c:\code\MemoryDump\Release>MemoryDump.exe explorer.exe v Searching for target process... Failed to open process 0x0: 0x57 Failed to open process 0x4: 0x5 [...] Checking target process' ACL for problematic entries... Opened \Device\HarddiskVolume3\Windows\explorer.exe as PID 0xb30 Target process suspended, 31 threads Proceeding with memory dump Address Size Type State Protect 10000: 10000 MAPPED COMMIT READ&WRITE 20000: 2000 MAPPED COMMIT READONLY 22000: e000 0 FREE NOACCESS 30000: 4000 MAPPED COMMIT READONLY 34000: c000 0 FREE NOACCESS 40000: 2000 MAPPED COMMIT READONLY 42000: e000 0 FREE NOACCESS 50000: 1000 PRIVATE COMMIT READ&WRITE 51000: f000 0 FREE NOACCESS 60000: 10000 PRIVATE COMMIT READ&WRITE 70000: 7000 MAPPED COMMIT READONLY 77000: 9000 0 FREE NOACCESS [...] 77610000: 3000 IMAGE COMMIT READONLY 77613000: 79cd000 0 FREE NOACCESS 7efe0000: 5000 MAPPED COMMIT READONLY 7efe5000: fb000 MAPPED RESERVE 0 7f0e0000: f00000 PRIVATE RESERVE 0 7ffe0000: 1000 PRIVATE COMMIT READONLY 7ffe1000: f000 PRIVATE RESERVE 0 Process resumed. Memory dumped to 2864.mem
There are 31,314 total registered users.
[+] expand
Printer Friendly ...
![[+] expand](/imagery/files/soysauce_blueprint.gif){kind=link}