Technical Information
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- %HOMEPATH%\cheathappens\work\runtime\cheathappens.net
- %HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer3950.tmp
- %TEMP%\evb9146.tmp
- %TEMP%\evb9a6f.tmp
- %TEMP%\evb9a80.tmp
- %TEMP%\evb9aa0.tmp
- %TEMP%\evba06d.tmp
- %TEMP%\evba08d.tmp
- %TEMP%\evba0bd.tmp
- %TEMP%\evba0de.tmp
- %TEMP%\evba0fe.tmp
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- http://www.ch####appens.com/inetcheck.txt
- http://www.ch####appens.com/unauthorized/127845159.zip
- http://www.ch####appens.com/trainer_versions/55813_E.txt
- DNS ASK ch####appens.com
- '%HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer3950.tmp' "16744820695884"
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (with hidden window)
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;