Technical Information
- '<Current directory>\war3.exe'
- '<Current directory>\dota2.exe'
- '<Current directory>\dota3.exe'
- NtQuerySystemInformation, handler: dota3.sys
- NtQueryDirectoryFile, handler: dota3.sys
- <Current directory>\war3.exe
- %TEMP%\aut3.tmp
- <Current directory>\dota3.exe
- <Current directory>\dota2.exe
- <Current directory>\war3.exe
- %TEMP%\aut4.tmp
- %WINDIR%\dota.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dota[1].ini
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- C:\dota3.sys
- <Current directory>\dota2.exe
- <Current directory>\war3.exe
- C:\dota3.sys
- <Current directory>\dota3.exe
- <Current directory>\dota3.exe
- %TEMP%\aut4.tmp
- <Current directory>\war3.exe
- <Current directory>\dota2.exe
- %TEMP%\aut3.tmp
- %TEMP%\aut1.tmp
- %WINDIR%\dota.ini
- C:\dota3.sys
- %TEMP%\aut2.tmp
- 'do##.#edangame.net':80
- do##.#edangame.net/dtpatch/dota.ini
- DNS ASK do##.#edangame.net