Cuckoo Sandbox

8c7c39736cf9d51e1763ec21d68b0ff45b229fb265239fcd3b467087ecb2aa80.exe "C:\Users\Administrator\AppData\Local\Temp\8c7c39736cf9d51e1763ec21d68b0ff45b229fb265239fcd3b467087ecb2aa80.exe"
520
- BroomSetup.exe C:\Users\ADMINI~1\AppData\Local\Temp\BroomSetup.exe
  2944
  - cmd.exe cmd /c ""C:\Users\Administrator\AppData\Roaming\Temp\Task.bat" "
    1920
    - chcp.com chcp 1251
      1980
    - schtasks.exe schtasks /create /tn "MalayamaraUpdate" /tr "'C:\Users\ADMINI~1\AppData\Local\Temp\Updater.exe'" /sc minute /mo 30 /F
      2376

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default file network process services registry synchronisation iexplore office pdf

Cuckoo

We're processing your submission... This could take a few seconds.