Search code examples
windbgcrash-dumps

How can I check what time was the process core dump taken on windows?

I have a full memory dump of a process taken through Task Manager.

Can I determine what the time was on the machine at that moment?

Solution

  • It's displayed in the Command window of WinDbg after you open the dump, as 'Debug session time'.

    You can have it printed again with the .time meta-command.