Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://github.com/t...

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    300s
  • max time network
    296s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    13/11/2026, 02:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://github.com/tangerineturtle1/NX2navi/releases?utm_source=chatgpt.com
  • Sample261113-dev94aez9w
Score
8/10
defense_evasiondiscovery

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 36 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 22 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 58 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 44 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/tangerineturtle1/NX2navi/releases?utm_source=chatgpt.com
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4544
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9821bc728,0x7ff9821bc734,0x7ff9821bc740
      2⤵
        PID:3100
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,12335250903590252033,2226292062541073024,262144 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1960 /prefetch:2
        2⤵
          PID:3996
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1452,i,1092997327093460458,7580989688742583712,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2100 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:1200
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2192,i,16337776008423490028,17959569686869285999,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2632 /prefetch:13
          2⤵
            PID:772
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3104,i,5052129149708492433,6986106991413871441,2097152 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3180 /prefetch:1
            2⤵
              PID:3780
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3108,i,14872566759057162242,11971006201266009999,2097152 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3200 /prefetch:1
              2⤵
                PID:560
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4192,i,7577754239162328661,9393400606164005514,2097152 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4204 /prefetch:9
                2⤵
                  PID:4396
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,12520413801473391454,11593259243965328929,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5860 /prefetch:14
                  2⤵
                    PID:4008
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6136,i,11742842124685411661,10132640012601867889,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6128 /prefetch:14
                    2⤵
                      PID:4568
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6140,i,11113081117993935194,15434577975307086552,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4884 /prefetch:14
                      2⤵
                        PID:3920
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6132,i,4576172458024027085,12038121082345501419,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5044 /prefetch:14
                        2⤵
                          PID:4864
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4204,i,2402379644010023823,9334012888701791665,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4200 /prefetch:14
                          2⤵
                          • Subvert Trust Controls: Mark-of-the-Web Bypass
                          • NTFS ADS
                          PID:248
                        • C:\Users\Admin\Downloads\NX2navi-Setup-0.9.2.exe
                          "C:\Users\Admin\Downloads\NX2navi-Setup-0.9.2.exe"
                          2⤵
                          • Executes dropped EXE
                          • Suspicious use of WriteProcessMemory
                          PID:1584
                          • C:\Users\Admin\AppData\Local\Programs\NX2navi\NX2navi.exe
                            "C:\Users\Admin\AppData\Local\Programs\NX2navi\NX2navi.exe" --from "C:\Users\Admin\Downloads"
                            3⤵
                            • Executes dropped EXE
                            • Suspicious use of WriteProcessMemory
                            PID:3952
                            • C:\Users\Admin\AppData\Local\Programs\NX2navi\python\pythonw.exe
                              "C:\Users\Admin\AppData\Local\Programs\NX2navi\python\pythonw.exe" "C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\start.pyw" --from "C:\Users\Admin\Downloads"
                              4⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Enumerates connected drives
                              • Modifies registry class
                              • Suspicious behavior: GetForegroundWindowSpam
                              • Suspicious use of SetWindowsHookEx
                              PID:2492
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6132,i,9745226578740099820,12620688661866030004,262144 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1068 /prefetch:10
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:5020
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4588,i,6898021318501125806,2759235421758926844,524288 --field-trial-handle=1964,i,2757186892047333619,6202800323778123260,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5912 /prefetch:14
                          2⤵
                            PID:544
                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                          1⤵
                            PID:4388
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:4016

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  0cd955b0-826a-4b26-923f-cbbbfeb9fcdc.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0cd955b0-826a-4b26-923f-cbbbfeb9fcdc.tmp
                                  • Size 132KB
                                  • SHA256 37a0652c429a6a13cda6ba1a7e357098bee427849e8dac9de49da8d9d6467e44
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  45e357f9-5eee-484c-9adf-1730b139121b.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\45e357f9-5eee-484c-9adf-1730b139121b.tmp
                                  • Size 131KB
                                  • SHA256 022d044f7e74203078aa9e244d67cfb506623d72f4adf215adc9d354c57bfba4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  9dc2770c-bacd-4acb-9c1b-f4ca850bb0c0.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\9dc2770c-bacd-4acb-9c1b-f4ca850bb0c0.tmp
                                  • Size 131KB
                                  • SHA256 084ed231755f283f5aa3db214969113fd1eb5294515b7aeb05fc3b57354d8db6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  05e01996-31cc-4783-8f85-bf74a8fc46f7.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\05e01996-31cc-4783-8f85-bf74a8fc46f7.tmp
                                  • Size 17KB
                                  • SHA256 00b1f5e3f2ee15e41635cc5776beecab26489b83cc8da1b01e578cec0f125545
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  18c52c7f-4cc9-4a91-801f-df7133820037.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\18c52c7f-4cc9-4a91-801f-df7133820037.tmp
                                  • Size 414B
                                  • SHA256 c4fc0b57d4b5099613b529cbeb19ba29258d42f70b7042b8a4dc6535d65bb849
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  1b9cf790-521b-45d7-a168-d9eeb6f51b7a.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1b9cf790-521b-45d7-a168-d9eeb6f51b7a.tmp
                                  • Size 12KB
                                  • SHA256 7059e631f9cea1982a772b1816f7c0e44007c1e7b03151691950409c16ce20f2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  57be587f-12c1-41d7-aabd-e3466e40c927.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\57be587f-12c1-41d7-aabd-e3466e40c927.tmp
                                  • Size 6B
                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  8a4cae10-3128-48c3-a4ce-9d696e8ffb34.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8a4cae10-3128-48c3-a4ce-9d696e8ffb34.tmp
                                  • Size 13KB
                                  • SHA256 691bc7142f1fdea1fadc5606333c4bf956e554a9a3ed913a99c262fc8da15e68
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  temp-index
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                  • Size 4KB
                                  • SHA256 280762e0805e225d3ee4672f1bb8932c90bd935a4ef936602b8ff30ec98021eb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  CURRENT
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_github.com_0.indexeddb.leveldb\CURRENT
                                  • Size 16B
                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  73dffaa4-569a-4937-b12b-27b6e041ac53.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\73dffaa4-569a-4937-b12b-27b6e041ac53.tmp
                                  • Size 3KB
                                  • SHA256 80c72d7fc47bc6a03f33974fb094ef835aec6170190803d501a6afc9c4327ff1
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  cfd0391c-196e-4060-b9ae-45c0c9029284.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\cfd0391c-196e-4060-b9ae-45c0c9029284.tmp
                                  • Size 2B
                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  temp-index
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                  • Size 120B
                                  • SHA256 738d5ce97ba2e7f0024f2ea41a6b2dc2bd74fab82ee808f3a91b1080218412f8
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  the-real-index
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                  • Size 96B
                                  • SHA256 5ae53eefc1306d0dfe7260e508acf75e0357ce5f81b5d7d17999a8252bf9e3cd
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  ed07ce06-9dac-4644-b6fc-6dcd4309fa48.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ed07ce06-9dac-4644-b6fc-6dcd4309fa48.tmp
                                  • Size 12KB
                                  • SHA256 7d9ac8c23d9563af251a76f1b2fe453d6a594da3e6af5c0bff228a9597fb525f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  c9daceb1-3c16-4ddf-9985-fe43cc0de4c0.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\c9daceb1-3c16-4ddf-9985-fe43cc0de4c0.tmp
                                  • Size 131KB
                                  • SHA256 6de61a993625b9358b23e4c9a4ba89c8bab997f2aabfd87f75eb6944d6fac7b3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  eda1958e-f1f6-45ce-b684-236c9195320c.tmp
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\eda1958e-f1f6-45ce-b684-236c9195320c.tmp
                                  • Size 130KB
                                  • SHA256 b3a405983cc60dde2d242e872d92a4f1b9d51f7ef7f8d52be6abeff43c5bc46d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  NX2navi.exe
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\NX2navi.exe
                                  • Size 150KB
                                  • SHA256 1e0e1b38b7b2849943e1aae45a64055cbaf66b8c38da1c9d5c8e249272ffdded
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  __init__.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\__init__.py
                                  • Size 460B
                                  • SHA256 5534de0c8437955d71655e0db0d947281e0bf22043021695d9d88147f7c57ada
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  build.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\build.py
                                  • Size 8KB
                                  • SHA256 47a8eb7a3521c174190228e7639dc5ba4efc54f504403f9cb4ea7200da1e5405
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  feed.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\feed.py
                                  • Size 7KB
                                  • SHA256 109f7e8b85cac8376d4e3849ff18f29264f125bc6aa24561c3a27846daa2be8c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  net.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\net.py
                                  • Size 13KB
                                  • SHA256 b93d09e6d3b65c6de94acabbb436d5665c5aed79d5c00a1e40a5ed6577c2d79d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  start.pyw
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\start.pyw
                                  • Size 4KB
                                  • SHA256 7c40e5ec389a1569b735aa2499d5d074f62ac20b619ace1580c304d3f5917e14
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  __init__.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\ui\__init__.py
                                  • Size 102B
                                  • SHA256 1c48e5f5248044cbf1371ce5d218ba65bae5e37ec0c17a54e1fb28e29c32a346
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  app.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\0.9.2\launcher\ui\app.py
                                  • Size 135KB
                                  • SHA256 08e7e3f8b5c70060bec31b9cc84ea972489a7d5cc2e3e583299c855deb6edee3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  current.txt
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\app\current.txt
                                  • Size 7B
                                  • SHA256 cf866ab658962c697a3d216b24a04bad52ebe21c32204b800c1f888db2dbb3f3
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  launcher.json.tmp
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\data\launcher.json.tmp
                                  • Size 518B
                                  • SHA256 18c031a3a4d47214ee8ca0ef91271a3a7c38dda955cf5d4d735fbf85dcfbe10c
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  launcher.json.tmp
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\data\launcher.json.tmp
                                  • Size 517B
                                  • SHA256 b94e67b7fdabe404537eded8df00a3ae9c3696b8e88e6280cfec95cf76e766d2
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  _imagingtk.pyi
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\Lib\site-packages\PIL\_imagingtk.pyi
                                  • Size 66B
                                  • SHA256 cc3f2f0283c2f1a1085637dc90bb45b24456e6c6a255e977fac254036a476867
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  INSTALLER
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\Lib\site-packages\pillow-12.3.0.dist-info\INSTALLER
                                  • Size 2B
                                  • SHA256 e6184ce10e266134fdcfa401e8f1a95005bcd4f18d16b62b757323e2833fe9a9
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  VCRUNTIME140.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\VCRUNTIME140.dll
                                  • Size 174KB
                                  • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  _bz2.pyd
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\_bz2.pyd
                                  • Size 85KB
                                  • SHA256 2db8c279a6976dd74faae4f8b1a3749727976f3928a350f7a45e9b7deca5e2b0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  _hashlib.pyd
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\_hashlib.pyd
                                  • Size 67KB
                                  • SHA256 fe4ef731c177294301c723c66488fd80dc8254c8bd0e896559086f67272a027b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  _lzma.pyd
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\_lzma.pyd
                                  • Size 157KB
                                  • SHA256 7e64fbe55b5fd705f20fd1936ed23356956496d9a5882846850c32800e61d554
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  _ssl.pyd
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\_ssl.pyd
                                  • Size 187KB
                                  • SHA256 2aedf0a5ee5a80706ed1ea33c894f1b9ce46dafd3457b28126db15a00d083a85
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  _tkinter.pyd
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\_tkinter.pyd
                                  • Size 69KB
                                  • SHA256 8501a467a73a7c32bc336a8ece18fdca390cc3781cb4b5603732c9756e321e2e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  _zstd.pyd
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\_zstd.pyd
                                  • Size 491KB
                                  • SHA256 473c52fdabf4e0741d91e1a3b1cd2b4b983bd62823832fd0386cec91b6914976
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  libcrypto-3.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\libcrypto-3.dll
                                  • Size 5.7MB
                                  • SHA256 75495fe0e079ab00d49be740d3c710a0b94e3f74f9648cb7cc9f768fc7f52319
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  libtommath.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\libtommath.dll
                                  • Size 79KB
                                  • SHA256 2d760fefb452665b6af8c8d9d29f3a8378f10fc0847cdd9938ea0cb5edf1d573
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  python3.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\python3.dll
                                  • Size 72KB
                                  • SHA256 f1af2c16d941d55fea8cc2e7afceb9948649d5ce58ca6e49392b947b6015caa8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  python314._pth
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\python314._pth
                                  • Size 48B
                                  • SHA256 e8addf917e8e2f0c85972d17cdf13857acfcdc381994184bdbfa435160ff498f
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  python314.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\python314.dll
                                  • Size 6.5MB
                                  • SHA256 6a0abe3e09cf7896c54b5b065c9a268f6545d3ca93437f7e55b9f8258bf0bc18
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  python314.zip
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\python314.zip
                                  • Size 4.0MB
                                  • SHA256 6120caba7f9ae34503557fab91f351c6fbd92595fd63ebca3627e7ea60cf30c2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  pythonw.exe
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\pythonw.exe
                                  • Size 102KB
                                  • SHA256 050dbc2a1ba41fd16b994b3e1261105e19f0bef26c2392a0c98991a2ba6361e2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  tcl90.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tcl90.dll
                                  • Size 3.2MB
                                  • SHA256 a1fb45f963b05cb083a97df1449c2023b484eb921d40a463da7501b0f60e0f70
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  tcl9tk90.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tcl9tk90.dll
                                  • Size 2.0MB
                                  • SHA256 31f625c52e65d29d126e710ed8bab2ec964cb770e4fc59bc329dfff02cb6ddcf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  __init__.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\__init__.py
                                  • Size 192KB
                                  • SHA256 bf7c8cbc8d665e2993019bb6945da6b894b694061f22ee8a0fbc32cd6980034f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  commondialog.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\commondialog.py
                                  • Size 1KB
                                  • SHA256 1e08be20450c36ed19f299a09fe273ce769d8a3e2e1406b5ef54a032756bc3fc
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  constants.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\constants.py
                                  • Size 1KB
                                  • SHA256 0ffd883463f20255fbd458d8abd15a6842190f2f5cc182416cb9a15ffb1e1052
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  dialog.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\dialog.py
                                  • Size 1KB
                                  • SHA256 ffc15c82611f483a2a240115803e3732a894e9902057d1a9639101f510c0c00d
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  filedialog.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\filedialog.py
                                  • Size 15KB
                                  • SHA256 296c216a2bb76d3415605c1d523daee4937d240e01f2dc201b0f0732017c8c6e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  font.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\font.py
                                  • Size 7KB
                                  • SHA256 a62c5556704bf249d3749238fff44f841722da7a918a4609ca9e8a35cf4c2713
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  messagebox.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\messagebox.py
                                  • Size 4KB
                                  • SHA256 2bc1200ebbff41c321249def874538f9f4b5972a278b6e32ec8c53475affceae
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  simpledialog.py
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\tkinter\simpledialog.py
                                  • Size 12KB
                                  • SHA256 fbe74ec002269b6bd2dd8fcf74bcb1ea5e696a0fefcebee8931b31c3ce724a4e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  zlib1.dll
                                  • Path C:\Users\Admin\AppData\Local\Programs\NX2navi\python\zlib1.dll
                                  • Size 100KB
                                  • SHA256 f07195206534ebb1fe75093d4ec6c54a7a9227281b0c09d2113465b71da9e900
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  187e40d2-7b7a-4513-8ecc-d533bf233dc3.tmp
                                  • Path C:\Users\Admin\Downloads\187e40d2-7b7a-4513-8ecc-d533bf233dc3.tmp
                                  • Size 15KB
                                  • SHA256 98f98f93fefc97b3d752e52a61543af36609cc8d5a050abe557941190b64dc51
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  NX2navi-Setup-0.9.2.exe:Zone.Identifier
                                  • Path C:\Users\Admin\Downloads\NX2navi-Setup-0.9.2.exe:Zone.Identifier
                                  • Size 1KB
                                  • SHA256 389ebffa0bdf3267f2ef0a95844b65a4c869d48f815537d40f9c3b875ecbcc46
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  NX2navi-Setup-0.9.2.exe:Zone.Identifier
                                  • Path C:\Users\Admin\Downloads\NX2navi-Setup-0.9.2.exe:Zone.Identifier
                                  • Size 1KB
                                  • SHA256 389ebffa0bdf3267f2ef0a95844b65a4c869d48f815537d40f9c3b875ecbcc46
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  memory/1584-2806-0x00007FF65BBE0000-0x00007FF65BC4D000-memory.dmp
                                  Download

                                  memory/2492-3268-0x00007FF966DF0000-0x00007FF96819D000-memory.dmp
                                  Download

                                  memory/3952-3267-0x00007FF65F590000-0x00007FF65F5CC000-memory.dmp
                                  Download