6

I am trying to analyze an IIS memory dump usinf Windbg and SOS and ran into an issue with version of files mentioned above. My question is - is there a way I can download the different versions of these files? Assume that I have no access to the server and cannot copy them from the server. The versions I am specifically interested in is mscordacwks_x86_x86_2.0.50727.3603 and the corresponding mscorwks dll.

Devaiah
  • 61
  • 2
  • You don't need mscorwks.dll as it will already be part of your dump file, but you do need the correct version of mscordacwks.dll. – Brian Rasmussen Apr 06 '11 at 04:46
  • 1
    Just adding this note - When all else fails, follow instructions :). Setting up the symbol path in Windbg (srv*c:\symbols*http://msdl.microsoft.com/download/symbols) will ensure that correct version of the mscodacwks is loaded. – Devaiah Apr 06 '11 at 08:21
  • 1
    I assumed you had already done that. However, in some rare cases this doesn't work and then you basically have to obtain the specific version manually. – Brian Rasmussen Apr 07 '11 at 06:07

1 Answers1

1

For me, the following downloads the correct version of mscordacwks in WinDbg:

.symfix c:\symbols
.cordll -ve -u -l

Using WinDbg 6.2.9200.16384 and a dump with .NET 4.0.30319.296 / 4.0.30319.18034. Unfortunately I don't have a .NET 2 dump available with different .NET version than on my machine.

For those who have access to the PC where the dump comes from, you can try Mscordcwks collector.

Thomas Weller
  • 55,411
  • 20
  • 125
  • 222