Tags: vbs macro forensics reversing vbscript docm decompile 

Rating:

Original writeup (https://blog.raw.pm/en/HackTheBox-CyberSantaCTF-2021-write-up/#Giveaway-Forensics).