Cygwin includes a program dumper.exe
The dumper utility can be used to create a core dump of running Windows process.
Usage: dumper [OPTION] FILENAME WIN32PID
Dump core from WIN32PID to FILENAME.core
However it seems to only work with Cygwin processes
$ ps -Ws | grep calc
3880 ? 20:22:02 C:\Windows\System32\calc.exe
$ dumper calc-dump 3880
Cannot attach to process #3880, error 50
I have been using ProcDump for some time now, but I would like to move to a program that is included in Cygwin packages.
It turns out that
dumper.exe
will work with a Windows process, but only 32-bit processes.