Skip to content

Instantly share code, notes, and snippets.

@DownGoat
Created November 21, 2014 19:12
Show Gist options
  • Save DownGoat/c38ccd3efc1dc2732d14 to your computer and use it in GitHub Desktop.
Save DownGoat/c38ccd3efc1dc2732d14 to your computer and use it in GitHub Desktop.
python vol.py --plugins=plugins --profile=LinuxGolfish-2_6_29ARM -f ~/Dropbox/HiG/IMT4012\ Digital\ Forensics/lime.dump linux_imagescan -p 423,667 --output-file=test.txt
Task: ndroid.launcher pid 423 rule pngend1 addr 0x40d56ff9
0x40d56ff9 49 45 4e 44 ae 42 60 82 00 00 00 23 02 00 00 08 IEND.B`....#....
0x40d57009 23 c3 40 00 00 00 00 00 00 00 00 00 00 00 00 00 #.@.............
0x40d57019 00 00 00 00 00 00 00 d0 eb e5 40 f8 12 da 40 00 ..........@...@.
0x40d57029 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 ...............h
0x40d57039 c8 d2 40 98 d3 dd 40 00 00 00 00 18 91 d6 40 c8 ..@...@.......@.
0x40d57049 ca a9 40 00 00 00 00 00 00 00 00 00 00 00 00 00 ..@.............
0x40d57059 00 00 00 e8 a2 d2 40 00 00 00 00 28 4b e7 40 00 ......@....(K.@.
0x40d57069 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 ................
0x40d57079 46 d3 40 00 00 00 00 58 89 ce 40 00 00 00 00 c8 [email protected]..@.....
0x40d57089 fd dd 40 00 00 00 00 00 00 00 00 26 01 00 00 67 ..@........&...g
0x40d57099 00 00 00 61 00 00 00 00 00 00 00 00 00 00 00 ff ...a............
0x40d570a9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................
0x40d570b9 ff ff ff 67 00 00 40 61 00 00 40 01 00 00 00 00 ...g..@a..@.....
0x40d570c9 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 ................
0x40d570d9 00 00 00 00 00 00 00 ff ff ff ff 7b 01 08 7f 30 ...........{...0
0x40d570e9 89 02 01 28 24 13 60 00 00 00 00 00 00 00 00 00 ...($.`.........
Task: ndroid.launcher pid 423 rule pngend1 addr 0x40e3a5e8
0x40e3a5e8 49 45 4e 44 ae 42 60 82 00 00 00 00 fb 70 00 00 IEND.B`......p..
0x40e3a5f8 00 48 a6 40 00 00 00 00 e4 70 00 00 00 00 00 00 [email protected]......
0x40e3a608 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a618 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a628 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a638 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a648 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a658 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a668 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a678 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a688 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a698 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a6a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a6b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a6c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x40e3a6d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Task: ndroid.launcher pid 423 rule pngend1 addr 0x40e58679
0x40e58679 49 45 4e 44 ae 42 60 82 00 00 00 73 01 00 00 50 IEND.B`....s...P
0x40e58689 49 a6 40 00 00 00 00 ab 00 00 00 00 00 00 00 23 I.@............#
0x40e58699 00 49 00 6e 00 74 00 65 00 6e 00 74 00 3b 00 61 .I.n.t.e.n.t.;.a
0x40e586a9 00 63 00 74 00 69 00 6f 00 6e 00 3d 00 61 00 6e .c.t.i.o.n.=.a.n
0x40e586b9 00 64 00 72 00 6f 00 69 00 64 00 2e 00 69 00 6e .d.r.o.i.d...i.n
0x40e586c9 00 74 00 65 00 6e 00 74 00 2e 00 61 00 63 00 74 .t.e.n.t...a.c.t
0x40e586d9 00 69 00 6f 00 6e 00 2e 00 4d 00 41 00 49 00 4e .i.o.n...M.A.I.N
0x40e586e9 00 3b 00 63 00 61 00 74 00 65 00 67 00 6f 00 72 .;.c.a.t.e.g.o.r
0x40e586f9 00 79 00 3d 00 61 00 6e 00 64 00 72 00 6f 00 69 .y.=.a.n.d.r.o.i
0x40e58709 00 64 00 2e 00 69 00 6e 00 74 00 65 00 6e 00 74 .d...i.n.t.e.n.t
0x40e58719 00 2e 00 63 00 61 00 74 00 65 00 67 00 6f 00 72 ...c.a.t.e.g.o.r
0x40e58729 00 79 00 2e 00 4c 00 41 00 55 00 4e 00 43 00 48 .y...L.A.U.N.C.H
0x40e58739 00 45 00 52 00 3b 00 6c 00 61 00 75 00 6e 00 63 .E.R.;.l.a.u.n.c
0x40e58749 00 68 00 46 00 6c 00 61 00 67 00 73 00 3d 00 30 .h.F.l.a.g.s.=.0
0x40e58759 00 78 00 31 00 30 00 32 00 30 00 30 00 30 00 30 .x.1.0.2.0.0.0.0
0x40e58769 00 30 00 3b 00 63 00 6f 00 6d 00 70 00 6f 00 6e .0.;.c.o.m.p.o.n
Task: viders.calendar pid 667 rule png addr 0x2a1d56cc
0x2a1d56cc 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 .PNG........IHDR
0x2a1d56dc 00 00 00 60 c0 07 1b 2a 00 00 00 00 00 00 00 00 ...`...*........
0x2a1d56ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x2a1d56fc 04 00 01 00 00 00 00 00 00 00 00 00 b8 78 15 2a .............x.*
0x2a1d570c 00 00 00 00 65 76 65 6e 74 43 6f 6c 6f 72 00 65 ....eventColor.e
0x2a1d571c c1 84 81 3d 47 cc 18 20 26 88 11 62 c0 8c 1f c0 ...=G...&..b....
0x2a1d572c 00 7e 83 c5 88 b1 91 25 23 1a 24 2c 83 c0 76 77 .~.....%#.$,..vw
0x2a1d573c 17 ea 47 55 77 b5 f3 51 99 91 19 8f fb 38 67 ef ..GUw..Q.....8g.
0x2a1d574c b5 18 ec d7 da e7 de c8 aa c6 f2 c0 40 94 a2 32 [email protected]
0x2a1d575c e2 c6 b9 e7 c0 07 1b 2a 00 00 00 00 00 00 00 00 .......*........
0x2a1d576c 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................
0x2a1d577c 04 00 01 00 00 00 00 00 00 00 00 00 9c d7 a5 27 ...............'
0x2a1d578c 7e 7f e3 e7 9e 78 af 7d df fc fd 77 9d 8b ee 38 ~....x.}...w...8
0x2a1d579c f7 9b be 34 bf 91 60 3e 6c 76 80 f3 a4 ca 8c 57 ...4..`>lv.....W
0x2a1d57ac cf 23 44 a1 f3 63 ea f5 fc f2 af 01 ff e5 3f 02 .#D..c........?.
0x2a1d57bc 50 d0 b0 80 7b f4 65 f8 4f 3f 06 03 e0 3f c7 ba P...{.e.O?...?..
Task: viders.calendar pid 667 rule pngend1 addr 0x2a1d5684
0x2a1d5684 49 45 4e 44 ae 42 60 82 50 4b 03 04 0a 00 00 00 IEND.B`.PK......
0x2a1d5694 00 00 37 14 5d 38 d1 eb 16 32 ae 29 00 00 ae 29 ..7.]8...2.)...)
0x2a1d56a4 00 00 1f 00 03 00 72 65 73 2f 64 72 61 77 61 62 ......res/drawab
0x2a1d56b4 6c 65 2d 78 68 64 70 69 2f 61 70 70 5f 69 63 6f le-xhdpi/app_ico
0x2a1d56c4 6e 2e 70 6e 67 00 00 00 89 50 4e 47 0d 0a 1a 0a n.png....PNG....
0x2a1d56d4 00 00 00 0d 49 48 44 52 00 00 00 60 c0 07 1b 2a ....IHDR...`...*
0x2a1d56e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x2a1d56f4 00 00 00 00 00 00 00 00 04 00 01 00 00 00 00 00 ................
0x2a1d5704 00 00 00 00 b8 78 15 2a 00 00 00 00 65 76 65 6e .....x.*....even
0x2a1d5714 74 43 6f 6c 6f 72 00 65 c1 84 81 3d 47 cc 18 20 tColor.e...=G...
0x2a1d5724 26 88 11 62 c0 8c 1f c0 00 7e 83 c5 88 b1 91 25 &..b.....~.....%
0x2a1d5734 23 1a 24 2c 83 c0 76 77 17 ea 47 55 77 b5 f3 51 #.$,..vw..GUw..Q
0x2a1d5744 99 91 19 8f fb 38 67 ef b5 18 ec d7 da e7 de c8 .....8g.........
0x2a1d5754 aa c6 f2 c0 40 94 a2 32 e2 c6 b9 e7 c0 07 1b 2a [email protected].......*
0x2a1d5764 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 ................
0x2a1d5774 00 00 00 00 00 00 00 00 04 00 01 00 00 00 00 00 ................
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment