LOLRMMTHE REMOTE ACCESS CATALOG
GitHub
Catalog / Pocket Controller (Soti Xsight)
RMM

Pocket Controller (Soti Xsight)

Pocket Controller (Soti Xsight) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Windows

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

pocketcontroller.exe
wysebrowser.exe
XSightService.exe

Code signing

signer name
SOTI Inc.
certificate thumbprint
N/A
tbs sha256
Not recorded
tbs sha1
326E0C36EE3DF3DE0FB7183A30ED6682254AB2E5
signer name
SOTI Inc.
certificate thumbprint
N/A
tbs sha256
Not recorded
tbs sha1
Not recorded
tbs sha384
4265D6A8BFDDD5383B9A45AB04EF925DCCA723FE04AAF792B74A83CD6E817CEF125F1A388E855837D7E1DBE33733A820
signer name
SOTI Inc.
issuer
CN=VeriSign Class 3 Code Signing 2010 CA
certificate thumbprint
7A3E4DECEE064889D6F6EC54C8DBAEE092ACB26E
tbs sha256
AFBA691FEB4E4205B37C8929E5D10C40493F9C32D8C4FEF35C02C942BE6AE2AC
tbs sha1
326E0C36EE3DF3DE0FB7183A30ED6682254AB2E5
valid from
2011-02-24T00:00:00+00:00
valid to
2012-02-24T23:59:59+00:00
signer name
SOTI Inc.
issuer
CN=Sectigo Public Code Signing CA R36
certificate thumbprint
EBABD13769964EA7279533174328F28BB711CB03
tbs sha256
20442C9DC0B4BB786D51EC3B9246AC870FB78FA32759CDC539CF05AA63FC6911
tbs sha1
FCFE638120C602F83FE960E11B80ED837461F175
valid from
2024-07-23T00:00:00+00:00
valid to
2026-07-23T23:59:59+00:00
signer name
Wyse Technology Inc
issuer
CN=VeriSign Class 3 Code Signing 2010 CA
certificate thumbprint
537AE8B3453C27FE7C5DD562ECF90CA76551E95C
tbs sha256
64AC7AE69C452B5F6ACF71EA0485E36D88A868DD187C196AA2D140EA3124A0F6
tbs sha1
5249EAF595CF905C688A7CA49CD9B49E7DD9E4E1
valid from
2012-09-17T00:00:00+00:00
valid to
2013-09-17T23:59:59+00:00

search names

pcpro602setup.exe
pocket controller
pocket controller - professional
pocket controller professional
pocketcontroller.exe
wysebrowser.exe
xsightservice.core.dll
xsightservice.dll
xsightservice.exe
xsightservice.linux.dll
xsightservice.windows.dll

company names

signer names

SOTI Inc.
Wyse Technology Inc

File hashes

authenticode
  • file name
    Pocket Controller - Professional
    sha256
    C8C95F39CBD230B362337428F9D8FF5FD6B0FA9AFC0F9BBA590DC18F33258998
    sha1
    5AB1D8EA968152256B067C3D8697272B9CEC9F56
  • file name
    PocketController.exe
    sha256
    B8E99BFAF205C97AF579AD6B73C05FDC1EA08B7A56C51C6964A7697CAD064400
    sha1
    653831627348E40F9E5AF084D047560621896179
  • file name
    XSightService.dll
    sha256
    36ABF6CBDB0CC0811AB9DCA56B5E7A28FB67CFCF9995EC961905D8EC2D62EE8A
    sha1
    85580901DB83608717DF082D3ADB93438641799B
  • file name
    Pocket Controller Professional
    sha256
    96E0074337F819EBC5DD8321087E196577F6114A1071CF53C5D112BB8714EC6C
    sha1
    44231844BA9E0DBD13286002D781318DEE8AB1E5
  • file name
    Pocket Controller
    sha256
    C7FDC274CDDC5B15F1F3E711B0357FE4BA0B44671172E245C4EDFDECF1C740A9
    sha1
    7928FAF909D49128E98E96880EE7D656679A9F00
  • file name
    XSightService.Core.dll
    sha256
    D5047115F94567CE14743272131AC9AD7C604680A3B9FD2182516E8B06B065DF
    sha1
    D87494923B5114F4E1797EB9F0FE953627565E2C
  • file name
    XSightService.Windows.dll
    sha256
    31B3EF905B727EDAD232595471DE256587BBFE57D4608A09C8DEBDDF21BDE890
    sha1
    D979A4ABBAC552D64E32BD36737AC8E6798A87F3
  • file name
    PCPro602Setup.exe
    sha256
    81638DDB4550AEB1161B2D24D30E41A505E651DC25A55E4A62F0AC32A510CCFA
    sha1
    1334B034565DE833410FD50DC14E13FE2215F576
  • file name
    Pocket Controller - Professional
    sha256
    ECF236477A707C45292A049EF3FBB6BE4B25C691132A6AB9CE0AA95F043ADB52
    sha1
    65970C526943AB2CBD0BB01DA31C1C8ACAC77ADC
  • file name
    XSightService.Linux.dll
    sha256
    4747545FC0506731BB7F7A2154A69CDE4EE35C2FFEA3407A91EEA6FC687728AD
    sha1
    8C51B1DA012A9E23D6AF3AF86EEFD6F4A752A692
  • file name
    PocketController.exe
    sha256
    A121581AD6F5C8DC176AF0FB1B9FF69A12786D305902DCCA29B7F765767E0785
    sha1
    D128E371B03E5E7C0415D537A5C6CF659D15030C
page
  • file name
    Pocket Controller - Professional
    sha256
    9C499645FB1A3E22BD638F432E0C3263C09A9544C81F2EB21EA13894C9084E4E
    sha1
    81D649FA0EBF918EA1B73DC45C1115CFFB4BD70B
  • file name
    PocketController.exe
    sha256
    D4784E9C2890D87B5796B84888BAE6732FCF974E8681B3FF31C09D651CD2BBC5
    sha1
    EEA19CFDD2200CF1ECBF73FCC9BFEF7C1DB388E3
  • file name
    XSightService.dll
    sha256
    9C29FE63C81DD70D2C7978C92634336F11F96806877726108F966E3C8B6367DC
    sha1
    D7BFE918146B3626C3474EEC60BD9EAD8909167D
  • file name
    Pocket Controller Professional
    sha256
    19676D30C7AF609F69FDB0071E7707F68F5CF21102F483FADA1785C721ABFF9E
    sha1
    D6BD6EF154F2A7E065415D2B61FCD1EC15D87BFF
  • file name
    Pocket Controller
    sha256
    C7C6FBDD502FF945F1CD104F0F8F4280769CA532095850E88BC5A523BE6E760E
    sha1
    CF1AB8172D8909774C70CB25C96BE78AB8682A02
  • file name
    XSightService.Core.dll
    sha256
    0175EF28328517DC999022D2A1D97B6F7D4B9B40A0502B1A97527A638E5A3F88
    sha1
    A3C8A160811DBD929958F0400426F838340A3FB7
  • file name
    XSightService.Windows.dll
    sha256
    193D06828C6E920E7EDD95170B77E0BC696972C6BDD839C5C51E5568188D1F0F
    sha1
    8EBA4A7E030690F77CAA3891801673D76B541CBF
  • file name
    PCPro602Setup.exe
    sha256
    F5285668D1B167242BFD832FDACF0CF461FEC07AE68F90D2AB521B00A98CD1F5
    sha1
    D5E51B1B4CD54F75B5E18ADD5D35165710CC79A8
  • file name
    Pocket Controller - Professional
    sha256
    E9ECEC8A3C424D5890F1AF729A7AEC67F9A395C09A2AED5295FD646C8CCA286B
    sha1
    E116F6FF705BF8151E03955A327E4B7EF7817CC8
  • file name
    XSightService.Linux.dll
    sha256
    E865EC62D5AABFC1F3D3BB2E20F62163CBA74CBE2C2C0661F84B8DB45D4E85A2
    sha1
    C1E1E2EEF8DB7A6FC26CB1A870D230A863655DA8
  • file name
    PocketController.exe
    sha256
    A1C74233EF3BE253A8D9081957CA403DE007374CD217DF6F1446F2DDCE61492D
    sha1
    D48515A5A75C696F834C39EFB452E4BFB8A2D122

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • soti.net
  • *.soti.net
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller__soti_xsight__network_sigma.yml
Description
Detects potential network activity of Pocket Controller (Soti Xsight) RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/pocket_controller__soti_xsight__processes_sigma.yml
Description
Detects potential processes activity of Pocket Controller (Soti Xsight) RMM tool

References