home

npCSuser.dll

CSuser

Rostelecom

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘nvisiongroup.ru/CSuser’.
Publisher:
Rostelecom  (signed and verified)

Product:
CSuser

Description:
User version of plagin for Goverment service portal

Version:
1.0.13.01

MD5:
cef505d5dd4f4cc71b058ca6f89261fb

SHA-1:
c9c51a47dbe1cf06b50256f8e14b3388fb2a7ceb

SHA-256:
a72703bf20108436030fbe3028d665f9e8c0fd1675d46deaf50cfa105e30a526

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:18:26 PM UTC  (today)

File size:
4.5 MB (4,680,736 bytes)

Product version:
1.0.13.01

Copyright:
Copyright 2011 Rostelecom

Original file name:
npCSuser.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\roaming\nvisiongroup\csuser\npcsuser.dll

Digital Signature
Signed by:
Rostelecom

Authority:
Thawte, Inc.

Valid from:
4/12/2012 4:00:00 AM

Valid to:
4/13/2013 3:59:59 AM

Subject:
CN=Rostelecom, O=Rostelecom, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
296C9E829A8397226B75358B3A7A194B

File PE Metadata
Compilation timestamp:
10/4/2012 3:45:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:BDuaY41MLDQLBte4ybl3eIu/nD/kcmMiNJUzGNBDf7unuKLqBd+6/+HBK6XP30ry:Rua3MLDQL1U1EG7HuL+5z6urJO

Entry address:
0x1BD635

Entry point:
E9, B6, A4, 26, 00, E9, 61, 9C, 0A, 00, E9, 1C, F3, 20, 00, E9, 07, 2D, 15, 00, E9, 52, CE, 23, 00, E9, 4D, 21, 14, 00, E9, 58, 8D, 02, 00, E9, 43, 2B, 27, 00, E9, BE, 42, 1C, 00, E9, 49, 80, 30, 00, E9, D4, 18, 30, 00, E9, CF, D4, 10, 00, E9, 4A, D0, 10, 00, E9, 45, F0, 06, 00, E9, B0, 22, 26, 00, E9, 2B, 2B, 0D, 00, E9, 56, E8, 32, 00, E9, 61, 1F, 28, 00, E9, 7C, 63, 16, 00, E9, 37, 1C, 06, 00, E9, 46, 9C, 2C, 00, E9, 0D, DD, 1E, 00, E9, C8, B0, 19, 00, E9, F3, 26, 2E, 00, E9, 5E, F5, 34, 00, E9, 09, 92...
 
[+]

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
3.6 MB (3,787,264 bytes)

Mozilla Plugin
Name:
nvisiongroup.ru/CSuser


Scan npCSuser.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.