{"id":1383,"date":"2024-10-06T14:52:56","date_gmt":"2024-10-06T20:52:56","guid":{"rendered":"https:\/\/fallingstuff.net\/blog\/?p=1383"},"modified":"2025-10-24T16:26:39","modified_gmt":"2025-10-24T22:26:39","slug":"tales-of-ebay-part-4","status":"publish","type":"post","link":"https:\/\/fallingworks.com\/blog\/2024\/10\/06\/tales-of-ebay-part-4\/","title":{"rendered":"Tales of eBay &#8211; Part 4"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Keeping on from <a href=\"https:\/\/digitalstuffy.com\/officehours\/2022\/06\/12\/tales-of-ebay---part-3\/(opens in a new tab)\">Part 3<\/a>, I start the next drive in the stack. Well ok, this drive was another of the later ones that I recovered, and when I started it I quickly noticed some names that I would recognize from earlier drives that will be getting posted later this week. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"638\" height=\"940\" src=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-05-27-204156.png\" alt=\"\" class=\"wp-image-2735\" srcset=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-05-27-204156.png 638w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-05-27-204156-204x300.png 204w\" sizes=\"auto, (max-width: 638px) 100vw, 638px\" \/><figcaption class=\"wp-element-caption\">Clearly there are files to be seen here<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"795\" height=\"951\" src=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141045.png\" alt=\"\" class=\"wp-image-2736\" srcset=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141045.png 795w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141045-251x300.png 251w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141045-768x919.png 768w\" sizes=\"auto, (max-width: 795px) 100vw, 795px\" \/><figcaption class=\"wp-element-caption\">a lot of recovered folders too <\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"782\" height=\"957\" src=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141914.png\" alt=\"\" class=\"wp-image-2737\" srcset=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141914.png 782w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141914-245x300.png 245w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-141914-768x940.png 768w\" sizes=\"auto, (max-width: 782px) 100vw, 782px\" \/><figcaption class=\"wp-element-caption\">Clearly another full Operating System drive complete with Windows and User folders<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"777\" height=\"364\" src=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-142124.png\" alt=\"\" class=\"wp-image-2738\" srcset=\"https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-142124.png 777w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-142124-300x141.png 300w, https:\/\/fallingworks.com\/blog\/wp-content\/uploads\/2024\/10\/Screenshot-2022-06-12-142124-768x360.png 768w\" sizes=\"auto, (max-width: 777px) 100vw, 777px\" \/><figcaption class=\"wp-element-caption\">With more than 1 user or better stated there were several service level accounts in the user folder (I did not redact the postgres behind on purpose)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">I stop with any screenshots here because I recognize one of the user names from other drives that are coming up later, as I mentioned earlier. This drive is just a toe into the pool of WTF that is coming up. <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Pictures of women used for some kind of personal ad (the image has a phone number on it)<\/li>\n\n\n\n<li>Head shots that appear to be multiple people from social media <\/li>\n\n\n\n<li>Lots of installed applications <\/li>\n\n\n\n<li>An Ubuntu Virtual machine<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">3 drives down, 3 to go. Onward to tomorrow.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Keeping on from Part 3, I start the next drive in the stack. Well ok, this drive was another of the later ones that I recovered, and when I started it I quickly noticed some names that I would recognize from earlier drives that will be getting posted later this week. I stop with any &hellip; <a href=\"https:\/\/fallingworks.com\/blog\/2024\/10\/06\/tales-of-ebay-part-4\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Tales of eBay &#8211; Part 4<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bluesky_dont_syndicate":"","_bluesky_syndication_accounts":"","_bluesky_syndication_text":"","footnotes":"","_share_on_mastodon":"0"},"categories":[48,45],"tags":[],"class_list":["post-1383","post","type-post","status-publish","format-standard","hentry","category-data-recovery","category-privacy"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/posts\/1383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/comments?post=1383"}],"version-history":[{"count":2,"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/posts\/1383\/revisions"}],"predecessor-version":[{"id":2739,"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/posts\/1383\/revisions\/2739"}],"wp:attachment":[{"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/media?parent=1383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/categories?post=1383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fallingworks.com\/blog\/wp-json\/wp\/v2\/tags?post=1383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}