{
  "Name": "ISL Light",
  "Category": "RMM",
  "Description": "ISL Light is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://www.islonline.com/downloads/isl-light.htm",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "islalwaysonmonitor.exe",
      "isllight.exe",
      "isllightservice.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "islonline.com"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_light_network_sigma.yml",
      "Description": "Detects potential network activity of ISL Light RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/isl_light_processes_sigma.yml",
      "Description": "Detects potential processes activity of ISL Light RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "ISL Online Ltd.",
        "certificate_thumbprint": "69D863EBB31F6E58D1511DE618489AB47BB0B361",
        "certificate_der_base64": "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",
        "src_file_sha256": "ae6c0e25c5867370a9208f63cecd039779384ca205336f7a8d1635058eb0f759",
        "src_file_path": "downloaded_files/isl_light/ae6c0e25c5867370a9208f63cecd039779384ca205336f7a8d1635058eb0f759",
        "src_file_company": "XLAB d.o.o."
      },
      {
        "signer_name": "PDQ.com Corporation",
        "certificate_thumbprint": "C215D204EA384B3D85057CB11B4D23B5DC301AE5",
        "certificate_der_base64": "MIIHajCCBVKgAwIBAgIQBZMfc4/QWrkQgFOVimHTQTANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMB4XDTI1MTEwNTAwMDAwMFoXDTI4MDkyMTIzNTk1OVowcjELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxGDAWBgNVBAcTD1NvdXRoIFNhbHQgTGFrZTEcMBoGA1UEChMTUERRLmNvbSBDb3Jwb3JhdGlvbjEcMBoGA1UEAxMTUERRLmNvbSBDb3Jwb3JhdGlvbjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJT3t/vUOwAicml7czDshzRfZjQUkhtNdAukRoh2av0FiJSBx2qoHZ0z9LIwNa7fUDRO7UIKxz8GgLkb3bcNkJ46lysYyagbQbL/FK7yXTxOSIRD/Sc549ks7eeZMeJuIIuX4fSyUhl7vitJYitoKJy5zXEuB5ycF0t2V6VpLBwWjszYjWvu9/9v8dB9LTS/ufdfQnqvcmqb3jh/CrJy83W78NnejkPaG1pNYwVsJcOXBmT16gnOkpafO8A3Cl9rRtkTHnQC8sCwK94YMETDsG2HcK6Fy7pLt3X9IeW6XYRZBsbr+teJrWHePqPhbBKZyLD4vELKuxJYFltb3ntnz7zXLo5EmqjmYIrpiZps8VXWism/BEMU1un1Rj2zhZtzbNreYaG+PgMEmmz0EokqZSn20mCf/Svj8Sl0PNUJ/Pgm41PfgdwHm/ES4i4bkd0L0pPotCWrKsMBVksM1pJ1DkBjH8n50oDy7T/NycKe3WYuURYqRMFi0s0royvSCoSVzYMZNsSV3nX79UDd0Z+3S7wDRsmkV73eLLTucnf2PQLaj98hbNJk22XbJorQioVIinP0Z/odmRm2/+7KqEeQZXVA4x4ZtCTOUNi4E2XtWnzFAvxllHs2GcrI87o+wO7qta0ttTRKVcd9zcKKo4GuvS99+g0454xzfAg7xU8DNRZDAgMBAAGjggIDMIIB/zAfBgNVHSMEGDAWgBRoN+Drtjv4XxGG+/5hewiIZfROQjAdBgNVHQ4EFgQUbcLQbj1+bVs0PeKQo50enrAmnD0wPgYDVR0gBDcwNTAzBgZngQwBBAEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzCBtQYDVR0fBIGtMIGqMFOgUaBPhk1odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDBToFGgT4ZNaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwgZQGCCsGAQUFBwEBBIGHMIGEMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wXAYIKwYBBQUHMAKGUGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3J0MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggIBAM6YR4s3ddDkkAXwLfQrtej/2Q1SplBIZ2Z6Q62/F3V/+XCymfAWM98bYx5oHiwZMSqhToL+OFuiQAIGtiMkvolaKTE8739E2pdbwrkbfTRpizcyumEo5TvK3xNoYbVler7mOrWcNafNZITdanVxp7pRWQ/EGTbmTDqsi3730XKva2dyPLSsd5cGA1KO9djqEOhm0a2zSbLswl6zZ1jhLuuv2kaarVJUemUKyzbG5JWOHjyKlNUu5HLhBSJbQL96pFhFIOVYS2lIVdkX3UuGF1tS2yZReOTXLTlR1fFpKy69O+jec5Gfntmb1/9tsAsbFj6Ewr70lev5P7dDP1FZSuK5/mopM+UsaR/xSZj9TvXe7T7YTK1OKf7ebmDD9CmiVypNlr/zi6Z4DaGR95oiQS6H1jHWMdetBIrw5AENG+yYFnFrFKUEpQEnArqsvzu1DFSgDJXaPheLNRxm+tOaIr7EPfZCJFBGQaepRE+FZ0cKQCNkotfm3sFJigU+XChD+BdfnwJruWZyFI2miwuN/RQGe7MH2LKErKvK/DH5o/D6jPkwsC3FcNMzR+8YVJ1DW2ZtYfeSjsXp5yORJai3+3gBkaDoaa+OmvVFvB/5zeg/MvLuR4bIn118qxF+SQ23j7qi0UDPf9RU3HlNdiOVX2U6cVknuLq+RiSinNuAtt9J",
        "src_file_sha256": "0a52b503f8461b741a50e48bfd47daff299d29ed2dde29dadaffa7398e1db6f6",
        "src_file_path": "downloaded_files/isl_light/0a52b503f8461b741a50e48bfd47daff299d29ed2dde29dadaffa7398e1db6f6",
        "src_file_company": "XLAB d.o.o."
      },
      {
        "signer_name": "ISL Online Ltd.",
        "certificate_thumbprint": "FD412CA692ED576E5FA7723CB06ABE14077A2C67",
        "certificate_der_base64": "MIIHSzCCBTOgAwIBAgIQBjE8I8Eu/6bB6Bqngx6j7zANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0IFRydXN0ZWQgRzQgQ29kZSBTaWduaW5nIFJTQTQwOTYgU0hBMzg0IDIwMjEgQ0ExMB4XDTIzMDUyNDAwMDAwMFoXDTI2MDUyMzIzNTk1OVowUzELMAkGA1UEBhMCR0IxEDAOBgNVBAcTB1N3aW5kb24xGDAWBgNVBAoTD0lTTCBPbmxpbmUgTHRkLjEYMBYGA1UEAxMPSVNMIE9ubGluZSBMdGQuMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoKB7NEjPmq5+JRkjsaS5/1GXkZ3tnfIGqn/pP2flcn+UFbbqw27ImsBsxONkuUs/fqK4fjwCNuIAo/fTci+GJs+sOWRhYlfwJJ5jgGEAkPh73pq+fgPf4tCZPfzYodTycPWmAF1CMyvivgyxDS8iNzxHg/4Gj+f2u1Pfiu6Yncjzt0CfuRRlyJ+UZ1eLxXUxjQ9UYC+vOmrgwwyeLNxlHaEL7Efb1Eeu+fytyKHia9egnBul0d/OqYBLQMDTlZaURCdrPIoLJKRp93xC23i1EMhH6u5e4VUEN0L6aPx0kPvRLbOuOlbd/DOoHwd9jnjrpn61t99CAIrcjzYSy9JQOwE1xLsjDVq5GbG3B4Ws7Cm+cH8sezRmeT4hKy5cWrqR8BTMDFaGRswX9gJLSwd9hgVicnz7EsZNjeK2KKsV4C+500bwvsc4DLb2ATBej2YxcTznpqBmcR2R64pnwGLNVV1Kotq8or4L6ClLQDOqhGCGYIhEY88NljJMNtANLiUm3/g0ego2JDgLlDgIB2Hv360Eiig9Eba6JSvbNtFPWCgEZPUlfliohtvD+px82QhpmcHfOUXjHHwCS2lpjWD1ksup4/+TFjnqcjZQKnX++R5gFm/1UOlQWxwDQKSNT8BO899lf1T1Zl/efjpWhHVCtETIPzsnT/xB9Jj6PtxQcUcCAwEAAaOCAgMwggH/MB8GA1UdIwQYMBaAFGg34Ou2O/hfEYb7/mF7CIhl9E5CMB0GA1UdDgQWBBS5rxYNZunqlcry3f6y9vUTFv+A5jAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwgbUGA1UdHwSBrTCBqjBToFGgT4ZNaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwU6BRoE+GTWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRHNENvZGVTaWduaW5nUlNBNDA5NlNIQTM4NDIwMjFDQTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQQBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBlAYIKwYBBQUHAQEEgYcwgYQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBcBggrBgEFBQcwAoZQaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcnQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAgEAjOyPUNyDNp16g0FFhUeZ5bx29FXBNv3CyAjBkbLt5+ia3B63kWud52rUPbAGmqRJV998Aj8MlEz6+GYdGYXdJ6ynHamTAGkRokoCGjtpvJz+pNEupio1zFREhIrXEXz9FuasNBGlwR1y4iZRm7xzzbIV99q4eK8cGa6IU6R1AL1wEl4AU3XwJngJyplNv24Tprw7TYFxNlljEm3gAKXtjsjcpuL/pbmZlOcoG5/RV1GIIb9SZHRO8QEL/1OOVcoWPR40M3Wclk3+sHB7sQZkW3L7WYegirkfLdtrEqeZnxnAi1lqy7t03oS+iGrYBW9LbErIOGEWZPljFay7QPHQg786dEOOTCjL90m/Pq6v5uvv9qt1TexC3vbToEE46lttO/97HhxCGdemBU/1+2ns52fLDKMNepja68/hPsux/TefIskLyBmgYiB6XnVsUgTes0iz1Q/K+vlloFItBCFIekuny3Mc9G55X0fjN2YmhCS39kZdQ2v+2iwfXqWBqLsv3QzA1P/mLU+lnWgnXrLweIZkEqpSI6HsE+5zkCToZ37Yb6UBemj+2eVAIeyrErS9iyj2DQvSm9lXw3YgJx2lTr3oMoe5IggoImD/B+TuAU0O1f44eLXBrGAMdSGJTkSvgywMjnKTs8VTleH1KeMpjHsclY5kBlh5Vte8bDGAgI4=",
        "src_file_sha256": "03214d8b41186760f2cf299ba70a22695f4a28be0080551dc582d7a52ac2b96a",
        "src_file_path": "downloaded_files/isl_light/03214d8b41186760f2cf299ba70a22695f4a28be0080551dc582d7a52ac2b96a",
        "src_file_company": "XLAB d.o.o."
      }
    ]
  }
}