It was in the act of hibernation itself.
C:\hiberfil.sys
It was a hibernation-based mesh network. Air-gaps meant nothing. Firewalls meant nothing. As long as two XP machines shared a building’s AC wiring, the ghost could walk between them inside their own sleep states. hiberfil sys xp