{
  "Name": "RemoteView",
  "Category": "RMM",
  "Description": "RemoteView is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://content.rview.com/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "remoteview.exe",
      "rv.exe",
      "rvagent.exe",
      "rvagtray.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "*.content.rview.com",
          "*.rview.com",
          "content.rview.com"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteview_network_sigma.yml",
      "Description": "Detects potential network activity of RemoteView RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/remoteview_processes_sigma.yml",
      "Description": "Detects potential processes activity of RemoteView RMM tool"
    }
  ],
  "References": [
    "https://help.rview.com/hc/en-us/articles/360005175994--RemoteView-Server-list-for-firewall"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "Rsupport Co., Ltd.",
        "certificate_thumbprint": "3E3B0B3E214A4549446257C92C06839F92DCE444",
        "certificate_der_base64": "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",
        "src_file_sha256": "794ba3c194edc7c953ef39efe01686a5c7e1f996c5c090f12ebc124df6347baf",
        "src_file_path": "downloaded_files/remoteview/794ba3c194edc7c953ef39efe01686a5c7e1f996c5c090f12ebc124df6347baf",
        "src_file_company": "RSUPPORT"
      }
    ]
  }
}