From 8d496f12e74f75651de5eb5dcbc942384255f03c Mon Sep 17 00:00:00 2001
From: Jan Vales <jan@jvales.net>
Date: Thu, 5 Jun 2014 20:50:49 +0200
Subject: [PATCH] show administrator hash

---
 report3/content.tex | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/report3/content.tex b/report3/content.tex
index 72d5697..c575f34 100644
--- a/report3/content.tex
+++ b/report3/content.tex
@@ -211,7 +211,8 @@ Offset(P)  Proto    Local Address                  Foreign Address      State
 \subsection{What users are there on the system? Extract the password
 hashes and passwords.}
 volatility -f image2.vmem --profile=Win2008SP1x86 hashdump -s 0x94cdb6a8 -y 0x86224008
-\begin{lstlisting}Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
+\begin{lstlisting}
+Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
 Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
 Vista:1000:aad3b435b51404eeaad3b435b51404ee:209c6174da490caeb422f3fa5a7ae634:::
 Bob:1001:aad3b435b51404eeaad3b435b51404ee:878d8014606cda29677a44efa1353fc7:::
-- 
2.43.0