Process Dump
Malware authors often use process dumps to capture the contents of running processes in memory. This technique allows them to extract sensitive data, such as decrypted passwords, cryptographic keys, or other valuable information.
Featured Windows APIs
Associated Code Snippets
| Id | Name | Language | Author | Published Date |
|---|---|---|---|---|
| 44 | Dump Process Memory via MiniDumpWriteDump |
Delphi
|
DarkCoderSc | 5 months, 3 weeks ago. |
| 43 | Dump Process Memory via ReadProcessMemory |
Delphi
|
DarkCoderSc | 5 months, 3 weeks ago. |
Associated Features
| Feature Name | Dangerousness | Key Categories |
|---|---|---|
Process Manager
|
Medium | System Management, Disruption |
Password Recovery
|
High | Credentials, Lateral Movements, Privilege Escalation |
Delphi
Process Manager
Password Recovery