https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 14:04:59 +0000 http://wordpress.org/?v=2.3.3 https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-192698 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 80) Wed, 13 Oct 2010 20:03:10 +0000 https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-192698 [...] Experts Magazine Online Today we introduce an icon for Special Process [...] […] Experts Magazine Online Today we introduce an icon for Special Process […]

]]> https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-171817 Dmitry Vostokov Fri, 30 Jul 2010 11:09:48 +0000 https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-171817 Another error reporting example is the presence of DW20.exe Another error reporting example is the presence of DW20.exe

]]> https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-168328 Crash Dump Analysis » Blog Archive » Stack trace collection, special process, LPC and critical section wait chains, blocked thread, coupled machines, thread waiting time and IRP distribution anomaly: pattern cooperation Sun, 18 Jul 2010 14:08:18 +0000 https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-168328 [...] sessions couldn’t be created. A complete memory dump stack trace collection log lists a special process that would not normally be present in a fully initialized session: userinit.exe. One of its [...] […] sessions couldn’t be created. A complete memory dump stack trace collection log lists a special process that would not normally be present in a fully initialized session: userinit.exe. One of its […]

]]> https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-158310 Dmitry Vostokov Mon, 14 Jun 2010 19:50:41 +0000 https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-158310 Some processes briefly appear to do a specialized task and normally don't present in memory. Their presence in memory dump can point to abnormal conditions such as wait chains, blocked threads, etc. For example, multiple LogonUI processes in terminal session environments on W2K8. Some processes briefly appear to do a specialized task and normally don’t present in memory. Their presence in memory dump can point to abnormal conditions such as wait chains, blocked threads, etc. For example, multiple LogonUI processes in terminal session environments on W2K8.

]]> https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-106048 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 92) Tue, 24 Nov 2009 00:31:02 +0000 https://www.dumpanalysis.org/blog/index.php/2008/02/12/crash-dump-analysis-patterns-part-48/#comment-106048 [...] to it exist or there are any missing threads or components inside it, any suspended threads and special processes like a postmortem debugger. We shouldn’t also forget about service dependencies and [...] […] to it exist or there are any missing threads or components inside it, any suspended threads and special processes like a postmortem debugger. We shouldn’t also forget about service dependencies and […]

]]>