Notifications
Clear all
Topic starter
06/04/2011 9:27 pm
I'm having trouble decompressing a hibernate file from a Vista 64 bit operating system. I've tried Volatility, Moonsols, Sandman and WinHex and having no success. Is it possible the hiberfil.sys file is corupt or some type of crash file? And if so is there a way of repairing the file?
Thanks.
07/04/2011 12:45 pm
Your best bet is likely MoonSols, though only the Pro (paid) version can do Windows 7 hibernation files (not sure on Vista). If you're heading to BlackHat, I'd highly recommend
What kind of trouble are you having with it? (All nulls/no data?)