Level 2
Question 5)
What is the password the malware used to enable remote access to the system?
From the community Volatility section, download and call the 'editbox' plugin. Also, I didn't know, this is now included by default :)
./volatility_2.5_mac -f win7ecorpoffice2010-36b02ed3.vmem --profile=Win7SP1x64 --plugins=/volplugins/