(@kingnudz) Al166-pa1.rar [Genuine]

: To extract hidden flags, recover deleted files, or reconstruct a timeline of a security breach. Forensic Analysis Steps Environment Setup :
If it is a disk image, mount it using FTK Imager or analyze it with Autopsy . :
: The .rar file (AL166-PA1) usually contains a forensic image (such as an .ad1 , .E01 , or raw memory dump) provided by an instructor or through a CTF platform like CyberDefenders or HTB .
: Checking SYSTEM and SOFTWARE hives for persistence mechanisms (e.g., Run keys).
<!DOCTYPE html>
<html>
<head>
  <title>             Sonny Ogawa: Templated DOM</title>
</head>
<body>
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1581542668-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY78EgPVkvutOZn0ulWEkwAGzrYYXw:1765706238486';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d4072297307572074781','//www.sonnyogawa.com/2014/03/download-lagu-nasida-ria.html','4072297307572074781');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '4072297307572074781', 'title': '             Sonny Ogawa', 'url': 'https://www.sonnyogawa.com/2014/03/download-lagu-nasida-ria.html', 'canonicalUrl': 'https://www.sonnyogawa.com/2014/03/download-lagu-nasida-ria.html', 'homepageUrl': 'https://www.sonnyogawa.com/', 'searchUrl': 'https://www.sonnyogawa.com/search', 'canonicalHomepageUrl': 'https://www.sonnyogawa.com/', 'blogspotFaviconUrl': 'https://www.sonnyogawa.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'G-1CJ5MWJM44', 'analytics4': true, 'encoding': 'UTF-8', 'locale': 'en-GB', 'localeUnderscoreDelimited': 'en_gb', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22             Sonny Ogawa - Atom\x22 href\x3d\x22https://www.sonnyogawa.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22             Sonny Ogawa - RSS\x22 href\x3d\x22https://www.sonnyogawa.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22             Sonny Ogawa - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/4072297307572074781/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22             Sonny Ogawa - Atom\x22 href\x3d\x22https://www.sonnyogawa.com/feeds/5477674527024774401/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-5634574089290649', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/ce4a0ba1ae8a0475', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'Share to X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en_GB\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': true, 'jumpLinkMessage': 'Baca Selengkapnya \xbb', 'pageType': 'item', 'postId': '5477674527024774401', 'pageName': 'Download Lagu Nasida Ria', 'pageTitle': '             Sonny Ogawa: Download Lagu Nasida Ria', 'metaDescription': 'Download mp3 lagu nasida ria'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard', 'ok': 'Ok', 'postLink': 'Post link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Download Lagu Nasida Ria', 'description': 'Download mp3 lagu nasida ria', 'url': 'https://www.sonnyogawa.com/2014/03/download-lagu-nasida-ria.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 5477674527024774401}}, {'name': 'widgets', 'data': [{'title': '             Sonny Ogawa (Header)', 'type': 'Header', 'sectionId': 'header-title', 'id': 'Header1'}, {'title': 'Search', 'type': 'BlogSearch', 'sectionId': 'header-search', 'id': 'BlogSearch1'}, {'title': 'Header Icon', 'type': 'TextList', 'sectionId': 'header-icon', 'id': 'TextList000'}, {'title': 'Social Media', 'type': 'LinkList', 'sectionId': 'nav-widget-1', 'id': 'LinkList002'}, {'title': 'Navigation Menu', 'type': 'HTML', 'sectionId': 'nav-widget-2', 'id': 'HTML000'}, {'title': 'Navigation Menu (Simple)', 'type': 'PageList', 'sectionId': 'nav-widget-2', 'id': 'PageList000'}, {'title': 'Scroll Menu', 'type': 'LinkList', 'sectionId': 'notif-widget', 'id': 'LinkList001'}, {'title': 'Under Header Ad', 'type': 'HTML', 'sectionId': 'horizontal-ad', 'id': 'HTML91'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'main-widget', 'id': 'Blog1', 'posts': [{'id': '5477674527024774401', 'title': 'Download Lagu Nasida Ria', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'author', 'label': 'Published by'}, {'name': 'timestamp', 'label': 'On'}, {'name': 'share', 'label': ''}]}], 'allBylineItems': [{'name': 'author', 'label': 'Published by'}, {'name': 'timestamp', 'label': 'On'}, {'name': 'share', 'label': ''}]}, {'title': 'Categorised Posts', 'type': 'LinkList', 'sectionId': 'main-widget', 'id': 'LinkList5'}, {'title': 'Recurring Post Ad', 'type': 'HTML', 'sectionId': 'main-widget', 'id': 'HTML04'}, {'title': 'Ad Placement', 'type': 'HTML', 'sectionId': 'add-widget', 'id': 'HTML94'}, {'title': 'You May Like These Posts', 'type': 'PopularPosts', 'sectionId': 'side-widget', 'id': 'PopularPosts1', 'posts': [{'title': 'Cersil Silat Online Karya Kho Ping Hoo', 'id': 5068695706819677801}, {'title': 'Cerita Silat Pendekar Kapak Maut Naga Geni 212 Wiro Sableng', 'id': 825889905885168924}, {'title': 'Cerita Silat Indonesia Online', 'id': 2032826708253935288}, {'title': 'Cerita Silat Online Pendekar Rajawali Sakti', 'id': 4297025188890650567}]}, {'title': 'Sticky Ad', 'type': 'HTML', 'sectionId': 'side-sticky', 'id': 'HTML95'}, {'title': 'Mobile Menu', 'type': 'TextList', 'sectionId': 'mobile-menu', 'id': 'TextList99'}, {'title': 'Credit', 'type': 'HTML', 'sectionId': 'credit-widget', 'id': 'HTML88'}, {'title': 'Back to top', 'type': 'TextList', 'sectionId': 'credit-widget', 'id': 'TextList88'}, {'title': 'Anchor Ad - Mobile only', 'type': 'HTML', 'sectionId': 'anchor-ad', 'id': 'HTML99'}, {'title': 'Take me back', 'type': 'HTML', 'sectionId': 'error-404', 'id': 'HTML404'}]}]);
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header-title', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogSearchView', new _WidgetInfo('BlogSearch1', 'header-search', document.getElementById('BlogSearch1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TextListView', new _WidgetInfo('TextList000', 'header-icon', document.getElementById('TextList000'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList002', 'nav-widget-1', document.getElementById('LinkList002'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML000', 'nav-widget-2', document.getElementById('HTML000'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList000', 'nav-widget-2', document.getElementById('PageList000'), {'title': 'Navigation Menu (Simple)', 'links': [{'isCurrentPage': false, 'href': 'https://www.sonnyogawa.com/p/privacy.html', 'id': '7184006095719594802', 'title': 'Privacy Policy'}, {'isCurrentPage': false, 'href': 'https://www.sonnyogawa.com/p/disclaimer.html', 'id': '4085195573070870075', 'title': 'Disclaimer'}, {'isCurrentPage': false, 'href': 'https://www.sonnyogawa.com/p/blog-page_6.html', 'id': '84556765426501469', 'title': 'Sitemap'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList001', 'notif-widget', document.getElementById('LinkList001'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML91', 'horizontal-ad', document.getElementById('HTML91'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main-widget', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2383197431-lbx__en_gb.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/828616780-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList5', 'main-widget', document.getElementById('LinkList5'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML04', 'main-widget', document.getElementById('HTML04'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML94', 'add-widget', document.getElementById('HTML94'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'side-widget', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML95', 'side-sticky', document.getElementById('HTML95'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TextListView', new _WidgetInfo('TextList99', 'mobile-menu', document.getElementById('TextList99'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML88', 'credit-widget', document.getElementById('HTML88'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TextListView', new _WidgetInfo('TextList88', 'credit-widget', document.getElementById('TextList88'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML99', 'anchor-ad', document.getElementById('HTML99'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML404', 'error-404', document.getElementById('HTML404'), {}, 'displayModeFull'));
</script>
</body>
</html>