Rating:

Original writeup (https://blog.hamayanhamayan.com/entry/2022/09/25/232936#DFIR-doxme).