{
  "Name": "FastViewer",
  "Category": "RMM",
  "Description": "FastViewer is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2025-12-14",
  "Details": {
    "Website": "https://www.matrix42.com/en/fastviewer",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "fastclient.exe",
      "fastmaster.exe",
      "FastViewer.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "*.fastviewer.com",
          "fastviewer.com"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fastviewer_network_sigma.yml",
      "Description": "Detects potential network activity of FastViewer RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fastviewer_processes_sigma.yml",
      "Description": "Detects potential processes activity of FastViewer RMM tool"
    }
  ],
  "References": [
    "https://fastviewer.com/demo/EN_FastViewer_Server%20Installation%20Configuration.pdf"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "search_names": [],
    "company_names": [],
    "signer_names": [
      "FastViewer GmbH"
    ],
    "certificates": [
      {
        "signer_name": "FastViewer GmbH",
        "certificate_thumbprint": "224026512C56BCE38073813BDB3D3207D88C1172",
        "tbs_sha256": "AD3D2D1485CAB1E72DD2A0C7228E9467D5A36E93BB3F17C4699882DA901348E0",
        "tbs_sha1": "",
        "certificate_der_base64": "MIIEzDCCA7SgAwIBAgIQS4hjVUJTXYndyitRl5EfpTANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMSYwJAYDVQQDEx10aGF3dGUgU0hBMjU2IENvZGUgU2lnbmluZyBDQTAeFw0xNzA4MTcwMDAwMDBaFw0yMDEwMTAyMzU5NTlaMIGJMQswCQYDVQQGEwJERTEPMA0GA1UECAwGQmF5ZXJuMRowGAYDVQQHDBFOZXVtYXJrdCBpLmQuT1BmLjEYMBYGA1UECgwPRmFzdFZpZXdlciBHbWJIMRkwFwYDVQQLDBBXZWJjb2xsYWJvcmF0aW9uMRgwFgYDVQQDDA9GYXN0Vmlld2VyIEdtYkgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQOLEWWYtL8Icv1MOSu0Wb8mAb8y/7/9TkOMZjW6aIyG41BlwsoNT64A/WykkSH6F8sULoh4ggF6w2aQA91sLKhhCxz0sy0nRqpPBNcXg2cq/bVYHk9EXFjqGPjEYyWDKkJJOlS8rVNCLTWXcEsQ7M7QUYcriX5X4UGJnuCTHGVNYrKd/FHP7LOEeRDpTrLxX5am/HjBlSAiWCB+wAwzPQmjPIx2Kn7/hsUdC0GqgWTOYIN6cESeDojlTEROKSLFlJ6zo09mGiU8DUNRsukHQw+N2LB8/z7thZlYvhZvGIXDeU99r3dYUYa5BM6fbkxU9vDW8u08RvN5Rr7EOdMWVAgMBAAGjggFqMIIBZjAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFFeGm1S4vqYpiuT2wuITGImFzdy3MB0GA1UdDgQWBBSsUpxneiC4BXoA1FZGRBuJ3sr+ujArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGwuc3ltY2IuY29tL3RsLmNybDAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwbgYDVR0gBGcwZTBjBgZngQwBBAEwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RsLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RsLnN5bWNiLmNvbS90bC5jcnQwDQYJKoZIhvcNAQELBQADggEBAGhqfX5BACju9vHJaEHEi8QjV2w1CPXIqkkBsoN88MsoSxNW+kGnm6BKiP5VeOTwmk1/bb9uTrhCO9C04G3i5pSzZpk0b9b4Gx89TUAlBw9MpNKTW4bSbgQ5RKxvsWe6y+tJh1c7J6FQBaJ1M0cn0A9m7iqQry740GPmu+00RfYSmVQmzXgsddlJp7GOqDpqIKqqPSGBUHoH2d43nBJdd2tZ+NsRboUviNRyJJGk0p4qfq5IQd/MUTROhM6BWJuyCpTAazZfadrABWDl45+H2nK+/TlrJJBd9mQ1UhjaVkeAD/TaAiNZ1ef3IgDjfWuVfNvDPCo3wJVVT84idv44leQ="
      },
      {
        "signer_name": "FastViewer GmbH",
        "certificate_thumbprint": "634F4B6F419B57A16C8F58054AE9E6DA7D1FC6A4",
        "tbs_sha256": "FF61DC60973A1DB2A6871C7AF1EEAEDE65EEECE92D36675107592266766149D2",
        "tbs_sha1": "",
        "certificate_der_base64": "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"
      },
      {
        "signer_name": "FastViewer GmbH",
        "certificate_thumbprint": "2F3A90AD6ECFC24F0781D7DFB6815A1D83A1B52E",
        "tbs_sha256": "5ADD1D07C05E16B75D504C5EB76DFC892888620DF8205D3F23E6068049130510",
        "tbs_sha1": "",
        "certificate_der_base64": "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"
      }
    ]
  }
}