windbg - 来自故障转储文件的主机信息

Question

是否可以获得有关创建转储文件的主机的信息，例如操作系统版本、服务包、.NET 框架版本等。

Answer 1

该vertarget命令还显示 Microsoft Windows 操作系统的当前版本。系统

Answer 2

打开转储文件时会自动列出操作系统版本等。

!eeversion您可以使用该命令获取 .NET 框架版本。

0:000> !eeversion
2.0.50727.4952 free
Workstation mode
SOS Version: 2.0.50727.4952 retail build

要获取已加载模块的其他信息，请使用lm. 例如

0:000> lm vm mscoree
start             end                 module name
000007fe`f0f10000 000007fe`f0f7f000   mscoree    (deferred)             
    Image path: C:\Windows\System32\mscoree.dll
    Image name: mscoree.dll
    Timestamp:        Fri Nov 06 06:09:26 2009 (4AF3AF86)
    CheckSum:         00072187
    ImageSize:        0006F000
    File version:     4.0.31106.0
    Product version:  4.0.31106.0
    File flags:       8 (Mask 3F) Private
    File OS:          4 Unknown Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® .NET Framework
    InternalName:     mscoree.dll
    OriginalFilename: mscoree.dll
    ProductVersion:   4.0.31106.0
    FileVersion:      4.0.31106.0 (Main.031106-0000)
    PrivateBuild:     DDBLD278
    FileDescription:  Microsoft .NET Runtime Execution Engine
    LegalCopyright:   © Microsoft Corporation.  All rights reserved.
    Comments:         Flavor=Retail