RMM
IT Agent
IT Agent is a remote monitoring and management (RMM) platform. Its remote access capability is powered by Duet, while its separately named ITAgent RMM Sender components provide the broader IT Agent endpoint-management product. The IT Agent RMM Sender binaries are distinct from the Duet Display files covered by the existing Duet Display catalog entry.
Tool overview
- Category
- RMM
- Research authors
- Michael Haag
- Created
- 2026-09-22
- Last modified
- 2026-09-22
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Vendor documentation describes IT Agent as a full RMM suite whose remote-access feature is powered by Duet. Reviewed metadata for three Windows RMM Sender components reports valid IT Agent, Inc. Authenticode signatures; their full-file SHA-256 values, PE metadata, original filenames, and the shared signer certificate were reviewed without executing the files. The inspected RMM Sender components are distinct from the Duet Display executable and installer names. The vendor documents Windows, macOS, and Linux support; its current platform page specifically identifies Apple Silicon and Intel macOS systems, plus Ubuntu, Debian, and RHEL Linux systems. This review has no verified macOS or Linux artifact names, installed paths, services, launchd labels, or network endpoints.
- Supported platforms
Linux
Windows
macOS
Capabilities
Executables & installation paths
- Filename
- ITAgentRMMSender.exe
- OriginalFileName
- ITAgentRMMSender.exe
- Description
- ITAgent RMM Sender
- Filename
- ITAgentRMMSenderSL.exe
- OriginalFileName
- ITAgentRMMSenderSL.exe
- Description
- ITAgent RMM Sender Service Launcher
- Filename
- ITAgentRMMSenderUpdater.exe
- OriginalFileName
- ITAgentRMMSenderUpdater.exe
- Description
- ITAgentRMMSenderUpdater 2026.7.31.1909
- Filename
- ITAgentSender.aiui
- OriginalFileName
- ITAgentSender.aiui
- Description
- ITAgent RMM Sender Installer
Installation paths
ITAgentRMMSender.exe
ITAgentRMMSenderSL.exe
ITAgentRMMSenderUpdater.exe
ITAgentSender.aiui
Code signing
- signer name
- IT Agent, Inc.
- certificate thumbprint
- BA9B6EAE4F10E0FE8D721C2956FC790289C9D0E6
- issuer
- DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
- valid from
- 2025-04-24T00:00:00Z
- valid to
- 2028-04-25T23:59:59Z
- src file sha256
- 8f6148457b7fba2cc5f7bd143cca625cddf215b0350791c9718409b655751e5f
- src file path
- ITAgentRMMSender.exe
- src file company
- ITAgent
search names
ITAgentRMMSender.exe
ITAgentRMMSenderSL.exe
ITAgentRMMSenderUpdater.exe
company names
ITAgent
signer names
IT Agent, Inc.
FORENSIC EVIDENCE
Disk artifacts
- File
- ITAgentRMMSender.exe
- Description
- Inspected Windows IT Agent RMM Sender component.
- OS
- Windows
- File
- ITAgentRMMSenderSL.exe
- Description
- Inspected Windows IT Agent RMM Sender Service Launcher component.
- OS
- Windows
- File
- ITAgentRMMSenderUpdater.exe
- Description
- Inspected Windows IT Agent RMM Sender updater component.
- OS
- Windows
- File
- ITAgentSender.aiui
- Description
- Inspected Windows IT Agent RMM Sender installer artifact.
- OS
- Windows
FORENSIC EVIDENCE
Other artifacts
- Type
- InspectedWindowsComponentSHA256
- Value
- 14c9b3ecbb18231b63ad4156d760381ee0daaee1844c84b5fce1a453532f2316
- Type
- InspectedWindowsComponentSHA256
- Value
- 8f6148457b7fba2cc5f7bd143cca625cddf215b0350791c9718409b655751e5f
- Type
- InspectedWindowsComponentSHA256
- Value
- 8ef734ecf9d5d984e8540bc8272c089e846bf464b8f60ee9a90cbfa9e37bcd05
- Type
- InspectedWindowsInstallerSHA256
- Value
- c00f23177b12cb03d48dd812ff77b1838bddddf294abd5f8e6013b66c9c1e72a