{
  "Name": "KHelpDesk",
  "Category": "RMM",
  "Description": "KHelpDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2025-12-14",
  "Details": {
    "Website": "https://www.khelpdesk.com.br/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "KHelpDesk.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "*.khelpdesk.com.br"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_network_sigma.yml",
      "Description": "Detects potential network activity of KHelpDesk RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_processes_sigma.yml",
      "Description": "Detects potential processes activity of KHelpDesk RMM tool"
    }
  ],
  "References": [
    "https://www.khelpdesk.com.br/en-us"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "search_names": [
      "khelpdesk"
    ],
    "company_names": [],
    "signer_names": [
      "KHELPDESK TECHNOLOGY LTDA"
    ],
    "certificates": [
      {
        "signer_name": "KHELPDESK TECHNOLOGY LTDA",
        "certificate_thumbprint": "A01E3A1F64E2808F55FDD95EF6E7CED2FEA625EA",
        "tbs_sha256": "713A432503EF08193FF63C6A06EC2D8E2B7F43D959913CD8FA957E2CEEA74D11",
        "tbs_sha1": "",
        "certificate_der_base64": "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"
      },
      {
        "signer_name": "Maicon Luis Ferreira",
        "certificate_thumbprint": "52127994EDBFE9AA612B016E3CB4ADFF11683717",
        "src_file_sha256": "712d77f4b1f37367b887ca88c34f41d700f9b684dfaba2cf6856c8d3e1fc7642",
        "src_file_path": "downloaded_files/khelpdesk/712d77f4b1f37367b887ca88c34f41d700f9b684dfaba2cf6856c8d3e1fc7642",
        "src_file_company": "Kadoshi Sistemas"
      }
    ]
  },
  "FileHashes": {
    "authenticode": [
      {
        "file_name": "KHelpDesk",
        "sha256": "716048A0265DCCA8B0559F499749241BF0E4FD8AF42C6E6927614DE5CD4C62AE",
        "sha1": "E5BB87D8B6F307D69FCF3139307292D36387D22A"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "C5807B7E2054A7C0BEBD8EEDD4C630207AC94619A29962BDF91FA7CFB5861512",
        "sha1": "857543764064E33B058D7937E4D4BACB19015282"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "E87A594863F26DA3E81DEAE0E3807D86713C7DA73387A7DF04306F42497B8621",
        "sha1": "5B2A2397A703BF7B49F98D1D56AB6DBB34C5A963"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "24030404002940959EB2F78582B6CC11DCBB4F6A1806589FA0A54F3ADB70EFE9",
        "sha1": "DA3C0E4C883A549BDF634C0970F840ABB96DC74E"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "E8D0A7A9123924017E2B4E11959E37412B1FB72E15BD93916D5CE0A401606259",
        "sha1": "240AF8E5067C7FDAD7DF96EB687A8020F2207555"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "3687C69A53A6ED797D519F54FFAEB0E81803AD64777A349201574FC3A03155CC",
        "sha1": "DA83E52B8DE6F31E736D3A9E6B3902E959A4CAC9"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "7B8ADFDC9973394324E8F961DF3D64357ED7FB24D540C96E6CACD9D4F4F1D542",
        "sha1": "D70A3EC375F3720C65BDBA46CAA25638EC917E24"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "A9CB7D46625F15398D5F8A06A37D88292C1F938F712901AFA38A3A4FC0C74AA5",
        "sha1": "E6A3826DF0514643442842F02EF670F5E871F214"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "5AE8118F7D978A6712453B08EFFB7C6157D2B6B956FA2D303CD0175DEF54FB35",
        "sha1": "8060705CD27EB1C86DB4D8B4FBA092310406FC74"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "22678AD7BA7F8A6BC8B51DD8978323116A3B8F3B7E394ABA6E2FEBED4F9F01C2",
        "sha1": "A1C41D5E5842E05DFA19ED4328EFB1AF255D1C80"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "BA4B9892851DE0E4E911CF6860AA50D0E918DEC29BC30032CEE9F449BEEF8DB9",
        "sha1": "82EC7176ADC38382CE2BF72067972FD63389EBEB"
      }
    ],
    "page": [
      {
        "file_name": "KHelpDesk",
        "sha256": "ECD8ADD1D9064293EEAA4EFD25E250CEF6471D219929C2B4C437B137EDE73579",
        "sha1": "81F3EFC6E60712AD8B3DB6D09FF69F55AF368483"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "5F1DF598EEC4AC748CF795B156AED7A4F21765CC7DE6C18DF90A8EA1956356A2",
        "sha1": "32CD551308A21E41F19D5C33FC4CF25D34873A2F"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "B6B9E022E77098007C3763E04EA05EA2AF2A511B4A4F181EB8EEF5AA9ED0DA3F",
        "sha1": "296D4ADBEF97C2D387163DBB8B70449BD7A3DD13"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "853BD742C2224125C226BC857B1897927293B54E05C35BEFC1C0209054E0461F",
        "sha1": "5EF63BCD34BE0E72FDD131EFAACF3CE666CEE642"
      },
      {
        "file_name": "KHelpDesk",
        "sha256": "6C8E773483865AA5299323160D7854A23C4C606A98DA34F95A99CDBC2CB28086",
        "sha1": "A9390CF9E9F41F4A0B2E09462B95DC95D2956A66"
      }
    ]
  }
}