PDF download Download Article PDF download Download Article

When your PC crashes with a blue screen error, Windows automatically creates a dump file (minidump) which contains helpful troubleshooting information, including the stop codes that led to the error. Opening and analyzing a dump file can help you determine which drivers or programs led to the crash. To read the dump file, you'll just need to download a simple free crash analysis tool like WinDbg or BlueScreenView. This wikiHow guide will walk you through opening, analyzing, managing, and making sense of Windows crash dump files.

Things You Should Know

  • Windows blue screen errors create DMP files in C:\Windows\Minidump by default. The location varies if Windows is installed on a different drive.
  • You can use WinDbg by Microsoft to open all types of .DMP files—not just those created by Windows memory or kernel errors.
  • BlueScreenView is a free debugging tool that clearly highlights the software and drivers that were involved in the system crash.
Method 1
Method 1 of 3:

Using WinDbg

PDF download Download Article
  1. This free debugging tool from Microsoft will help you analyze all types of dump (DMP) files, including memory dumps from blue screen errors.
  2. If you want to analyze system-level dump files, you'll typically need administrator privileges. To run the app as an administrator:
    • Press the Windows key and type windbg.
    • Right-click WinDbg Preview and select Run as administrator.
    • Click Yes to confirm.
    Advertisement
  3. A list of debugging processes will appear.
  4. You'll see a "Supported file formats" area that displays a list of dump formats and file extensions you can debug with this tool, including:[2]
    • Windows user and kernel mode dump formats: DMP, HDMP, MDMP
    • Windows binary image formats: EXE, DLL, SYS
    • Linux user and kernel mode core dumps and binary formats: ELF, KDUMP
    • macOS user mode core dumps and binary formats: MACHO
  5. The location of your dump file will vary. You'll usually find it in C:\Windows\minidump.[3]
    • You can also select a compressed CAB or ZIP file that contains a dump file. No need to decompress it first.
    • Minidump files are shorter versions of the dump files that are easier to open and analyze. They still contain all of the information you'll need to track down the error.
    • If you're not sure where your dump files are saved by default, you can check the location in your advanced system settings.
  6. WinDbg will now load the dump file in the analyzer. This might take a few moments depending on the size of the file.[4]
  7. This command line is just below the body of the dump file. Running this command will analyze and display verbose information in the Command tab.[5]
    • This process might take some time, as dump files can be rather large. You'll know the analysis is complete when the progress bar is no longer moving.
  8. Once the analysis is complete, you can scroll through the data to view information that can help you troubleshoot the crash. Sometimes you'll see a really clear description of what caused the dump or kernel panic, while other times the text might be kind of vague. It really depends on the type of dump file you're reading and what caused the issue.[6]
    • If you caught a blue screen error in the moment and remember the stop code (such as DRIVER_IRQL_NOT_LESS_OR_EQUAL, DPC_WATCHDOG_VIOLATION, or a hexadecimal code like0xC000000F), search the dump analysis for that string of text.[7]
    • You can also look for "MODULE_NAME" and "FAILURE_BUCKET_ID" in the analyzer to find the specific program or driver that caused the crash.
  9. Advertisement
Method 2
Method 2 of 3:

Using BlueScreenView

PDF download Download Article
  1. This free utility makes it easy to open and analyze minidump files created by Windows blue screen crashes.[8] You can download the tool from https://www.nirsoft.net/utils/blue_screen_view.html.
    • To install BlueScreenView, click Download BlueScreenView with full install/uninstall support, double-click the downloaded bluescreenview_setup.exe file, and follow the on-screen instructions.
    • If you don't want to install a program, you can download the standalone version by clicking the Download BlueScreenView (in Zip file) link. Then, just unzip the file to find a fully-usable version of the app that doesn't require installation.
  2. If you downloaded the standalone version of BlueScreenView, just double-click BlueScreenView.exe in the extracted folder. If you installed the app, you'll find BlueScreenView in your Start menu.
    • If BlueScreenView detects a dump file (ending with DMP) in the default location of C:\Windows\MiniDump, it will display the dump file's name and date in the upper portion of the window.
  3. If you don't see the dump file you're looking for, you can change the location:
    • Press Control + O on the keyboard to open the Advanced Options.
    • Click Browse.
    • Select the location of your dump file (such as C:\MiniDump}} and click OK.[9]
    • If you're not sure where your dump files are saved by default, you can check the location in your advanced system settings.
    • Minidump files are shorter versions of the dump files that are easier to open and analyze. They still contain all of the information you'll need to track down the error.
  4. The most recent dump file in the selected folder appears in the upper portion of the window. When you click the dump file, its details expand in the bottom panel.
  5. You'll see the stop code for the dump (e.g., DRIVER_IRQL_NOT_LESS_OR_EQUAL} in the "Bug Check String" column in the top panel. In the bottom panel, you'll see the drivers and programs responsible for the crash highlighted in red.[10]
  6. Advertisement
Method 3
Method 3 of 3:

Changing Memory Dump File Settings

PDF download Download Article
  1. If you need to view or change the location of your Windows system dump files, you can do so in your Advanced System Settings. Start by pressing the Windows key on your keyboard or clicking the magnifying glass on the taskbar.
    • By default, your system dump files are automatically overwritten with each new crash. You can disable this automatic overwriting if you want to keep old dump files for analysis.
  2. A list of search results will appear.
  3. It's a computer monitor with a checkmark icon at the top of the Start menu. Doing so opens the Advanced System Settings window.[11]
  4. You'll see this at the top of the window.
  5. It's below the "Startup and Recovery" heading near the bottom of the page.
  6. Each item in this menu is a different type of Windows dump file that you can configure separately. For the dump file generated by a blue screen error, choose Small memory dump from the menu.[12]
    EXPERT TIP
    Luigi Oppido

    Luigi Oppido

    Computer & Tech Specialist
    Luigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over two years.
    Luigi Oppido
    Luigi Oppido
    Computer & Tech Specialist

    A memory dump file is a file that's taken from RAM. RAM has a number of allocation tables—or buckets—inside. A memory dump file is an entire download of whatever was inside that file when a catastrophic failure happened, and it goes into a log so an engineer or a software professional can look at it and see where the conflict happened.

  7. The dump file's location appears under the "Dump file" heading.[13]
    • If you see something like %SystemRoot%\Minidump, the &SystemRoot& part of the location is just a link to the root of your Windows installation (e.g., C:\Windows). So, if Windows is installed on your C drive and the dump file location is %SystemRoot%\Minidump, your dump files are saved to C:\Minidump.
  8. For small memory dump files, older dumps are not overwritten. However, larger dump files (kernel memory dump, complete memory dump, automatic memory dump, and active memory dump) are automatically overwritten each time a new crash is logged. If you'd rather keep these old logs for analysis, select the log type, then remove the checkmark from "Overwrite any existing file."
    • The complete memory dump file is the largest type of Windows dump file.[14] If you're low on disk space and face a lot of crashes, you might want to overwrite these automatically to conserve space.
  9. If you changed any of your dump file settings, this saves them permanently. You can then click OK again to exit Advanced System Settings.
  10. Advertisement

Community Q&A

Search
Add New Question
  • Question
    What is a JSON file, and how do I view it?
    Community Answer
    Community Answer
    A JSON file contains JavaScript Object Notation. You can view the file in any text editor.
  • Question
    Am I supposed to install visual studies also when I want to read dump files?
    Community Answer
    Community Answer
    No, visual studio is another type of software that won't help you in that case. It is used for programming.
  • Question
    What do I do if I get errors when reading dump file?
    Community Answer
    Community Answer
    Edit the files and go to properties, security and add Everyone as Read. You can then see the file.
See more answers
Ask a Question
200 characters left
Include your email address to get a message when this question is answered.
Submit
Advertisement

Video

Tips

  • BlueScreenView is perfect for testing different programs (e.g., opening a program and waiting to see if your computer crashes), as it can be opened quickly and takes only a few seconds to install.
Submit a Tip
All tip submissions are carefully reviewed before being published
Thanks for submitting a tip for review!
Advertisement

Warnings

  • Computer crashes—especially ones of the blue screen of death variety—can be caused by anything from a malfunctioning app to a broken processor. As such, being able to read the dump files doesn't necessarily guarantee that you'll be able to diagnose why your computer crashed.
Advertisement

You Might Also Like

Fix the Blue Screen of Death on WindowsFix the Blue Screen of Death on Windows
Force a Blue Screen in WindowsForce a Blue Screen in Windows
Troubleshoot a ComputerTroubleshoot a Computer
Develop SoftwareHow to Make Software: Learning the Basics & Creating Your First Prototype
Restart Your Computer Using the KeyboardRestart Your Computer Using the Keyboard
Check Browsing History on a WiFi RouterCheck Browsing History on a WiFi Router
Connect PC to TV with HDMIConnect PC to TV with HDMI
Find the Publication Date of a Website3 Easy Ways to Find the Publication Date of a Website
Pair Jbl Earbuds6 Ways to Pair Your JBL Earbuds: Guide & Troubleshooting Tips
What Does DW MeanWhat Does DW Mean? Snapchat, Texting, and More
Cheat a Step Counter on a Phone10 Genius Ways to Cheat a Step Counter on a Phone (No Walking Required)
Listen to Police RadioHow to Listen to Police Radio Online: Best Apps & Websites
Open a Digital Safe Without a KeyOpen a Digital Safe Without a Key
Bypass Screen Time PasscodeHow to Bypass Your Screen Time Passcode: Reset, Remove, or Hack Screen Time
Advertisement

About This Article

Luigi Oppido
Written by:
Computer & Tech Specialist
This article was written by Luigi Oppido and by wikiHow staff writer, Nicole Levine, MFA. Luigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over two years. This article has been viewed 1,225,691 times.
How helpful is this?
Co-authors: 21
Updated: February 8, 2024
Views: 1,225,691
Article SummaryX

1. Type "advanced system settings" into the Windows search bar.
2. Click View advanced system settings.
3. Click Advanced.
4. Click Settings under "Startup and Recovery".
5. Select "Small memory dump" from the drop-down.
6. Click OK twice.
7. Install BlueScreenView.
8. Open BlueScreenView to find the dump.

Did this summary help you?

Thanks to all authors for creating a page that has been read 1,225,691 times.

Is this article up to date?

Advertisement