Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\deven.lnk
- %APPDATA%\deven.exe
- '13#.#9.92.176':5505
- '<SYSTEM32>\cmd.exe' /C copy /b <Full path to file> %APPDATA%\deven.exe' (with hidden window)
- '<SYSTEM32>\cmd.exe' /C copy /b <Full path to file> %APPDATA%\deven.exe