Technical Information
- evbbbca.tmp
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- %HOMEPATH%\cheathappens\work\runtime\cheathappens.net
- %HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer1378.tmp
- %TEMP%\evba187.tmp
- %TEMP%\evbb261.tmp
- %TEMP%\evbb271.tmp
- %TEMP%\evbb292.tmp
- %TEMP%\evbbbca.tmp
- %TEMP%\evbbc58.tmp
- %TEMP%\evbc12b.tmp
- %TEMP%\evbc15b.tmp
- %TEMP%\evbc18b.tmp
- %TEMP%\evbc1bb.tmp
- %TEMP%\evbc1db.tmp
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- %TEMP%\evbb261.tmp
- %TEMP%\evbb271.tmp
- %TEMP%\evbb292.tmp
- %TEMP%\evbbbca.tmp
- %TEMP%\evbc12b.tmp
- %TEMP%\evbc15b.tmp
- %TEMP%\evbc18b.tmp
- %TEMP%\evbc1bb.tmp
- %TEMP%\evbc1db.tmp
- http://www.ch####appens.com/inetcheck.txt
- http://www.ch####appens.com/unauthorized/127212164.zip
- http://www.ch####appens.com/trainer_versions/65261_E.txt
- DNS ASK ch####appens.com
- '%HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer1378.tmp' "16744820695884"
- '%TEMP%\evbbbca.tmp'
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (with hidden window)
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;