# Name A More Iconic Band

volatility image, use hashdump

```bash
volatility -f data --profile=Win7SP1x64 hashdump
```

Use crackstation to crack them, then cyberchef to hash them

[https://gchq.github.io/CyberChef/#recipe=Sort('Line feed',false,'Alphabetical (case sensitive)')Find\_/\_Replace(%7B'option':'Extended (%5C%5Cn, %5C%5Ct, %5C%5Cx...)','string':'%5C%5Cn'%7D,' ',true,false,true,false)MD5()\&input=c3VwZXJjb2xsaWRlcgphbnlvbmUgY2FuIHBsYXkgZ3VpdGFyCm15IGlyb24gbHVuZwprYXJtYSBwb2xpY2UKaWRpb3RlcXVlCnB5cmFtaWQgc29uZwp0aGVyZSwgdGhlcmUKd2VpcmQgZmlzaGVzL2FycGVnZ2kKbG90dXMgZmxvd2VyCmJ1cm4gdGhlIHdpdGNo](https://gchq.github.io/CyberChef/#recipe=Sort\(%27Line%20feed%27,false,%27Alphabetical%20\(case%20sensitive\)%27\)Find_/_Replace\(%7B%27option%27:%27Extended%20\(%5C%5Cn,%20%5C%5Ct,%20%5C%5Cx...\)%27,%27string%27:%27%5C%5Cn%27%7D,%27%20%27,true,false,true,false\)MD5\(\)\&input=c3VwZXJjb2xsaWRlcgphbnlvbmUgY2FuIHBsYXkgZ3VpdGFyCm15IGlyb24gbHVuZwprYXJtYSBwb2xpY2UKaWRpb3RlcXVlCnB5cmFtaWQgc29uZwp0aGVyZSwgdGhlcmUKd2VpcmQgZmlzaGVzL2FycGVnZ2kKbG90dXMgZmxvd2VyCmJ1cm4gdGhlIHdpdGNo)

## rgbCTF{cf271c074989f6073af976de00098fc4}