cato447/ctf
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

huge commit

Browse Source
This commit is contained in:
cato447
2026-03-09 21:44:25 +01:00
parent ab2e537520
commit d1017bae51
441 changed files with 3438154 additions and 1363 deletions
Download Patch File Download Diff File Expand all files Collapse all files

132
2026/srdnlen_quals/forensic/chapter2/output/audit.txt Normal file
View File

@@ -0,0 +1,132 @@
Foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus
Audit File
Foremost started at Sun Mar 1 00:28:43 2026
Invocation: foremost -v -i virtual_machine_ram.bin
Output directory: /home/cato/ctf/2026/srdnlen_quals/forensic/chapter2/output
Configuration file: /etc/foremost.conf
------------------------------------------------------------------
File: virtual_machine_ram.bin
Start: Sun Mar 1 00:28:43 2026
Length: 128 MB (134221824 bytes)
Num Name (bs=512) Size File Offset Comment
0: 00041511.jpg 225 KB 21253656
1: 00045798.jpg 110 KB 23448600
2: 00049393.jpg 171 KB 25289240
3: 00104056.gif 840 B 53276672 (168 x 1)
4: 00104770.gif 60 B 53642400 (12 x 16)
5: 00104770_1.gif 82 B 53642464 (13 x 16)
6: 00104770_2.gif 114 B 53642552 (16 x 16)
7: 00103872.bmp 43 KB 53182464 (182 x 237)
8: 00104770.bmp 5 KB 53642672 (310 x 35)
9: 00146504.bmp 576 KB 75010048 (512 x 384)
10: 00014799.wav 36 B 7577580
11: 00038872.wav 676 KB 19902464
12: 00043867.avi 11 KB 22459912
13: 00046949.avi 143 KB 24038224
14: 00056278.wav 36 B 28814684
15: 00072813.wav 676 KB 37280640
16: 00094229.avi 143 KB 48245584
17: 00099048.wav 1 KB 50712576
18: 00039384.ole 5 KB 20164608
19: 00041504.ole 13 KB 21250048
20: 00080064.ole 3 KB 40992768
21: 00080096.ole 3 KB 41009152
22: 00134328.ole 3 KB 68775936
23: 00134351.ole 3 KB 68788160
24: 00136808.ole 3 KB 70045696
25: 00024392.dll 460 KB 12488704 04/23/1999 00:45:39
26: 00034840.exe 28 KB 17838080 06/30/2000 06:00:31
27: 00035216.dll 68 KB 18030592 04/23/1999 16:38:33
28: 00035816.exe 84 KB 18337792 04/29/1998 03:43:39
29: 00036248.dll 72 KB 18558976 04/23/1999 16:37:42
30: 00036416.exe 304 KB 18644992 07/03/2000 01:48:09
31: 00037032.dll 482 KB 18960384 06/06/2000 23:01:57
32: 00038984.dll 172 KB 19959808 04/23/1999 16:37:36
33: 00039344.dll 236 KB 20144128 04/23/1999 16:39:10
34: 00040032.exe 60 KB 20496384 11/21/2000 15:17:04
35: 00040584.dll 44 KB 20779008 04/23/1999 16:38:11
36: 00040744.dll 52 KB 20860928 04/23/1999 16:37:34
37: 00041304.dll 84 KB 21147648 04/23/1999 16:38:30
38: 00041480.dll 120 KB 21237760 04/23/1999 16:37:37
39: 00042312.exe 28 KB 21663744 04/29/1998 02:45:47
40: 00042464.dll 362 KB 21741568 06/06/2000 23:21:28
41: 00044176.exe 68 KB 22618112 04/23/1998 03:35:12
42: 00044400.exe 132 KB 22732800 04/23/1999 02:18:57
43: 00046392.dll 32 KB 23752704 06/27/2000 18:42:52
44: 00046752.exe 24 KB 23937024 06/30/2000 06:15:08
45: 00046800.dll 36 KB 23961600 04/23/1999 16:37:37
46: 00046976.dll 668 KB 24051712 11/21/2000 15:18:11
47: 00049808.dll 176 KB 25501696 07/03/2000 01:50:07
48: 00050824.dll 76 KB 26021888 06/30/2000 06:17:32
49: 00051224.dll 20 KB 26226688 06/27/2000 18:42:48
50: 00052064.dll 144 KB 26656768 04/23/1999 16:39:00
51: 00057720.dll 293 KB 29552640 06/06/2000 23:21:20
52: 00058424.dll 88 KB 29913088 06/30/2000 06:17:32
53: 00059856.exe 132 KB 30646272 04/23/1999 02:18:57
54: 00060416.dll 24 KB 30932992 04/23/1999 16:38:40
55: 00070672.dll 196 KB 36184064 04/23/1999 16:37:51
56: 00071960.dll 136 KB 36843520 04/23/1999 16:37:54
57: 00073032.exe 176 KB 37392384 03/18/1998 22:04:02
58: 00074680.exe 176 KB 38236160 03/18/1998 22:04:02
59: 00076840.dll 795 KB 39342080 06/06/2000 23:21:25
60: 00079328.dll 24 KB 40615936 04/23/1999 16:38:46
61: 00080024.dll 140 KB 40972288 06/30/2000 06:17:32
62: 00081368.exe 24 KB 41660416 06/30/2000 06:15:08
63: 00081936.dll 36 KB 41951232 06/30/2000 06:17:32
64: 00082128.dll 124 KB 42049536 06/30/2000 05:16:36
65: 00082384.dll 76 KB 42180608 10/17/1998 09:54:50
66: 00083584.dll 1 MB 42795008 04/23/1999 16:37:36
67: 00088240.dll 421 KB 45178880 11/03/1999 00:57:56
68: 00089632.exe 56 KB 45891584 06/30/2000 06:11:16
69: 00090992.exe 304 KB 46587904 07/03/2000 01:48:09
70: 00092040.exe 60 KB 47124480 11/21/2000 15:17:04
71: 00092544.dll 76 KB 47382528 06/30/2000 06:17:32
72: 00092704.dll 392 KB 47464448 06/17/1998 18:52:10
73: 00094000.exe 28 KB 48128000 06/30/2000 06:00:31
74: 00094264.exe 32 KB 48263168 04/23/1999 01:30:00
75: 00094792.dll 140 KB 48533504 02/22/1999 19:48:21
76: 00096072.dll 480 KB 49188864 06/30/2000 05:27:07
77: 00098808.dll 398 KB 50589696 06/06/2000 23:21:23
78: 00103152.dll 164 KB 52813824 04/23/1999 16:38:20
79: 00103720.dll 17 KB 53104640 08/31/1999 23:07:49
80: 00104112.dll 240 KB 53305344 04/19/1999 15:29:48
81: 00104800.dll 383 KB 53657600 06/06/2000 23:21:33
82: 00106336.dll 2 MB 54444032 06/06/2000 23:21:20
83: 00112544.dll 580 KB 57622528 06/30/2000 06:17:34
84: 00113848.dll 1 MB 58290176 03/06/1999 09:02:12
85: 00119856.dll 17 KB 61366272 04/23/1999 16:39:21
86: 00122392.dll 164 KB 62664704 04/23/1999 16:38:55
87: 00122984.exe 60 KB 62967808 06/30/2000 06:12:01
88: 00124112.exe 60 KB 63545344 06/30/2000 06:12:01
89: 00125024.dll 84 KB 64012288 06/30/2000 06:17:32
90: 00125704.dll 120 KB 64360448 06/30/2000 06:17:33
91: 00127096.dll 28 KB 65073152 06/30/2000 06:17:32
92: 00127216.exe 72 KB 65134592 06/30/2000 06:12:33
93: 00127808.exe 72 KB 65437696 06/30/2000 06:12:33
94: 00128376.dll 256 KB 65728512 06/30/2000 06:17:35
95: 00129656.dll 36 KB 66383872 06/30/2000 06:17:35
96: 00129856.dll 72 KB 66486272 06/30/2000 06:17:34
97: 00130000.dll 89 KB 66560000 07/18/1999 17:06:44
98: 00132464.exe 56 KB 67821568 06/30/2000 06:11:16
99: 00133256.exe 44 KB 68227072 04/29/1998 02:56:24
100: 00133784.dll 28 KB 68497408 06/30/2000 06:17:33
101: 00136552.dll 24 KB 69914624 06/30/2000 05:15:10
102: 00137760.exe 336 KB 70533120 01/28/1998 17:12:18
103: 00144784.exe 20 KB 74129408 05/24/2000 11:51:54
104: 00147880.exe 29 KB 75714560 06/06/2000 20:41:52
Finish: Sun Mar 1 00:28:45 2026
105 FILES EXTRACTED
jpg:= 3
gif:= 4
bmp:= 3
rif:= 8
ole:= 7
exe:= 80
------------------------------------------------------------------
Foremost finished at Sun Mar 1 00:28:45 2026