{
  "Name": "HelpU",
  "Category": "RMM",
  "Description": "HelpU is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://helpu.co.kr/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "helpu_install.exe",
      "HelpuUpdater.exe",
      "HelpuManager.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "helpu.co.kr",
          "*.helpu.co.kr"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_network_sigma.yml",
      "Description": "Detects potential network activity of HelpU RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/helpu_processes_sigma.yml",
      "Description": "Detects potential processes activity of HelpU RMM tool"
    }
  ],
  "References": [
    "https://helpu.co.kr/"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "helpU Inc.",
        "certificate_thumbprint": "15102A912051E6360AB9F64B9136B2A399FB6DAC",
        "certificate_der_base64": "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",
        "src_file_sha256": "759ee372252febb7326a65400e44e377a0f68c8e50b3e06184611ff71357b9e3",
        "src_file_path": "downloaded_files/helpu/759ee372252febb7326a65400e44e377a0f68c8e50b3e06184611ff71357b9e3",
        "src_file_company": "HelpU"
      }
    ]
  }
}