Tags: forensics 

Rating: 5.0

### In this challenge i just do analize to file .sav on Snapshot directory

![](https://miro.medium.com/max/573/1*gM5OY4QHwR9Zaa8t342lEg.png)

### and i do strings to that file, and i got half the flag

![](https://miro.medium.com/max/588/1*bOYxkK1j4YT__133ng2sOQ.png)

### so i open it with vim, and trying to search that string

![](https://miro.medium.com/max/700/1*Tgj1yQ57xzFNjXhh7kYuxg.png)

> DUCTF{w3_R_4bs0lute_pr3d4t0rs}

[my blog](http://medium.com/@InersIn)