Skip to content

Instantly share code, notes, and snippets.

@thatreguy
Last active July 24, 2025 11:01
Show Gist options
  • Select an option

  • Save thatreguy/957c5f26b2ef1c722a2f5515a745bdef to your computer and use it in GitHub Desktop.

Select an option

Save thatreguy/957c5f26b2ef1c722a2f5515a745bdef to your computer and use it in GitHub Desktop.
while ($true) {
$streams = Get-Item -Path "C:\Users\SOC-Master\Downloads\July_Tabletop\locker.exe" -Stream * |
Where-Object { $_.Stream -ne ":$DATA" -and $_.Length -gt 0 }
foreach ($s in $streams) {
# Extract stream name without colon
$streamName = $s.Stream.TrimStart(":")
try {
$bytes = Get-Content -Path "C:\Users\SOC-Master\Downloads\July_Tabletop\locker.exe" -Stream $streamName -Encoding Byte -ErrorAction Stop
"[+] Stream: $streamName - Length: $($s.Length)"
$hex = ($bytes | ForEach-Object { $_.ToString("X2") }) -join " "
$hex
} catch {
"[!] Failed to read stream: $streamName - $_"
}
}
Start-Sleep -Milliseconds 50
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment