Technical Information
- %WINDIR%\temp\cab23e4.tmp
- %WINDIR%\temp\tar23e5.tmp
- %WINDIR%\temp\cab7688.tmp
- %WINDIR%\temp\tar7689.tmp
- %WINDIR%\temp\cab7774.tmp
- %WINDIR%\temp\tar7785.tmp
- %WINDIR%\temp\cab8f2a.tmp
- %WINDIR%\temp\tar8f2b.tmp
- %WINDIR%\temp\cabbce0.tmp
- %WINDIR%\temp\tarbce1.tmp
- %APPDATA%\.falcun\launcher\falcunlauncher.exe
- %WINDIR%\temp\cab23e4.tmp
- %WINDIR%\temp\tar23e5.tmp
- %WINDIR%\temp\cab7688.tmp
- %WINDIR%\temp\tar7689.tmp
- %WINDIR%\temp\cab7774.tmp
- %WINDIR%\temp\tar7785.tmp
- %WINDIR%\temp\cab8f2a.tmp
- %WINDIR%\temp\tar8f2b.tmp
- %WINDIR%\temp\cabbce0.tmp
- %WINDIR%\temp\tarbce1.tmp
- 'localhost':49173
- 'localhost':49175
- 'fa##un.net':443
- 'microsoft.com':80
- 'localhost':49183
- 'localhost':49185
- 'public-trust.com':80
- 'localhost':49173
- 'localhost':49175
- 'localhost':49176
- 'fa##un.net':443
- 'localhost':49183
- 'localhost':49185
- 'localhost':49186
- DNS ASK fa##un.net
- DNS ASK microsoft.com
- DNS ASK public-trust.com
- '%APPDATA%\.falcun\launcher\falcunlauncher.exe' -remove <Current directory>\/<File name>.exe