Unfortunately, the memory dump (as we use it) is only a snapshot at a point in time (where the system started to crash). My favorite example is with 2 drivers called A and B. If driver A stores something in memory at a location belonging to driver B, nothing will happen as long as driver B isn't accessing that memory location. Once driver B does try to access that memory, it's not going to find what it expected to find (since driver A overwrote it). Then it gets confused and crashes. But since driver A had already stopped what it was doing, there's no evidence of it in the crash.