none
IE Crash - Happening Periodically on random machines RRS feed

  • Question

  • First Computer Popped up with this error: 

    Faulting application name: IEXPLORE.EXE, version: 11.0.9600.19463, time stamp: 0x5d648ed1
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

    Exception code: 0xc0000005

    Fault offset: 0x284110e3

    Faulting process id: 0x%9

    Faulting application start time: 0x%10

    Faulting application path: %11

    Faulting module path: %12

    Report Id: %13

    Second Computer: 

    Log Name:      Application
    Source:        Application Error
    Date:          8/14/2019 11:59:47 AM
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      **
    Description:
    Faulting application name: IEXPLORE.EXE, version: 11.0.9600.19400, time stamp: 0x5d084e17
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.24499, time stamp: 0x5d011905
    Exception code: 0xe0434f4d
    Fault offset: 0x0000c5af
    Faulting process id: 0x%9
    Faulting application start time: 0x%10
    Faulting application path: %11
    Faulting module path: %12
    Report Id: %13
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2019-08-14T16:59:47.000000000Z" />
        <EventRecordID>19574</EventRecordID>
        <Channel>Application</Channel>
        <Computer></Computer>
        <Security />
      </System>
      <EventData>
        <Data>IEXPLORE.EXE</Data>
        <Data>11.0.9600.19400</Data>
        <Data>5d084e17</Data>
        <Data>KERNELBASE.dll</Data>
        <Data>6.1.7601.24499</Data>
        <Data>5d011905</Data>
        <Data>e0434f4d</Data>
        <Data>0000c5af</Data>
      </EventData>
    </Event> 

    The crash causes everything on the profile to freeze up. I had to remote in through powershell to kill IE in order to unfreeze the profile. I ran SFC and it did not find anything on either. I deleted the cache within IE as a precaution but this kind of crash has happened multiple times on random computers throughout our organization. I'm not sure what is causing it but would be happy to hear any recommendations as to what might be causing it and what I can do in order to prevent it from happening. 

    • Edited by HsuGoZen1 Monday, September 16, 2019 4:42 PM
    Monday, September 16, 2019 4:39 PM

All replies

  • Hi,

    The problematic module appears to be "unknown":

    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

    I might suggest to obtain a user mode dump of the crash which has the potential to identify the problematic module.

    You can configure Windows to create user-mode dumps. Create a System Restore Point first.

    If you copy and paste the following in Notepad and save as a .reg file (save with the .reg extension and give it any name such as iedump.reg), then right-click the .reg file and select "Merge" to add to the registry, a .dmp file at the time iexplore.exe crashes should be created in the C:\CrashDumps folder:

    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\iexplore.exe]
    "DumpFolder"=hex(2):43,00,3a,00,5c,00,43,00,72,00,61,00,73,00,68,00,44,00,75,\
    00,6d,00,70,00,73,00,00,00


    After Internet Explorer (iexplore.exe) crashes, can you then make the .dmp file available (provide link) via a public folder on OneDrive or similar site?

    Here's a link on using OneDrive:

    http://windows.microsoft.com/en-ca/onedrive/share-file-folder

    More info on collecting user-mode dumps:

    http://msdn.microsoft.com/en-us/library/bb787181(VS.85).aspx

    To stop the creation of the user mode dump files run the following registry file:

    Windows Registry Editor Version 5.00

    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\iexplore.exe]

    You can delete the C:\CrashDumps folder anytime.

    Monday, September 16, 2019 9:12 PM
  • Thanks Auggy,

    I will try to merge this on a few machines to see if I can get a crash somewhere. I'll update as soon as I get some info.

    Tuesday, September 17, 2019 1:36 PM
  • OK, I'll watch for your next post.
    Tuesday, September 17, 2019 8:40 PM