Dead End?

Walkthrough summary

Dead End? TryHackMe walkthrough with 6 answered prompts and lab methodology notes.

Sample prompts covered

• What binary gives the most apparent sign of suspicious activity in the given memory image?
  Open the walkthrough page to inspect the full answer and command flow.
• The answer above shares the same parent process with another binary that references a .txt file - what is the full path of this .txt file?
  Open the walkthrough page to inspect the full answer and command flow.
• What binary gives the most apparent sign of suspicious activity in the given disk image?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the full registry path where the existence of the binary above is confirmed?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the content of "Part2"?
  Open the walkthrough page to inspect the full answer and command flow.