Windows Server 2019, Event ID 1000 and Event ID 1026, powershell.exe or .NET error, KERNELBASE.dll

[Justine Gumba]

Few weeks after deploying October Patches, Scripts to with Arguments:"Powershell.exe""ExecutionPolicy (X) -File (xxx\yyy\zzz.ps1"are not working anymore. Error states: "Unhandled Exception: System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt." We can see event ID 1000 and event ID 1026. 1000:Faulting application name: powershell.exe , version: 10.0.17763.1 Faulting module name: KERNELBASE.dll, version 10.0.177763.3532Exception code: 0xc0000005Faulting application path: C:\Windows\System32\WindowsPowerShell\v1.0\

Continue reading...