How to use umdh to check Windows memory leak

1. Install .NET 4.0 and Windbg on the host

Install .NET4.0 firstly then install Windbg.

2. Configure environment variables

Open System Environment Variables,

a. New "_NT_SYMBOL_PATH" and the value is:

srv*C:\Symbols*http://msdl.microsoft.com/download/symbols;C:\your_dir

“srv*C:\Symbols*http://msdl.microsoft.com/download/symbols” is must, the next parts included your variables. Maybe Symbols folder need to create.

b. Add umdh path into “PATH”

such as: ....;C:\Program Files\Debugging Tools for Windows (x64)

3. Add flag for the binaries you want to check then do umdh:

gflags -i sd.exe +ust //sd.exe is your binary name
umdh -p:3568 -f:sd1.log //3568 is the PID of sd, sd1.log is log file name of the first time

Same actions for other binaries to get the first log.

More information on-line: https://support.microsoft.com/en-us/kb/268343