Where is the hidden swap file in Windows located?

Prepare for the Computer Hacking Forensic Investigator v11 exam. Study with flashcards and multiple choice questions. Each question includes hints and explanations. Get exam-ready efficiently!

Multiple Choice

Where is the hidden swap file in Windows located?

Explanation:
Windows uses a swap file, called the page file, to extend RAM by swapping inactive memory pages to disk. This file is named pagefile.sys and is located in the root of the system drive, typically C:\pagefile.sys. It remains hidden/system by default, which is why you might not see it in normal Explorer views. This paging file is the hidden swap file Windows uses for virtual memory, separate from files used for other purposes. For contrast, hiberfil.sys stores the memory image when the system hibernates, not for regular paging. The other options are not related to virtual memory: a setup log file and a legacy config file. So the hidden swap file is at C:\pagefile.sys.

Windows uses a swap file, called the page file, to extend RAM by swapping inactive memory pages to disk. This file is named pagefile.sys and is located in the root of the system drive, typically C:\pagefile.sys. It remains hidden/system by default, which is why you might not see it in normal Explorer views. This paging file is the hidden swap file Windows uses for virtual memory, separate from files used for other purposes. For contrast, hiberfil.sys stores the memory image when the system hibernates, not for regular paging. The other options are not related to virtual memory: a setup log file and a legacy config file. So the hidden swap file is at C:\pagefile.sys.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy