Skip to content

/captureram not working #2

@eddy3oy

Description

@eddy3oy

When running the .ps1 file with any profile that contains /captureram, the memory capture process appears to start, then stops immediately and moves on to the next stage

Tested on Windows Server 2019

Error log as follows:

OS: Microsoft Windows Server 2019 Standard Evaluation
Magnet RESPONSE-1.7.1.0

Error capturing RAM: System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
at %$'pkd=u~,YW|KEx.KgoZ1f]$.​‎‎‭‍‍‍‮‍‬​‭‌‭‏‭‭‌‌‪‭‬‭‮()

OS: Microsoft Windows Server 2019 Standard Evaluation
Magnet RESPONSE-1.7.1.0

Error capturing RAM - MRC: System.ComponentModel.Win32Exception (0x80004005): The system cannot find the file specified
at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
at %$'pkd=u~,YW|KEx.KgoZ1f]$.‪‪‫​‫​‎‬‬​‭‭‏​‪‪‮‎‭‭‎‬‌‮‬‌‮()

OS: Microsoft Windows Server 2019 Standard Evaluation
Magnet RESPONSE-1.7.1.0

Error creating hash: System.IO.FileNotFoundException: Could not find file '\hostname\response\test-hostname-202604140425\Test-MagnetRESPONSE-2026.04.14_04.25.36\RAMDump-hostname-20260414-042537-WinVer10.0.17763.3650.dmp'.
File name: '\hostname\response\test-hostname-202604140425\Test-MagnetRESPONSE-2026.04.14_04.25.36\RAMDump-hostname-20260414-042537-WinVer10.0.17763.3650.dmp'
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
at %$'pkd=u~,YW|KEx.KgoZ1f]$.‍‪‮​‌‌‮​‭‫‮‎​‭‏‭‮‬‭‮‏‬‌‎‪‬‫‮(Object , DoWorkEventArgs )

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions