This project aimed to conduct a forensic investigation and produce a comparative report on a page file in a Windows-based system. Memory dumps can provide valuable artifacts with information that can be extracted. The drive contains files such as pagefile.sys, swapfile.sys, and hiberfil.sys, each containing pieces of memory. For this project, pagefile.sys was selected for forensic analysis. Analyzing pagefile.sys can reveal sensitive information like user IDs, passwords, hidden processes, downloads, and browser search activity. A forensic expert can use this information to extract more valuable information in the memory analysis field.