Tags: forensics 

Rating:

Here is my writeup.

I think it is better to solve by script.
However, since this type of analysis is not used frequently, I got a flag by manual analysis.

[https://imurasheen.hatenablog.com/entry/2019/03/06/002640](https://imurasheen.hatenablog.com/entry/2019/03/06/002640)