Bad memories - part 2

The lead graphical designer at ACME has noticed some kind of strange activity on her computer. Their IT support believes it is a false positive and the computer will fix itself after turning it off and on again. However, the user managed to take a memory dump just before the crash. She mentioned something about lost files before the call audio got all garbled.

This is part 2 of 5 in a memory dump analysis challenge. The memory dump file can be found from the first part.

You get 100 points for this challenge.

Solvers: no one

forensics 2019

← Back to challenges