Windows 10 Windows 10 - File Explorer Crashing

[kevinahn5490]

Greetings,

I know there are a few threads already but i have the Event Error and DMP file. Any help would be greatly appreciated as to what the cause is.

Thanks!



Faulting application name: explorer.exe, version: 10.0.16299.125, time stamp: 0xfeba44fb
Faulting module name: SHELL32.dll, version: 10.0.16299.125, time stamp: 0xe6e6e926
Exception code: 0xc0000005
Fault offset: 0x000000000010b6c0
Faulting process id: 0x3008
Faulting application start time: 0x01d45bd7db283e04
Faulting application path: C:\Windows\explorer.exe
Faulting module path: C:\Windows\System32\SHELL32.dll
Report Id: 6382cff3-07eb-4c5c-9e8f-be529ca1e05d
Faulting package full name:
Faulting package-relative application ID:



Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (OSR Homepage - OSR)
Online Crash Dump Analysis Service
See OSR Online - The Home Page for Windows Driver Developers for more information
Windows 8 Version 16299 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
kernel32.dll version: 10.0.16299.0 (WinBuild.160101.0800)
Machine Name:
Debug session time: Thu Oct 4 07:56:22.000 2018 (UTC - 4:00)
System Uptime: not available
Process Uptime: 0 days 0:06:18.000
Kernel time: 0 days 0:00:04.000
User time: 0 days 0:00:01.000
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2
TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2
*** WARNING: Unable to verify timestamp for sppc.dll
*** ERROR: Module load completed but symbols could not be loaded for sppc.dll
*** WARNING: Unable to verify timestamp for inputhost.dll
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
GetUrlPageData2 (WinHttp) failed: 12029.
*** The OS name list needs to be updated! Unknown Windows version: 10.0 ***

FAULTING_IP:
shell32!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting+50
00007ffd`1727b6c0 6644396f0c cmp word ptr [rdi+0Ch],r13w

EXCEPTION_RECORD: ffffffffffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00007ffd1727b6c0 (shell32!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting+0x0000000000000050)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 00000000769afcef
Attempt to read from address 00000000769afcef

DEFAULT_BUCKET_ID: INVALID_POINTER_READ

PROCESS_NAME: explorer.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 00000000769afcef

READ_ADDRESS: 00000000769afcef

FOLLOWUP_IP:
shell32!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting+50
00007ffd`1727b6c0 6644396f0c cmp word ptr [rdi+0Ch],r13w

NTGLOBALFLAG: 400

APPLICATION_VERIFIER_FLAGS: 0

FAULTING_THREAD: 00000000000033e4

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER: from 00007ffd171d7f48 to 00007ffd1727b6c0

STACK_TEXT:
00000000`080ff730 00007ffd`171d7f48 : 00000000`133798f0 00000000`133798f0 00000000`1337a190 00007ffd`171d7d00 : shell32!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting+0x50
00000000`080ff9b0 00007ffd`171d7e97 : 00000000`00000000 00000000`133798f0 00000000`00000027 00000000`00000000 : shell32!FileSystemInterruptSource::v_ResetHandle+0x68
00000000`080ffa10 00007ffd`171daa52 : 00000000`0a3c5a50 00000000`00000200 00000000`00000020 00000000`00000008 : shell32!FileSystemInterruptSource::Reset+0x37
00000000`080ffa40 00007ffd`171da692 : 00000000`00000027 00000000`055c5630 00000000`00000000 00000000`080ffbe0 : shell32!CChangeNotify::_SignalInterrupt+0x2b2
00000000`080ffae0 00007ffd`171a4d70 : 00000000`055c5630 00000000`055c5630 00007ffd`176b82c0 00000000`00000000 : shell32!CChangeNotify::_MessagePump+0x692
00000000`080ffc00 00007ffd`18bfd575 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : shell32!CChangeNotify::s_ThreadProc+0x130
00000000`080ffca0 00007ffd`16f81fe4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : SHCore!_WrapperThreadProc+0xf5
00000000`080ffd80 00007ffd`1920ef91 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
00000000`080ffdb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21


SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: shell32!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting+50

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: shell32

IMAGE_NAME: shell32.dll

DEBUG_FLR_IMAGE_TIMESTAMP: 0

STACK_COMMAND: ~13s; .ecxr ; kb

FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_shell32.dll!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting

BUCKET_ID: X64_APPLICATION_FAULT_INVALID_POINTER_READ_shell32!FileSystemInterruptSource::QueueDirectoryChangesAndCheckDeleting+50

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOn...125/e6e6e926/c0000005/0010b6c0.htm?Retriage=1

Followup: MachineOwner

More...