home

Rostelecom

Publisher Information

Rostelecom is a software publisher located in Moscow, Russia*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
4/12/2012 3:00:00 AM

Valid to:
4/13/2013 2:59:59 AM

Subject:
CN=Rostelecom, O=Rostelecom, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
296c9e829a8397226b75358b3a7a194b

Status:
No known positive detections

Scan engine
Details
Detections

SUPERAntiSpyware
Trojan.Agent/Gen-Graftor
100.00%

0 / 68
npCSuser.dll (CSuser by Rostelecom)  (e7b74117fb30bed5403e5f9903d1ae63)

0 / 68
crypto.dll (Rostelecom Crypto Module by Rostelecom Company)  (70106bb1abf75aa1b424db0bcecf6053)

0 / 68
npcryupd.dll (Rostelecom Crypto Plugin Updater by Rostelecom Company)  (b03347b74a62c5757b9aa81a13d06369)

0 / 68
npcryco.dll (Rostelecom Crypto Plugin by Rostelecom Company)  (bff072de8d54245b8a93c0911106f675)

0 / 68
npcryco_esep.exe  (2c86b8013f83059c6697c9c018da59f6)

0 / 68
npCSuser.dll (CSuser by Rostelecom)  (775173a02c9dfce49560cb3299a0ca2a)

0 / 68
csuserplugin.exe  (fe7f9455213ef4fc2a10e2c44679be16)

0 / 68
npCSuser.dll (CSuser by Rostelecom)  (ed9b35aa412cfea900cc5ca6803eba80)

1 / 68
csuserplugin.exe  (cbbe81181e9caed68a2e7684a8e270cc)

0 / 68
npCSuser.dll (CSuser by Rostelecom)  (cef505d5dd4f4cc71b058ca6f89261fb)

Downloads URLs for files signed by Rostelecom.

0 / 68
https://ep.gosuslugi.ru/.../npcryco_esep.exe  (2c86b8013f83059c6697c9c018da59f6)

0 / 68
https://esia.gosuslugi.ru/sia-web/htdocs/.../CSuserPlugin.exe  (fe7f9455213ef4fc2a10e2c44679be16)

1 / 68
https://esia.gosuslugi.ru/sia-web/htdocs/.../CSuserPlugin.exe  (cbbe81181e9caed68a2e7684a8e270cc)

The following websites host and distribute files published by Rostelecom.

ep.gosuslugi.ru

esia.gosuslugi.ru

The certificates below are also signed by Rostelecom.

104B  (Sep 28, 2015 to Oct 01, 2016)

2759C9A798F2A4F1BFBF52049A0F3423  (Mar 19, 2013 to Apr 13, 2014)

3B5013EB90725082EC7755EA3FC36E90  (Mar 29, 2011 to Mar 29, 2012)

* Note, the details and description above are based on the code signing digital signature issued to Rostelecom by Thawte, Inc. on April 12, 2012 with the serial number '296c9e829a8397226b75358b3a7a194b'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.