Collecting crash dump information for Endpoint Agent

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

The Endpoint Agent is crashing I get an error: The exception unknown software exception (0xc000000d) occurred in the application at location 0x1234de56.:edpa.exe - application error.  What do I need to troubleshoot further?

Resolution

I need to collect the crash dump information when this exception occurs to be sent to Technical support.

For the DLP agent, a dump file is created in the C:\Program Files\Manufacturer\Endpoint Agent\MemDumpFiles directory.  If the file is more than 0 bytes, then this is the file needed to investigate the crash.  If it is 0 bytes, the Endpoint agent did not crash, but hung, and we need to get a full memory dump.