Please, do not write just a link to original writeup here.

Original writeup (https://diego95root.github.io/IceCTF-forensics/#forensics1).