Autopsy ascii Fragment Report (ver 1.74)

--------------------------------------------------------------
Fragment: 2956
Length: 4096 bytes
Pointed to by Inode: 8
Pointed to by files:
  /etc/locale/pt_BR/P^184^255^191^140s^1 (deleted)
  /etc/locale/pt_BR//usr/sh (deleted)
  /lib/modules/2.4.7-10/kernel/drivers/scsi/aic7xxx/ (deleted)
  /lib/modules/2.4.7-10/kernel/fs/fat/^7 (deleted)
MD5 of raw Fragment: e0f57422271df08b6a91136b50946b72
MD5 of ascii output: 193d6545585201292633e80a42da9d9a
Image: /home/kmaster/tools/filesystem/evidence//SOTM29/192.168.1.79/images/root_honeypot
Image Type: linux-ext3
Date Generated: Sat Sep 20 15:59:30 2003
Investigator: CGR
--------------------------------------------------------------
.;9........H................................................................T..@............d...........................H..@....................................................................................................................................@K
.....H..@.................................................................................................................................#.@................`............K
.........`...$....J
.....H..@....@K
.........................T..@............d...........................H..@................................................................................T..@................................@K
.....H..@............H..@.................................................................................................................................#.@............`...............0...........`...........................................................................................T..@..............................
.......
...
...........................
.........(...................=.
@..
..T
.....dw
...
...
.h........:
...
.x...)....T
.,.
.......
.,.
..............:
...
.......
......................T
.....=.
@..
.,.
.......
.,.
...
.......
...
...........................
................. .......(...............8...........l.
.8...."....
. ...H...........)...h...............h...j...........p..................................._.....................
.....................................................................T..@............P...........................H..@.~.C.......................................@......................./..
...
...
...........
...
...
...
...............
......o
.............H..@...........................................................................................................@.....................#.@.....T..@...L...............0........................~.C...........................@.
.@...@.f.@.......@........8k.@, .., ..\....i.@..........
....@...@..
...............
......o
.....H..@.........................................................................c.@.i.@ ..@l......@4k.@@..@........................@y.........@................P..@...........@.i.@.........f..........l... ...........H..@............+...+...........................................i.
@#...........+.............................................................
.h.....
...
.....!...................l.
.!...l.
.........!.....
.......
...
...........
.LY
.........l.
.......
.............,...........L.......p...e........n
.....l.
I......
.......
...
.........*.....
..n
.(.....
.........8...........p...X.....
..n
.....p...e........n
.h.....
..n
..............n
.........*...M..@..
.T..@T..@.....T..............a9......i...................P.................................................................................................................................................9.................................................................T..@......
@.............................	..........................................L!
......Y
.............a9...........Y
.........................................................................................................................................................................................................................................................................(...............X....E..a9......X...+E.. >....
.................`9....
.............4?....................
...
.....{.......T.......k.......................`....|..................,.......P..@ F.@................T..@.h.@T...(......@....T...\...v...0.
.....(......@....\...dz...c.@........................T...`...0.
....@L...Di.@....	...............$...1...............................................d.......4....... ..................@........	.......................
.......................................i686.-bash.HOME=/root.USER=root.LOGNAME=root.PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/lib/.x:/lib/.x/s.MAIL=/var/spool/mail/root.SHELL=/bin/bash.SSH_CLIENT=213.154.118.201 2118 3128.SSH_TTY=/dev/pts/0.TERM=xterm./bin/bash.....