Hello
Thank you for posting in Microsoft Community forum.
The issue with csrss.exe instances increasing continuously, leading to higher RAM consumption, could be related to several factors. One potential cause could be insufficient pagefile size or free space on the boot partition, which can prevent proper memory dumps and lead to system instability. Another possibility is a memory leak in kernel mode drivers, which can be identified using the Poolmon utility to monitor nonpaged and paged pool usage. It's also important to ensure that there are no binary mismatches or issues with SCSI drivers or firmware that could prevent memory dumps from being written.
Regarding the dwm.exe process exit, it could be related to system hangs that are not explained by resource consumption but rather by threads waiting in specific states. To further investigate these issues, you may want to use tools like Poolmon to monitor memory usage and check for leaking trends, or Xperf for detailed analysis of process lifetime and image virtual address ranges in process memory.
PoolMon - Windows drivers | Microsoft Learn
Windows Performance Recorder | Microsoft Learn
Best Regards,
Wesley Li