Collaborate Disseminate
I am new to digital forensics, and I’m practising cracking memory dumps. I have a pid with me which is 1764 and i need to extract the username and computer name of the dump file.
These are what i used so far and nothing worked.
C:\volatili… Continue reading Using a pid in memory to identify the computername and username
If the Windows Driver Foundation is missing or does not work properly on your Windows 11/10…
For more, visit TheWindowsClub.com. Continue reading Windows Driver Foundation missing, failed to load or not working in Windows 11/10
We are always wary of unknown processes and igfxTray.exe is one of them. You may have seen a…
For more, visit TheWindowsClub.com. Continue reading What is igfxTray.exe? Is it safe? Can I disable it?
You can use WMIC command line to find & check running processes by name on your Windows 11/10…
For more, visit TheWindowsClub.com. Continue reading How to find all running processes using WMIC in Windows 11/10
One of the most challenging parts of figuring out an app running in the Task Manager is to find out…
For more, visit TheWindowsClub.com. Continue reading What is SECOMNService.exe? Can I disable it?
Service Host: Network Service is a Windows process used to download updates on a lot of computers….
For more, visit TheWindowsClub.com. Continue reading Service Host Network Service High network usage in Windows 11/10
There are a ton of processes running in the background that we are oblivious of and one of them…
For more, visit TheWindowsClub.com. Continue reading What is SearchApp.exe? Can I disable it?
In this post, we will see what is Vmmem process and how to fix high memory usage by vmmem.exe on…
For more, visit TheWindowsClub.com. Continue reading What is Vmmem process? Fix vmmem.exe high memory usage on Windows 11/10
In logs, I found lsass.exe spawning lsass.exe.
C:\Windows\System32\smss.exe
C:\Windows\System32\smss.exe
C:\Windows\System32\wininit.exe
C:\Windows\System32\lsass.exe
C:\WINDOWS\system32\lsass.exe
lsass.exe should always be a ch… Continue reading lsass.exe spawning lsass.exe
Some Windows users have reported that a process called PC-Doctor Module is running in the…
For more, visit TheWindowsClub.com. Continue reading Fix PC-Doctor Module High CPU Usage on Windows computer