Do minidump files contain the timestamp of the crash?

Posted by Roger Lipscombe on Stack Overflow See other posts from Stack Overflow or by Roger Lipscombe
Published on 2010-03-15T09:52:48Z Indexed on 2010/03/15 12:29 UTC
Read the original article Hit count: 350

Filed under:

minidump

|

postmortem-debugging

The MiscInfoStream in a minidump file contains the process create time. I'd like to find out how long the process has been running for before the crash. Does a minidump file contain the exception timestamp anywhere?

WinDbg on this dump file displays the following, which implies that it's in there somewhere...

Debug session time: Tue Dec 29 15:49:20.000 2009 (GMT+0)
System Uptime: not available
Process Uptime: 0 days 0:33:03.000

Note that today's Mar 15, so this is almost certainly the timestamp of the crash. I'd like a programmatic way to retrieve that value and the "Process Uptime" value.

I found the MINIDUMP_MISC_INFO_3 structure, which contains some timezone information, but it doesn't seem to contain the exception time.

© Stack Overflow or respective owner

Related posts about minidump

Creating a MiniDump of a running process

as seen on Stack Overflow - Search for 'Stack Overflow'
Im trying to make a tool for my end users that can create a MiniDump of my application if it hangs (i.e. external to the app). Im using the same code as the internal MiniDumper but with the handle and processid of the app but i keep getting error code 0xD0000024 when calling MiniDumpWriteDump. Any… >>> More
Minidump folder cannot be found

as seen on Super User - Search for 'Super User'
Although I have enabled the creation of minidump files in my system, it appears that either Windows doesn't create them where the Startup and recovery dialog points to (%SystemRoot%\Minidump) or at least I can't find them. Even the Minidump folder under Windows directory is missing and I had numerous… >>> More
Usage of Minidump within a COM Object

as seen on Stack Overflow - Search for 'Stack Overflow'
hi, I'm developing a COM dll which is an add-in to MSoffice. Since I'm not creating any logs within add-in I would like to add a crash report generator into my add-in. Hopefully 'Minidump' would be the best choice, but I have never use Minidump inside a COM object. I appreciate if somebody can… >>> More
Getting timestamp of module from crash minidump

as seen on Super User - Search for 'Super User'
Is there a way to get the timestamp of any module from crash dump. >>> More
How to set AeDebug to get a minidump with the name of the process ?

as seen on Stack Overflow - Search for 'Stack Overflow'
I have to perform some post mortem debugging on a C++ project. Known way to perform is to set the cdb debugger as a minidump generator and to process the dumps collects afterwards. I read nearly the whole web and I didn't find a solution to produce a minidump with the name of the process that has… >>> More

Related posts about postmortem-debugging

Postmortem debugging with WinDBG.

as seen on Stack Overflow - Search for 'Stack Overflow'
I have an WCF-service running on an server, and occasionally(1-2 times every month) it throws an COMException with the informative message ”Unknown error (0x8005008)”. When i googled for this particular error I only got threads about problems when creating virtual directories in IIS. And the source… >>> More
PDB file from different versions of Visual Studio

as seen on Stack Overflow - Search for 'Stack Overflow'
I have an old DLL file which was built with VC++ 6. Now I need to investigate the dump file but I don't have its PDB available. The stacktrace reported by WinDbg is also inaccurate. Is it possible to rebuild the project with later versions of Visual Studio i.e. 2003, 2005, 2008, have the PDB generated… >>> More
Do minidump files contain the timestamp of the crash?

as seen on Stack Overflow - Search for 'Stack Overflow'
The MiscInfoStream in a minidump file contains the process create time. I'd like to find out how long the process has been running for before the crash. Does a minidump file contain the exception timestamp anywhere? WinDbg on this dump file displays the following, which implies that it's in there… >>> More