Doc Holmes [forensics]

Doc Holmes

Sherlock got it on his super secret channels. You have received a copy of mail. Is everything okay with it?

Recon

We receive a Microsoft Word document with some meaningless text + image in it.

It also contains a hidden image with the flag in it.

Code

$ unzip sar2020_holmes.doc
$ xdg-open word/media/image2.jpg

Flag

FLAG{prominentplace}