heres a crash log i opened up from today, this is the first one reading out of memory.
************* Preparing the environment for Debugger Extensions Gallery repositories **************
ExtensionRepository : Implicit
UseExperimentalFeatureForNugetShare : true
AllowNugetExeUpdate : true
NonInteractiveNuget : true
AllowNugetMSCredentialProviderInstall : true
AllowParallelInitializationOfLocalRepositories : true
EnableRedirectToV8JsProvider : false
– Configuring repositories
----> Repository : LocalInstalled, Enabled: true
----> Repository : UserExtensions, Enabled: true
Preparing the environment for Debugger Extensions Gallery repositories completed, duration 0.015 seconds
************* Waiting for Debugger Extensions Gallery to Initialize **************
Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.031 seconds
----> Repository : UserExtensions, Enabled: true, Packages count: 0
----> Repository : LocalInstalled, Enabled: true, Packages count: 41
Microsoft (R) Windows Debugger Version 10.0.27553.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\jalb1\Downloads\FiveM.app\crashes\87cd1f3a-cb1d-4ef2-82a6-74f13d7a6fc4.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
************* Path validation summary **************
Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 22621 MP (16 procs) Free x64
Product: WinNt, suite: SingleUserTS Personal
Edition build lab: 22621.1.amd64fre.ni_release.220506-1250
Debug session time: Tue Aug 6 19:00:33.000 2024 (UTC - 4:00)
System Uptime: 0 days 0:03:35.554
Process Uptime: 0 days 0:00:23.000
…
…
Loading unloaded module list
.
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(49dc.5f00): Unknown exception - code e0000008 (first/second chance not available)
±-----------------------------------------------------------------------+
| This target supports Hardware-enforced Stack Protection. A HW based |
| “Shadow Stack” may be available to assist in debugging and analysis. |
| See aka.ms/userhsp for more info. |
| |
| dps @ssp |
| |
±-----------------------------------------------------------------------+
For analysis of this file, run !analyze -v
ntdll!NtWaitForMultipleObjects+0x14:
00007ff9`43150af4 c3 ret
0:012> !analyze -v
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 359
Key : Analysis.Elapsed.mSec
Value: 1878
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 2
Key : Analysis.Init.CPU.mSec
Value: 93
Key : Analysis.Init.Elapsed.mSec
Value: 69105
Key : Analysis.Memory.CommitPeak.Mb
Value: 404
Key : Failure.Bucket
Value: OOM_e0000008_wintrust.dll!out_of_memory
Key : Failure.Hash
Value: {5f564c58-caf9-1fbd-56c6-c4e55b5280f1}
Key : Timeline.OS.Boot.DeltaSec
Value: 215
Key : Timeline.Process.Start.DeltaSec
Value: 23
Key : WER.OS.Branch
Value: ni_release
Key : WER.OS.Version
Value: 10.0.22621.1
Key : WER.Process.Version
Value: 10.0.22621.3810
FILE_IN_CAB: 87cd1f3a-cb1d-4ef2-82a6-74f13d7a6fc4.dmp
NTGLOBALFLAG: 0
CONTEXT: (.ecxr)
rax=00007ff880961252 rbx=0000000000600000 rcx=00007aa20035e270
rdx=00007aa20035ecc8 rsi=0000000000401000 rdi=00007ff8832d71c0
rip=00007ff94067fabc rsp=0000004fc63fec80 rbp=0000000000401000
r8=00007aa20035ecc8 r9=0000005000000002 r10=00003667bc17fc04
r11=0000004fc63fef60 r12=00007aa200a01020 r13=0000000000000020
r14=00007aa200a01000 r15=00007aa200a01060
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
KERNELBASE!RaiseException+0x6c:
00007ff9`4067fabc 0f1f440000 nop dword ptr [rax+rax]
Resetting default scope
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ff94067fabc (KERNELBASE!RaiseException+0x000000000000006c)
ExceptionCode: e0000008
ExceptionFlags: 00000081
NumberParameters: 1
Parameter[0]: 0000000000401000
PROCESS_NAME: wintrust.dll
ERROR_CODE: (NTSTATUS) 0xe0000008 -
EXCEPTION_CODE_STR: e0000008
EXCEPTION_PARAMETER1: 0000000000401000
FAULTING_THREAD: 00005f00
STACK_TEXT:
0000000000000000 00000000
00000000 wintrust.dll!out_of_memory+0x0
0000000000000000 00000000
00000000 unknown![.ecxr]+0x0
0000004fc63fec80 00007ff9
4067fabc KERNELBASE!RaiseException+0x0
0000004fc63fed60 00007ff8
7c61d8db libcef+0x0
0000004fc63fed90 00007ff8
7c61d8f9 libcef+0x0
0000004fc63fedc0 00007ff8
795f8105 libcef+0x0
0000004fc63fedf0 00007ff8
795fac4c libcef+0x0
0000004fc63fee70 00007ff8
795fa839 libcef+0x0
0000004fc63feeb0 00007ff8
795fa4e5 libcef+0x0
0000004fc63fef40 00007ff8
795f9a9c libcef+0x0
0000004fc63ff020 00007ff8
7c68e557 libcef+0x0
0000004fc63ff0c0 00007ff8
7c68dd62 libcef+0x0
0000004fc63ff100 00007ff8
809b0e55 libcef+0x0
0000004fc63ff140 00007ff8
7c8635e5 libcef+0x0
0000004fc63ff180 00007ff8
7c861459 libcef+0x0
0000004fc63ff290 00007ff8
809b1127 libcef+0x0
0000004fc63ff320 00007ff8
7c81c611 libcef+0x0
0000004fc63ff3b0 00007ff8
7c81cacd libcef+0x0
0000004fc63ff400 00007ff8
7c840d9e libcef+0x0
0000004fc63ff450 00007ff8
80041486 libcef+0x0
0000004fc63ff4d0 00007ff8
7e097669 libcef+0x0
0000004fc63ff5c0 00007ff8
7e0a0905 libcef+0x0
0000004fc63ff620 00007ff8
7e04a213 libcef+0x0
0000004fc63ff670 00007ff8
7e052203 libcef+0x0
0000004fc63ff6f0 00007ff8
7c6402a7 libcef+0x0
0000004fc63ff7a0 00007ff8
7d2effbc libcef+0x0
0000004fc63ff950 00007ff8
7d2efc8f libcef+0x0
0000004fc63ffa30 00007ff8
7c67638a libcef+0x0
0000004fc63ffad0 00007ff8
7c6746c1 libcef+0x0
0000004fc63ffb30 00007ff8
7d2f07cd libcef+0x0
0000004fc63ffba0 00007ff8
7c6241a0 libcef+0x0
0000004fc63ffc90 00007ff8
7c6584d4 libcef+0x0
0000004fc63ffcf0 00007ff8
7d1e733b libcef+0x0
0000004fc63ffd50 00007ff8
7c65867d libcef+0x0
0000004fc63ffde0 00007ff8
7c67e4b2 libcef+0x0
0000004fc63ffe60 00007ff9
4192257d kernel32!BaseThreadInitThunk+0x0
0000004fc63ffe90 00007ff9
4310af28 ntdll!RtlUserThreadStart+0x0
STACK_COMMAND: ** Pseudo Context ** Pseudo ** Value: ffffffff ** ; kb
SYMBOL_NAME: wintrust.dll!out_of_memory
MODULE_NAME: wintrust
IMAGE_NAME: wintrust.dll
FAILURE_BUCKET_ID: OOM_e0000008_wintrust.dll!out_of_memory
OS_VERSION: 10.0.22621.1
BUILDLAB_STR: ni_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
IMAGE_VERSION: 10.0.22621.3810
FAILURE_ID_HASH: {5f564c58-caf9-1fbd-56c6-c4e55b5280f1}
Followup: MachineOwner