search

fremag / MemoScope.Net

Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )
The Unlicense
691 stars 74 forks source link

x32 image, dumped with x64 task manager loading error #206

Closed joo0ne closed 5 years ago

joo0ne commented 5 years ago

When try to load in memoscope x86 version, image dumped from x32 process, but with x64 task manager, i got this error:

Failed to load dump file: xxx.DMP Exception: Wrong architecture ! Dumpfile : 64 bits, Environment.Is64BitProcess : False

WinDbg x32 open correct.

stej commented 5 years ago

If i'm not mistaken, bittness of the process used for dump (task manager) should be the same as the bittness of the proces.

fremag commented 5 years ago

That's right, if the process is 32 bit, you must use the 32 bit version of Task Manager and Memoscope. cf Wiki.

TaskMgr should be here: C:\Windows\SysWOW64\taskmgr.exe