home

nprutokenplugin.dll

Rutoken Plugin

ZAO AKTIV-SOFT

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘Rutoken Plugin’.
Publisher:
Aktiv Co.  (signed by ZAO AKTIV-SOFT)

Product:
Rutoken Plugin

Version:
2.8.4.0

MD5:
340e59e2b50eaa8e93d539b0ce4689f0

SHA-1:
73fb38751c302afebe43d43e240894f37adbeb82

SHA-256:
42302b827cf0e88f37c42f1d348250fc2eceb1b52f19a54f274bbbf2e2529baa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 11:26:34 PM UTC  (a few moments ago)

File size:
3.8 MB (3,993,792 bytes)

Product version:
2.8.4.0

Copyright:
Copyright 2016 Aktiv Co.

Original file name:
npRutokenPlugin

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\roaming\aktiv co\cryptoplugin\2.8.4.0\nprutokenplugin.dll

Digital Signature
Signed by:
ZAO AKTIV-SOFT

Authority:
GlobalSign nv-sa

Valid from:
11/6/2015 4:13:20 PM

Valid to:
11/6/2016 4:13:20 PM

Subject:
E=hotline@rutoken.ru, CN=ZAO AKTIV-SOFT, OU=Software developing, O=ZAO AKTIV-SOFT, L=Moscow, S=Moscow, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E0509E0C79302C303E27B43B78DD0D13

File PE Metadata
Compilation timestamp:
5/13/2016 5:33:40 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
14.0

CTPH (ssdeep):
49152:7VRKSn0hqtsSNbacQrUZ9W+y18NNWzPnsF7lQ7MtUMjINrUCm4UlnDNWIv53MquC:pd0hvoZQAtHjIdUCm4MnDNNvw76rIi

Entry address:
0x16FFC4

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 53, 0A, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, B1, FE, FF, FF, 83, C4, 0C, 5D, C2, 0C, 00, 55, 8B, EC, 5D, E9, 65, F5, FF, FF, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.7 MB (2,818,048 bytes)

Mozilla Plugin
Name:
Rutoken Plugin


Scan nprutokenplugin.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.