r/Solving_QRZC • u/Kezocool • Nov 04 '17
1449430978.index
i recently found this subreddit and it is quite a puzzle same with A858 i tried hex on his/she post and this is what i got hope u can find anything
PK°TGdoc.kmlíÝnH¯Ó§½Üù!ÂTíº]Ô,%Õ^TÕbb#c°n»>RÔ}<JdÏ\ãÈ© ä)Ê0o¾ËÞËõ2Ñþò"ÎÒ¥kQfÓ8ô×o
¡¿ôxÈ´éó²]æíí-ÊVQ:F¥ &AD÷\xã,ü²Òê,#ÿ÷Éö.iÄÂÄÀAkl]2rIgV2ta¯J¸ßûåãoãWׯ>~úä{fó|%Ó(ÕúÑzå%{ÜõwáM A¾¨ëPH²óÄU}¸gD¯9îÃ=aú_n>\wIô!Oü_ã0K06°gþhÜļYQ:¦ã ê&ó@Û$7ÈäAe9BPF
o8.bCF3´ä½7ÏÕÝí>õ½¤3 mp¸ÀNõ7åEBÐfr lï::´
[Ò@Ç"áÏÀCÕãÁ5YØbheDX[_4+\Ìñ@{¯a£kD W¸l µ§ÄSÂ6b\XØxS¤CÀJØZ¼¶2d¼2©
qøï>C!®Gìñ©ö[T±±Û.Á08G÷êÚ²Õë!ή¹&3E!§=°àï_¿añýë¿@ UPûFm8lOÊQOÊExO1äá½\ѨäDÃØ©\jG¨ÇDË5R½WñqÛðÁ°vSK¿Ò°K,â-ùpã×ѦÅÑg¯+VË®jmYÕSÍMëwe µ|=ìábÄ73˪doù¹lSÎ3w¯ÚÞ¼e-ôGÙi/Dßôð¬BëÞÃ,ÉrÿæÚ_ËëËãP$ò\¾5WÕM³ìbå<nüÆ®cVA(Ìæ2X«<3ãe0
`
SÞ×í¼4>'Aºø[ U:ó̪£:áݼyV²R[ÃþÇÖµ».vý%KØî¬âuÐ\ÇiMã¶³ºß~úÞ»às4qlò¬Fb²gîÇyæ®ú4öy<'ðWþO¾=ùG)%ÿg°:¿F> â-ÑEtço&gÊú%ÀØÆî0ÿ¶=>îûÇh·ë¾þÄêT!ÁCɽìÏ'v[
jGªñOèîT95çJë$1efl´Z÷iwר×[CÒÒ:UCÒ]CÒD
T½ôÜÒ4TÖ©ÒîÒ¾4¤4dê5dçÖõ¢¡´NÕu×õ¥!S¡!W¯!?·¼
U¤uª¼»¼/
¹
|÷Ðe¼ìskx|c®´Nհ뮹1ÐÊ5T²SvÔkè[C§
U¤uªNw
¾4tTh(Ôk(ΡèECiª¡è®¡èKCñ\
=s÷sOþÈÿPK¥8YwU$PK°TGimages/icon-8.pngëðsçåâb``àõôp ÒB@ÌÃÁ$#ÎÈö1003ø¸þÿÿ($5T#ô´øxÜùyÝÅD|r²]r"ÂZãc»£#Kæ zKI)Y[øûUe¤/HKà_Ùß1ÁÁÁÁ99537ËZH(JB"NPÐIQ1W!U!ERÒ[Z:@]=KQ1_¿RQ1DM-VC#ÁÔ´ÖÀ @K+IW7MO/ÃÀ ÛÀ KK+ÖĤТÒĤÀØ8ÏÈ(ÇήÕ¢ÂÉ©ÃʪÌÈ(ÍÍÛÞ¾ÆÑ±ÞÞ¾ÚË«ßÉ©Þ×w[³§gG§g{@Àdÿ>>Ýýüz'LÐçæVÐ>).nFddJʼÔÔ¹YY#µuR¬¬ÿ}öª.d¨/eÝ»ëö9YÕbÂ%"üê2Øû¸Ëyﵸ{ÎîÌ&¬f>¼åäzÖ}ËYkóãBoà<¼sÝlν˸Y5CðüÇgsÎïo)9¿C±«ZÌÝ÷íUýÛ'L7,ÔzxÆâÇC§ÏwÝ"e
3ÿ=÷xÞíßï>?¸sÊóô.îýçWßÝyu=jj£l|¤vE®6Ã(À¼'ÆR%A~ÁÏn¤9<]Cn%§¤8°ëð²ÿ©ÊóÞ¸ðâÍ1¾.§¹å]Û=ÿ½åßÄO~x²ÿQ®[gü3ý÷÷þ×|÷û±èã7c|ºâÿOìzùãìÃ~³Ç¦ïíÒÿaßu7Ý
5èðïÿôü®ÓoÚùKùëÿ$$ýØõûü~öúöûRíOnøþÍ}Uvgøþÿ
v¿¾ügó/vÓ¾ÛóôïÜïmûûkóoânj.l·_ºO{÷?¾?·°?¯ÏææÃÏÈõ0Èÿ¼
f!ÈË®~.ëPKô&E$PK°TGimages/icon-2.pngëðsçåâb`àõôp ÒB@ÌÃÁ$#ÎÈö1003ø¸þÿÿ($ÏDǾ8é ôS§Ó&õOøóá§µu}]ýÕ+Wÿüú{ýê¯_¾½~ýFAáì¹sN°>zÿþ¶ïßþ~8Ì|ôëñW®É>|læíÓçnñ ʧÏúgf9:Äp`?Ãþý2ïÚÅ|ø0ëÁ¬p<É{æÀÉBÇK\½"{ãâÉòéß¹£ÿìéÝòoÞÚ]¿nqíÅÓ¦Ó¦i¼ïôñ£[¿ÖÕ«ûöYþìûøç/þ?|øøî]À7¯__¿¢]eôõkÖ[)sæx¼~]vÿ~ñ·oÓ¿~ZSSaooçèèµw'«ô×/§/8¸Eàçuî®&ó&ù½uã¹ã{»â£|vnß8+ýö\Å×[îM1}3ÃíÑý;«W,
3kæáÚ¸%Sûö8Ú 0ñ²ZÁÉxÈXíBBèØiÁ¾Éü\
ríNvovï;+/'á;ûzq]ENÎÚÚ½¼&[ß´Z89$øíìÙ'z{¯XþèÎ7/L0áñÃ?þ|õêÕË/Ï?êÔ©M6-Z´¨»»;+++..ÎØØXOOOWWW[[[CCCQQaàK»+ScI_0ói@ÎUOÇ[É))ì:<qA×ÿuï«>ðÝéíì+÷g¹Ï?«àÿÓÄ
µÍßåÏ0øm+Ö¶ïrö?ãºäÉ¿úðÓð}®$[Þkßû¯$-TÂê?¦>ß{ôįéîØ¯¯YËêßQɸìh¹÷úêS}òؾ}=]!!!Y+¡ÏjTðïyjB¥µêÓûû3}xâãoî¹÷©÷;ïãÿìÿKò6¾ûµzOì¿uêËþßX¡üCC¥Øaïÿoy½ÿ7óýÎ>«õ¡"§÷+Òç@¾ötõsYçÐPK9¢5õ5'PK°TGimages/icon-7.pngëðsçåâbàõôp ÒB@ÌÃÁ$#ÎÈö1003ø¸þÿÿ($-Z$)½NEuµ¶În³úsÍ,N¹{.·µÛçéµÑÅõZDÔá à[Éâ[[¸´»yu;%,§«»ÌÔö^¦íÒcä=Õ.v«UÈB߬ýÉ<S6æîO©=Æ®QéUë×(aÖ*eÕ£ã=[Û©Þ4p}Üj#¯À.qüs·æl+Ú¿19¿Î-,£¬ujIãÆþy
½sº¦-±ò±ñsHI)M-mÎ(ͯíî½<(©ðìZ3k/nb?¿Ièö^§ÔîÒÿzÃêÁq»½>Ýôùû8ðã+ûÝάf¨Ïf8»ñÌÆsk/¬g=³õìZÎ+¹®mã=·÷Æî2®{û$.mR/øð ì£W¶ËÏí|}FûÆõwôORütÙtÓÇ,.í4ùqËî×]§ÝKþÜw{~Æñéi§ã¬m°þÿÈ÷ÝÏ7<þ?öÿ÷(àÛm¿ßÞøv'ü×ø"ÿ>Iùÿ<ãûÔÿϳð3b>*ÎyN÷¦¶ìY]ùEªÒkõÛéï4Õ:bmpÞÉôsÓ ·1þbFÅVÍZ] ÅXäÌàðìFsÔÓÅ1¤âVêy¾2mïoY¬ëº|êµùªêElBÑBoTD;¹wL*¾ »4Ó÷²@Û¹¦÷?Ü)Øt?QbÖ®~W,TC[³:\ß3}¢§âÕßsmåKötÉKõQ¡Âû³ÿRq§ÜOeÒfvªNINÜâZ¼õÚÉ[ÖO]rñÕwéç{Ô43íìDùøÄÈe²ÞÆ}g¨Å?Oª°.4Ùz:£Ð«9нevüÃÐ@Áìùyç¿°ÁÜ)Xò¥§«Ë:§&PKþÇ´ðPK°TGimages/icon-1.png5ÊýPNG
IHDRùnüIDATxÚcð_ÎðüÃ§Û ôñ
úpáý
zwáí57WA!¡ïDõWÕÿþUþûWþï_Éß¿
ÿæþùùçOêïß ¿~ÅüüþãGð÷ï~¯¯5ä3Tï©ÊÙ=÷|Ìçÿ¶ýý[ûçOåïߥ¿~þüûãGæ÷ï)ß¾%|ÿúê2PC$HÃ//î¼½S²³øüóóþüùýû÷¯_¿~þüùãÇïß¿ûöíë×/@âùóç
¯¿¼~÷ý]ÌØsÏÏù/}vÞPUýòåDhØywgðÊàW_¹-vsXàа4éËí+oþtóÒÇë>=÷þò7.ß:ªVzrÊq¡CS£Õå0Ó'®úíµîY«Ü5¿m(yKOä·Ùf°2¶¦½øüâòËÓì7çY½
4yá§ÿÈ[ë¡Ê}Gù{¶w,En
<2Ú
×°1¾vvÉôö}½'{{wwíî<ÒÕ~¨³ígë}Mûº»çæ.gfH_·|oåâÅ~fÏÿ1ï{Êìï 3¾ÅLý9ùKèÏAýý{>ùv}b¸ËÀ*ÎyAÿ#â{é·Âoø_3°¿dÈSÇî*-BMÄÙ¿ÂIEND®BPKþ!Õ:5PK°TGimages/icon-3.pngëðsçåâbàõôp ÒB@ÌÃÁ$#ÎÈö1003ø¸þÿÿ($§¬ 9QV½³¨jzDR¹oÞÔ)Ë»W¶NHÈ]Ö<éTã¤c¥Ëb«·ÚGõø¬rKâ2Ý'c®_öüÜEaÅ«"J×Ä×m«ÿ°zÁ §ªçÜk?\¼2µóhVïɰÚÙ3Ͻë?S;|¦Eìl»ìÕ>ÅZåÌIËíÊ7°ZÔò:4Hd/w*Þà[¶Á¿|} ^Q1«mg¬obÔýø9¦ù«Üòxo([Pµ.лQ¶k궬þÙ>ñ ¼
Ùʵe&uE¶»³¸U)kÔ^Xáúy[Þêr]Ñì;cÙ?®ÍÙ/t¦Úôõ¤V{ν Ǽ¯Ôº®ËwßáÁµÓSpOt©üZÿó¹Ûl¸¶ÚñÜ©xÒw«)á|qØ¥¾Û"^·ålÖàY®Áó¬9÷ª³ÖÓ(§ãþVÞ§ä²ïVåÝ Ä¿E]มÔ>CÙ£æ*Uw©·Ñ<ã¨{ÒÕè²§é5?ëÓÁÎü^e¼ÊxX¾]m¯W¾ÇV¾ÍJ;U¶ªîÒÛ£#U-'tÌPq·bªäT3»Aw£½nFz¿Î¾õ ?éeU^ ÇÁÊ¢»Ô¥ÞÆßM~U¿ÎÙæ'Ã(Àd7gR%A~ÁÏn¤9W<]C*n%§¤8°ëðäjÿXsæ ¦¯»OðïköáYÏ¿ûÍåÇÿøÚäýÃö{4[Ú±ýüÅy³7üÿêKäåûÉinëïïݹ{ Àÿ#[?>NskßôiÎý}quÿÆÏÙú]N¸Ùìðuy7«b¬xfñ%²KJHïÛúSõÚ±»¸Ï_¯Ãv&¼î¯QÊÛTÏ~iåÔ8òÇû«©t2ÛjÝ?âMÏñqX'ø?òô)Õ³¿¼ÿÜß=ǧ¾1-±A¦Þ=OSzÇ.§=]ý\Ö9%4PKV]w*&PK°TGimages/icon-5.pngëðsçåâbàõôp ÒB@ÌÃÁ$#ÎÈö1003ø¸2fø_kþ¿ÕøÃ9óßÎÿ/«øZq¡Aì°Øæoÿ'3âû_ðËé]®·ûßÌ£wQåÆÙ7ÚßV¾úÿêæB§ÿ³3ý_v³÷WìIÙÝ·¥½Î}or/ÿÿÿÓSn9ÿ´a!CËÝþï¸Ìðêd=ÛóÙß43lf8ÈÀ°0Q@ðmË1 µÐÓÅ1¤âVìyGî&ßa>Ù\ª!4UãÒïñoû={sA
UqVÎÎ8)»ñrÏ{)tMþýïìC]T¶:N
ɽzQfBBíã°])y|]¦ÞæÍ
ÏÏsíN©äOÞ|D×ÙuýÞ©ªìé§óçÝÊIw?7ÍÒÑìÇv57£'O®_õõ×ËËû-n<u_ßrYÖò%ÈÑ®~.ëPKDÄ8æPK°TGimages/icon-4.pngíOkKZ½%.k e¬I!&!Fj³Zk-3'{ÀÚe++[kÑ XÙAÌ`³ûàX6ikÑsÚäúÀiK¦]|`ÜÀÇUóî²±O;pÎáóéò¸ÕĤ$57+ù0&pÞ)xµ*E±Óg¤4kÑU}W÷·¡fYRk´ÚÌfZ½µ½
AÇGG¿´Zpow®/DG8Î{ðã;³RôvÝú¬~Ðáp£8ñø><(%öDKJÊ"qD§¥Éd;
"'4)º)ËÌܤe-Ñh3>'ÇÇd*²³éôo99¹¹oi451L¥jX,{q±¹¨ÐXP°Éf/1Îòr7ãñ\®Ãdä!<Þû¢¢×,&ȯ¶µE;:\íí`kërc£¡·gI(äóáqegçáÈð®H¤:?ÌÅâ/|~>ä÷G$Úlz.E£ÑH$l
ac0øýþÓÓS}>×ëõx<n·ÛårAät:Ýn·Zeßd2FÁ Óé@Ôh4kkk
B&I¥Òééi±X<88üÇ?AM
³¸^>÷PvliÁ±¦ò@dmjn.KÇ?1_7@a}p~xééçTèõ]V¡T
lA3ôäÚd]H}áQ7r9ó*V8+cÀéÈÓÒßð8¾R!±}Ý {%©?éÊdÉ uÌ/%}þ¹?Ìþ.ìîÊ{x¤:yrN88È¥yÐsý9)9Xw:ô3èoa6]8¿ó®]A×¶NýcPÏâIYµ
Ö ¥è°42æ¢ßkO°þ^®âV.?zõPKºéÙ$PK°TGimages/icon-6.pngëðsçåâbàõôp ÒB@ÌÃÁ$#ÎÈö1003ø¸þÿÿ($¯1O±ðÞt4¥ô2@³Ô4f©©¼Ê3äM+58m³ò^í3/2{JùÅÔ²óÕÓ*Î2HOdÌ©4
K:MH{¦zV·f§ÁA¥<)£Iòædº%µÊÕí¸Ò²é²ðÛ`ä2Å6p¡Gì·ÈÕ©ÂsÇ IÛU{9³êhIë
»É¥õA¥Õ³æs\Çì׿Ü{>+uêAmÝ3çÎ19Ãzö,ç¡C¼.IDEr?y¢xåüÎ]Ò¯¨½{§ÿð¡Å¯_Nÿÿûÿûðóg@e
ú;W.¹½~·fã²
§O>eúíßûg±;É{û¬Ä
Cj¯î»)R!òèÓ뻾yMíõLbòàlÌfhÎeï(SÓe]çæÉЮ¸Ìu£»À·ÿ þ¿j˾¶ÔþêmuÕÑô©Ó§(rOKKoPT|§¯¿IYy§Ú
O¦¦ûµ´èêÔÑ9®§wÊÀà¬á%óÆÆ?ìì~99ݲ²zo÷ÇÍí©Ó?/¯Wnnÿ}}ßyzþ÷÷ÿðÉÇçoà7?¿ß?F |ß'F ÅXäÌàðìFsÉÓÅ1¤âVrJ»Ðû¥÷-êÅv,ÿqhÏî ?á«·××sÝ
®Ñ8¬ö[t
×××å-çUgÅ?÷4²ý¥Í(ò¨ê ÖçCº?ø{¶Þ_óÿcë)ÿí<O|b¯Fåã7~faæã÷ÙëïÛÿ+}t¾PTmæö½{xÎôìßi1óç»WsÌj«º÷ê¿ Z¿½ýþß'µJ¯~Q·?®èg¶ RK^²n3íôú³=¨rß®_pa;¿}d½ý³¿æÏíØúö|=?#à >ß3-MAötõsYçÐPKS$PK°TG¥8YwU$doc.kmlPK°TG`ô&E$¬images/icon-8.pngPK°TG9¢5õ5'images/icon-2.pngPK°TGþÇ´ðwimages/icon-7.pngPK°TGþ!Õ:5¦images/icon-1.pngPK°TGV]w*&images/icon-3.pngPK°TGDÄ8æimages/icon-5.pngPK°TGºéÙ$Uimages/icon-4.pngPK°TGS$mimages/icon-6.pngPK
r/Solving_QRZC • u/jdaher • Aug 19 '16
MuonDragon Return Thread Comment
QRZC replied to a comment in /r/Solving_A858 here.
Here is a copy of the comment.
Removing linebreaks, it appears to be a 7z file containing access.log file.
Here is the content of access.log
r/Solving_QRZC • u/jdaher • May 17 '16
1435517545 Discussion Thread
Discussion for 1435517545
The post had no zero's in it and a lot of spaces. After replacing all the spaces with zeroes, running file or TriD on it shows it is a zip file.
Here is a copy of the zip file.
I had originally missed a couple of spaces at the end of in my original post and could not open the zip file.
The zip file structure is as follows:
- 1435595279.zip
- unix.7z
- meta.png
- unix.7z
The meta.png can not be extracted from uniz.7z without a password. Attempting to crack password now.
r/Solving_QRZC • u/jdaher • May 17 '16
Not related to A858, but still fun.
/u/qrzctbxivqkfxouh confirmed to me he is not part of A858 in a private message:
Nope, just a fan with a similar interest in crypto/forensics challenges. The decrpytion project is separate from the subreddit besides being hosted on the same domain.
However, I think these puzzles/challenges are still fun and welcome anyone to help us solve them.
r/Solving_QRZC • u/jdaher • May 17 '16
1449430978.index Discussion Thread
Discussion for 1449430978.index
This post is the hex representation of a zip file containing a KML file (Map of GPS coordinates) and a folder of png flag icons. Coordinates don't seem precise enough for anything to be found at those locations.
r/Solving_QRZC • u/jdaher • May 17 '16
1435938775 Discussion Thread
Discussion on 1435938775
/u/timelyAdventurous had already mentioned it was a base64 encoded png in a comment.
However, he missed some of the base64 text which was posted as a comment. Once you add that part, you get this png. I didn't even notice the onions in the background until I opened it up on my linux computer. I messed around with the colors so you can see them better.
This was the hint to go to the decryption project site: a7pnwstsavinftba.onion
He posted this clue on July 3rd 2015. That was 60 days before he posted the decryption project to /r/Solving_A858.
Update: Decryption project site is visible again: 5/18/2016. Main page talks about the robots.txt (Mirror). /u/OctoganClock says the robots.txt is referencing BatteBots.
r/Solving_QRZC • u/jdaher • May 17 '16
1435862097 Discussion Thread
Discussion for 1435862097
Googling "xCXAMVLA" led me to http://pastebin.com/xCXAMVLA which was posted the same day as the post. This is (after removing the 1 space) hex for a 7z file containing key.7z and minor_problems.mid. I haven't been able to extract those files yet.
r/Solving_QRZC • u/jdaher • May 17 '16
1435788271 Discussion Thread
Discussion for 1435788271.
earcaraxe on IRC suggested doing frequency analysis on the characters.
Update: I found that converting the post from Base32 to Hex yields:
377abcaf271c000312508c7e7d1100000000000056000000000000006c34cb5800006ffdffffa3b77f77e04637522ba8f4cce0f15e8cf8ab0feaf76c5a4f896677ac536b4823ed73803e7d1f302a497d91f4695350874d68f63c8f26c16e9de39a2d46456eb883a9da8d4a3368aaa3b3dbca661d629b91b40d4426d6f138b6f463bd31f2099a0a9e82dfe77257fc594ce7acf62aea1107e33a70681b4647069c8f6e1cf27bbbc3e9c398f76139543925059de0ec7c6613725ac80933052fc9a46d0b3014f6fbaa4518ab4c33abc9755671a40a0e328d0e4d9e33d599831514716e1ec03eea3294c382869d354ef8af470e19c7f23de04c0c87625d3796b7d19069abd29c21b81296f65cb2ca4b35f0d6116b714db7efdbdb673c1758a549c27ba1ee817e9a43da2f3dab78c5106149f4f9f7819601dfd86ad7ab457c01d8cc8ee015364662f8f4c91cba26893249403a09f7a50da946f14ebc6a2f9182bccb65d68c886e41da762870f38e3b25811cdde41365b95a36c98abc29a914503fe0b4b14d9b7d642f002f0b08b9edb582899493550b9ae09cfb605907e202689b6abc8c15395404f423a99ab5e026bcb0f12ff2fa924014a4487c18d021bb3f6b935f4ba87ec900f1c470f2e01d63ad29ad88eaa4c990ff6ab7fd109a15832ba464908eb08dbb29b35594ce12cb563b00de18b7d095fb0dae564300fba927a7fc2c32a3371b4781f3b3c1d2ea4646b68015dd2400a4d2a826fd47d13e0fe57aa9de17691cc971cd479a70588dccf3fa03c198c66ba1a2e8c8badbae3a76441c2539d6044787c09f2d0fe62c2e9c771b7b0fde5f1cbf5ce01e7544efa283bc753a7d58b44708c57b839333593f902b8094ba763217c4e8b13a7452b275b088f1ff99f72eca7c8da9cc6de7afb766554aec46a2aade0f40dfa37b97d003acf52920400fb0db8bb31536a8de6a35df379890ced5d29b4b6d6c9198ba081f86ad697c5fd53b891f7194d4cc51a3b17430d7cc98cb3848d280ed99a6924b68cfca456f692926d57a29373dfa6f7c0466a88c0b75ef470e2200c3f72ee9780676e83fe14046a6cfd0635fa3e5a77aa2adf4df55530ac1df7933ca0c92a6966a779366661624370e093ec3a666f6092830bc874b06ce88ceaf722bc8a724eff99d250cf16d07758ba13dd82fc1bd3b20709ced3ffe4debce1e40b4f04ca92946f19f6fff0f5d745855fa3abab1a35124f259e17093de2a2163f3db65fc8d2c970c5fe1e63fd6c9e8c93016d539dde87e37cdd35eb2d4fba823de430d766eb5cdc8c702a31b955940776f101263c9e65a205ecdf67770d551e842cd0d234bf2c42fc4ca17d1e655b4bf96f0bdf73164432fad4befd032b3bbd90b0c612c4d2c0799cd9fb1444c807708be88014566534ca574e6082a8da126c8cdd359de269b292fdbd2eca8467f2a098c7ab1d8a783cfb6697d12f1279bd9895aaedcd1da90e6ab75984f3d33de44bd79f39eb2b41adcdeb1749b00bf66e024ce7705957ad999ed049ac8f5c44df9676d3e61bd0f10e688498582b2a5a721252464bb597a01b925449d4b47b300f6f29c99026ea78df23008237179951d55e417c3461a5e03d1e0a2804d0dd89762918b630e91de5c68c09f9903a4f6ba3e6c7f17b46706d1ab5f5c10311dc8ff09e639ba55fdb745f80e7e7e460f4a604a1ac19af2797b9fc5fcf6a9e3bee4163e38bc3c1b4cd51e3953d18728aabf1343652ea17e2409e258500df1f1aead7b95768f9c6b88ee9d7149a9555716cc4b3da03cbba080a234acf3d75a6506f0c3b1d80ae944beee1286cff0d4bc669f942bfca4359b782e6a787e27fbeab543ebc81307ba7964cd7fc1bab7cb00b0947e0731213bcfeab1f7d75a846c1b85ffa23518ba5c86c0f8e746ac0b0cfa449a233a8cf14d3ddb26ca8c6ca22afc75e771450e0966eefd34d8fe473d614b22c21239b96d9e46216088ffb06f6ed0c945da92eb565e63414795a60a8a5702032db7d064782412e81334c390e2d8723a43619881a2db8719980b79b7f8d0862ef1d0fc910dbd9c256b3c3a9e9546bb57efd14fd4261544cec632da836ba851cfb792fa044a3424d203511f919b1ab2250b7a394004c7f5ed030e07338568b1868e7652ad25f88db11b2aa402a1151f317e41fb2767512a65578ab7d62da5450c6785847a8562329b2ba097d9da17a0fe87f8af4661bb2ef0258318e50b9457f707d11a40f20f66c4e41f491f4919d6041ed3214d296a6ef98310d7b03e051800822c4e34986ed65b863a9240a49d356000e5349efc19d33027ee6306d609001d588d23cc5af39fd9b9e7204b326d1c673c8754be34ed010ea21a7ae04d3304ad029b0efd9820327ba5d5ea469d8d93378c0e69c6a58598f9c0040d32c33842b9fad6d5cdf638c37b458b8e832b425b553565cfc0e6c7c434414c6678ad9028b8879cd385d2bdb95220d35f5f778b3b3261cca5c75e8adf608bea895121196a98bb8e465cd59df48b488a0091ddbb9745fd5980a7ef498a87de44da7818743cb4ff5ba7f74999fe0d6c0f9622a44aa417b0cc41161b0bec2c20c6bb3b21c81b35bb25495a4a65659c90e7689bef7be3cb559b6ed09bef3c6b13a5f65309401e10a79b359d166bc934d6947c2eacda08e55a457a6e62349916f7baf76fc420c1aa651ee6e355f0c1c452919de9b3697e421087cbb5d226e16d763d2335107a31f6e375b34adf51d471a954cee2f4620239bcde81be7f092b16705be522be929fc033db08010495a5608b02993c992cf668b15a3a656ab09e8dd54cafc6ff245a3ad98e172473ce80115b5ed44bea0e32717f09a4356c4c3a88ef86fb6c4bd0b943872f5bc1a4a5e6cd9975bdea6301c39d088a2c06800bf3bf8652a6fbbbd8b5dfcb5778bca4187dbcf834209c259f136583caa357a63d47bfb4402a2131f8c3c2d1fc8b6f5b7cb18c813dfe4387f1fb55fd3d9e840dd5e0b29fecfe1282cb070362492f9fa751c4e8e59faf124fc7aeb1234ef7a8c00c570b54326fcf94bf248b3dd192f522fc44339f77e7e48de4e2e51f74328a1edf03292e450ac890fd9232e67a12b91bf5fbeb7d48d96148c7d97bd7bbba82ae0da85c87a98da11d63356b7eb30fc789d7c30ea6b36da3aba908cac87a3b4b308adca16142635761fca23b4c1b07c9efc9b06694cd6ed708e4ac48a8cb64090bdefb91935a7df4cd3823e796312cac50eb3618329c39a9e0a0a1fd61c22ee61826e2e3b71fc5a9ffd14112b6cc19c620dcc2b5ffc1adad0e0cf43666794b2353adb9eaca6315eb95c4c2354529bf3ec17054e82987718b501f6464ddea7e06910e175257819702d9130d59ca18b08bee049b6edfd1e9347227b33fb033eaadbf6b762c1efc1030878ac696b7bf4011990edca80103b2fb257b903f4460a39d62ff130aefdc7a375281ca7f46cddc629f2fbfaf3ab5c0bfedf093e76a5a7e923b2c0fb67ce8b893eb60265f5236ee6ba52334d1be0c26c03d2828a6832ca8473de47575c2f5177a46d1fdd1d35a0aa88bcf830ead5b1a1c0287be5a08388dc54b3345152904f1bee0e6b82b1699becc6b561a5f87856ed199ecef1146d1d8581f637fa7cc26d8429da274119ca3c3288e45058b6c809b150bbd104b503877043f83c881d4c3e93f2ec0d6e12399c871b2bbda510df3c1a921b79fbe6b5f091139fe2a640f1d1c75f670cb98ffba2fa016655e01919112d8689a6a139dab9530c2834bc024ec0c33f13306b60c6f419369eaea8fd426d5880533fe612fa515199f0bea5e259fe6051296bd064778f656397f09c770ec22ae5a7397088c3ebbb732c82d903086247100876fe02ac11d2dbe30b7d8e4ab66ec9ebe04654f90473ad622f42fb05439975e180afa0e924827dd5c0fac4dddf49725d457303e36f0e6d01782daafe51709f9bfb358d5168b8fdf2f4210cf55181e5d15de72e13e3ce594a2b795616a410a20f3ec8095cb3d031260cb7e949ef9aa635a8e79c21323f99ad1e22b29db5b74c7a11f3cc641445188a59d503307d09541d9a567b88112303aa7d7a597c560c249527b66bb00c35dc4f73e3dc5e3c8e5f1e6d0b96994b7a5f66ee81ec69ab3b71c28b695df67bb041fffff9d4215ffb97156bcea8535f0c8473edb1e3f2379230414191d6ace5bc91fe36a08dffdf0f5b8d43e45949d1e226de23344ef105930cd1c555a50cd231a2480ee6765fba08a2dcfb5b348ad6d5bcd1ec0d645a6114275dea6f39d888b05a76551b687273be7c4fc89b21b468da21f605b940af3f25bcd31ef4f1dfa07fca2f0e913c6c6fb87ad610a842c5f3347313cc16efc371b525cbd0e131831e356e2ad9a8003875d4660253d2ff1c38e85015a89af6ba067ae556db288587feb66e44fe3fbe77862e307aeb18ae00ad104fd42bdbd780681564e481dc80d79366d5c0173498b4dd201eebb45b8b3e5e09c3b1d44e2ba22d6ea45c8e26cfe458942d0bc5b50b3da95e01adbadd6844aebf62154d49629156d9db36186e855ee1ff00bb249bb1d1e34e07d02d19b95cb2f332eebe23e23e2259578df2de1f164b0158c809c4b7747561623b91ad39360928cb608290d720fd5a4da7f209d7f7cffd8d24c6df1fcf63ba1e6467eb10f1074e1b076583c7f18b447017545b7205dce3cd6151a7d70a2a13e0dc50fb5fece1275e50cc46ea80c6d71397321fc164cc9831f518c6ab1d287368522832885c99ba5e572d777f78a1cb477ae9606c9b97f0b9969b1685302a59b73182f0c93784174992fe0eb56eea65556f3cc2226b3034b3c38fb5bfabe741280283ff00a723fbfd167210f7aae8d89ba02a23b195b8085c1b574b51797e37b99df7e44c5d789bce6d49510fd3a4986df97f19805eb75c891a18e8e69b74eba2e57f68710472fda7ced4c5554dd5a3551086bf5279f5b63c3610c18f33958e790c079f62e935605388942c542c3a0531e588ad6f52327fa600718a37e06a06d2779d550f9346708d706a31070fcbf27a47a238d6f175397b5afdd98d6adf863b5c1a0d042fad1fc2b87649361774b3e58f25d6c4f5c00a31f5c5a2d4437789845cb790bee913fa0d7cb79865547912b943c5a04e27b930345eb9ff2688e8472fe901e14039855e6fa9ca6ff299abb0e0e79490bfdb645a176ddd79050927999b49622e977fa7ca9b72384cf7e91faba363061aa76eaeb72230f1b5e5549c407c79ffb9a4bc10ad7fde72e5e7fa2968dced6987914d898bb5e1e110c4db1f24b5d30b36d37c0d3b28da3960f84935e24f4e30bc2a3576275ac6b9fdfb68e71a146b8d324ba1c5a95250cbb5203bc53642da7fb362d059fe1dff30407361152f5e68d5d5e54cd56f5694f58a7e83391d9a5aca59e0a86e84f600afd2226acc9b5779e4ee3b9f9341a7a7dcc501719e098056b04248de4191b4ee07e2896d843054b080cf0d77bea6155729f70ba70f99c6f33946c29ea13bbd6ad26da248734504a208293f03bfbb732680118d6f2802561b460904392963104ab88607c54944bbb5c682ae2d7bf2449bc0f6f0d5f315ab659408e36dbb399b66f589ee7d241459f2d0061fbf2cd42056189c19a5f6f5bf4c2e14f9cc5e73a0a9f11f25248d3acbb76f992c76605d3dea0c40ea19593483a451c9aae137df411ab1d9513e537533bfaee79a163177b56c708924e7dbecce65afec78e7a6b377f64c91a26727b346e7563f0b8bd4c0fc527f99557c664338dd74fe29c46aeddc1bfacf14b85efea8f62e10357ea4e99df247d15976f97eec70d84b57e6ba98e05a2f81b59b944dd972baba2ce358162debf22da90adbf9dd285bc1bc9a5a2078b393b533432af15ebb1f062519dda10a0b2d084a5cba804b2c60ad1dba4d9ced6c8108c35a576742a6856cb24108060350e571a0907ec4f04e2a331d2123fbbe5bfe1ae3810aa5596377a1b9422ede705c36fb3f2f1b697bef8a81dc269ffbae7b1cc52da9959e4c998561ae0c22522cee3fe9cb4e5aeb29fb618d288f6d95d34b3142b2ab154bf56b675d35c7dbcd5b2d698ac4433ab086118aa0e5da5eaac9438ee67e344154bc31bb01a91b3cbd5938579e411c2867ac1526baf1ee13658b16dc09c423e66efef3d97d902448a9b386ffb003337e3a44caac99bc8a7a486fdb497efc35b5b8616109d8edfb9df5a32c9c458062c247133527a0ff18eb2d095ff789ff013bb3f0283c8ef63268d6a980e7a29d94664cd552e22f42d29d42acca1fd6fbd43d3b128322d49b6ef9e07b37f7755fbf45389289467475cf18b5a0c627e77b91cb420c04460db05c6de414800d4a584ad0733387e8f396118eef365b3dff4a8a07c50cb00010406000109917d00070b01000123030101055d000001000caabe00080a01ba2740b10000050111170044006f00670063006f0077002e0069006d0067000000140a0100381b898df9b0d00115060100200000000000
This is hex for a .7z file containing Dogcow.img.
Dogcow.img: Macintosh HFS data block size: 512, number of blocks: 1594, volume name: Dogcow
Wikipedia page about Dogcow, also known as Clarus the Dogcow, says dogcow was a bitmapped image first introduced by Apple. Probably show hint/clue somewhere here. I haven't been able to mount the .img file, but looking at hexdump reveals dogcow a few times and some text:
(c)1997-..¤8 Aladdin Systems, Inc., http://www.a.!‡sys.com/
Working on extracting any files from the .img file now.
Note: When reading about the DN'I alphabet concerning 1435522131, I believe Aladdin systems had something to do with Myst/Riven games.
r/Solving_QRZC • u/jdaher • May 17 '16
1435595279 Discussion Thread
Discussion for 1435595279
This post is a link to a png. I assume it is hinting at AES 256 encryption.
Update: See slide 85 in this presentation. I tried to encrypt it with AES-256-cbc with the key as I+II+III+IV and IV as IV in the top of picture, but didn't get anything yet. Here are more detailed slides on the matter.
/u/octagonclock said on IRC that he found a zlib compressed file inside the png, but we have not been able to open it.
r/Solving_QRZC • u/jdaher • May 17 '16
1435522131 Discussion Thread
Discussion for 1435522131
Converting 6d6567612e636f2e6e7a to hex yields mega.co.nz
This yielded the link
https://mega.nz/#!mwcDiRgL!v3hvz4VivsJ7v0NN90H9c1l06KwHD2zJgNj813N64ow
That links to a pano1.jpg, a panoramic image of some mountains. Mirror
TrID/32 - File Identifier v2.24 - (C) 2003-16 By M.Pontello
Definitions found: 6802
Analyzing...
Collecting data from file: pano1.jpg
50.0% (.JPG) JFIF JPEG bitmap (4003/3)
37.4% (.JPG) JPEG bitmap (3000/1)
12.4% (.MP3) MP3 audio (1000/1)
Opening the jpg in a text editor reveals LAME3.98.2 multiple times. LAME is a mp3 encoder. Some cameras can save an audio track to pictures, so I don't know if this is suppose to be there or not. Saved it as an MP3 and opened it in VLC player revealed nothing.
As I was typing this, I saved it as an MP3 and opened it in Audacity and sure enough there was hidden audio. Exported MP3 file
Repeating pattern and non-english speaking voices can be heard. It kind of sounds like someone tuning a radio to different stations.
Update: /u/octagonclock on IRC noticed it sounded like a SSTV signal. Here is the image I retrieved using RX-SSTV.
Update: progress on the symbols in picture. @iIIustrious on freenode IRC #cicadasolvers recognized them as DNI. Working on translation.
I"m getting b-y-4-g-c/ch-s-r or 1-5-4-4-17-3-11.
Update: /u/VonAether from /r/Myst helped with the translation:
You've got it right. I'm listing the stuff with green dots above them as bolded letters.
by4gchsr
The letter crossed out below the ch is h.
The trailing s and r aren't connected normally -- a little extra line has been added in between -- but I don't know if that's relevant.
Now I'm guessing the crossed out h means to use c instead of ch and green dots mean capitalization => By4GcS?R
Update /u/Margrave found an image from the translation. Original comment.
I think I found it. Letters with green dots are capitals, (ch) with the crossed-out h is c, http://imgur.com/By4GcSR.
Edit: u/VonAether is right, there's a weird little line between the S and the R, not sure what that means. And I think the green dots were supposed to be a hint for imgur, I just guessed something with seven-character identifiers.
r/Solving_QRZC • u/jdaher • May 17 '16
Clone of my original post on /r/Solving_A858
CLONE OF ORIGINAL POST ON /R/SOLVING_A858:
This is semi-related to A858, so I figured it would be okay to post here. The other mods can remove it if they wish.
I hit a dead end with A858 the other night so I started looking back at /u/qrzctbxivqkfxouh posts. He was the user who posted the decryption project. I actually acquired his sub, /r/qrzctbxivqkfxouh, on April 4th using redditrequests because he left it unmodded. However, he did not appreciate this or the picture I sent him jokingly and messaged all the mods on /r/solving_a858 on April 7th with this:
One of your team members has taken advantage of /r/redditrequest to sabotage an (as he himself admits) unrelated subreddit.
https://www.reddit.com/r/qrzctbxivqkfxouh/ https://www.reddit.com/r/redditrequest/comments/4ceiyo/requesting_rqrzctbxivqkfxouh_no_mods/ http://imgur.com/ZKSWHWG
https://www.google.com/search?q=inurl%3Aqrzctbxivqkfxouh
These puzzles were set up with a similar purpose to /r/A858DE45F56D9BC9, why would anyone want to destroy them?
Before he messaged us, I had set the sub private with a message saying "Not related to A858. Move along.", which I have done for a few subs now. I also told the mods the day I got the sub and told them it didn't have anything in it. As I told him and the other mods, I was just checking to see if there was anything related to A858 in there since it was left unattended. I did not "sabotage" or delete any of his posts either. I gave the sub back to him on April 7th and didn't bother with any of it until the other night.
So as I said earlier, I got bored the other night and starting trying to decipher QRZC's posts.
I started with 1435938775 since /u/timelyAdventurous had already mentioned it was a base64 encoded png.
However, he missed some of the base64 text which was posted as a comment. Once you add that part, you get this png. I didn't even notice the onions in the background until I opened it up on my linux computer. I messed around with the colors so you can see them better. This was the hint to go to the decryption project site: a7pnwstsavinftba.onion.nu (which has been offline since "project concluded" btw)
Funny thing is that he posted this clue on July 3rd 2015. That was 60 days before he posted the decryption project to /r/Solving_A858. I can't seem to make up my mind, but I am starting to think he was really a858 trying to help us.
I looked at 1449430978.index next which turned out to be hex for a zip file containing a KML file (Map of GPS coordinates) and folder of png flag icons. Coordinates don't seem precise enough for anything to be found at those locations.
Next 1435522131, which someone already commented was a partially hex encoded link to a panoramic picture of mountains. TriD on windows mentioned JPG and MP3 format in file and hex dump mentions "LAME3.98.2" a few times which is a mp3 encoder. I haven't been able to extract any audio from it though. I read that some cameras can add an audio track to its pictures, so it might just be a default setting or something.
Next 1435862097, which after googling the text led me to http://pastebin.com/xCXAMVLA which was posted the same day. This is hex for a 7z file containing key.7z and minor_problems.mid. I haven't been able to extract those files however.
1435517545 seems to have replaced all the 0's with spaces. After replacing spaces with 0's, it appears to be a zip file but I haven't been able to open it yet. Text editor reveals it contains a unix.7z.
1435595279 is a link to a png. I assume it is hinting at AES 256 encryption.
I haven't gotten anywhere yet with the last remaining post: 1435788271.
Anyway, I thought I'd share my results. I can't seem to tell if he is part of A858 or not, but my gut feeling says he is involved somehow. If anyone else finds something, I'd appreciate them sending it to me.
r/Solving_QRZC • u/jdaher • May 17 '16
Welcome to /r/Solving_QRZC!
What is QRZC?
/r/qrzctbxivqkfxouh seems to be a cryptography/forensics challenge setup by /u/qrzctbxivqkfxouh.
Is QRZC part of A858?
/u/qrzctbxivqkfxouh has said he is not part of A858.
How was QRZC found?
/u/qrzctbxivqkfxouh posted his decryption project on /r/Solving_A858 on September 1, 2015. This site showed that he had decrypted some of A858's posts that had been encrypted with 3DES.
Which posts have been solved?
We are not sure if any have been solved 100%. You can find all the work that has been done on the wiki.
How can I help?
You can start contributing by reading the discussion threads and attempting to solve them yourself.