Guide

Blue Screen in Windows 11

Published

Blue screensCrash logsEvent Viewer

A Windows 11 blue screen, also known as a Stop error, occurs when hardware, drivers, or software cause an unexpected system crash. You can find the exact cause by checking the bug check code in Event Viewer or analyzing memory dump files with WinDbg.

Stop Windows from restarting immediately

Windows may be configured to reboot automatically right after a crash, preventing you from reading the Stop code on screen.

  1. Open System Properties and switch to the Advanced tab.
  2. Under Startup and Recovery, select Settings.
  3. Clear the Automatically restart check box.
  4. Select OK to save your changes.

Find the bug check code in Event Viewer

When a blue screen causes an unexpected restart, Windows records Event ID 41 (source: Microsoft-Windows-Kernel-Power, level: Critical) in the System log at startup. Open this event and check the Details tab for BugcheckCode.

The code is shown in decimal format. Open Calculator in Programmer view and convert it to hexadecimal (for example, 159 becomes 0x9F, written as 0x0000009F). Look up this code in the Bug Check Code Reference to see what caused the Stop error.

SourceFile or event locationCrash information
Event ViewerSystem log (Event ID 41)Decimal BugcheckCode from the Stop error
Small memory dump%SystemRoot%\MinidumpIndividual date-named files such as Mini022900-01.dmp
Kernel memory dump%SystemRoot%\Memory.dmpFull memory dump overwritten on each crash by default

Read memory dump files with WinDbg

Small memory dump files are stored in %SystemRoot%\Minidump if the boot volume has a paging file of at least 2 MB. You can select the dump type under System Properties → Advanced → Startup and Recovery → Settings → Write debugging information.

You can open dump files using WinDbg or KD from the Debugging Tools for Windows (via the File menu or the .opendump command). Run !analyze -v to view detailed bug check codes and parameters, or run lm N T to display the loaded driver modules.

Hardware and driver troubleshooting

According to Microsoft's unexpected restart and Stop code guidelines, work through these initial steps:

Why did my Windows 11 PC restart without showing the blue screen?

Windows automatically restarts on a system failure by default. Clearing the 'Automatically restart' option under Startup and Recovery keeps the Stop error message visible on screen.

What tool can open Windows memory dump files?

You can use WinDbg or KD from the Debugging Tools for Windows to open dump files, and run !analyze -v to inspect the bug check code and crash parameters.

Sources

Official documentation, checked 2026-10-17.

CrashWhy reads these Windows logs for you and explains what happened in plain English — free for Windows.