Dumps the contents of a process virtual mem to a file for browsing later. If run with admin privs and the process winlogon is used ... the user's password is all over the place in the first few hundred bytes.