How to find process life duration via windbg

Question

I am trying to find out for how long the process was running before it crashed. Is it possible to find this information from the dump.

Answer 1

Use the .time command. I know this works on live targets and I believe it works on dumps as well.

Answer 2

Thanks it works :). One following questuion on the outpout. The Process uptime is 20 mins but Kernel Time and USer Time total is only 15 seconds. What does this mean?

0:007> .time Debug session time: Wed Jul 7 00:17:44.000 2010 (UTC - 7:00) System Uptime: 0 days 5:21:58.007 Process Uptime: 0 days 0:20:46.000 Kernel time: 0 days 0:00:14.000 User time: 0 days 0:00:01.000

Answer 3

Time spent sleeping isn't charged against thread times.

-scott