Technical Information
- [<HKCU>\SOFTWARE\MIcrosoft\Windows\CurrentVersion\Run] 'System_manager_host03' = '%PROGRAMDATA%\System_manager.exe'
- %PROGRAMDATA%\system_manager.exe
- 'th#######ver2.000webhostapp.com':443
- DNS ASK th#######ver2.000webhostapp.com
- '%PROGRAMDATA%\system_manager.exe'