Is it possible to extract a hiberfil.sys and open it in vmware?
Is it possible to extract a hiberfil.sys and open it in vmware?
NO.
http//homepage.ntlworld.com./jonathan.deboynepollard/FGA/questions-with-yes-or-no-answers.html
"Extract" from where?
What do you mean by "open in vmware"?
?
Maybe if you could state your goal, it would help avoiding the risk of slipping on a chocolate covered banana
http//homepage.ntlworld.com./jonathan.deboynepollard/FGA/put-down-the-chocolate-covered-banana.html
Also, if you could add some meaningful detail, as per the standard litany
http//homepage.ntlworld.com./jonathan.deboynepollard/FGA/problem-report-standard-litany.html
this would greatly help in providing some answer/idea/suggestion more useful than a "NO".
jaclaz
By extract I mean take the file from a dead drive that has already been imaged then open the hibernation file up as a virtual computer.
So essentially I want to see how the computer was running when they last hibernated the computer.
By extract I mean take the file from a dead drive that has already been imaged then open the hibernation file up as a virtual computer.
Read again
http//homepage.ntlworld.com./jonathan.deboynepollard/FGA/put-down-the-chocolate-covered-banana.html
I will be more explicit
What you are asking for makes no sense.
A hybernation file is an hybernation file. (nothing more, nothing less).
Maybe what you would like would be to take the WHOLE disk, somehow put it while offline in hybernation state, then "wake" the system in a VM of some kind.
I.e. something along the lines of
http//liveview.sourceforge.net/
As I see it, it is theoretically possible, BUT it won't work unless some serious work to "adapt" either the VM to the "original" hardware or *somehow* adapt the contents of the hyberfil.sys file to the "new,different" (virtual) hardware is performed, see
http//
jaclaz
The most you can do with hiberfil.sys is to uncompress it (winhex) and process it just like a memory dump (with x-ways for exemple).
Translation - a hibernation file is not, repeat not a memory dump in sense like a frozen vm session. You cannot load it and restart it.
Would love to find out how you come to the presumption that this could be done. We have a chocolate banana to beat this individual/org to with…
Translation - a hibernation file is not, repeat not a memory dump in sense like a frozen vm session. You cannot load it and restart it.
Would love to find out how you come to the presumption that this could be done. We have a chocolate banana to beat this individual/org to with…
And, besides, it's always important to let it sleep until it naturally awakens in the Spring…