C:\Windows\system32\shfolder.dll
    LoadedModule[55]=C:\Windows\system32\RpcRtRemote.dll
    LoadedModule[56]=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\ScheduleTimer.dll
    LoadedModule[57]=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\AppUpdater.dll
    LoadedModule[58]=C:\Windows\system32\ntmarta.dll
    LoadedModule[59]=C:\Windows\syswow64\WLDAP32.dll
    LoadedModule[60]=C:\Windows\system32\pcwum.dll
    LoadedModule[61]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\perfcounter.dll
    LoadedModule[62]=C:\Windows\system32\pdh.dll
    LoadedModule[63]=C:\Windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    LoadedModule[64]=C:\Windows\system32\USERENV.dll
    LoadedModule[65]=C:\Windows\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll
    LoadedModule[66]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_perf.dll
    LoadedModule[67]=C:\Program Files (x86)\Common Files\Microsoft Shared\office11\mso.dll
    LoadedModule[68]=C:\Windows\syswow64\CFGMGR32.dll
    LoadedModule[69]=C:\Windows\system32\rasman.dll
    LoadedModule[70]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d35d360c6e410684be7ea9fd0a8e6b53\System.Runtime.Serialization.Formatters.Soap.ni.dll
    LoadedModule[71]=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\INNOBATE AntiVirus COM+ Server.dll
    LoadedModule[72]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7e94064464380c8a5d7315c8b5d312aa\System.EnterpriseServices.ni.dll
    LoadedModule[73]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Speech\d9d7b2b31f2139f7f8ec4679a21bcdb0\System.Speech.ni.dll
    LoadedModule[74]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\758e0ce53c80a7ad7cf76a4910d27762\System.Management.ni.dll
    LoadedModule[75]=C:\Windows\syswow64\CLBCatQ.DLL
    LoadedModule[76]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    LoadedModule[77]=C:\Windows\system32\wbem\wmiutils.dll
    LoadedModule[78]=C:\Windows\system32\wbemcomn.dll
    LoadedModule[79]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\064483cd86ddba6c78dd32732f6fd351\System.Web.ni.dll
    LoadedModule[80]=C:\Windows\system32\winmm.dll
    LoadedModule[81]=C:\Windows\system32\MMDevAPI.DLL
    LoadedModule[82]=C:\Windows\system32\PROPSYS.dll
    LoadedModule[83]=C:\Windows\system32\wdmaud.drv
    LoadedModule[84]=C:\Windows\system32\ksuser.dll
    LoadedModule[85]=C:\Windows\system32\AVRT.dll
    LoadedModule[86]=C:\Windows\syswow64\SETUPAPI.dll
    LoadedModule[87]=C:\Windows\syswow64\DEVOBJ.dll
    LoadedModule[88]=C:\Windows\system32\AUDIOSES.DLL
    LoadedModule[89]=C:\Windows\system32\msacm32.drv
    LoadedModule[90]=C:\Windows\system32\MSACM32.dll
    LoadedModule[91]=C:\Windows\system32\midimap.dll
    LoadedModule[92]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    LoadedModule[93]=C:\Windows\syswow64\WINTRUST.dll
    LoadedModule[94]=C:\Windows\syswow64\CRYPT32.dll
    LoadedModule[95]=C:\Windows\syswow64\MSASN1.dll
    LoadedModule[96]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\COMCTL32.dll
    LoadedModule[97]=C:\Windows\syswow64\imagehlp.dll
    LoadedModule[98]=C:\Windows\system32\ncrypt.dll
    LoadedModule[99]=C:\Windows\system32\bcrypt.dll
    LoadedModule[100]=C:\Windows\SysWOW64\bcryptprimitives.dll
    LoadedModule[101]=C:\Windows\system32\GPAPI.dll
    LoadedModule[102]=C:\Windows\system32\cryptnet.dll
    LoadedModule[103]=C:\Windows\system32\SensApi.dll
    LoadedModule[104]=C:\Windows\system32\Cabinet.dll
    LoadedModule[105]=C:\Windows\system32\DEVRTL.dll
    LoadedModule[106]=C:\Windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
    LoadedModule[107]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\935ac020241e59cab3287d5eb38c592d\System.Data.ni.dll
    LoadedModule[108]=C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    LoadedModule[109]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\c744f0f95227e75796b8689801740d4b\System.Transactions.ni.dll
    LoadedModule[110]=C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    LoadedModule[111]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceme35.dll
    LoadedModule[112]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceer35EN.DLL
    LoadedModule[113]=C:\Windows\system32\apphelp.dll
    LoadedModule[114]=C:\Windows\System32\perfproc.dll
    LoadedModule[115]=C:\Windows\system32\rasapi32.dll
    LoadedModule[116]=C:\Windows\system32\rtutils.dll
    LoadedModule[117]=C:\Windows\system32\winhttp.dll
    LoadedModule[118]=C:\Windows\system32\webio.dll
    LoadedModule[119]=C:\Windows\system32\wbem\wbemprox.dll
    LoadedModule[120]=C:\Windows\system32\credssp.dll
    LoadedModule[121]=C:\Windows\system32\wbem\wbemsvc.dll
    LoadedModule[122]=C:\Windows\system32\wbem\fastprox.dll
    LoadedModule[123]=C:\Windows\system32\NTDSAPI.dll
    LoadedModule[124]=C:\Windows\system32\rasadhlp.dll
    LoadedModule[125]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[126]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll
    LoadedModule[127]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll
    LoadedModule[128]=C:\Windows\System32\perfos.dll
    LoadedModule[129]=C:\Windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
    LoadedModule[130]=C:\Windows\system32\sxs.dll
    LoadedModule[131]=C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll
    LoadedModule[132]=C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll
    LoadedModule[133]=C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll
    LoadedModule[134]=C:\Windows\System32\Speech\Common\sapi.dll
    LoadedModule[135]=C:\Windows\system32\msdmo.dll
    LoadedModule[136]=C:\Windows\system32\NLAapi.dll
    LoadedModule[137]=C:\Windows\System32\winrnr.dll
    LoadedModule[138]=C:\Windows\system32\napinsp.dll
    LoadedModule[139]=C:\Windows\system32\pnrpnsp.dll
    LoadedModule[140]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    State[0].Key=Transport.DoneStage1
    State[0].Value=1
    State[1].Key=DataRequest
    State[1].Value=Bucket=2039362628/nBucketTable=1/nResponse=1/n
    FriendlyEventName=Stopped working
    ConsentKey=APPCRASH
    AppName=INNOBATE® AntiVirus
    AppPath=C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home\1.0.0.0\INNOBATE Antivirus.exe

    • Edited by INNOBATE Thursday, September 23, 2010 10:58 AM Additional Info
    Thursday, September 23, 2010 10:46 AM

All replies

  • This error seems to happen when a strong named dll (signed assembly with strong name)  gets updated, i.e. its version number in my case was incremented and the older version of the dll was automatically updated and replaced by the updater. What this meant is that the application manifest that was used by the application could not verify the dll or its dependencies, and would fail, and this in turn would raise a crash report. The crash report would indicate that KernelBase.dll has failed.

    Anyway to fix, recompile the Application with the newer version of the strong named dll and updating both seems to have fixed the problem in my case. What is alarming is that this error with KERNELBASE.DLL seems to make Windows 7 behave unresponsive and sluggish and I started to remember my nighmares about infamous DLL ____. Rebooting the system seems to bring life back to Windows 7 as no system files were damaged.

    • Edited by INNOBATE Thursday, September 30, 2010 1:24 PM edit
    Thursday, September 30, 2010 1:16 PM
  • Hello,

    After reviewing the forum threads, I don’t see anything that would indicate BizTalk being the

    cause for the current thread.

     

    The current thread (http://social.msdn.microsoft.com/Forums/en-US/netfxbcl/thread/05764562-0133-

    4e6d-a613-bfe1ec2f0c1d) from Innobate is pointing at BizTalk based on an easier thread by Tareq

    Ali (http://social.msdn.microsoft.com/Forums/en-US/biztalkgeneral/thread/4ff5bcdb-c9a0-43a1-

    971a-3360cdee0a62). 

    In the 2nd thread, customer is using BizTalk orchestration and faulting application is BizTalk. 

    In the current thread, says:  

    ”what's happening at my application end is that I am using .NET Framework to determine if network

    connectivity is available, raise an event from underlying dll to inform application when network

    connectivity is established…”

     

    Faulting application is:

     

    Faulting application path: C:\Program Files (x86)\INNOBATE Limited\INNOBATE® AntiVirus 2011 Home

    \1.0.0.0\INNOBATE Antivirus.exe. 

    Faulting module path: C:\Windows\syswow64\KERNELBASE.dll

     

    We don’t see BizTalk being in the same picture.  Sounds like you may need to know the meaning of

    the hresult in general.  0xe0434f4d seems like a general CLR exception.  To troubleshoot further

    would involve debug your own application. 

    My recommendation would be to have you open a paid support incident with Microsoft support, and

    see if we can't get a repro they can debug. You may have a few options for opening said support

    incident.

    Alliance and Premier VSIP membership includes a complimentary MSDN subscription, which includes 4

    professional support incidents. These can be used to initialize a support request with

    Microsoft's Customer Support Services. Some versions of Visual Studio include a number of free

    support incidents as well. See the "Technical Support Incidents" topic for details.


    visit the below link to see the various paid support options that are available to better meet

    your needs. http://support.microsoft.com/default.aspx?id=fh;en-us;offerprophone

     

     

     

     

    Friday, October 01, 2010 11:21 PM
  • Thank you for the suggestions and informing me about the options available to me through Microsoft. Will take them into consideration. Kind Regards.
    Sunday, October 03, 2010 9:13 PM