https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Tue, 19 May 2026 10:50:36 +0000 http://wordpress.org/?v=2.3.3 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-194871 Crash Dump Analysis » Blog Archive » Crash Dump Analysis of Defective Malware: A Case Study Wed, 20 Oct 2010 10:11:40 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-194871 [...] command was not showing any useful hints so I dumped the whole address range of that Unknown Component and found strange strings [...] […] command was not showing any useful hints so I dumped the whole address range of that Unknown Component and found strange strings […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-169721 Software Generalist » Blog Archive » Reading Notebook: 19-July-10 Thu, 22 Jul 2010 16:23:26 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-169721 [...] Viewing the loaded driver list (pp. 546 - 547) - if we don’t see company information in lmv command output we can examine raw driver data like in this pattern: http://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/ [...] […] Viewing the loaded driver list (pp. 546 - 547) - if we don’t see company information in lmv command output we can examine raw driver data like in this pattern: http://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/ […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-152570 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 40) Mon, 17 May 2010 10:20:17 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-152570 [...] Today we introduce an icon for Unknown Component pattern: [...] […] Today we introduce an icon for Unknown Component pattern: […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-78454 Crash Dump Analysis » Blog Archive » Chemistry of Virtual Memory Space (Part 1) Tue, 09 Jun 2009 10:10:03 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-78454 [...] where A is for Adobe modules and U is for an unknown module that needs identification, see Unknown Component pattern.   [...] […] where A is for Adobe modules and U is for an unknown module that needs identification, see Unknown Component pattern.   […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-67820 Crash Dump Analysis » Blog Archive » Coupled processes, wait chains, message box, waiting thread time, paged out data, incorrect stack trace, hidden exception, unknown component and execution residue: pattern cooperation Wed, 11 Mar 2009 01:18:51 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-67820 [...] we can inspect the unknown module PE headers left in [...] […] we can inspect the unknown module PE headers left in […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-37178 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 75) Thu, 07 Aug 2008 19:35:59 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-37178 [...] is why I call this pattern Hidden Module. We can use Unknown Component pattern to see its resources if present in [...] […] is why I call this pattern Hidden Module. We can use Unknown Component pattern to see its resources if present in […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-21102 nickV Wed, 19 Mar 2008 11:29:23 +0000 https://www.dumpanalysis.org/blog/index.php/2007/08/16/crash-dump-analysis-patterns-part-22/#comment-21102 Nice tip - very useful! Nice tip - very useful!

]]>