I have a problem which I must solve to get me to the next question as the answer provides a password to unlock the next question.

I have to identify a file's last cluster entry and then calculate the last clusters MD5 which will act as the password to unlock the next question.

I have used

istat -o 2048 <image.raw.000> <inode entry>

this has identified the last cluster as 123110 - I have then ran the blkcat command on this to stream the file and piped it to md5suns to give me the hash value.

blkcat -o 2048 <image.raw.000> 123110 | md5sum

This generates a hash value but this doesnt unlock the file - am I doing anything wrong? i.e. not calculating the MD5 correctly - any further suggestions?

Have you tried getting the last block with dd?