{
  "Name": "Netop Remote Control (aka Impero Connect)",
  "Category": "RMM",
  "Description": "Netop Remote Control (aka Impero Connect) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://netop.com/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "nhostsvc.exe",
      "nhstw32.exe",
      "nldrw32.exe",
      "rmserverconsolemediator.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/netop_remote_control__aka_impero_connect__processes_sigma.yml",
      "Description": "Detects potential processes activity of Netop Remote Control (aka Impero Connect) RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "NETOP TECH SRL",
        "certificate_thumbprint": "311FD401E4AA27E856311EAE5D80C31CDE46A67C",
        "certificate_der_base64": "MIIHyzCCBbOgAwIBAgIMDACKCO9kIrQ6l7swMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTIwMAYDVQQDEylHbG9iYWxTaWduIEdDQyBSNDUgRVYgQ29kZVNpZ25pbmcgQ0EgMjAyMDAeFw0yNTA2MjQxMTQ2MDVaFw0yNjA2MjUxMTQ2MDVaMIIBCTEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xFjAUBgNVBAUTDUo0MC82NzU4LzIwMDYxEzARBgsrBgEEAYI3PAIBAxMCUk8xCzAJBgNVBAYTAlJPMRIwEAYDVQQIEwlCdWNoYXJlc3QxEjAQBgNVBAcTCUJ1Y2hhcmVzdDEqMCgGA1UECRMhU3RyLiBQcmluY2lwYXRlbGUgVW5pdGUgbnIuIDQ2LTQ4MRcwFQYDVQQKEw5ORVRPUCBURUNIIFNSTDEXMBUGA1UEAxMOTkVUT1AgVEVDSCBTUkwxKDAmBgkqhkiG9w0BCQEWGXRlYW1fb3BlcmF0aW9uc0BuZXRvcC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8VHVCcnFSviQkiQ1DDTz4A5Qw+c/hEcdeVePKLjM85ofv1LsqcSQB/RauAlBY2HsdPGxO13lYibsWQfq4a6NzGONkqFN4b4UR0ezGhQftDOQA+9VnTDBViOPElAsDvd4Jm09nE5uUEXUTmk5Lii2YyHOl3v+ATcRGndFQWsxs33bT3qZp1K8t1xOsfn+Eb7d8rwhdo6xBEYsAVz+n+HwK0LU1cVwl1wdtzWrHgTHHLwH6nweOnpsUvsK1KX6o8mV4xA2x93EbR03LohXzrvtkb4ynT/z6fTi+vxPWuKPVL/GKj0dRVpZVQfjCKOUCMk8gbzTjuYOrNExBmZvykmGFg8534OrnG1AnUNqXjXTdVt0U4HCSRAPhVSADCFNRFNIc3DQUl3v+dKdjS/yk7/bUXkHWCiTLr8q/eK+UQkhmSxGkNu9dx482zPdH+lZyQqeFjnY0dF47pEY1GQC6L6FK7/89OHmAGS/vW3CWeUxoG7t207W5LZlvueTEXjYsEfZXaCnAzUiiDJL6dvie5J2Wi/1PxKmuo4OqzheePIXRDr1163418A6BkkqswcOTmrwHUrk9WimJ7qd3vfEh4OCRmHzOiYPX5PboBagvU7iVsZKOjpapB/8czo0cGBL6LsDqSg/5TGOYvXWolL9+kHW+6lpGqVigoNTpDKD8emjx5QIDAQABo4IB3DCCAdgwDgYDVR0PAQH/BAQDAgeAMIGfBggrBgEFBQcBAQSBkjCBjzBMBggrBgEFBQcwAoZAaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyNDVldmNvZGVzaWduY2EyMDIwLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyNDVldmNvZGVzaWduY2EyMDIwMFUGA1UdIAROMEwwQQYJKwYBBAGgMgECMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAcGBWeBDAEDMAkGA1UdEwQCMAAwRwYDVR0fBEAwPjA8oDqgOIY2aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc2djY3I0NWV2Y29kZXNpZ25jYTIwMjAuY3JsMCQGA1UdEQQdMBuBGXRlYW1fb3BlcmF0aW9uc0BuZXRvcC5jb20wEwYDVR0lBAwwCgYIKwYBBQUHAwMwHwYDVR0jBBgwFoAUJZ3Q/FkJhmPF7POxEztXHAOSNhEwHQYDVR0OBBYEFODI7vdgpWZuRNV6CcVfOi8FwJQ4MA0GCSqGSIb3DQEBCwUAA4ICAQClnUdzXOjxR3/qvY+jo+aC2wjV3DnfNj1r2VcPr529NHXTDTOuKvQ0FU/SGq+BOF3l4rusQFkWFnNr9OSmmias7wOqmIWBbReQQ+SqygvSKGdcYmjUqgeiVVIzW8yS9CHa/dhorH+jdNUp3//nFHuuexIFooB4HmKV/tQo2J+v75seFcYCNIGCFxfWvcmSxr5fZLbCfeZ9DgbxL7gsvQJUJqGgBhkhDdQ1SoQW7qvfVJ4l2of6g/I29p3zoSXV+mU3f0mra3vzh9jZZjxghxWWtB5/dx2LCP1mzUcAGV5o+kRsHm09DHgs7/4Gg9dOE5aTysRtuYrgT7YkxPR01Rv/K5VxM2zh6WExuGpCYqKkWoVxKYIQqy0DVt9jQYag9fm/ROlnB/sKEyE39UG4gfeG7gImO78QUaagZKxKznXH/HL0h6h2L0jPOETuxnJEuZbBIJXxuuuBF235pi7nFFgSX43MK4UteIw3XBe8Tevz/UeFkrcR4aXObaGXZmtK3QwB2LvjQsZwcdsfADSwcZE3ETPrtL+BQXVSOxL/ZWh3AJuhqnf+2jxt+NE7EGX5gDUP9v5F0+4ik6sFApKEfWlKVq0kB6JW91tWHWvhvAYpGhq+6kC0LA5qyuuV85AmW1NoUHZu7dinoo0HVAQ5Y/aF8gFliUekAEL7wC18pkjWRQ==",
        "src_file_sha256": "c5b98ab84cb24ddcfd5e01928ea959b6af8bb4963a9d1ae10fef3734ba99657d",
        "src_file_path": "downloaded_files/netop_remote_control_(aka_impero_connect)/c5b98ab84cb24ddcfd5e01928ea959b6af8bb4963a9d1ae10fef3734ba99657d",
        "src_file_company": "Netop Solutions Limited"
      }
    ]
  }
}