Procdump.exe

SysInternals Memory Dump Tool

Execute

Performs execution of unsigned DLL.

procdump.exe -md {PATH:.dll} explorer.exe

Loads the specified DLL where DLL is configured with a 'MiniDumpCallbackRoutine' exported function. Valid process must be provided as dump still created. — MITRE: T1202 — Privileges: User

Performs execution of unsigned DLL.

procdump.exe -md {PATH:.dll} foobar

Loads the specified DLL where configured with DLL_PROCESS_ATTACH execution, process argument can be arbitrary. — MITRE: T1202 — Privileges: User