RMM
LogMeIn rescue
LogMeIn rescue is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2026-06-16
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
support-logmeinrescue*.exe
support-logmeinrescue.exe
lmi_rescue.exe
C:\Users\*\AppData\Local\LogMeIn Rescue Applet\LMIR*.tmp\lmi_rescue.exe
C:\Users\*\AppData\Local\LogMeIn Rescue Applet\LMIR*.tmp\lmi_rescue_srv.exe
Code signing
- signer name
- LogMeIn, Inc.
- certificate thumbprint
- N/A
- tbs sha256
- 67C14D5CC02D94BB4380C3473FC9100FA8567975638F84D82B58773A2AE74DEE
- tbs sha1
- Not recorded
- signer name
- GoTo Technologies USA, LLC
- certificate thumbprint
- 33023C0243016946C78CCB9B15AC6C203882E5D9
- src file sha256
- 093e4af5f61640e64799539e8f3418e0890a3fe0aa3e33613de3d62936ee2f20
- src file path
- downloaded_files/logmein_rescue/093e4af5f61640e64799539e8f3418e0890a3fe0aa3e33613de3d62936ee2f20
- src file company
- LogMeIn, Inc.
- signer name
- GoTo Technologies USA, LLC
- certificate thumbprint
- ECC24BFE100B96AE619D81554ACFA0439146410E
- src file sha256
- 50efac7eb47a1ff1deb0b5e037251cbd800513a8e0306659ddd212b5a5a45c25
- src file path
- downloaded_files/logmein_rescue/50efac7eb47a1ff1deb0b5e037251cbd800513a8e0306659ddd212b5a5a45c25
- src file company
- LogMeIn, Inc.
search names
company names
signer names
LogMeIn, Inc.
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.logmeinrescue.com
- *.logmeinrescue.eu
- logmeinrescue.com
- rescue-list.*.logmein-gateway.com
- rescue-data-cetner.logmein-gateway.com
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_rescue_network_sigma.yml
- Description
- Detects potential network activity of LogMeIn rescue RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/logmein_rescue_processes_sigma.yml
- Description
- Detects potential processes activity of LogMeIn rescue RMM tool