1. Default Minidump Location Minidump files are typically stored at:
# Primary locations locations = [ r"C:\Windows\Minidump\*.dmp", r"C:\Windows\LiveKernelReports\*.dmp", r"C:\Windows\*.dmp" ] how to find minidump files windows 11
# Display results if ($results.Count -gt 0) Write-Host "`n=== Found $($results.Count) dump file(s) ===" -ForegroundColor Green $results else Write-Host "No minidump files found in $CustomPath" -ForegroundColor Red how to find minidump files windows 11
# Check default minidump location if (Test-Path $CustomPath) $minidumps = Get-ChildItem -Path $CustomPath -Filter "*.dmp" -ErrorAction SilentlyContinue foreach ($dump in $minidumps) $dumpInfo = [PSCustomObject]@ FileName = $dump.Name FullPath = $dump.FullName SizeMB = [math]::Round($dump.Length / 1MB, 2) CreatedDate = $dump.CreationTime ModifiedDate = $dump.LastWriteTime DumpType = "Minidump" CrashTime = (Get-Date $dump.CreationTime -Format "yyyy-MM-dd HH:mm:ss") $results += $dumpInfo how to find minidump files windows 11
// Get dump configuration from registry public string GetDumpConfiguration()
pause # Check current dump configuration Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\CrashControl" | Select-Object CrashDumpEnabled, DumpFile, MinidumpDir CrashDumpEnabled values: 0 = None 1 = Complete memory dump 2 = Kernel memory dump 3 = Small memory dump (minidump - what you want) 4 = Automatic memory dump 6. Advanced Search Feature (Recursive) # find_minidumps.py import os import glob from datetime import datetime def find_minidumps_windows11(): """Find all minidump files on Windows 11 system"""