Difficulty: easy

Category: forensics

Author: xnull

Description:

### Suspicious File

We recovered a file from a compromised system. It has a .txt extension, but something seems off about it.

Download the file and determine its real type to view the contents.

Solution

Based on the header of the file, we can see it’s a PNG file:

�PNG

���

We can just look at it and get the flag.

Flag: ENDLM{f1l3_s1gn4tur3s_d0nt_l13_7a9c}