Menu
I have a full memory dump of a process taken through Task Manager.
Can I determine what the time was on the machine at that moment?
245
Scroll down to Serial Number and tap on it five times. On the number pad that appears, enter *#9900#. Tap Run LOG_DUMP. Once log collection is complete, tap Extract LOG_DUMP.
In Control Panel, select System and Security > System. Select Advanced system settings, and then select the Advanced tab. In the Startup and Recovery area, select Settings. Make sure that Kernel memory dump or Complete memory dump is selected under Writing Debugging Information.
It's displayed in the Command window of WinDbg after you open the dump, as 'Debug session time'.
You can have it printed again with the .time meta-command.
62
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
