Explore AI
Learn
title: Suspicious ListDeviceInfo Execution
detection:
selection:
Image|endswith: '\listdeviceinfo.exe'
ParentImage|endswith:
- '\powershell.exe'
- '\cmd.exe'
- '\wscript.exe'
condition: selection
listdeviceinfo.exe is a legitimate command-line utility developed by Trend Micro, a global leader in cybersecurity (antivirus, endpoint detection, and network defense solutions).
“Trusted but Talkative: Analyzing the Download Origins, Telemetry, and Forensic Value of Trend Micro’s listdeviceinfo.exe” trend micro listdeviceinfo.exe download
Understanding why users search for this tool helps clarify legitimate needs: listdeviceinfo
| Scenario | Real Solution |
|----------|----------------|
| User wants to see if their PC is managed by Trend Micro | Check for "Trend Micro Security Agent" in Control Panel → Programs. Or run %programfiles%\Trend Micro\Security Agent\ and look for PccNTMon.exe. |
| IT admin needs to remotely list device info | Use the Apex One web console’s built-in reporting features, not a local .exe. |
| The file is missing due to corruption | Uninstall and reinstall the Trend Micro agent via the enterprise console, not by downloading standalone files. |
| User is troubleshooting agent-server communication | Use agentinfo.exe or cfscan.exe from the same folder, or contact Trend Micro support for diagnostic scripts. | Understanding why users search for this tool helps