AllonZ Posts: 15 22 hours ago

AllonZ Posts: 15 So, I have been having this small issue for a while but I finally have the time to make a post about it. I am not sure when it started, but SyMenu seems to crash randomly throughout the workday without an error message. I just restart it and it usually runs fine for another few hours or so before it crashes again. No big deal but thought it's worth a post. Event Viewer shows 2 consecutive ID 1000 faults when SyMenu.exe crashes. I see other times when only 1 fault is logged and SyMenu.exe does not crash. I am running it on Windows 11 Pro 24H2 26100.8457 as a standard user (have not yet tested as admin). SyMenu ApplicationLog contains no data (another issue?) and I could not attach SyMenu.exe.20104.dmp because it was too big, so the WinDbg analysis is pasted below. All dependencies seem fine so I did not paste the Process Explorer Data below. No rush. Let me know if I can provide you with any other data. Event Viewer log: Error 5/29/2026 2:42:19 PM Application Error 1000 Application Crashing Events Log Name: Application Source: Application Error Date: 5/29/2026 2:42:19 PM Event ID: 1000 Task Category: Application Crashing Events Level: Error Keywords: User: -----\----- Computer: ----- Description: Faulting application name: SyMenu.exe, version: 8.13.9578.12752, time stamp: 0x698d0000 Faulting module name: ntdll.dll, version: 10.0.26100.8328, time stamp: 0xf814f1d6 Exception code: 0xc0000710 Fault offset: 0x000bf82a Faulting process id: 0x4E88 Faulting application start time: 0x1DCEF796CAE7152 Faulting application path: D:\SyMenu\SyMenu.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: d1eb6f26-64fa-48fb-b18a-a717f081bd27 Faulting package full name: Faulting package-relative application ID: Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Application Error" Guid="{a0e9b465-b939-57d7-b27d-95d8e925ff57}" /> <EventID>1000</EventID> <Version>0</Version> <Level>2</Level> <Task>100</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2026-05-29T18:42:19.1342632Z" /> <EventRecordID>35253</EventRecordID> <Correlation /> <Execution ProcessID="31480" ThreadID="24172" /> <Channel>Application</Channel> <Computer>-----</Computer> <Security UserID="S-1-5-21-3561418018-3650584135-2967397845-1013" /> </System> <EventData> <Data Name="AppName">SyMenu.exe</Data> <Data Name="AppVersion">8.13.9578.12752</Data> <Data Name="AppTimeStamp">698d0000</Data> <Data Name="ModuleName">ntdll.dll</Data> <Data Name="ModuleVersion">10.0.26100.8328</Data> <Data Name="ModuleTimeStamp">f814f1d6</Data> <Data Name="ExceptionCode">c0000710</Data> <Data Name="FaultingOffset">000bf82a</Data> <Data Name="ProcessId">0x4e88</Data> <Data Name="ProcessCreationTime">0x1dcef796cae7152</Data> <Data Name="AppPath">D:\SyMenu\SyMenu.exe</Data> <Data Name="ModulePath">C:\WINDOWS\SYSTEM32\ntdll.dll</Data> <Data Name="IntegratorReportId">d1eb6f26-64fa-48fb-b18a-a717f081bd27</Data> <Data Name="PackageFullName"> </Data> <Data Name="PackageRelativeAppId"> </Data> </EventData> </Event> WinDbg analysis: ******************************************************************************* * * * Exception Analysis * * * ******************************************************************************* Integrated managed debugging does not support enumeration of symbols. Type information missing error for Instance Type information missing error for Instance Type information missing error for Instance Type information missing error for Instance Type information missing error for Instance Type information missing error for Instance ClrmaManagedAnalysis::GetThread 27e8 ClrmaThread::Initialize 27e8 ~ClrmaThread ClrmaManagedAnalysis::get_ProviderName ClrmaManagedAnalysis::GetThread ffffffff ClrmaThread::Initialize 27e8 ClrmaThread::get_CurrentException ClrmaThread::get_NestedExceptionCount ~ClrmaThread KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 3671 Key : Analysis.Elapsed.mSec Value: 3840 Key : Analysis.IO.Other.Mb Value: 2 Key : Analysis.IO.Read.Mb Value: 2 Key : Analysis.IO.Write.Mb Value: 12 Key : Analysis.Init.CPU.mSec Value: 718 Key : Analysis.Init.Elapsed.mSec Value: 286012 Key : Analysis.Memory.CommitPeak.Mb Value: 195 Key : Analysis.Version.DbgEng Value: 10.0.29547.1002 Key : Analysis.Version.Description Value: 10.2602.27.2 x86fre Key : Analysis.Version.Ext Value: 1.2602.27.2 Key : CLR.Engine Value: CORECLR Key : CLR.Version Value: 8.0.2526.11203 Key : Failure.Bucket Value: APPLICATION_FAULT_c0000710_ntdll.dll!TppCallbackCheckThreadAfterCallback Key : Failure.Exception.Code Value: 0xc0000710 Key : Failure.Exception.IP.Address Value: 0x77c3f82a Key : Failure.Exception.IP.Module Value: ntdll Key : Failure.Exception.IP.Offset Value: 0xbf82a Key : Failure.Hash Value: {835ced0b-650a-ac17-6e19-92a4bb23b3ad} Key : Failure.ProblemClass.Primary Value: APPLICATION_FAULT Key : Faulting.IP.Type Value: Paged Key : Timeline.OS.Boot.DeltaSec Value: 23330 Key : Timeline.Process.Start.DeltaSec Value: 14370 Key : WER.OS.Branch Value: ge_release Key : WER.OS.Version Value: 10.0.26100.1 Key : WER.Process.Version Value: 8.13.9578.12752 FILE_IN_CAB: SyMenu.exe.20104.dmp NTGLOBALFLAG: 0 APPLICATION_VERIFIER_FLAGS: 0 CONTEXT: (.ecxr) eax=1405f538 ebx=1405f6f0 ecx=00000000 edx=00000000 esi=00000000 edi=00000050 eip=77c3f82a esp=1405f528 ebp=1405f590 iopl=0 nv up ei pl nz ac pe nc cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000216 ntdll!TppCallbackCheckThreadAfterCallback+0x685f3: 77c3f82a 6a04 push 4 Resetting default scope EXCEPTION_RECORD: (.exr -1) ExceptionAddress: 77c3f82a (ntdll!TppCallbackCheckThreadAfterCallback+0x000685f3) ExceptionCode: c0000710 ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 7727d6b0 Parameter[1]: 0b48e78c PROCESS_NAME: SyMenu.dll ERROR_CODE: (NTSTATUS) 0xc0000710 - A threadpool worker thread is impersonating a client, after a callback to 0x%p(0x%p). This is unexpected, indicating that the callback is missing a call to revert the impersonation. EXCEPTION_CODE_STR: c0000710 EXCEPTION_PARAMETER1: 7727d6b0 EXCEPTION_PARAMETER2: 0b48e78c STACK_TEXT: 1405f590 77bd7051 03181870 77bad9f0 03181870 ntdll!TppCallbackCheckThreadAfterCallback+0x685f3 1405f61c 77bd6aa5 c4de4b3b 77bd62c0 77bd62c0 ntdll!TppCallbackEpilog+0x24 1405f7cc 75be5d49 03181870 75be5d30 1405f834 ntdll!TppWorkerThread+0x7e5 1405f7dc 77bed83b 03181870 c4de44c3 00000000 kernel32!BaseThreadInitThunk+0x19 1405f834 77bed7c1 ffffffff 77c3498b 00000000 ntdll!__RtlUserThreadStart+0x2b 1405f844 00000000 00000000 00000000 00000000 ntdll!_RtlUserThreadStart+0x1b IP_IN_PAGED_CODE: ntdll!TppCallbackCheckThreadAfterCallback+685f3 77c3f82a 6a04 push 4 SYMBOL_NAME: ntdll!TppCallbackCheckThreadAfterCallback+685f3 MODULE_NAME: ntdll IMAGE_NAME: ntdll.dll STACK_COMMAND: ~20s; .ecxr ; kb FAILURE_BUCKET_ID: APPLICATION_FAULT_c0000710_ntdll.dll!TppCallbackCheckThreadAfterCallback OS_VERSION: 10.0.26100.1 BUILDLAB_STR: ge_release OSPLATFORM_TYPE: x86 OSNAME: Windows 10 IMAGE_VERSION: 10.0.26100.8328 FAILURE_ID_HASH: {835ced0b-650a-ac17-6e19-92a4bb23b3ad} Followup: MachineOwner --------- CLRMAReleaseInstance ~ClrmaManagedAnalysis edited by AllonZ on 29/05/2026

link

---