Multiple crashes of Excel

Copper Contributor

I have a brand new build of Windows 10 Pro and Office 2019 (64-bit) all fully patched.  The machine is an i7 3.6 GHz with 32GB RAM and an Intel SSD with plenty of room.  The user was previously using a machine with Windows 7 Pro (64-bit) and Office 2013 (64-bit) with large Excel files.  The user did not have any issues with the previous setup, however with this new machine, it crashes randomly at least once a day.  The text of the .wer file that details the most recent crash  is pasted below and I would appreciate some help deciphering what may be at the root of the crashing.  The crashing happens regardless of the file name or size.  It typically happens when there are multiple Excel files open.  By 'large' files I mean 50 columns by 10,000+ rows.  They are typically around 500K in size.  

 

---Begin Paste---

Version=1
EventType=APPCRASH
EventTime=132302576933231544
ReportType=2
Consent=1
UploadTime=132302576934168961
ReportStatus=268435456
ReportIdentifier=6d76055b-ca0f-44f8-a16a-6bc76928de6f
IntegratorReportIdentifier=58aba439-88b5-436c-ab07-015b3cd11045
Wow64Host=34404
OriginalFilename=Excel.exe
AppSessionGuid=000006e4-0001-0025-8abd-92247e08d601
TargetAppId=W:0006f5f3f40191c8315bdd55b97cfa34537300000000!000072bd586b013fc60a8ff71f5151607e0f7303800d!EXCEL.EXE
TargetAppVer=2020//03//05:06:09:45!35aa583!EXCEL.EXE
BootId=4294967295
TargetAsId=789
UserImpactVector=269484304
IsFatal=4294967295
EtwNonCollectReason=1
Response.BucketId=619b059decb6fec30acd3354abcc1516
Response.BucketTable=4
Response.LegacyBucketId=1931256253964358934
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=EXCEL.EXE
Sig[1].Name=Application Version
Sig[1].Value=16.0.12527.20278
Sig[2].Name=Application Timestamp
Sig[2].Value=5e6097a9
Sig[3].Name=Fault Module Name
Sig[3].Value=EXCEL.EXE
Sig[4].Name=Fault Module Version
Sig[4].Value=16.0.12527.20278
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=5e6097a9
Sig[6].Name=Exception Code
Sig[6].Value=c0000005
Sig[7].Name=Exception Offset
Sig[7].Value=0000000001d65f9c
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.18362.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
UI[2]=C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
LoadedModule[0]=C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\System32\KERNEL32.DLL
LoadedModule[3]=C:\Windows\System32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\SYSTEM32\apphelp.dll
LoadedModule[5]=C:\Windows\System32\ole32.dll
LoadedModule[6]=C:\Windows\System32\combase.dll
LoadedModule[7]=C:\Windows\System32\ucrtbase.dll
LoadedModule[8]=C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
LoadedModule[9]=C:\Windows\System32\RPCRT4.dll
LoadedModule[10]=C:\Windows\System32\bcryptPrimitives.dll
LoadedModule[11]=C:\Windows\System32\advapi32.dll
LoadedModule[12]=C:\Windows\System32\msvcrt.dll
LoadedModule[13]=C:\Windows\System32\USER32.dll
LoadedModule[14]=C:\Windows\System32\sechost.dll
LoadedModule[15]=C:\Windows\System32\win32u.dll
LoadedModule[16]=C:\Windows\System32\GDI32.dll
LoadedModule[17]=C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
LoadedModule[18]=C:\Windows\System32\gdi32full.dll
LoadedModule[19]=C:\Windows\System32\OLEAUT32.dll
LoadedModule[20]=C:\Windows\System32\msvcp_win.dll
LoadedModule[21]=C:\Windows\System32\SHELL32.dll
LoadedModule[22]=C:\Windows\System32\cfgmgr32.dll
LoadedModule[23]=C:\Windows\System32\shcore.dll
LoadedModule[24]=C:\Windows\System32\windows.storage.dll
LoadedModule[25]=C:\Windows\System32\profapi.dll
LoadedModule[26]=C:\Program Files\Microsoft Office\Root\Office16\MSVCP140.dll
LoadedModule[27]=C:\Windows\System32\powrprof.dll
LoadedModule[28]=C:\Program Files\Microsoft Office\Root\Office16\VCRUNTIME140.dll
LoadedModule[29]=C:\Windows\System32\UMPDC.dll
LoadedModule[30]=C:\Windows\System32\shlwapi.dll
LoadedModule[31]=C:\Windows\System32\kernel.appcore.dll
LoadedModule[32]=C:\Windows\System32\cryptsp.dll
LoadedModule[33]=C:\Windows\SYSTEM32\USERENV.dll
LoadedModule[34]=C:\Windows\System32\IMM32.DLL
LoadedModule[35]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso20win32client.dll
LoadedModule[36]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso30win32client.dll
LoadedModule[37]=C:\Windows\SYSTEM32\wevtapi.dll
LoadedModule[38]=C:\Windows\System32\bcrypt.dll
LoadedModule[39]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso40uiwin32client.dll
LoadedModule[40]=C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.30_none_210ac8966535eaa7\gdiplus.dll
LoadedModule[41]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso50win32client.dll
LoadedModule[42]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso98win32client.dll
LoadedModule[43]=C:\Windows\SYSTEM32\WTSAPI32.dll
LoadedModule[44]=C:\Program Files\Common Files\Microsoft Shared\Office16\mso.dll
LoadedModule[45]=C:\Windows\SYSTEM32\VERSION.dll
LoadedModule[46]=C:\Windows\SYSTEM32\msi.dll
LoadedModule[47]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.30_none_a1435978519dce7f\Comctl32.dll
LoadedModule[48]=C:\Windows\SYSTEM32\d2d1.dll
LoadedModule[49]=C:\Windows\system32\uxtheme.dll
LoadedModule[50]=C:\Windows\System32\MSCTF.dll
LoadedModule[51]=C:\Windows\SYSTEM32\WINSTA.dll
LoadedModule[52]=C:\Windows\SYSTEM32\dxgi.dll
LoadedModule[53]=C:\Windows\SYSTEM32\dxcore.dll
LoadedModule[54]=C:\Windows\SYSTEM32\d3d11.dll
LoadedModule[55]=C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e0a5a1b06de180e3\nvldumdx.dll
LoadedModule[56]=C:\Windows\System32\crypt32.dll
LoadedModule[57]=C:\Windows\System32\MSASN1.dll
LoadedModule[58]=C:\Windows\SYSTEM32\cryptnet.dll
LoadedModule[59]=C:\Windows\SYSTEM32\cryptbase.dll
LoadedModule[60]=C:\Windows\System32\WINTRUST.DLL
LoadedModule[61]=C:\Windows\System32\imagehlp.dll
LoadedModule[62]=C:\Windows\System32\clbcatq.dll
LoadedModule[63]=C:\Windows\system32\msimtf.dll
LoadedModule[64]=C:\Windows\SYSTEM32\Secur32.dll
LoadedModule[65]=C:\Windows\SYSTEM32\SSPICLI.DLL
LoadedModule[66]=C:\Windows\System32\netprofm.dll
LoadedModule[67]=C:\Windows\System32\Windows.Security.Authentication.Web.Core.dll
LoadedModule[68]=C:\Windows\SYSTEM32\wintypes.dll
LoadedModule[69]=C:\Windows\system32\rsaenh.dll
LoadedModule[70]=C:\Windows\SYSTEM32\mscoree.dll
LoadedModule[71]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
LoadedModule[72]=C:\Windows\SYSTEM32\DWrite.dll
LoadedModule[73]=C:\Windows\System32\npmproxy.dll
LoadedModule[74]=C:\Program Files\Microsoft Office\Root\Office16\MsoAria.dll
LoadedModule[75]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
LoadedModule[76]=C:\Windows\SYSTEM32\webservices.dll
LoadedModule[77]=C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e0a5a1b06de180e3\nvwgf2umx_cfg.dll
LoadedModule[78]=C:\Windows\SYSTEM32\WINMM.dll
LoadedModule[79]=C:\Windows\SYSTEM32\WINMMBASE.dll
LoadedModule[80]=C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\RICHED20.DLL
LoadedModule[81]=C:\Windows\system32\wbem\wbemprox.dll
LoadedModule[82]=C:\Windows\System32\WS2_32.dll
LoadedModule[83]=C:\Windows\SYSTEM32\wbemcomn.dll
LoadedModule[84]=C:\Windows\System32\iertutil.dll
LoadedModule[85]=C:\Windows\system32\wbem\wbemsvc.dll
LoadedModule[86]=C:\Windows\System32\OneCoreCommonProxyStub.dll
LoadedModule[87]=C:\Windows\system32\wbem\fastprox.dll
LoadedModule[88]=C:\Windows\SYSTEM32\XmlLite.dll
LoadedModule[89]=C:\Windows\SYSTEM32\amsi.dll
LoadedModule[90]=C:\Windows\SYSTEM32\sppc.dll
LoadedModule[91]=C:\Windows\System32\vaultcli.dll
LoadedModule[92]=C:\Program Files\ESET\ESET Security\eamsi.dll
LoadedModule[93]=C:\Windows\System32\Windows.Web.dll
LoadedModule[94]=C:\Windows\SYSTEM32\DPAPI.dll
LoadedModule[95]=C:\Windows\System32\aadWamExtension.dll
LoadedModule[96]=C:\Windows\System32\NSI.dll
LoadedModule[97]=C:\Windows\SYSTEM32\dwmapi.dll
LoadedModule[98]=C:\Program Files\Microsoft Office\Root\Office16\oart.dll
LoadedModule[99]=C:\Windows\System32\twinapi.appcore.dll
LoadedModule[100]=C:\Windows\System32\RMCLIENT.dll
LoadedModule[101]=C:\Windows\system32\twinapi.dll
LoadedModule[102]=C:\Windows\System32\msxml6.dll
LoadedModule[103]=C:\Windows\system32\propsys.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
ProcessMetadata[0].Key=OfficeProcArch
ProcessMetadata[0].Value=x64
ProcessMetadata[1].Key=InstallType
ProcessMetadata[1].Value=2
ProcessMetadata[2].Key=DeviceClass
ProcessMetadata[3].Key=Channel
ProcessMetadata[3].Value=CC
ProcessMetadata[4].Key=AudienceGroup
ProcessMetadata[4].Value=Production
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=18362
OsInfo[3].Key=ubr
OsInfo[3].Value=30
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=244
OsInfo[8].Key=sku
OsInfo[8].Value=48
OsInfo[9].Key=domain
OsInfo[9].Value=1
OsInfo[10].Key=prodsuite
OsInfo[10].Value=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=39167
OsInfo[15].Key=osinsty
OsInfo[15].Value=1
OsInfo[16].Key=iever
OsInfo[16].Value=11.1.18362.0-11.0.110
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=32602
OsInfo[19].Key=svolsz
OsInfo[19].Value=476
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=190318
OsInfo[22].Key=bldtm
OsInfo[22].Value=1202
OsInfo[23].Key=bldbrch
OsInfo[23].Value=19h1_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.18362.30.amd64fre.19h1_release.190318-1202
OsInfo[30].Key=buildflightid
OsInfo[31].Key=edition
OsInfo[31].Value=Professional
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[33].Value=FX:183210E
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Stopped working
ConsentKey=APPCRASH
AppName=Microsoft Excel
AppPath=C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
ApplicationIdentity=00000000000000000000000000000000
MetadataHash=-1540156978

 

---End Paste---

 

Thanks for any help you can provide in solving this issue.

1 Reply

@SCSVCS Did you ever get to the bottom of this? I am suffering with the same issue, looking at the modules you have loaded it appears you have ESET, i do too. Wandering if this could be the cause.