View source for Type Memory Swap File

{| style="float:right;border:1px solid black"
|+ [[Type_JSON|<<]] Details [[Type_Windows_Hibernation|>>]]
| Defined Constant
| <code>Type_Memory_Swap_File</code>
|-
| File Type Value
| 456
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code>sys</code>
|}

Swap

=Description=
Memory Swap Space

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]

=Items Produced=
Truxton will extract the following from this file type:
* <code>[[Entity Types|ENTITY_TYPE_AES_128_KEY]]</code>
* <code>[[Entity Types|ENTITY_TYPE_AES_192_KEY]]</code>
* <code>[[Entity Types|ENTITY_TYPE_AES_256_KEY]]</code>
* <code>[[Entity Types|ENTITY_TYPE_SQLCIPHER_KEY]]</code>