#lock box

The link led to the following login page. The Username and Password were unknown at this point of time.

On May 10th, 2021, at 4:37 AM GMT, Dewey appeared online to the Server, and provided access to Debug Mode, which contained the following options to select from:

1. OPEN ADMIN PANEL. 

2. REVIEW SYSTEM ERRORS. 

3. REVIEW CURRENT STATUS. 

4. QUIT.

Option 2 led to the following new error log:

ARCHSYS V.1.1.0 INTERNAL ERROR LOGGING 

DATE: 2021-05-04 22:14:23 

- SEVERITY: CRITICAL 

MESSAGE: 

* UNABLE TO CONNECT TO PRIMARY ARCHSYS SYSTEM. 

* MAINTENENCE MODE ENABLED 

- ADMINISTRATIVE OVERRIDE REQUIRED 

EXCEPTION DETAILS: 

+ <Event xmlns="https://ghostbin.co/paste/9by6hsdh"> 

<System> 

<EventID Qualifiers="0">05242000</EventID>  

<Version>0</Version>  

<Level>3</Level>  

<Task>0</Task>  

<Opcode>0</Opcode>  

<Keywords>01110010 01100110 01110101 01100111</Keywords>  <TimeCreated SystemTime="" />  

<EventRecordID>41260</EventRecordID>  

<Correlation ActivityID="{3c3ac4103cc4ddda6dd60853f735ea4d}" />

<Execution ProcessID="04" ThreadID="0416" />  

<Channel>System</Channel>  

<Computer>DESKTOP-⏚⏃⍀⍜⋏⟒⌇⌇</Computer>  

<Security UserID="0c5e09b1cc7fda88ad5b6fd65a5b26b3" />  

</System> 

<EventData>  

<Data Name="param1">01110011 01110101 01100010 01110100 01100101</Data>  

<Data Name="param2">01100101</Data>  

<Data Name="param3">Activation</Data> 

<Data Name="param6">DESKTOP-⏚⏃⍀⍜⋏⟒⌇⌇</Data>  

<Data Name="param7">⏚⏃⍀⍜⋏⟒⌇⌇</Data>  

<Data Name="param9">PAXHost (Using LRPC)</Data>  

<Data Name="param10">Unavailable</Data>  

<Data Name="param11">Unavailable</Data>  

</EventData>  

</Event>

The decoded binary: “rfug” (from <Keywords>), “subte” (from <Data Name="param1">), when rearranged, formed the word “subterfuge”. This was the password to the ghostbin link found within the same error log.

The solved ghostbin led to an audio file, titled “05242000_pax_08.wav” [[CW: Static/white noise, glitched audio]]. When this file was subjected to steganographic decryption, the word “blanketf0rt” was obtained. 

Option 3 led to the following status update:

Dewey: “OPTION 3: SELECTED

PRIMARY SYSTEM OFFLINE. SERVER DOWNTIME: 4 days 23 hours 48 min 03 sec”

A discussion with Dewey was taking place concurrently while solving this puzzle. Upon returning to Option 1 with the newly obtained information, and asking for a hint to the password (PASSWORD HINT: "My comfort place."), and admin username (THE ADMIN USERNAME IS SET TO DEFAULT.), the login information was successfully identified as:

Username: guest

Password: blanketf0rt

The accessed Admin system led to the following pages:

Home page:

Admin page:

Status page:

and the Lockbox page

Following this reveal, the Server sent an ask to Baroness to inform her that Dewey’s Admin Panel could be accessed. After this, Baroness proceeded to arrive to the server and had a conversation about how they were able to access Dewey, as well as discuss the contents of the audio file and their implications.