I need a tiny source code to get the driver name which caused a Bluescreen from the minidump files (*.dmp) located in C:\Windows\Minidump.
I attached two .dmp sample files.
Input: *.dmp file name
Output: diver name (if any) which cause the bluescreen AND error code
Output: mfehidk.sys, INVALID_PROCESS_DETACH_ATTEMPT(6) or DRIVER_FAULT
Your solution may not use 3rd party components or programs (like WinDbg). Verify your results with WinDbg.
Perhaps same helpfull links:
The attached __091212-45692-01.dmp comes from a Windows 7 64bit computer.
The attached Mini052012-15.dmp comes from http://www.bleepingcomputer.com/forums/topic454488.html/page__view__findpost__p__2721742. There is an analysis of this .dmp, they found out "mfehidk.sys" caused the crash.
The driver filename is not correctly decoded by BluescreenView for these dumps. Bluescreenview indicates that the filename is ntoskrnl.exe, whereas the forum mentions that the error is caused by mfehidk.sys. If I use WinDbg, however, I get the correct filename, mfehidk.sys.
Since WinDbg is correctly able to get the file, I think there might be a way to get it.
Thank you for your help!