The increasing use of live acquisition in memory analysis becomes more widespread and many researcher are developing techniques and analysis to capture volatile data on random access memory (RAM). An increase in the amount of data acquisition in RAM is getting more accurate but there is still some data that cannot be captured. However, Since the existence of Linux Memory Extractor (LiME) has made investigators able to acquire data stored in RAM with full memory capture. This study reveals the acquisition of RAM using live memory forensics and was obtained to get username, password, and URL on iGracias portal in a computer’s browser using Mozilla Firefox. The tools used to acquire RAM is using LiME and FTK Imager to analyze it.