Cuckoo Sandbox

50a46b3120da8285_broomsetup.exe "C:\Users\Administrator\AppData\Local\Temp\50a46b3120da8285_broomsetup.exe"
608
- cmd.exe cmd /c ""C:\Users\Administrator\AppData\Roaming\Temp\Task.bat" "
  1992
  - chcp.com chcp 1251
    900
  - schtasks.exe schtasks /create /tn "MalayamaraUpdate" /tr "'C:\Users\Administrator\AppData\Local\Temp\Updater.exe'" /sc minute /mo 30 /F
    2440

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default file network process services registry synchronisation iexplore office pdf

Cuckoo

We're processing your submission... This could take a few seconds.