LOLRMMTHE REMOTE ACCESS CATALOG
GitHub
Catalog / LANDesk
RMM

LANDesk

LANDesk is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

issuser.exe
landeskagentbootstrap.exe
LANDeskPortalManager.exe
ldinv32.exe
ldsensors.exe
C:\Program Files (x86)\LANDesk\*
*\LANDesk\*
*\issuser.exe
*\softmon.exe
*\tmcsvc.exe

Code signing

signer name
LANDesk Software, Inc.
certificate thumbprint
B0DE69573135B60DE734F2E7E3CF7D5CB155F1D9
tbs sha256
31FBDBB7E377A3B5B1B3405549F6616E59F6D89FA31B09B0EA1CED441ACD6EA5
tbs sha1
Not recorded
signer name
Ivanti, Inc.
certificate thumbprint
B310DCA4816C8E3E41E6C72BBB67A255AD8E0363
src file sha256
436e028a3072934418d30d4b9ba9a60b00fc6c7546b9134ee2483e8349516b0c
src file path
downloaded_files/landesk/436e028a3072934418d30d4b9ba9a60b00fc6c7546b9134ee2483e8349516b0c
src file company
Ivanti
signer name
Ivanti, Inc.
certificate thumbprint
85651505F0D1CC0BA24040F3F8913D94AF316100
src file sha256
da92f8e474c040a53923cf81dc0d00adb5b3278cdfae039a22ebb2fc21993373
src file path
downloaded_files/landesk/da92f8e474c040a53923cf81dc0d00adb5b3278cdfae039a22ebb2fc21993373
src file company
Ivanti

search names

4gycu.exe
ivanti software monitor
ivanti ソフトウェア監視
landeskportalmanager.resources.dll

company names

signer names

LANDesk Software, Inc.

File hashes

authenticode
  • file name
    Ivanti Software Monitor
    sha256
    474AD1FFADFEBD0F03964C9588C42757215637A782984C043AB89765097547CE
    sha1
    19E998657F0AF623F5E1C50D1F3F579FD0099132
  • file name
    Ivanti Software Monitor
    sha256
    FF8197C521B49F05EDA07D619AEC70060DCE51F41BFA3BCDE552DB436B077919
    sha1
    C09290ACDE7C7EFF82ED1DF4DF73BFCA3B2385E9
  • file name
    Ivanti Software Monitor
    sha256
    E1713BA3C96E11B28F51EBB6C21E4B48FBD71A59D03FFA8D83370EBE6C405E10
    sha1
    24099235CA8B31B6E8124BC6760DDB21479E2009
  • file name
    Ivanti Software Monitor
    sha256
    928ADF822B6B35EE36EFE02C98E87F96EB9973006EE723C76EBD410622C1D804
    sha1
    F3AD05F482EF217AC5F174F22F4891B528AA46DE
  • file name
    Ivanti Software Monitor
    sha256
    103D34699C3362BD3B3B80E08C514707400ED30837C0BB6FB9515128CE1F7AD3
    sha1
    A78721A53D0DEAFA034651AAC19DBF94A33B18A4
  • file name
    Ivanti Software Monitor
    sha256
    854C7C69EA3624E3D413DD5AE2575D6D488FF374409F2CCFB384BEFC5A81D5CE
    sha1
    2164BC7F2EA2C1E51CC98667E5CEE9A2A188C418
  • file name
    Ivanti Software Monitor
    sha256
    095D2AD9215D012DEC9D56C357B7620399EF2A40F8E1C4F5311AB7B788889FBF
    sha1
    8BBF7ADD9B46357F6736A9115D90C58357643473
  • file name
    Ivanti ソフトウェア監視
    sha256
    D3C04CAA95597596F2F8BF7A30EB8EAA9EDE3A779E6BCF0D553821EDD40783FB
    sha1
    A2154AB979986D3BFD9DC332DC0FCB83D5429F37
  • file name
    Ivanti Software Monitor
    sha256
    A6102089AD9ECF6D79046D456D85B439FE71CD582A21BC6FAB817E1BDDE19317
    sha1
    C2951E02793A5E2F9A68DE4E70382E23B4857F12
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    4E6FA2AE6FF11BBF7E02BE8F6F28209DAE76E43E905DCAE1EB7A6A68A5C26695
    sha1
    79DC3EA43685EFAF92B9436444E7AF63E454D7E4
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    816D76AF509805A4ABF9F8EA83EEB8487C714A68BB65F6F4A1C35F9345598DFE
    sha1
    7385AB184661814CF67A4E94E3508E43AC32BA91
  • file name
    4gycu.exe
    sha256
    3D23382924B524D75371ADC1A793E9FA8CD55E9E9F30D14D647387C58AB0AF15
    sha1
    D006B0529FCD31D99BC82469F185FC81E8AD3101
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    FB7EDB587B3CC6B3523FE5F04E4A97F63234EACD1FF65807852527995F5D5529
    sha1
    6DDF5E8A4F3B2CE683FD3F08C24278FCF9437440
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    F89F128EC31D856E1C86655ADB5F846F7ACA4E99E246A7E4A482BCBB1DC4D925
    sha1
    8434BCEA68DDFCA75A5A855DF0B9CCF2D169A72D
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    1F48C7B23F10BBA9AFFAF0A89E3EC8F3D63CE3156AE17F56063355CDFE102F29
    sha1
    540E4874E1FB23E6E5603344542EC5BA7F8BFA9E
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    8ED0CEE1AEE0E9F19F649B1DE7C56992029892115291D46505009545F982D16D
    sha1
    4592FFC93BCF68317E207535E48A32F04D2F4ADF
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    42A86CB6DF48B82A8544912C387D67FDCE31BD17B89B0EC4590F60984AEC2663
    sha1
    AED3D04BA0E20FFEC0EAA9E051533F9A941341E1
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    C29987E95B2F965A80125338F7453AF538233F0EE82EE8169376DF528A99E4DF
    sha1
    7730C4E85F3D946CE998765CC6C8EC382F45901B
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    C1B0112D3EFBBA0F187D79BD982CFCB59825A1653F66A51EED9D6DDB0BCE55E7
    sha1
    2C94C8D2534C3A7E7D2395F1FCAED30290A8B377
  • file name
    Ivanti Software Monitor
    sha256
    F32F0922B67729C1344A7D35533137DD1DFD084085ABFFFEEC98EA41C88FD59A
    sha1
    45FA77EAAD2DB8B20DE68621E4FE32CAB48E7DA1
page
  • file name
    Ivanti Software Monitor
    sha256
    7AB10DE3A2821CF65FE7DE679B8E6292A51556E996E1D107A6044903DCEEBA3C
    sha1
    81A42676F3E497FD4AAD2508386EAF65D9632E8F
  • file name
    Ivanti Software Monitor
    sha256
    BEAF45E9E7E28A0793D3B33E2729D5E96AAAB486F8DF92A0766B29D038D1D1A8
    sha1
    3F839A61BFA40B5EF36CE4DE01253AC631ADA222
  • file name
    Ivanti Software Monitor
    sha256
    0A3BEC7CBFE2C29C716E87EEBCE91DAD9DD225CD6FDBC4984EB2B875405965D2
    sha1
    753203FB7FE5F70B744D3FF328E422C345E112DF
  • file name
    Ivanti Software Monitor
    sha256
    76AC077A08929C6773B33E63F054B0166B9075A286B9B020C74B75CB42A45CD2
    sha1
    F9CB7EE92927A620E0F2B649931A72A9964BD5A1
  • file name
    Ivanti Software Monitor
    sha256
    97534C8FB4EF11637CED903CA228A2D6424D47526711625C6D59E24CCA2AEE61
    sha1
    BF0F16219206E89C687623ACD810E0E4F34838A9
  • file name
    Ivanti Software Monitor
    sha256
    7FDB81B785473F4F311FC782909C622EDA74283E9C3F53BD4E2A3736398D1A61
    sha1
    1BFEA619F787502B6B91C19345B79F1A21EB90F5
  • file name
    Ivanti Software Monitor
    sha256
    043EF661ED438370D48AEB1DFE0D1D18AD2DD9DD82C8442952B801E4DE4906D8
    sha1
    E808BA15273A8E9ED5362D7839D6ABBCDD571DAA
  • file name
    Ivanti ソフトウェア監視
    sha256
    D8330BFA9505D99AC9AAF9680D187CDF8485B366AC21113093D1D0C925735CEB
    sha1
    38D6B1E40A0352A80E84A428E2F55DDD7BC43592
  • file name
    Ivanti Software Monitor
    sha256
    6A085EC9532FD5D514DCAA5B7C43F8B278BB1EF649B86058AE4008610F03734A
    sha1
    2F82F3F41C1ABC9BD38A42AB78A92A1308C37C05
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    47424DD9F592A51D31A4E23C79193817BFADBFAB9AB302315008DCE89FD3C28F
    sha1
    01610622842FFE85B6C1BA6BECCF0489662607A4
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    A95052B33719C864D29261951AC7E8EB656B67B34B63B56C56B3D9ACFC938291
    sha1
    9A356014D37A88614E4559E24E01368031D828BB
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    0A5FA89469545E70278CAB55FDA82A5E2A1B5EB5504BEB5EE9375E559638344E
    sha1
    E62C93BA5D51CDFBEFC86DCF8EF84FEE7D5FC5AD
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    CCE92117CB8281554324F9633B30C4AD9FB635A852CF1E03354133C9D61F9CED
    sha1
    BCAE6E0239579FB06BEA00F61948D4C9807830F1
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    1D8D1682FC7A94AE78DF0E42CAB98BF721823EF1286CAC72D1E05ED4478BCA8B
    sha1
    A8BBC2DF2AF6E8FDBFFBEDA9229CFE0E58DD126A
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    B98FAE0BC60765C69238D7D87402548D19304D39C94EEDB1673A890E02CF4D07
    sha1
    848131E76C9BEDDB54E70F34A4564672CAEF2937
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    AD67BE1A13DB559EBCB4B770A1993E30E505431C8C36CB7CFE4A70515AE114E9
    sha1
    D53A30315AEF9AA604EC638E385984EFBDE249C2
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    33795F31BBB7F31FB2C7C2607D0ABF83CBE3CCA80B48E4A413BF5B4ACC3F777B
    sha1
    6AFFFCCB2BCDAD9CBD9AFAE5A020F8BE1B49EBB9
  • file name
    LANDeskPortalManager.resources.dll
    sha256
    DE1979E509D41F1045781649B4164D4444747807C8EAD8A03BACA5EB1516A94E
    sha1
    8B36E8D1D2E7673F5D0F13D43D7A252CED5D8C2E

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • *.ivanticloud.com
  • *.ivanti.com
  • ivanti.com
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/landesk_network_sigma.yml
Description
Detects potential network activity of LANDesk RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/landesk_processes_sigma.yml
Description
Detects potential processes activity of LANDesk RMM tool

References