RMM
Domotz
Domotz is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.
Tool overview
- Category
- RMM
- Research authors
- Not recorded
- Created
- 2024-08-02
- Last modified
- 2025-12-14
- Privileges
- Not recorded
- Free / availability
- Not recorded
- Verification required
- Not recorded
- Supported platforms
- Not recorded
Executables & installation paths
- Filename
- Not recorded
- OriginalFileName
- Not recorded
- Description
- Not recorded
Installation paths
domotz.exe
Domotz Pro Desktop App.exe
domotz_bash.exe
domotz*.exe
Domotz Pro Desktop App Setup*.exe
domotz-windows*.exe
Code signing
- signer name
- Domotz Inc
- certificate thumbprint
- 2361B8924DF61C7A57B4B77CAAD6BF3968E7DCD3
- tbs sha256
- 25457BE25A9D546CC3189A234EA5D84FAEC54C46D15B9E04AB08BDFC26AD513E
- tbs sha1
- Not recorded
- signer name
- Domotz Inc
- certificate thumbprint
- 0034E538D1FE10D11AEDB19820917F8455375F59
- tbs sha256
- 1F28243E790F8A14833AD151223E08AE287F8938156E2BD2809D91EB1B872EAD
- tbs sha1
- Not recorded
- signer name
- OpenVPN Inc.
- certificate thumbprint
- 478646B53E3F991A02E8A04D36B178DB1AFFF851
- tbs sha256
- 5AA2294423E61B2EA4278E048CE26663264439CEFCE9E19B82F7829BA1579A31
- tbs sha1
- Not recorded
- signer name
- OpenVPN Inc.
- certificate thumbprint
- N/A
- tbs sha256
- BD4325E2A812983153FFB4CE0484AE9638E38647106BD1DAB419733022006EB9
- tbs sha1
- Not recorded
- signer name
- DOMOTZ INC.
- certificate thumbprint
- B306B74F3BB81B3CD057AB400514B0D56D421788
- src file sha256
- 2761bda50e77e0a0e2a8ac1836281035cd8d3d2c5faf8b41d607519ca22a7bf5
- src file path
- downloaded_files/domotz/2761bda50e77e0a0e2a8ac1836281035cd8d3d2c5faf8b41d607519ca22a7bf5
search names
exmtweaksservice.exe
libegl.dll
libglesv2.dll
vk_swiftshader.dll
vulkan-1.dll
company names
signer names
Domotz Inc
OpenVPN Inc.
File hashes
- authenticode
- file name
- libGLESv2.dll
- sha256
- 8B3CA207456B73048B14401D514A218F91E3AC362DA380D5F42846871390950A
- sha1
- DEB3F4BF111F08EDD21CD45236980F9BAAEE8674
- file name
- exmtweaksservice.exe
- sha256
- 0BCF88B46DD1EC5DBAB3C7A93AA71935485D2301410060DFAE037A131CF40174
- sha1
- 6BF09D1CF379E7812E77949A52E4A44424FC2E71
- file name
- libEGL.dll
- sha256
- 959410DBEA458A73A2DFEF4126D8AE86A05AAA51918EF622479D96A80C58C97A
- sha1
- 0356E88D072931B1A2EEB49BD6AD7023C8D83EBA
- file name
- vulkan-1.dll
- sha256
- DFFB91B009F255C9AC0521B4357539F9E774009BD7840F42144F1322B37D9F9C
- sha1
- A48555CF8ACEC1490EA62B6E9F43D72D9EB4E29B
- file name
- vk_swiftshader.dll
- sha256
- 0DC03434E216CC1AFC474A4546D5191F48C54725CAC435288C5D678D0289976E
- sha1
- 47768556FF79EF9EA281FC0926C474F583B20077
- page
- file name
- libGLESv2.dll
- sha256
- CEB843E1186242264FBAB170AF4ADF3298B7ADF6169A80C21D885CC742C87700
- sha1
- AB54BF0739C16C996CDE7F98192868A0F156E6F2
- file name
- exmtweaksservice.exe
- sha256
- B962D7066212CB69934B5A7320645493F158FF50CE693D96285E1BFCC69450A6
- sha1
- FFFACB71C5CB6393D3B7EBF05EEC991167B2793D
- file name
- libEGL.dll
- sha256
- D81FE4599903910759C1F65F3A1B4974D827C653A2C89C95D786F60A0243929B
- sha1
- 9DEFE71AC3B38EE3B64A495148F13D789BDE2BAB
- file name
- vulkan-1.dll
- sha256
- A647D0D274F88A36F6ACC2A75C22DA8039A4C92602756DC386FFC1742D61939D
- sha1
- 9653B310379320E3E83C767BAAB6A7C3D741D707
- file name
- vk_swiftshader.dll
- sha256
- B879F1472F766619BCA6A8482E71909ADB417A7939A2B87E1FE6E1E09464208C
- sha1
- 05261154E5FA4E88FDC4B244B6FAD9F27C204D44
FORENSIC EVIDENCE
Network artifacts
- Description
- Known remote domains
- Domains
- *.domotz.co
- domotz.com
- cell-1.domotz.com
- *.cell-1.domotz.com
- Ports
- Not recorded
Detections
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/domotz_network_sigma.yml
- Description
- Detects potential network activity of Domotz RMM tool
- Sigma
- https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/domotz_processes_sigma.yml
- Description
- Detects potential processes activity of Domotz RMM tool