home

npCSuser.dll

CSuser

Rostelecom

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘nvisiongroup.ru/CSuser’.
Publisher:
Rostelecom  (signed and verified)

Product:
CSuser

Description:
Плагин пользователя портала гос.услуг

Version:
1.0.8.62

MD5:
546448408e5e0870dee730841612de10

SHA-1:
ab06b54e9b06ba66d12bd2b5016c36b1fef4238e

SHA-256:
c39f5ee1964ec8328267925c8b50b4b32222e8d4a5de2ad7b12e5551eb33dd3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:33:40 PM UTC  (today)

File size:
3.8 MB (3,986,464 bytes)

Product version:
1.0.8.62

Copyright:
Copyright 2011 Rostelecom

Original file name:
npCSuser.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\roaming\nvisiongroup\csuser\npcsuser.dll

Digital Signature
Signed by:
Rostelecom

Authority:
Thawte, Inc.

Valid from:
3/29/2011 7:00:00 AM

Valid to:
3/29/2012 6:59:59 AM

Subject:
CN=Rostelecom, O=Rostelecom, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3B5013EB90725082EC7755EA3FC36E90

Registration
CLSID:
{92C42E5C-FADC-55DF-B5A6-B7F9953318E2}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
11/15/2011 10:20:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
49152:MLaYnwF3VGVh69vfggQsNorc57Zv6THC4NAqtSDj8oSs/9+owK20Q1PmXBm:MLe13K4oVi4NG8mXE

Entry address:
0x17B2F2

Entry point:
E9, 59, C8, 20, 00, E9, 34, 90, 04, 00, E9, 4F, 60, 0F, 00, E9, 9A, 63, 02, 00, E9, 05, D4, 12, 00, E9, C0, FD, 20, 00, E9, EB, 7B, 17, 00, E9, D6, 3A, 2B, 00, E9, C1, 6A, 1F, 00, E9, 6C, E2, 1C, 00, E9, D7, 3C, 2B, 00, E9, 12, 31, 28, 00, E9, 0D, 5C, 1F, 00, E9, A8, AA, 2C, 00, E9, 43, 82, 28, 00, E9, 6E, 24, 0C, 00, E9, 09, 24, 0C, 00, E9, E4, 18, 05, 00, E9, EF, FD, 1F, 00, E9, 2A, 71, 1E, 00, E9, 15, 00, 1D, 00, E9, 80, F9, 1E, 00, E9, FB, BF, 2A, 00, E9, 86, EB, 21, 00, E9, 51, 3C, 0C, 00, E9, 1C, 7C...
 
[+]

Code size:
3.1 MB (3,235,328 bytes)

Google Chrome Plugin
Name:
npCSuser.dll


Mozilla Plugin
Name:
nvisiongroup.ru/CSuser


Scan npCSuser.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.