Technical Information
- <Current directory>\v33r.exe
- %LOCALAPPDATA%\microsoft\penworkspace\discovercachedata.dat
- <Full path to file>
- from <Full path to file> to <Current directory>\v33r.exe
- 'ke##uth.win':443
- 'ke##uth.win':443
- DNS ASK ke##uth.win
- '<SYSTEM32>\cmd.exe' /c cls