RMM

Aspia

Aspia is an open-source Remote Desktop, file transfer and system information tool.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category: RMM
Research authors: Not recorded
Created: 2025-05-09
Last modified: 2025-12-14
Privileges: SYSTEM
Free / availability: Not recorded
Verification required: Not recorded
Supported platforms: LinuxWindowsmacOS

Capabilities

Remote desktop managementRemote desktop viewFile transferSystem informationText chatTask managerEncryptionAuthorization (it is possible to add users with different access rights)Address book with encryption and master-passwordNAT traversal with connection by ID (with using Aspia Router and Aspia Relay)Direct connectionsAudio supportVideo recordingClient and Console for Windows, MacOSX and LinuxHost for Windows onlyRouter/Relay for Windows and Linux

Executables & installation paths

Filename: aspia_client.exe
OriginalFileName: aspia_client.exe
Description: Aspia Client
Product: Aspia
Company: Dmitry Chapyshev

Installation paths

*\aspia_client.exe

C:\Program Files\Aspia\

C:\Program Files (x86)\Aspia\

Code signing

search names

aspia_client.exe

company names

signer names

File hashes

authenticode

file name
aspia_client.exe
sha256
A968363E26D030CB0997244ED626F0A8AA9137CC6F7EA7AFC15B61B74E83B500
sha1
DF6D3915876560EF33EFFD754A0305E0B0036D4B

page

file name
aspia_client.exe
sha256
3087D8002051D7CD12BFDEF5CAEC4FA2E2DAEF4CF5363FAA2638FD784B4E659D
sha1
A6FC35BA84C36E8646FE839D561A5C7F797470C3

FORENSIC EVIDENCE

Disk artifacts

File: C:\Users\*\AppData\Roaming\aspia\client.ini
Description: N/A
OS: Windows

File: C:\Users\*\AppData\Local\Temp\aspia\aspia_client-*.log
Description: N/A
OS: Windows

File: C:\Program Files\Aspia\Client\qt.conf
Description: N/A
OS: Windows

FORENSIC EVIDENCE

Event log artifacts

EventID: 11707
ProviderName: MsiInstaller
LogFile: Application.evtx
Data: Product: Aspia Client -- Installation completed successfully.
Description: Aspia Client installation event.

FORENSIC EVIDENCE

Network artifacts

Description: Aspia can be downloaded from the official github repository.
Domains: Not recorded
Ports: Not recorded

Detections

Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aspia_files_sigma.yml
Description: Detects potential files activity of Aspia RMM tool

Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/aspia_processes_sigma.yml
Description: Detects potential processes activity of Aspia RMM tool

References

Acknowledgements

Person: Swachchhanda Shrawan Poudel
Handle: @_swachchhanda_