EXPERIMENT 1

DIGITAL FORENSICS
Name: Kuldeep Singh
Reg. No.: 17BCE0086
Slot: L31+L32

Ques1: What type of file is Mantooth.E01?

Sol: Mantooth.E01 is a compressed disk image created using Encase software.

Ques2: what is the operating system?

Sol: The operating system installed on the computer was windows vista™ ultimate with 32
bit processor architecture.

Ques3: what is the file system?

Sol: The file system used are NTFS/exFAT and DOS FAT12.

This study source was downloaded by 100000824868756 from CourseHero.com on 01-30-2022 04:15:20 GMT -06:00

https://www.coursehero.com/file/37266357/case1docx/
 Ques4: Provide the account name and last login information for each account present in
Mantooth.

Sol: we are able to find two different user account named Wes Mantooth and Dracula
whose login information is given below:

Ques5: If there is any evidence of .exe file being deleted, describe the artifact name and
document your findings.

Sol: There are 4 .exe files found in recycle bin namely $RTHDU55.exe , $R61QDFF.exe ,
$ITHDU55.exe and 161QDFF.exe

Ques6: Find proof of communication with Gladiator .

Sol:

This study source was downloaded by 100000824868756 from CourseHero.com on 01-30-2022 04:15:20 GMT -06:00

https://www.coursehero.com/file/37266357/case1docx/
 Ques7: What is a "Pranic Vampire"? In which document is it mentioned? When was the
document created?

Sol:

Pranic Vampire

This is a more common and possibly more correct term for psychic vampire. Prana is the
Sanskrit word meaning "life energy", Which does more accurately describe the energy that
we feed on.

Pranic Vampires have a broken or in most cases removed Chakra, Generally the Navel, but
in some cases the Heart Chakra. Often times this type of Psychic vampire has a completely
reworked energy system.

Pranic vampire is generally a catch all term and may encompass the other types or psychic
vampires as well.

It is mentioned in Astral.doc document file . and it was created on 2008-2-13 06:23:11 IST.

Ques8: What is present in happy.mpeg?

Sol: it’s a video of a frustrated man breaking his computer with the keyboard at his work.

This study source was downloaded by 100000824868756 from CourseHero.com on 01-30-2022 04:15:20 GMT -06:00

https://www.coursehero.com/file/37266357/case1docx/
Powered by TCPDF (www.tcpdf.org)