C:\Windows\System32>procdump -e explorer.exe
ProcDump v8.2 - Sysinternals process dump utility
Copyright (C) 2009-2016 Mark Russinovich and Andrew Richards
Sysinternals -
www.sysinternals.comProcess: explorer.exe (6524)
Process image: C:\windows\explorer.exe
CPU threshold: n/a
Performance counter: n/a
Commit threshold: n/a
Threshold seconds: n/a
Hung window check: Disabled
Log debug strings: Disabled
Exception monitor: Unhandled
Exception filter: [Includes]
*
[Excludes]
Terminate monitor: Disabled
Cloning type: Disabled
Concurrent limit: n/a
Avoid outage: n/a
Number of dumps: 1
Dump folder: C:\Windows\System32\
Dump filename/mask: PROCESSNAME_YYMMDD_HHMMSS
Queue to WER: Disabled
Kill after dump: Disabled
Press Ctrl-C to end monitoring without terminating the process.
[13:35:16] Exception: 000006BA
[13:35:16] Exception: 000006BA
[13:35:16] Exception: 000006BA
[13:35:31] Exception: 000006BA
[13:36:01] Exception: 000006BA
[13:36:01] Exception: 000006BA
[13:36:01] Exception: 000006BA
[13:36:16] Exception: 000006BA
^C
[13:36:44] Dump count not reached.
and also this
C:\windows\system32>procdump -n 20 -s 1 explorer.exe
ProcDump v8.2 - Sysinternals process dump utility
Copyright (C) 2009-2016 Mark Russinovich and Andrew Richards
Sysinternals -
www.sysinternals.comProcess: explorer.exe (1372)
Process image: C:\windows\explorer.exe
CPU threshold: n/a
Performance counter: n/a
Commit threshold: n/a
Threshold seconds: 1
Hung window check: Disabled
Log debug strings: Disabled
Exception monitor: Disabled
Exception filter: [Includes]
*
[Excludes]
Terminate monitor: Disabled
Cloning type: Disabled
Concurrent limit: n/a
Avoid outage: n/a
Number of dumps: 20
Dump folder: C:\windows\system32\
Dump filename/mask: PROCESSNAME_YYMMDD_HHMMSS
Queue to WER: Disabled
Kill after dump: Disabled
Press Ctrl-C to end monitoring without terminating the process.
[13:37:29] Timed:
[13:37:29] Dump 1 initiated: C:\windows\system32\explorer.exe_170112_133729.dmp
[13:37:29] Dump 1 complete: 4 MB written in 0.2 seconds
[13:37:31] Timed:
[13:37:31] Dump 2 initiated: C:\windows\system32\explorer.exe_170112_133731.dmp
[13:37:31] Dump 2 complete: 4 MB written in 0.2 seconds
[13:37:33] Timed:
[13:37:33] Dump 3 initiated: C:\windows\system32\explorer.exe_170112_133733.dmp
[13:37:33] Dump 3 complete: 4 MB written in 0.2 seconds
[13:37:35] Timed:
[13:37:35] Dump 4 initiated: C:\windows\system32\explorer.exe_170112_133735.dmp
[13:37:35] Dump 4 complete: 4 MB written in 0.2 seconds
[13:37:37] Timed:
[13:37:37] Dump 5 initiated: C:\windows\system32\explorer.exe_170112_133737.dmp
[13:37:38] Dump 5 complete: 5 MB written in 0.2 seconds
[13:37:40] Timed:
[13:37:40] Dump 6 initiated: C:\windows\system32\explorer.exe_170112_133740.dmp
[13:37:40] Dump 6 complete: 5 MB written in 0.2 seconds
[13:37:42] Timed:
[13:37:42] Dump 7 initiated: C:\windows\system32\explorer.exe_170112_133742.dmp
[13:37:42] Dump 7 complete: 5 MB written in 0.2 seconds
[13:37:44] The process has exited.
[13:37:44] Dump count not reached.
C:\windows\system32>