Bad memories - part 4

The lead graphical designer at ACME has noticed some kind of strange activity on her computer. Their IT support believes it is a false positive and the computer will fix itself after turning it off and on again. The user also complained about slow startup or some "black windows" appearing.

This is part 4 of 5 in a memory dump analysis challenge. The memory dump file can be found from the first part.

You get 50 points for this challenge.

Solvers: no one

forensics 2019

← Back to challenges