explorer.exe keep crashing

Question

Faulting application name: explorer.exe, version: 10.0.19041.1023, time stamp: 0xc438eef0

Faulting module name: ntdll.dll, version: 10.0.19041.1023, time stamp: 0x7977b9de

Exception code: 0xc0000374

Fault offset: 0x00000000000ff199

Faulting process id: 0x1cb4

Faulting application start time: 0x01d76416bc8349c6

Faulting application path: C:\Windows\explorer.exe

Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

Report Id: 647614cd-a2ee-4d6a-9892-f8b9658d1a8f

Faulting package full name: 

Faulting package-relative application ID:

any ideas?

Edition Windows 10 Pro

Version 21H1

Installed on ‎6/‎15/‎2021

OS build 19043.1052

Experience Windows Feature Experience Pack 120.2212.2020.0

Answer 1

Thanks Jim. Please uninstall True Image Lite 2013 by Acronis which should most likely resolve the problem.

*** WARNING: Unable to verify timestamp for tishell64_25_8_39216.dll

Answer 2

OK Here is my system info.

OS Name Microsoft Windows 10 Pro

Version 10.0.19043 Build 19043

Other OS Description Not Available

OS Manufacturer Microsoft Corporation

System Name DESKTOP-J0TUOOC

System Manufacturer HP

System Model HP Pavilion Gaming Laptop 15-dk0xxx

System Type x64-based PC

System SKU 6WC31UA#ABA

Processor Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz, 2400 Mhz, 4 Core(s), 8 Logical Processor(s)

BIOS Version/Date Insyde F.40, 11/4/2020

SMBIOS Version 3.0

Embedded Controller Version 42.46

BIOS Mode UEFI

BaseBoard Manufacturer HP

BaseBoard Product 85FC

BaseBoard Version 42.46

Platform Role Mobile

Secure Boot State On

PCR7 Configuration Binding Not Possible

Windows Directory C:\Windows

System Directory C:\Windows\system32

Boot Device \Device\HarddiskVolume3

Locale United States

Hardware Abstraction Layer Version = "10.0.19041.964"

User Name DESKTOP-J0TUOOC\jrmon

Time Zone Pacific Daylight Time

Installed Physical Memory (RAM) 32.0 GB

Total Physical Memory 31.8 GB

Available Physical Memory 25.9 GB

Total Virtual Memory 36.8 GB

Available Virtual Memory 29.5 GB

Page File Space 5.00 GB

Page File C:\pagefile.sys

Kernel DMA Protection Off

Virtualization-based security Not enabled

Device Encryption Support Reasons for failed automatic device encryption: PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/device(s) detected

Hyper-V - VM Monitor Mode Extensions Yes

Hyper-V - Second Level Address Translation Extensions Yes

Hyper-V - Virtualization Enabled in Firmware Yes

Hyper-V - Data Execution Protection Yes

and here is the dump info https://1drv.ms/u/s!AiD8Dg\_Us9AegcIE3JhIDD2veS9IqQ?e=z3al9c

Answer 3

Hi Jim,

I am Sumit, an Independent Advisor here to assist you.

Let us try creating a user-mode crash dump and see what is wrong.

Via https://answers.microsoft.com/en-us/windows/for...

You can configure Windows to create user-mode dumps. Create a System Restore Point first.

If you copy and paste the following in Notepad and save as a .reg file (save with the .reg extension and give it any name such as dump.reg), then right-click the .reg file and select "Merge" to add to the registry, a .dmp file at the time explorer.exe crashes should be created in the C:\CrashDumps folder:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\explorer.exe]

"DumpFolder"=hex(2):43,00,3a,00,5c,00,43,00,72,00,61,00,73,00,68,00,44,00,75,\

00,6d,00,70,00,73,00,00,00

After Explorer (explorer.exe) crashes, can you then make the .dmp file available (provide link) via a public folder on OneDrive or similar site?