Reply to Message

View discussion in a popup

Replying to:
a_p_
Leadership
Leadership

The KB article unfortunately doesn't help with an embedded descriptor.

To find out what can be done, I need the .vmdk file's metadata. Assuming that the encryption didn't resize the metadata section, it is the first 7,929,856 Bytes.

One option to extract that part is to download https://sanbarrow.com/files/dsfok.zip, extract the executables, and run the below command in the VM's folder. Then compress/zip the ".bin" file and attach the .zip archive to a reply post.
Any other option/tool to extract that data from the .vmdk file is ok too.

dsfo.exe "Windows 10 x64.vmdk" 0 7929856 "Metadata.bin"

André

Reply
0 Kudos