{
  "Name": "ManageEngine",
  "Category": "RMM",
  "Description": "ManageEngine is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2025-12-14",
  "Details": {
    "Website": "https://www.manageengine.com/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "InstallShield Setup.exe",
      "ManageEngine_Remote_Access_Plus.exe",
      "*\\dcagentservice.exe",
      "C:\\Program Files (x86)\\DesktopCentral_Agent\\bin\\*",
      "*\\DesktopCentral_Agent\\bin\\*"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/manageengine_processes_sigma.yml",
      "Description": "Detects potential processes activity of ManageEngine RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "search_names": [
      "2025-12-12_dc91d52bc3085602a97b2b29dd90279d_amadey_elex_floxif_hijackloader_mafia_remcos_smoke-loader",
      "dcagentservice.exe",
      "installshield setup.exe",
      "manageengine_remote_access_plus.exe",
      "mulkstg.exe",
      "n047693i.exe",
      "setup",
      "vayrcy.exe"
    ],
    "company_names": [],
    "signer_names": [
      "Tuxera Inc"
    ],
    "certificates": [
      {
        "signer_name": "Tuxera Inc",
        "issuer": "CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1",
        "certificate_thumbprint": "F840AB496D3000D82535C05C73C89E761ABD572C",
        "tbs_sha256": "849E9128B875986C17452F7AA428A3BC1A515A541D1FD2A60AB5531363CFA594",
        "tbs_sha1": "140AFBF2F401470E6320CA647E8068D733BF4480",
        "valid_from": "2022-11-04T00:00:00+00:00",
        "valid_to": "2026-01-28T23:59:59+00:00",
        "certificate_der_base64": "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"
      },
      {
        "signer_name": "ZOHO Corporation Private Limited",
        "certificate_thumbprint": "9CFE33A8A1FB933BEDF943EF4263D03B6A5F828E",
        "certificate_der_base64": "MIIHHTCCBQWgAwIBAgIMDGsl8hryZ5tnz4h0MA0GCSqGSIb3DQEBCwUAMFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS8wLQYDVQQDEyZHbG9iYWxTaWduIEdDQyBSNDUgQ29kZVNpZ25pbmcgQ0EgMjAyMDAeFw0yNTAyMTgxMzU5NDBaFw0yNjEwMDkwNzQwNThaMIGKMQswCQYDVQQGEwJJTjETMBEGA1UECBMKVGFtaWwgTmFkdTEQMA4GA1UEBxMHQ2hlbm5haTEpMCcGA1UEChMgWk9ITyBDb3Jwb3JhdGlvbiBQcml2YXRlIExpbWl0ZWQxKTAnBgNVBAMTIFpPSE8gQ29ycG9yYXRpb24gUHJpdmF0ZSBMaW1pdGVkMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz09Cd5TDWpRU90iuUgEngTp7kHP4WsQlU5MroTyh0/57BWlmg+/Ve/GoDiwWWfX9zHl3Qi1KQEquw8AhkzzwLCSn634vUTM5kEleezZDAvaS2QjrcvOY4tydRgejobpWJHdrJIWiNPBEM5uBzF8LSFEB6nUgF24QuG3MW1MYjC1s7xRgUZeqPBKvaL3qzdm1A5DezRXOJ9bgeFy9e9m1s+6ts39yO+2cyAc9/nhGmio0sWvaGpbPDCssHIcInGQGw8lW9FCIqhERgTBGsi8QC3vdWWi/dHju6Akt3497dCA9PbXVwkcMS5PSuoC5iKrQjnUvQO1/mlEyd6CR2NC4D+DGYIynSvet1ceaaOUUriI6f8MiAKMYDmGa1lOGVhbR7CRO5BjkPEPzczHuffYchPNtiYE6VRSd05zysSwpIYYZfiIHQptIhW/I2DoSIrDKo1WVG3jNrYiAL6t68P8xoL2hHvwekV9RAqMVYHxKVA0Ur+DKCPrCDS01/NXKD6jeBoWyGEKE11J65nXuphTbsZmp+T3ATPJepkiN2qXmzW2SQD9YC8FW2BsTQx6lKwjMRNA5WcpYbm8P0l+eo9ck1uwDwq6W1fYuhBGebG7FTUAUj73b47TxeKf2AG5YD5x+xrOf463q06lbIYn61lbUJjMF/Dwd3woLV/VxHShciI8CAwEAAaOCAbEwggGtMA4GA1UdDwEB/wQEAwIHgDCBmwYIKwYBBQUHAQEEgY4wgYswSgYIKwYBBQUHMAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZ2NjcjQ1Y29kZXNpZ25jYTIwMjAuY3J0MD0GCCsGAQUFBzABhjFodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc2djY3I0NWNvZGVzaWduY2EyMDIwMFYGA1UdIARPME0wQQYJKwYBBAGgMgEyMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAEEATAJBgNVHRMEAjAAMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyNDVjb2Rlc2lnbmNhMjAyMC5jcmwwEwYDVR0lBAwwCgYIKwYBBQUHAwMwHwYDVR0jBBgwFoAU2rONwCSQo2t30wygWd0hZ2R2C3gwHQYDVR0OBBYEFDqaXb/UoQJmwU/awDe9Pdx+MvqYMA0GCSqGSIb3DQEBCwUAA4ICAQAGEr1oLiiri9QNjpj9GX0NzyGumOynnfJB8X6M8SuLsdmTJWHKKp/mjXcYLT4Ce0tAmHgkHRt2hel9ANzdcjl8RjPWsYScVn5cZ3sfSGmH9dwPNSCp9gdRUwwT9jDU+B4KMd4rz6XrtL+kVgbTVGzRpnnoCz/9PVRApRP7xcLsgdbrVolr2A37OOkVEdaY5XW2orW+mw+a7Q1vdeJDt/rmXnUf/E8txo9gpPcCK6D3Ufi9g89qBHU8IOvDXrvlYjcgiRsPa4QzTwtBaXNrCuI3vjycQe/eoAL8XJHNwuPeG8UimO/OlQuaofa9pgCmyMH5TL9JayS2r1oqdxXQySTii9v7Djk35WVxhnBumAZQa9uO5aoGcMWX9XGKe8BIpxgA16Wg+/K6JQyRzgIy3eaKxkZFXtJhzu2Qd+NIPpDOmCxBRcwHE5T/kV1bq/xR4MX+WUrU3YS1TQoi6y4pXzeKEYjkWrZZDk3rY1/oZh5LIA/FSME4klrpaxJCYjMlABeWQeEuCEKJEbRYrV7TxT180M1NKTQatBSSjKWIWFE14GIlBWgs+9OmLR+09Q2pplEKUFw3OW7hqTMN8PRk3ZwYEBwNiAbSdRhCj6Zy8eRPBBCLksWJo44IJcniqGhmFdD07ALvRwudvItKPvajzqtaTMZAOaLZia5AXWbxRpCHdg==",
        "src_file_sha256": "b9326bd53d5cfd1d1ff72f52e92e776487e206e76363d4c23a3c60143349c790",
        "src_file_path": "downloaded_files/manageengine/b9326bd53d5cfd1d1ff72f52e92e776487e206e76363d4c23a3c60143349c790",
        "src_file_company": "Zoho Corporation Pvt. Ltd.,"
      },
      {
        "signer_name": "ZOHO Corporation Private Limited",
        "certificate_thumbprint": "039B7B91AFEFDB68B36E6A2D246545D581D1BF0D",
        "certificate_der_base64": "MIIHHTCCBQWgAwIBAgIMJLsRnOfnHVmJ4Mb2MA0GCSqGSIb3DQEBCwUAMFkxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS8wLQYDVQQDEyZHbG9iYWxTaWduIEdDQyBSNDUgQ29kZVNpZ25pbmcgQ0EgMjAyMDAeFw0yNTAyMjEwOTQwNTBaFw0yNjEwMDkwNzQwNThaMIGKMQswCQYDVQQGEwJJTjETMBEGA1UECBMKVGFtaWwgTmFkdTEQMA4GA1UEBxMHQ2hlbm5haTEpMCcGA1UEChMgWk9ITyBDb3Jwb3JhdGlvbiBQcml2YXRlIExpbWl0ZWQxKTAnBgNVBAMTIFpPSE8gQ29ycG9yYXRpb24gUHJpdmF0ZSBMaW1pdGVkMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtnRtnGmOSz83W/xFrNqPV6bvmT2EDvWLACUb00a+4lYlmoBpdxMAEMoFyT6C1wsknR+yDzD3Fvv3ZakDDtAyMlcaHwDEGL++B8nGcjcw7K1+apL7x8TcQzekrSBsTr8KAaz6u5kL2ba0AMLkLm183u2CKpjaxl8Yq4QTwpHd468pNuVqTHPin/mWJgrG/ME2+oqoLrw+53z5UH+3O2gFHefvgmVCic6jALPZ/y/IdJyq3ga+gWa+nWb0Xp4vyq2d02pQ0vRpXCiGxNVbO96Z6VcqkSyYifeuOJ160FPSh2y2kptPSgbg+DRJlgoZ7B9aUeZJ0OuiOshSHq/F7nff0+BFmnhVmVP4zyshIfS9BJMC/A2PMVWTqc2nfdQirBwA9KChPUu+LOOI0E6oRCXl5DqIPmORzAUYGenmvcdztvlAfm4yuHDORBIX1S/CfrMLJE6P0TQRdOWUit7gENgZNEGELwth6JiKxw+bUvhmxmcKJOTbBERYsaTChVpSnq1/NqRZlzOuh2DlzTs8IxZ9Ze6q29iKBobFrOgjesyZRONV6CQQvZ43HW1OZsakYmjG0XnxBPWtOJ1yJgvJrkJAb4xTPU66oziBTztmJvJcWMlLPAGMfdF+jFI0C9wREh4vthwM3vOATNG3BknjgKLMETQWMnYEc91cE66EstD2N9ECAwEAAaOCAbEwggGtMA4GA1UdDwEB/wQEAwIHgDCBmwYIKwYBBQUHAQEEgY4wgYswSgYIKwYBBQUHMAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZ2NjcjQ1Y29kZXNpZ25jYTIwMjAuY3J0MD0GCCsGAQUFBzABhjFodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9nc2djY3I0NWNvZGVzaWduY2EyMDIwMFYGA1UdIARPME0wQQYJKwYBBAGgMgEyMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAEEATAJBgNVHRMEAjAAMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyNDVjb2Rlc2lnbmNhMjAyMC5jcmwwEwYDVR0lBAwwCgYIKwYBBQUHAwMwHwYDVR0jBBgwFoAU2rONwCSQo2t30wygWd0hZ2R2C3gwHQYDVR0OBBYEFOEVX0xefVGKmOHi/uHr17eQOdG4MA0GCSqGSIb3DQEBCwUAA4ICAQB9ErI0zm8zbr2borpvUdDBZusx0w11dlAO1Gx0WRz40hwLPZ2ygUyPChSl8GC1RV8aggNwQG8AQ+v4D/nbTu/62tEgIFS3CB/0g6thdZXWz1gaUWdS7C5IvXDFdJygnMUImM/pvNZNCDbRGjmHPufM9qa7z6OyMwUUeiw1/ITYrW7TYU0fE22u7jHuJdZCJjkSysT/ITjB/reDqadzXgd/vsQhmzw6poyVLoUfRc6l6sZXwqGtD8gJbA0tJ26+tzYRP7P7P5wBFYU8pFGi4fG6cTKFsoJJEI6UfiYBiI1v67l8TEABgG0XKzz+LTwiz51Z3xP+U68GioeZYim68fsbcqTdthm+V6E4CAvQpr4Kn+fOwFZ/hVD1BrlYy6iHSDT2SnhLckkg1cBTLG3sVeek6KWB0KyfzOxO9hIKNttQFkN4aOGigTA/VSpU53SPsjJ1tjaauxo1Ytug4+aWe6XypUi1UaCFUu91lTtlUtI4PSCuhbf56oYB6dTc0w44O6f2d8M4jOSTNmhF1fiWQ9MnRgD/UUpRxdSLvxJEj7D1bUfGzPs7pjJyJNRTA0BeY5FpyuxxllBytLMjptt8CKXK8Uu5o+l6F30nyOENNfbqx62GXpkSiplOv6p0vOGVGJ9NrD9WuKiEHmwadwlqOWnka0HBF2iLQGrf0V7mF2+Lkw==",
        "src_file_sha256": "e65be97dfb0ae62de4bfbfed140aaa1e16e9f4461e8e29c9816fc54dea595694",
        "src_file_path": "downloaded_files/manageengine/e65be97dfb0ae62de4bfbfed140aaa1e16e9f4461e8e29c9816fc54dea595694",
        "src_file_company": "Zoho Corporation Pvt. Ltd.,"
      },
      {
        "signer_name": "ZOHO Corporation Private Limited",
        "certificate_thumbprint": "1FFC1D0860B748F0E9D53297B716E497C81D687B",
        "certificate_der_base64": "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",
        "src_file_sha256": "b51dee244adcf4795db9378e56897a97b48eb2c3d4ed758af98ddab2e6f9967b",
        "src_file_path": "downloaded_files/manageengine/b51dee244adcf4795db9378e56897a97b48eb2c3d4ed758af98ddab2e6f9967b",
        "src_file_company": "ZOHO Corporation"
      },
      {
        "signer_name": "ZOHO Corporation Private Limited",
        "certificate_thumbprint": "03498B4CC5B51DB6CE80699F23CAC1724BB36B69",
        "certificate_der_base64": "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",
        "src_file_sha256": "7ac27dd17b4cfa28f37deb6dcb9519b4e7a2dd405134ac881a8c49d32cb904e6",
        "src_file_path": "downloaded_files/manageengine/7ac27dd17b4cfa28f37deb6dcb9519b4e7a2dd405134ac881a8c49d32cb904e6",
        "src_file_company": "ZOHO Corporation"
      }
    ]
  },
  "FileHashes": {
    "authenticode": [
      {
        "file_name": "dcagentservice.exe",
        "sha256": "1F901E09874DAEFF644B3D52E11A442C27505A59216BC4F6F5A6914AA80C80C4",
        "sha1": "49AE897644CA33AF6CDAA8D5FFAC221041C6E56D"
      },
      {
        "file_name": "2025-12-12_dc91d52bc3085602a97b2b29dd90279d_amadey_elex_floxif_hijackloader_mafia_remcos_smoke-loader",
        "sha256": "5EA43E39C87E336D81625DBFE42F99F89729E0C7F380B57841D913D506BA80A1",
        "sha1": "3E52E9FAE6E7EFDC1192621EA16E92FC2C984E45"
      },
      {
        "file_name": "dcagentservice.exe",
        "sha256": "6EA8901D44764DC7EB419BFD59B78EC33DBDF25012D3EEB5445B04AB11EF4A19",
        "sha1": "9D0F7EF001D56D766FDA676321C35FC1B3E8D562"
      },
      {
        "file_name": "dcagentservice.exe",
        "sha256": "9136E16ED61B0898551B87CA5B0695FFF4F19FE32A7A8257F526A5BBE9A73475",
        "sha1": "5887DAB0F98C4FC3E2BCC708A03624CECD7FBF92"
      },
      {
        "file_name": "Setup",
        "sha256": "C0D97469E968F9201270C3CA1E8E0E0C31537314A057FC54B57818D07BADBCA5",
        "sha1": "22AB91E8CBC234A8385610189F806906EE41CB19"
      },
      {
        "file_name": "n047693i.exe",
        "sha256": "C47843292B3E243B57769B1E9AB6CF1E963A8F5033EFD2E5885E1845A3346741",
        "sha1": "77D74B6353A3AEF30F71BBAF5D1EB8E282A3C18A"
      },
      {
        "file_name": "mulkstg.exe",
        "sha256": "CF0DF68F8693252EE995CF2B099E36B0DD8CD07E73584E68DEF37A1D478B03B7",
        "sha1": "E176ECA952CB8B7A9062D87FC99FE18EAE463C18"
      },
      {
        "file_name": "vayrcy.exe",
        "sha256": "DE82A9AF1D3B3CAA39EFFEE0C0E35D4A91A035FAB8F69BC0E6C9EC10A5BD5A60",
        "sha1": "A90D71968349B8DF153D96FBA9C3D79923B74246"
      },
      {
        "file_name": "dcagentservice.exe",
        "sha256": "EE4E96929D07BB1954B0B37364EF5BC5D2C3D41F47B7897E5DE936800E7D7A51",
        "sha1": "7257D2C06233626819EDE26CB942A295F2973134"
      },
      {
        "file_name": "dcagentservice.exe",
        "sha256": "F4DE6C3DA0EEBE57B3ADA9BE216D84ACCF9B46370563D4A25A726DE0F43D9F51",
        "sha1": "B51FE873A01463AE15A836D57478155510916B7C"
      },
      {
        "file_name": "dcagentservice.exe",
        "sha256": "F84433207EE3C130F493904241457FA59D1EC746355F6D62624FB97C9F9C0E5F",
        "sha1": "4DAD43D616035CA1613C9BD5577EA7BFD0C8D295"
      }
    ],
    "page": []
  }
}