RMM
Laplink Gold
Laplink Gold is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
tsircusr.exe
laplink.exe
Code signing
- signer name
- Outbyte Computing Pty Ltd
- certificate thumbprint
- N/A
- tbs sha256
- 20AEF3F8CE217A4F1CBBE73321B97DC97E7DA76A82ED88FD3F21E5AAB91719B0
- tbs sha1
- Not recorded
search names
tsircusr
welcome.exe
welcres.dll
company names
signer names
Outbyte Computing Pty Ltd
File hashes
- authenticode
- file name
- welcres.dll
- sha256
- 253526E0D9CA962CF1C63A2393E4080A4CAB40109368F87535C47A1924BBC8E1
- sha1
- 410A8E54B9F666FBD3926E5F84627496C85464EF
- file name
- TSIRCUSR
- sha256
- 5727381CC72576FF024CD9D8AC2DDF319BFBE8C0BA047978168983EF5A46D8A0
- sha1
- A75A8804DDC2FEC98338CB9983A4DBD744CF6C8C
- file name
- welcome.exe
- sha256
- 9A2E54A5FECA1884D72A92C023873D67A11BC8E03B5285782B08D78794544BD3
- sha1
- 3F36B10BD8EE626C268217136E6D9C05AC9B61CB
- page
- file name
- welcres.dll
- sha256
- 806FF080BA028A0534F58FF28588DE123BDDC6BA44F13674751B5C614FC96653
- sha1
- 2735A89D5EAB557343F510376C01461ECF8F277B
- file name
- TSIRCUSR
- sha256
- ABE4604DCE28077419994EBC8165C80F2D300452CFB74AF1BAAFA0E39F04854C
- sha1
- 5DCA73F709D8408E7F41C0851C3D0AD8CCC8F779
- file name
- welcome.exe
- sha256
- C75C7DCCD6B8525EC3C5D90B4A667DF052FF25A80DE8F4FCF8411E75BF2F5555
- sha1
- 689F8DBC71F9A152B1716206ABFED15C80F2AD80
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- user_managed
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_gold_network_sigma.yml
- Description
- Detects potential network activity of Laplink Gold RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/laplink_gold_processes_sigma.yml
- Description
- Detects potential processes activity of Laplink Gold RMM tool