Comments on: Crash Dump Analysis Patterns (Part 189) https://www.dumpanalysis.org/blog/index.php/2012/12/23/crash-dump-analysis-patterns-part-189/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Tue, 19 May 2026 09:04:26 +0000 http://wordpress.org/?v=2.3.3 By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2012/12/23/crash-dump-analysis-patterns-part-189/#comment-741756 Dmitry Vostokov Sun, 12 Aug 2018 08:37:04 +0000 https://www.dumpanalysis.org/blog/index.php/2012/12/23/crash-dump-analysis-patterns-part-189/#comment-741756 In process memory dumps we can also see high handle counts for leak cases: 0:000> !handle [...] 273020 Handles Type Count None 93 Event 222742 Section 26 File 33 Directory 3 Mutant 8 WindowStation 2 Semaphore 23 Key 24 Process 2 Thread 50042 Desktop 1 IoCompletion 7 Timer 1 TpWorkerFactory 2 ALPC Port 5 WaitCompletionPacket 6 In process memory dumps we can also see high handle counts for leak cases:

0:000> !handle
[…]
273020 Handles
Type Count
None 93
Event 222742
Section 26
File 33
Directory 3
Mutant 8
WindowStation 2
Semaphore 23
Key 24
Process 2
Thread 50042
Desktop 1
IoCompletion 7
Timer 1
TpWorkerFactory 2
ALPC Port 5
WaitCompletionPacket 6

]]>