File: Kill.the.plumber.zip ... -

binwalk , strings , Autopsy or FTK Imager , Wireshark (if PCAPs are included), and ExifTool . 2. Initial Analysis

The first step is verifying the file type and checking for "easy" wins. File: Kill.The.Plumber.zip ...

Use ExifTool on image assets (like mario_death.png or bowser.jpg ) to check for metadata comments or GPS coordinates that might be a hex-encoded flag. binwalk , strings , Autopsy or FTK Imager