R
RichBomber69
Hey guys, I hope you are well!
I am running into a hang and crash with RDP in between Windows 10 and Windows Server 2008 R2.
I have an application running as a remote app on the Windows Server 2008 R2 and in certain cases it seems to be hanging when viewing from Windows 10. The weird part is that RDP hangs only in a specific, empty, area of the app when hovering the mouse over it.
When opening the RDP connection again, the application is in the exact same place where it was before.
What makes the problem even harder to investigate is that I cannot replicate the issue locally within my VM, but it is replicable on the production server which is a quite a few hundred miles away (no load balancer or anything alike along the network, we do however have a DNS, but the hang occurs even when using the IP address in the .rdp file).
I have attempted a sfc /scannow but it comes back all clean.
The issue cannot be replicated if using an older version of the RDP on the client such as the one in Windows 7.
The issue cannot be replicate if using a newer version of the RDP on the server such as the one in Windows Server 2016.
A copy of the crash log is attached below, occured in mstsc.exe:
Version=1
EventType=AppHangB1
EventTime=132061039670406543
ReportType=3
Consent=1
UploadTime=132061039692439070
ReportStatus=268435456
ReportIdentifier=1c0c7bcd-f93c-4d03-a1dd-491a896310f4
IntegratorReportIdentifier=604b2c47-57ad-49c5-bce2-cc374e187892
Wow64Host=34404
NsAppName=mstsc.exe
OriginalFilename=mstsc.exe
AppSessionGuid=00000d48-0005-0012-d334-04d4d02cd501
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!00003b3a80b78d15aa647e520be71ead454805049a11!mstsc.exe
TargetAppVer=2091//12//20:00:26:24!38859b!mstsc.exe
BootId=4294967295
TargetAsId=10971
UserImpactVector=269484304
IsFatal=1
EtwNonCollectReason=4
Response.BucketId=5a7ca97d8811c5e453f24109e7853e0b
Response.BucketTable=5
Response.LegacyBucketId=1437282741879389707
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=mstsc.exe
Sig[1].Name=Application Version
Sig[1].Value=10.0.17763.404
Sig[2].Name=Application Timestamp
Sig[2].Value=e56a4c30
Sig[3].Name=Hang Signature
Sig[3].Value=ec7e
Sig[4].Name=Hang Type
Sig[4].Value=134217728
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.17763.2.0.0.768.100
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=2057
DynamicSig[22].Name=Additional Hang Signature 1
DynamicSig[22].Value=ec7eddfdf22d245aeb832973bc1f0d06
DynamicSig[23].Name=Additional Hang Signature 2
DynamicSig[23].Value=440d
DynamicSig[24].Name=Additional Hang Signature 3
DynamicSig[24].Value=440d1b3ed6e1762ce7ade006b8f5e549
DynamicSig[25].Name=Additional Hang Signature 4
DynamicSig[25].Value=ec7e
DynamicSig[26].Name=Additional Hang Signature 5
DynamicSig[26].Value=ec7eddfdf22d245aeb832973bc1f0d06
DynamicSig[27].Name=Additional Hang Signature 6
DynamicSig[27].Value=440d
DynamicSig[28].Name=Additional Hang Signature 7
DynamicSig[28].Value=440d1b3ed6e1762ce7ade006b8f5e549
UI[3]=Remote Desktop Connection is not responding
UI[4]=If you close the program, you might lose information.
UI[5]=Close the program
UI[6]=Close the program
UI[7]=Close the program
LoadedModule[0]=C:\Windows\System32\mstsc.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\System32\ADVAPI32.dll
LoadedModule[5]=C:\Windows\System32\msvcrt.dll
LoadedModule[6]=C:\Windows\System32\sechost.dll
LoadedModule[7]=C:\Windows\System32\RPCRT4.dll
LoadedModule[8]=C:\Windows\System32\GDI32.dll
LoadedModule[9]=C:\Windows\System32\gdi32full.dll
LoadedModule[10]=C:\Windows\System32\msvcp_win.dll
LoadedModule[11]=C:\Windows\System32\ucrtbase.dll
LoadedModule[12]=C:\Windows\System32\USER32.dll
LoadedModule[13]=C:\Windows\System32\win32u.dll
LoadedModule[14]=C:\Windows\System32\ole32.dll
LoadedModule[15]=C:\Windows\System32\combase.dll
LoadedModule[16]=C:\Windows\System32\bcryptPrimitives.dll
LoadedModule[17]=C:\Windows\System32\OLEAUT32.dll
LoadedModule[18]=C:\Windows\System32\SHELL32.dll
LoadedModule[19]=C:\Windows\System32\cfgmgr32.dll
LoadedModule[20]=C:\Windows\System32\shcore.dll
LoadedModule[21]=C:\Windows\System32\windows.storage.dll
LoadedModule[22]=C:\Windows\System32\profapi.dll
LoadedModule[23]=C:\Windows\System32\powrprof.dll
LoadedModule[24]=C:\Windows\System32\shlwapi.dll
LoadedModule[25]=C:\Windows\System32\kernel.appcore.dll
LoadedModule[26]=C:\Windows\System32\cryptsp.dll
LoadedModule[27]=C:\Windows\System32\COMDLG32.dll
LoadedModule[28]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.557_none_05b63f68071e5b9f\COMCTL32.dll
LoadedModule[29]=C:\Windows\System32\CRYPT32.dll
LoadedModule[30]=C:\Windows\System32\MSASN1.dll
LoadedModule[31]=C:\Windows\System32\WS2_32.dll
LoadedModule[32]=C:\Windows\System32\WINHTTP.dll
LoadedModule[33]=C:\Windows\System32\credui.dll
LoadedModule[34]=C:\Windows\System32\Secur32.dll
LoadedModule[35]=C:\Windows\System32\CRYPTUI.dll
LoadedModule[36]=C:\Windows\System32\WINMM.dll
LoadedModule[37]=C:\Windows\System32\NETAPI32.dll
LoadedModule[38]=C:\Windows\System32\WININET.dll
LoadedModule[39]=C:\Windows\System32\ktmw32.dll
LoadedModule[40]=C:\Windows\System32\bcrypt.dll
LoadedModule[41]=C:\Windows\System32\IPHLPAPI.DLL
LoadedModule[42]=C:\Windows\System32\WINMMBASE.dll
LoadedModule[43]=C:\Windows\System32\CRYPTBASE.DLL
LoadedModule[44]=C:\Windows\System32\SSPICLI.DLL
LoadedModule[45]=C:\Windows\System32\NETUTILS.DLL
LoadedModule[46]=C:\Windows\System32\WKSCLI.DLL
LoadedModule[47]=C:\Windows\System32\IMM32.DLL
LoadedModule[48]=C:\Windows\system32\uxtheme.dll
LoadedModule[49]=C:\Windows\System32\MSCTF.dll
LoadedModule[50]=C:\Windows\system32\dwmapi.dll
LoadedModule[51]=C:\Windows\System32\clbcatq.dll
LoadedModule[52]=C:\Windows\SYSTEM32\sxs.dll
LoadedModule[53]=C:\Windows\System32\credssp.dll
LoadedModule[54]=C:\Windows\System32\NTASN1.dll
LoadedModule[55]=C:\Windows\System32\TextInputFramework.dll
LoadedModule[56]=C:\Windows\System32\CoreMessaging.dll
LoadedModule[57]=C:\Windows\System32\CoreUIComponents.dll
LoadedModule[58]=C:\Windows\SYSTEM32\wintypes.dll
LoadedModule[59]=C:\Windows\SYSTEM32\ntmarta.dll
LoadedModule[60]=C:\Windows\system32\Oleacc.dll
LoadedModule[61]=C:\Windows\System32\PROPSYS.dll
LoadedModule[62]=C:\Windows\System32\mstscax.dll
LoadedModule[63]=C:\Windows\System32\SETUPAPI.dll
LoadedModule[64]=C:\Windows\System32\DWrite.dll
LoadedModule[65]=C:\Windows\System32\d2d1.dll
LoadedModule[66]=C:\Windows\System32\ncrypt.dll
LoadedModule[67]=C:\Windows\System32\VERSION.dll
LoadedModule[68]=C:\Windows\System32\d3d11.dll
LoadedModule[69]=C:\Windows\System32\pdh.dll
LoadedModule[70]=C:\Windows\System32\MSACM32.dll
LoadedModule[71]=C:\Windows\System32\dxgi.dll
LoadedModule[72]=C:\Windows\System32\Mf.dll
LoadedModule[73]=C:\Windows\System32\Mfplat.dll
LoadedModule[74]=C:\Windows\System32\RTWorkQ.DLL
LoadedModule[75]=C:\Windows\System32\Mfreadwrite.dll
LoadedModule[76]=C:\Windows\System32\MFCORE.DLL
LoadedModule[77]=C:\Windows\System32\ksuser.dll
LoadedModule[78]=C:\Windows\SYSTEM32\atlthunk.dll
LoadedModule[79]=C:\Windows\system32\explorerframe.dll
LoadedModule[80]=C:\Windows\System32\DEVOBJ.dll
LoadedModule[81]=C:\Windows\System32\WINTRUST.dll
LoadedModule[82]=C:\Windows\System32\MSAudDecMFT.dll
LoadedModule[83]=C:\Windows\System32\mfperfhelper.dll
LoadedModule[84]=C:\Windows\System32\MMDevApi.dll
LoadedModule[85]=C:\Windows\System32\msmpeg2vdec.dll
LoadedModule[86]=C:\Windows\System32\msvproc.dll
LoadedModule[87]=C:\Windows\System32\CompPkgSup.DLL
LoadedModule[88]=C:\Windows\System32\perfos.dll
LoadedModule[89]=C:\Windows\System32\msxml6.dll
LoadedModule[90]=C:\Windows\system32\NLAapi.dll
LoadedModule[91]=C:\Windows\System32\NSI.dll
LoadedModule[92]=C:\Windows\System32\rasadhlp.dll
LoadedModule[93]=C:\Windows\System32\WTSAPI32.dll
LoadedModule[94]=C:\Windows\System32\WINSTA.dll
LoadedModule[95]=C:\Windows\System32\AUDIOSES.DLL
LoadedModule[96]=C:\Windows\System32\AVRT.dll
LoadedModule[97]=C:\Windows\System32\Windows.UI.dll
LoadedModule[98]=C:\Windows\System32\InputHost.dll
LoadedModule[99]=C:\Windows\System32\twinapi.appcore.dll
LoadedModule[100]=C:\Windows\System32\RMCLIENT.dll
LoadedModule[101]=C:\Windows\system32\mswsock.dll
LoadedModule[102]=C:\Windows\SYSTEM32\DNSAPI.dll
LoadedModule[103]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[104]=C:\Windows\SYSTEM32\wincredui.dll
LoadedModule[105]=C:\Windows\System32\coml2.dll
LoadedModule[106]=C:\Windows\System32\OneCoreCommonProxyStub.dll
LoadedModule[107]=C:\Windows\System32\DPAPI.DLL
LoadedModule[108]=C:\Windows\system32\rsaenh.dll
LoadedModule[109]=C:\Windows\system32\schannel.DLL
LoadedModule[110]=C:\Windows\system32\tspkg.DLL
LoadedModule[111]=C:\Windows\SYSTEM32\mskeyprotect.dll
LoadedModule[112]=C:\Windows\system32\ncryptsslp.dll
LoadedModule[113]=C:\Windows\SYSTEM32\gpapi.dll
LoadedModule[114]=C:\Windows\System32\wdmaud.drv
LoadedModule[115]=C:\Windows\System32\msacm32.drv
LoadedModule[116]=C:\Windows\System32\midimap.dll
LoadedModule[117]=C:\Windows\System32\IME\IMEJP\imjpapi.dll
LoadedModule[118]=C:\Windows\SYSTEM32\policymanager.dll
LoadedModule[119]=C:\Windows\SYSTEM32\msvcp110_win.dll
LoadedModule[120]=C:\Windows\System32\winscard.dll
LoadedModule[121]=C:\Windows\System32\WINSPOOL.DRV
LoadedModule[122]=C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_a337db27fa50b915\Amd64\PrintConfig.dll
LoadedModule[123]=C:\Windows\SYSTEM32\prntvpt.dll
LoadedModule[124]=C:\Windows\SYSTEM32\USERENV.dll
LoadedModule[125]=C:\Windows\SYSTEM32\urlmon.dll
LoadedModule[126]=C:\Windows\System32\iertutil.dll
LoadedModule[127]=C:\Windows\System32\jscript.dll
LoadedModule[128]=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpOav.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=17763
OsInfo[3].Key=ubr
OsInfo[3].Value=557
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=100
OsInfo[9].Key=domain
OsInfo[9].Value=0
OsInfo[10].Key=prodsuite
OsInfo[10].Value=768
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=105221
OsInfo[15].Key=osinsty
OsInfo[15].Value=2
OsInfo[16].Key=iever
OsInfo[16].Value=11.557.17763.0-11.0.130
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=2025
OsInfo[19].Key=svolsz
OsInfo[19].Value=255
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=180914
OsInfo[22].Key=bldtm
OsInfo[22].Value=1434
OsInfo[23].Key=bldbrch
OsInfo[23].Value=rs5_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.17763.557.amd64fre.rs5_release.180914-1434
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=CoreSingleLanguage
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Stopped responding and was closed
ConsentKey=AppHangXProcB1
AppName=Remote Desktop Connection
AppPath=C:\Windows\System32\mstsc.exe
ReportDescription=A problem caused this program to stop interacting with Windows.
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=AE5E57DDDBC9286F75D572CFEE331353
MetadataHash=-598053922
So far it does seem to me either an incompatibility in between the newer and older version of RDP, but if any one of you ever ran into this problem, any help would be greatly appreciated!
Also, don't hesitate to let me know if there are any other details I can provide to help.
Continue reading...
I am running into a hang and crash with RDP in between Windows 10 and Windows Server 2008 R2.
I have an application running as a remote app on the Windows Server 2008 R2 and in certain cases it seems to be hanging when viewing from Windows 10. The weird part is that RDP hangs only in a specific, empty, area of the app when hovering the mouse over it.
When opening the RDP connection again, the application is in the exact same place where it was before.
What makes the problem even harder to investigate is that I cannot replicate the issue locally within my VM, but it is replicable on the production server which is a quite a few hundred miles away (no load balancer or anything alike along the network, we do however have a DNS, but the hang occurs even when using the IP address in the .rdp file).
I have attempted a sfc /scannow but it comes back all clean.
The issue cannot be replicated if using an older version of the RDP on the client such as the one in Windows 7.
The issue cannot be replicate if using a newer version of the RDP on the server such as the one in Windows Server 2016.
A copy of the crash log is attached below, occured in mstsc.exe:
Version=1
EventType=AppHangB1
EventTime=132061039670406543
ReportType=3
Consent=1
UploadTime=132061039692439070
ReportStatus=268435456
ReportIdentifier=1c0c7bcd-f93c-4d03-a1dd-491a896310f4
IntegratorReportIdentifier=604b2c47-57ad-49c5-bce2-cc374e187892
Wow64Host=34404
NsAppName=mstsc.exe
OriginalFilename=mstsc.exe
AppSessionGuid=00000d48-0005-0012-d334-04d4d02cd501
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!00003b3a80b78d15aa647e520be71ead454805049a11!mstsc.exe
TargetAppVer=2091//12//20:00:26:24!38859b!mstsc.exe
BootId=4294967295
TargetAsId=10971
UserImpactVector=269484304
IsFatal=1
EtwNonCollectReason=4
Response.BucketId=5a7ca97d8811c5e453f24109e7853e0b
Response.BucketTable=5
Response.LegacyBucketId=1437282741879389707
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=mstsc.exe
Sig[1].Name=Application Version
Sig[1].Value=10.0.17763.404
Sig[2].Name=Application Timestamp
Sig[2].Value=e56a4c30
Sig[3].Name=Hang Signature
Sig[3].Value=ec7e
Sig[4].Name=Hang Type
Sig[4].Value=134217728
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.17763.2.0.0.768.100
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=2057
DynamicSig[22].Name=Additional Hang Signature 1
DynamicSig[22].Value=ec7eddfdf22d245aeb832973bc1f0d06
DynamicSig[23].Name=Additional Hang Signature 2
DynamicSig[23].Value=440d
DynamicSig[24].Name=Additional Hang Signature 3
DynamicSig[24].Value=440d1b3ed6e1762ce7ade006b8f5e549
DynamicSig[25].Name=Additional Hang Signature 4
DynamicSig[25].Value=ec7e
DynamicSig[26].Name=Additional Hang Signature 5
DynamicSig[26].Value=ec7eddfdf22d245aeb832973bc1f0d06
DynamicSig[27].Name=Additional Hang Signature 6
DynamicSig[27].Value=440d
DynamicSig[28].Name=Additional Hang Signature 7
DynamicSig[28].Value=440d1b3ed6e1762ce7ade006b8f5e549
UI[3]=Remote Desktop Connection is not responding
UI[4]=If you close the program, you might lose information.
UI[5]=Close the program
UI[6]=Close the program
UI[7]=Close the program
LoadedModule[0]=C:\Windows\System32\mstsc.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\System32\ADVAPI32.dll
LoadedModule[5]=C:\Windows\System32\msvcrt.dll
LoadedModule[6]=C:\Windows\System32\sechost.dll
LoadedModule[7]=C:\Windows\System32\RPCRT4.dll
LoadedModule[8]=C:\Windows\System32\GDI32.dll
LoadedModule[9]=C:\Windows\System32\gdi32full.dll
LoadedModule[10]=C:\Windows\System32\msvcp_win.dll
LoadedModule[11]=C:\Windows\System32\ucrtbase.dll
LoadedModule[12]=C:\Windows\System32\USER32.dll
LoadedModule[13]=C:\Windows\System32\win32u.dll
LoadedModule[14]=C:\Windows\System32\ole32.dll
LoadedModule[15]=C:\Windows\System32\combase.dll
LoadedModule[16]=C:\Windows\System32\bcryptPrimitives.dll
LoadedModule[17]=C:\Windows\System32\OLEAUT32.dll
LoadedModule[18]=C:\Windows\System32\SHELL32.dll
LoadedModule[19]=C:\Windows\System32\cfgmgr32.dll
LoadedModule[20]=C:\Windows\System32\shcore.dll
LoadedModule[21]=C:\Windows\System32\windows.storage.dll
LoadedModule[22]=C:\Windows\System32\profapi.dll
LoadedModule[23]=C:\Windows\System32\powrprof.dll
LoadedModule[24]=C:\Windows\System32\shlwapi.dll
LoadedModule[25]=C:\Windows\System32\kernel.appcore.dll
LoadedModule[26]=C:\Windows\System32\cryptsp.dll
LoadedModule[27]=C:\Windows\System32\COMDLG32.dll
LoadedModule[28]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.557_none_05b63f68071e5b9f\COMCTL32.dll
LoadedModule[29]=C:\Windows\System32\CRYPT32.dll
LoadedModule[30]=C:\Windows\System32\MSASN1.dll
LoadedModule[31]=C:\Windows\System32\WS2_32.dll
LoadedModule[32]=C:\Windows\System32\WINHTTP.dll
LoadedModule[33]=C:\Windows\System32\credui.dll
LoadedModule[34]=C:\Windows\System32\Secur32.dll
LoadedModule[35]=C:\Windows\System32\CRYPTUI.dll
LoadedModule[36]=C:\Windows\System32\WINMM.dll
LoadedModule[37]=C:\Windows\System32\NETAPI32.dll
LoadedModule[38]=C:\Windows\System32\WININET.dll
LoadedModule[39]=C:\Windows\System32\ktmw32.dll
LoadedModule[40]=C:\Windows\System32\bcrypt.dll
LoadedModule[41]=C:\Windows\System32\IPHLPAPI.DLL
LoadedModule[42]=C:\Windows\System32\WINMMBASE.dll
LoadedModule[43]=C:\Windows\System32\CRYPTBASE.DLL
LoadedModule[44]=C:\Windows\System32\SSPICLI.DLL
LoadedModule[45]=C:\Windows\System32\NETUTILS.DLL
LoadedModule[46]=C:\Windows\System32\WKSCLI.DLL
LoadedModule[47]=C:\Windows\System32\IMM32.DLL
LoadedModule[48]=C:\Windows\system32\uxtheme.dll
LoadedModule[49]=C:\Windows\System32\MSCTF.dll
LoadedModule[50]=C:\Windows\system32\dwmapi.dll
LoadedModule[51]=C:\Windows\System32\clbcatq.dll
LoadedModule[52]=C:\Windows\SYSTEM32\sxs.dll
LoadedModule[53]=C:\Windows\System32\credssp.dll
LoadedModule[54]=C:\Windows\System32\NTASN1.dll
LoadedModule[55]=C:\Windows\System32\TextInputFramework.dll
LoadedModule[56]=C:\Windows\System32\CoreMessaging.dll
LoadedModule[57]=C:\Windows\System32\CoreUIComponents.dll
LoadedModule[58]=C:\Windows\SYSTEM32\wintypes.dll
LoadedModule[59]=C:\Windows\SYSTEM32\ntmarta.dll
LoadedModule[60]=C:\Windows\system32\Oleacc.dll
LoadedModule[61]=C:\Windows\System32\PROPSYS.dll
LoadedModule[62]=C:\Windows\System32\mstscax.dll
LoadedModule[63]=C:\Windows\System32\SETUPAPI.dll
LoadedModule[64]=C:\Windows\System32\DWrite.dll
LoadedModule[65]=C:\Windows\System32\d2d1.dll
LoadedModule[66]=C:\Windows\System32\ncrypt.dll
LoadedModule[67]=C:\Windows\System32\VERSION.dll
LoadedModule[68]=C:\Windows\System32\d3d11.dll
LoadedModule[69]=C:\Windows\System32\pdh.dll
LoadedModule[70]=C:\Windows\System32\MSACM32.dll
LoadedModule[71]=C:\Windows\System32\dxgi.dll
LoadedModule[72]=C:\Windows\System32\Mf.dll
LoadedModule[73]=C:\Windows\System32\Mfplat.dll
LoadedModule[74]=C:\Windows\System32\RTWorkQ.DLL
LoadedModule[75]=C:\Windows\System32\Mfreadwrite.dll
LoadedModule[76]=C:\Windows\System32\MFCORE.DLL
LoadedModule[77]=C:\Windows\System32\ksuser.dll
LoadedModule[78]=C:\Windows\SYSTEM32\atlthunk.dll
LoadedModule[79]=C:\Windows\system32\explorerframe.dll
LoadedModule[80]=C:\Windows\System32\DEVOBJ.dll
LoadedModule[81]=C:\Windows\System32\WINTRUST.dll
LoadedModule[82]=C:\Windows\System32\MSAudDecMFT.dll
LoadedModule[83]=C:\Windows\System32\mfperfhelper.dll
LoadedModule[84]=C:\Windows\System32\MMDevApi.dll
LoadedModule[85]=C:\Windows\System32\msmpeg2vdec.dll
LoadedModule[86]=C:\Windows\System32\msvproc.dll
LoadedModule[87]=C:\Windows\System32\CompPkgSup.DLL
LoadedModule[88]=C:\Windows\System32\perfos.dll
LoadedModule[89]=C:\Windows\System32\msxml6.dll
LoadedModule[90]=C:\Windows\system32\NLAapi.dll
LoadedModule[91]=C:\Windows\System32\NSI.dll
LoadedModule[92]=C:\Windows\System32\rasadhlp.dll
LoadedModule[93]=C:\Windows\System32\WTSAPI32.dll
LoadedModule[94]=C:\Windows\System32\WINSTA.dll
LoadedModule[95]=C:\Windows\System32\AUDIOSES.DLL
LoadedModule[96]=C:\Windows\System32\AVRT.dll
LoadedModule[97]=C:\Windows\System32\Windows.UI.dll
LoadedModule[98]=C:\Windows\System32\InputHost.dll
LoadedModule[99]=C:\Windows\System32\twinapi.appcore.dll
LoadedModule[100]=C:\Windows\System32\RMCLIENT.dll
LoadedModule[101]=C:\Windows\system32\mswsock.dll
LoadedModule[102]=C:\Windows\SYSTEM32\DNSAPI.dll
LoadedModule[103]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[104]=C:\Windows\SYSTEM32\wincredui.dll
LoadedModule[105]=C:\Windows\System32\coml2.dll
LoadedModule[106]=C:\Windows\System32\OneCoreCommonProxyStub.dll
LoadedModule[107]=C:\Windows\System32\DPAPI.DLL
LoadedModule[108]=C:\Windows\system32\rsaenh.dll
LoadedModule[109]=C:\Windows\system32\schannel.DLL
LoadedModule[110]=C:\Windows\system32\tspkg.DLL
LoadedModule[111]=C:\Windows\SYSTEM32\mskeyprotect.dll
LoadedModule[112]=C:\Windows\system32\ncryptsslp.dll
LoadedModule[113]=C:\Windows\SYSTEM32\gpapi.dll
LoadedModule[114]=C:\Windows\System32\wdmaud.drv
LoadedModule[115]=C:\Windows\System32\msacm32.drv
LoadedModule[116]=C:\Windows\System32\midimap.dll
LoadedModule[117]=C:\Windows\System32\IME\IMEJP\imjpapi.dll
LoadedModule[118]=C:\Windows\SYSTEM32\policymanager.dll
LoadedModule[119]=C:\Windows\SYSTEM32\msvcp110_win.dll
LoadedModule[120]=C:\Windows\System32\winscard.dll
LoadedModule[121]=C:\Windows\System32\WINSPOOL.DRV
LoadedModule[122]=C:\Windows\System32\DriverStore\FileRepository\prnms003.inf_amd64_a337db27fa50b915\Amd64\PrintConfig.dll
LoadedModule[123]=C:\Windows\SYSTEM32\prntvpt.dll
LoadedModule[124]=C:\Windows\SYSTEM32\USERENV.dll
LoadedModule[125]=C:\Windows\SYSTEM32\urlmon.dll
LoadedModule[126]=C:\Windows\System32\iertutil.dll
LoadedModule[127]=C:\Windows\System32\jscript.dll
LoadedModule[128]=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpOav.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=17763
OsInfo[3].Key=ubr
OsInfo[3].Value=557
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=100
OsInfo[9].Key=domain
OsInfo[9].Value=0
OsInfo[10].Key=prodsuite
OsInfo[10].Value=768
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=105221
OsInfo[15].Key=osinsty
OsInfo[15].Value=2
OsInfo[16].Key=iever
OsInfo[16].Value=11.557.17763.0-11.0.130
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=2025
OsInfo[19].Key=svolsz
OsInfo[19].Value=255
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=180914
OsInfo[22].Key=bldtm
OsInfo[22].Value=1434
OsInfo[23].Key=bldbrch
OsInfo[23].Value=rs5_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.17763.557.amd64fre.rs5_release.180914-1434
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=CoreSingleLanguage
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Stopped responding and was closed
ConsentKey=AppHangXProcB1
AppName=Remote Desktop Connection
AppPath=C:\Windows\System32\mstsc.exe
ReportDescription=A problem caused this program to stop interacting with Windows.
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=AE5E57DDDBC9286F75D572CFEE331353
MetadataHash=-598053922
So far it does seem to me either an incompatibility in between the newer and older version of RDP, but if any one of you ever ran into this problem, any help would be greatly appreciated!
Also, don't hesitate to let me know if there are any other details I can provide to help.
Continue reading...