Technical Information
- %WINDIR%\tasks\newszania.job
- <SYSTEM32>\tasks\newszania
- %PROGRAMDATA%\{912aac6a-0e22-eb17-912a-aac6a0e2b1a8}\<File name>.exe
- %PROGRAMDATA%\{912aac6a-0e22-eb17-912a-aac6a0e2b1a8}\<File name>.dat
- DNS ASK ce####-ring.info
- DNS ASK ro####ripzipbar.com
- DNS ASK fi####usapro.info