Link to write-up: https://volatilevirus.home.blog/2019/03/11/utctf19-rip-forensics-write-up/

tl;dr : John-The-Ripper

Original writeup (https://volatilevirus.home.blog/2019/03/11/utctf19-rip-forensics-write-up/).