Dump file data from Volatility

General (Technical, Procedural, Software, Hardware etc.)

Last Post by hjc 3 years ago

1 Posts

1 Users

0 Reactions

1,107 Views

RSS

hjc

(@hjc)

New Member

Joined: 3 years ago

Posts: 1

Topic starter 28/10/2022 11:42 pm

I want to dump all information from the following process found with psscan

19176 6884 CryptoProgA.ex 0x808a00e130c0 1 - 1 True 2022-10-28 21:45:42.000000 N/A Disabled

I'm looking to extract an encryption key so I need to dump all RAM data associated with this process. I tried windows.dumpfiles but it didnt return anything. Which command should I use to extract this information?

Best Regards,

Henry

Quote

8 Forums
15.7 K Topics
92.2 K Posts
13 Online
41 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed