LOLBAS. GitHub
LIVING OFF THE LAND / OTHER MICROSOFT BINARIES

DumpMinitool.exe

View source

Dump tool part Visual Studio 2022

Dump
01COMMAND EXAMPLES
01ATT&CK TECHNIQUES
03DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

1 examples

Dump1

EXAMPLE 01T1003.001

Creates a memory dump of the lsass process

COMMAND
DumpMinitool.exe --file {PATH_ABSOLUTE} --processId 1132 --dumpType Full
USE CASE
Create memory dump and parse it offline
PRIVILEGES
Administrator
OPERATING SYSTEM
Windows 10, Windows 11
02 / ON DISK

Known paths

C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\TestPlatform\Extensions\DumpMinitool.exe
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

3 resources
FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

mr.d0x@mrd0x