Good Morning - For the past couple of days, I have been having an issue where Windows Explorer will stop responding when I am trying to review information on a Network drive. I use the preview pane because I just need to check some information, not open the entire document. I opened the minidump file in WinDbg but cannot figure out what to do next. I am pasting the output below as I cannot even attach a file without Explorer crashing. If anyone has any suggestions how I can resolve this, I would appreciate it.
Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_explorer.exe_937a24efab76d92a4cefe47bf7608a8083df59_61270739_cab_8375d526-f057-44e4-82ea-8630e2e2c679\minidump.mdmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 19044 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Debug session time: Mon May 23 09:40:26.000 2022 (UTC - 5:00)
System Uptime: 0 days 0:43:16.584
Process Uptime: 0 days 0:40:14.000
................................................................
................................................................
................................................................
................................................................
................................................................
.
Loading unloaded module list
................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(22d0.47e4): Application hang - code cfffffff (first/second chance not available)
win32u!NtUserMsgWaitForMultipleObjectsEx+0x14:
00007ff9`5646a104 c3 ret
0:062> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*** ERROR: Symbol file could not be found. Defaulted to export symbols for hmpalert.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for sppc.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for DropboxExt64.52.0.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for FileSyncShell64.dll -
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.cxr;r)
rax=0000000000001486 rbx=0000000000000001 rcx=0000000000000001
rdx=000000000c21f2f8 rsi=00000000ffffffff rdi=00000000ffffffff
rip=00007ff95646a104 rsp=000000000c21f228 rbp=0000000000000008
r8=00000000000000f2 r9=000000000000003c r10=00000000000000c0
r11=021c61c600385c20 r12=00000000ffffffff r13=0000000000003cff
r14=0000000000000001 r15=0000000016be2810
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000246
win32u!NtUserMsgWaitForMultipleObjectsEx+0x14:
00007ff9`5646a104 c3 ret
FAULTING_IP:
+0
00000000`00000000 ?? ???
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0000000000000000
ExceptionCode: cfffffff (Application hang)
ExceptionFlags: 00000001
NumberParameters: 0
DEFAULT_BUCKET_ID: APPLICATION_HANG
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>
EXCEPTION_CODE_STR: cfffffff
BUGCHECK_STR: APPLICATION_HANG
WATSON_BKT_EVENT: AppHang
WATSON_BKT_MODULE: unknown
WATSON_BKT_MODVER: 0.0.0.0
WATSON_BKT_MODOFFSET: 0
WATSON_BKT_MODSTAMP: bbbbbbb4
WATSON_BKT_PROCSTAMP: 5dbc9541
WATSON_BKT_PROCVER: 10.0.19041.1706
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
BUILD_VERSION_STRING: 10.0.19041.1708 (WinBuild.160101.0800)
MODLIST_WITH_TSCHKSUM_HASH: d40647e251f4a03b0bd77d320ae1ab8ee96e744b
MODLIST_SHA1_HASH: debfef2bc1ff87a7ebac6f76ec1b807939c4a305
NTGLOBALFLAG: 0
PROCESS_BAM_CURRENT_THROTTLED: 0
PROCESS_BAM_PREVIOUS_THROTTLED: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 1
SUITE_MASK: 272
DUMP_FLAGS: 8000294
DUMP_TYPE: 11
MISSING_CLR_SYMBOL: 0
ANALYSIS_SESSION_HOST: FCI-55
ANALYSIS_SESSION_TIME: 05-23-2022 09:54:47.0246
ANALYSIS_VERSION: 10.0.15063.468 amd64fre
MANAGED_CODE: 1
MANAGED_ENGINE_MODULE: clr
MANAGED_ANALYSIS_PROVIDER: SOS
DERIVED_WAIT_CHAIN:
Dl Eid Cid WaitType
-- --- ------- --------------------------
62 22d0.47e4 Unknown
WAIT_CHAIN_COMMAND: ~62s;k;;
THREAD_ATTRIBUTES:
BLOCKING_THREAD: 00000000000047e4
THREAD_SHA1_HASH_MOD_FUNC: 1067f07bb1fccaad73775f73aefe7a4fcfaf7567
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: c2c8c33c3b93a93072554ef8fad6f5edcba82a99
LAST_CONTROL_TRANSFER: from 00007ff95652078e to 00007ff95646a104
FAULTING_THREAD: 000047e4
STACK_TEXT:
00000000`0c21f228 00007ff9`5652078e : 00000000`ffffffff 00007ff8`f2decd4c 00000000`0c21f2c8 00000000`00000018 : win32u!NtUserMsgWaitForMultipleObjectsEx+0x14
00000000`0c21f230 00007ff9`58550b74 : 00000000`16e728f8 00007ff9`584d47b1 00007ff9`351d12b0 00007ff9`5612978b : user32!RealMsgWaitForMultipleObjectsEx+0x1e
00000000`0c21f270 00007ff9`56461064 : 00007ff9`5650a5c3 ffffffff`ffffffff 00000000`00001f84 00000000`00000000 : ntdll!KiUserCallbackDispatcherContinue
00000000`0c21f2e8 00007ff9`5650a5c3 : ffffffff`ffffffff 00000000`00001f84 00000000`00000000 00007ff9`5652dbcc : win32u!NtUserPeekMessage+0x14
00000000`0c21f2f0 00007ff9`5650a523 : 00000000`00000000 00000000`016b25a0 00000000`00000001 00000000`00000000 : user32!_PeekMessage+0x43
00000000`0c21f360 00007ff9`28a2dfbc : 00000000`1767cc70 00000000`00000001 00000000`1767cc70 00000000`00000000 : user32!PeekMessageW+0x143
00000000`0c21f3d0 00007ff9`28a2d557 : 00000000`1767cc70 00000000`1767cc70 00000000`00000000 00000000`00000002 : explorerframe!CExplorerFrame::FrameMessagePump+0x6c
00000000`0c21f4b0 00007ff9`28a2d474 : 00000000`1767cc70 00000000`174523b0 00000000`00000000 00007ff9`54355e0a : explorerframe!BrowserThreadProc+0x9b
00000000`0c21f4e0 00007ff9`28a2d412 : 10125f3f`00000001 00000000`1746b0b0 00000000`00000000 00000000`00000000 : explorerframe!BrowserNewThreadProc+0x4c
00000000`0c21f510 00007ff9`28a1c6a2 : 00000000`00000001 00000000`1753cb98 00000000`1746a390 00000000`1753cb30 : explorerframe!CExplorerTask::InternalResumeRT+0x12
00000000`0c21f540 00007ff9`543544cc : 00000000`00000000 00000000`00000000 00000000`1746a390 00000000`0000000b : explorerframe!CRunnableTask::Run+0xb2
00000000`0c21f580 00007ff9`54354111 : 00000000`16f1e280 ffffffff`fffffffe ffffffff`fffffffe 00000000`0c21f739 : windows_storage!CShellTask::TT_Run+0x3c
00000000`0c21f5b0 00007ff9`543c6034 : 00000000`16f1e280 00000000`16f1e280 00000000`0c21f739 00000000`00000000 : windows_storage!CShellTaskThread::ThreadProc+0xdd
00000000`0c21f660 00007ff9`56c6c3f9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : windows_storage!CShellTaskThread::s_ThreadProc+0x44
00000000`0c21f6c0 00007ff9`57eb7034 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : SHCore!_WrapperThreadProc+0xe9
00000000`0c21f7a0 00007ff9`58502651 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
00000000`0c21f7d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
THREAD_SHA1_HASH_MOD: 226d080dcb09b1155e9cdc199c7ab4a211ec76c2
FOLLOWUP_IP:
win32u!NtUserMsgWaitForMultipleObjectsEx+14
00007ff9`5646a104 c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32u!NtUserMsgWaitForMultipleObjectsEx+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32u
IMAGE_NAME: win32u.dll
DEBUG_FLR_IMAGE_TIMESTAMP: dcd0213
STACK_COMMAND: ~62s ; kb
BUCKET_ID: APPLICATION_HANG_win32u!NtUserMsgWaitForMultipleObjectsEx+14
PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_win32u!NtUserMsgWaitForMultipleObjectsEx+14
FAILURE_EXCEPTION_CODE: cfffffff
FAILURE_IMAGE_NAME: win32u.dll
BUCKET_ID_IMAGE_STR: win32u.dll
FAILURE_MODULE_NAME: win32u
BUCKET_ID_MODULE_STR: win32u
FAILURE_FUNCTION_NAME: NtUserMsgWaitForMultipleObjectsEx
BUCKET_ID_FUNCTION_STR: NtUserMsgWaitForMultipleObjectsEx
BUCKET_ID_OFFSET: 14
BUCKET_ID_MODTIMEDATESTAMP: dcd0213
BUCKET_ID_MODCHECKSUM: 224ae
BUCKET_ID_MODVER_STR: 10.0.19041.1706
BUCKET_ID_PREFIX_STR: APPLICATION_HANG_
FAILURE_PROBLEM_CLASS: APPLICATION_HANG_win32u!NtUserMsgWaitForMultipleObjectsEx+14
FAILURE_SYMBOL_NAME: win32u.dll!NtUserMsgWaitForMultipleObjectsEx
FAILURE_BUCKET_ID: APPLICATION_HANG_cfffffff_win32u.dll!NtUserMsgWaitForMultipleObjectsEx
TARGET_TIME: 2022-05-23T14:40:26.000Z
OSBUILD: 19044
OSSERVICEPACK: 1706
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-08-29 18:59:11
BUILDDATESTAMP_STR: 160101.0800
BUILDLAB_STR: WinBuild
BUILDOSVER_STR: 10.0.19041.1708
ANALYSIS_SESSION_ELAPSED_TIME: 29419
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:application_hang_cfffffff_win32u.dll!ntusermsgwaitformultipleobjectsex
FAILURE_ID_HASH: {d44568b7-4ea6-d9b8-71f9-5e0773589878}
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Critical_explorer.exe_937a24efab76d92a4cefe47bf7608a8083df59_61270739_cab_8375d526-f057-44e4-82ea-8630e2e2c679\minidump.mdmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 19044 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Debug session time: Mon May 23 09:40:26.000 2022 (UTC - 5:00)
System Uptime: 0 days 0:43:16.584
Process Uptime: 0 days 0:40:14.000
................................................................
................................................................
................................................................
................................................................
................................................................
.
Loading unloaded module list
................................................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(22d0.47e4): Application hang - code cfffffff (first/second chance not available)
win32u!NtUserMsgWaitForMultipleObjectsEx+0x14:
00007ff9`5646a104 c3 ret
0:062> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*** ERROR: Symbol file could not be found. Defaulted to export symbols for hmpalert.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for sppc.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for DropboxExt64.52.0.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for FileSyncShell64.dll -
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.cxr;r)
rax=0000000000001486 rbx=0000000000000001 rcx=0000000000000001
rdx=000000000c21f2f8 rsi=00000000ffffffff rdi=00000000ffffffff
rip=00007ff95646a104 rsp=000000000c21f228 rbp=0000000000000008
r8=00000000000000f2 r9=000000000000003c r10=00000000000000c0
r11=021c61c600385c20 r12=00000000ffffffff r13=0000000000003cff
r14=0000000000000001 r15=0000000016be2810
iopl=0 nv up ei pl zr na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000246
win32u!NtUserMsgWaitForMultipleObjectsEx+0x14:
00007ff9`5646a104 c3 ret
FAULTING_IP:
+0
00000000`00000000 ?? ???
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 0000000000000000
ExceptionCode: cfffffff (Application hang)
ExceptionFlags: 00000001
NumberParameters: 0
DEFAULT_BUCKET_ID: APPLICATION_HANG
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xcfffffff - <Unable to get error code text>
EXCEPTION_CODE_STR: cfffffff
BUGCHECK_STR: APPLICATION_HANG
WATSON_BKT_EVENT: AppHang
WATSON_BKT_MODULE: unknown
WATSON_BKT_MODVER: 0.0.0.0
WATSON_BKT_MODOFFSET: 0
WATSON_BKT_MODSTAMP: bbbbbbb4
WATSON_BKT_PROCSTAMP: 5dbc9541
WATSON_BKT_PROCVER: 10.0.19041.1706
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
BUILD_VERSION_STRING: 10.0.19041.1708 (WinBuild.160101.0800)
MODLIST_WITH_TSCHKSUM_HASH: d40647e251f4a03b0bd77d320ae1ab8ee96e744b
MODLIST_SHA1_HASH: debfef2bc1ff87a7ebac6f76ec1b807939c4a305
NTGLOBALFLAG: 0
PROCESS_BAM_CURRENT_THROTTLED: 0
PROCESS_BAM_PREVIOUS_THROTTLED: 0
APPLICATION_VERIFIER_FLAGS: 0
PRODUCT_TYPE: 1
SUITE_MASK: 272
DUMP_FLAGS: 8000294
DUMP_TYPE: 11
MISSING_CLR_SYMBOL: 0
ANALYSIS_SESSION_HOST: FCI-55
ANALYSIS_SESSION_TIME: 05-23-2022 09:54:47.0246
ANALYSIS_VERSION: 10.0.15063.468 amd64fre
MANAGED_CODE: 1
MANAGED_ENGINE_MODULE: clr
MANAGED_ANALYSIS_PROVIDER: SOS
DERIVED_WAIT_CHAIN:
Dl Eid Cid WaitType
-- --- ------- --------------------------
62 22d0.47e4 Unknown
WAIT_CHAIN_COMMAND: ~62s;k;;
THREAD_ATTRIBUTES:
BLOCKING_THREAD: 00000000000047e4
THREAD_SHA1_HASH_MOD_FUNC: 1067f07bb1fccaad73775f73aefe7a4fcfaf7567
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: c2c8c33c3b93a93072554ef8fad6f5edcba82a99
LAST_CONTROL_TRANSFER: from 00007ff95652078e to 00007ff95646a104
FAULTING_THREAD: 000047e4
STACK_TEXT:
00000000`0c21f228 00007ff9`5652078e : 00000000`ffffffff 00007ff8`f2decd4c 00000000`0c21f2c8 00000000`00000018 : win32u!NtUserMsgWaitForMultipleObjectsEx+0x14
00000000`0c21f230 00007ff9`58550b74 : 00000000`16e728f8 00007ff9`584d47b1 00007ff9`351d12b0 00007ff9`5612978b : user32!RealMsgWaitForMultipleObjectsEx+0x1e
00000000`0c21f270 00007ff9`56461064 : 00007ff9`5650a5c3 ffffffff`ffffffff 00000000`00001f84 00000000`00000000 : ntdll!KiUserCallbackDispatcherContinue
00000000`0c21f2e8 00007ff9`5650a5c3 : ffffffff`ffffffff 00000000`00001f84 00000000`00000000 00007ff9`5652dbcc : win32u!NtUserPeekMessage+0x14
00000000`0c21f2f0 00007ff9`5650a523 : 00000000`00000000 00000000`016b25a0 00000000`00000001 00000000`00000000 : user32!_PeekMessage+0x43
00000000`0c21f360 00007ff9`28a2dfbc : 00000000`1767cc70 00000000`00000001 00000000`1767cc70 00000000`00000000 : user32!PeekMessageW+0x143
00000000`0c21f3d0 00007ff9`28a2d557 : 00000000`1767cc70 00000000`1767cc70 00000000`00000000 00000000`00000002 : explorerframe!CExplorerFrame::FrameMessagePump+0x6c
00000000`0c21f4b0 00007ff9`28a2d474 : 00000000`1767cc70 00000000`174523b0 00000000`00000000 00007ff9`54355e0a : explorerframe!BrowserThreadProc+0x9b
00000000`0c21f4e0 00007ff9`28a2d412 : 10125f3f`00000001 00000000`1746b0b0 00000000`00000000 00000000`00000000 : explorerframe!BrowserNewThreadProc+0x4c
00000000`0c21f510 00007ff9`28a1c6a2 : 00000000`00000001 00000000`1753cb98 00000000`1746a390 00000000`1753cb30 : explorerframe!CExplorerTask::InternalResumeRT+0x12
00000000`0c21f540 00007ff9`543544cc : 00000000`00000000 00000000`00000000 00000000`1746a390 00000000`0000000b : explorerframe!CRunnableTask::Run+0xb2
00000000`0c21f580 00007ff9`54354111 : 00000000`16f1e280 ffffffff`fffffffe ffffffff`fffffffe 00000000`0c21f739 : windows_storage!CShellTask::TT_Run+0x3c
00000000`0c21f5b0 00007ff9`543c6034 : 00000000`16f1e280 00000000`16f1e280 00000000`0c21f739 00000000`00000000 : windows_storage!CShellTaskThread::ThreadProc+0xdd
00000000`0c21f660 00007ff9`56c6c3f9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : windows_storage!CShellTaskThread::s_ThreadProc+0x44
00000000`0c21f6c0 00007ff9`57eb7034 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : SHCore!_WrapperThreadProc+0xe9
00000000`0c21f7a0 00007ff9`58502651 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
00000000`0c21f7d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
THREAD_SHA1_HASH_MOD: 226d080dcb09b1155e9cdc199c7ab4a211ec76c2
FOLLOWUP_IP:
win32u!NtUserMsgWaitForMultipleObjectsEx+14
00007ff9`5646a104 c3 ret
FAULT_INSTR_CODE: c32ecdc3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32u!NtUserMsgWaitForMultipleObjectsEx+14
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32u
IMAGE_NAME: win32u.dll
DEBUG_FLR_IMAGE_TIMESTAMP: dcd0213
STACK_COMMAND: ~62s ; kb
BUCKET_ID: APPLICATION_HANG_win32u!NtUserMsgWaitForMultipleObjectsEx+14
PRIMARY_PROBLEM_CLASS: APPLICATION_HANG_win32u!NtUserMsgWaitForMultipleObjectsEx+14
FAILURE_EXCEPTION_CODE: cfffffff
FAILURE_IMAGE_NAME: win32u.dll
BUCKET_ID_IMAGE_STR: win32u.dll
FAILURE_MODULE_NAME: win32u
BUCKET_ID_MODULE_STR: win32u
FAILURE_FUNCTION_NAME: NtUserMsgWaitForMultipleObjectsEx
BUCKET_ID_FUNCTION_STR: NtUserMsgWaitForMultipleObjectsEx
BUCKET_ID_OFFSET: 14
BUCKET_ID_MODTIMEDATESTAMP: dcd0213
BUCKET_ID_MODCHECKSUM: 224ae
BUCKET_ID_MODVER_STR: 10.0.19041.1706
BUCKET_ID_PREFIX_STR: APPLICATION_HANG_
FAILURE_PROBLEM_CLASS: APPLICATION_HANG_win32u!NtUserMsgWaitForMultipleObjectsEx+14
FAILURE_SYMBOL_NAME: win32u.dll!NtUserMsgWaitForMultipleObjectsEx
FAILURE_BUCKET_ID: APPLICATION_HANG_cfffffff_win32u.dll!NtUserMsgWaitForMultipleObjectsEx
TARGET_TIME: 2022-05-23T14:40:26.000Z
OSBUILD: 19044
OSSERVICEPACK: 1706
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2011-08-29 18:59:11
BUILDDATESTAMP_STR: 160101.0800
BUILDLAB_STR: WinBuild
BUILDOSVER_STR: 10.0.19041.1708
ANALYSIS_SESSION_ELAPSED_TIME: 29419
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:application_hang_cfffffff_win32u.dll!ntusermsgwaitformultipleobjectsex
FAILURE_ID_HASH: {d44568b7-4ea6-d9b8-71f9-5e0773589878}
Followup: MachineOwner
---------