📎 AI Summary:
The thread discusses how to extract information from system dump files, with the original poster asking about methods to analyze dump files and whether applications can be relaunched from them. Neemobeer explains that small dump files typically lack process lists in readable formats, but full memory dumps may contain such information and are generally large. The original poster shares a personal success in retrieving a mis-sent form from a dump, indicating some practical utility. Overall, the discussion centers on exploring dump files' contents and their potential for data recovery or analysis.
W

WinFreak

Member
Joined
Jan 26, 2018
Messages
31
Thread Author #1
One can create dump file of tasks using task manager or also create full RAM dump files during a system crash.

How can information be extracted from that dump?
And can the system or specific applications be relaunched from dump files?
 

Solution
Neemobeer
I did a string dump from a memory dump file. The small dumps do not contain a list of running processes. At least not in a ascii or utf format. I believe a full memory dump does, but you're talking about a file equal to the amount of ram you have in use or total.
Sort by date Sort by votes
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Joined
Jul 4, 2015
Messages
8,995
#2
I did a string dump from a memory dump file. The small dumps do not contain a list of running processes. At least not in a ascii or utf format. I believe a full memory dump does, but you're talking about a file equal to the amount of ram you have in use or total.
 

Upvote 1 Downvote
Solution
You must log in or register to reply here.