Bad memories - part 3

The lead graphical designer at ACME has noticed some kind of strange activity on her computer. Their IT support believes it is a false positive and the computer will fix itself after turning it off and on again. However, the user managed to take a memory dump just before the crash. Could you help us recover the new design she was working on?

This is part 3 of 5 in a memory dump analysis challenge. The memory dump file can be found from the first part.

You get 100 points for this challenge.

Solvers: no one

forensics 2019

← Back to challenges