public string FileName get; set; public string FullPath get; set; public long SizeBytes get; set; public DateTime CreatedTime get; set; public DateTime ModifiedTime get; set; public string DumpType get; set;
public class DumpFileInfo
var dumpFiles = new List<DumpFileInfo>(); // Check minidump directory if (Directory.Exists(DefaultMinidumpPath)) var dumps = Directory.GetFiles(DefaultMinidumpPath, "*.dmp"); foreach (var dump in dumps) var fileInfo = new FileInfo(dump); dumpFiles.Add(new DumpFileInfo FileName = Path.GetFileName(dump), FullPath = dump, SizeBytes = fileInfo.Length, CreatedTime = fileInfo.CreationTime, ModifiedTime = fileInfo.LastWriteTime, DumpType = "Minidump" ); // Include full memory dump if requested and exists if (includeFullDump && File.Exists(FullDumpPath)) var fileInfo = new FileInfo(FullDumpPath); dumpFiles.Add(new DumpFileInfo FileName = "MEMORY.DMP", FullPath = FullDumpPath, SizeBytes = fileInfo.Length, CreatedTime = fileInfo.CreationTime, ModifiedTime = fileInfo.LastWriteTime, DumpType = "Full Memory Dump" ); // Sort by modified date (newest first) return dumpFiles.OrderByDescending(d => d.ModifiedTime).ToList(); how to find minidump files windows 11
pause # Check current dump configuration Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\CrashControl" | Select-Object CrashDumpEnabled, DumpFile, MinidumpDir CrashDumpEnabled values: 0 = None 1 = Complete memory dump 2 = Kernel memory dump 3 = Small memory dump (minidump - what you want) 4 = Automatic memory dump 6. Advanced Search Feature (Recursive) # find_minidumps.py import os import glob from datetime import datetime def find_minidumps_windows11(): """Find all minidump files on Windows 11 system""" public string FileName get; set; public string FullPath
:: Check Minidump directory if exist "C:\Windows\Minidump*.dmp" ( echo Found minidump files: echo. dir "C:\Windows\Minidump*.dmp" /O-D /T:W echo. @echo off :: find_minidumps
@echo off :: find_minidumps.bat echo ======================================== echo Windows Minidump File Finder echo ======================================== echo.
:: Check for full memory dump if exist "C:\Windows\MEMORY.DMP" ( echo. echo Full memory dump found: dir "C:\Windows\MEMORY.DMP" ) else ( echo. echo No full memory dump found )
public string FileName get; set; public string FullPath get; set; public long SizeBytes get; set; public DateTime CreatedTime get; set; public DateTime ModifiedTime get; set; public string DumpType get; set;
public class DumpFileInfo
var dumpFiles = new List<DumpFileInfo>(); // Check minidump directory if (Directory.Exists(DefaultMinidumpPath)) var dumps = Directory.GetFiles(DefaultMinidumpPath, "*.dmp"); foreach (var dump in dumps) var fileInfo = new FileInfo(dump); dumpFiles.Add(new DumpFileInfo FileName = Path.GetFileName(dump), FullPath = dump, SizeBytes = fileInfo.Length, CreatedTime = fileInfo.CreationTime, ModifiedTime = fileInfo.LastWriteTime, DumpType = "Minidump" ); // Include full memory dump if requested and exists if (includeFullDump && File.Exists(FullDumpPath)) var fileInfo = new FileInfo(FullDumpPath); dumpFiles.Add(new DumpFileInfo FileName = "MEMORY.DMP", FullPath = FullDumpPath, SizeBytes = fileInfo.Length, CreatedTime = fileInfo.CreationTime, ModifiedTime = fileInfo.LastWriteTime, DumpType = "Full Memory Dump" ); // Sort by modified date (newest first) return dumpFiles.OrderByDescending(d => d.ModifiedTime).ToList();
pause # Check current dump configuration Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\CrashControl" | Select-Object CrashDumpEnabled, DumpFile, MinidumpDir CrashDumpEnabled values: 0 = None 1 = Complete memory dump 2 = Kernel memory dump 3 = Small memory dump (minidump - what you want) 4 = Automatic memory dump 6. Advanced Search Feature (Recursive) # find_minidumps.py import os import glob from datetime import datetime def find_minidumps_windows11(): """Find all minidump files on Windows 11 system"""
:: Check Minidump directory if exist "C:\Windows\Minidump*.dmp" ( echo Found minidump files: echo. dir "C:\Windows\Minidump*.dmp" /O-D /T:W echo.
@echo off :: find_minidumps.bat echo ======================================== echo Windows Minidump File Finder echo ======================================== echo.
:: Check for full memory dump if exist "C:\Windows\MEMORY.DMP" ( echo. echo Full memory dump found: dir "C:\Windows\MEMORY.DMP" ) else ( echo. echo No full memory dump found )