# Problem

In Windows Task Manager, I right clicked a process and selected “Create dump file”. I’ll give you the dump, but in return, give me the flag!

Attachment: A compressed Windows process dump

# Solution

I’m sure the creators had something very interesting in mind, however it seems they didn’t verify all the possibilities, because after extracting the xz file, I was able to run:

``````strings RunMe.DMP | grep -E "^SharifCTF{[0-9a-f]{32}}\$"
``````

Which returned the flag: `SharifCTF{4d7328869acb371ede596d73ce0a9af8}`

End that was the end of it