f01a374e9c81e3db89b3a42940c4d6a5447684986a1296e42bf13f196eed6295

Login
Reports

Overview

overview

Static

static

IROK_Setup...ne.exe

windows10-ltsc_2021-x64

browser/re...1.tlog

windows10-ltsc_2021-x64

browser/re...1.tlog

windows10-ltsc_2021-x64

browser/re...1.tlog

windows10-ltsc_2021-x64

browser/re...1.tlog

windows10-ltsc_2021-x64

browser/re...al.log

windows10-ltsc_2021-x64

browser/re...il.xml

windows10-ltsc_2021-x64

browser/re...oj.xml

windows10-ltsc_2021-x64

browser/re...ack.js

windows10-ltsc_2021-x64

browser/re...dex.js

windows10-ltsc_2021-x64

browser/re...e.json

windows10-ltsc_2021-x64

browser/re...l.node

windows10-ltsc_2021-x64

browser/re...l.node

windows10-ltsc_2021-x64

browser/re...il.dll

windows10-ltsc_2021-x64

browser/re...il.dll

windows10-ltsc_2021-x64

browser/re...util.c

windows10-ltsc_2021-x64

browser/re...ICENSE

windows10-ltsc_2021-x64

browser/re...ack.js

windows10-ltsc_2021-x64

browser/re...dex.js

windows10-ltsc_2021-x64

browser/re...e.json

windows10-ltsc_2021-x64

browser/re...i.node

windows10-ltsc_2021-x64

browser/re...i.node

windows10-ltsc_2021-x64

browser/re...pi.dll

windows10-ltsc_2021-x64

browser/re...pi.dll

windows10-ltsc_2021-x64

browser/re...tion.c

windows10-ltsc_2021-x64

browser/re...te.exe

windows10-ltsc_2021-x64

browser/sn...ob.bin

windows10-ltsc_2021-x64

browser/v8...ot.bin

windows10-ltsc_2021-x64

browser/vk...er.dll

windows10-ltsc_2021-x64

browser/vk...d.json

windows10-ltsc_2021-x64

browser/vulkan-1.dll

windows10-ltsc_2021-x64

uninstall.exe.nsis

windows10-ltsc_2021-x64

Analysis

max time kernel
898s
max time network
438s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
07/09/2026, 03:48

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

IROK_Setup_v2.6.0.1_online.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

18 signatures

900 seconds

Behavioral task

behavioral2

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/Release/obj/bufferutil/bufferutil.tlog/link.command.1.tlog

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral3

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/Release/obj/bufferutil/bufferutil.tlog/link.read.1.tlog

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral4

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/Release/obj/bufferutil/bufferutil.tlog/link.secondary.1.tlog

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral5

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/Release/obj/bufferutil/bufferutil.tlog/link.write.1.tlog

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral6

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/Release/obj/bufferutil/vcpkg.applocal.log

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

ransomware

Behavioral task

behavioral7

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/bufferutil.xml

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/build/bufferutil.vcxproj.xml

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/fallback.js

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral10

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/index.js

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral11

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/package.json

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral12

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/prebuilds/darwin-x64+arm64/bufferutil.node

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral13

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/prebuilds/linux-x64/bufferutil.node

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral14

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/prebuilds/win32-ia32/bufferutil.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral15

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/prebuilds/win32-x64/bufferutil.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

browser/resources/app.asar.unpacked/node_modules/bufferutil/src/bufferutil.c

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral17

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/LICENSE

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral18

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/fallback.js

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral19

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/index.js

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral20

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/package.json

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral21

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/prebuilds/darwin-x64+arm64/node.napi.node

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral22

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/prebuilds/linux-x64/node.napi.node

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral23

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/prebuilds/win32-ia32/node.napi.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral24

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/prebuilds/win32-x64/node.napi.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

browser/resources/app.asar.unpacked/node_modules/utf-8-validate/src/validation.c

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral26

Sample

browser/resources/elevate.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral27

Sample

browser/snapshot_blob.bin

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral28

Sample

browser/v8_context_snapshot.bin

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral29

Sample

browser/vk_swiftshader.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

browser/vk_swiftshader_icd.json

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Behavioral task

behavioral31

Sample

browser/vulkan-1.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

uninstall.exe.nsis

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

900 seconds

execution

Report Analysis Logs

General

Target
browser/resources/app.asar.unpacked/node_modules/bufferutil/build/Release/obj/bufferutil/vcpkg.applocal.log
Size 5B
Sample260907-ec7qsaee87
SHA256 f01a374e9c81e3db89b3a42940c4d6a5447684986a1296e42bf13f196eed6295
MD5 3bab25a3e651a9e4a00473d2257b99f9
SHA1 1419458f2696be8daeade77ddad380cd0c871fdb
SHA512 ae8dc1129b7a81ba70c9512a94a3e9ccd8c159f1817e309198c2babaf5bcb3f7e97f43b54ea4937cbea468bb5a62328fc0c01982aa1b883d8fd6d2e2c58090ff
MD5 SHA1 SHA512

Score

1^/10

ransomware

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
4732	NOTEPAD.EXE

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\browser\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\vcpkg.applocal.log
1⤵
- Opens file in notepad (likely ransom note)
PID:4732

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads