{
  "Name": "FreeNX",
  "Category": "RAT",
  "Description": "FreeNX is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [
      "Windows"
    ],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "C:\\*\\nxplayer.exe",
      "*\\nxplayer.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/freenx_processes_sigma.yml",
      "Description": "Detects potential processes activity of FreeNX RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "NoMachine S.à r.l",
        "certificate_thumbprint": "08E7F3C348651CFEAB2C2F123FCE83AD1E5CA3CD",
        "certificate_der_base64": "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",
        "src_file_sha256": "a4adfcbab8aa773f1d91116beef5c15605cd855ff9680281ae9d4dcafe7443ee",
        "src_file_path": "downloaded_files/freenx/a4adfcbab8aa773f1d91116beef5c15605cd855ff9680281ae9d4dcafe7443ee",
        "src_file_company": "NoMachine"
      },
      {
        "signer_name": "NoMachine S.a.r.l.",
        "certificate_thumbprint": "B10BE4C8C9132A19607B268D5176EFCB43A0654E",
        "certificate_der_base64": "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",
        "src_file_sha256": "338194b2e5e40d0830e6ec55845fd96ca3346d6c1eeafb7b7c5596568b87eff1",
        "src_file_path": "downloaded_files/freenx/338194b2e5e40d0830e6ec55845fd96ca3346d6c1eeafb7b7c5596568b87eff1",
        "src_file_company": "NoMachine"
      }
    ]
  }
}