RMM

Remote Ripple

Remote Ripple is a free VNC viewer client developed by GlavSoft (the creators of TightVNC) for remote desktop access and control. It is a modern, lightweight viewer based on TightVNC technology that allows users to remotely access and control.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category: RMM
Research authors: Daniel Koifman (KoifSec)
Created: 2025-11-12
Last modified: 2025-11-12
Privileges: User
Free / availability: Yes
Verification required: No
Supported platforms: AndroidWindowsiOSmacOS

Capabilities

Remote ControlRemote ViewClipboard ExchangeFile TransferScreen Capture

Executables & installation paths

Installation paths

C:\Program Files\Remote Ripple\*

C:\Program Files (x86)\Remote Ripple\*

RemoteRipple.exe

FORENSIC EVIDENCE

Disk artifacts

File: %APPDATA%\GlavSoft\RemoteRipple\*
Description: Log files for RemoteRipple
OS: Windows

File: %TEMP%\Remote_Ripple_*
Description: Temporary files/logs for RemoteRipple
OS: Windows

Detections

AQL: https://github.com/Koifman/Deathcon25/blob/main/rmm_rodeo/remoteripple/aql.aql
Description: QRadar AQL query for detecting Remote Ripple RMM activity

References

https://remoteripple.com