Jump to content

Save RAM Contents to Drive?

Go to solution Solved by Electronics Wizardy,
3 minutes ago, NCIX Lampy said:

That's okay. How would I save the RAM to a disk for Windows? 

make sure your page file is bigger than your ram

 

then download and run this https://technet.microsoft.com/en-us/sysinternals/notmyfault.aspx?f=255&MSPPError=-2147217396

 

you can set it to do a full dump. This will crash you system.

 

Then reboot, and its in the page file.

Just wondering if there's a way to save a piece or pieces of RAM to a drive. 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Electronics Wizardy said:

this is what hibernate/suspend to disk does

Is that a function in Windows or something? 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

2 minutes ago, NCIX Lampy said:

Is that a function in Windows or something? 

why do you want to save ram to disk

 

yep hibernate is built in

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Electronics Wizardy said:

why do you want to save ram to disk

 

yep hibernate is built in

Is there a way to like save it to a file or something? I need to look through it to make sure it's working correctly. 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, NCIX Lampy said:

Is there a way to like save it to a file or something? I need to look through it to make sure it's working correctly. 

what are you trying to fix

 

normally a full system memory dump isn't that usefull

 

in linux you can do dd if=/dev/ram to what ever file you want, but its not giving your the full ram as the system doesn't want you do touch it all.

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Electronics Wizardy said:

what are you trying to fix

 

normally a full system memory dump isn't that usefull

 

in linux you can do dd if=/dev/ram to what ever file you want, but its not giving your the full ram as the system doesn't want you do touch it all.

Anything for Windows?

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

5 minutes ago, NCIX Lampy said:

Is there a way to like save it to a file or something? I need to look through it to make sure it's working correctly. 

Are you sure you want to look through a few billion zeroes and ones to "make sure it is working correctly"?

NEW PC build: Blank Heaven   minimalist white and black PC     Old S340 build log "White Heaven"        The "LIGHTCANON" flashlight build log        Project AntiRoll (prototype)        Custom speaker project

Spoiler

Ryzen 3950X | AMD Vega Frontier Edition | ASUS X570 Pro WS | Corsair Vengeance LPX 64GB | NZXT H500 | Seasonic Prime Fanless TX-700 | Custom loop | Coolermaster SK630 White | Logitech MX Master 2S | Samsung 980 Pro 1TB + 970 Pro 512GB | Samsung 58" 4k TV | Scarlett 2i4 | 2x AT2020

 

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Enderman said:

Are you sure you want to look through a few billion zeroes and ones to "make sure it is working correctly"?

If that's what it takes, sure. It's more for experimental purposes, I just want to know how to do it. 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, NCIX Lampy said:

If that's what it takes, sure. It's more for experimental purposes, I just want to know how to do it. 

run it in a vm, that makes it much easier.

 

and really, this data will be useless to you unless you really know what your doing.

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Electronics Wizardy said:

run it in a vm, that makes it much easier.

 

and really, this data will be useless to you unless you really know what your doing.

But wouldn't that not be saved to disk? 

 

It's okay, I can learn. 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

1 minute ago, NCIX Lampy said:

But wouldn't that not be saved to disk? 

 

It's okay, I can learn. 

its much easier to see what a vm is doing and you can have much more access to the internals

 

what are you trying to do, you will have no idea what any of these files mean.

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Electronics Wizardy said:

you can have much more access to the internals

 

you will have no idea what any of these files mean.

how so?

 

There would be multiple files instead of one mass one? 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

Just now, NCIX Lampy said:

how so?

 

There would be multiple files instead of one mass one? 

vms are much easier to view hardware as you can view hardware and what its doing from a outside source, and the kernel in the system will keep you from viewing them

 

 

they aren't files, its just binary data, and a lot of it, your will have no idea what its doing and what do look for.

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Electronics Wizardy said:

they aren't files, its just binary data, and a lot of it, your will have no idea what its doing and what do look for.

That's okay. How would I save the RAM to a disk for Windows? 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

3 minutes ago, NCIX Lampy said:

That's okay. How would I save the RAM to a disk for Windows? 

make sure your page file is bigger than your ram

 

then download and run this https://technet.microsoft.com/en-us/sysinternals/notmyfault.aspx?f=255&MSPPError=-2147217396

 

you can set it to do a full dump. This will crash you system.

 

Then reboot, and its in the page file.

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Mr.Cunt said:

If i remember correctly, HxD hex editor can view ram content

Should be able to open and inspect page files, right? 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

Just now, NCIX Lampy said:

Should be able to open and inspect page files, right? 

i think its something like "pick process. here is hex data"

Link to comment
Share on other sites

Link to post
Share on other sites

3 hours ago, Mr.Cunt said:

Capture.PNG

Capture.PNG

And that's all entirely with only the HxD Hex Editor, right? 

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×