Technical Information
- %WINDIR%\tasks\naturalbalance.job
- <SYSTEM32>\tasks\naturalbalance
- %PROGRAMDATA%\{8f3c568e-f735-a1aa-8f3c-c568ef735a3b}\<File name>.exe
- %PROGRAMDATA%\{8f3c568e-f735-a1aa-8f3c-c568ef735a3b}\<File name>.dat
- DNS ASK fu###set.work
- DNS ASK al####el-pro.com
- DNS ASK fu###et.info
- DNS ASK ri###ynorth.biz