⟩ Tell me what is the Virtual box core format for all VMs?
Virtual box supports 32 bit and 64 bit ELF format for the core files. The file is being managed by VboxManage and the file that is being used is debugvm. The core files of the VM consists of memory and CPU dumps of VM. The example is given about the layout of VM core below:
[ ELF 64 Header]
[ Program Header, type PT_NOTE ]
-> offset to COREDESCRIPTOR
[ Program Header, type PT_LOAD ]
-> Memory offset of range
-> File offset
[ Note Header, type NT_VBOXCPU ] - one for each vCPU
[ vCPU 1 Note Header ]
[ CPUMCTX - vCPU 1 dump ]
[ Additional Notes + Data ] - currently unused
[ Memory dump ]