Ordiphone 1

forensics memory android FCSC 2021 solved on

star star

Description

The person in charge of the apprentice, a bit crazy, wants to know for how many nanoseconds the computer was on when the memory dump has been launched. Find this information, contained in the real_start_time variable of the process that performed the capture!

Note: the flag follows the format FCSC{real_start_time}, where real_start_time is an integer.

This challenge has been split into three parts:

Files

  • lime.dump.tar.xz
    190.89 MiB – 541a053764d1b5f4c905de8fde2c3b42b9bf51467afb453e8422ccaa5ae4634c

Author

\E

Flag

Share my success on Fediverse, Twitter, Linkedin, Facebook, or via email.

Submit your solution

You can submit your writeup for this challenge. Read the FAQ to learn how to proceed.

You need to be logged in to submit a writeup.

Writeups

I've been looking for a long time and I still can't find the flag!

You can vote for the solutions you prefer by using the on their respective pages.

DateAuthor Language Tags Vote
2023-11-07
naacbin
🇬🇧
TeamFrance