AssemblyLine – Decompressing CaRT Files, Download Submission

What is CaRT

AssemblyLine – Decompressing CaRT Files: AssemblyLine uses CaRT compression for submitted files by default. CaRT is Compressed and RC4 Transport. It is like a zip-compressed file that helps you move malware around without antivirus alerting and preventing unintentional malware execution.

Affiliate: Experience limitless no-code automation, streamline your workflows, and effortlessly transfer data between apps with Make.com.

Downloading File Submission before Assemblyline decompressing CaRT files

To download the submission:

. Left Panel => [Submissions] => Select a submission
    . Go to the bottom "Files" section, where all the files are present.
    . Click the file/object you want to obtain
    . On the top right corner, click the [Download File] button.
    * A file with the "*.cart" extension will download to your computer.

You need to download your submission before you can Assemblyline decompressing cart files.
Begin by finding the ‘Submissions’ section on the application’s or website interface’s left side. It’s a section where you can find all the submissions made.
Within the ‘Submissions’ section, there will be several submissions. Each submission is a separate entry, likely listed by title or date. Click on the one that you’re interested in to view its details.
After you’ve selected a submission, you’ll need to locate the ‘Files’ section. The ‘Files’ section is usually towards the bottom of the submission’s details. Here you will find all the files associated with that specific submission.
The ‘Files’ section will likely have multiple files or objects listed. Each of these files or objects is a component of the submission. Identify the one you want to download, and click on it.
Once you’ve clicked on the file or object, look toward the top right corner of your screen. Here, you should see a button labeled ‘Download File.’ This button is the command to download the selected file to your device. Click this button, and the download process will begin.

AssemblyLine – Decompressing CaRT Files

1. Download Python 3 and Install it.
2. Install the CaRT module with the pip command:

pip install cart

3. Extract the file:

cart SHA256FileHash.cart

Now to actual Assemblyline decompressing CaRT files.
You need to download Python 3 from the official Python website to do this. Once the file is on your computer, run the installer and follow the instructions to install it on your computer.
Add the CaRT module to your Python setup using pip, a package manager for Python. Open your command line interface and type in the following command: pip install cart. This command will tell “pip” to download and install the CaRT module.
Finally, you will use the CaRT module to extract a file. In your command line interface, type cart followed by the SHA256 hash of the file you want to extract, plus the file extension “.cart.” This command will tell CaRT to find the file with that hash and extract it.

AssemblyLine Submission Compression Settings

The CaRT compression settings are per user – you can not change them globally from the GUI. By default, Assemblyline enables CaRT compression (not recommended to disable). To disable compression:
1. Top Right corner, click on your user’s icon.
2. Follow these steps:

"User Menu" => [Settings]
   "Interface Options"
       File encoding: No encoding

Locate your user icon, which should be in the top right corner of the screen. Please give it a click, which should open a dropdown menu. Look for the “User Menu” option in this dropdown and select it.
Within the User Menu, you’ll find various settings and options. Look for the one labeled ‘Settings’ and click on it.
Within the ‘Settings,’ find an ‘Interface Options’ category. This section allows you to adjust how you interact with the platform.
In ‘Interface Options,’ you’ll find an option for ‘File encoding.’ Set this to ‘No encoding.’ The setting means the system will not apply any specific encoding scheme to your files.