C:\Windows\System32>procdump -e explorer.exe

ProcDump v8.2 - Sysinternals process dump utility
Copyright (C) 2009-2016 Mark Russinovich and Andrew Richards
Sysinternals - www.sysinternals.com

Process:               explorer.exe (6524)
Process image:         C:\windows\explorer.exe
CPU threshold:         n/a
Performance counter:   n/a
Commit threshold:      n/a
Threshold seconds:     n/a
Hung window check:     Disabled
Log debug strings:     Disabled
Exception monitor:     Unhandled
Exception filter:      [Includes]
                       *
                       [Excludes]
Terminate monitor:     Disabled
Cloning type:          Disabled
Concurrent limit:      n/a
Avoid outage:          n/a
Number of dumps:       1
Dump folder:           C:\Windows\System32\
Dump filename/mask:    PROCESSNAME_YYMMDD_HHMMSS
Queue to WER:          Disabled
Kill after dump:       Disabled


Press Ctrl-C to end monitoring without terminating the process.

[13:35:16] Exception: 000006BA
[13:35:16] Exception: 000006BA
[13:35:16] Exception: 000006BA
[13:35:31] Exception: 000006BA
[13:36:01] Exception: 000006BA
[13:36:01] Exception: 000006BA
[13:36:01] Exception: 000006BA
[13:36:16] Exception: 000006BA

^C
[13:36:44] Dump count not reached.

