Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there any tools to dump the running application from memory in Windows 7?

share|improve this question
up vote 9 down vote accepted

just "right click" the process in the taskmanager and select "create memory dump"

alt text

share|improve this answer
    
can i still be able to run that file? – abmv Jun 1 '10 at 10:12
    
@abmv: "run" as in .. start the dump? or do you ask if the dumping process stops the process? if it is the latter: dumping the memory does not stop the process. – akira Jun 1 '10 at 10:41
    
well i'm looking for something like PROCDUMP32 – abmv Jun 2 '10 at 16:56
    
@abmv: well, that is not what you asked for in the first place. a good tool for reverse engineering is "ida pro" (hex-rays.com/idapro). – akira Jun 2 '10 at 19:08
    
i guess the word dump was misleading thanks for you reply – abmv Jun 3 '10 at 7:02

Simplest is probably procdump from SysInternals.

The Debugging Tools for Windows gives more advanced options (e.g. automatically dump the process on certain conditions).

share|improve this answer

You can use adplus -crash -p <process id> -o <place to put the dump> from command line if the process you want to dump is crashing at some point. see here

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .