Recovered VM files

Hello all,

I am facing following challenge. I had a Win2K8 VM (with several snapshot and it was shut down) on a datastore with 40GB c-drive, 20GB D-drive and 20GB Z-drive. I was cleaning up my datastore and deleted the whole SE_TMPL folder where I had its files including several snapshot files.

We restored all the files we could find on the datastore with 3-rd party tool and ended up with 13nodeXXXXXXX files.

I will try to get the sensible list of files soon.

So the question is how do I determine which file is which providing I have a HEX tool to look at the content of those files.

So should I just search the HEX content for SE_TMPL/SE_TMPL-* and rename the file according to the first search hit result?

Regards, Ilkin.