Cybrary Challenge: Pumpkin Injection

General
1

5. What is the last 4 characters of the MD5 hash of the dumped malicious executable?

any help ??
I extract 2 files base on answers
python3 vol.py -f Spice.mem windows.filescan | grep -i
python3 vol.py -f Spice.mem windows.dumpfiles --virtaddr

any of that md5sum does not work

2

mea culpa
wrong commands

for last question
└─$ python3 vol.py -f Spice.mem windows.pstree
└─$ python3 vol.py -f Spice.mem windows.pslist --pid --dump
└─$ md5sum

1 Like
3

Edited…

image
image370Ă—203 32.6 KB

—>

Community Service :slight_smile:
######################
Task 3 starts with “P”.

Once you have that data, the other two (tasks 4 and 5 are routine: gifted).

:love_you_gesture:

-CHALLENGE COMPLETED- :nerd_face: with the help of one of the previous commands from user @Dalibor_Zeman3705

—> I didn’t find a button to select “Solution”, I hope administrators activate that option :slight_smile: