WinPmem

参考链接：

LogoGitHub - ReversecLabs/physmem2profit: Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotelyGitHub

上一页comsvcs.dll下一页ProcessDump.exe

最后更新于

这有帮助吗？