WTFBins

  • spaceman.exe


    Contributed By: Michael Weber "mthrfcknruckus" (@mjweber915)

    The file is associated with EaseUS Partition Manager or Hard Drive Tools 2003 by TradeTouch.com. Aside from the odd name of the binary, other WTF behaviors include installing to system32 and creating scheduled tasks. These stand out when triaging in PowerShell using Get-ScheduledTask | Select -Property Author