Overview
FEX Memory Imager™ (free)
FEX Memory Imager captures the physical RAM of a running computer, enabling recovery of volatile artifacts critical to investigations. It has a minimal footprint to prevent data overwrite and outputs a .raw file for analysis.
- Captures physical RAM
- Minimal footprint to protect data
- Outputs .raw file
- Compatible with Forensic Explorer & other tools
- Based on WinPmem driver
Screen Shots
Download
FEX Memory Imager (free)
For imaging Random Access Memory (RAM) on a running computer.
Setup Instructions:
- Download and expand the ZIP file.
- Launch FEX Memory from its executable.
Change Log
27 Aug 2024 – v1.21
- Fixed offset in auto case name creation date/time stamp.
8 May 2024 – v1.20
- Improved setting of destination file path.
12 Apr 2024 – v1.10
- Size check for destination drive. Warning message if drive size < RAM size.
29 Apr 2022 – v1.09
Release.