EchoTrail

Infocert Sign Desktop 3.1.5.685

by InfoCert S.p.A.installer signed by InfoCert S.p.A.Valid

Sources: observed in the EchoTrail lab on Windows 11 on October 27, 2026.

The install

Installer
latest
Installer type
squirrel
Installed through
a type-detected silent switch
Install directory
C:\Users\lab\AppData\Local\Infocert-Sign-Desktop
Launched
InfocertSignDesktop.exe
Windows
Windows 11
Date
October 27, 2026
Executables dropped
61

installer sha256 c25037f43c9974734d13dbde73716256c034597c55025926d52812f1a8340a73

The lab used Infocert Sign Desktop for 5 minutes, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to Infocert Sign Desktop's own windows.

Infocert Sign Desktop 3.1.5.685: First window
First window. A survey dialog in Italian asks whether to help improve products, with options to share opinion (opens browser) or 'Non mi interessa'.
Infocert Sign Desktop 3.1.5.685: First window
First window. Infocert Sign welcome screen offers sign-in (not allowed) or 'Continua senza accedere' link to proceed without an account.

What it dropped

Executables

  • infocertsigndesktop-setup.exesigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValidran during the lab session
    C:\Users\lab\.infocertsign\Installers\InfocertSignDesktop-Setup.exe
    sha256 b1af1808aa11754eed990b90c2ba9811095442aa18c488b018fb16e5eceb6b43
  • infocertsigndesktop.exesigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValidran during the lab session
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\InfocertSignDesktop.exe
    sha256 53a1e5aeca556c266b557200b258a8cc0fe134b1e343646c04f737741c9ab01b
  • dxcompiler.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\dxcompiler.dll
    sha256 f71edd94f5cee3ff2bb1412d1f9e0d3e945c5a620078f6bf2781c054405bcced
  • libglesv2.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\libGLESv2.dll
    sha256 d0e4fd0ebcf9b065044727aecc73069c2b07afee801b2a02ab0fdd6f0badedad
  • cybermw.dll
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\cybermw.dll
    sha256 ad77d3d1834052cfa33df7af51b10a930e9165700bbbcf59db36d1cfa80cd9bb
  • d3dcompiler_47.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\d3dcompiler_47.dll
    sha256 e65bcb23b41e3233062dd8755a99b1bdc88744d59a2d684c9aee4ca773dc8a8b
  • pdfimage.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\pdfImage.dll
    sha256 c7b5744128da79b5eed95f5f50040a77b1e505a56a6daa88845a81a57bf46824
  • dgsapi1.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\dgsapi1.dll
    sha256 5ef09e49fc974e610652a1cbc0ca8da7961ada55ef9761360318b4a80110161e
  • libcrypto-1_1-x64.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libcrypto-1_1-x64.dll
    sha256 7892448a3c6c80dc151860dfd3584a489daccc419b863778c68d1a52f8ca803c
  • ffmpeg.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\ffmpeg.dll
    sha256 339df20839c9184427472b19c4e6917c4a592ad816a4e05d8aa10bfec26f9aae
  • bit4xpki.dll
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\bit4xpki.dll
    sha256 8c96a04d122c98f73d482410a6f81fe133d2ef661710d8834075a4be84992441
  • update.exefile_missingran during the lab session
    C:\Users\lab\AppData\Local\SquirrelTemp\Update.exe
    sha256 76359cd4b0349a83337b941332ad042c90351c2bb0a4628307740324c97984cc
  • update.exeNotSignedran during the lab session
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\Update.exe
    sha256 79ead9961f7f3de3ad89a7ec58fab424dece26d973616010e68464da7a409903
  • libeay32.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libeay32.dll
    sha256 5e88c6b77ccd86f763e070f6c4cafbcecead276ca4358040ad9d2649764b871f
  • design64.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\deSign64.dll
    sha256 91737dde56dac68f5a6775b5cf2d150e97640d9af31c3145963073c3a82825ff
  • dxil.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\dxil.dll
    sha256 64bfb127f7efde1f24413f5bdd1a64c1573ee5ad622dd230d9c5fa54a28b1c5e
  • libxml2.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libxml2.dll
    sha256 e9faf176b6207c2c035f7753efea53c6b6bb3ac8470fc7d9bb80763b7ebaad33
  • etpdfsign2.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\etpdfsign2.dll
    sha256 112831c19065e5aeabc88283c50227358367db558540470a5856d3179f1598e3
  • libiconv.dll
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libiconv.dll
    sha256 779be69626f49b6ac864ac93d8cb1895b8c87828e73fe6ea18a55c1cd2a43ad7
  • msvcr120.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\msvcr120.dll
    sha256 1f56c5205d162193723500fb65a39f338d632a68901b16b55ea9997341ffcffc
  • icpkcs11.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\icpkcs11.dll
    sha256 c1c81913320282b2ffba8078e16a7f61c4521c5156e9011fa71ef83912cbeed1
  • xmlsign64.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\xmlSign64.dll
    sha256 b3f7b68efd34f8ee3f3058a37f45b5690de58f673e2c0a2c4efb3f143dd42252
  • cacrlcache64.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\caCRLCache64.dll
    sha256 2907ed8f982a2daae0f1c6ff2b53296918395a7432cab7bdc779e54cf5090a54
  • libssl-1_1-x64.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libssl-1_1-x64.dll
    sha256 df08680bd5cf92384b22e00c4128d05e75863e322839da4d88f829530455584e
  • stpkcs11.dll
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\stPKCS11.dll
    sha256 805cea67e7f35b3f54ab72f64fc0690d61098481c7a947974512d23340fae6b4
  • libcurl.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libcurl.dll
    sha256 1a271144a12efdbed883967cfff4e4582cc0136ac2f50c52c7cc7253f7021326
  • msvcp140.dllsigned by CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\msvcp140.dll
    sha256 ade127c6aae2caa0144589d1477f3c4a91d8f9d9f768f63b8b3d0fdd81cc73f1
  • libegl.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\libEGL.dll
    sha256 877ca8ffd511d7f8132c01acb161c84c419eeaa8d7fd82bea8896c357d870091
  • bit4extplg.dll
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\bit4extplg.dll
    sha256 086ac49accc702f594c6907f6e5bbd5446f9d81abfe3c9efa053b99c93e21b63
  • stcnsutil.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\stCNSUtil.dll
    sha256 fc5e9a2d6982672e8ed79a2dc89b0817ea49d74560c6096b288b802dd84d5580
  • et_netws1.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\et_netws1.dll
    sha256 3dbd9ff763bd65225809858ff29155935694569622c5f39af64159dbb4888540
  • infocertsigndesktop.exeNotSignedran during the lab session
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\InfocertSignDesktop.exe
    sha256 0d73598ce79ef2b4507c804db324826348aa1d33a434d375fb4fa4a9461a4721
  • libxslt.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libxslt.dll
    sha256 b16162fbb6d3b055f37c1d9f613530c75b739e12fcfc9fce52021985145d550f
  • etrenew1.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\etRenew1.dll
    sha256 82984b37e7f68924a014c44304ccc552c4b75021d11f081c49920e52471685a0
  • msvcp140_2.dll
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\msvcp140_2.dll
    sha256 3220b6b96c54b33bf5ae48fabf03d07be19f12367ee779ad4e7bde49dcb3bb2e
  • hidapi.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\hidapi.dll
    sha256 b17134a39c68db2c47f3d7989b85914b851549f2a8152d540bffe84986f3461f
  • libusb-1.0.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\libusb-1.0.dll
    sha256 336d46485f02559a4e8e0248b791610b441785ac5211918b9869bc404f237120
  • min_etcrypt1.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\min_etCrypt1.dll
    sha256 97f84f99d65a93e473f4e9afb8a2f15fe4f7deae75e973033b1d6f7695a9eab7
  • et_crypt1.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\et_crypt1.dll
    sha256 604d132b22ffd1827753a6e11377a66e8eedaae9fb542ded2a7c71f18223ce49
  • et_remsign1.dllsigned by E=infocert@legalmail.it, CN=InfoCert S.p.A., OU=GOSIGNDESKTOP, O=InfoCert S.p.A., STREET="Piazza Sallustio, 9", L=Roma, S=Roma, C=IT, OID.1.3.6.1.4.1.311.60.2.1.3=IT, SERIALNUMBER=07945211006, OID.2.5.4.15=Private OrganizationValid
    C:\Users\lab\AppData\Local\Infocert-Sign-Desktop\app-3.1.5\resources\app.asar.unpacked\node_modules\@ice\dike-core-win64\native\et_remsign1.dll
    sha256 6ef0707d17267978e74176eda045bd9464b8e6561d2e3d6d033599428fdea15b

After the reboot

Started on its own

  • update.exe started by infocertsigndesktop.exe
  • infocertsigndesktop.exe started by update.exe

Autostart entries

  • run key: it.infocert.desktop.gosignC:\Users\lab\AppData\Local\Infocert-Sign-Desktop\Update.exe --processStart "InfocertSignDesktop.exe" --process-start-args "--start-tray"

What it talked to

Destinations

  • 147.67.210.30:443asked by infocertsigndesktop.exe11 connections
  • 147.67.34.30:443asked by infocertsigndesktop.exe11 connections
  • 18.238.176.7:443asked by infocertsigndesktop.exe8 connections
  • 18.238.176.72:443asked by infocertsigndesktop.exe3 connections
  • 192.178.209.94:443asked by infocertsigndesktop.exe3 connections
  • 46.105.200.221:443asked by update.exe3 connections
  • 108.177.121.100:443asked by infocertsigndesktop.exe2 connections
  • 108.177.121.139:443asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50074asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50077asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50080asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50083asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51391asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51394asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51397asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51400asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51403asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51406asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51409asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51412asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51415asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51418asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:51421asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:52805asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50071asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50050asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50053asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50056asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50059asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50062asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50065asked by infocertsigndesktop.exe2 connections
  • 127.0.0.1:50068asked by infocertsigndesktop.exe2 connections
  • 3.169.202.72:443asked by infocertsigndesktop.exe2 connections
  • 34.253.163.93:443asked by infocertsigndesktop.exe2 connections
  • 9.235.156.106:443asked by infocertsigndesktop.exe2 connections
  • 104.18.42.227:443asked by infocertsigndesktop.exe
  • 172.64.145.29:443asked by infocertsigndesktop.exe
  • 18.238.176.7:443asked by infocertsigndesktop.exe
  • 23.45.123.197:443asked by infocertsigndesktop.exe
  • 23.55.236.138:443asked by infocertsigndesktop.exe
  • 3.169.202.72:443asked by infocertsigndesktop.exe
  • 64.233.179.95:443asked by infocertsigndesktop.exe

DNS

  • infocertsignupdate.infocert.itasked by update.exe
  • ec.europa.euasked by infocertsigndesktop.exe
  • eidas.agid.gov.itasked by infocertsigndesktop.exe