Hello,
Customer is using Excel as part of Office 2016 Click-to-Run build 9126.2275.
End user is opening one particular spreadsheet, which crashes Excel every time data is entered into any cell. Other users are able to open the same spreadsheet with no problems.
Items we have tried:
Office repair, both quick and full. No change.
Uninstalled 32-bit and installed 64-bit. No change.
Disabling Hardware Acceleration, Live Preview, Enable multi-threaded processing, and 'Enable multi-threaded calculation'. No change.
Data -> Workbook Calculation -> set to Manual. No change.
Renamed AppData\Microsoft\Excel folder. No change.
Uninstalled Webroot Antivirus. No change.
Disabled Office updates and rolled back Office to Build 8431.2153 from January. No change.
Tried a different profile on the same machine. Same problem.
As a final resort, I applied a BIOS and dock firmware update I found using Lenovo System Update, along with a couple of driver updates. No change.
Below is the message in the Windows application event logs, along with the .WER file.
"The program EXCEL.EXE version 16.0.9126.2275 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 13a8
Start Time: 01d446ba77ec3d8f
Termination Time: 25
Application Path: C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
Report Id: a857dadb-6d70-445c-984b-25837a2a9d49
Faulting package full name:
Faulting package-relative application ID:
"
---
and
---
"Fault bucket 2268962628103420997, type 5
Event Name: AppHangB1
Response: Not available
Cab Id: 0
Problem signature:
P1: EXCEL.EXE
P2: 16.0.9126.2275
P3: 5b636fd5
P4: 27e8
P5: 134217728
P6:
P7:
P8:
P9:
P10:
Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER188C.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER18AD.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER18BB.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER18DB.tmp.txt
\\?\C:\Users\LAURA~1.JEN\AppData\Local\Temp\{DB6715FD-C0BC-4F73-9037-76642CE2DFBD} - OProcSessId.dat
\\?\C:\Users\Laura.jenkins\AppData\Local\Temp\WER204F.tmp.appcompat.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_EXCEL.EXE_66ef8a03b6fb61cf42d1770d4d703ae4598c15_8ae82b93_4d7b43c3
Analysis symbol:
Rechecking for solution: 0
Report Id: a857dadb-6d70-445c-984b-25837a2a9d49
Report Status: 268435456
Hashed bucket: f7a2923aec37ca35cf7cf97d20bdbc45
Cab Guid: 0"
---
Below is the .WER file mentioned:
Version=1
EventType=AppHangB1
EventTime=131808056314115731
ReportType=3
Consent=1
UploadTime=131808056336174470
ReportStatus=268435456
ReportIdentifier=4dd28f0a-6d35-479f-97fa-d09b4011e1e8
IntegratorReportIdentifier=a857dadb-6d70-445c-984b-25837a2a9d49
Wow64Host=34404
NsAppName=EXCEL.EXE
OriginalFilename=Excel.exe
AppSessionGuid=000013a8-0003-0019-8f3d-ec77ba46d401
TargetAppId=W:00064e7244490988f1c04f66379797727a0900000000!0000fde17757f4c8707203ae97fe02cb6b0708c1a03c!EXCEL.EXE
TargetAppVer=2018//08//02:20:55:49!31d5d49!EXCEL.EXE
BootId=4294967295
TargetAsId=1114
UserImpactVector=269484304
IsFatal=1
Response.BucketId=f7a2923aec37ca35cf7cf97d20bdbc45
Response.BucketTable=5
Response.LegacyBucketId=2268962628103420997
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=EXCEL.EXE
Sig[1].Name=Application Version
Sig[1].Value=16.0.9126.2275
Sig[2].Name=Application Timestamp
Sig[2].Value=5b636fd5
Sig[3].Name=Hang Signature
Sig[3].Value=27e8
Sig[4].Name=Hang Type
Sig[4].Value=134217728
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.17134.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
DynamicSig[22].Name=Additional Hang Signature 1
DynamicSig[22].Value=27e8263ff0b579931c854380541f95db
DynamicSig[23].Name=Additional Hang Signature 2
DynamicSig[23].Value=d8cd
DynamicSig[24].Name=Additional Hang Signature 3
DynamicSig[24].Value=d8cd610bb5fdf81190b0a64b226e089a
DynamicSig[25].Name=Additional Hang Signature 4
DynamicSig[25].Value=27e8
DynamicSig[26].Name=Additional Hang Signature 5
DynamicSig[26].Value=27e8263ff0b579931c854380541f95db
DynamicSig[27].Name=Additional Hang Signature 6
DynamicSig[27].Value=d8cd
DynamicSig[28].Name=Additional Hang Signature 7
DynamicSig[28].Value=d8cd610bb5fdf81190b0a64b226e089a
UI[3]=Microsoft Excel is not responding
UI[4]=If you close the program, it will try to recover your information.
UI[5]=Close the program
UI[6]=Close the program
UI[7]=Close the program
LoadedModule[0]=C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\WINDOWS\System32\KERNEL32.DLL
LoadedModule[3]=C:\WINDOWS\System32\KERNELBASE.dll
LoadedModule[4]=C:\WINDOWS\SYSTEM32\apphelp.dll
LoadedModule[5]=C:\WINDOWS\System32\ole32.dll
LoadedModule[6]=C:\WINDOWS\System32\combase.dll
LoadedModule[7]=C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
LoadedModule[8]=C:\WINDOWS\System32\ucrtbase.dll
LoadedModule[9]=C:\WINDOWS\System32\RPCRT4.dll
LoadedModule[10]=C:\WINDOWS\System32\bcryptPrimitives.dll
LoadedModule[11]=C:\WINDOWS\System32\USER32.dll
LoadedModule[12]=C:\WINDOWS\System32\win32u.dll
LoadedModule[13]=C:\WINDOWS\System32\GDI32.dll
LoadedModule[14]=C:\WINDOWS\System32\gdi32full.dll
LoadedModule[15]=C:\WINDOWS\System32\ADVAPI32.dll
LoadedModule[16]=C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
LoadedModule[17]=C:\WINDOWS\System32\msvcp_win.dll
LoadedModule[18]=C:\WINDOWS\System32\msvcrt.dll
LoadedModule[19]=C:\WINDOWS\System32\OLEAUT32.dll
LoadedModule[20]=C:\WINDOWS\System32\sechost.dll
LoadedModule[21]=C:\WINDOWS\System32\SHELL32.dll
LoadedModule[22]=C:\WINDOWS\System32\cfgmgr32.dll
LoadedModule[23]=C:\WINDOWS\SYSTEM32\VCRUNTIME140.dll
LoadedModule[24]=C:\WINDOWS\SYSTEM32\MSVCP140.dll
LoadedModule[25]=C:\WINDOWS\System32\shcore.dll
LoadedModule[26]=C:\WINDOWS\System32\windows.storage.dll
LoadedModule[27]=C:\WINDOWS\System32\shlwapi.dll
LoadedModule[28]=C:\WINDOWS\System32\kernel.appcore.dll
LoadedModule[29]=C:\WINDOWS\System32\profapi.dll
LoadedModule[30]=C:\WINDOWS\System32\powrprof.dll
LoadedModule[31]=C:\WINDOWS\System32\FLTLIB.DLL
LoadedModule[32]=C:\WINDOWS\SYSTEM32\USERENV.dll
LoadedModule[33]=C:\WINDOWS\System32\IMM32.DLL
LoadedModule[34]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso20win32client.dll
LoadedModule[35]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso30win32client.dll
LoadedModule[36]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso40uiwin32client.dll
LoadedModule[37]=C:\WINDOWS\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.17134.254_none_2c2c8aea8af8c6f9\gdiplus.dll
LoadedModule[38]=C:\WINDOWS\SYSTEM32\dwmapi.dll
LoadedModule[39]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso50win32client.dll
LoadedModule[40]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso98win32client.dll
LoadedModule[41]=C:\WINDOWS\SYSTEM32\WTSAPI32.dll
LoadedModule[42]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso.dll
LoadedModule[43]=C:\WINDOWS\SYSTEM32\VERSION.dll
LoadedModule[44]=C:\WINDOWS\SYSTEM32\msi.dll
LoadedModule[45]=C:\WINDOWS\SYSTEM32\bcrypt.dll
LoadedModule[46]=C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17134.254_none_fb41980530664d2b\Comctl32.dll
LoadedModule[47]=C:\WINDOWS\SYSTEM32\srpapi.dll
LoadedModule[48]=C:\WINDOWS\System32\CRYPT32.dll
LoadedModule[49]=C:\WINDOWS\System32\MSASN1.dll
LoadedModule[50]=C:\WINDOWS\SYSTEM32\d2d1.dll
LoadedModule[51]=C:\WINDOWS\system32\uxtheme.dll
LoadedModule[52]=C:\WINDOWS\System32\MSCTF.dll
LoadedModule[53]=C:\WINDOWS\SYSTEM32\WINSTA.dll
LoadedModule[54]=C:\WINDOWS\SYSTEM32\dxgi.dll
LoadedModule[55]=C:\WINDOWS\SYSTEM32\d3d11.dll
LoadedModule[56]=C:\WINDOWS\SYSTEM32\d3d10warp.dll
LoadedModule[57]=C:\WINDOWS\SYSTEM32\Secur32.dll
LoadedModule[58]=C:\WINDOWS\SYSTEM32\SSPICLI.DLL
LoadedModule[59]=C:\WINDOWS\SYSTEM32\mscoree.dll
LoadedModule[60]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
LoadedModule[61]=C:\WINDOWS\SYSTEM32\DWrite.dll
LoadedModule[62]=C:\WINDOWS\System32\clbcatq.dll
LoadedModule[63]=C:\Program Files\Common Files\Microsoft Shared\Office16\riched20.dll
LoadedModule[64]=C:\WINDOWS\System32\netprofm.dll
LoadedModule[65]=C:\WINDOWS\System32\npmproxy.dll
LoadedModule[66]=C:\WINDOWS\SYSTEM32\webservices.dll
LoadedModule[67]=C:\Program Files\Common Files\Microsoft Shared\Office16\ADAL.DLL
LoadedModule[68]=C:\WINDOWS\SYSTEM32\WINHTTP.dll
LoadedModule[69]=C:\WINDOWS\SYSTEM32\WININET.dll
LoadedModule[70]=C:\WINDOWS\SYSTEM32\ncrypt.dll
LoadedModule[71]=C:\WINDOWS\SYSTEM32\NTASN1.dll
LoadedModule[72]=C:\WINDOWS\SYSTEM32\CRYPTBASE.dll
LoadedModule[73]=C:\WINDOWS\SYSTEM32\DPAPI.dll
LoadedModule[74]=C:\WINDOWS\System32\WS2_32.dll
LoadedModule[75]=C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
LoadedModule[76]=C:\WINDOWS\System32\NSI.dll
LoadedModule[77]=C:\WINDOWS\SYSTEM32\cryptsp.dll
LoadedModule[78]=C:\WINDOWS\SYSTEM32\sppc.dll
LoadedModule[79]=C:\WINDOWS\SYSTEM32\XmlLite.dll
LoadedModule[80]=C:\WINDOWS\SYSTEM32\ntmarta.dll
LoadedModule[81]=C:\WINDOWS\System32\Normaliz.dll
LoadedModule[82]=C:\WINDOWS\system32\rsaenh.dll
LoadedModule[83]=C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
LoadedModule[84]=C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
LoadedModule[85]=C:\WINDOWS\SYSTEM32\urlmon.dll
LoadedModule[86]=C:\WINDOWS\SYSTEM32\iertutil.dll
LoadedModule[87]=C:\Program Files\Microsoft Office\Root\Office16\oart.dll
LoadedModule[88]=C:\Program Files\Microsoft Office\Root\Office16\gfx.dll
LoadedModule[89]=C:\WINDOWS\SYSTEM32\MSIMG32.dll
LoadedModule[90]=C:\Windows\System32\twinapi.appcore.dll
LoadedModule[91]=C:\Windows\System32\RMCLIENT.dll
LoadedModule[92]=C:\WINDOWS\system32\twinapi.dll
LoadedModule[93]=C:\WINDOWS\system32\TextInputFramework.dll
LoadedModule[94]=C:\WINDOWS\system32\CoreUIComponents.dll
LoadedModule[95]=C:\WINDOWS\system32\CoreMessaging.dll
LoadedModule[96]=C:\WINDOWS\SYSTEM32\wintypes.dll
LoadedModule[97]=C:\WINDOWS\SYSTEM32\ondemandconnroutehelper.dll
LoadedModule[98]=C:\WINDOWS\system32\mswsock.dll
LoadedModule[99]=C:\WINDOWS\SYSTEM32\WINNSI.DLL
LoadedModule[100]=C:\WINDOWS\SYSTEM32\webio.dll
LoadedModule[101]=C:\Program Files\Microsoft Office\Root\Office16\chart.dll
LoadedModule[102]=C:\WINDOWS\SYSTEM32\DNSAPI.dll
LoadedModule[103]=C:\Windows\System32\rasadhlp.dll
LoadedModule[104]=C:\WINDOWS\System32\fwpuclnt.dll
LoadedModule[105]=C:\WINDOWS\system32\schannel.DLL
LoadedModule[106]=C:\WINDOWS\SYSTEM32\Cabinet.dll
LoadedModule[107]=C:\WINDOWS\SYSTEM32\mskeyprotect.dll
LoadedModule[108]=C:\WINDOWS\system32\ncryptsslp.dll
LoadedModule[109]=C:\WINDOWS\system32\mlang.dll
LoadedModule[110]=C:\Program Files\Microsoft Office\Root\Office16\MSOHEV.DLL
LoadedModule[111]=C:\Windows\System32\msxml6.dll
LoadedModule[112]=C:\WINDOWS\system32\propsys.dll
LoadedModule[113]=C:\WINDOWS\SYSTEM32\MPR.DLL
LoadedModule[114]=C:\Windows\System32\Windows.StateRepositoryPS.dll
LoadedModule[115]=C:\WINDOWS\System32\coml2.dll
LoadedModule[116]=C:\WINDOWS\system32\dataexchange.dll
LoadedModule[117]=C:\WINDOWS\system32\dcomp.dll
LoadedModule[118]=C:\Program Files\Microsoft Office\Root\Office16\ClientTelemetry.dll
LoadedModule[119]=C:\Windows\System32\Windows.Networking.Connectivity.dll
LoadedModule[120]=C:\WINDOWS\System32\WINTRUST.dll
LoadedModule[121]=C:\Windows\System32\cryptnet.dll
LoadedModule[122]=C:\WINDOWS\system32\directmanipulation.dll
LoadedModule[123]=C:\WINDOWS\SYSTEM32\d3d10_1.dll
LoadedModule[124]=C:\WINDOWS\SYSTEM32\d3d10_1core.dll
LoadedModule[125]=C:\WINDOWS\SYSTEM32\WindowsCodecs.dll
LoadedModule[126]=C:\WINDOWS\SYSTEM32\hlink.dll
LoadedModule[127]=C:\WINDOWS\SYSTEM32\policymanager.dll
LoadedModule[128]=C:\WINDOWS\SYSTEM32\msvcp110_win.dll
LoadedModule[129]=C:\WINDOWS\SYSTEM32\LINKINFO.dll
LoadedModule[130]=C:\WINDOWS\SYSTEM32\ntshrui.dll
LoadedModule[131]=C:\WINDOWS\SYSTEM32\srvcli.dll
LoadedModule[132]=C:\WINDOWS\SYSTEM32\cscapi.dll
LoadedModule[133]=C:\WINDOWS\SYSTEM32\UIAutomationCore.DLL
LoadedModule[134]=C:\WINDOWS\system32\explorerframe.dll
LoadedModule[135]=C:\WINDOWS\SYSTEM32\usp10.dll
LoadedModule[136]=C:\Windows\System32\Windows.Globalization.dll
LoadedModule[137]=C:\Windows\System32\Bcp47Langs.dll
LoadedModule[138]=C:\Windows\System32\bcp47mrm.dll
LoadedModule[139]=C:\WINDOWS\SYSTEM32\globinputhost.dll
LoadedModule[140]=C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
LoadedModule[141]=C:\Windows\System32\AppXDeploymentClient.dll
LoadedModule[142]=C:\Windows\System32\StateRepository.Core.dll
LoadedModule[143]=C:\Windows\System32\OneCoreCommonProxyStub.dll
LoadedModule[144]=C:\Windows\System32\vaultcli.dll
LoadedModule[145]=C:\Windows\System32\aadWamExtension.dll
LoadedModule[146]=C:\Windows\System32\Windows.Web.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=17134
OsInfo[3].Key=ubr
OsInfo[3].Value=254
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=48
OsInfo[9].Key=domain
OsInfo[9].Value=1
OsInfo[10].Key=prodsuite
OsInfo[10].Value=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=143974
OsInfo[15].Key=osinsty
OsInfo[15].Value=3
OsInfo[16].Key=iever
OsInfo[16].Value=11.228.17134.0-11.0.80
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=12162
OsInfo[19].Key=svolsz
OsInfo[19].Value=231
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=180410
OsInfo[22].Key=bldtm
OsInfo[22].Value=1804
OsInfo[23].Key=bldbrch
OsInfo[23].Value=rs4_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.17134.254.amd64fre.rs4_release.180410-1804
OsInfo[30].Key=buildflightid
OsInfo[30].Value=3709b2af-6cbd-4bcc-b21e-a609c8ead78a
OsInfo[31].Key=edition
OsInfo[31].Value=Professional
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Stopped responding and was closed
ConsentKey=AppHangXProcB1
AppName=Microsoft Excel
AppPath=C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
ReportDescription=A problem caused this program to stop interacting with Windows.
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=38F229DD900DE7105A08250661DC0341
MetadataHash=371562066
------
