Detection (nmfd6)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Detection (nmfd6).exe
Size 4.5MB
Sample260528-dn4b3aev9p
SHA256 31641b0cced770400cf3b654cd2455f712af1f82baca120e707256d6310262cf
MD5 1ea3af7d30e09bfb80b3c61108ed4ce0
SHA1 b86b52268eb9e76cdbdefe7ca064d5137da8e247
SHA512 9eeeffeb6d21a1cba7449d9e3d9447eca8ee1447566e86f03c40334572399197bd7c40cbb5e1baeb386f028f04db881ffe87b19a6c1af38c18e20c1441f4c947
SSDEEP 49152:frpBRus/xxIC9xTjhhSHyp1/VD/W0XeggU2ZNmiiZjO3V91oif:rEDGg0OQ2ZNmB81
TLSH
T1CD264B89A1ED00D7D5A2D03B8D1AF91BE6B17C41F225969B0DA0764B1F3B7530E2A31F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Detection (nmfd6).exe

.exe 4.5MB

Detection (nmfd6).exe

IMPHASH 31a3cd361476fdde8768598f5d5923e2
SHA256 31641b0cced770400cf3b654cd2455f712af1f82baca120e707256d6310262cf
MD5 1ea3af7d30e09bfb80b3c61108ed4ce0
SHA1 b86b52268eb9e76cdbdefe7ca064d5137da8e247
SHA512 9eeeffeb6d21a1cba7449d9e3d9447eca8ee1447566e86f03c40334572399197bd7c40cbb5e1baeb386f028f04db881ffe87b19a6c1af38c18e20c1441f4c947
SSDEEP 49152:frpBRus/xxIC9xTjhhSHyp1/VD/W0XeggU2ZNmiiZjO3V91oif:rEDGg0OQ2ZNmB81
TLSH
T1CD264B89A1ED00D7D5A2D03B8D1AF91BE6B17C41F225969B0DA0764B1F3B7530E2A31F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

1e:0e:39:1c:0c:c1:c9:ee:f1:fb:f6:88:46:66:73:ec:ac:6b:5c:80:ee:bd:fa:4a:f4:06:f0:cb:73:ea:17:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Husdawg\, LLC,OU=SRL Code Signing,O=Husdawg\, LLC,L=Diamond Springs,ST=California,C=US

Chains

Apr 10, 2026

CN=Husdawg\, LLC,OU=SRL Code Signing,O=Husdawg\, LLC,L=Diamond Springs,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Husdawg\, LLC,OU=SRL Code Signing,O=Husdawg\, LLC,L=Diamond Springs,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Husdawg\, LLC,OU=SRL Code Signing,O=Husdawg\, LLC,L=Diamond Springs,ST=California,C=US

Serial Number

0b:8b:ad:e4:c5:7b:da:8a:5f:78:78:90:f3:ec:ba:80

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 20, 2026 - Feb 19, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

2157156

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP EnumSystemLocalesW IsValidLocale LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc ExitProcess GetStartupInfoW GetFileType SetStdHandle VirtualQuery VirtualAlloc HeapQueryInformation FreeLibraryAndExitThread ExitThread CreateThread GetCommandLineW GetCommandLineA GetLocalTime GetTimeZoneInformation RtlPcToFileHeader RtlUnwindEx LCMapStringEx GetCPInfo CompareStringEx GetStringTypeW RaiseException OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent TerminateProcess WriteConsoleW SetUnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetTempFileNameW GetWindowsDirectoryW SearchPathW GetProfileIntW Sleep GetTempPathW GetTickCount64 UnhandledExceptionFilter SetErrorMode VirtualProtect GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers GetFileSize GetFileAttributesW VerifyVersionInfoW VerSetConditionMask GetThreadLocale GlobalGetAtomNameW DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection CompareStringW GlobalFindAtomW EncodePointer SystemTimeToTzSpecificLocalTime LocalAlloc GlobalAddAtomW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW SetThreadPriority CreateEventW SetEvent CompareStringA QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW lstrcmpW lstrcmpA GlobalDeleteAtom LoadLibraryExW GetModuleHandleExW GetCurrentThreadId GetCurrentThread OutputDebugStringA CopyFileW MulDiv GlobalFree GlobalLock GlobalUnlock GlobalSize GlobalAlloc FileTimeToSystemTime lstrcmpiW WaitForSingleObject GetCurrentProcessId ReadFile FindClose FindNextFileW FindFirstFileW GetModuleFileNameW GetLogicalProcessorInformationEx lstrlenW ExpandEnvironmentStringsW GlobalMemoryStatus GetCurrentProcess GetUserDefaultLCID GetVersionExW GetModuleHandleW GetSystemDirectoryW lstrcpyW GetDiskFreeSpaceExW GetDriveTypeW GetLogicalDriveStringsW SizeofResource DeviceIoControl CreateFileW GetProcAddress QueryPerformanceCounter QueryPerformanceFrequency GetSystemInfo GetTickCount LoadLibraryW FreeLibrary InitializeCriticalSectionAndSpinCount FindResourceExW GetProcessHeap DeleteCriticalSection HeapDestroy DecodePointer HeapAlloc HeapReAlloc HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree SuspendThread ResumeThread LocalFree FormatMessageW SetLastError WideCharToMultiByte GetUserPreferredUILanguages IsDebuggerPresent GetLastError CreateMutexW MultiByteToWideChar SetThreadUILanguage CloseHandle FindResourceW LoadResource LockResource GetStdHandle RtlUnwind

user32

EndDialog CreateDialogIndirectParamW ClientToScreen ReleaseDC GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo UnhookWindowsHookEx GetTopWindow GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW PtInRect EqualRect CopyRect ScreenToClient AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow GetNextDlgTabItem TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID GetDlgItem EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement DestroyWindow IsChild IsMenu IsWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime LockWindowUpdate LoadMenuW GetClassNameW UpdateWindow GetDesktopWindow GetLastActivePopup IsZoomed EnableScrollBar GetDoubleClickTime GetIconInfo CopyIcon GetMenuItemInfoW EnableWindow LoadIconW GetWindowLongW MessageBoxW IsWindowEnabled SetCursor ShowOwnedPopups CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState GetActiveWindow PeekMessageW DispatchMessageW TranslateMessage GetMessageW SendDlgItemMessageA SetRectEmpty IntersectRect LoadCursorW CopyImage SystemParametersInfoW DeleteMenu RealChildWindowFromPoint CharNextW SetCapture ReleaseCapture CopyAcceleratorTableW InvalidateRgn GetNextDlgGroupItem MessageBeep SetMenuItemInfoW GetMenuCheckMarkDimensions SetLayeredWindowAttributes OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DestroyIcon LoadImageW SetParent MonitorFromPoint PostMessageW GetClientRect FillRect IsIconic SendMessageW GetSystemMetrics DrawIcon KillTimer SetTimer InvalidateRect SetWindowPos LoadBitmapW GetWindowRect SetRect UnregisterClassW GetDC GetMonitorInfoW EnumDisplayMonitors EnumDisplayDevicesW wsprintfW GetWindowThreadProcessId GetWindow EnumWindows GetMenuStringW GetMenuState GetSubMenu GetMenuItemID GetMenuItemCount InsertMenuW AppendMenuW RemoveMenu PostQuitMessage SetWindowContextHelpId GetParent MapDialogRect RegisterWindowMessageW DrawEdge DrawFrameControl IsWindowVisible CharUpperBuffW GetFocus DrawStateW SetWindowRgn RedrawWindow MapWindowPoints GetSysColor GetSysColorBrush DrawFocusRect InflateRect OffsetRect IsRectEmpty DrawIconEx GetMenuDefaultItem SetMenuDefaultItem ModifyMenuW DestroyAcceleratorTable CheckMenuItem EnableMenuItem SetMenuItemBitmaps TrackMouseEvent CharUpperW GetAsyncKeyState GetSystemMenu NotifyWinEvent WindowFromPoint SetCursorPos UnionRect BringWindowToTop DestroyMenu CreatePopupMenu SetClassLongPtrW GetUpdateRect UpdateLayeredWindow RegisterClipboardFormatW ToUnicodeEx GetKeyboardLayout GetKeyboardState MapVirtualKeyW LoadAcceleratorsW CreateAcceleratorTableW GetKeyNameTextW SubtractRect GetWindowRgn DestroyCursor CreateMenu InvertRect HideCaret GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW WaitMessage PostThreadMessageW IsClipboardFormatAvailable FrameRect ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW GetMessagePos

gdi32

CreateRectRgnIndirect Ellipse GetBkColor GetTextColor GetTextExtentPoint32W PatBlt ExtTextOutW CreatePolygonRgn Polygon Polyline GetTextMetricsW CreateBitmap DeleteObject GetStockObject SetBkColor SetTextColor CreatePatternBrush Escape ExcludeClipRect GetClipBox GetPixel GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign MoveToEx CreateRectRgn SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateFontIndirectW GetMapMode SetRectRgn DPtoLP GetRgnBox CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo RealizePalette SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateRoundRectRgn OffsetRgn RoundRect CreatePalette GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExW LPtoDP ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx GetWindowOrgEx SetPixelV GetTextFaceW CreateHatchBrush CreateEllipticRgn CombineRgn CreateDCW CopyMetaFileW SetPixelFormat ChoosePixelFormat GetDeviceCaps DeleteDC Rectangle CreatePen BitBlt GetObjectW CreateCompatibleDC SelectObject TextOutW GetObjectType CreateSolidBrush

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegDeleteKeyW RegSetValueExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegOpenKeyExW RegCreateKeyExW RegEnumKeyExW RegQueryValueExW RegCloseKey

shell32

SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation SHBrowseForFolderW SHGetDesktopFolder SHAppBarMessage SHGetFileInfoW ShellExecuteW DragFinish DragQueryFileW SHGetSpecialFolderPathW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW PathFindFileNameW StrCatW PathIsUNCW PathStripToRootW PathRemoveFileSpecW StrFormatKBSizeW

uxtheme

GetCurrentThemeName IsAppThemed DrawThemeText DrawThemeParentBackground GetWindowTheme GetThemePartSize IsThemeBackgroundPartiallyTransparent GetThemeSysColor DrawThemeBackground CloseThemeData OpenThemeData GetThemeColor

ole32

IsAccelerator StgOpenStorageOnILockBytes CoRevokeClassObject CoRegisterMessageFilter OleTranslateAccelerator OleLockRunning RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop OleIsCurrentClipboard OleDestroyMenuDescriptor OleFlushClipboard OleUninitialize OleInitialize CoFreeUnusedLibraries CreateStreamOnHGlobal CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromProgID CLSIDFromString CoCreateGuid ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoInitializeEx CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitialize OleCreateMenuDescriptor

oleaut32

LoadTypeLi SysAllocStringLen VariantCopy SysAllocString VariantChangeType VariantClear VariantInit SysFreeString SafeArrayDestroy VariantTimeToSystemTime VarBstrFromDate OleCreateFontIndirect SysStringLen SystemTimeToVariantTime

oledlg

OleUIBusyW

gdiplus

GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipCloneImage GdipCreateBitmapFromStream GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipDrawImageRectI GdipSetInterpolationMode GdipGetImagePalette GdipGetImagePaletteSize GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0

rpcrt4

UuidToStringW RpcStringFreeW UuidFromStringW UuidCreate

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

setupapi

SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW

iphlpapi

IcmpSendEcho IcmpCreateFile

pdh

PdhEnumObjectItemsW PdhAddCounterW PdhOpenQueryW PdhCollectQueryData PdhCloseQuery PdhGetFormattedCounterValue

d3d11

D3D11CreateDevice

wininet

HttpOpenRequestW HttpSendRequestW InternetSetStatusCallbackW InternetGetLastResponseInfoW InternetWriteFile InternetSetFilePointer InternetReadFile InternetConnectW InternetCloseHandle InternetOpenW HttpQueryInfoW HttpAddRequestHeadersW InternetQueryDataAvailable

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmGetContext ImmReleaseContext ImmGetOpenStatus

winmm

PlaySoundW

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

682KB

Virtual Size

681KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

37KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Detection (nmfd6).exe

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

rpcrt4

version

setupapi

iphlpapi

pdh

d3d11

wininet

oleacc

imm32

winmm

generic