HireMe - Windows Image Forensics

What is the administrator's username?

karen

What is the OS's build number?

16299

What is the hostname of the computer?

TOTALLYNOTAHACK

A messaging application was used to communicate with a fellow Alpaca enthusiest. What is the name of the software?

skype

What is the zip code of the administrator's post?

# Check autofill
# /Users/Karen/AppData/Local/Google/Chrome/User Data/Default/Web Data
19709

What is the first name of the person who contacted the admin user?

# look outlook data
# \Users\Karen\AppData\Local\Microsoft\Outlook\klovespizza@outlook.com.ost
# https://www.nucleustechnologies.com/download-ost-viewer.php
# Send Items > first one
Micheal

How much money was TAAUSAI willing to pay upfront?

What country is the admin user meeting the hacker group in?

What is the machine's timezone? (Use the three-letter abbreviation)

When was AlpacaCare.docx last accessed?

There was a second partition on the drive. What is the letter assigned to it?

What is the answer to the question Company's manager asked Karen?

What is the job position offered to Karen?

When was the admin user password last changed?

What version of Chrome is installed on the machine?

What is the name of the tool Karen hopes to learn?

What is the HostUrl of Skype?

What is the domain name of the website Karen browsed on Alpaca care that the file AlpacaCare.docx is based on?

Last updated