home

npCSuser.dll

CSuser

Rostelecom

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘nvisiongroup.ru/CSuser’.
Publisher:
Rostelecom  (signed and verified)

Product:
CSuser

Description:
User version of plugin for Goverment service portal

Version:
1.0.14.04

MD5:
e7b74117fb30bed5403e5f9903d1ae63

SHA-1:
86baf4c96af0e29d5611e798b9679de5896fd30f

SHA-256:
5ba1ecdd8dc324b87f1bc46a863cdba99d16b109b85d543a0e709c2c03872592

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:03:37 PM UTC  (a few moments ago)

File size:
4.5 MB (4,683,296 bytes)

Product version:
1.0.14.04

Copyright:
Copyright 2011 Rostelecom

Original file name:
npCSuser.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\roaming\nvisiongroup\csuser\npcsuser.dll

Digital Signature
Signed by:
Rostelecom

Authority:
Thawte, Inc.

Valid from:
4/12/2012 4:00:00 AM

Valid to:
4/13/2013 3:59:59 AM

Subject:
CN=Rostelecom, O=Rostelecom, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
296C9E829A8397226B75358B3A7A194B

Registration
CLSID:
{92C42E5C-FADC-55DF-B5A6-B7F9953318E2}

ProgID:
NVisionGroup.CSuser.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
11/7/2012 2:02:58 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:CJFT8Ht5Q61NfuAjmRKW5M1LvXrrCmmSohwhrnp4ens5rqEGRU3YEb44OuuhyvXy:QFTOQ61NhiD0hrpkrqEGesII8S3V

Entry address:
0x1BD635

Entry point:
E9, 96, A5, 26, 00, E9, 61, 9C, 0A, 00, E9, 4C, F3, 20, 00, E9, 37, 2D, 15, 00, E9, 82, CE, 23, 00, E9, 7D, 21, 14, 00, E9, 58, 8D, 02, 00, E9, 23, 2C, 27, 00, E9, EE, 42, 1C, 00, E9, 79, 80, 30, 00, E9, 04, 19, 30, 00, E9, FF, D4, 10, 00, E9, 7A, D0, 10, 00, E9, 45, F0, 06, 00, E9, E0, 22, 26, 00, E9, 2B, 2B, 0D, 00, E9, 86, E8, 32, 00, E9, 91, 1F, 28, 00, E9, AC, 63, 16, 00, E9, 37, 1C, 06, 00, E9, 76, 9C, 2C, 00, E9, 3D, DD, 1E, 00, E9, F8, B0, 19, 00, E9, 23, 27, 2E, 00, E9, 8E, F5, 34, 00, E9, 09, 92...
 
[+]

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
3.6 MB (3,787,776 bytes)

Mozilla Plugin
Name:
nvisiongroup.ru/CSuser


Scan npCSuser.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.