RMM

KHelpDesk

KHelpDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

KHelpDesk.exe

Code signing

signer name
KHELPDESK TECHNOLOGY LTDA
certificate thumbprint
A01E3A1F64E2808F55FDD95EF6E7CED2FEA625EA
tbs sha256
713A432503EF08193FF63C6A06EC2D8E2B7F43D959913CD8FA957E2CEEA74D11
tbs sha1
Not recorded
signer name
Maicon Luis Ferreira
certificate thumbprint
52127994EDBFE9AA612B016E3CB4ADFF11683717
src file sha256
712d77f4b1f37367b887ca88c34f41d700f9b684dfaba2cf6856c8d3e1fc7642
src file path
downloaded_files/khelpdesk/712d77f4b1f37367b887ca88c34f41d700f9b684dfaba2cf6856c8d3e1fc7642
src file company
Kadoshi Sistemas

search names

khelpdesk

company names

signer names

KHELPDESK TECHNOLOGY LTDA

File hashes

authenticode
  • file name
    KHelpDesk
    sha256
    716048A0265DCCA8B0559F499749241BF0E4FD8AF42C6E6927614DE5CD4C62AE
    sha1
    E5BB87D8B6F307D69FCF3139307292D36387D22A
  • file name
    KHelpDesk
    sha256
    C5807B7E2054A7C0BEBD8EEDD4C630207AC94619A29962BDF91FA7CFB5861512
    sha1
    857543764064E33B058D7937E4D4BACB19015282
  • file name
    KHelpDesk
    sha256
    E87A594863F26DA3E81DEAE0E3807D86713C7DA73387A7DF04306F42497B8621
    sha1
    5B2A2397A703BF7B49F98D1D56AB6DBB34C5A963
  • file name
    KHelpDesk
    sha256
    24030404002940959EB2F78582B6CC11DCBB4F6A1806589FA0A54F3ADB70EFE9
    sha1
    DA3C0E4C883A549BDF634C0970F840ABB96DC74E
  • file name
    KHelpDesk
    sha256
    E8D0A7A9123924017E2B4E11959E37412B1FB72E15BD93916D5CE0A401606259
    sha1
    240AF8E5067C7FDAD7DF96EB687A8020F2207555
  • file name
    KHelpDesk
    sha256
    3687C69A53A6ED797D519F54FFAEB0E81803AD64777A349201574FC3A03155CC
    sha1
    DA83E52B8DE6F31E736D3A9E6B3902E959A4CAC9
  • file name
    KHelpDesk
    sha256
    7B8ADFDC9973394324E8F961DF3D64357ED7FB24D540C96E6CACD9D4F4F1D542
    sha1
    D70A3EC375F3720C65BDBA46CAA25638EC917E24
  • file name
    KHelpDesk
    sha256
    A9CB7D46625F15398D5F8A06A37D88292C1F938F712901AFA38A3A4FC0C74AA5
    sha1
    E6A3826DF0514643442842F02EF670F5E871F214
  • file name
    KHelpDesk
    sha256
    5AE8118F7D978A6712453B08EFFB7C6157D2B6B956FA2D303CD0175DEF54FB35
    sha1
    8060705CD27EB1C86DB4D8B4FBA092310406FC74
  • file name
    KHelpDesk
    sha256
    22678AD7BA7F8A6BC8B51DD8978323116A3B8F3B7E394ABA6E2FEBED4F9F01C2
    sha1
    A1C41D5E5842E05DFA19ED4328EFB1AF255D1C80
  • file name
    KHelpDesk
    sha256
    BA4B9892851DE0E4E911CF6860AA50D0E918DEC29BC30032CEE9F449BEEF8DB9
    sha1
    82EC7176ADC38382CE2BF72067972FD63389EBEB
page
  • file name
    KHelpDesk
    sha256
    ECD8ADD1D9064293EEAA4EFD25E250CEF6471D219929C2B4C437B137EDE73579
    sha1
    81F3EFC6E60712AD8B3DB6D09FF69F55AF368483
  • file name
    KHelpDesk
    sha256
    5F1DF598EEC4AC748CF795B156AED7A4F21765CC7DE6C18DF90A8EA1956356A2
    sha1
    32CD551308A21E41F19D5C33FC4CF25D34873A2F
  • file name
    KHelpDesk
    sha256
    B6B9E022E77098007C3763E04EA05EA2AF2A511B4A4F181EB8EEF5AA9ED0DA3F
    sha1
    296D4ADBEF97C2D387163DBB8B70449BD7A3DD13
  • file name
    KHelpDesk
    sha256
    853BD742C2224125C226BC857B1897927293B54E05C35BEFC1C0209054E0461F
    sha1
    5EF63BCD34BE0E72FDD131EFAACF3CE666CEE642
  • file name
    KHelpDesk
    sha256
    6C8E773483865AA5299323160D7854A23C4C606A98DA34F95A99CDBC2CB28086
    sha1
    A9390CF9E9F41F4A0B2E09462B95DC95D2956A66

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • *.khelpdesk.com.br
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_network_sigma.yml
Description
Detects potential network activity of KHelpDesk RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/khelpdesk_processes_sigma.yml
Description
Detects potential processes activity of KHelpDesk RMM tool

References