Share via


SystemSettings.exe crashing on multiple computers

Question

Monday, February 3, 2020 3:09 AM

A number of users are complaining they are unable to open display settings - Either Right Click > Display settings or Start > Run > ms-settings:display. A window opens with a blue cog icon and closes after 2-3 settings. 

In Event Viewer:

Faulting application name: SystemSettings.exe, version: 10.0.18362.449, time stamp: 0x066bf1a5
Faulting module name: msvcrt.dll, version: 7.0.18362.1, time stamp: 0xf5bdefd7
Exception code: 0x40000015
Fault offset: 0x000000000000ae72
Faulting process id: 0x1de8
Faulting application start time: 0x01d5da30f490442b
Faulting application path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
Faulting module path: C:\WINDOWS\System32\msvcrt.dll
Report Id: ab3c8a46-7aeb-4ed5-a7bc-7699fab3a220
Faulting package full name: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h4txyewy
Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel

Have tried all of the suggested fixes for this problem on forums - NONE OF THEM WORK:

1. Run sfc /scannow (doesn't find any corruption)

2. 

DISM.exe /Online /Cleanup-image /Scanhealth
DISM.exe /Online /Cleanup-image /Restorehealth

3. Disabling antivirus 

4. Creating a new local profile - Happens when logged on as local admin or domain user

5. Deleting the C:\Windows\ImmersiveControlPanel folder and running sfc /scannow to recreate it.

All of the affected computers have latest Windows updates installed - This is happening on Windows 10 1809, 1903 & 1909 machines. 

Please advise how to fix this problem.

All replies (24)

Tuesday, February 25, 2020 7:03 PM ✅Answered | 5 votes

I just resolved this issue in a VM to troubleshoot this extremely frustrating display window bug; Two services need to run; network connections broker and Connected Devices Platform Service (we really just need CDPS, but NCB is its dependency). Previously on all my builds, both these services are deliberately disabled - this nightime mode functionality changes the game. In my testing this appears to be a "run once" deal with these services enabled. Once you get the display settings window to launch, you can go back and disable both these services and it will still continue to work.

Other services that you previously disable may be in play too - YMMV

July edit: It appears the Network List Service is now also a dependency of Network Connections Broker to function. A new VM instance kept getting error 31 when trying to start the NCB.


Monday, February 3, 2020 3:14 AM

I have also tried running an in-place upgrade and doing a system repair from fresh .ISO images for the respective Windows 10 versions - also did not work. 


Monday, February 3, 2020 5:25 AM

Does the crash also happen when booted in Safe Mode?
"3. Disabling antivirus " so is some 3rd party Antivirus installed? Sometimes disabling is not enough, try if a complete uninstall prevents the problem.
You could activate writing of user mode dumps for the process by importing a registry file with the content:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SystemSettings.exe]
"DumpType"=dword:00000001

After the next crash: upload the dmp file from %LOCALAPPDATA%\CrashDumps to OneDrive, then post a link.


Monday, February 3, 2020 5:33 AM

This actually just happened on both a 1903 and 1909 fresh install on a brand new computer - so that rules out the antivirus being part of the problem. 

EDIT: To clarify - 

- Computer had not been joined to domain

- No software had been installed

- Only Windows updates that were installed were during Windows 10 setup before loading into the OS where it says "We're getting Windows ready for you" 

systemsettings.exe app immediately crashed as soon as i logged in for the first time. 


Monday, February 3, 2020 5:45 AM

Please see below for output after analyzing crash dump with Windbg:

Loading unloaded module list
...
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(7e8.3d78): Unknown exception - code 40000015 (first/second chance not available)
For analysis of this file, run !analyze -v
ntdll!NtWaitForMultipleObjects+0x14:
00007ffd`4943cc14 c3              ret
0:011> !analyze -v
*******************************************************************************
*                                                                             *
*                        Exception Analysis                                   *
*                                                                             *
*******************************************************************************

*** WARNING: Unable to verify timestamp for sppc.dll

KEY_VALUES_STRING: 1

    Key  : Timeline.Process.Start.DeltaSec
    Value: 2

PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1

Timeline: !analyze.Start
    Name: <blank>
    Time: 2020-02-03T05:39:41.299Z
    Diff: 1594299 mSec

Timeline: Dump.Current
    Name: <blank>
    Time: 2020-02-03T05:13:07.0Z
    Diff: 0 mSec

Timeline: Process.Start
    Name: <blank>
    Time: 2020-02-03T05:13:05.0Z
    Diff: 2000 mSec

DUMP_CLASS: 2

DUMP_QUALIFIER: 400

CONTEXT:  00007ffd493a0000 -- (.cxr 0x7ffd493a0000)
Unable to read context, Win32 error 0n30
Resetting default scope

FAULTING_IP: 
msvcrt!terminate+22
00007ffd`4929ae72 90              nop

EXCEPTION_RECORD:  8000000000000000 -- (.exr 0x8000000000000000)
Cannot read Exception record @ 8000000000000000

BUGCHECK_STR:  FATAL_APP_EXIT

DEFAULT_BUCKET_ID:  FATAL_APP_EXIT

PROCESS_NAME:  SystemSettings.exe

ERROR_CODE: (NTSTATUS) 0x40000015 - {Fatal Application Exit}  %hs

EXCEPTION_CODE: (NTSTATUS) 0x40000015 (1073741845) - {Fatal Application Exit}  %hs

EXCEPTION_CODE_STR:  40000015

WATSON_BKT_PROCSTAMP:  66bf1a5

WATSON_BKT_PROCVER:  10.0.18362.628

PROCESS_VER_PRODUCT:  Microsoft® Windows® Operating System

WATSON_BKT_MODULE:  msvcrt.dll

WATSON_BKT_MODSTAMP:  f5bdefd7

WATSON_BKT_MODOFFSET:  ae72

WATSON_BKT_MODVER:  7.0.18362.1

MODULE_VER_PRODUCT:  Microsoft® Windows® Operating System

BUILD_VERSION_STRING:  18362.1.amd64fre.19h4_release.190318-1202

MODLIST_WITH_TSCHKSUM_HASH:  1368b20ec5d06b652c625133573897e33037858e

MODLIST_SHA1_HASH:  9ea3d9c3dc60e32f49717cabd899b4ab67932973

NTGLOBALFLAG:  0

PROCESS_BAM_CURRENT_THROTTLED: 0

PROCESS_BAM_PREVIOUS_THROTTLED: 0

APPLICATION_VERIFIER_FLAGS:  0

DUMP_FLAGS:  94

DUMP_TYPE:  1

ANALYSIS_SESSION_HOST:  PC468

ANALYSIS_SESSION_TIME:  02-03-2020 16:39:41.0299

ANALYSIS_VERSION: 10.0.18362.1 x86fre

THREAD_ATTRIBUTES: 
OS_LOCALE:  ENA

PRIMARY_PROBLEM_CLASS:  FATAL_APP_EXIT

PROBLEM_CLASSES: 

    ID:     [0n321]
    Type:   [@APPLICATION_FAULT_STRING]
    Class:  Primary
    Scope:  DEFAULT_BUCKET_ID (Failure Bucket ID prefix)
            BUCKET_ID
    Name:   Omit
    Data:   Add
            String: [FATAL_APP_EXIT]
    PID:    [Unspecified]
    TID:    [Unspecified]
    Frame:  [0]

LAST_CONTROL_TRANSFER:  from 00007ffd46ca8027 to 00007ffd4943cc14

STACK_TEXT:  
000000f4`da0f8eb8 00007ffd`46ca8027 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!NtWaitForMultipleObjects+0x14
000000f4`da0f8ec0 00007ffd`46ca7f0e : 00000000`00000c50 00000000`00000096 00000000`d000022d 00000000`d000022d : KERNELBASE!WaitForMultipleObjectsEx+0x107
000000f4`da0f91c0 00007ffd`475871fb : 00000000`00000000 00000000`00000001 000000f4`da0f94a0 00000000`00000096 : KERNELBASE!WaitForMultipleObjects+0xe
000000f4`da0f9200 00007ffd`47586ca8 : 00000000`00000000 00000000`00000000 00000000`00000003 000000f4`da0f94a0 : kernel32!WerpReportFaultInternal+0x51b
000000f4`da0f9320 00007ffd`46d4f868 : 00000000`00000000 000000f4`da0ff530 00007ffd`47520000 000000f4`da0f9a10 : kernel32!WerpReportFault+0xac
000000f4`da0f9360 00007ffd`492bf2f3 : 00000000`00000000 00000000`00000000 00007ff6`4a404100 00000000`00000000 : KERNELBASE!UnhandledExceptionFilter+0x3b8
000000f4`da0f9480 00007ffd`4929ae72 : 00000000`0001a000 00000000`00003000 00000000`00000000 00007ff6`4a404000 : msvcrt!abort+0x83
000000f4`da0f9a30 00007ff6`4a404131 : 00000000`00001000 00000020`00001000 00000000`01000000 000000f4`da0ff56c : msvcrt!terminate+0x22
000000f4`da0f9a60 00007ffd`46d4f69a : 00000000`00000000 00007ff6`4a404100 00000000`00000000 000000f4`da0f9c09 : SystemSettings_exe!__CxxUnhandledExceptionFilter+0x31
000000f4`da0f9a90 00007ffd`494af109 : 00000000`00000000 00007ffd`46d4f4b0 000000f4`da0ff56c 000000f4`da0f9be0 : KERNELBASE!UnhandledExceptionFilter+0x1ea
000000f4`da0f9bb0 00007ffd`494afc1e : 00007ffd`494df980 000000f4`da0ff530 000000f4`da0f9be0 00007ffd`00000000 : ntdll!TppExceptionFilter+0x75
000000f4`da0f9bf0 00007ffd`49443cfe : 00007ffd`494df980 00000000`0000000c 000000f4`da0facd0 000000f4`da0fa2c0 : ntdll!TppWorkerpInnerExceptionFilter+0x1a
000000f4`da0f9c20 00007ffd`4942c6d6 : 000000f4`da0fa480 00000000`00000000 00007ffd`04059bc8 00007ffd`472d5a00 : ntdll!TppWorkerThread$filt$5+0x19
000000f4`da0f9c60 00007ffd`4943bcae : 00007ffd`494dfa40 000000f4`da0facd0 000000f4`da0ff530 000000f4`da0ff530 : ntdll!_C_specific_handler+0x96
000000f4`da0f9cd0 00007ffd`494411ff : 00000000`00000000 000000f4`da0fa270 000000f4`da0facd0 00000000`00000001 : ntdll!_GSHandlerCheck_SEH+0x6a
000000f4`da0f9d00 00007ffd`4940a289 : 000000f4`00000001 00007ffd`493a0000 00000000`00000000 00007ffd`4950cbfc : ntdll!RtlpExecuteHandlerForException+0xf
000000f4`da0f9d30 00007ffd`4940a043 : 80000000`00000000 00007ffd`493a0000 00000000`00000000 00007ffd`4950e81c : ntdll!RtlDispatchException+0x219
000000f4`da0fa440 00007ffd`46c8a839 : 00000000`00000000 000000f4`da0fca40 000000f4`da0fd290 00007ffd`0400362d : ntdll!RtlRaiseException+0x153
000000f4`da0facb0 00007ffd`472cca31 : 00007ffd`04048397 000000f4`da0fc0f8 00000000`00000100 00000000`00000000 : KERNELBASE!RaiseException+0x69
000000f4`da0fad90 00007ffd`49440646 : 00007ffd`00000000 000000f4`da0fd290 00000000`00000000 00000000`00000000 : ucrtbase!__FrameHandler3::CxxCallCatchBlock+0x151
000000f4`da0fae40 00007ffd`0400382e : 00000000`00000000 000000f4`da0ff080 000000f4`da0ff080 00000000`00000000 : ntdll!RcConsolidateFrames+0x6
000000f4`da0fed30 00007ffd`04023b72 : 000000f4`da0ff080 000000f4`da0fedc8 000000f4`da0fee70 00000000`00000000 : SettingsHandlers_Display!wil::details::RunFunctorWithExceptionFilter+0x1e
000000f4`da0fed70 00007ffd`04022614 : 00000211`d49d0500 00000000`00000000 00000000`00000000 00007ffd`472aacaa : SettingsHandlers_Display!wil::cloud_store::load_internal<Windows::Data::BlueLightReduction::Settings>+0x196
000000f4`da0feec0 00007ffd`0401f9ea : 00000211`d49d0500 000000f4`da0ff040 00000211`d49d0500 00007ffd`493dfc2c : SettingsHandlers_Display!wil::cloud_store::load<Windows::Data::BlueLightReduction::Settings>+0x54
000000f4`da0fef40 00007ffd`4764c590 : 00000000`00000000 00000000`00000000 00000211`c796f070 00000000`00000001 : SettingsHandlers_Display!BlueLightSingleton::Initialize+0x152
000000f4`da0ff220 00007ffd`4764c218 : 00000211`c954e700 00000211`00000001 00000000`00000000 00000000`00000004 : SHCore!WorkThreadManager::CThread::ThreadProc+0x260
000000f4`da0ff480 00007ffd`4764a833 : 00000211`c796f070 000000f4`da0ff748 00000000`0000022c 00000000`00000000 : SHCore!WorkThreadManager::CThread::s_ExecuteThreadProc+0x18
000000f4`da0ff4b0 00007ffd`493d2f13 : 00000211`c95f0c80 00000000`00000000 00000211`c95f0d48 00000211`c7802340 : SHCore!<lambda_142c425290ac4fbd4d5aee2fc3f7d711>::<lambda_invoker_cdecl>+0x23
000000f4`da0ff4e0 00007ffd`493d4634 : 00000000`00000000 00000000`00000000 00000211`c7802340 00000000`00000007 : ntdll!TppSimplepExecuteCallback+0x123
000000f4`da0ff530 00007ffd`47537bd4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!TppWorkerThread+0x8d4
000000f4`da0ff8f0 00007ffd`4940ced1 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
000000f4`da0ff920 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21

THREAD_SHA1_HASH_MOD_FUNC:  dd54e1bb81805abdd47a57149e8c039db31eff70

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  a47e326485c56c52f3ee18701187fc2ff51c2109

THREAD_SHA1_HASH_MOD:  6f280dd1910a8e074d4f62e9d7d1520b131b7d38

FOLLOWUP_IP: 
msvcrt!abort+83
00007ffd`492bf2f3 b903000000      mov     ecx,3

FAULT_INSTR_CODE:  3b9

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  msvcrt!abort+83

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: msvcrt

IMAGE_NAME:  msvcrt.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  0

STACK_COMMAND:  .cxr 0x7ffd493a0000 ; kb

BUCKET_ID:  FATAL_APP_EXIT_msvcrt!abort+83

FAILURE_EXCEPTION_CODE:  40000015

FAILURE_IMAGE_NAME:  msvcrt.dll

BUCKET_ID_IMAGE_STR:  msvcrt.dll

FAILURE_MODULE_NAME:  msvcrt

BUCKET_ID_MODULE_STR:  msvcrt

FAILURE_FUNCTION_NAME:  abort

BUCKET_ID_FUNCTION_STR:  abort

BUCKET_ID_OFFSET:  83

BUCKET_ID_MODTIMEDATESTAMP:  0

BUCKET_ID_MODCHECKSUM:  a591e

BUCKET_ID_MODVER_STR:  7.0.18362.1

BUCKET_ID_PREFIX_STR:  FATAL_APP_EXIT_

FAILURE_PROBLEM_CLASS:  FATAL_APP_EXIT

FAILURE_SYMBOL_NAME:  msvcrt.dll!abort

FAILURE_BUCKET_ID:  FATAL_APP_EXIT_40000015_msvcrt.dll!abort

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/SystemSettings.exe/10.0.18362.628/ 66bf1a5/msvcrt.dll/7.0.18362.1/f5bdefd7/40000015/0000ae72.htm?Retriage=1

TARGET_TIME:  2020-02-03T05:13:07.000Z

OSBUILD:  18362

OSSERVICEPACK:  329

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  256

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt SingleUserTS

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  190318-1202

BUILDLAB_STR:  19h4_release

BUILDOSVER_STR:  10.0.18362.1.amd64fre.19h4_release.190318-1202

ANALYSIS_SESSION_ELAPSED_TIME:  3d3d3

ANALYSIS_SOURCE:  UM

FAILURE_ID_HASH_STRING:  um:fatal_app_exit_40000015_msvcrt.dll!abort

FAILURE_ID_HASH:  {e990e560-87d3-a609-b644-163ac1564693}

Followup:     MachineOwner


Tuesday, February 4, 2020 2:59 AM

Also forgot to mention - tried running the following, which also did not resolve the issue on any computers:

Get-AppXPackage | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}


Tuesday, February 4, 2020 5:36 AM

Hi,

 

Please make sure you have updated to 18362.145 or higher (18362.175).

 

If not, click start, settings, Update & Security, [check for updates].

 

While I understand you have done some troubleshooting, I think you would be better off starting again with a clean OS.

 

Besides, please understand that from our professional level, we do not provide dump/log analysis. In addition, if this problem is more urgent for you I still recommend that you open a case to Microsoft for further professional help.

https://support.microsoft.com/en-us/help/4341255/support-for-business

 

Thanks for understanding.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Tuesday, February 4, 2020 6:15 AM

Most of the affected computers are 18362.175 or higher. Starting with a clean OS is not an option - Surely someone knows what causes this problem and how to fix it. 

From reading articles online it seems this problem has been around since 2015 - Systemsettings.exe crashing as a result of a problem with C:\Windows\system32\msvcrt.dll


Tuesday, February 4, 2020 6:16 AM

Also forgot to mention - tried running the following, which also did not resolve the issue on any computers:

Get-AppXPackage | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}

Hello,

The command you mentioned is used to re-register all apps.

Try to re-register Settings app specifically with these steps:

1. Open administrative Windows PowerShell.

2. In PowerShell window, type/paste following cmdlet and press Enter key:

Get-AppXPackage -AllUsers -Name windows.immersivecontrolpanel | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\AppXManifest.xml” -Verbose}

3. Let the command complete.

Let us know if this helps!

Microsoft MVP (Windows and Devices for IT)

Windows Insider MVP

Windows Help & Support [www.kapilarya.com]


Tuesday, February 4, 2020 6:26 AM

The settings app falls under the first command, but running the command you suggested makes no difference:

Faulting application name: SystemSettings.exe, version: 10.0.18362.449, time stamp: 0x066bf1a5
Faulting module name: msvcrt.dll, version: 7.0.18362.1, time stamp: 0xf5bdefd7
Exception code: 0x40000015
Fault offset: 0x000000000000ae72
Faulting process id: 0x81c
Faulting application start time: 0x01d5db23aa209ab2
Faulting application path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
Faulting module path: C:\WINDOWS\System32\msvcrt.dll
Report Id: b4a981a0-f3c4-40d2-ab9a-8e6a0bdccb6c
Faulting package full name: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h4txyewy
Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel


Tuesday, February 4, 2020 6:26 AM

Fault bucket 1462459697773756478, type 5
Event Name: MoAppCrash
Response: Not available
Cab Id: 0

Problem signature:
P1: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h4txyewy
P2: praid:microsoft.windows.immersivecontrolpanel
P3: 10.0.18362.449
P4: 066bf1a5
P5: msvcrt.dll
P6: 7.0.18362.1
P7: f5bdefd7
P8: 40000015
P9: 000000000000ae72
P10: 

Attached files:
\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1512.tmp.dmp
\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER167A.tmp.WERInternalMetadata.xml
\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER169A.tmp.xml
\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER16A8.tmp.csv
\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER16C8.tmp.txt

These files may be available here:
\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_windows.immersiv_e14d949422bf546d4bc75a84d332fb0e5159ea2_31aeda3d_fe536a6c-90e4-42a0-8f06-6808f5e2c6a1

Analysis symbol: 
Rechecking for solution: 0
Report Id: b4a981a0-f3c4-40d2-ab9a-8e6a0bdccb6c
Report Status: 268435456
Hashed bucket: d91d6b5e626d9f86444bb358c021403e
Cab Guid: 0


Tuesday, February 4, 2020 6:27 AM

Here is the output from the Windows Error Report:

Version=1
EventType=MoAppCrash
EventTime=132252710307809357
ReportType=2
Consent=1
UploadTime=132252710312373070
ReportStatus=268435456
ReportIdentifier=fe536a6c-90e4-42a0-8f06-6808f5e2c6a1
IntegratorReportIdentifier=b4a981a0-f3c4-40d2-ab9a-8e6a0bdccb6c
Wow64Host=34404
NsAppName=praid:microsoft.windows.immersivecontrolpanel
OriginalFilename=SystemSettings.exe
AppSessionGuid=0000081c-0001-003f-b29a-20aa23dbd501
TargetAppId=U:windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h4txyewy!microsoft.windows.immersivecontrolpanel
TargetAppVer=10.0.2.1000_neutral_neutral!1973//05//31:23:05:09!1becc!SystemSettings.exe
BootId=4294967295
ServiceSplit=1981542817
TargetAsId=4176
IsFatal=1
EtwNonCollectReason=1
Response.BucketId=d91d6b5e626d9f86444bb358c021403e
Response.BucketTable=5
Response.LegacyBucketId=1462459697773756478
Response.type=4
Sig[0].Name=Package Full Name
Sig[0].Value=windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h4txyewy
Sig[1].Name=Application Name
Sig[1].Value=praid:microsoft.windows.immersivecontrolpanel
Sig[2].Name=Application Version
Sig[2].Value=10.0.18362.449
Sig[3].Name=Application Timestamp
Sig[3].Value=066bf1a5
Sig[4].Name=Fault Module Name
Sig[4].Value=msvcrt.dll
Sig[5].Name=Fault Module Version
Sig[5].Value=7.0.18362.1
Sig[6].Name=Fault Module Timestamp
Sig[6].Value=f5bdefd7
Sig[7].Name=Exception Code
Sig[7].Value=40000015
Sig[8].Name=Exception Offset
Sig[8].Value=000000000000ae72
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=10.0.18362.2.0.0.256.48
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=3081
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=ffb4
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=ffb422620b295c050e96acef06126422
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=08d5
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=08d566167c9e9c1207f0b18f2a33e3c0
UI[2]=C:\Windows\ImmersiveControlPanel\SystemSettings.exe
LoadedModule[0]=C:\Windows\ImmersiveControlPanel\SystemSettings.exe
LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\WINDOWS\System32\KERNEL32.DLL
LoadedModule[3]=C:\WINDOWS\System32\KERNELBASE.dll
LoadedModule[4]=C:\WINDOWS\System32\msvcrt.dll
LoadedModule[5]=C:\WINDOWS\System32\combase.dll
LoadedModule[6]=C:\WINDOWS\System32\ucrtbase.dll
LoadedModule[7]=C:\WINDOWS\System32\RPCRT4.dll
LoadedModule[8]=C:\WINDOWS\System32\bcryptPrimitives.dll
LoadedModule[9]=C:\WINDOWS\System32\SHCORE.dll
LoadedModule[10]=C:\WINDOWS\System32\kernel.appcore.dll
LoadedModule[11]=C:\WINDOWS\System32\clbcatq.dll
LoadedModule[12]=C:\Windows\System32\Windows.UI.Xaml.dll
LoadedModule[13]=C:\WINDOWS\System32\msvcp_win.dll
LoadedModule[14]=C:\WINDOWS\System32\user32.dll
LoadedModule[15]=C:\WINDOWS\System32\win32u.dll
LoadedModule[16]=C:\WINDOWS\System32\GDI32.dll
LoadedModule[17]=C:\WINDOWS\System32\gdi32full.dll
LoadedModule[18]=C:\WINDOWS\SYSTEM32\CoreMessaging.dll
LoadedModule[19]=C:\WINDOWS\System32\sechost.dll
LoadedModule[20]=C:\WINDOWS\SYSTEM32\Bcp47Langs.dll
LoadedModule[21]=C:\WINDOWS\SYSTEM32\dcomp.dll
LoadedModule[22]=C:\WINDOWS\SYSTEM32\iertutil.dll
LoadedModule[23]=C:\WINDOWS\System32\advapi32.dll
LoadedModule[24]=C:\WINDOWS\System32\IMM32.DLL
LoadedModule[25]=C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.592_none_e6c0b1911312be02\Comctl32.dll
LoadedModule[26]=C:\Windows\ImmersiveControlPanel\SystemSettings.dll
LoadedModule[27]=C:\WINDOWS\System32\OLEAUT32.dll
LoadedModule[28]=C:\WINDOWS\System32\windows.storage.dll
LoadedModule[29]=C:\WINDOWS\SYSTEM32\SspiCli.dll
LoadedModule[30]=C:\WINDOWS\System32\profapi.dll
LoadedModule[31]=C:\WINDOWS\System32\powrprof.dll
LoadedModule[32]=C:\WINDOWS\SYSTEM32\PROPSYS.dll
LoadedModule[33]=C:\WINDOWS\SYSTEM32\MrmCoreR.dll
LoadedModule[34]=C:\WINDOWS\System32\UMPDC.dll
LoadedModule[35]=C:\WINDOWS\System32\shlwapi.dll
LoadedModule[36]=C:\WINDOWS\System32\shell32.dll
LoadedModule[37]=C:\WINDOWS\System32\cfgmgr32.dll
LoadedModule[38]=C:\WINDOWS\SYSTEM32\wincorlib.DLL
LoadedModule[39]=C:\WINDOWS\System32\cryptsp.dll
LoadedModule[40]=C:\WINDOWS\System32\ole32.dll
LoadedModule[41]=C:\WINDOWS\SYSTEM32\slc.dll
LoadedModule[42]=C:\WINDOWS\SYSTEM32\policymanager.dll
LoadedModule[43]=C:\WINDOWS\SYSTEM32\WinLangdb.dll
LoadedModule[44]=C:\WINDOWS\SYSTEM32\sppc.dll
LoadedModule[45]=C:\WINDOWS\SYSTEM32\msvcp110_win.dll
LoadedModule[46]=C:\WINDOWS\SYSTEM32\windows.staterepositorycore.dll
LoadedModule[47]=C:\Windows\System32\Windows.UI.dll
LoadedModule[48]=C:\WINDOWS\SYSTEM32\TextInputFramework.dll
LoadedModule[49]=C:\WINDOWS\SYSTEM32\InputHost.dll
LoadedModule[50]=C:\WINDOWS\SYSTEM32\wintypes.dll
LoadedModule[51]=C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
LoadedModule[52]=C:\WINDOWS\SYSTEM32\ntmarta.dll
LoadedModule[53]=C:\WINDOWS\SYSTEM32\languageoverlayutil.dll
LoadedModule[54]=C:\WINDOWS\SYSTEM32\bcp47mrm.dll
LoadedModule[55]=C:\WINDOWS\system32\uxtheme.dll
LoadedModule[56]=C:\Windows\System32\twinapi.appcore.dll
LoadedModule[57]=C:\WINDOWS\SYSTEM32\RMCLIENT.dll
LoadedModule[58]=C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
LoadedModule[59]=C:\WINDOWS\SYSTEM32\urlmon.dll
LoadedModule[60]=C:\WINDOWS\SYSTEM32\CRYPTBASE.DLL
LoadedModule[61]=C:\WINDOWS\SYSTEM32\dxgi.dll
LoadedModule[62]=C:\WINDOWS\SYSTEM32\dxcore.dll
LoadedModule[63]=C:\Windows\ImmersiveControlPanel\Telemetry.Common.dll
LoadedModule[64]=C:\Windows\System32\Windows.UI.Xaml.Controls.dll
LoadedModule[65]=C:\Windows\ImmersiveControlPanel\SystemSettingsViewModel.Desktop.dll
LoadedModule[66]=C:\WINDOWS\SYSTEM32\d3d11.dll
LoadedModule[67]=C:\Windows\System32\Windows.ApplicationModel.dll
LoadedModule[68]=C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_51ce968bf19942c2\igd10iumd64.dll
LoadedModule[69]=C:\WINDOWS\System32\bcrypt.dll
LoadedModule[70]=C:\WINDOWS\SYSTEM32\ncrypt.dll
LoadedModule[71]=C:\WINDOWS\SYSTEM32\NTASN1.dll
LoadedModule[72]=C:\WINDOWS\System32\msctf.dll
LoadedModule[73]=C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_51ce968bf19942c2\igc64.dll
LoadedModule[74]=C:\Windows\System32\Windows.Shell.ServiceHostBuilder.dll
LoadedModule[75]=C:\WINDOWS\system32\execmodelproxy.dll
LoadedModule[76]=C:\WINDOWS\SYSTEM32\d2d1.dll
LoadedModule[77]=C:\WINDOWS\SYSTEM32\dwrite.dll
LoadedModule[78]=C:\Windows\System32\UiaManager.dll
LoadedModule[79]=C:\WINDOWS\SYSTEM32\windows.ui.core.textinput.dll
LoadedModule[80]=C:\Windows\System32\Windows.UI.Immersive.dll
LoadedModule[81]=C:\WINDOWS\system32\DataExchange.dll
LoadedModule[82]=C:\Windows\System32\SystemSettings.DataModel.dll
LoadedModule[83]=C:\Windows\System32\usermgrproxy.dll
LoadedModule[84]=C:\WINDOWS\SYSTEM32\SettingsEnvironment.Desktop.dll
LoadedModule[85]=C:\WINDOWS\SYSTEM32\REGAPI.dll
LoadedModule[86]=C:\WINDOWS\SYSTEM32\DEVOBJ.dll
LoadedModule[87]=C:\Windows\System32\NetworkUXBroker.dll
LoadedModule[88]=C:\WINDOWS\System32\WS2_32.dll
LoadedModule[89]=C:\WINDOWS\SYSTEM32\wtsapi32.dll
LoadedModule[90]=C:\WINDOWS\SYSTEM32\WINSTA.dll
LoadedModule[91]=C:\Windows\System32\EthernetMediaManager.dll
LoadedModule[92]=C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL
LoadedModule[93]=C:\WINDOWS\SYSTEM32\WINHTTP.dll
LoadedModule[94]=C:\Windows\System32\WlanMediaManager.dll
LoadedModule[95]=C:\WINDOWS\SYSTEM32\wlanapi.dll
LoadedModule[96]=C:\WINDOWS\System32\netprofm.dll
LoadedModule[97]=C:\WINDOWS\SYSTEM32\TetheringStation.dll
LoadedModule[98]=C:\WINDOWS\SYSTEM32\BluetoothApis.dll
LoadedModule[99]=C:\WINDOWS\System32\npmproxy.dll
LoadedModule[100]=C:\WINDOWS\System32\NSI.dll
LoadedModule[101]=C:\Windows\System32\Windows.StateRepositoryPS.dll
LoadedModule[102]=C:\WINDOWS\system32\credprovhost.dll
LoadedModule[103]=C:\WINDOWS\System32\CRYPT32.dll
LoadedModule[104]=C:\WINDOWS\System32\MSASN1.dll
LoadedModule[105]=C:\WINDOWS\SYSTEM32\samcli.dll
LoadedModule[106]=C:\WINDOWS\SYSTEM32\netutils.dll
LoadedModule[107]=C:\Windows\System32\Windows.Globalization.dll
LoadedModule[108]=C:\Windows\System32\Windows.UI.Xaml.Phone.dll
LoadedModule[109]=C:\WINDOWS\system32\twinui.dll
LoadedModule[110]=C:\WINDOWS\SYSTEM32\dwmapi.dll
LoadedModule[111]=C:\WINDOWS\SYSTEM32\pdh.dll
LoadedModule[112]=C:\Windows\System32\OneCoreCommonProxyStub.dll
LoadedModule[113]=C:\Windows\System32\ShellCommonCommonProxyStub.dll
LoadedModule[114]=C:\WINDOWS\SYSTEM32\MFPlat.DLL
LoadedModule[115]=C:\WINDOWS\SYSTEM32\RTWorkQ.DLL
LoadedModule[116]=C:\Windows\System32\Windows.Web.dll
LoadedModule[117]=C:\Windows\System32\AppContracts.dll
LoadedModule[118]=C:\Windows\System32\MiracastReceiver.dll
LoadedModule[119]=C:\WINDOWS\SYSTEM32\WMI.dll
LoadedModule[120]=C:\WINDOWS\SYSTEM32\wmiclnt.DLL
LoadedModule[121]=C:\Windows\System32\AppXDeploymentClient.dll
LoadedModule[122]=C:\WINDOWS\SYSTEM32\FirewallAPI.dll
LoadedModule[123]=C:\WINDOWS\SYSTEM32\StateRepository.Core.dll
LoadedModule[124]=C:\WINDOWS\SYSTEM32\DNSAPI.dll
LoadedModule[125]=C:\WINDOWS\SYSTEM32\fwbase.dll
LoadedModule[126]=C:\Windows\System32\TaskFlowDataEngine.dll
LoadedModule[127]=C:\WINDOWS\SYSTEM32\cdp.dll
LoadedModule[128]=C:\WINDOWS\SYSTEM32\dsreg.dll
LoadedModule[129]=C:\WINDOWS\SYSTEM32\OnDemandBrokerClient.dll
LoadedModule[130]=C:\Windows\System32\twinapi.dll
LoadedModule[131]=C:\Windows\System32\SettingsHandlers_PCDisplay.dll
LoadedModule[132]=C:\Windows\System32\Windows.Devices.Sensors.dll
LoadedModule[133]=C:\WINDOWS\SYSTEM32\BiWinrt.dll
LoadedModule[134]=C:\Windows\System32\DispBroker.dll
LoadedModule[135]=C:\Windows\System32\SettingsHandlers_Display.dll
LoadedModule[136]=C:\WINDOWS\SYSTEM32\deviceassociation.dll
LoadedModule[137]=C:\Windows\System32\Windows.CloudStore.dll
LoadedModule[138]=C:\WINDOWS\SYSTEM32\usermgrcli.dll
LoadedModule[139]=C:\WINDOWS\SYSTEM32\NcaApi.dll
LoadedModule[140]=C:\Windows\System32\Windows.CloudStore.Schema.Shell.dll
LoadedModule[141]=C:\WINDOWS\SYSTEM32\mfcore.dll
LoadedModule[142]=C:\WINDOWS\SYSTEM32\ksuser.dll
LoadedModule[143]=C:\WINDOWS\SYSTEM32\USERENV.dll
LoadedModule[144]=C:\Windows\System32\bcastdvr.proxy.dll
LoadedModule[145]=C:\Windows\System32\OneBackupHandler.dll
LoadedModule[146]=C:\WINDOWS\SYSTEM32\MPR.dll
LoadedModule[147]=C:\Windows\System32\fhsettingsprovider.dll
LoadedModule[148]=C:\WINDOWS\SYSTEM32\fhsvcctl.dll
LoadedModule[149]=C:\WINDOWS\System32\fhcfg.dll
LoadedModule[150]=C:\WINDOWS\SYSTEM32\wevtapi.dll
LoadedModule[151]=C:\WINDOWS\SYSTEM32\EFSUTIL.dll
LoadedModule[152]=C:\WINDOWS\SYSTEM32\XmlLite.dll
LoadedModule[153]=C:\WINDOWS\SYSTEM32\NETAPI32.dll
LoadedModule[154]=C:\WINDOWS\SYSTEM32\DSROLE.dll
LoadedModule[155]=C:\WINDOWS\SYSTEM32\SRVCLI.DLL
LoadedModule[156]=C:\Windows\System32\sdengin2.dll
LoadedModule[157]=C:\WINDOWS\SYSTEM32\bcd.dll
LoadedModule[158]=C:\WINDOWS\SYSTEM32\msi.dll
LoadedModule[159]=C:\WINDOWS\SYSTEM32\SPP.dll
LoadedModule[160]=C:\WINDOWS\SYSTEM32\VSSAPI.DLL
LoadedModule[161]=C:\WINDOWS\SYSTEM32\VssTrace.DLL
LoadedModule[162]=C:\WINDOWS\system32\directmanipulation.dll
LoadedModule[163]=C:\Windows\System32\Windows.Graphics.dll
LoadedModule[164]=C:\WINDOWS\system32\windowscodecs.dll
LoadedModule[165]=C:\WINDOWS\SYSTEM32\wuceffects.dll
LoadedModule[166]=C:\Windows\System32\threadpoolwinrt.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
OsInfo[0].Key=vermaj
OsInfo[0].Value=10
OsInfo[1].Key=vermin
OsInfo[1].Value=0
OsInfo[2].Key=verbld
OsInfo[2].Value=18362
OsInfo[3].Key=ubr
OsInfo[3].Value=592
OsInfo[4].Key=versp
OsInfo[4].Value=0
OsInfo[5].Key=arch
OsInfo[5].Value=9
OsInfo[6].Key=lcid
OsInfo[6].Value=1033
OsInfo[7].Key=geoid
OsInfo[7].Value=12
OsInfo[8].Key=sku
OsInfo[8].Value=48
OsInfo[9].Key=domain
OsInfo[9].Value=1
OsInfo[10].Key=prodsuite
OsInfo[10].Value=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Value=1
OsInfo[12].Key=platid
OsInfo[12].Value=10
OsInfo[13].Key=sr
OsInfo[13].Value=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=279608
OsInfo[15].Key=osinsty
OsInfo[15].Value=3
OsInfo[16].Key=iever
OsInfo[16].Value=11.592.18362.0-11.0.170
OsInfo[17].Key=portos
OsInfo[17].Value=0
OsInfo[18].Key=ram
OsInfo[18].Value=16220
OsInfo[19].Key=svolsz
OsInfo[19].Value=237
OsInfo[20].Key=wimbt
OsInfo[20].Value=0
OsInfo[21].Key=blddt
OsInfo[21].Value=190318
OsInfo[22].Key=bldtm
OsInfo[22].Value=1202
OsInfo[23].Key=bldbrch
OsInfo[23].Value=19h4_release
OsInfo[24].Key=bldchk
OsInfo[24].Value=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Value=0
OsInfo[26].Key=wpvermin
OsInfo[26].Value=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Value=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Value=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.18362.592.amd64fre.19h4_release.190318-1202
OsInfo[30].Key=buildflightid
OsInfo[30].Value=013F5E85-5E65-4D34-840E-2032641694C0.1
OsInfo[31].Key=edition
OsInfo[31].Value=Professional
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[34].Key=containerid
OsInfo[35].Key=containertype
OsInfo[36].Key=edu
OsInfo[36].Value=0
FriendlyEventName=Stopped working
ConsentKey=MoAppCrash
AppName=Settings
AppPath=C:\Windows\ImmersiveControlPanel\SystemSettings.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=A2AA1E7C498EED75340BA26CE2F5FF54
MetadataHash=1084620513


Tuesday, February 4, 2020 7:25 AM

Are all of the affected systems using Intel GPU instead of a dedicated GPU?

As the crash happens in SettingsHandlers_Display!wil::cloud_store::load_internal<Windows::Data::BlueLightReduction::Settings>+0x196

Does this also happen when the system is disconnected from the network?


Tuesday, February 4, 2020 9:46 PM

There is a mix of onboard GPU and dedicated GPU - of the dedicated GPU's this is affecting both AMD and Nvidia.

This problem does also occur when the computers are disconnected from the network. 

 


Wednesday, February 5, 2020 1:22 AM

I've exported output from ProcMon tracing systemsettings.exe during the crash - See attached link for zipped CSV log file.

https://1drv.ms/u/s!AmnqCWqojp0Eb55deMuR4eRB-E0?e=ehsblY


Thursday, February 6, 2020 10:37 PM

Some users on affected machines are also reporting that the Windows search bar does not work. 

The Start menu / search bar not working was noted when 1903 began to roll out - Seems like more dodgy Windows Updates are behind these issues. 


Monday, February 17, 2020 9:40 PM

Any updates here? Issues are still ongoing and now affecting more machines. 

Has anyone got any other tips or tricks to try? 


Thursday, February 20, 2020 12:38 AM

The following error is consistent across all affected computers in the Event Viewer > Application log:

"Faulting module name: msvcrt.dll, version: 7.0.18362.1, Exception code: 0x40000015"

Has this file been modified/corrupted somehow by Windows Updates at some point? 


Monday, February 24, 2020 1:56 AM

I've just installed Windows 10 v1909 from fresh install media on a new computer and after installing KB4532693 this same problem appeared. 

 

Uninstalling this update has resolved the problem on the new 1909 install. 

This does not explain how 1809 and 1903 computers had the same problem prior to KB4532693 being released/installed. I've attempted to uninstall this update from an 1809 and 1903 computer which HAS NOT fixed the problem on either. 


Monday, February 24, 2020 2:33 PM

We have the same issue in our environment, we're deploying our image with SCCM and Dutch language pack installed.


Wednesday, February 26, 2020 5:22 AM

Big thumbs up Hayes E!

I've just checked our group policy which configures our desktops and this is one of the services (CDPS) that was set to disabled. I've just re-enabled it on a couple of computers and so far this has resolved the problem on each. 


Wednesday, February 26, 2020 6:11 AM

When you post:
"I've just installed Windows 10 v1909 from fresh install media on a new computer and after installing KB4532693 this same problem appeared."
nobody is expecting that you additionally disabled random Windows services...

Next time when you troubleshoot a problem: leave Windows in its default configuration, try to reproduce the problem: then when you can't reproduce it you know it is your changes done to the system.


Wednesday, February 26, 2020 7:24 AM

That particular computer is a different story - That 1909 machine was never joined to the domain, so the policy that disables certain services in our environment was not applied. The only changes made to that computer was installing latest Windows updates. 


Thursday, March 5, 2020 10:56 PM

Thank you so much for posting this. This was driving me nuts.