{
  "Name": "Any Support",
  "Category": "RMM",
  "Description": "Any Support is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://anysupport.net/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [
      "Windows"
    ],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "ManualLauncher.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "*.anysupport.net"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/any_support_network_sigma.yml",
      "Description": "Detects potential network activity of Any Support RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/any_support_processes_sigma.yml",
      "Description": "Detects potential processes activity of Any Support RMM tool"
    }
  ],
  "References": [
    "https://www.anysupport.net/introduce_howto.php"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "LinkMeMine Inc.",
        "certificate_thumbprint": "BF947F2204865E89C83799764ACA1282E12D25A4",
        "certificate_der_base64": "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",
        "src_file_sha256": "948e074ca4b5957a3cac40db6b88b6735dd635b841f510ccb50d507783170833",
        "src_file_path": "downloaded_files/any_support/948e074ca4b5957a3cac40db6b88b6735dd635b841f510ccb50d507783170833",
        "src_file_company": "Koino Co., Ltd."
      },
      {
        "signer_name": "KOINO Co., Ltd.",
        "certificate_thumbprint": "5192D3B41D87514CDF5EFD5649A4307A024E25BD",
        "certificate_der_base64": "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",
        "src_file_sha256": "6cc5985ad284992d6f59ff3336e5ce9065a01988322b015ae128d0899a75c14b",
        "src_file_path": "downloaded_files/any_support/6cc5985ad284992d6f59ff3336e5ce9065a01988322b015ae128d0899a75c14b",
        "src_file_company": "Koino Co., Ltd."
      },
      {
        "signer_name": "KOINO Co., Ltd.",
        "certificate_thumbprint": "4E447B576E1A3150D660BD3BCFED61E7F403FEAF",
        "certificate_der_base64": "MIIHwzCCBaugAwIBAgIQDmwxArtS2jqSr0t0DXH3MTANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMB4XDTIzMDQwNjAwMDAwMFoXDTI2MDQwNTIzNTk1OVowgcsxEzARBgsrBgEEAYI3PAIBAxMCS1IxFjAUBgsrBgEEAYI3PAIBAhMFU2VvdWwxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRcwFQYDVQQFEw4xNjAxMTEtMDA5ODQ5NTELMAkGA1UEBhMCS1IxDjAMBgNVBAgTBVNlb3VsMRMwEQYDVQQHEwpHYW5nc2VvLWd1MRgwFgYDVQQKEw9LT0lOTyBDby4sIEx0ZC4xGDAWBgNVBAMTD0tPSU5PIENvLiwgTHRkLjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQa2U/fTqCN7VO5j+zhg/NC45RTzB7AVv56PyXf5oTI/AuJDkCTB4hekCNKkHIw+keyCTyEuV2ibrAC9hAm/XYEC9qWcN8i8ANndalqFeNqG1I3ZkZoqmNXpdN74lwBHT+nzCuI9CuIXdRAax87wLJ/fj5mB2jLm863D/4K8jkleEt6ZDudmd+QQb/8gyu+kbktdcYm0z0vju7H7xBbWhrAklaB5nZN8oRaz3jssoH8y+OsUHkjdFul1VdUPWUrQEpIzrmj3fTFdJmeCOC4XkoEGE+7JZyGkcKTXo5tbbHfEFj9Rki7gM1TcKI8LOFjNsg72GaQRUCqYCDjCvryQmJQZsojSDKH1zkdahE42Rceuq1/NRC6M0lIeD2MpeUVhku6nqj432HL00w00VWHJxt2PvAT0WOdpkqgoRooqJYdAloK5aSQe3BG3JWumI8M5whrp2QE6UfFPTbgmDby1qeYfqjW9XympUVW6t3MjLx8wiONUqptEUI3vKJdceZVYteinS0SPQJaSZtj3OfXNrM52wS21eAu9yLfhHLBZ9TBD9BUGOovBAaaD41X60sucnSj4w2NdrTZupziNOMC8HO6ZZsS6FBQNtFoai6Zb66+bCDAZTyW70vY9ysyUb/m1G9ZN9FlhfDCiZUwVh1oo9zO52FgSi5dL2byVPELidb/AgMBAAGjggICMIIB/jAfBgNVHSMEGDAWgBRoN+Drtjv4XxGG+/5hewiIZfROQjAdBgNVHQ4EFgQUSXVFJr0ZAh/l/lj04WtBlEhkTccwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMDMIG1BgNVHR8Ega0wgaowU6BRoE+GTWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMFOgUaBPhk1odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDA9BgNVHSAENjA0MDIGBWeBDAEDMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBlAYIKwYBBQUHAQEEgYcwgYQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBcBggrBgEFBQcwAoZQaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcnQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAgEAMT2C3l9YvWqz48glFm6WmM5KAPDwIJwOtuMdPjs26dru1LoOlWLS6ki6/xG8hYt0fy33Y9lUF07lji+3SyrXj5BJ7bl18ChjY3sef1vUVMRnE81LEGYF/7IXYNkS7KEbZ6rGUwnpt1dgwKKpSKc/P4nuswejwAR08qWLn6rBvDlRj8MNuN54N6ykT1+5Jwb1ZtNVBbHBQYPNSivAfGftZzwmr0l1wQtYuHxfvRmpkV/nPlPvYYvTzjy1n3MEqBfMVu1vc7Q4zTy6yZSRNZPX1h6zm7VCfkMVimi6tsU+sbp2VdDpn3zuahPA2VYkQxP7lJeIOKk2M+Mvo6X3qQ0wrjKV/AfVbz41l2nc8Stq+IIybS1nOvO6M14ASmeqAXJwLz2bEPoMysLyiqNlsDhSRgJVXi3zIxslQpAs6726n+itJF8/KE90f4EQMbmNlYCy8vCpMFDqInrR0HtzB3VS8faOrIfFQq9sEIsYy18gAjphcVjEfZCmUokS82cW3LtSitgzycRyVmWchQo+nQtlUHKYksDcbibf789qLSQzilDLBR6UX2RWHTik7GxNcBQmb72C3dmexmf4scFRwj0wQkHZK47OYTJX0mkXqAzUFNFlYFWHEk17KEP8E4kcPDP7aW6KtDJBaMKefZWcWqBzqBXW+0hsD5Vhq8YeGvcqxxQ=",
        "src_file_sha256": "7ffc8c8f47f3dd18d1d3e51d078093aed7915093c6dadafcd1ada2d1c43a21ad",
        "src_file_path": "downloaded_files/any_support/7ffc8c8f47f3dd18d1d3e51d078093aed7915093c6dadafcd1ada2d1c43a21ad",
        "src_file_company": "Koino Co., Ltd."
      }
    ]
  }
}