# Process Dump

> Process Dump is a Windows command-line tool that saves code from running processes to disk for malware analysis. It can find hidden modules and loose executable code, reconstruct PE headers and imports, and use a clean-hash database to skip known modules.

- Type: Tool
- Targets: Binary
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/glmcdona/Process-Dump>
- Primary source: <https://github.com/glmcdona/Process-Dump/blob/e4373c687937747bf2293dd55ca09082fe4913c1/README.md>
- Catalog page: <https://awesomerea.org/resources/process-dump/>
- Record JSON: <https://awesomerea.org/resources/process-dump/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/process-dump/index.md)

## Requirements & limits

- Runs on 32-bit and 64-bit Windows through the matching standalone executable; run as Administrator for best access. Release v3.0.0 is dated 2026-10-03.
- MIT per LICENSE.

## Primary sources

1. <https://github.com/glmcdona/Process-Dump/blob/e4373c687937747bf2293dd55ca09082fe4913c1/README.md>

## More in Native binaries

- [mal_unpack](https://awesomerea.org/resources/mal-unpack/index.md) · Tool
- [Bloaty](https://awesomerea.org/resources/bloaty/index.md) · Tool
- [bingrep](https://awesomerea.org/resources/bingrep/index.md) · Tool
- [libPeConv](https://awesomerea.org/resources/libpeconv/index.md) · Tool
- [Viper](https://awesomerea.org/resources/viper-framework/index.md) · Tool
- [Cuckoo3](https://awesomerea.org/resources/cuckoo3/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.