.MDMP

MDMP File

Windows Minidump File
Ask a question
QUICK ANSWER

An MDMP file is a Windows minidump - a compact crash snapshot saved by Windows or an app the moment it crashed. You open it with a debugger such as WinDbg or Visual Studio to find the cause. If you are not a developer, it is safe to delete.

Developer: Microsoft Category: System Files MIME: application/x-msdownload
OPENS ON Windows
Related: .NOMEDIA · .DLL · .TMP · .LNK

On this page

19k+ extensions indexed
Last reviewed Aug 24, 2026

Not sure what your file is?

Drop any file into our identifier - we read just the first bytes to name the format.

Identify a file

What is the MDMP file format?

A file with the .mdmp extension is a system file created by Windows to capture a snapshot of memory and process state at the moment of failure. Its name is short for Windows Minidump. .mdmp files are binary in format and typically small compared to full memory dumps.

The file is created each time an unexpected crash occurs - for instance, during a Blue Screen of Death (BSOD), indicating a serious system or software error. Kernel minidumps are stored in the %SystemRoot%\Minidump\ folder. A file name encodes the crash date in month-day-year order followed by a sequential dump number - for example, Mini081518-01.mdmp for a crash on August 15, 2018.

User-mode applications can also generate .mdmp files programmatically via the MiniDumpWriteDump API in DbgHelp.dll. Every .mdmp begins with the four-byte ASCII signature MDMP at byte offset 0, distinguishing it from full kernel dumps (see .DMP), which use a PAGEDUMP or PAGEDU64 signature instead. Windows Error Reporting may save .mdmp files alongside .WER crash reports.

Opening .mdmp files requires a debugger such as WinDbg or Visual Studio.

Security & safety

RISK: LOW

A minidump is passive diagnostic data and cannot execute, so opening one is safe. The real concern is privacy: a dump captures live memory, which can include fragments of whatever the program held - file paths, usernames, in some cases passwords, tokens or document contents. Treat a minidump from a sensitive app as sensitive data; only share it with trusted developers/vendors. Beware files named 'something.mdmp.exe' or fake 'dump readers' bundled with adware - open dumps only in genuine Microsoft tools (WinDbg/Visual Studio) or reputable utilities.

Format details

in a nutshell
FULL NAMEWindows Minidump File
DEVELOPERMicrosoftsince Windows XP / Visual Studio era (MiniDumpWriteDump API, early 2000s)
CATEGORYSystem Files
MIME TYPEapplication/x-msdownload
TYPEMicrosoft Minidump (MDMP) crash-dump container (binary)
MAGIC BYTES · FILE SIGNATURE
OFFSET
00010203
HEX
4D444D50
ASCII
MDMP
A minidump begins with the 4-byte signature "MDMP" (4D 44 4D 50), followed by a version field (often the bytes 93 A7 ...). This is the MINIDUMP_HEADER. Kernel full memory dumps (MEMORY.DMP) use a different 'PAGEDU64'/'PAGEDUMP' signature - those are a related but distinct dump type.

Programs that open MDMP files

Windows4 apps
Visual Studio Freemium File > Open the .mdmp; click 'Debug with Native/Managed Only'. Best with the matching source and PDB symbols. Community edition is free.
WinDbg (Windows SDK / Microsoft Store) Free File > Open dump file (or windbg -z file.mdmp); run '!analyze -v' to get the likely cause and faulting stack.
Windows SDK (Debugging Tools) Free Installs WinDbg and the Debugging Tools for Windows used to open and analyze minidumps.
BlueScreenView / WhoCrashed (kernel minidumps) Free For BSOD minidumps in C:\Windows\Minidump: open to see the likely faulting driver in a simple table - no debugger knowledge needed.

Technical details

deep spec
File signatureASCII "MDMP" (hex 4D 44 4D 50) at byte offset 0
DeveloperMicrosoft
Format structureBinary; root is MINIDUMP_HEADER, data organized as typed streams enumerated in MINIDUMP_DIRECTORY
MIME typeapplication/x-msdownload
Generation APIMiniDumpWriteDump() in DbgHelp.dll (Windows SDK); also triggered automatically by Windows Error Reporting
Kernel minidump storage path%SystemRoot%\Minidump\ (typically C:\Windows\Minidump\)
File naming conventionMiniMMDDYY-NN.mdmp - month, day, two-digit year, sequential crash number
Dump type fieldMINIDUMP_TYPE enum embedded in the file controls captured content: MiniDumpNormal, MiniDumpWithHeap, MiniDumpWithFullMemory, and others
Captured dataThread call stacks, loaded module list, process and system information; optionally heap contents, handle table, unloaded modules
Version field16-bit implementation version at offset 4 of MINIDUMP_HEADER; current value typically 0xA793
Distinguished from full kernel dumpsFull dumps (MEMORY.DMP) use PAGEDUMP/PAGEDU64 signature and capture all RAM; .mdmp captures only selected process-level data
PlatformWindows-only; no native Linux or macOS support (Wine can produce compatible files for POSIX processes)
Processor architecture recordArchitecture stored in MINIDUMP_SYSTEM_INFO stream; supports x86, x64, ARM, and ARM64 within the same container format
Primary analysis toolsWinDbg (Windows SDK / Microsoft Store), Visual Studio debugger, BlueScreenView, WhoCrashed
ReleasedWindows XP / Visual Studio era (MiniDumpWriteDump API, early 2000s)
Specificationlearn.microsoft.com

MDMP conversions

Community Q&A

asked by users
Ask a quick question
Get help from people who work with MDMP files. Be specific - include your system and software version.
No account needed · answers usually within a day

No questions yet - be the first to ask about MDMP files.

Frequently asked questions

What is an .mdmp file and do I need it?
It is a Windows minidump - a snapshot of a program (or Windows) at the moment it crashed, used by developers to diagnose the crash. If you're not debugging anything, you generally don't need it and can delete old ones to free space.
How do I open / read an .mdmp file?
Open it in a debugger: Visual Studio (free Community edition) or WinDbg from the Windows SDK. In WinDbg, run '!analyze -v' to get a readable summary of the likely cause and the faulting call stack.
Can I delete .mdmp files?
Yes - they are diagnostic crash files, not part of your data or the OS. Deleting them is safe (Disk Cleanup even offers to remove system error dumps). Only keep one if a developer asked you to send it.
Why does my computer keep creating .mdmp files?
Because an app or Windows is repeatedly crashing and writing a dump each time. The dumps are a symptom; use one (in WinDbg/Visual Studio) to find the faulting module or driver, then fix or update that component.
How do I read a Blue Screen minidump in C:\Windows\Minidump?
For a quick answer use NirSoft BlueScreenView or WhoCrashed, which show the likely faulting driver in a table. For deeper analysis, open the .dmp in WinDbg and run '!analyze -v'.
Can I convert an .mdmp to a normal file or EXE?
No. It isn't a document or a program - it's a memory snapshot tied to specific binaries and symbols. The only useful output is a text crash report generated by a debugger (e.g. WinDbg's !analyze).

References

1Microsoft - MiniDumpWriteDump function (minidump API)learn.microsoft.com
2Microsoft - Debugging Tools for Windows (WinDbg)learn.microsoft.com

Keep exploring

across the database

Top extensions this week

1.AQQAQQ Instant Messenger File
2.CRDOWNLOADChrome Partial Download File
3.PARTPartial Download File
4.DATProgram Data File (generic)
5.EXEWindows Executable (Portable Executable)
6.BINCD/DVD Disc Image (BIN/CUE)
7.NOMEDIAAndroid No-Media Marker File
8.RPMSGRestricted Permission Message
9.MDMarkdown Document
10.TMPTemporary File

Related extensions

.NOMEDIAAndroid No-Media Marker File
.DLLDynamic Link Library
.TMPTemporary File
.LNKWindows Shell Link (Shortcut)
.PKGmacOS Installer Package
.ETLEvent Trace Log

Free file tools

An in-browser file identifier and image converter - everything runs on your device.

Open the toolbox

Browse file extensions A-Z