To collect the UMH logs:

1. Find out which process hangs because of UMH.
2. Reproduce the problem and collect the user-mode dump for the process:
   • For all Windows platforms (Run As Administrator)
     1. Download Process Explorer from the following link: Process Explorer v16.12.
     2. Right-click on the process, then go to Create Dump > Create Full Dump.

        

   • For Windows Vista and above:
     1. Open the Task Manager.
     2. Right-click on the process, then select "Create dump file".

        

3. Export the DLL information for the process (Run As Administrator):
   1. Open Process Explorer.
   2. Open the View list and select Show Processes From All Users and Show Lower Pane.
   3. Still on the view list, go to Lower Pane View and select DLLs.

      

   4. Choose the process and click "Save as..." under File to save the DLLs information.

      

4. Get the UMH-related binary files:
   • <OSCE installation path>\CCSF\module\20019
   • %windir%\system32\tmumh
   • %windir%\syswow64\tmumh
   • %windir%\system32\drivers\tmumh.sys
5. Get the UMH-related registry keys:
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmumh
   • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\GlobalFlag
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
   • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows