ifcplugin.msi

Rostelecom

The program is a setup application that uses the Windows MSI installer. The file has been seen being downloaded from esia.gosuslugi.ru and multiple other hosts.
Publisher:
Rostelecom  (signed and verified)

MD5:
a651c8b24dd12edb574870ea9b5cdc97

SHA-1:
6ef084b79dd86952c1b729a6ec948f055270ea64

SHA-256:
c64f5851c9f031c300e0ec8a57f8192d6f89f5575a38899a51a396d823f45ca6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/23/2018 4:43:39 AM UTC  (today)

File size:
2.6 MB (2,686,976 bytes)

File type:
Windows Installer (used for software installtaion and updates)

Installer:
Windows MSI

Common path:
C:\users\{user}\downloads\ifcplugin.msi

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
3/19/2013 4:00:00 AM

Valid to:
4/13/2014 3:59:59 AM

Subject:
CN=Rostelecom, O=Rostelecom, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2759C9A798F2A4F1BFBF52049A0F3423

The file ifcplugin.msi has been seen being distributed by the following 3 URLs.

Manufacturer: Rostelecom
Product code: {3B21266F-408D-4A0D-8B07-D580E43B8940}
Language: 1049
Product name: Плагин пользователя систем электронного правительства (версия 2.0.5)
Product version: 2.0.5.7

Installed Files:
 ifc.dll
 capi_engine.dll
 pkcs11_engine.dll
 engine_logger.dll
 jcPKCS11.dll
 jcPKCS11x.dll
 rtPKCS11ECP.dll
 libifc32.dll
 sslifc32.dll
 libconfig.dll
 ifc.cfg
 npIFCPlugin.dll

Scan ifcplugin.msi - Powered by Reason Core Security