Using Photorec on memorydump - FAIL
Posted: 10 Jun 2014, 05:55
Hello everybody. I have a memorydump (mymemory.dmp) which DOES contain several JPGs as i can see the data with a hex editor. I use "photorec_win.exe mymemory.dmp" and expected JPGs beeing extracted by Photorec. But Photorec does not find one single image. Regardless what options i select. I even unchecked every other file extensions in the options and manually checked only the JPG extension.
This is very weird because i can copy the JPGs by hand from within a hex editor and have valid images that way; why does Photorec fail here?
Thanks for infos, ciao!
This is very weird because i can copy the JPGs by hand from within a hex editor and have valid images that way; why does Photorec fail here?
Thanks for infos, ciao!