{
  "Name": "FleetDeck.io",
  "Category": "RMM",
  "Description": "FleetDeck is a remote monitoring and management (RMM) tool that provides agent-based remote desktop access and system management capabilities. The software supports remote desktop access, reboot/shutdown capabilities including safe mode, and virtual terminal support. FleetDeck agents report system information and enable remote access to managed endpoints. The tool can be deployed via MSI, MST, or shared link installations.",
  "Author": "Michael Haag",
  "Created": "2026-01-15",
  "LastModified": "2026-01-15",
  "Details": {
    "Website": "https://fleetdeck.io/",
    "PEMetadata": [
      {
        "Filename": "fleetdeck-agent.exe",
        "OriginalFileName": "fleetdeck_installer",
        "Description": "FleetDeck agent installer (verified via official documentation)"
      },
      {
        "Filename": "fleetdeck_agent_svc.exe",
        "OriginalFileName": "",
        "Description": "FleetDeck agent service executable (verified via official documentation)"
      },
      {
        "Filename": "fleetdeck-agent.msi",
        "OriginalFileName": "",
        "Description": "FleetDeck MSI installer (verified via official documentation)"
      },
      {
        "Filename": "fd_agent.dll",
        "OriginalFileName": "",
        "Description": "FleetDeck agent DLL component (reported in GitHub issue)"
      }
    ],
    "Privileges": "SYSTEM",
    "Free": "Trial and Paid",
    "Verification": "Code-signed",
    "SupportedOS": [
      "Windows"
    ],
    "Capabilities": [
      "Remote Control",
      "Remote Access",
      "Remote Desktop",
      "System Reboot",
      "Safe Mode Access",
      "Remote Shutdown",
      "Virtual Terminal",
      "System Monitoring"
    ],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "C:\\Program Files (x86)\\FleetDeck Agent\\fleetdeck_agent_svc.exe",
      "C:\\Program Files (x86)\\FleetDeck Agent\\*\\fleetdeck_agent.exe",
      "C:\\Program Files (x86)\\FleetDeck Agent\\*\\fd_agent.dll",
      "C:\\Windows\\Temp\\FleetDeck\\*",
      "fleetdeck-agent.exe",
      "fleetdeck_agent_svc.exe",
      "fleetdeck_commander_svc.exe",
      "fleetdeck_installer.exe",
      "fleetdeck_commander_launcher.exe",
      "fleetdeck_agent.exe",
      "fleetdeck-agent.msi",
      "fleetdeck-agent.mst"
    ]
  },
  "Artifacts": {
    "Disk": [
      {
        "File": "C:\\Program Files (x86)\\FleetDeck Agent\\fleetdeck_agent_svc.exe",
        "Description": "FleetDeck agent service executable (verified via official documentation)",
        "OS": "Windows"
      },
      {
        "File": "C:\\Program Files (x86)\\FleetDeck Agent\\*\\fleetdeck_agent.exe",
        "Description": "FleetDeck agent executable (verified via official documentation)",
        "OS": "Windows"
      },
      {
        "File": "C:\\Program Files (x86)\\FleetDeck Agent\\*\\fd_agent.dll",
        "Description": "FleetDeck agent DLL (reported in GitHub issue)",
        "OS": "Windows"
      },
      {
        "File": "C:\\Windows\\Temp\\FleetDeck\\*",
        "Description": "FleetDeck temporary files directory (verified via official documentation)",
        "OS": "Windows"
      }
    ],
    "EventLog": [
      {
        "EventID": 7045,
        "Description": "Service installation event for FleetDeck Agent Service",
        "OS": "Windows"
      }
    ],
    "Registry": [
      {
        "Path": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\FleetDeck Agent Service",
        "Description": "FleetDeck service registry key",
        "OS": "Windows"
      }
    ],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "*.fleetdeck.io",
          "fleetdeck.io",
          "agentmqtt.fleetdeck.io",
          "checkip.zmazonaws.com"
        ],
        "Ports": [
          443
        ]
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck_network_sigma.yml",
      "Description": "Detects potential network activity of FleetDeck.io RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/fleetdeck_processes_sigma.yml",
      "Description": "Detects potential processes activity of FleetDeck.io RMM tool"
    }
  ],
  "References": [
    "https://github.com/magicsword-io/LOLRMM/issues/112",
    "https://fleetdeck.io/faq/"
  ],
  "Acknowledgement": [
    {
      "Person": "default1337",
      "Handle": "@default1337"
    }
  ],
  "CodeSigning": {
    "search_names": [],
    "company_names": [],
    "signer_names": [
      "FLEETDECK INC.",
      "FleetDeck Inc"
    ],
    "certificates": [
      {
        "signer_name": "FLEETDECK INC.",
        "certificate_thumbprint": "CA172BACE97F7C97A6AE9E16CC9360F59E7B9CF4",
        "tbs_sha256": "10BA0C15DBB8A3DCC97DA22C8EE7ABA6577CD4733356520890518CE115736DFE",
        "tbs_sha1": "",
        "certificate_der_base64": "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"
      },
      {
        "signer_name": "FleetDeck Inc",
        "certificate_thumbprint": "77DAF21A6F30487919801D224AADAE95549DBF7B",
        "tbs_sha256": "67FB7502C5558CAA36C59E6A08ACCB243C2369C7BB3214A9A321F8CEA5DB16E0",
        "tbs_sha1": "",
        "certificate_der_base64": "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"
      },
      {
        "signer_name": "FleetDeck Inc",
        "certificate_thumbprint": "FD1A886C50EFD9778C8A046967701E34E7A65C12",
        "tbs_sha256": "2B558A81F2AE1CFC91FBC2B16A79BBACE77FA34F140C3418D6CF7DC4502AFCBE",
        "tbs_sha1": "",
        "certificate_der_base64": "MIIHAjCCBWqgAwIBAgIQdHbxH1GP88ADz/zp9nG0WzANBgkqhkiG9w0BAQsFADBXMQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMS4wLAYDVQQDEyVTZWN0aWdvIFB1YmxpYyBDb2RlIFNpZ25pbmcgQ0EgRVYgUjM2MB4XDTIxMDgxMjAwMDAwMFoXDTI0MDgxMTIzNTk1OVowgbYxETAPBgNVBAUTCEM0MjI3Nzg1MRMwEQYLKwYBBAGCNzwCAQMTAlVTMRswGQYLKwYBBAGCNzwCAQITCkNhbGlmb3JuaWExHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UECgwNRmxlZXREZWNrIEluYzEWMBQGA1UEAwwNRmxlZXREZWNrIEluYzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMyK+V4KUYsiLFqq4Gz6GSxAe1kuQQWmNbAXh9NrUa/LLyEGc5xxkxqp1hZmM96Bzxbxj7pZirpqWDi/1FZQY2+vUXCxvrN4s6SHYq+6gA0qR0s3D8xPOA0Xoopq2ACPb28HWgPuid6oSQq5Fh8uFK7Z7Hw7HKGy7iWN+DtHfeBMozWl+GMYDwIGWp/BiYXThzHtaNdcGOtqST6woCW61pcEEJlSDbTXxrI5sUUwZtSrfIAezbAhppNNwnytyeQoCGCz/cSdGH657a4l0uryAsVXBBlaCwCcZ7EO5yBWY5M3wgwyqEvJT2rIgVgctlgYMewxtsp1gXJ3NmdAdFIzhBiz77/xoefWuEFNnnIcQ1mSqfr4upypMFeJVr383gRoh0NBrz2LA3rGvm00tcFS+rAq/ezCo4fLAy5p/FYf6wh0pfu9zro5Bimx/Q8Kys4vbah7R0mxwcvg+4wP/32jBWe+tCHTnQng/zoiPzJrkHMcbA1stmEeYu2LCrcrCepxDEs93Rz2zbDbKb9CukQr6NCdDctcfm38t3HAgnlb68Jj54YnD6I5kpiMIVyED1qs0Izoby7obtsHXJFUGP0ZhfHVy4Gq5hJqktR/py2L5eVh1hvjtxP6YaDw+7ZNAxhmTLIE+ranY9gMX8K4W1/VDGB/MZEXO+hXwfmvZf/EJ0kVAgMBAAGjggHoMIIB5DAfBgNVHSMEGDAWgBSBMpJBKyjNRsjEosYqORLsSKk/FDAdBgNVHQ4EFgQUx7nkDSXVYaenTUNclljZCP5CaY0wDgYDVR0PAQH/BAQDAgeAMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYBBQUHAwMwEQYJYIZIAYb4QgEBBAQDAgQQMEkGA1UdIARCMEAwNQYMKwYBBAGyMQECAQYBMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAcGBWeBDAEDMEsGA1UdHwREMEIwQKA+oDyGOmh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1B1YmxpY0NvZGVTaWduaW5nQ0FFVlIzNi5jcmwwewYIKwYBBQUHAQEEbzBtMEYGCCsGAQUFBzAChjpodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29QdWJsaWNDb2RlU2lnbmluZ0NBRVZSMzYuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTBHBgNVHREEQDA+oCYGCCsGAQUFBwgDoBowGAwWVVMtQ0FMSUZPUk5JQS1DNDIyNzc4NYEUY29udGFjdEBmbGVldGRlY2suaW8wDQYJKoZIhvcNAQELBQADggGBACFgz4J+9P+bI70KcLkHuDNx93QGR1dVvYE4g0cM6VyPT2J6bQlnmMd2OWFI0aIENwPODs1PFnTNrpTju+Z0JecBCIoUTbmfogqEcS2540x/we4GWSCODo/8zleqnmbLM6Exlo578t1Z5Ac9LNLixZbeTnIWXKL7xhYiB4DZJmgkuqS4WaSsBQIhWAsilzg9mZz/VQzyG+rB/RiLkXJZgxbKLnizmAnuQjz0eqYIiz/Zbv6DSYamhvwNdAMjyjcI1N/er3XMlRpNaoPGis6FF8NSQlZEoqyB9WMXjN6OykyT0auzETx3RjklY9/wsrxyoBSv+YPw8vn5GzaR5ytAJY5pO1GoUJkc4CcCeoMiPxoSBb5EFMKTEteu8QVRYhK0JyCGpjysSWs9G/tUR8M3u41MvRXmw2c1gBekZ8/lVIx2M17QJJkXAvfzFLikPSZhj8H3Oj+AMQwjmNkOWk7m+hjZNrh0jUDPx/IXXgI6vyG6Arra8ojibWFk+JUcaN9hcA=="
      }
    ]
  }
}