Microsoft[.]ReportViewer[.]DataVisualization[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.ReportViewer.DataVisualization.dll
Size 5.2MB
Sample260908-xsa1vsxcpg
SHA256 df63666f01516c56c600128ef2b50d3695dffdf598e1367e7def9e9d6a123a92
MD5 b6035773aa610296b03a25684b2d155f
SHA1 2f7d4bd738cae086a00f1d5ec88117d701c9adca
SHA512 255b2c01d21f7c614b18c0d93592aaa797e2c5e967c77abb26fc40e7c587b92377eb8e2032bdf5ebfb33fdcfa531fdf11b97e64b8e205a6cf462ea99602a7a21
SSDEEP 49152:v1pOw+X1ySjtNy6uYenL+k7KosZzMEAu764N5Z4pWDD99iC62EvAnCQ:v1pOw+Xvk73sZzMa
TLSH
T1E7460800F7EA623DF5EF8B71ED31209C45B6BE1A7E43C62F2894A46E28716444D6137B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Microsoft.ReportViewer.DataVisualization.dll

.dll 5.2MB

Microsoft.ReportViewer.DataVisualization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 df63666f01516c56c600128ef2b50d3695dffdf598e1367e7def9e9d6a123a92
MD5 b6035773aa610296b03a25684b2d155f
SHA1 2f7d4bd738cae086a00f1d5ec88117d701c9adca
SHA512 255b2c01d21f7c614b18c0d93592aaa797e2c5e967c77abb26fc40e7c587b92377eb8e2032bdf5ebfb33fdcfa531fdf11b97e64b8e205a6cf462ea99602a7a21
SSDEEP 49152:v1pOw+X1ySjtNy6uYenL+k7KosZzMEAu764N5Z4pWDD99iC62EvAnCQ:v1pOw+Xvk73sZzMa
TLSH
T1E7460800F7EA623DF5EF8B71ED31209C45B6BE1A7E43C62F2894A46E28716444D6137B
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

64:95:ef:b6:3a:bf:53:9b:55:df:ae:50:ca:3e:05:41:62:cc:12:8f:47:a2:9b:1a:79:81:60:3c:b0:73:46:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 6, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

ed:e6:e4:51:8c:69:17:91:21:8f:f7:12:36:9c:5b:d5:50:ad:62:d8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 6, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:00:59:d6:73:cd:51:8e:f0:22:c5:00:00:00:00:00:59

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 23, 2014 - Aug 23, 2015

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 22, 2014 - Jul 22, 2015

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 1, 2014 - Jan 1, 2016

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:00:4c:38:5d:a8:a3:93:b5:cd:9a:00:00:00:00:00:4c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 23, 2014 - Aug 23, 2015

Minor OS version

Major OS version

Entry point

5405358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Microsoft.ReportViewer.DataVisualization.pdb

Microsoft.ReportViewer.DataVisualization.dll

PE Signature issue

mscoree

dotnet