C
cmoney0181
I have several users that have an issue with explorer.exe crashing. The only change was, Office 2013 was uninstalled. Explorer.exe will crash intermittently and once the user restarts explorer.exe from the task manager it is fine until the next day when they boot up for the day or restart. Below is the crash info and a dump file from the explorer.exe.
Source
Windows Explorer
Summary
Stopped working
Date
9/16/2019 6:40 AM
Status
Report sent
Description
Faulting Application Path:C:\Windows\explorer.exe
Problem signature
Problem Event Name:APPCRASH
Application Name:Explorer.EXE
Application Version:10.0.14393.2636
Application Timestamp:5bda801e
Fault Module Name:Explorer.EXE
Fault Module Version:10.0.14393.2636
Fault Module Timestamp:5bda801e
Exception Code:c0000005
Exception Offset:0000000000013e62
OS Version:10.0.14393.2.0.0.256.125
Locale ID:1033
Additional Information 1:53f6
Additional Information 2:53f663614145a56a65be04827872d327
Additional Information 3:f9bc
Additional Information 4:f9bc40741583385a0aeff77edf93cabf
Extra information about the problem
Bucket ID:2ad46b7b8ef11889209c52cd2796c3d5 (1196922642059674581)
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
KEY_VALUES_STRING: 1
Key : Timeline.OS.Boot.DeltaSec
Value: 3570
Key : Timeline.Process.Start.DeltaSec
Value: 2676
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
Timeline: !analyze.Start
Name: <blank>
Time: 2019-09-17T13:05:00.893Z
Diff: 841893 mSec
Timeline: Dump.Current
Name: <blank>
Time: 2019-09-17T12:50:59.0Z
Diff: 0 mSec
Timeline: Process.Start
Name: <blank>
Time: 2019-09-17T12:06:23.0Z
Diff: 2676000 mSec
Timeline: OS.Boot
Name: <blank>
Time: 2019-09-17T11:51:29.0Z
Diff: 3570000 mSec
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
FAULTING_IP:
+0
00000000`00000000 ?? ???
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0000000000000000
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 0
FAULTING_THREAD: 00003a5c
BUGCHECK_STR: BREAKPOINT
DEFAULT_BUCKET_ID: BREAKPOINT
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION} Breakpoint A breakpoint has been reached.
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
EXCEPTION_CODE_STR: 80000003
WATSON_BKT_PROCSTAMP: 5d01d1c5
WATSON_BKT_PROCVER: 10.0.14393.3053
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
WATSON_BKT_MODULE: unknown
WATSON_BKT_MODVER: 0.0.0.0
WATSON_BKT_MODOFFSET: 0
WATSON_BKT_MODSTAMP: bbbbbbb4
BUILD_VERSION_STRING: 10.0.14393.2430 (rs1_release_inmarket_aim.180806-1810)
MODLIST_WITH_TSCHKSUM_HASH: 1ccb929c4c2fbd3510555aaaea219803b1e4aab7
MODLIST_SHA1_HASH: 37931143b50be7cc252ac91830df6cab59fcc379
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 1
SUITE_MASK: 272
DUMP_FLAGS: 8000c07
DUMP_TYPE: 3
ANALYSIS_SESSION_HOST: OHCO-24P44M2-LP
ANALYSIS_SESSION_TIME: 09-17-2019 09:05:00.0893
ANALYSIS_VERSION: 10.0.18362.1 x86fre
THREAD_ATTRIBUTES:
OS_LOCALE: ENU
PRIMARY_PROBLEM_CLASS: BREAKPOINT
PROBLEM_CLASSES:
ID: [0n321]
Type: [@APPLICATION_FAULT_STRING]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Omit
Data: Add
String: [BREAKPOINT]
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]
LAST_CONTROL_TRANSFER: from 00007ffc0bfc4c54 to 00007ffc0a601224
STACK_TEXT:
00000000`006bf3d8 00007ffc`0bfc4c54 : 00000000`00960c00 00000000`006bf450 00000000`0095e7e0 00000000`0095e7e0 : win32u!NtUserWaitMessage+0x14
00000000`006bf3e0 00007ffc`0bf34099 : 00000000`00000000 00000000`0095e7e0 00000000`00000001 00000000`00002000 : shell32!CDesktopBrowser::_MessageLoop+0x74
00000000`006bf480 00007ff6`ff3a148c : 00000000`0095e7e0 00000000`000005c8 00000000`0095e7e0 00000000`006bf700 : shell32!SHDesktopMessageLoop+0x39
00000000`006bf4b0 00007ff6`ff430917 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`0000001f : explorer!wWinMain+0x714
00000000`006bf7c0 00007ffc`0d8684d4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : explorer!__wmainCRTStartup+0x1c7
00000000`006bf880 00007ffc`0e0de851 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
00000000`006bf8b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
STACK_COMMAND: ~0s; .ecxr ; kb
THREAD_SHA1_HASH_MOD_FUNC: fa08e481c084bfdc7905396d9b216b270b27ec07
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 7587d93df04e5c682b7aa2f4c052d9b241115c79
THREAD_SHA1_HASH_MOD: f7d376f4069cb71f7c0d2a913d9427cdb45bb5cc
FOLLOWUP_IP:
win32u!NtUserWaitMessage+14
00007ffc`0a601224 c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32u!NtUserWaitMessage+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32u
IMAGE_NAME: win32u.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 57a05800
BUCKET_ID: BREAKPOINT_win32u!NtUserWaitMessage+14
FAILURE_EXCEPTION_CODE: 80000003
FAILURE_IMAGE_NAME: win32u.dll
BUCKET_ID_IMAGE_STR: win32u.dll
FAILURE_MODULE_NAME: win32u
BUCKET_ID_MODULE_STR: win32u
FAILURE_FUNCTION_NAME: NtUserWaitMessage
BUCKET_ID_FUNCTION_STR: NtUserWaitMessage
BUCKET_ID_OFFSET: 14
BUCKET_ID_MODTIMEDATESTAMP: 57a05800
BUCKET_ID_MODCHECKSUM: 22f84
BUCKET_ID_MODVER_STR: 10.0.14393.51
BUCKET_ID_PREFIX_STR: BREAKPOINT_
FAILURE_PROBLEM_CLASS: BREAKPOINT
FAILURE_SYMBOL_NAME: win32u.dll!NtUserWaitMessage
FAILURE_BUCKET_ID: BREAKPOINT_80000003_win32u.dll!NtUserWaitMessage
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...0.0/bbbbbbb4/80000003/00000000.htm?Retriage=1
TARGET_TIME: 2019-09-17T12:50:59.000Z
OSBUILD: 14393
OSSERVICEPACK: 2969
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: 2019-05-04 00:40:41
BUILDDATESTAMP_STR: 180806-1810
BUILDLAB_STR: rs1_release_inmarket_aim
BUILDOSVER_STR: 10.0.14393.2430
ANALYSIS_SESSION_ELAPSED_TIME: 544b
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:breakpoint_80000003_win32u.dll!ntuserwaitmessage
FAILURE_ID_HASH: {a106cd41-a8b1-c51d-6d94-a75661270841}
Followup: MachineOwner
Continue reading...
Source
Windows Explorer
Summary
Stopped working
Date
9/16/2019 6:40 AM
Status
Report sent
Description
Faulting Application Path:C:\Windows\explorer.exe
Problem signature
Problem Event Name:APPCRASH
Application Name:Explorer.EXE
Application Version:10.0.14393.2636
Application Timestamp:5bda801e
Fault Module Name:Explorer.EXE
Fault Module Version:10.0.14393.2636
Fault Module Timestamp:5bda801e
Exception Code:c0000005
Exception Offset:0000000000013e62
OS Version:10.0.14393.2.0.0.256.125
Locale ID:1033
Additional Information 1:53f6
Additional Information 2:53f663614145a56a65be04827872d327
Additional Information 3:f9bc
Additional Information 4:f9bc40741583385a0aeff77edf93cabf
Extra information about the problem
Bucket ID:2ad46b7b8ef11889209c52cd2796c3d5 (1196922642059674581)
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
KEY_VALUES_STRING: 1
Key : Timeline.OS.Boot.DeltaSec
Value: 3570
Key : Timeline.Process.Start.DeltaSec
Value: 2676
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
Timeline: !analyze.Start
Name: <blank>
Time: 2019-09-17T13:05:00.893Z
Diff: 841893 mSec
Timeline: Dump.Current
Name: <blank>
Time: 2019-09-17T12:50:59.0Z
Diff: 0 mSec
Timeline: Process.Start
Name: <blank>
Time: 2019-09-17T12:06:23.0Z
Diff: 2676000 mSec
Timeline: OS.Boot
Name: <blank>
Time: 2019-09-17T11:51:29.0Z
Diff: 3570000 mSec
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
FAULTING_IP:
+0
00000000`00000000 ?? ???
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0000000000000000
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 0
FAULTING_THREAD: 00003a5c
BUGCHECK_STR: BREAKPOINT
DEFAULT_BUCKET_ID: BREAKPOINT
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION} Breakpoint A breakpoint has been reached.
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
EXCEPTION_CODE_STR: 80000003
WATSON_BKT_PROCSTAMP: 5d01d1c5
WATSON_BKT_PROCVER: 10.0.14393.3053
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
WATSON_BKT_MODULE: unknown
WATSON_BKT_MODVER: 0.0.0.0
WATSON_BKT_MODOFFSET: 0
WATSON_BKT_MODSTAMP: bbbbbbb4
BUILD_VERSION_STRING: 10.0.14393.2430 (rs1_release_inmarket_aim.180806-1810)
MODLIST_WITH_TSCHKSUM_HASH: 1ccb929c4c2fbd3510555aaaea219803b1e4aab7
MODLIST_SHA1_HASH: 37931143b50be7cc252ac91830df6cab59fcc379
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 1
SUITE_MASK: 272
DUMP_FLAGS: 8000c07
DUMP_TYPE: 3
ANALYSIS_SESSION_HOST: OHCO-24P44M2-LP
ANALYSIS_SESSION_TIME: 09-17-2019 09:05:00.0893
ANALYSIS_VERSION: 10.0.18362.1 x86fre
THREAD_ATTRIBUTES:
OS_LOCALE: ENU
PRIMARY_PROBLEM_CLASS: BREAKPOINT
PROBLEM_CLASSES:
ID: [0n321]
Type: [@APPLICATION_FAULT_STRING]
Class: Primary
Scope: DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
BUCKET_ID
Name: Omit
Data: Add
String: [BREAKPOINT]
PID: [Unspecified]
TID: [Unspecified]
Frame: [0]
LAST_CONTROL_TRANSFER: from 00007ffc0bfc4c54 to 00007ffc0a601224
STACK_TEXT:
00000000`006bf3d8 00007ffc`0bfc4c54 : 00000000`00960c00 00000000`006bf450 00000000`0095e7e0 00000000`0095e7e0 : win32u!NtUserWaitMessage+0x14
00000000`006bf3e0 00007ffc`0bf34099 : 00000000`00000000 00000000`0095e7e0 00000000`00000001 00000000`00002000 : shell32!CDesktopBrowser::_MessageLoop+0x74
00000000`006bf480 00007ff6`ff3a148c : 00000000`0095e7e0 00000000`000005c8 00000000`0095e7e0 00000000`006bf700 : shell32!SHDesktopMessageLoop+0x39
00000000`006bf4b0 00007ff6`ff430917 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`0000001f : explorer!wWinMain+0x714
00000000`006bf7c0 00007ffc`0d8684d4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : explorer!__wmainCRTStartup+0x1c7
00000000`006bf880 00007ffc`0e0de851 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
00000000`006bf8b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
STACK_COMMAND: ~0s; .ecxr ; kb
THREAD_SHA1_HASH_MOD_FUNC: fa08e481c084bfdc7905396d9b216b270b27ec07
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 7587d93df04e5c682b7aa2f4c052d9b241115c79
THREAD_SHA1_HASH_MOD: f7d376f4069cb71f7c0d2a913d9427cdb45bb5cc
FOLLOWUP_IP:
win32u!NtUserWaitMessage+14
00007ffc`0a601224 c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32u!NtUserWaitMessage+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32u
IMAGE_NAME: win32u.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 57a05800
BUCKET_ID: BREAKPOINT_win32u!NtUserWaitMessage+14
FAILURE_EXCEPTION_CODE: 80000003
FAILURE_IMAGE_NAME: win32u.dll
BUCKET_ID_IMAGE_STR: win32u.dll
FAILURE_MODULE_NAME: win32u
BUCKET_ID_MODULE_STR: win32u
FAILURE_FUNCTION_NAME: NtUserWaitMessage
BUCKET_ID_FUNCTION_STR: NtUserWaitMessage
BUCKET_ID_OFFSET: 14
BUCKET_ID_MODTIMEDATESTAMP: 57a05800
BUCKET_ID_MODCHECKSUM: 22f84
BUCKET_ID_MODVER_STR: 10.0.14393.51
BUCKET_ID_PREFIX_STR: BREAKPOINT_
FAILURE_PROBLEM_CLASS: BREAKPOINT
FAILURE_SYMBOL_NAME: win32u.dll!NtUserWaitMessage
FAILURE_BUCKET_ID: BREAKPOINT_80000003_win32u.dll!NtUserWaitMessage
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...0.0/bbbbbbb4/80000003/00000000.htm?Retriage=1
TARGET_TIME: 2019-09-17T12:50:59.000Z
OSBUILD: 14393
OSSERVICEPACK: 2969
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: 2019-05-04 00:40:41
BUILDDATESTAMP_STR: 180806-1810
BUILDLAB_STR: rs1_release_inmarket_aim
BUILDOSVER_STR: 10.0.14393.2430
ANALYSIS_SESSION_ELAPSED_TIME: 544b
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:breakpoint_80000003_win32u.dll!ntuserwaitmessage
FAILURE_ID_HASH: {a106cd41-a8b1-c51d-6d94-a75661270841}
Followup: MachineOwner
Continue reading...