Please, do not write just a link to original writeup here.

Original writeup (https://0x90r00t.com/2018/04/08/inshack-2018-forensics-400-taking-a-look-inside-write-up/).