search for: 00000350

...31 35 2e 72 61 72 00 42 42 42 18 01 00 00 |rt15.rar.BBB....| 00000320 00 00 00 00 00 01 00 00 10 00 00 00 e9 00 00 00 |................| 00000330 69 8a 82 e8 ad de e1 fe 00 fd 00 00 00 00 00 00 |i...............| 00000340 25 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 |%...............| 00000350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| The rest of the data on this corrupted filesystem is filled with similar data blocks -- unknown metadata around a filepath referring to /storage. Just as if something had done filelistings of /storage, and output its memory stru...

...508 0D59 0500 0002 J)%..Y.... 00000290 0040 0821 8410 5248 2185 .@.!..RH!. 00000300 1452 4821 8514 6288 21A6 .RH!..b.!. 00000310 9862 CA29 A79C 72CA 29C7 .b.)..r.). 00000320 2083 0C32 C820 834C 32E9 ..2. .L2. 00000330 A4A3 8E3A EAAC B3CE 3A0B ...:....:. 00000340 2DB4 D042 0CB1 C412 536D -..B....Sm 00000350 35D6 DA73 10CA 28A5 9452 5..s..(..R 00000360 4A29 A594 524A 29A5 8C31 J)..RJ)..1 00000370 C608 4243 5601 0020 0000 ..BCV.. .. 00000380 0442 0619 6490 4108 2185 .B..d.A.!. 00000390 1452 8A29 A69C 720C 32E8 .R.)..r.2. 00000400 80D0 9055 0000 2000 8000 ...U.. ... 00000410 0000 00C7 9014 49B1 1CCB .......

...ac_io_pac_info_hdr pac data [2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0038 type: 00000007 [2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642) 003c size: 00000014 [2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0040 offset: 00000350 [2007/02/17 16:28:04, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 offsethi: 00000000 [2007/02/17 16:28:04, 6] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_info_hdr_ctr pac data [2007/02/17 16:28:04, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(463) PAC_TYPE_LOGON_INFO [...