ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.
Windows SuperFetch Format
Revision as of 17:35, 14 April 2014 by Joachim Metz
The file header is 84 bytes of size and consists of:
|0||4||0x304D454D ("MEM0") or 0x4F4D454D ("MEMO")||Signature|
|4||4||Uncompressed (total) data size|
The file header is followed by compressed blocks:
|0||4||Compressed data size|