RMM
KHelpDesk
KHelpDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
KHelpDesk.exe
Code signing
- signer name
- KHELPDESK TECHNOLOGY LTDA
- certificate thumbprint
- A01E3A1F64E2808F55FDD95EF6E7CED2FEA625EA
- tbs sha256
- 713A432503EF08193FF63C6A06EC2D8E2B7F43D959913CD8FA957E2CEEA74D11
- tbs sha1
- Not recorded
- signer name
- Maicon Luis Ferreira
- certificate thumbprint
- 52127994EDBFE9AA612B016E3CB4ADFF11683717
- src file sha256
- 712d77f4b1f37367b887ca88c34f41d700f9b684dfaba2cf6856c8d3e1fc7642
- src file path
- downloaded_files/khelpdesk/712d77f4b1f37367b887ca88c34f41d700f9b684dfaba2cf6856c8d3e1fc7642
- src file company
- Kadoshi Sistemas
search names
khelpdesk
company names
signer names
KHELPDESK TECHNOLOGY LTDA
File hashes
- authenticode
- file name
- KHelpDesk
- sha256
- 716048A0265DCCA8B0559F499749241BF0E4FD8AF42C6E6927614DE5CD4C62AE
- sha1
- E5BB87D8B6F307D69FCF3139307292D36387D22A
- file name
- KHelpDesk
- sha256
- C5807B7E2054A7C0BEBD8EEDD4C630207AC94619A29962BDF91FA7CFB5861512
- sha1
- 857543764064E33B058D7937E4D4BACB19015282
- file name
- KHelpDesk
- sha256
- E87A594863F26DA3E81DEAE0E3807D86713C7DA73387A7DF04306F42497B8621
- sha1
- 5B2A2397A703BF7B49F98D1D56AB6DBB34C5A963
- file name
- KHelpDesk
- sha256
- 24030404002940959EB2F78582B6CC11DCBB4F6A1806589FA0A54F3ADB70EFE9
- sha1
- DA3C0E4C883A549BDF634C0970F840ABB96DC74E
- file name
- KHelpDesk
- sha256
- E8D0A7A9123924017E2B4E11959E37412B1FB72E15BD93916D5CE0A401606259
- sha1
- 240AF8E5067C7FDAD7DF96EB687A8020F2207555
- file name
- KHelpDesk
- sha256
- 3687C69A53A6ED797D519F54FFAEB0E81803AD64777A349201574FC3A03155CC
- sha1
- DA83E52B8DE6F31E736D3A9E6B3902E959A4CAC9
- file name
- KHelpDesk
- sha256
- 7B8ADFDC9973394324E8F961DF3D64357ED7FB24D540C96E6CACD9D4F4F1D542
- sha1
- D70A3EC375F3720C65BDBA46CAA25638EC917E24
- file name
- KHelpDesk
- sha256
- A9CB7D46625F15398D5F8A06A37D88292C1F938F712901AFA38A3A4FC0C74AA5
- sha1
- E6A3826DF0514643442842F02EF670F5E871F214
- file name
- KHelpDesk
- sha256
- 5AE8118F7D978A6712453B08EFFB7C6157D2B6B956FA2D303CD0175DEF54FB35
- sha1
- 8060705CD27EB1C86DB4D8B4FBA092310406FC74
- file name
- KHelpDesk
- sha256
- 22678AD7BA7F8A6BC8B51DD8978323116A3B8F3B7E394ABA6E2FEBED4F9F01C2
- sha1
- A1C41D5E5842E05DFA19ED4328EFB1AF255D1C80
- file name
- KHelpDesk
- sha256
- BA4B9892851DE0E4E911CF6860AA50D0E918DEC29BC30032CEE9F449BEEF8DB9
- sha1
- 82EC7176ADC38382CE2BF72067972FD63389EBEB
- page
- file name
- KHelpDesk
- sha256
- ECD8ADD1D9064293EEAA4EFD25E250CEF6471D219929C2B4C437B137EDE73579
- sha1
- 81F3EFC6E60712AD8B3DB6D09FF69F55AF368483
- file name
- KHelpDesk
- sha256
- 5F1DF598EEC4AC748CF795B156AED7A4F21765CC7DE6C18DF90A8EA1956356A2
- sha1
- 32CD551308A21E41F19D5C33FC4CF25D34873A2F
- file name
- KHelpDesk
- sha256
- B6B9E022E77098007C3763E04EA05EA2AF2A511B4A4F181EB8EEF5AA9ED0DA3F
- sha1
- 296D4ADBEF97C2D387163DBB8B70449BD7A3DD13
- file name
- KHelpDesk
- sha256
- 853BD742C2224125C226BC857B1897927293B54E05C35BEFC1C0209054E0461F
- sha1
- 5EF63BCD34BE0E72FDD131EFAACF3CE666CEE642
- file name
- KHelpDesk
- sha256
- 6C8E773483865AA5299323160D7854A23C4C606A98DA34F95A99CDBC2CB28086
- sha1
- A9390CF9E9F41F4A0B2E09462B95DC95D2956A66
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.khelpdesk.com.br
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_network_sigma.yml
- Description
- Detects potential network activity of KHelpDesk RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_processes_sigma.yml
- Description
- Detects potential processes activity of KHelpDesk RMM tool