RAM serves as the staging area between a computer's input and output, and the operating system is responsible for managing how that memory is allocated and used. This content covers how memory addressing works and how to inspect real-time memory allocation using Device Manager and Sysinternals RAMMap.
OS Memory Management
One of the jobs of the operating system is to manage the memory on a computer. That is the RAM on the computer. Some of the RAM is allocated during startup to the BIOS, so that way it can do some initial startup and get things going, but then a large portion of it is managed by the operating system.
Memory on your computer plays a key role, and that is the RAM. The RAM on your computer is a staging area before things get processed on the central processing unit, or the CPU. What happens is that if there is any kind of input into the system, or things coming from storage, it all goes into RAM initially and then it gets sent off to the CPU to be processed. The answer comes back, or whatever the solution is, whatever gets processed comes back and gets put on RAM before it goes to some sort of output, or storage, or the screen, or wherever it is going off to.
During the startup phase of your computer, initially there is the BIOS that gets loaded into the RAM for initial setup and startup of your computer. Then from there your operating system gets loaded onto the RAM, and then your operating system plays a key role in managing that RAM, or that memory.
Here is another different view of what that memory, that RAM, looks like. Really what we have here is these blocks of data on that memory, and what we will do is take that input and put those little ones and zeros into one of those blocks before it goes off to be processed. Now, we have to somehow be able to reference these different blocks, so each one of these blocks has an address, and we use that address so we could reference that particular block.
I am on my demo laptop here and I wanted to show you a couple of things. The first thing I am going to do is click the start button and type in device manager, and we are going to open up device manager. I am going to go to one of these devices. I am going to take a look at the display adapters, and so this is my graphics card. I am going to open that up and take a look at resources, and I can see the memory ranges that have been assigned to this. So it is using up those resources. I can see that here in the device manager.
But there is also another thing that I want to show you, and that is in Sysinternals. I can open up Sysinternals here and I am going to scroll down to RAMMap in here. So there is RAMMap64. I am going to open that up, and it is going to then map out the RAM that we have. It is going to show me some stats here about which processes, or which kind of things, this memory is assigned to. So there is some interesting data here.
But really what I want to do is show you a couple of tabs here. The first tab that I am going to show you is this physical pages here. So this right here is the physical address within the memory, and we can see that this first one is non-paged, whatever that means. We have got active, we have got driver locked. I am going to scroll it down to where we get to a file. Here is a file that is assigned to this block of memory right here. Here is another file that is assigned to this block of memory. So what we are seeing is that these different files and different resources are assigned to these blocks of memory here, and to this physical address of the memory. So that is interesting there.
The other thing that I want to show you is this file details. Within the file details I can see what files are associated to which blocks. So let us take a look at a simple one first. Here is a 4K file right there. I am going to open it up and we can see which physical address within memory it is assigned to.
Let us look at a bigger one now. We have a 13,000 one here, so I open that up and you can see all of the blocks of data that it is assigned to.
And one other thing too is look how much memory we actually have. This is just one file, and look how many memory addresses it is assigned to. If you look at the full thing, we can go back to this physical page and look at how much I scroll through. This is just an 8 GB system, so somewhat small compared to some systems that we have out there, and we have a lot of these physical addresses that are assigned to the RAM that is within here.
So your operating system plays a big role in managing the RAM, or the memory, on your system.
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →