Open Task Manager, click More Details in the bottom and then Details in the top.
Open Internet Explorer.
If you look at Task Manager, there will now be two iexplore.exe processes.
Refer to the Task Manager and write down the PID (process id) for iexplore.exe that is using more memory.
Below it is 3908, yours will likely be different.
Click the "Download ProcDump" link. Save the file to your Downloads folder and then click Open, Extract, Extract All.
Change the destination folder to: C:\Windows\System32
Click Yes in the popups to approve the extraction to that folder.
Right click the Windows icon in the lower left of your screen and click Command Prompt (Admin).
In the command prompt navigate to your Desktop folder by typing:
Replace "yourname" with your Windows machine login name.
Make a folder called Data and navigate into it by typing:
Note: In the next project, we will be setting up an FTP Server and will grant FTP access to this Data folder.
mkdir Data && cd Data
We will now capture the RAM from each of our processes.
In the command prompt type this and replace the numbers with the process id for iexplore.exe you wrote down:
procdump -ma 3908
In a Web browser, go to https://mh-nexus.de/en/hxd/
Scroll down and find the download link for modern Windows versions, as shown below.
Click the download link, download the English version, unzip it, and install it with the default options.
In HxD, press Ctrl+F. Search for
HxD finds the string and highlights it, as shown below.