[Vol-users] Extracting document files from hiberfil.sys