dump 系统进程信息，结合mimikatz 使用，可以获取系统hash-Using ProcDump



usage: procdump [-a] [[-c|-cl CPU usage] [-u] [-s seconds]] [-n exceeds] [-e [1 [-b]] [-f <filter,...>] [-g] [-h] [-l] [-m|-ml commit usage] [-ma |-mp] [-o] [-p|-pl counter threshold] [-r] [-t] [-d <callback DLL>] [-64] <[-w] <process name or service name or PID> [dump file] |-i <dump file> |-u |-x <dump file> <image file> [arguments] >] [-? [-e]