How to Create Live Kernel Dumps in Windows 11
- 10 steps
- Needs administrator rights
Live kernel dumps in Windows 11 capture your computer’s core memory while Windows is running, so you can troubleshoot tricky crashes without restarting your PC. This diagnostic snapshot freezes system activity at a precise moment and records data about hard-to-find errors, such as bug check code 0x161.
You can use these memory files to find out why your system is unstable and to track down problems with hardware-related software like your graphics driver. Because the machine keeps running, the faulty state you want to study is not lost to a reboot.
Open Task Manager with Ctrl+Shift+Esc, click the Details tab, then right-click a blank area of the process list and choose Create live kernel dump file. Pick Full live kernel dump or Kernel stacks dump, wait for the confirmation box, and the.dmp file is saved to 📁C:\
How to Create a Live Kernel Dump
A live kernel dump saves a snapshot of your system memory so you can troubleshoot freezing or crashing issues without forcing a reboot. The quickest way to make one is through Task Manager while the PC is still running. It saves the current state of Windows for later analysis.
- Open Task Manager by pressing Ctrl+Shift+Esc on your keyboard. The Task Manager window should appear.
- Click on the Details tab. On Windows 11 22H2 and later, Task Manager uses a left-hand navigation pane, and Details is listed there. You should now see a table of running processes with columns such as Name, PID and Status.
windows 11 task manager details - Right-click on any empty space in the list of processes. Click blank space, not a process row. A context menu should open.
- Select Create live kernel dump file. If you do not see this option, close Task Manager and reopen it from an administrator account.
- Choose either Full live kernel dump or Kernel stacks dump. The full dump holds more data and is larger. The kernel stacks dump is smaller and quicker to make, but it holds less detail. If you are not sure which one you need, pick the full dump.
windows 11 create live kernel dump file - Wait for Windows to finish writing the file. A box will then appear showing you where the file was saved. This can take a little while on a PC with a lot of RAM, and the system may feel slow while it runs.
- Click OK to close the box.
- Click Open file location to go to the folder where the dump file is saved in 📁C:\
Windows\ . The file ends in .dmp. Copy it somewhere safe before you analyze it or send it to anyone.System32\ LiveKernelReports
Advanced Methods: Command-Line and Tools
Beyond Task Manager, you can use advanced debugging tools. The ProcDump utility from the Sysinternals suite is a powerful alternative. You can also use the Windows Error Reporting (WER) service to trigger these dumps manually. For deep analysis, professionals use WinDbg to inspect the memory dump file.
These tools take more setup than Task Manager. Use them when you need to script the dump or capture it on a machine you can’t sit at.
Analysis and Debugging
You can open the .dmp file in WinDbg. From there you can run analysis commands to see which driver or process caused the system to hang. Dump files can contain sensitive data from memory, so be careful about who you share them with. Refer to the official Microsoft documentation for advanced debugging resources.
Summary
A live kernel dump in Windows 11 lets you grab important system information while your computer is still working. That helps you fix problems without needing a full restart.
Where are live kernel dumps stored by default in 🪟 Windows 11?
By default, Windows 11 saves these diagnostic files in the 📁C:\
Have a question about this guide?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!