Dump file data from Volatility

General (Technical, Procedural, Software, Hardware etc.)

Last Post by hjc 2 years ago

1 Posts

1 Users

0 Reactions

945 Views

RSS

hjc

(@hjc)

Posts: 1

New Member

Topic starter

I want to dump all information from the following process found with psscan

19176 6884 CryptoProgA.ex 0x808a00e130c0 1 - 1 True 2022-10-28 21:45:42.000000 N/A Disabled

I'm looking to extract an encryption key so I need to dump all RAM data associated with this process. I tried windows.dumpfiles but it didnt return anything. Which command should I use to extract this information?

Best Regards,

Henry

Posted : 28/10/2022 11:42 pm

8 Forums
15.5 K Topics
92 K Posts
14 Online
40.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed