Technical Information
- evb6c9c.tmp
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- %HOMEPATH%\cheathappens\work\runtime\cheathappens.net
- %HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer6941.tmp
- %TEMP%\evb5d55.tmp
- %TEMP%\evb68df.tmp
- %TEMP%\evb68f0.tmp
- %TEMP%\evb6901.tmp
- %TEMP%\evb6c9c.tmp
- %TEMP%\evb6ceb.tmp
- %TEMP%\evb7009.tmp
- %TEMP%\evb7019.tmp
- %TEMP%\evb7049.tmp
- %TEMP%\evb705a.tmp
- %TEMP%\evb707a.tmp
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- %TEMP%\evb68df.tmp
- %TEMP%\evb68f0.tmp
- %TEMP%\evb6901.tmp
- %TEMP%\evb6c9c.tmp
- http://www.ch####appens.com/inetcheck.txt
- http://www.ch####appens.com/unauthorized/129881634.zip
- http://www.ch####appens.com/trainer_versions/65261_E.txt
- DNS ASK ch####appens.com
- '%HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer6941.tmp' "16744820695884"
- '%TEMP%\evb6c9c.tmp'
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (with hidden window)
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;