Microsoft Outlook Application Crash due to UCRTBASE.DLL

Anonymous
2020-12-07T17:43:25+00:00

Windows 10 Build 2004

Outlook crashes intermittently and generates the following Application Event Log error.

Event 1000, Application Error (11:06AM, 12/7/2020) Faulting application name: OUTLOOK.EXE, version: 16.0.13426.20308, time stamp: 0x5fc6ea9b Faulting module name: ucrtbase.dll, version: 10.0.19041.546, time stamp: 0x73123758 Exception code: 0xc0000409 Fault offset: 0x0009edbb Faulting process id: 0x41c0 Faulting application start time: 0x01d6ccaedccaa9fa Faulting application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Faulting module path: C:\WINDOWS\System32\ucrtbase.dll Report Id: f8791f7b-faf7-452a-8ff2-7268662a6db2 Faulting package full name: Faulting package-relative application ID:

I have run SFC /SCANNOW

I have completely uninstalled and reinstalled Microsoft Office 365

Here are the properties of the failing file:

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

69 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2021-02-08T15:40:57+00:00

    I can confirm the issue is no longer present with my User since 2020/02/01.

    Thank you all for your information.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2021-02-04T12:29:35+00:00

    I got the email from Sophos yesterday and they said they were disabling the DCOM Lockdown across the globe, so would affect every endpoint.  I  will be disabling my exclusion Monday to test.

    Cheers,

    gareth

    Was this answer helpful?

    0 comments
  3. Anonymous
    2021-02-04T12:09:10+00:00

    אולי תוכנת אנטי-וירוס / ניצול הפחתה / יירוט אחרת שעושה את אותו הדבר כמו שסופוס עושה?

    I do not think, because I have more than 400 users and they have no crashes, and they all have the same settings.

    But maybe you'm right, what do you think I should exclude from AV?

    Was this answer helpful?

    0 comments
  4. Anonymous
    2021-02-04T11:56:57+00:00

    Maybe some other anti-virus / exploit mitigation / interception software which does the same as Sophos does?

    Was this answer helpful?

    0 comments
  5. Anonymous
    2021-02-04T11:54:08+00:00

    Thanks for sharing this.

    I only got a reminder of Sophos today if I already tried their new hotfix.

    I just checked-out my regsettings, but those 2 items are already set to 0:

    "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SophosEndpoint Defense\EndpointFlags"
    "hmpa.lockdownmemory.v2.enforce"="0"
    "hmpa.lockdownmemory.v2.silent"="0"

    Maybe they were never changed, or they are already changed with the new roll-out.

    However, in the next IT manintenance window I will remove the exclusion within Sophos Central and re-run my testscript to see Outlook keeps running without any crashes. Of course I will share my experiences with you on this forum.

    Was this answer helpful?

    0 comments