RMM

Splashtop Remote

Splashtop Remote is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

strwinclt.exe
Splashtop_Streamer_Windows*.exe
SplashtopSOS.exe
sragent.exe
srmanager.exe
srserver.exe
srservice.exe

Code signing

signer name
Splashtop Inc.
certificate thumbprint
D458B32F6946DBB682A9687076EB9209979BDF76
tbs sha256
2E68D3458EA8DF79CAB66FF9E4EB68904491CB6EBF148AFBE49F7FB46761FC20
tbs sha1
Not recorded
signer name
Splashtop Inc.
certificate thumbprint
N/A
tbs sha256
Not recorded
tbs sha1
2978060ECCF9B8AB92257B03117DA21AEA5DA8A1
signer name
Splashtop Inc.
issuer
CN=VeriSign Class 3 Code Signing 2010 CA
certificate thumbprint
2D01A46E9147185A5771B5B96675A89659F98C1C
tbs sha256
51ABFD3E018A65BA17A112836881266A247DB48816BB0F49C24DF2E31C64FF7B
tbs sha1
2978060ECCF9B8AB92257B03117DA21AEA5DA8A1
valid from
2013-09-09T00:00:00+00:00
valid to
2015-12-09T23:59:59+00:00

search names

3irjc74zj.exe
splashtop_streamer_windows.exe
splashtopsos.exe
sragent.exe
srserver.exe
srservice.exe

company names

signer names

Splashtop Inc.

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • splashtop.com
  • *.api.splashtop.com
  • *.relay.splashtop.com
  • *.api.splashtop.eu
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_remote_network_sigma.yml
Description
Detects potential network activity of Splashtop Remote RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/splashtop_remote_processes_sigma.yml
Description
Detects potential processes activity of Splashtop Remote RMM tool

References