Comments on: Crash Dump Analysis Patterns (Part 32) https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Tue, 19 May 2026 08:17:34 +0000 http://wordpress.org/?v=2.3.3 By: Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 55) https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-164555 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 55) Thu, 08 Jul 2010 16:01:04 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-164555 [...] we introduce an icon for Main Thread [...] […] we introduce an icon for Main Thread […]

]]> By: Crash Dump Analysis » Blog Archive » Spiking thread, main thread, message hooks, hooked functions, semantic split, coincidental symbolic information and not my version: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-164233 Crash Dump Analysis » Blog Archive » Spiking thread, main thread, message hooks, hooked functions, semantic split, coincidental symbolic information and not my version: pattern cooperation Wed, 07 Jul 2010 16:32:34 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-164233 [...] process was reported consuming CPU and its user memory dump was saved. The main thread was a spiking thread [...] […] process was reported consuming CPU and its user memory dump was saved. The main thread was a spiking thread […]

]]> By: Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 54) https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-163611 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 54) Mon, 05 Jul 2010 16:53:40 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-163611 [...] we introduce an icon for Main Thread [...] […] we introduce an icon for Main Thread […]

]]> By: Crash Dump Analysis » Blog Archive » Stack trace collection, suspended threads, not my version, special process, main thread and blocked LPC chain threads: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-88190 Crash Dump Analysis » Blog Archive » Stack trace collection, suspended threads, not my version, special process, main thread and blocked LPC chain threads: pattern cooperation Tue, 11 Aug 2009 15:13:57 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-88190 [...] we zoom into NTSD process we would see that its main thread was waiting for a console [...] […] we zoom into NTSD process we would see that its main thread was waiting for a console […]

]]> By: Crash Dump Analysis » Blog Archive » WOW64 process, NULL data pointer, stack overflow, main thread, incorrect stack trace, nested exceptions, hidden exception, manual dump, multiple exceptions and virtualized system: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-84356 Crash Dump Analysis » Blog Archive » WOW64 process, NULL data pointer, stack overflow, main thread, incorrect stack trace, nested exceptions, hidden exception, manual dump, multiple exceptions and virtualized system: pattern cooperation Sun, 12 Jul 2009 17:09:54 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-84356 [...] we have never seen NtUserGetProp on stack traces, there is a possibility of an exception in main GUI thread and also the stack traces itself looks incorrect, suddenly sending a Windows message without any [...] […] we have never seen NtUserGetProp on stack traces, there is a possibility of an exception in main GUI thread and also the stack traces itself looks incorrect, suddenly sending a Windows message without any […]

]]> By: Crash Dump Analysis » Blog Archive » Manual and early crash dump, stack trace collection, main thread, blocked threads and pass through functions: pattern cooperation https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-71426 Crash Dump Analysis » Blog Archive » Manual and early crash dump, stack trace collection, main thread, blocked threads and pass through functions: pattern cooperation Thu, 16 Apr 2009 11:23:42 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-71426 [...] its startup so we went further to look at a stack trace collection of all its threads and found the main thread of spooler was hanging for about 23 seconds after 4 seconds since process [...] […] its startup so we went further to look at a stack trace collection of all its threads and found the main thread of spooler was hanging for about 23 seconds after 4 seconds since process […]

]]> By: Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 42d) https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-49862 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 42d) Fri, 07 Nov 2008 17:19:37 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/23/crash-dump-analysis-patterns-part-32/#comment-49862 [...] synchronization object whose owner is a thread so they can be easily identified. For example, the main application thread is waiting for an [...] […] synchronization object whose owner is a thread so they can be easily identified. For example, the main application thread is waiting for an […]

]]>