RMM
GoToAssist (GoTo Resolve)
GoTo Resolve (formerly LogMeIn Resolve) is an all-in-one IT management and remote monitoring and management (RMM) solution designed for small and midsize businesses (SMBs) and managed service providers (MSPs). It combines remote monitoring and management capabilities with remote support and access, ticketing, automation, and helpdesk functionality in a unified platform.
Tool overview
- Category
- RMM
- Research authors
- Daniel Koifman (KoifSec)
- Created
- 2025-11-12
- Last modified
- 2025-11-12
- Privileges
- User
- Free / availability
- No
- Verification required
- Yes
- Supported platforms
Android
Windows
macOS
Capabilities
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
C:\Program Files (x86)\GoTo Resolve Unattended\*
C:\Program Files\GoTo Resolve Unattended\*
GoToResolveExternalModuleHandler.exe
GoToResolveFileManager.exe
GoToResolveLoggerProcess.exe
GoToResolveNetworkChecker.exe
GoToResolveProcessChecker.exe
GoToResolveQuickView.exe
GoToResolveRegistryEditor.exe
GoToResolveRemoteControl.exe
GoToResolveService.exe
GoToResolveServiceManager.exe
GoToResolveTerminal.exe
GoToResolveTools32.exe
GoToResolveTools64.exe
GoToResolveUi.exe
GoToResolveUnattended.exe
GoToResolveUnattendedRemover.exe
GoToResolveUnattendedUi.exe
Code signing
- signer name
- GoTo Technologies USA, LLC
- certificate thumbprint
- 33023C0243016946C78CCB9B15AC6C203882E5D9
- src file sha256
- 5e05eb31ab2b234bf34e66703761f6ff3663376eecf2ced7ec16852d037286cb
- src file path
- downloaded_files/gotoassist_(goto_resolve)/5e05eb31ab2b234bf34e66703761f6ff3663376eecf2ced7ec16852d037286cb
- src file company
- GoTo, Inc.
- signer name
- GoTo Technologies USA, LLC
- certificate thumbprint
- 8D3FA6EEEBFC68A0FA76CDC4C6AD5982FE07DE91
- src file sha256
- 961e704a4d364ee384552af3551bac1de02541d8bcce40d5255fbc8cdea3adb1
- src file path
- downloaded_files/gotoassist_(goto_resolve)/961e704a4d364ee384552af3551bac1de02541d8bcce40d5255fbc8cdea3adb1
- src file company
- GoTo, Inc.
FORENSIC EVIDENCE
Event log artifacts
- EventID
- 7045
- ProviderName
- Service Control Manager
- LogFile
- System.evtx
- ServiceName
- GoToResolve_*
- ImagePath
- "C:\Program Files (x86)\GoTo Resolve Unattended\*\GoToResolveProcessChecker.exe" -Service -WorkFolder "C:\Program Files (x86)\GoTo Resolve Unattended\*" -ApplicationType "4"
- Description
- Service installation event as result of GoTo Resolve installation.
- EventID
- 4688
- ProviderName
- Microsoft Windows security auditing
- LogFile
- Security.evtx
- NewProcessName
- C:\Windows\System32\sc.exe
- CreatorProcessName
- C:\Windows\System32\svchost.exe
- CommandLine
- "C:\Windows\system32\sc.exe" start GoToResolve_*
- Description
- Process creation event as result of GoTo Resolve installation.
FORENSIC EVIDENCE
Registry artifacts
- Path
- HKLM\SOFTWARE\GoTo Resolve Unattended\
- Description
- N/A