Please, do not write just a link to original writeup here.

Original writeup (https://www.asafety.fr/events/ctf-ndh-2018-quals-write-up-forensic-where-is-my-purse/).