Value of DEBUG_FLR_IMAGE_TIMESTAMP?

WINDBG
1

Does anyone know how is the value of DEBUG_FLR_IMAGE_TIMESTAMP in the
minidump calculated by Windows when creating the dump? Is it related to
the timestamp of the .SYS file that crashed, or anything else? Can it be
used to identify the specific build of the driver that cause the crash?

Thanks in advance!

–
Regards,

Andrei Belogortseff
WinAbility(r) Software Corp. [http://www.winability.com/]
“Useful Windows Utilities and Security Software”

2

Answering my own question (actually it was Dmitry Vostokov @
DumpAnalysis.org who answered it):

DEBUG_FLR_IMAGE_TIMESTAMP displays the value of the timestamp from the
PE header as set by the linker.

HTHS

–
Regards,

Andrei Belogortseff
WinAbility(r) Software Corp. [http://www.winability.com/]
“Useful Windows Utilities and Security Software”