Forum Discussion
Solved
Powershell Deobsfuscation Ep.7
I was working on this and got stuck with Ep.7. Appreciate if anyone can assist with this Powershell de-obfuscation. Step 1: I removed the splits accordingly and converted from hexadecimal Step ...
Anonymous got it done. Could not deob it using CyberChef, used PowerShell commands to run the part that I can't deob earlier and saved the output in another txt file. I removed the IEX part from the script before execution. That worked for me!
your sequnce of tabs and spaces will have certain cycles, that are matching the pipeline at the very bottom of the latter screenshot.
so first find the delimiter for groups (making a character code), then find a delimiter for digits of the character code and finally understand how each digit is calculated.
It is solvable with Cyberchef.
