How to Read Memory Dump Windows 10
If your PC has recently crashed, you must take faced the Blue Screen of Decease (BSOD), which lists the crash's cause and and so the PC shutdown abruptly. Now the BSOD screen is only shown for a few seconds, and information technology's not possible to analyze the reason for the crash at that moment. Thankfully, when Windows crashes, a crash dump file (.dmp) or memory dump is created to save information most the crash just before the Windows shutdown.
As shortly as the BSOD screen is displayed, Windows dumps the information about the crash from the memory to a minor file chosen "MiniDump" which is generally saved in the Windows folder. And this .dmp files tin can help you troubleshoot the cause of the mistake, but you demand to analyze the dump file. This is where it gets tricky, and Windows doesn't use any pre-installed tool to analyze this retention dump file.
At present there is a various tool which tin help you lot debug the .dmp file, merely we are going to talk nigh two tools which are BlueScreenView and Windows Debugger tools. The BlueScreenView can clarify what went wrong with the PC rapidly, and the Windows Debugger tool tin can be used to get more advanced information. And then without wasting any fourth dimension permit'south see How to Read Memory Dump Files in Windows 10 with the help of the below-listed guide.
How to Read Retentivity Dump Files in Windows 10
Make sure to create a restore point just in example something goes wrong.
Method i: Analyze Memory Dump Files using BlueScreenView
1. From NirSoft Website downloads the latest version of BlueScreenView co-ordinate to your version of Windows.
2. Extract the nix file yous download and and so double-click on BlueScreenView.exe to run the application.
iii. The programme volition automatically search for the MiniDump files at the default location, which is C:\Windows\Minidump.
4. Now if y'all want to analyze a particular .dmp file, elevate and drop that file to BlueScreenView application and the program will easily read the minidump file.
5. You will encounter the following information at the tiptop of the BlueScreenView:
- The name of the Minidump file: 082516-12750-01.dmp. Here 08 is the month, 25 is the date, and 16 is the year of the dump file.
- Crash Time is when the crash happens: 26-08-2016 02:forty:03
- Issues Cheque String is the error code: DRIVER_VERIFIER_IOMANAGER_VIOLATION
- Bug Check Code is the STOP fault: 0x000000c9
- Then there will exist Bug Check Code Parameters
- The virtually important section is Caused Past Driver: VerifierExt.sys
6. In the lower part of the screen, the driver who acquired the error volition be highlighted.
7. At present yous accept all the information about the error y'all could easily search the web for the following:
Problems Check Cord + Caused by Driver, e.1000., DRIVER_VERIFIER_IOMANAGER_VIOLATION VerifierExt.sys
Bug Check String + Bug Check Code eg: DRIVER_VERIFIER_IOMANAGER_VIOLATION 0x000000c9
8. Or you tin can right-click on the minidump file inside the BlueScreenView and click "Google Search – Bug Bank check + Driver".
nine. Use this data to troubleshoot the cause and fix the error. And this is the end of the guide How to Read Memory Dump Files in Windows 10 using BlueScreenView.
Method 2: Analyze Memory Dump Files Using Windows Debugger
ane. Download Windows 10 SDK from here.
Annotation: This programme contains WinDBG programme that we will exist using to analyze the .dmp files.
ii. Run the sdksetup.exe file and specify the installation location or utilise default.
3. Take License agreement so at "Select the features y'all want to install" screen select but the Debugging Tools for Windows option then click Install.
four. The awarding will begin downloading the WinDBG programme, so wait for it to exist installed on your organization.
5. Open up Command Prompt. The user can perform this step by searching for 'cmd' then printing Enter.
6. Type the post-obit command into cmd and hit Enter:
cd\Program Files (x86)\Windows Kits\ten\Debuggers\x64\
Annotation: Specify the right installation of the WinDBG plan.
7. Now once you lot're within the correct directory type the following control to acquaintance WinDBG with .dmp files:
windbg.exe -IA
8. As shortly every bit y'all enter the above command, a new blank instance of WinDBG volition open with a confirmation notice which y'all can close.
nine. Blazon windbg in Windows Search then click on WinDbg (X64).
x. In the WinDBG panel, click on File, and then select Symbol File Path.
11. Re-create and paste the post-obit address into the Symbol Search Path box:
SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
12. Click OK so save the symbol path by clicking File > Save Workspace.
13. Now find the dump file you want to analyze, you lot could either use the MiniDump file found in C:\Windows\Minidump or use the Retention dump file found in C:\Windows\MEMORY.DMP.
xiv. Double click the .dmp file and the WinDBG should launch and begin processing the file.
Note: Since this is the beginning .dmp file being read on your system, WinDBG appears to be boring but do not interrupt the procedure as these processes are being carried out in the background:
A folder chosen Symcache is being created in C: Symbols are being downloaded and saved to C:\Symcache
Once the symbols take been downloaded, and the dump is gear up to clarify, yous volition see the message Followup: MachineOwner at the dump text'due south bottom.
15. As well, the side by side .dmp file is processed, it will be quicker as information technology will accept already downloaded the required symbols. Over time the C:\Symcache folder will grow in size every bit more symbols are added.
16. Printing Ctrl + F to open up Discover and so type "Probably caused by" (without quotes) and hit Enter. This is the quickest fashion to find what caused the crash.
17. Above the Probably caused by line, you will see a BugCheck code, e.grand., 0x9F. Employ this code and visit Microsoft Bug Check Code Reference for verifying the bug check refer.
Recommended:
- Fix Windows can't set up upward a HomeGroup on this computer
- Fix Computer Screen Turns Off Randomly
- How To Fix Correct Click Non Working in Windows 10
- Prepare The Registry editor has stopped working
That's it you have successfully learned How to Read Memory Dump Files in Windows x but if you yet have whatever queries regarding this post then feel free to ask them in the comment's department.
Source: https://techcult.com/how-to-read-memory-dump-files-in-windows-10/
0 Response to "How to Read Memory Dump Windows 10"
Post a Comment