flag is： easyctf{r3v3r5ed_4ensics}

Original writeup (https://tw-sas.com/2017/03/26/2017_easyctf_forensics_scisnerof_writes-up/).