IIS Worker Process doesn´t release Memory

[Daniel Alvarez]

Hi,

Sometimes I am getting an Application Crash with a WebService in a "Windows
Server 2003 x64 R2 SP2"... I couldn´t get a Dump from IISSTATE because the
processor is 64 Bits and it didn´t work right, so I did the following dump
with the program ntds from the Debugging Tools for Windows (x64)... I dont
know if it will be enough to analyze the problem..


The command I used was to get the dump

ntsd -p 'PID' -c ".dump /ma d:\dump\process.dmp; q"

To analyze the problem I am using "Windbg":

0:034> ~*kb

0 Id: 2398.2ca8 Suspend: 1 Teb: 000007ff`fffdd000 Unfrozen
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
kernel32.dll -
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`002f60e0 00000000`00000007 00000000`002f5eb0
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3dt.dll -
000007ff`5e488d09 : 00000000`00000194 00000000`002a8f10 00000000`00000000
00000000`002aee90 : kernel32!WaitForSingleObjectEx+0xdf
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3core.dll -
000007ff`5e4df495 : 000007ff`00000000 00000000`002a8f10 00000000`002a8f10
00000000`00000000 : w3dt!UlAtqStartListen+0x69
000007ff`5e4f6b45 : 00000000`fffffffe 00000000`00000000 00000000`00000000
00000000`00000000 : w3core!W3_FILE_INFO_CACHE::GetFileCache+0x9a25
*** ERROR: Module load completed but symbols could not be loaded for w3wp.exe
00000000`00401b58 : 00000000`fffffffe 00000000`fffffffe 000007ff`00000000
00000000`fffffffe : w3core!UlW3Start+0x3b5
00000000`00401da1 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : w3wp+0x1b58
00000000`77d5964c : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : w3wp+0x1da1
00000000`00000000 : 00000000`00401c30 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseProcessStart+0x2c

1 Id: 2398.1dd8 Suspend: 1 Teb: 000007ff`fffd9000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ee9aa7 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`77ee9a50 : ntdll!ZwDelayExecution+0xa
00000000`77d6b6da : 00000000`77d6b6a0 80000000`00000000 00000000`00000000
00000000`0137ffa8 : ntdll!RtlPrefixUnicodeString+0x287
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

2 Id: 2398.32ac Suspend: 1 Teb: 000007ff`fffac000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6b910 : 00000000`00000001 00000000`00000000 00000000`01a500e0
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3tp.dll -
000007ff`5e412779 : 00000000`002fe6b0 00000000`00000000 00000000`00000001
00000000`00000000 : kernel32!GetQueuedCompletionStatus+0x50
000007ff`5e4116eb : 00000000`002f2ef0 000007ff`5e410000 00000000`002f2ef0
000007ff`5e411680 : w3tp!THREAD_POOL:ostCompletion+0x99
00000000`77d6b6da : 00000000`002f2ef0 00000000`00000000 00000000`00000000
00000000`0189ffa8 : w3tp+0x16eb
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

3 Id: 2398.1b84 Suspend: 1 Teb: 000007ff`fffaa000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6b910 : 00000000`00000001 00000000`00000000 00000000`01a4a660
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
000007ff`5e412779 : 00000000`00000000 00000000`00000000 00000000`00000000
000007ff`5e410000 : kernel32!GetQueuedCompletionStatus+0x50
000007ff`5e4116eb : 00000000`002f2f20 000007ff`5e410000 00000000`002f2f20
000007ff`5e411680 : w3tp!THREAD_POOL:ostCompletion+0x99
00000000`77d6b6da : 00000000`002f2f20 00000000`00000000 00000000`00000000
00000000`0191ffa8 : w3tp+0x16eb
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

4 Id: 2398.32f4 Suspend: 1 Teb: 000007ff`fffa8000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6b910 : 00000000`00000001 00000000`00000000 00000000`01a4d3a0
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
000007ff`5e412779 : 00000000`00000000 00000000`00000000 00000000`00000000
000007ff`5e410000 : kernel32!GetQueuedCompletionStatus+0x50
000007ff`5e4116eb : 00000000`002f2f50 000007ff`5e410000 00000000`002f2f50
000007ff`5e411680 : w3tp!THREAD_POOL:ostCompletion+0x99
00000000`77d6b6da : 00000000`002f2f50 00000000`00000000 00000000`00000000
00000000`0199ffa8 : w3tp+0x16eb
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

5 Id: 2398.1d78 Suspend: 1 Teb: 000007ff`fffa6000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6b910 : 00000000`00000001 00000000`00000000 00000000`01a28760
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
000007ff`5e412779 : 00000000`00000000 00000000`00000000 00000000`00000000
000007ff`5e410000 : kernel32!GetQueuedCompletionStatus+0x50
000007ff`5e4116eb : 00000000`002f2f80 000007ff`5e410000 00000000`002f2f80
000007ff`5e411680 : w3tp!THREAD_POOL:ostCompletion+0x99
00000000`77d6b6da : 00000000`002f2f80 00000000`00000000 00000000`00000000
00000000`01a1ffa8 : w3tp+0x16eb
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

6 Id: 2398.3208 Suspend: 1 Teb: 000007ff`fffa4000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77eea1f9 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtWaitForMultipleObjects+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!RtlCreateTimer+0x319
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

7 Id: 2398.bb8 Suspend: 1 Teb: 000007ff`fffa2000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
000007ff`5e4ec505 : 00000000`000001e0 00000000`77ef30af 00000000`00000000
00000000`00000000 : kernel32!WaitForSingleObjectEx+0xdf
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
000007ff`5e4ec3d0 : w3core!W3_FILE_INFO_CACHE::GetFileCache+0x16a95
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

8 Id: 2398.714 Suspend: 1 Teb: 000007ff`fff9e000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ee3031 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!ZwDelayExecution+0xa
00000000`77d6b6da : 00000000`001055f0 00000000`00000000 00000000`00000000
00000000`77ee2ff0 : ntdll!wcsstr+0xb1
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

9 Id: 2398.2fd8 Suspend: 1 Teb: 000007ff`fff9c000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6b910 : 00000000`00000000 00000000`00000001 ffffffff`fffffffe
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
mscorwks.dll -
00000642`7f55dc9a : 00000000`04d4a9f0 00000000`00000001 00000000`0000006d
00000000`00000000 : kernel32!GetQueuedCompletionStatus+0x50
00000642`7f653850 : 00000000`00000000 00000000`00000000 00000000`00000409
00000000`00000000 : mscorwks!GetMetaDataInternalInterface+0xbb72
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0300ffa8 : mscorwks!CreateAssemblyEnum+0x3e70
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

10 Id: 2398.628 Suspend: 1 Teb: 000007ff`fff9a000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d705d6 : ffffffff`fffffffe 00000000`00000001 00000000`0e8be300
00000000`77d4f93f : ntdll!ZwDelayExecution+0xa
00000642`7f5a785d : 0000a292`5f6c1526 0000a2cd`00000000 00000000`00000000
00000000`00000000 : kernel32!SleepEx+0x96
00000642`7f49532a : 00000000`0308fda8 00000642`7fc58358 00000000`00000001
00000000`00000000 : mscorwks!InitializeFusion+0x9bb5
00000642`7f586883 : 00000642`7ee60000 00000000`00000004 00000000`0000000d
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x139b6
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0308ffa8 : mscorwks!GetMetaDataInternalInterface+0x3475b
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

11 Id: 2398.828 Suspend: 1 Teb: 000007ff`fff98000 Unfrozen
*** WARNING: Unable to verify checksum for mscorlib.ni.dll
*** ERROR: Module load completed but symbols could not be loaded for
mscorlib.ni.dll
RetAddr : Args to Child
: Call Site
00000642`78013606 : 00000000`04a817f8 00000000`00140660 00000000`0310eca8
00000000`00000000 : mscorwks!StrongNameTokenFromPublicKey+0x1a6e
*** WARNING: Unable to verify checksum for System.Web.ni.dll
*** ERROR: Module load completed but symbols could not be loaded for
System.Web.ni.dll
00000642`bc945297 : 00000000`00000000 00000000`00000000 00000000`0310eca8
00000000`00140660 : mscorlib_ni+0x13606
00000642`bc940137 : 00000001`023de786 00000642`0000007c 00000000`0000000b
00000001`4cdc5e58 : System_Web_ni+0x2c5297
00000642`bc9403b9 : 000054bc`51b871c0 00000000`00000000 00000000`00000000
00000642`7f3d20c0 : System_Web_ni+0x2c0137
00000642`bc94503c : 00000000`02d53ba0 00000000`01a4ca18 00000000`0310efd8
00000000`0310ed60 : System_Web_ni+0x2c03b9
00000642`bc946938 : 00000000`00000000 00000000`00000000 00000000`0310efd8
00000000`01a4ca18 : System_Web_ni+0x2c503c
00000642`bc946b46 : 00000000`00000008 00000000`0310efc8 00000642`7818bd50
00000000`00000000 : System_Web_ni+0x2c6938
00000642`7f6688d2 : 00000000`ffffcaa8 00000000`01a4ca18 00000000`00000000
ffffffff`fffffffe : System_Web_ni+0x2c6b46
00000642`7f5056b5 : 00000000`0310eeb0 00000000`0310ef80 ffffffff`fffffffe
00000000`00000000 : mscorwks!IEE+0x81f6
00000642`7f55a322 : 00000000`0310efc0 00000000`00000003 00000000`00081800
00000000`00000003 : mscorwks!CreateAssemblyNameObject+0x83d41
00000642`7f55a0d4 : 00000642`bd0a3f80 00000000`00000004 00000000`00000000
00000000`00000003 : mscorwks!GetMetaDataInternalInterface+0x81fa
00000642`7f589b30 : 00000000`00140660 00000000`7fff3178 00000002`00000000
00000000`00140660 : mscorwks!GetMetaDataInternalInterface+0x7fac
00000642`7f536e86 : 00000000`00000000 00000642`7f50eb71 00000000`0310f5c0
00000000`00000000 : mscorwks!GetMetaDataInternalInterface+0x37a08
00000642`7f668d2e : 00000000`00140660 00000000`0310f5c0 00000000`02d5fb00
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0xb5512
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
webengine.dll -
00000642`fff50528 : 00000000`048bff20 00000000`01a4ca18 00000000`00000000
00000000`0310f610 : mscorwks!IEE+0x8652
00000642`fff50998 : 00000000`00140660 00000000`02d5d930 00000000`02d5d930
00000642`fff8ee60 : webengine!DisposeAppDomainsIndirect+0xa28
00000642`fff8ee84 : 00000000`00140660 00000642`7f4bb625 ffffffff`fffffffe
00000000`00000000 : webengine!IsManagedDebuggerConnectedIndirect+0x68
00000642`7f4c2460 : 00000000`00140660 00000642`7f4bb66b 00000642`7fc58358
00000000`00000000 : webengine!SetMinRequestsExecutingToDetectDeadlock+0x284
00000642`7f4bb294 : 00000000`00000409 00000000`00000000 00000642`7fc58358
00000000`154603b0 : mscorwks!CreateAssemblyNameObject+0x40aec
00000642`7f653850 : 00000000`00000000 00000000`00000000 00000000`0310ff50
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x39920

12 Id: 2398.190c Suspend: 1 Teb: 000007ff`fff96000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6cffb : 00000000`00000000 00000642`7f5324f8 00000000`00000073
00000000`00000000 : ntdll!NtWaitForMultipleObjects+0xa
00000000`77d6bb01 : 00000000`001287c0 00000642`7f58d716 ffffffff`00000000
00000642`7f4fb9fc : kernel32!ReleaseSemaphore+0x6b
00000642`7f607332 : ffffffff`fffffffe 00000642`7f4ccaa8 00000002`00000000
00000000`00000000 : kernel32!WaitForMultipleObjects+0x11
00000642`7f5cabb9 : 00000000`00000001 00000000`00000000 00000000`001287c0
00000642`7f5cb0e8 : mscorwks!MetaDataGetDispenser+0xa56e
00000642`7f5cb13c : 00000000`00000000 00000000`00000000 00000002`00000000
00000642`7f5cb0e8 : mscorwks!GetMetaDataInternalInterfaceFromPublic+0x7985
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0327ffa8 : mscorwks!GetMetaDataInternalInterfaceFromPublic+0x7f08
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

13 Id: 2398.23d8 Suspend: 1 Teb: 000007ff`fff94000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`000002fc 00000000`77d6e38c 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`00000001 00000000`00000000 00000000`00000000
00000642`7f4a13f1 : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f496b74 : 00b27a67`0c7211a0 00000000`0004610e 00000000`000001e0
00000000`046afe18 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7f5b2471 : 00000000`00146e20 00000000`046aff50 00000000`00000000
00000642`7f5b23f0 : mscorwks!CreateAssemblyNameObject+0x15200
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`046affa8 : mscorwks!InitializeFusion+0x147c9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

14 Id: 2398.8fc Suspend: 1 Teb: 000007ff`fff92000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`000002f8 00000642`7f47e6fa 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : ffffffff`fffffffe 00000000`00000001 00000000`00000000
00000000`00148ed0 : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f496e4b : 00000000`00100000 00000000`000a0000 00000000`00000001
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7f5b2471 : 00000000`00148ed0 00000000`0472ff50 00000000`00000000
00000642`7f5b23f0 : mscorwks!CreateAssemblyNameObject+0x154d7
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0472ffa8 : mscorwks!InitializeFusion+0x147c9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

15 Id: 2398.1384 Suspend: 1 Teb: 000007ff`fff90000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`000002f8 00000642`7f47e6fa 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`00000000 00000642`7f49fa99 00000000`00000000
00000000`0014b400 : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f496e4b : 00000000`002e22f8 00000000`00000004 00000000`00000002
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7f5b2471 : 00000000`0014b400 00000000`047aff50 00000000`00000000
00000642`7f5b23f0 : mscorwks!CreateAssemblyNameObject+0x154d7
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`047affa8 : mscorwks!InitializeFusion+0x147c9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

16 Id: 2398.3bb0 Suspend: 1 Teb: 000007ff`fff8e000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`000002f8 00000642`7f47e6fa 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`00000000 00000000`00000001 00000000`00000000
00000000`0014dd10 : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f496e4b : 00000000`002bb4a0 00000000`00000004 00000000`00000002
00000000`78133d90 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7f5b2471 : 00000000`0014dd10 00000000`0482ff50 00000000`00000000
00000642`7f5b23f0 : mscorwks!CreateAssemblyNameObject+0x154d7
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0482ffa8 : mscorwks!InitializeFusion+0x147c9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

17 Id: 2398.2184 Suspend: 1 Teb: 000007ff`fff8c000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`000e3b78 000007ff`5718ceda 00000000`001761c0
00000000`80010012 : ntdll!ZwWaitForSingleObject+0xa
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ole32.dll -
000007ff`5714d4b8 : 00000000`000007fc 00000000`00104818 00000000`00000000
00000000`001761c0 : kernel32!WaitForSingleObjectEx+0xdf
000007ff`5736700c : 00000000`000e3b78 00000000`00104818 00000000`00000000
00000000`001761c0 : ole32+0xd4b8
000007ff`5736ac4b : 00000000`000e3b78 00000000`048aea58 00000000`000e3b78
00000000`00000000 : ole32!StgGetIFillLockBytesOnFile+0x717ec
000007ff`57181f61 : 00000000`00000000 00000000`05349b60 00000000`00000000
00000000`000e3b78 : ole32!WdtpInterfacePointer_UserMarshal+0x2eb
000007ff`5714e97b : 00000000`0015d600 00000000`00104818 00000000`048aecb0
00000000`0015d600 : ole32!CoSetProxyBlanket+0x19f1
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
rpcrt4.dll -
000007ff`7fe96724 : 00000000`048aeb20 00000000`00000008 ffffffff`fffffffe
00000000`001990c0 : ole32!CoResumeClassObjects+0xfab
000007ff`7fe966d0 : 00000000`00199010 00000000`00000008 00000000`00199010
00000000`001990c0 : rpcrt4!NdrProxySendReceive+0x44
000007ff`7fe9652f : 00000000`00000000 00000000`77ef3cb7 00000000`000e4d60
00000000`048af3e0 : rpcrt4!NdrProxyGetBuffer+0x80
000007ff`7fd64a3b : 00000000`048af464 00000000`000d0810 00000000`00000000
00000000`0015d600 : rpcrt4!NdrStubGetBuffer+0x1bf
000007ff`57168b5e : 00000000`0525fa58 00000000`048af430 000007ff`573748b8
00000000`00000059 : rpcrt4!I_RpcFreeBuffer+0x10b
000007ff`5724e982 : 00000000`00000000 00000000`00150720 00000000`0015d600
00000000`00000001 : ole32!StgOpenStorage+0x366e
00000642`7f911ddd : 00000000`00000000 00000000`000d05c0 00000000`00000000
00000642`7f940b89 : ole32!CoCreateObjectInContext+0x15f2
00000642`7f9dcc72 : 00000000`048af670 00000000`048af670 00000000`048af610
00000000`000000c0 : mscorwks!ClearDownloadCache+0x452d
00000642`7f9e07f7 : 00000000`0525ac60 00000000`04d4d810 00000642`7fc58100
00000642`7f4bb600 : mscorwks!PreBindAssembly+0x11072
00000642`7f865aac : 00000000`04d4c010 00000000`04d4c010 00000000`00000000
00000000`04d4c010 : mscorwks!PreBindAssembly+0x14bf7
00000642`7f5c4cca : 00000000`00172ad0 00000000`00150720 00000000`00150700
00000000`00139e40 : mscorwks!CertCreateAuthenticodeLicense+0x1f93bc
00000642`7f58f9e4 : 00000642`7fc580f0 00000000`00000001 00000000`00000001
00000642`7f4ab37d : mscorwks!GetMetaDataInternalInterfaceFromPublic+0x1a96
00000642`7f58f7f7 : 00000000`00127d00 00000642`7f4d530e 00000000`00150720
00000642`7f4fb9fc : mscorwks!GetMetaDataInternalInterface+0x3d8bc
00000642`7f4aaf0c : ffffffff`fffffffe 00000000`00000000 00000000`00000000
00000000`00000001 : mscorwks!GetMetaDataInternalInterface+0x3d6cf

18 Id: 2398.1c30 Suspend: 1 Teb: 000007ff`fff8a000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d705d6 : 00000642`7fc58358 00000000`00000000 00000000`00000000
00000000`0499fe30 : ntdll!ZwDelayExecution+0xa
00000642`7f5dbb29 : 00000000`0310d460 00000000`00000001 00000000`0310d460
00000000`00000000 : kernel32!SleepEx+0x96
00000642`7f5f6b52 : 00000000`00000000 00000000`0499fef0 00000002`00000000
00000000`0499fee8 : mscorwks!CorExeMain+0xc391
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0499ffa8 : mscorwks!CorExitProcess+0xacf6
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

19 Id: 2398.3fb4 Suspend: 1 Teb: 000007ff`fff88000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : ffffffff`fffffffe 00000000`00000000 00000000`00000000
00000000`00000001 : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`000002f0 00000000`00178a90 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`00000000 00000000`00000001 00000000`00178a90
00000642`7f45ed1b : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f5d9419 : 00000000`00178a90 00000000`00000000 00000002`00000000
00000000`00000010 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7f5dd798 : 00000000`00178a90 00000000`00000000 00000000`00000000
00000000`04a1fd60 : mscorwks!CorExeMain+0x9c81
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`04a1ffa8 : mscorwks!CorExeMain+0xe000
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

20 Id: 2398.37cc Suspend: 1 Teb: 000007ff`fff84000 Unfrozen
RetAddr : Args to Child
: Call Site
000007ff`5e4f415a : 00000000`01a4e1b0 00000642`fff33398 00000000`00000000
00000000`01a4e020 : w3core!UlW3Start+0x2632
000007ff`5e4f3d7d : 00000000`00000000 00000000`00000002 00000000`00000002
00000000`07c8e698 : w3core!FindInETagList+0x2a8a
000007ff`5e527167 : 00000000`8763ffb0 00000000`8763f390 00000000`00000001
00000642`7f50f327 : w3core!FindInETagList+0x26ad
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3isapi.dll -
000007ff`5e4313d1 : 00000000`04a81708 00000000`00180dc0 00000000`80937630
00000000`00000620 : w3core!UlW3Start+0x309d7
00000642`fff4ba09 : 00000000`00000000 00000000`00000000 00000000`0000000b
00000001`4cdc6d60 : w3isapi+0x13d1
00000642`7f668004 : 00000000`01a4f758 00000000`00000800 00000000`00000620
00000000`04d30690 : webengine!EcbGetUnicodeServerVariables+0xa9
00000642`bc93f7c2 : 00000000`00000000 00000000`00146e20 00000001`4cdc6d50
00000000`00000400 : mscorwks!IEE+0x7928
00000642`bc93feb9 : 00000000`001441a0 00000000`07c8ec60 00000000`00000180
00000000`00000002 : System_Web_ni+0x2bf7c2
00000642`bc9403b9 : 000054bc`51b871c0 00000000`00000000 00000000`00000000
00000642`7f3d20c0 : System_Web_ni+0x2bfeb9
00000642`bc94503c : 00000000`02d53ba0 00000000`01a4f758 00000000`07c8eed8
00000000`07c8ec60 : System_Web_ni+0x2c03b9
00000642`bc946938 : 00000642`bce9d8a0 00000000`00000000 00000000`07c8eed8
00000000`01a4f758 : System_Web_ni+0x2c503c
00000642`bc946b46 : 00000000`00000008 00000000`07c8eec8 00000642`7818bd50
00000000`00000000 : System_Web_ni+0x2c6938
00000642`7f6688d2 : 00000000`ffffcaa8 00000000`01a4f758 00000000`00000000
ffffffff`fffffffe : System_Web_ni+0x2c6b46
00000642`7f5056b5 : 00000000`07c8edb0 00000000`07c8ee80 ffffffff`fffffffe
00000000`00000000 : mscorwks!IEE+0x81f6
00000642`7f55a322 : 00000000`07c8eec0 00000000`00000003 00000000`00081800
00000000`00000003 : mscorwks!CreateAssemblyNameObject+0x83d41
00000642`7f55a0d4 : 00000642`bd0a3f80 00000000`00000004 00000000`00000000
00000000`00000003 : mscorwks!GetMetaDataInternalInterface+0x81fa
00000642`7f589b30 : 00000000`04d30690 00000000`8003c3e8 00000002`00000000
00000000`04d30690 : mscorwks!GetMetaDataInternalInterface+0x7fac
00000642`7f536e86 : 00000000`00000000 00000642`7f664889 00000000`07c8f4c0
00000000`00000000 : mscorwks!GetMetaDataInternalInterface+0x37a08
00000642`7f668d2e : 00000000`04d30690 00000000`07c8f4c0 00000000`02d5fb00
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0xb5512
00000642`fff50528 : 00000000`048bff20 00000000`01a4f758 00000000`00000000
00000000`07c8f510 : mscorwks!IEE+0x8652

21 Id: 2398.3674 Suspend: 1 Teb: 000007ff`fff80000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d6cffb : 000054bc`51b871c0 00000000`00000001 00000000`00000002
00000000`089de0e0 : ntdll!NtWaitForMultipleObjects+0xa
00000642`7f587fb1 : 00000000`00000000 006f0000`00000000 fffff800`00000000
00000642`7f592b4f : kernel32!ReleaseSemaphore+0x6b
00000642`7f584e61 : ffffffff`00000002 00000000`089de420 00000000`052c6010
00000642`7f57270c : mscorwks!GetMetaDataInternalInterface+0x35e89
00000642`7f46b449 : 00000000`00000000 00000000`00146e20 00000000`00000002
00000000`00000000 : mscorwks!GetMetaDataInternalInterface+0x32d39
00000642`7f56beb4 : 00000000`00000000 00000642`7fa3ca94 00000000`089de420
00000000`00000000 : mscorwks!StrongNameFreeBuffer+0xd1c9
00000642`7fa42f6b : 00000000`089de450 00000642`00000002 00000000`089de450
00000642`7fa42dff : mscorwks!GetMetaDataInternalInterface+0x19d8c
00000642`782eebba : 00000000`8ae361b8 00000000`00016617 00000001`40017800
00000001`7fffee00 : mscorwks!PreBindAssembly+0x7736b
*** WARNING: Unable to verify checksum for System.ni.dll
*** ERROR: Module load completed but symbols could not be loaded for
System.ni.dll
00000642`749bcc7f : 00000000`8a250b30 00000000`089de6ec 00000000`00000001
00000000`00000000 : mscorlib_ni+0x2eebba
00000642`782e5760 : 00000000`089de7b0 00000000`00000000 ffffffff`fffffffe
00000000`00000000 : System_ni+0x13cc7f
00000642`7f6688d2 : 00000000`8003e180 00000000`80049948 00000000`00000000
00000000`00000000 : mscorlib_ni+0x2e5760
00000642`7f5056b5 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : mscorwks!IEE+0x81f6
00000642`7f4f6636 : 00000000`089de9c8 00000000`00000002 00000000`00001200
00000000`089debc8 : mscorwks!CreateAssemblyNameObject+0x83d41
00000642`7f530c91 : 00000000`00000006 ffffffff`00000003 00000642`78aea3f8
00000001`400a34a0 : mscorwks!CreateAssemblyNameObject+0x74cc2
00000642`7f535f14 : 00000642`00000007 00000642`80002219 00000000`00000001
00000000`052c6010 : mscorwks!CreateAssemblyNameObject+0xaf31d
00000642`782e5975 : 00000000`089dee78 00000000`00000000 00000000`00000000
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0xb45a0
00000642`782e91af : 00000642`80142020 00000000`00000165 00000000`00000000
00000000`089df0c0 : mscorlib_ni+0x2e5975
00000642`7f6688d2 : 00000001`400a3460 00000642`7fc50ae8 00000000`00000000
00000000`00000000 : mscorlib_ni+0x2e91af
00000642`7f5056b5 : 00000000`00000000 00000000`00000000 00000642`782e79c0
00000000`00000000 : mscorwks!IEE+0x81f6
00000642`7f4f6636 : 00000000`089df218 00000000`00000001 00000000`00000000
00000000`089df428 : mscorwks!CreateAssemblyNameObject+0x83d41
00000642`7f5e9430 : 00000000`089dfb20 00000000`089dff50 00000000`089dfbb0
00000642`788339d0 : mscorwks!CreateAssemblyNameObject+0x74cc2

Could you help me to analyze who is the responsible of this out of control
of increasing of memory?

Thanks in Advance!!

Regards... Daniel Alvarez

 

[Daniel Alvarez]

I Add Up to ·4 thread... thanks:

22 Id: 2398.1b70 Suspend: 1 Teb: 000007ff`fffa0000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : ffffffff`ffff0100 00000000`00000000 00000000`0815fa98
ffffffff`fffffffe : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`00000248 00000000`0c4dd550 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`000c0000 00000000`0c4dd550 00000000`154901bf
00000642`fff8f31a : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f5555d2 : ffffffff`fffffffe 00000000`00000001 00000000`0c4dd550
00000642`7f4bb625 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7f4bb1fd : 00000000`00000409 00000000`00000000 00000642`7fc58358
00000000`00000000 : mscorwks!GetMetaDataInternalInterface+0x34aa
00000642`7f5dd798 : 00000000`00000000 00000000`00000000 00000000`0815ff50
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x39889
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0815ffa8 : mscorwks!CorExeMain+0xe000
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

23 Id: 2398.32b8 Suspend: 1 Teb: 000007ff`fffd7000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000001`c40349a0 00000642`00000001 00000000`00000000
00000000`00000000 : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`00000250 00000000`00000000 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`00000000 00000000`ffffffff 00000001`00000000
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f5555d2 : 00000001`c40349a0 00000000`0f667c10 00000000`30758b49
00000000`77d6abaa : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7fa76377 : 00000642`00000001 00000642`7f6583a5 00000000`00000000
00000642`7f57e900 : mscorwks!GetMetaDataInternalInterface+0x34aa
00000642`7f8b9a6d : 00000000`00000001 00000000`00009c40 00000642`7fc58358
00000000`00000000 : mscorwks!ReOpenMetaDataWithMemory+0x136e7
00000642`7f5dd798 : 00000000`00000000 00000000`00000000 00000000`0a08ff50
00000000`00000000 : mscorwks!CertCreateAuthenticodeLicense+0x24d37d
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0a08ffa8 : mscorwks!CorExeMain+0xe000
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

24 Id: 2398.28bc Suspend: 1 Teb: 000007ff`fffae000 Unfrozen
RetAddr : Args to Child
: Call Site
000007ff`7fd6ff81 : 00000001`c489bfc0 00000000`0caafde0 00000000`ffffffff
00000000`05349020 : ntdll!ZwReplyWaitReceivePortEx+0xa
000007ff`7fd45389 : 00000001`c489bfc0 00000000`1518dc90 000007ff`7fd65d50
00000000`00000000 : rpcrt4!RpcBindingFree+0xb21
000007ff`7fd659b6 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : rpcrt4!NdrMesTypeAlignSize+0x189
000007ff`7fd65d71 : 00000000`1518dc90 00000000`00000000 00000000`00000000
000007ff`7fd65d50 : rpcrt4!I_RpcAsyncSetHandle+0x596
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0caaffa8 : rpcrt4!I_RpcAsyncSetHandle+0x951
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

25 Id: 2398.1b80 Suspend: 1 Teb: 000007ff`ffede000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

26 Id: 2398.1a8 Suspend: 1 Teb: 000007ff`ffedc000 Unfrozen
RetAddr : Args to Child
: Call Site
000007ff`7fd6ff81 : 00000000`154294c0 00000000`100ffde0 00000000`ffffffff
00000000`00102d80 : ntdll!ZwReplyWaitReceivePortEx+0xa
000007ff`7fd45389 : 00000000`154294c0 00000001`c4e89e00 000007ff`7fd65d50
00000000`00000000 : rpcrt4!RpcBindingFree+0xb21
000007ff`7fd659b6 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : rpcrt4!NdrMesTypeAlignSize+0x189
000007ff`7fd65d71 : 00000001`c4e89e00 00000000`00000000 00000000`00000000
000007ff`7fd65d50 : rpcrt4!I_RpcAsyncSetHandle+0x596
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`100fffa8 : rpcrt4!I_RpcAsyncSetHandle+0x951
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

27 Id: 2398.112c Suspend: 1 Teb: 000007ff`fff86000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77d704bf : 00000000`154b3010 000007ff`00000001 00000000`00000000
000007ff`5719a21a : ntdll!ZwWaitForSingleObject+0xa
00000642`7f49696a : 00000000`00000250 00000000`00000000 00000000`00000000
00000000`ffffffff : kernel32!WaitForSingleObjectEx+0xdf
00000642`7f496a4f : 00000000`00000000 00000000`ffffffff 00000001`00000000
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x14ff6
00000642`7f5555d2 : 00000000`154b3010 00000000`0018ebf0 00000000`3076314d
00000000`00000000 : mscorwks!CreateAssemblyNameObject+0x150db
00000642`7fa76377 : 00000642`00000001 00000642`7f6583a5 00000000`00000000
00000642`7f57e900 : mscorwks!GetMetaDataInternalInterface+0x34aa
00000642`7f8b9a6d : 00000000`00000001 00000000`00009c40 00000642`7fc58358
00000000`00000000 : mscorwks!ReOpenMetaDataWithMemory+0x136e7
00000642`7f5dd798 : 00000000`00000000 00000000`00000000 00000000`0cb3ff50
00000000`00000000 : mscorwks!CertCreateAuthenticodeLicense+0x24d37d
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`0cb3ffa8 : mscorwks!CorExeMain+0xe000
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

28 Id: 2398.1520 Suspend: 1 Teb: 000007ff`ffed8000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

29 Id: 2398.3eb0 Suspend: 1 Teb: 000007ff`fffdb000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

30 Id: 2398.2878 Suspend: 1 Teb: 000007ff`fffd5000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

31 Id: 2398.b54 Suspend: 1 Teb: 000007ff`fff82000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

32 Id: 2398.3b64 Suspend: 1 Teb: 000007ff`ffeda000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

33 Id: 2398.3174 Suspend: 1 Teb: 000007ff`ffed6000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77ef0649 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!NtRemoveIoCompletion+0xa
00000000`77d6b6da : 00000000`77d6b6a0 00000000`00000000 00000000`00000000
00000000`77ef0600 : ntdll!RtlAddRefActivationContext+0xe9
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : kernel32!BaseThreadStart+0x3a

# 34 Id: 2398.3a18 Suspend: 1 Teb: 000007ff`ffed4000 Unfrozen
RetAddr : Args to Child
: Call Site
00000000`77f18046 : 00000000`77f18020 00000000`00000000 00000000`00000000
00000000`013fffd8 : ntdll!DbgBreakPoint
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000
00000000`00000000 : ntdll!DbgUiRemoteBreakin+0x26