Microsoft[.]ReportViewer[.]WebForms[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.ReportViewer.WebForms.dll
Size 1.6MB
Sample260908-ppmw9afe98
SHA256 735c6ff0eefa0035a66ef4d8743ff25ebfdf18ca8b9484db9693a0eb0feac9ea
MD5 b0b3e1fc5770809b946aee2e68912f1b
SHA1 1d3197aeb5254f502907d5253102ba78064f3cb3
SHA512 2d6d3941879b3f252fe05162084affae77ba82d56022688892250350e98fa8d159c92d0e04e9583cfafb37177e51c2aefcf4c0427b81ad5086a29e7c36fe8b4c
SSDEEP 49152:VpcPyuHtkwxrMoJ0OrMQfj0zqcooIFZnhyzQYtG4JJiqmd9NJf2srZ0R4TXW7JoN:8PBv/
TLSH
T126757D2033AD162AD1BF57B6AA7A4540F37995031A81CB1D390C93DC2FF5B849168FFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Microsoft.ReportViewer.WebForms.dll

.dll 1.6MB

Microsoft.ReportViewer.WebForms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 735c6ff0eefa0035a66ef4d8743ff25ebfdf18ca8b9484db9693a0eb0feac9ea
MD5 b0b3e1fc5770809b946aee2e68912f1b
SHA1 1d3197aeb5254f502907d5253102ba78064f3cb3
SHA512 2d6d3941879b3f252fe05162084affae77ba82d56022688892250350e98fa8d159c92d0e04e9583cfafb37177e51c2aefcf4c0427b81ad5086a29e7c36fe8b4c
SSDEEP 49152:VpcPyuHtkwxrMoJ0OrMQfj0zqcooIFZnhyzQYtG4JJiqmd9NJf2srZ0R4TXW7JoN:8PBv/
TLSH
T126757D2033AD162AD1BF57B6AA7A4540F37995031A81CB1D390C93DC2FF5B849168FFA
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

40:25:2b:2d:9c:f8:ff:68:b5:9b:b0:1e:81:b8:5b:b8:93:07:f2:2e:2d:97:a2:81:71:bb:86:3b:cb:6c:4f:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 6, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

4f:67:80:52:68:14:85:af:3a:1d:87:d6:e5:02:bf:d1:dc:f5:22:fd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 6, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:00:5a:ed:2f:f4:e4:20:99:3f:3a:00:00:00:00:00:5a

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 23, 2014 - Aug 23, 2015

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 22, 2014 - Jul 22, 2015

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 1, 2014 - Jan 1, 2016

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:00:4e:f3:66:b1:29:13:9a:11:13:00:00:00:00:00:4e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 23, 2014 - Aug 23, 2015

Minor OS version

Major OS version

Entry point

1684814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Microsoft.ReportViewer.WebForms.pdb

Microsoft.ReportViewer.WebForms.dll

PE Signature issue

mscoree

dotnet