public string FileName get; set; public string FullPath get; set; public long SizeBytes get; set; public DateTime CreatedTime get; set; public DateTime ModifiedTime get; set; public string DumpType get; set;
:: Get file count and total size set count=0 set total=0 for %%F in ("C:\Windows\Minidump\*.dmp") do ( set /a count+=1 set /a total+=%%~zF ) echo Total files: %count% echo Total size: %total% bytes ) else ( echo No minidump files found in C:\Windows\Minidump ) how to find minidump files windows 11
pause # Check current dump configuration Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\CrashControl" | Select-Object CrashDumpEnabled, DumpFile, MinidumpDir CrashDumpEnabled values: 0 = None 1 = Complete memory dump 2 = Kernel memory dump 3 = Small memory dump (minidump - what you want) 4 = Automatic memory dump 6. Advanced Search Feature (Recursive) # find_minidumps.py import os import glob from datetime import datetime def find_minidumps_windows11(): """Find all minidump files on Windows 11 system""" public string FileName get; set; public string FullPath
# Include full memory dumps if requested if ($IncludeFullDumps) $fullDumpPath = "C:\Windows\MEMORY.DMP" if (Test-Path $fullDumpPath) $dump = Get-Item $fullDumpPath $dumpInfo = [PSCustomObject]@ FileName = $dump.Name FullPath = $dump.FullName SizeMB = [math]::Round($dump.Length / 1MB, 2) CreatedDate = $dump.CreationTime ModifiedDate = $dump.LastWriteTime DumpType = "Full Memory Dump" CrashTime = "Check Event Viewer for timestamp" $results += $dumpInfo public string FileName get
string dumpType = "Not configured"; using (var key = Registry.LocalMachine.OpenSubKey(@"SYSTEM\CurrentControlSet\Control\CrashControl")) if (key != null) int crashDumpEnabled = (int)key.GetValue("CrashDumpEnabled", 0); dumpType = crashDumpEnabled switch 0 => "None", 1 => "Complete memory dump", 2 => "Kernel memory dump", 3 => "Small memory dump (Minidump)", 4 => "Automatic memory dump", _ => "Unknown" ; return dumpType;
:: Check Minidump directory if exist "C:\Windows\Minidump*.dmp" ( echo Found minidump files: echo. dir "C:\Windows\Minidump*.dmp" /O-D /T:W echo.