Application Crashes and Hangs Metrics


I am trying to understand ProcTimestamp vs ModuleTimestamp a bit more.

Is ModuleTimestamp the time stamp when the module faulted ?

Is ProcTimestamp is when the module started?




1 comment

  • Avatar
    Martin Kretzschmar Official comment

    Hi Peter,

    For reference, you can have a look at the Windows Application event log, and filter for Event ID 1000. An example event looks like this:

    Faulting application name: dwm.exe, version: 10.0.18362.387, time stamp: 0x8e064b77
    Faulting module name: unknown, version:, time stamp: 0x00000000

    The first timestamp is stored in ProcTimestamp, the second in ModuleTimestamp.

    The timestamp itself reflects the changed date as shown in Windows Explorer. This answer on Stackoverflow might also help.

    Kind regards, Martin

Please sign in to leave a comment.