# Do you know a way to read Windows Program's RAM?

**URL:** <https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942>\
**Category:** General\
**Created:** [16 December 2024 17:01 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942 "2024-12-16T17:01:17Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![GiovanniG](https://avatars.discourse-cdn.com/v4/letter/g/ecd19e/32.png) [@GiovanniG](https://discourse.nodered.org/u/GiovanniG)\
**Post date:** [16 December 2024 17:01 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942/1 "2024-12-16T17:01:17Z")

</div>

Hi, I've a program which unfortunately is abandoned, I would read its results and use NR fo send where i need, do you know if there is a node able to open Windows RAM and read certain locations? Do you know if it's possible to do it by another software that can provide those datas to NR? Thank you!

---

<div class="post-metadata">

**Author:** ![marcus-j-davies](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/marcus-j-davies/32/103435_2.png) [@marcus-j-davies](https://discourse.nodered.org/u/marcus-j-davies)\
**Post date:** [16 December 2024 17:53 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942/2 "2024-12-16T17:53:18Z")

</div>

Not sure you're going to find that answer here - this is not a windows developer forum.

However, once you find an application that is able todo that (without AV from kicking in), then you can maybe use the `exec` node to run said application, that is attempting to read process memory

For any application to open up process memory in Windows, it will need to be able to.

- Run as `SYSTEM`/`Administrator`
- Make use of the windows API `OpenProcess`
- Make use of the windows API `ReadProcessMemory`
- Obtain access rights of `PROCESS_VM_READ`
- Obtain a `SeDebugPrivilege` token inside the application reading the memory

Like I said, unless you're in luck - not sure you will find out how here.

There are node libraries around

- ffi-napi
- ref-napi

But not sure they will have been discussed

---

<div class="post-metadata">

**Author:** ![GiovanniG](https://avatars.discourse-cdn.com/v4/letter/g/ecd19e/32.png) [@GiovanniG](https://discourse.nodered.org/u/GiovanniG)\
**Post date:** [16 December 2024 18:17 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942/3 "2024-12-16T18:17:10Z")

</div>

thank you for reporting your experience. I've used WinHex to find the data I needed, but with such program seams there aren't ways to ask and get RAMs value with APIs.  
So I?m looking for a tool, able to return me values when asked, or that could look for changes and send somehow to NR. Any ideas? Sometimes there are tools that may do that easy.. I just don't know )  
ffi-napi and ref-napi seem not able to do this

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [16 December 2024 21:26 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942/4 "2024-12-16T21:26:08Z")

</div>

As Marcus says, really not a Node-RED thing. However, check out [Sysinternals Suite - Sysinternals | Microsoft Learn](https://learn.microsoft.com/en-gb/sysinternals/downloads/sysinternals-suite).

---

<div class="post-metadata">

**Author:** ![GiovanniG](https://avatars.discourse-cdn.com/v4/letter/g/ecd19e/32.png) [@GiovanniG](https://discourse.nodered.org/u/GiovanniG)\
**Post date:** [17 December 2024 07:46 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942/5 "2024-12-17T07:46:24Z")

</div>

Mates, thank you for suggestiong, I understand such topic looks not connected with NR but I?m not trying to figure out for a problem which does read RAM, I'm looing for something which is able to interface/send these values to NR, thisj is why I hope it can be useful to somebody else too here )  
Anyway my first attempt was looking for somthing that can solve the issue and it's already available, fortunately, but it looks nothing about that does exist in NR world

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [17 March 2025 07:46 UTC](https://discourse.nodered.org/t/do-you-know-a-way-to-read-windows-programs-ram/93942/6 "2025-03-17T07:46:29Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.