CmdID

CmdID / Files

RemSupp.exe

RemSupp is a remote desktop / remote support tool observed in a phone-based social engineering phishing attack. LOLRMM

Program on Windows LOLRMM RemSupp

Opens CmdID with your command. It is read in your browser and sent nowhere.

A file of RemSupp

a remote management tool, from LOLRMM

LOLRMM lists a file named RemSupp.exe as RemSupp’s.

From LOLRMM (Apache 2.0), which lists the remote management tools intruders are known to use as well as administrators. It goes by the file’s name.