Bad memories - part 1

The lead graphical designer at ACME has noticed some kind of strange activity on her computer. Their IT support believes it is a false positive and the computer will fix itself after turning it off and on again. However, the user managed to take a memory dump just before the crash. Could you help us recover the documentation she was working on?

This is part 1 of 5 in a memory dump analysis challenge found in mem.7z. The parts are numbered loosely according to the difficulty level. (If something doesn't work, just try elsewhere.)

You get 50 points for this challenge.

Solvers: no one

forensics 2019

← Back to challenges