Tags: partial stegano forensics wtf
There's a encrypted 7zip after the mkv in the dump file(the original 7z header is modified to 1z), just use the sentence to decrypt it
Thx @dotsu! We knew we must have missed something. We've seen in the dump some overwritten PY and 7Z files, but didn't think about it much.