Take the State of DFIR Survey

Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey →
Forums
Main Category
General (Technical,...
Captured image is b...
 
Notifications
Clear all

Captured image is bigger than the acquired RAM

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by jadams951 6 years ago
2 Posts
2 Users
0 Reactions
2,602 Views
RSS
 nilson.sangy
(@nilson-sangy)
New Member
Joined: 6 years ago
Posts: 1
Topic starter 06/06/2020 3:57 am   [#18528]

Hi folks,

Could someone explain to me why the image file of the memory captured in raw format is bigger than the RAM memory itself?

I have 16GB of RAM and made memory collections using FTK Imager or RAM Capturer, in both programs the image generated has 18,866,176 KB.

Why the file size is not 16,777,216 KB (16 * 1024 * 1024) KB?

Thanks in advance.



   
Quote
 jadams951
(@jadams951)
Eminent Member
Joined: 8 years ago
Posts: 37
06/06/2020 4:26 pm  

Also, capturing pagefile(if selected) and memory from GPU.  



   
ReplyQuote
Forum Jump:
  Previous Topic
Next Topic  
Share: