CTF: MBR - C:\COPY *.* A: /V
Album released: 07 Mar 2017
This appears to be 3 Base64 blobs. The first one decodes easily. It ends up being a 256-byte binary blob, with no discernable header. Perhaps the result of a block-cipher, and the other two blobs can decrypt it.
For those remaining 2 blobs, usually
= characters at the end indicate Base64 encoding (it’s padding used to indicate the last 3-byte block had fewer than 3 bytes).
But, they don’t seem to decode. They look familiar: they begin with
EnCt and end with
This pattern was seen in the C:\>CHKDSK /F album. It is used by https://encipher.it/.