Process Dump

Malware authors often use process dumps to capture the contents of running processes in memory. This technique allows them to extract sensitive data, such as decrypted passwords, cryptographic keys, or other valuable information.

Featured Windows APIs

Associated Code Snippets

Id Name Language Author Published Date
44 Dump Process Memory via MiniDumpWriteDump Delphi logoDelphi DarkCoderSc 2 weeks, 4 days ago.
43 Dump Process Memory via ReadProcessMemory Delphi logoDelphi DarkCoderSc 2 weeks, 6 days ago.

Associated Features

Feature Name Dangerousness Key Categories
Process Manager logoProcess Manager Medium System Management, Disruption
Password Recovery logoPassword Recovery High Lateral Movements, Credentials, Privilege Escalation